Warning: Permanently added '[localhost]:54747' (ECDSA) to the list of known hosts. 2022/09/29 03:55:39 fuzzer started 2022/09/29 03:55:40 dialing manager at localhost:45751 syzkaller login: [ 45.816646] cgroup: Unknown subsys name 'net' [ 45.910222] cgroup: Unknown subsys name 'rlimit' 2022/09/29 03:55:53 syscalls: 2215 2022/09/29 03:55:53 code coverage: enabled 2022/09/29 03:55:53 comparison tracing: enabled 2022/09/29 03:55:53 extra coverage: enabled 2022/09/29 03:55:53 setuid sandbox: enabled 2022/09/29 03:55:53 namespace sandbox: enabled 2022/09/29 03:55:53 Android sandbox: enabled 2022/09/29 03:55:53 fault injection: enabled 2022/09/29 03:55:53 leak checking: enabled 2022/09/29 03:55:53 net packet injection: enabled 2022/09/29 03:55:53 net device setup: enabled 2022/09/29 03:55:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/29 03:55:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/29 03:55:53 USB emulation: enabled 2022/09/29 03:55:53 hci packet injection: enabled 2022/09/29 03:55:53 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220928) 2022/09/29 03:55:53 802.15.4 emulation: enabled 2022/09/29 03:55:53 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/29 03:55:53 fetching corpus: 50, signal 32301/35693 (executing program) 2022/09/29 03:55:53 fetching corpus: 100, signal 39714/44554 (executing program) 2022/09/29 03:55:54 fetching corpus: 150, signal 48235/54321 (executing program) 2022/09/29 03:55:54 fetching corpus: 200, signal 54488/61738 (executing program) 2022/09/29 03:55:54 fetching corpus: 250, signal 57930/66400 (executing program) 2022/09/29 03:55:54 fetching corpus: 300, signal 64978/74435 (executing program) 2022/09/29 03:55:54 fetching corpus: 350, signal 72098/82323 (executing program) 2022/09/29 03:55:54 fetching corpus: 400, signal 74538/85821 (executing program) 2022/09/29 03:55:54 fetching corpus: 450, signal 79281/91355 (executing program) 2022/09/29 03:55:55 fetching corpus: 500, signal 86064/98613 (executing program) 2022/09/29 03:55:55 fetching corpus: 550, signal 89045/102393 (executing program) 2022/09/29 03:55:55 fetching corpus: 600, signal 92298/106324 (executing program) 2022/09/29 03:55:55 fetching corpus: 650, signal 96400/110907 (executing program) 2022/09/29 03:55:55 fetching corpus: 700, signal 97995/113292 (executing program) 2022/09/29 03:55:55 fetching corpus: 750, signal 100220/116189 (executing program) 2022/09/29 03:55:55 fetching corpus: 800, signal 102845/119374 (executing program) 2022/09/29 03:55:55 fetching corpus: 850, signal 104910/122054 (executing program) 2022/09/29 03:55:56 fetching corpus: 900, signal 106048/123953 (executing program) 2022/09/29 03:55:56 fetching corpus: 950, signal 108314/126673 (executing program) 2022/09/29 03:55:56 fetching corpus: 1000, signal 110665/129413 (executing program) 2022/09/29 03:55:56 fetching corpus: 1050, signal 113181/132277 (executing program) 2022/09/29 03:55:56 fetching corpus: 1100, signal 116447/135728 (executing program) 2022/09/29 03:55:56 fetching corpus: 1150, signal 118244/137932 (executing program) 2022/09/29 03:55:56 fetching corpus: 1200, signal 121057/140904 (executing program) 2022/09/29 03:55:56 fetching corpus: 1250, signal 122759/142975 (executing program) 2022/09/29 03:55:57 fetching corpus: 1300, signal 125506/145777 (executing program) 2022/09/29 03:55:57 fetching corpus: 1350, signal 126897/147521 (executing program) 2022/09/29 03:55:57 fetching corpus: 1400, signal 127836/148956 (executing program) 2022/09/29 03:55:57 fetching corpus: 1450, signal 129025/150458 (executing program) 2022/09/29 03:55:57 fetching corpus: 1500, signal 131990/153252 (executing program) 2022/09/29 03:55:57 fetching corpus: 1550, signal 133278/154806 (executing program) 2022/09/29 03:55:57 fetching corpus: 1600, signal 133985/155948 (executing program) 2022/09/29 03:55:57 fetching corpus: 1650, signal 135553/157649 (executing program) 2022/09/29 03:55:58 fetching corpus: 1700, signal 136522/158938 (executing program) 2022/09/29 03:55:58 fetching corpus: 1750, signal 137704/160362 (executing program) 2022/09/29 03:55:58 fetching corpus: 1800, signal 139304/161958 (executing program) 2022/09/29 03:55:58 fetching corpus: 1850, signal 140444/163303 (executing program) 2022/09/29 03:55:58 fetching corpus: 1900, signal 141793/164756 (executing program) 2022/09/29 03:55:58 fetching corpus: 1950, signal 142851/165998 (executing program) 2022/09/29 03:55:58 fetching corpus: 2000, signal 144156/167313 (executing program) 2022/09/29 03:55:58 fetching corpus: 2050, signal 146783/169388 (executing program) 2022/09/29 03:55:59 fetching corpus: 2100, signal 147693/170469 (executing program) 2022/09/29 03:55:59 fetching corpus: 2150, signal 148612/171526 (executing program) 2022/09/29 03:55:59 fetching corpus: 2200, signal 149579/172589 (executing program) 2022/09/29 03:55:59 fetching corpus: 2250, signal 150592/173706 (executing program) 2022/09/29 03:55:59 fetching corpus: 2300, signal 151820/174851 (executing program) 2022/09/29 03:55:59 fetching corpus: 2350, signal 152589/175735 (executing program) 2022/09/29 03:55:59 fetching corpus: 2400, signal 153158/176512 (executing program) 2022/09/29 03:55:59 fetching corpus: 2450, signal 153761/177283 (executing program) 2022/09/29 03:55:59 fetching corpus: 2500, signal 155026/178411 (executing program) 2022/09/29 03:56:00 fetching corpus: 2550, signal 156067/179363 (executing program) 2022/09/29 03:56:00 fetching corpus: 2600, signal 157361/180401 (executing program) 2022/09/29 03:56:00 fetching corpus: 2650, signal 158346/181303 (executing program) 2022/09/29 03:56:00 fetching corpus: 2700, signal 159537/182265 (executing program) 2022/09/29 03:56:00 fetching corpus: 2750, signal 160043/182892 (executing program) 2022/09/29 03:56:00 fetching corpus: 2800, signal 160762/183602 (executing program) 2022/09/29 03:56:00 fetching corpus: 2850, signal 162131/184584 (executing program) 2022/09/29 03:56:00 fetching corpus: 2900, signal 163121/185377 (executing program) 2022/09/29 03:56:00 fetching corpus: 2950, signal 164360/186243 (executing program) 2022/09/29 03:56:00 fetching corpus: 3000, signal 165471/187081 (executing program) 2022/09/29 03:56:01 fetching corpus: 3050, signal 166368/187768 (executing program) 2022/09/29 03:56:01 fetching corpus: 3100, signal 167140/188432 (executing program) 2022/09/29 03:56:01 fetching corpus: 3150, signal 168388/189238 (executing program) 2022/09/29 03:56:01 fetching corpus: 3200, signal 169221/189929 (executing program) 2022/09/29 03:56:01 fetching corpus: 3250, signal 169853/190499 (executing program) 2022/09/29 03:56:01 fetching corpus: 3300, signal 170541/191037 (executing program) 2022/09/29 03:56:01 fetching corpus: 3350, signal 171319/191600 (executing program) 2022/09/29 03:56:01 fetching corpus: 3400, signal 172158/192150 (executing program) 2022/09/29 03:56:02 fetching corpus: 3450, signal 173988/192973 (executing program) 2022/09/29 03:56:02 fetching corpus: 3500, signal 174924/193458 (executing program) 2022/09/29 03:56:02 fetching corpus: 3550, signal 175635/193896 (executing program) 2022/09/29 03:56:02 fetching corpus: 3600, signal 176325/194396 (executing program) 2022/09/29 03:56:02 fetching corpus: 3650, signal 177058/194810 (executing program) 2022/09/29 03:56:02 fetching corpus: 3700, signal 177604/195189 (executing program) 2022/09/29 03:56:02 fetching corpus: 3750, signal 178076/195565 (executing program) 2022/09/29 03:56:02 fetching corpus: 3800, signal 178724/195945 (executing program) 2022/09/29 03:56:02 fetching corpus: 3850, signal 179401/196391 (executing program) 2022/09/29 03:56:03 fetching corpus: 3900, signal 180440/196831 (executing program) 2022/09/29 03:56:03 fetching corpus: 3950, signal 181278/197210 (executing program) 2022/09/29 03:56:03 fetching corpus: 4000, signal 182003/197543 (executing program) 2022/09/29 03:56:03 fetching corpus: 4050, signal 182690/197857 (executing program) 2022/09/29 03:56:03 fetching corpus: 4100, signal 183111/198083 (executing program) 2022/09/29 03:56:03 fetching corpus: 4150, signal 183885/198414 (executing program) 2022/09/29 03:56:03 fetching corpus: 4200, signal 184690/198701 (executing program) 2022/09/29 03:56:04 fetching corpus: 4250, signal 185407/198982 (executing program) 2022/09/29 03:56:04 fetching corpus: 4300, signal 186574/199296 (executing program) 2022/09/29 03:56:04 fetching corpus: 4350, signal 187005/199493 (executing program) 2022/09/29 03:56:04 fetching corpus: 4400, signal 187694/199736 (executing program) 2022/09/29 03:56:04 fetching corpus: 4450, signal 188420/199961 (executing program) 2022/09/29 03:56:04 fetching corpus: 4500, signal 189108/200206 (executing program) 2022/09/29 03:56:04 fetching corpus: 4550, signal 189880/200442 (executing program) 2022/09/29 03:56:04 fetching corpus: 4600, signal 190484/200620 (executing program) 2022/09/29 03:56:04 fetching corpus: 4650, signal 191029/200748 (executing program) 2022/09/29 03:56:04 fetching corpus: 4700, signal 191325/200876 (executing program) 2022/09/29 03:56:04 fetching corpus: 4750, signal 191978/200991 (executing program) 2022/09/29 03:56:05 fetching corpus: 4800, signal 192812/201111 (executing program) 2022/09/29 03:56:05 fetching corpus: 4850, signal 194174/201230 (executing program) 2022/09/29 03:56:05 fetching corpus: 4900, signal 194668/201306 (executing program) 2022/09/29 03:56:05 fetching corpus: 4950, signal 195632/201368 (executing program) 2022/09/29 03:56:05 fetching corpus: 4972, signal 195826/201391 (executing program) 2022/09/29 03:56:05 fetching corpus: 4972, signal 195826/201391 (executing program) 2022/09/29 03:56:08 starting 8 fuzzer processes 03:56:08 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$ptp(r0, 0x0, 0x0) 03:56:08 executing program 2: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8}}}, 0x8) 03:56:08 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x24}}) 03:56:08 executing program 4: set_mempolicy(0x5, &(0x7f0000000000)=0x3, 0x3ff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4d031, 0xffffffffffffffff, 0x0) 03:56:08 executing program 1: getpriority(0x2, 0xffffffffffffffff) 03:56:08 executing program 5: syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0xd0, 0x51, 0xa2, 0x0, 0x54c, 0x6d, 0x4baa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x18, 0x27, 0x50}}]}}]}}, 0x0) 03:56:08 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000340)=0xeed, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r1, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="d7061e52", 0x4}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x30}}], 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000380)={{r1}, "bb6664989408db3d6d210452b5e5152705bc8a12240e3741e09b04aa422856063c7ef48fc8d61fdb9dd5c1b7771109705a50601705dd0923881c693a39e032705ebb6ee4ef618eb2773eb3a4e63ada3c891fe708338b6dfa2bd71b902b3ecb0fce179798e0f9d91a64f4140f216ba93a2fc924257e87d829a5963d5e18d53d1514d389070b8c2d52fc73eadbdbc36ae346860ae1deed86f2b7b9b4b26a555aa07d71c645ef4e05520040b6831bcadcb79a2cf7fca9758fdae725c42c236015827135500f4012ff21005dfa80d3592aab2657ec0b8378ea548f6672b49696d51c772ca346df6783969aa9b4fcfbccf74f1905502da4c1c3f09dd45ad322cc34d0cc05bf067a20828452766eb4ea193e6b9e6dbcc8d56b937d6d063b112e53505230a14d0a196708e4996cc086548ff6f3a1b27e915c6110a2746474e76012de70be734e7ef92ca7a012723be386081bc9959513377f43530935727683c51d6de5ba2f1e1a7d7b634668683d33e6e9da816361a574c22fabb023a0f3122d7554e861e0be7e6e03a5ebfc988b73ca6d74559c63155e23ce6f17c8de5d7f657ac90eb987bf63e57796f19da5bfc1629dd4722d1581264d481cd768c1535ef426b8354a3471d39f785bb470ccdacba523052372e008722b1ac52ac19036e3c7028d5950cc8d5f2889cb1e4fa0cd80734a7d5d49ab550e912e9179b25dc66a8dbbbcf24466e0dc56ee842e695b5acf5bf572da124bcdb7b44142ab4415552aea3da9523a71226e82c4b7bb3ac743c772b39690f11e8e0e6997b85f6776fecf8310696dde45d203f93b44f165b90c4e895d548c437967845b5bc2b0c76b6bd78bcf69d630f92da73f5a80c12a39c42b68da4473a244414329b5bd43e16c12805c3cf0170058f06e4be20b4886e5586a2437e5ae38c2f8c35c78262d0766d3c553fcddd2110b4805c0b280e7557c8243b940b6532ea08ff3ee5371c1c9b835ebff2daca389c4ad621f266381cc7cd074c99d61e7fe6e5aef5b77a1004bae2bf3a0e33919f7fce713ff596cc29eab6c11a732e6d3e05bad6c4caf7b82d7035337d5cdebfacf0ff0445c978192b968e0e2356a72561e3c638a51e6c86c532e877e2f7177e310635b0ecab36342083e95288414e9cfa9277da5e76d194621ac7cd95e47cf0ebc94656e75ed2d52081b72f99c7b6083722e7377c5bc2ce1c5bf8d2e1abd2e2091027fe2a4dedf1526361f56f0ca3b0844ecc10212d3d7eec7654af37eb82d7514ef4f5bab329956afa2f3670f522f91ca7fea4dcf5b847facfbccb87d03a7a3228740f2ef0318399f434959cd6ec573682443c74813bbb559ccff4760272571824dbb0d6f5199d92a06eb1cd5daaf10042f397092cbd78722bf8ffee91d85c2c8bcedc9f300639e99d621f5601438d57d0d5a0ae26e7035a0fb2bd28b70419f5b9fbe93e3e2a0182897c4b5d5aa3f181051363d8d796ee9540dc7d408ed9fbd8b90100202ad9b39382ef92da13594eac318d6862990de24d23f225c2a116e3a9b3686a52fb38b68e7ef2cef24dba518b911a2f79d0766e0afcf8600b4586da4e9530aca6549ea953d208ee8238c98406c5fba3324e689242a7b6009949a1c757a665b44c7c98e11b60a2dbca614491e93a3feb9f2639101cdae71777779c00dd79c83e389134cea39b8495616d18feb1c890b9b4db2b4e0a40b1ad5293645f66c95cc8221c9d4e6ef1ef76722a59ac8b5c390e5c32c947b463c874858c5f2b069f59d84529d135e6c7a29b335cfccbd85c17f4a411a2d6a046c9b75f23ee74ae1c5121abd6256c6b1233ee41242c36f40eb92ace654a469d15e82c4e3814dc8ddbeb35664f1fa3b662582917169d59e2ce5806b7aa4ade6e763219a10da4e8ce6ab2cd5e095527cd03f50c98f11e54e9549a2d354aa35626b3a2602bc0fd67428a956ff8e1e9a204890b1bb6b27af8ce04dde5bb02eb53ec4c59ebe599a70a8a4c76e84e787289162bfa4e51e7d6ac69cf70c42b1e010b0be33e48b04762206b2f91274a620b5991d40a70ef2d8fc323b4a1449a0b5f412a9c6e7631444f220ee9c6baf792dc8db16c3620b9f643f8ae32e98de56f9b89c4c3a117520501aafb8051e3b175d82441d3aa4969b8757bc3053436ddfd71dc0593933a7b6dd72ee45c5b36f4d5a53cdae4ec668e3b8b14f6f248c5a2e7818b092b16b9f0b38b346bcfcf801fd802ece70bd7a579e929252f8162e45213b781cfaf5236caff62c9e5a1aaf736bdd4347bc095982af49b0cc9940b60e4450caf377fb11dc3ad0b140ee53dc86b6f5c35efa30f0fbacfc27e6c65fe7e478fd08ee2d1064b9a90ae43a1cf050e1094b67ee6dbef240f3ee8434c07a4e9714c5acfbd0851ccef68db705fc239c3bf53d49f7a0eb220866a98fdc1855f1af7c0d006568a3405c66607ce68645147a938a4b323337af0af0ac855e7fa8cf8f960251f25777cdf6a5bbdab9f03e725fa8e50b6ea779f7b88a696eae53b6be109ea85e50f28fb11c0f5b942e59b336cc802cc15679a290497845c98f7750610122013af7d9c823ef9f29ae1ee53ba7ae24035f08ce89188d45a60069094de1bc2e92fb740bf705d21d9043fb48959a81e33499e59724a9593b7bb4b15fda64f08d994847b4587e4bc096949291ab5b73719a177c17b6df231efe40f12b81ffc3db5b5f95bc7cf4d37dfac505a479b54bd573386f13afa1d6237ea810209c5cca85b7314f528f58031b417a6bdfed4f2e2c67417c3a214eace0dcdc4c4f9ff7f1e62ba0b431c6eddf183d1eb8856e5480ce162d48f51a5eab8316ec5d3364a1c5a849c90ff7d2f508a560542926ed2db717bf94b4b2fb5cec730f8177b0fd812440b996c9a18c04fb2fad6f21a8652b653054427b90999da4f40c8ed0796dfcd682753e6a1d6006a48d6b66b72ce300db2eeadc51bb3bd3c254dfb3914c7d1afda7dca0ab42e0ff39de6055b96e2789f919b1d719afb08ea05a744d734f8c027a5900f4f31fcacb5f37ae6afa77134ab14be167f6957ac1620472e603b61e0689eb8a4aa92d8255eb5cd244fded2483fd43092ad05337d49366104cbd1bd3bfd6874d903364371b50cd501d032bd010c7a8c8feee58ab11084ccc0e13ab95fb937ff75bb8784cfe897d911ccaa02b26ade6aa8a9ae422c29adb4023e4176c52cc7dd6045b585ad407b66851094e8345aa10103737cde913e8f7299415a37585427cc3bb6539ceca53792b157e9a4d39776189b036b5c4956ba4be8987769914a77230baab1fd0f6040471f214158ee79061cda772a2cc6af75012c9e560fb7397de80dd33c98832797e2e98a4d0bfddc2e3b34a4724399889a24c0ea96f2c3828a27801c9a960cc9efcefa3a627855983a61a566e95af1344a5003ee24ad8146db386d940beb96a618bb290cb3e5ecd2a8c4b92193346109b925c3b4d4acfe0b18f3e7e35c85809f123a90c9553b655a20a203327570d9057cc82017dde8fc09e60f010b246d7f7d29fe05e9fbf07086d2e9674726e58701d87bd82474ba0ef010845404617d8f54094a045c85dccb72740b645180afa31f7865f7872a5aa4ecb6142608ac626ed2e2a71957402f3a3b2aabd40f687887aaa2f5578641e923e1fa3023ee2fda2a3ada8c2770ef6ca19e3bda079b0c57e7c791af1ce2679b75490d92bdc9e4497d50f57a53cf0d38eb28a5672348f2f2674a68900a549a251e41d7c797cecd32834c736126eb70e9b91687ce4f491634705c0aa8bbf1d13235cdbf9e58574ce9c53a0af0bb76ac54bb442588fd8947c927bbf403f44dd49585c75062cf6d4f9327feefbe715a975d3c8f96266582de556f96466701c5b215630aea2ff1353f1236dc805367c799029400c7fc8e7a62d0839fc4585e415bec590f4f77840a1f4c443ccefccba706ccf9d320a3216937eeb6b5b51e15e609c1da23f75d0eaaa50264bff48a363a442b571f6936031b936d72e39fb38844109fe8723a90576b8428511f73b4c1f1990443f25ca2d9c2204c03d7fedcba78e7b499797b9c2fbd20a9a8633e16cfa1ca9bf6165a11062aa885780cc39ecbbdf6558d02f4e12d86e5ef979eed29e7f4096dbc946a72caf31b16993d986c099e5512342039936901362594b0a319da0d5acfbb3bda8a05727403993a4b379f1186538e292c235c3a11dae0cfaedd9e4149c261b3f2851741a0e92bc213b0a9185d6adfb6a726330018eb2f5f653091743e17ad9d6c8f96da902056713c84318c752a497f3925808a55f9869c5afd65122748bf01d3f8a9273e8045fd5292b1905404c802d718968deeb87dd8f055d76b116f1bfad5fa9f742b8e17d17814a2042330353d2e6a41377902eaace1a59d84448126cb5b91e78e510b2a399b5be946bb97f45486a0a74b3fbf900d11f3294055b3370d74effdb06cd3c920c925ade9fc7f88ac3a7019b28d17586aa3dce60bed3090a7bec8f085ff6d9a3a9434a039dd2d5fb6c48e50facd454163c9cfdce90b06a0600a413e65691dfd266fb00c3198c008c8de8853f9cbf1548eb4aef6ac5a618c33905f7c5f2c7925595fa93228666814397b9a53e48434359f334a9c19f216716784f66f494489473a08112272a673d55d2bc4e6d3c4556a6171e80adde1206e6ef836aed8538db57a905f3b39a7bd001f74a355f8ba667f25bbd3ed58fd90946e294c9b64e35e5eb430022b9970747a062ad73fce96526a9824efdc3b06c730fd39bcd4a407fca2aef53ff6f9609d906642ef9c06caa547f9265702f003a57b1507b809df29e675552b27e933122fe72e6a838aa2b2d183bdab0f5fe205539ee1e24d8bad10000af81e3c20f6abc5a2cb48063474be508d1dff6636393e112fac59ae407136c11d30408438c4ad94702c0c3a0e6f1f01712b4d2f51d6dd8ee652d9e4b30c8f43fe182d705cfcf1d7748114bdd6523ec4180273379d4b9622fc7eac468d7efb1d71cdfb3cd8e12c2636bb0afe07957ed949ea53d21e7d3261bfafd731475ae75d9fb599010991317f498a925460c0a3444d54582e90850c097102949bf506d1d63892d654ec4ab3dd474b846c5ca45002adc3f4c17669a11e11d685c1b1dffeecd3972c667c415550367a22ca373a9d9e990d9c6a522e322faf645eec06da871092aa8be7f756f4dbb8422d9e35f897a7bf75ab0292faa23e2abd28f9f7a630caa30bc24d1383123a90cd5c237504bffabcecadbbb06587c2910e6d3f84858fe88a1869d8acf1c13275a65d00e97030d6de3f3379c48e77e4a1f50bf9fa6b32e8324a40eb195e46563b20d2f3973023e7aea1f5138c3a2d928f235a0543d5cfc8febc4713717a68e5e9c0fcfd315ab44c813b9dd825d3e7dc86410c395370b36c0fb99a5013b74d3b3a8e383b2b034c3bec44549fbd53f2cda2e9da0ea39d49c89dacfd8a5706ed1042fc9ce870794b17756bdd727eee512534dc41e3a5913d974ca5d517442cdd766b3dab6c957635694e558f27346d61b3cf3ea0d1929ac84309295cc79409db423f1417b4e4c14106365e8e7930e4e79949d19ec9032946f66bff87c69c037f1c34458468c89e089b62d7ebae882a4a5337da7a20d78d0162a9b22c94b521031828d3ee09365f2ad7d1b06f7cc8a0a74c577d5e66d00366a63c09671cbce6be5f030c7886acbd3cb695dd59a0dd1ea1d5381d6e6ea0a7303edfccde161a280fd05dd7398e8a02364cd6fe127d5cbf9b9882336f3d7e782bd18cc1bfc69cd37867f8928b0a98728"}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 03:56:08 executing program 7: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 73.787794] audit: type=1400 audit(1664423768.359:6): avc: denied { execmem } for pid=287 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 75.045992] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.047618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.049055] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.052121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.054001] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.055540] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.060246] Bluetooth: hci0: HCI_REQ-0x0c1a [ 75.084157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.087021] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.110818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.112097] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.119992] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 75.121778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.123527] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 75.124825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.126390] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.127524] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 75.130106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.131461] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.133192] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.134476] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 75.135740] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.137741] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.141974] Bluetooth: hci2: HCI_REQ-0x0c1a [ 75.143129] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 75.144926] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 75.147120] Bluetooth: hci3: HCI_REQ-0x0c1a [ 75.166510] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.168492] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 75.169933] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 75.173343] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 75.180661] Bluetooth: hci5: HCI_REQ-0x0c1a [ 75.182966] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 75.184447] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.195599] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 75.197315] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.206144] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 75.210082] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.212939] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 75.213989] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 75.217217] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.218629] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 75.220136] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 75.221295] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.222889] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 75.224248] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 75.230809] Bluetooth: hci4: HCI_REQ-0x0c1a [ 75.233214] Bluetooth: hci6: HCI_REQ-0x0c1a [ 75.242013] Bluetooth: hci7: HCI_REQ-0x0c1a [ 77.125049] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 77.125083] Bluetooth: hci0: command 0x0409 tx timeout [ 77.188751] Bluetooth: hci5: command 0x0409 tx timeout [ 77.190122] Bluetooth: hci3: command 0x0409 tx timeout [ 77.190149] Bluetooth: hci2: command 0x0409 tx timeout [ 77.252744] Bluetooth: hci6: command 0x0409 tx timeout [ 77.253769] Bluetooth: hci4: command 0x0409 tx timeout [ 77.316736] Bluetooth: hci7: command 0x0409 tx timeout [ 79.239168] Bluetooth: hci0: command 0x041b tx timeout [ 79.240094] Bluetooth: hci3: command 0x041b tx timeout [ 79.240939] Bluetooth: hci5: command 0x041b tx timeout [ 79.242599] Bluetooth: hci2: command 0x041b tx timeout [ 79.311767] Bluetooth: hci4: command 0x041b tx timeout [ 79.312943] Bluetooth: hci6: command 0x041b tx timeout [ 79.382885] Bluetooth: hci7: command 0x041b tx timeout [ 80.073539] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.076039] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.077077] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.079250] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.080233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.081105] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.084917] Bluetooth: hci1: HCI_REQ-0x0c1a [ 81.284808] Bluetooth: hci2: command 0x040f tx timeout [ 81.284864] Bluetooth: hci5: command 0x040f tx timeout [ 81.285301] Bluetooth: hci3: command 0x040f tx timeout [ 81.285767] Bluetooth: hci0: command 0x040f tx timeout [ 81.348780] Bluetooth: hci6: command 0x040f tx timeout [ 81.348816] Bluetooth: hci4: command 0x040f tx timeout [ 81.412717] Bluetooth: hci7: command 0x040f tx timeout [ 82.116812] Bluetooth: hci1: command 0x0409 tx timeout [ 83.332788] Bluetooth: hci3: command 0x0419 tx timeout [ 83.333889] Bluetooth: hci0: command 0x0419 tx timeout [ 83.334311] Bluetooth: hci5: command 0x0419 tx timeout [ 83.335063] Bluetooth: hci2: command 0x0419 tx timeout [ 83.396798] Bluetooth: hci6: command 0x0419 tx timeout [ 83.397892] Bluetooth: hci4: command 0x0419 tx timeout [ 83.460715] Bluetooth: hci7: command 0x0419 tx timeout [ 84.166256] Bluetooth: hci1: command 0x041b tx timeout [ 86.213171] Bluetooth: hci1: command 0x040f tx timeout [ 88.261733] Bluetooth: hci1: command 0x0419 tx timeout 03:57:05 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) tee(r0, 0xffffffffffffffff, 0xd9, 0x0) 03:57:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) pipe(0x0) llistxattr(&(0x7f0000000380)='./file1\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000080000001) mount_setattr(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xa00, &(0x7f0000000480)={0x2, 0x7c, 0x100000}, 0x20) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000340)) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000440)=ANY=[], 0x3, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)={0x0, 0x200000, 0x0, {r0}}, 0x20) write$binfmt_aout(r0, &(0x7f0000000c40)=ANY=[], 0x820) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000001540)=[{&(0x7f0000001240)=""/157, 0x9d}], 0x1, 0xffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x7fffffff) [ 131.351625] loop2: detected capacity change from 0 to 256 [ 131.416317] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 131.468649] audit: type=1400 audit(1664423826.040:7): avc: denied { open } for pid=3720 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 131.470273] audit: type=1400 audit(1664423826.040:8): avc: denied { kernel } for pid=3720 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 131.481004] ------------[ cut here ]------------ [ 131.481024] [ 131.481027] ====================================================== [ 131.481031] WARNING: possible circular locking dependency detected [ 131.481035] 6.0.0-rc7-next-20220928 #1 Not tainted [ 131.481042] ------------------------------------------------------ [ 131.481045] syz-executor.2/3721 is trying to acquire lock: [ 131.481052] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 131.481098] [ 131.481098] but task is already holding lock: [ 131.481101] ffff88800d9f6420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 131.481131] [ 131.481131] which lock already depends on the new lock. [ 131.481131] [ 131.481135] [ 131.481135] the existing dependency chain (in reverse order) is: [ 131.481138] [ 131.481138] -> #3 (&ctx->lock){....}-{2:2}: [ 131.481153] _raw_spin_lock+0x2a/0x40 [ 131.481166] __perf_event_task_sched_out+0x53b/0x18d0 [ 131.481180] __schedule+0xedd/0x2470 [ 131.481198] schedule+0xda/0x1b0 [ 131.481215] exit_to_user_mode_prepare+0x114/0x1a0 [ 131.481229] syscall_exit_to_user_mode+0x19/0x40 [ 131.481245] do_syscall_64+0x48/0x90 [ 131.481256] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.481272] [ 131.481272] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 131.481287] _raw_spin_lock_nested+0x30/0x40 [ 131.481300] raw_spin_rq_lock_nested+0x1e/0x30 [ 131.481314] task_fork_fair+0x63/0x4d0 [ 131.481333] sched_cgroup_fork+0x3d0/0x540 [ 131.481349] copy_process+0x4183/0x6e20 [ 131.481360] kernel_clone+0xe7/0x890 [ 131.481371] user_mode_thread+0xad/0xf0 [ 131.481382] rest_init+0x24/0x250 [ 131.481396] arch_call_rest_init+0xf/0x14 [ 131.481417] start_kernel+0x4c6/0x4eb [ 131.481436] secondary_startup_64_no_verify+0xe0/0xeb [ 131.481451] [ 131.481451] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 131.481465] _raw_spin_lock_irqsave+0x39/0x60 [ 131.481478] try_to_wake_up+0xab/0x1930 [ 131.481493] up+0x75/0xb0 [ 131.481510] __up_console_sem+0x6e/0x80 [ 131.481528] console_unlock+0x46a/0x590 [ 131.481546] do_con_write+0xc05/0x1d50 [ 131.481560] con_write+0x21/0x40 [ 131.481571] n_tty_write+0x4d4/0xfe0 [ 131.481587] file_tty_write.constprop.0+0x455/0x8a0 [ 131.481601] vfs_write+0x9c3/0xd90 [ 131.481622] ksys_write+0x127/0x250 [ 131.481631] do_syscall_64+0x3b/0x90 [ 131.481642] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.481657] [ 131.481657] -> #0 ((console_sem).lock){....}-{2:2}: [ 131.481671] __lock_acquire+0x2a02/0x5e70 [ 131.481690] lock_acquire+0x1a2/0x530 [ 131.481708] _raw_spin_lock_irqsave+0x39/0x60 [ 131.481721] down_trylock+0xe/0x70 [ 131.481740] __down_trylock_console_sem+0x3b/0xd0 [ 131.481758] vprintk_emit+0x16b/0x560 [ 131.481776] vprintk+0x84/0xa0 [ 131.481794] _printk+0xba/0xf1 [ 131.481809] report_bug.cold+0x72/0xab [ 131.481819] handle_bug+0x3c/0x70 [ 131.481830] exc_invalid_op+0x14/0x50 [ 131.481841] asm_exc_invalid_op+0x16/0x20 [ 131.481855] group_sched_out.part.0+0x2c7/0x460 [ 131.481867] ctx_sched_out+0x8f1/0xc10 [ 131.481878] __perf_event_task_sched_out+0x6d0/0x18d0 [ 131.481891] __schedule+0xedd/0x2470 [ 131.481908] schedule+0xda/0x1b0 [ 131.481925] exit_to_user_mode_prepare+0x114/0x1a0 [ 131.481936] syscall_exit_to_user_mode+0x19/0x40 [ 131.481952] do_syscall_64+0x48/0x90 [ 131.481962] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.481978] [ 131.481978] other info that might help us debug this: [ 131.481978] [ 131.481981] Chain exists of: [ 131.481981] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 131.481981] [ 131.481996] Possible unsafe locking scenario: [ 131.481996] [ 131.481999] CPU0 CPU1 [ 131.482001] ---- ---- [ 131.482004] lock(&ctx->lock); [ 131.482010] lock(&rq->__lock); [ 131.482017] lock(&ctx->lock); [ 131.482024] lock((console_sem).lock); [ 131.482030] [ 131.482030] *** DEADLOCK *** [ 131.482030] [ 131.482032] 2 locks held by syz-executor.2/3721: [ 131.482039] #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 131.482072] #1: ffff88800d9f6420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 131.482102] [ 131.482102] stack backtrace: [ 131.482105] CPU: 1 PID: 3721 Comm: syz-executor.2 Not tainted 6.0.0-rc7-next-20220928 #1 [ 131.482118] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 131.482127] Call Trace: [ 131.482130] [ 131.482134] dump_stack_lvl+0x8b/0xb3 [ 131.482147] check_noncircular+0x263/0x2e0 [ 131.482165] ? format_decode+0x26c/0xb50 [ 131.482185] ? print_circular_bug+0x450/0x450 [ 131.482204] ? enable_ptr_key_workfn+0x20/0x20 [ 131.482223] ? __lockdep_reset_lock+0x180/0x180 [ 131.482242] ? format_decode+0x26c/0xb50 [ 131.482263] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 131.482282] __lock_acquire+0x2a02/0x5e70 [ 131.482306] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 131.482331] lock_acquire+0x1a2/0x530 [ 131.482350] ? down_trylock+0xe/0x70 [ 131.482371] ? lock_release+0x750/0x750 [ 131.482391] ? find_held_lock+0x2c/0x110 [ 131.482410] ? vprintk+0x84/0xa0 [ 131.482430] _raw_spin_lock_irqsave+0x39/0x60 [ 131.482444] ? down_trylock+0xe/0x70 [ 131.482463] down_trylock+0xe/0x70 [ 131.482483] ? vprintk+0x84/0xa0 [ 131.482502] __down_trylock_console_sem+0x3b/0xd0 [ 131.482521] vprintk_emit+0x16b/0x560 [ 131.482542] vprintk+0x84/0xa0 [ 131.482562] _printk+0xba/0xf1 [ 131.482576] ? record_print_text.cold+0x16/0x16 [ 131.482593] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 131.482608] ? lock_downgrade+0x6d0/0x6d0 [ 131.482628] ? report_bug.cold+0x66/0xab [ 131.482640] ? group_sched_out.part.0+0x2c7/0x460 [ 131.482653] report_bug.cold+0x72/0xab [ 131.482666] handle_bug+0x3c/0x70 [ 131.482677] exc_invalid_op+0x14/0x50 [ 131.482690] asm_exc_invalid_op+0x16/0x20 [ 131.482706] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 131.482720] Code: 5e 41 5f e9 cb a9 ef ff e8 c6 a9 ef ff 65 8b 1d db 12 ac 7e 31 ff 89 de e8 66 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 a9 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 9d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 131.482732] RSP: 0018:ffff88804026fc48 EFLAGS: 00010006 [ 131.482742] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 131.482750] RDX: ffff88800f815040 RSI: ffffffff815662f7 RDI: 0000000000000005 [ 131.482758] RBP: ffff888040348000 R08: 0000000000000005 R09: 0000000000000001 [ 131.482766] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800d9f6400 [ 131.482774] R13: ffff88806cf3d140 R14: ffffffff8547c860 R15: 0000000000000002 [ 131.482785] ? group_sched_out.part.0+0x2c7/0x460 [ 131.482800] ? group_sched_out.part.0+0x2c7/0x460 [ 131.482814] ctx_sched_out+0x8f1/0xc10 [ 131.482828] __perf_event_task_sched_out+0x6d0/0x18d0 [ 131.482845] ? lock_is_held_type+0xd7/0x130 [ 131.482862] ? __perf_cgroup_move+0x160/0x160 [ 131.482875] ? set_next_entity+0x304/0x550 [ 131.482895] ? update_curr+0x267/0x740 [ 131.482916] ? lock_is_held_type+0xd7/0x130 [ 131.482933] __schedule+0xedd/0x2470 [ 131.482953] ? io_schedule_timeout+0x150/0x150 [ 131.482974] ? __x64_sys_futex_time32+0x480/0x480 [ 131.482990] schedule+0xda/0x1b0 [ 131.483008] exit_to_user_mode_prepare+0x114/0x1a0 [ 131.483021] syscall_exit_to_user_mode+0x19/0x40 [ 131.483038] do_syscall_64+0x48/0x90 [ 131.483050] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.483066] RIP: 0033:0x7f3aba4e5b19 [ 131.483075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 131.483086] RSP: 002b:00007f3ab7a5b218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 131.483098] RAX: 0000000000000001 RBX: 00007f3aba5f8f68 RCX: 00007f3aba4e5b19 [ 131.483106] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3aba5f8f6c [ 131.483113] RBP: 00007f3aba5f8f60 R08: 000000000000000e R09: 0000000000000000 [ 131.483121] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f3aba5f8f6c [ 131.483129] R13: 00007fff5e1b4a4f R14: 00007f3ab7a5b300 R15: 0000000000022000 [ 131.483142] [ 131.541145] WARNING: CPU: 1 PID: 3721 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 131.541835] Modules linked in: [ 131.542083] CPU: 1 PID: 3721 Comm: syz-executor.2 Not tainted 6.0.0-rc7-next-20220928 #1 [ 131.542673] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 131.543493] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 131.543897] Code: 5e 41 5f e9 cb a9 ef ff e8 c6 a9 ef ff 65 8b 1d db 12 ac 7e 31 ff 89 de e8 66 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 a9 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 9d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 131.545267] RSP: 0018:ffff88804026fc48 EFLAGS: 00010006 [ 131.545662] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 131.546184] RDX: ffff88800f815040 RSI: ffffffff815662f7 RDI: 0000000000000005 [ 131.546709] RBP: ffff888040348000 R08: 0000000000000005 R09: 0000000000000001 [ 131.547244] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800d9f6400 [ 131.547766] R13: ffff88806cf3d140 R14: ffffffff8547c860 R15: 0000000000000002 [ 131.548296] FS: 00007f3ab7a5b700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 131.548898] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.549335] CR2: 00007fc3daddab90 CR3: 000000003e718000 CR4: 0000000000350ee0 [ 131.549865] Call Trace: [ 131.550059] [ 131.550234] ctx_sched_out+0x8f1/0xc10 [ 131.550527] __perf_event_task_sched_out+0x6d0/0x18d0 [ 131.550921] ? lock_is_held_type+0xd7/0x130 [ 131.551253] ? __perf_cgroup_move+0x160/0x160 [ 131.551591] ? set_next_entity+0x304/0x550 [ 131.551912] ? update_curr+0x267/0x740 [ 131.552214] ? lock_is_held_type+0xd7/0x130 [ 131.552552] __schedule+0xedd/0x2470 [ 131.552843] ? io_schedule_timeout+0x150/0x150 [ 131.553195] ? __x64_sys_futex_time32+0x480/0x480 [ 131.553561] schedule+0xda/0x1b0 [ 131.553823] exit_to_user_mode_prepare+0x114/0x1a0 [ 131.554190] syscall_exit_to_user_mode+0x19/0x40 [ 131.554559] do_syscall_64+0x48/0x90 [ 131.554842] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.555232] RIP: 0033:0x7f3aba4e5b19 [ 131.555512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 131.556856] RSP: 002b:00007f3ab7a5b218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 131.557414] RAX: 0000000000000001 RBX: 00007f3aba5f8f68 RCX: 00007f3aba4e5b19 [ 131.557938] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3aba5f8f6c [ 131.558455] RBP: 00007f3aba5f8f60 R08: 000000000000000e R09: 0000000000000000 [ 131.558972] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f3aba5f8f6c [ 131.559485] R13: 00007fff5e1b4a4f R14: 00007f3ab7a5b300 R15: 0000000000022000 [ 131.560005] [ 131.560183] irq event stamp: 7472 [ 131.560435] hardirqs last enabled at (7471): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 131.561119] hardirqs last disabled at (7472): [] __schedule+0x1225/0x2470 [ 131.561726] softirqs last enabled at (6788): [] __irq_exit_rcu+0x11b/0x180 [ 131.562350] softirqs last disabled at (6731): [] __irq_exit_rcu+0x11b/0x180 [ 131.562961] ---[ end trace 0000000000000000 ]--- 03:57:06 executing program 4: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x624042, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) [ 131.763741] audit: type=1400 audit(1664423826.335:9): avc: denied { write } for pid=3750 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 03:57:06 executing program 4: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x624042, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 03:57:06 executing program 4: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x624042, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) [ 132.034883] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 03:57:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) pipe(0x0) llistxattr(&(0x7f0000000380)='./file1\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000080000001) mount_setattr(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xa00, &(0x7f0000000480)={0x2, 0x7c, 0x100000}, 0x20) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000340)) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000440)=ANY=[], 0x3, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)={0x0, 0x200000, 0x0, {r0}}, 0x20) write$binfmt_aout(r0, &(0x7f0000000c40)=ANY=[], 0x820) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000001540)=[{&(0x7f0000001240)=""/157, 0x9d}], 0x1, 0xffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x7fffffff) 03:57:06 executing program 4: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x624042, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) [ 132.078337] loop2: detected capacity change from 0 to 256 [ 132.096352] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 03:57:06 executing program 4: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x624042, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) [ 132.327100] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 133.840199] loop7: detected capacity change from 0 to 40 [ 133.888678] hrtimer: interrupt took 19247 ns [ 134.171046] syz-executor.7: attempt to access beyond end of device [ 134.171046] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 134.172127] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 136.071326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.073406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.308799] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 138.436728] Bluetooth: hci5: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 03:57:06 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88800f3e58c0 RCX=0000000000000000 RDX=ffff8880090bb580 RSI=ffffffff81163b31 RDI=ffff88800f3e58c0 RBP=ffff88800c0372c0 RSP=ffff8880092df9e0 R8 =0000000000000000 R9 =ffffffff85b064d7 R10=0000000000000000 R11=0000000000000001 R12=ffff88800c0372d0 R13=ffff88801dafe5c0 R14=ffff88801a019ac0 R15=dffffc0000000000 RIP=ffffffff811d1a91 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa28ddee6f4 CR3=000000003a238000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000ff0000000000 0000000000ff0000 YMM02=0000000000000000 0000000000000000 000000000000ff00 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 000000ff00000000 YMM04=0000000000000000 0000000000000000 ff00000000000000 ff00000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba131 RDI=ffffffff8765a980 RBP=ffffffff8765a940 RSP=ffff88804026f690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000033 R11=0000000000000001 R12=0000000000000033 R13=ffffffff8765a940 R14=0000000000000010 R15=ffffffff823ba120 RIP=ffffffff823ba189 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3ab7a5b700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc3daddab90 CR3=000000003e718000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM01=0000000000000000 0000000000000000 2525252525252525 2525252525252525 YMM02=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000