Warning: Permanently added '[localhost]:1467' (ECDSA) to the list of known hosts.
2022/09/14 12:36:32 fuzzer started
2022/09/14 12:36:32 dialing manager at localhost:33849
syzkaller login: [ 41.532845] cgroup: Unknown subsys name 'net'
[ 41.643143] cgroup: Unknown subsys name 'rlimit'
2022/09/14 12:36:47 syscalls: 2215
2022/09/14 12:36:47 code coverage: enabled
2022/09/14 12:36:47 comparison tracing: enabled
2022/09/14 12:36:47 extra coverage: enabled
2022/09/14 12:36:47 setuid sandbox: enabled
2022/09/14 12:36:47 namespace sandbox: enabled
2022/09/14 12:36:47 Android sandbox: enabled
2022/09/14 12:36:47 fault injection: enabled
2022/09/14 12:36:47 leak checking: enabled
2022/09/14 12:36:47 net packet injection: enabled
2022/09/14 12:36:47 net device setup: enabled
2022/09/14 12:36:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/14 12:36:47 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/14 12:36:47 USB emulation: enabled
2022/09/14 12:36:47 hci packet injection: enabled
2022/09/14 12:36:47 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220914 )
2022/09/14 12:36:47 802.15.4 emulation: enabled
2022/09/14 12:36:47 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/14 12:36:47 fetching corpus: 50, signal 37820/41136 (executing program)
2022/09/14 12:36:47 fetching corpus: 100, signal 48290/53011 (executing program)
2022/09/14 12:36:47 fetching corpus: 150, signal 58882/64811 (executing program)
2022/09/14 12:36:47 fetching corpus: 200, signal 66755/73798 (executing program)
2022/09/14 12:36:48 fetching corpus: 250, signal 69874/78131 (executing program)
2022/09/14 12:36:48 fetching corpus: 300, signal 73972/83342 (executing program)
2022/09/14 12:36:48 fetching corpus: 350, signal 78800/89107 (executing program)
2022/09/14 12:36:48 fetching corpus: 400, signal 84762/95875 (executing program)
2022/09/14 12:36:48 fetching corpus: 450, signal 88225/100261 (executing program)
2022/09/14 12:36:48 fetching corpus: 500, signal 93189/106022 (executing program)
2022/09/14 12:36:48 fetching corpus: 550, signal 97096/110682 (executing program)
2022/09/14 12:36:49 fetching corpus: 600, signal 101144/115308 (executing program)
2022/09/14 12:36:49 fetching corpus: 650, signal 103077/118080 (executing program)
2022/09/14 12:36:49 fetching corpus: 700, signal 105715/121405 (executing program)
2022/09/14 12:36:49 fetching corpus: 750, signal 108247/124585 (executing program)
2022/09/14 12:36:49 fetching corpus: 800, signal 112240/128902 (executing program)
2022/09/14 12:36:49 fetching corpus: 850, signal 116194/133132 (executing program)
2022/09/14 12:36:50 fetching corpus: 900, signal 117706/135320 (executing program)
2022/09/14 12:36:50 fetching corpus: 950, signal 120741/138766 (executing program)
2022/09/14 12:36:50 fetching corpus: 1000, signal 123108/141568 (executing program)
2022/09/14 12:36:50 fetching corpus: 1050, signal 125424/144210 (executing program)
2022/09/14 12:36:50 fetching corpus: 1100, signal 128106/147166 (executing program)
2022/09/14 12:36:50 fetching corpus: 1150, signal 130327/149722 (executing program)
2022/09/14 12:36:50 fetching corpus: 1200, signal 131686/151547 (executing program)
2022/09/14 12:36:51 fetching corpus: 1250, signal 133165/153536 (executing program)
2022/09/14 12:36:51 fetching corpus: 1300, signal 134438/155255 (executing program)
2022/09/14 12:36:51 fetching corpus: 1350, signal 136046/157208 (executing program)
2022/09/14 12:36:51 fetching corpus: 1400, signal 138016/159422 (executing program)
2022/09/14 12:36:51 fetching corpus: 1450, signal 139445/161134 (executing program)
2022/09/14 12:36:51 fetching corpus: 1500, signal 141050/162983 (executing program)
2022/09/14 12:36:51 fetching corpus: 1550, signal 142415/164590 (executing program)
2022/09/14 12:36:52 fetching corpus: 1600, signal 144559/166728 (executing program)
2022/09/14 12:36:52 fetching corpus: 1650, signal 145661/168102 (executing program)
2022/09/14 12:36:52 fetching corpus: 1700, signal 148349/170605 (executing program)
2022/09/14 12:36:52 fetching corpus: 1750, signal 149483/172029 (executing program)
2022/09/14 12:36:52 fetching corpus: 1800, signal 150890/173548 (executing program)
2022/09/14 12:36:52 fetching corpus: 1850, signal 152402/175073 (executing program)
2022/09/14 12:36:53 fetching corpus: 1900, signal 155511/177593 (executing program)
2022/09/14 12:36:53 fetching corpus: 1950, signal 157146/179203 (executing program)
2022/09/14 12:36:53 fetching corpus: 2000, signal 158277/180460 (executing program)
2022/09/14 12:36:53 fetching corpus: 2050, signal 159356/181624 (executing program)
2022/09/14 12:36:53 fetching corpus: 2100, signal 160757/183070 (executing program)
2022/09/14 12:36:53 fetching corpus: 2150, signal 162425/184483 (executing program)
2022/09/14 12:36:53 fetching corpus: 2200, signal 163476/185624 (executing program)
2022/09/14 12:36:53 fetching corpus: 2250, signal 164305/186540 (executing program)
2022/09/14 12:36:54 fetching corpus: 2300, signal 165481/187738 (executing program)
2022/09/14 12:36:54 fetching corpus: 2350, signal 166467/188804 (executing program)
2022/09/14 12:36:54 fetching corpus: 2400, signal 168262/190164 (executing program)
2022/09/14 12:36:54 fetching corpus: 2450, signal 169557/191267 (executing program)
2022/09/14 12:36:54 fetching corpus: 2500, signal 170597/192205 (executing program)
2022/09/14 12:36:54 fetching corpus: 2550, signal 171555/193100 (executing program)
2022/09/14 12:36:54 fetching corpus: 2600, signal 172300/193897 (executing program)
2022/09/14 12:36:54 fetching corpus: 2650, signal 173593/194895 (executing program)
2022/09/14 12:36:55 fetching corpus: 2700, signal 175014/195961 (executing program)
2022/09/14 12:36:55 fetching corpus: 2750, signal 176202/196967 (executing program)
2022/09/14 12:36:55 fetching corpus: 2800, signal 177466/197952 (executing program)
2022/09/14 12:36:55 fetching corpus: 2850, signal 178485/198745 (executing program)
2022/09/14 12:36:55 fetching corpus: 2900, signal 179351/199459 (executing program)
2022/09/14 12:36:55 fetching corpus: 2950, signal 180326/200194 (executing program)
2022/09/14 12:36:55 fetching corpus: 3000, signal 181275/200951 (executing program)
2022/09/14 12:36:56 fetching corpus: 3050, signal 182594/201788 (executing program)
2022/09/14 12:36:56 fetching corpus: 3100, signal 184108/202789 (executing program)
2022/09/14 12:36:56 fetching corpus: 3150, signal 185520/203627 (executing program)
2022/09/14 12:36:56 fetching corpus: 3200, signal 186264/204191 (executing program)
2022/09/14 12:36:56 fetching corpus: 3250, signal 187197/204794 (executing program)
2022/09/14 12:36:56 fetching corpus: 3300, signal 188283/205405 (executing program)
2022/09/14 12:36:56 fetching corpus: 3350, signal 189205/206063 (executing program)
2022/09/14 12:36:57 fetching corpus: 3400, signal 189966/206590 (executing program)
2022/09/14 12:36:57 fetching corpus: 3450, signal 190490/206982 (executing program)
2022/09/14 12:36:57 fetching corpus: 3500, signal 191593/207517 (executing program)
2022/09/14 12:36:57 fetching corpus: 3550, signal 192425/207930 (executing program)
2022/09/14 12:36:57 fetching corpus: 3600, signal 194824/208795 (executing program)
2022/09/14 12:36:57 fetching corpus: 3650, signal 195567/209195 (executing program)
2022/09/14 12:36:57 fetching corpus: 3700, signal 196225/209555 (executing program)
2022/09/14 12:36:58 fetching corpus: 3750, signal 196655/209851 (executing program)
2022/09/14 12:36:58 fetching corpus: 3800, signal 198209/210401 (executing program)
2022/09/14 12:36:58 fetching corpus: 3850, signal 198953/210759 (executing program)
2022/09/14 12:36:58 fetching corpus: 3900, signal 199668/211067 (executing program)
2022/09/14 12:36:58 fetching corpus: 3950, signal 200709/211472 (executing program)
2022/09/14 12:36:58 fetching corpus: 4000, signal 201323/211727 (executing program)
2022/09/14 12:36:58 fetching corpus: 4050, signal 202472/212098 (executing program)
2022/09/14 12:36:59 fetching corpus: 4100, signal 203069/212325 (executing program)
2022/09/14 12:36:59 fetching corpus: 4150, signal 203645/212512 (executing program)
2022/09/14 12:36:59 fetching corpus: 4200, signal 204222/212694 (executing program)
2022/09/14 12:36:59 fetching corpus: 4250, signal 204976/212895 (executing program)
2022/09/14 12:36:59 fetching corpus: 4300, signal 205772/213080 (executing program)
2022/09/14 12:36:59 fetching corpus: 4350, signal 206560/213266 (executing program)
2022/09/14 12:36:59 fetching corpus: 4382, signal 206916/213388 (executing program)
2022/09/14 12:36:59 fetching corpus: 4382, signal 206916/213468 (executing program)
2022/09/14 12:36:59 fetching corpus: 4382, signal 206916/213553 (executing program)
2022/09/14 12:36:59 fetching corpus: 4382, signal 206916/213628 (executing program)
2022/09/14 12:36:59 fetching corpus: 4382, signal 206916/213700 (executing program)
2022/09/14 12:36:59 fetching corpus: 4382, signal 206916/213761 (executing program)
2022/09/14 12:36:59 fetching corpus: 4382, signal 206916/213823 (executing program)
2022/09/14 12:36:59 fetching corpus: 4382, signal 206916/213899 (executing program)
2022/09/14 12:36:59 fetching corpus: 4382, signal 206916/213975 (executing program)
2022/09/14 12:36:59 fetching corpus: 4382, signal 206916/214053 (executing program)
2022/09/14 12:36:59 fetching corpus: 4382, signal 206916/214086 (executing program)
2022/09/14 12:36:59 fetching corpus: 4382, signal 206916/214086 (executing program)
2022/09/14 12:37:03 starting 8 fuzzer processes
12:37:03 executing program 0:
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)={0x40, 0x0, 0x10}, 0x18)
12:37:03 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0xc, &(0x7f0000000000), 0xc)
12:37:03 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000000080)=0x1f00)
12:37:03 executing program 1:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_role_discovery={{}, {0x40, 0xc8, 0xbb}}}}, 0xa)
[ 71.848997] audit: type=1400 audit(1663159023.119:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
12:37:03 executing program 5:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r0)
12:37:03 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000000)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3d014f29ef99ad8b2ee6ab88d3ddf9f64fb3263bd7d202acf75f549842835dcf4ecacd3bf6ef28ae3dc96c80090000000000000094cfe0ef6c098e4367db36878fc3b3cf59362ed513ef778807b55fbb784c2941987cdeac0bcc06bf94cc37d1821115ee3b44d8118103b840f49b133f761bd39ea4534cef3295fdd2b9850de61d1d33bf176c9bd266a3439db7f00f2a5b7dd9968b77eb1d3d7fcdc768cab0e718cfee4ca51c9be3153d4bd300c66f66b04880d493e9c998204148f342e8caeb66cd0d13b3df034e229e03813a86ac8f5b647fa72c380c8d84991e911426038b286fa503c014586c32c0deaed9a5c0e46d7825993f5820b05770", @ANYRESHEX, @ANYBLOB=',\x00'])
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008})
epoll_wait(0xffffffffffffffff, &(0x7f0000000300)=[{}, {}, {}], 0x3, 0x5)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
acct(&(0x7f00000001c0)='./file1\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000340)={{0x101, 0x7}, 0x100, './file1\x00'})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x6, 0x0, 0x0, 0x0)
12:37:03 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r3 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ff9000/0x2000)=nil)
shmctl$SHM_UNLOCK(r3, 0xc)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
12:37:03 executing program 7:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000)=@other={'decodes', ' ', 'mem'}, 0xc)
[ 73.173983] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 73.175870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 73.178265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 73.179526] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 73.183064] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 73.184189] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 73.195961] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 73.197055] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 73.201977] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 73.203236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 73.229016] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 73.230158] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 73.237484] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 73.244282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 73.245768] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 73.249506] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 73.251430] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 73.252519] Bluetooth: hci0: HCI_REQ-0x0c1a
[ 73.254348] Bluetooth: hci1: HCI_REQ-0x0c1a
[ 73.257407] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 73.260857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 73.268912] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 73.285916] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 73.287320] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 73.290946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 73.292102] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 73.293431] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 73.293549] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 73.295396] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 73.297547] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 73.298048] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 73.302004] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 73.303514] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 73.305525] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 73.305632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 73.307292] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 73.312280] Bluetooth: hci2: HCI_REQ-0x0c1a
[ 73.313502] Bluetooth: hci4: HCI_REQ-0x0c1a
[ 73.322130] Bluetooth: hci3: HCI_REQ-0x0c1a
[ 73.323209] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 73.332956] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 73.341135] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 73.344836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 73.346185] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 73.349189] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 73.356541] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 73.362545] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 73.363886] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 73.365050] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 73.367076] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 73.369012] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 73.374109] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 73.377298] Bluetooth: hci5: HCI_REQ-0x0c1a
[ 73.381627] Bluetooth: hci6: HCI_REQ-0x0c1a
[ 73.388359] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 73.432820] Bluetooth: hci7: HCI_REQ-0x0c1a
[ 75.321563] Bluetooth: hci4: command 0x0409 tx timeout
[ 75.321695] Bluetooth: hci0: command 0x0409 tx timeout
[ 75.322775] Bluetooth: hci2: command 0x0409 tx timeout
[ 75.326210] Bluetooth: hci1: command 0x0409 tx timeout
[ 75.385760] Bluetooth: hci3: command 0x0409 tx timeout
[ 75.449704] Bluetooth: hci6: command 0x0409 tx timeout
[ 75.450221] Bluetooth: hci5: command 0x0409 tx timeout
[ 75.512743] Bluetooth: hci7: command 0x0409 tx timeout
[ 77.368757] Bluetooth: hci1: command 0x041b tx timeout
[ 77.369312] Bluetooth: hci2: command 0x041b tx timeout
[ 77.369817] Bluetooth: hci0: command 0x041b tx timeout
[ 77.370259] Bluetooth: hci4: command 0x041b tx timeout
[ 77.433697] Bluetooth: hci3: command 0x041b tx timeout
[ 77.496723] Bluetooth: hci5: command 0x041b tx timeout
[ 77.497167] Bluetooth: hci6: command 0x041b tx timeout
[ 77.560732] Bluetooth: hci7: command 0x041b tx timeout
[ 79.416798] Bluetooth: hci4: command 0x040f tx timeout
[ 79.417279] Bluetooth: hci0: command 0x040f tx timeout
[ 79.417710] Bluetooth: hci2: command 0x040f tx timeout
[ 79.418118] Bluetooth: hci1: command 0x040f tx timeout
[ 79.481677] Bluetooth: hci3: command 0x040f tx timeout
[ 79.544687] Bluetooth: hci6: command 0x040f tx timeout
[ 79.545120] Bluetooth: hci5: command 0x040f tx timeout
[ 79.609779] Bluetooth: hci7: command 0x040f tx timeout
[ 81.464792] Bluetooth: hci1: command 0x0419 tx timeout
[ 81.465282] Bluetooth: hci2: command 0x0419 tx timeout
[ 81.465728] Bluetooth: hci0: command 0x0419 tx timeout
[ 81.466161] Bluetooth: hci4: command 0x0419 tx timeout
[ 81.529039] Bluetooth: hci3: command 0x0419 tx timeout
[ 81.593692] Bluetooth: hci5: command 0x0419 tx timeout
[ 81.594137] Bluetooth: hci6: command 0x0419 tx timeout
[ 81.657723] Bluetooth: hci7: command 0x0419 tx timeout
[ 129.438427] loop4: detected capacity change from 0 to 40
[ 129.465611] audit: type=1400 audit(1663159080.735:7): avc: denied { open } for pid=3729 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 129.467110] audit: type=1400 audit(1663159080.735:8): avc: denied { kernel } for pid=3729 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 129.492623] ------------[ cut here ]------------
[ 129.492646]
[ 129.492649] ======================================================
[ 129.492652] WARNING: possible circular locking dependency detected
[ 129.492657] 6.0.0-rc5-next-20220914 #1 Not tainted
[ 129.492663] ------------------------------------------------------
[ 129.492666] syz-executor.4/3730 is trying to acquire lock:
[ 129.492673] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[ 129.492712]
[ 129.492712] but task is already holding lock:
[ 129.492714] ffff888015fee420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 129.492742]
[ 129.492742] which lock already depends on the new lock.
[ 129.492742]
[ 129.492745]
[ 129.492745] the existing dependency chain (in reverse order) is:
[ 129.492749]
[ 129.492749] -> #3 (&ctx->lock){....}-{2:2}:
[ 129.492763] _raw_spin_lock+0x2a/0x40
[ 129.492779] __perf_event_task_sched_out+0x53b/0x18d0
[ 129.492792] __schedule+0xedd/0x2470
[ 129.492803] schedule+0xda/0x1b0
[ 129.492812] futex_wait_queue+0xf5/0x1e0
[ 129.492824] futex_wait+0x28e/0x690
[ 129.492834] do_futex+0x2ff/0x380
[ 129.492843] __x64_sys_futex+0x1c6/0x4d0
[ 129.492853] do_syscall_64+0x3b/0x90
[ 129.492866] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 129.492884]
[ 129.492884] -> #2 (&rq->__lock){-.-.}-{2:2}:
[ 129.492898] _raw_spin_lock_nested+0x30/0x40
[ 129.492912] raw_spin_rq_lock_nested+0x1e/0x30
[ 129.492925] task_fork_fair+0x63/0x4d0
[ 129.492942] sched_cgroup_fork+0x3d0/0x540
[ 129.492956] copy_process+0x4183/0x6e20
[ 129.492966] kernel_clone+0xe7/0x890
[ 129.492976] user_mode_thread+0xad/0xf0
[ 129.492986] rest_init+0x24/0x250
[ 129.493002] arch_call_rest_init+0xf/0x14
[ 129.493014] start_kernel+0x4c1/0x4e6
[ 129.493027] secondary_startup_64_no_verify+0xe0/0xeb
[ 129.493041]
[ 129.493041] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[ 129.493055] _raw_spin_lock_irqsave+0x39/0x60
[ 129.493070] try_to_wake_up+0xab/0x1920
[ 129.493082] up+0x75/0xb0
[ 129.493093] __up_console_sem+0x6e/0x80
[ 129.493109] console_unlock+0x46a/0x590
[ 129.493125] vt_ioctl+0x2822/0x2ca0
[ 129.493137] tty_ioctl+0x7c4/0x1700
[ 129.493148] __x64_sys_ioctl+0x19a/0x210
[ 129.493163] do_syscall_64+0x3b/0x90
[ 129.493176] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 129.493193]
[ 129.493193] -> #0 ((console_sem).lock){....}-{2:2}:
[ 129.493206] __lock_acquire+0x2a02/0x5e70
[ 129.493222] lock_acquire+0x1a2/0x530
[ 129.493238] _raw_spin_lock_irqsave+0x39/0x60
[ 129.493252] down_trylock+0xe/0x70
[ 129.493264] __down_trylock_console_sem+0x3b/0xd0
[ 129.493280] vprintk_emit+0x16b/0x560
[ 129.493296] vprintk+0x84/0xa0
[ 129.493312] _printk+0xba/0xf1
[ 129.493336] report_bug.cold+0x72/0xab
[ 129.493348] handle_bug+0x3c/0x70
[ 129.493361] exc_invalid_op+0x14/0x50
[ 129.493373] asm_exc_invalid_op+0x16/0x20
[ 129.493389] group_sched_out.part.0+0x2c7/0x460
[ 129.493400] ctx_sched_out+0x8f1/0xc10
[ 129.493409] __perf_event_task_sched_out+0x6d0/0x18d0
[ 129.493421] __schedule+0xedd/0x2470
[ 129.493431] schedule+0xda/0x1b0
[ 129.493441] futex_wait_queue+0xf5/0x1e0
[ 129.493451] futex_wait+0x28e/0x690
[ 129.493460] do_futex+0x2ff/0x380
[ 129.493469] __x64_sys_futex+0x1c6/0x4d0
[ 129.493479] do_syscall_64+0x3b/0x90
[ 129.493491] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 129.493508]
[ 129.493508] other info that might help us debug this:
[ 129.493508]
[ 129.493511] Chain exists of:
[ 129.493511] (console_sem).lock --> &rq->__lock --> &ctx->lock
[ 129.493511]
[ 129.493526] Possible unsafe locking scenario:
[ 129.493526]
[ 129.493528] CPU0 CPU1
[ 129.493531] ---- ----
[ 129.493533] lock(&ctx->lock);
[ 129.493539] lock(&rq->__lock);
[ 129.493546] lock(&ctx->lock);
[ 129.493552] lock((console_sem).lock);
[ 129.493557]
[ 129.493557] *** DEADLOCK ***
[ 129.493557]
[ 129.493559] 2 locks held by syz-executor.4/3730:
[ 129.493567] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[ 129.493593] #1: ffff888015fee420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 129.493620]
[ 129.493620] stack backtrace:
[ 129.493623] CPU: 1 PID: 3730 Comm: syz-executor.4 Not tainted 6.0.0-rc5-next-20220914 #1
[ 129.493636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 129.493644] Call Trace:
[ 129.493648]
[ 129.493652] dump_stack_lvl+0x8b/0xb3
[ 129.493667] check_noncircular+0x263/0x2e0
[ 129.493683] ? format_decode+0x26c/0xb50
[ 129.493698] ? print_circular_bug+0x450/0x450
[ 129.493715] ? enable_ptr_key_workfn+0x20/0x20
[ 129.493730] ? format_decode+0x26c/0xb50
[ 129.493745] ? alloc_chain_hlocks+0x1ec/0x5a0
[ 129.493763] __lock_acquire+0x2a02/0x5e70
[ 129.493784] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 129.493806] lock_acquire+0x1a2/0x530
[ 129.493822] ? down_trylock+0xe/0x70
[ 129.493837] ? rcu_read_unlock+0x40/0x40
[ 129.493857] ? vprintk+0x84/0xa0
[ 129.493874] _raw_spin_lock_irqsave+0x39/0x60
[ 129.493890] ? down_trylock+0xe/0x70
[ 129.493903] down_trylock+0xe/0x70
[ 129.493916] ? vprintk+0x84/0xa0
[ 129.493933] __down_trylock_console_sem+0x3b/0xd0
[ 129.493950] vprintk_emit+0x16b/0x560
[ 129.493968] vprintk+0x84/0xa0
[ 129.493985] _printk+0xba/0xf1
[ 129.494002] ? record_print_text.cold+0x16/0x16
[ 129.494024] ? report_bug.cold+0x66/0xab
[ 129.494038] ? group_sched_out.part.0+0x2c7/0x460
[ 129.494049] report_bug.cold+0x72/0xab
[ 129.494064] handle_bug+0x3c/0x70
[ 129.494077] exc_invalid_op+0x14/0x50
[ 129.494092] asm_exc_invalid_op+0x16/0x20
[ 129.494108] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 129.494122] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 129.494134] RSP: 0018:ffff88801b44f8f8 EFLAGS: 00010006
[ 129.494143] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 129.494150] RDX: ffff88801b7cd040 RSI: ffffffff81566027 RDI: 0000000000000005
[ 129.494158] RBP: ffff88803f990000 R08: 0000000000000005 R09: 0000000000000001
[ 129.494166] R10: 0000000000000000 R11: ffffffff865ac05b R12: ffff888015fee400
[ 129.494173] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002
[ 129.494184] ? group_sched_out.part.0+0x2c7/0x460
[ 129.494197] ? group_sched_out.part.0+0x2c7/0x460
[ 129.494210] ctx_sched_out+0x8f1/0xc10
[ 129.494223] __perf_event_task_sched_out+0x6d0/0x18d0
[ 129.494238] ? lock_is_held_type+0xd7/0x130
[ 129.494257] ? __perf_cgroup_move+0x160/0x160
[ 129.494268] ? set_next_entity+0x304/0x550
[ 129.494288] ? lock_is_held_type+0xd7/0x130
[ 129.494306] __schedule+0xedd/0x2470
[ 129.494319] ? io_schedule_timeout+0x150/0x150
[ 129.494330] ? futex_wait_setup+0x166/0x230
[ 129.494344] schedule+0xda/0x1b0
[ 129.494356] futex_wait_queue+0xf5/0x1e0
[ 129.494368] futex_wait+0x28e/0x690
[ 129.494380] ? futex_wait_setup+0x230/0x230
[ 129.494393] ? wake_up_q+0x8b/0xf0
[ 129.494405] ? do_raw_spin_unlock+0x4f/0x220
[ 129.494425] ? futex_wake+0x158/0x490
[ 129.494440] ? fd_install+0x1f9/0x640
[ 129.494456] do_futex+0x2ff/0x380
[ 129.494467] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0
[ 129.494483] __x64_sys_futex+0x1c6/0x4d0
[ 129.494495] ? __x64_sys_futex_time32+0x480/0x480
[ 129.494508] ? syscall_enter_from_user_mode+0x1d/0x50
[ 129.494526] ? syscall_enter_from_user_mode+0x1d/0x50
[ 129.494545] do_syscall_64+0x3b/0x90
[ 129.494559] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 129.494577] RIP: 0033:0x7fb0b588cb19
[ 129.494585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 129.494596] RSP: 002b:00007fb0b2e02218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 129.494607] RAX: ffffffffffffffda RBX: 00007fb0b599ff68 RCX: 00007fb0b588cb19
[ 129.494615] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb0b599ff68
[ 129.494622] RBP: 00007fb0b599ff60 R08: 0000000000000000 R09: 0000000000000000
[ 129.494629] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb0b599ff6c
[ 129.494636] R13: 00007ffd6e59bdbf R14: 00007fb0b2e02300 R15: 0000000000022000
[ 129.494649]
[ 129.553312] WARNING: CPU: 1 PID: 3730 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[ 129.554014] Modules linked in:
[ 129.554262] CPU: 1 PID: 3730 Comm: syz-executor.4 Not tainted 6.0.0-rc5-next-20220914 #1
[ 129.554876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 129.555726] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 129.556139] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 129.557501] RSP: 0018:ffff88801b44f8f8 EFLAGS: 00010006
[ 129.557908] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 129.558454] RDX: ffff88801b7cd040 RSI: ffffffff81566027 RDI: 0000000000000005
[ 129.558986] RBP: ffff88803f990000 R08: 0000000000000005 R09: 0000000000000001
[ 129.559529] R10: 0000000000000000 R11: ffffffff865ac05b R12: ffff888015fee400
[ 129.560061] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002
[ 129.560601] FS: 00007fb0b2e02700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 129.561198] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 129.561647] CR2: 00007f4230420000 CR3: 0000000040352000 CR4: 0000000000350ee0
[ 129.562184] Call Trace:
[ 129.562377]
[ 129.562556] ctx_sched_out+0x8f1/0xc10
[ 129.562850] __perf_event_task_sched_out+0x6d0/0x18d0
[ 129.563247] ? lock_is_held_type+0xd7/0x130
[ 129.563585] ? __perf_cgroup_move+0x160/0x160
[ 129.563929] ? set_next_entity+0x304/0x550
[ 129.564262] ? lock_is_held_type+0xd7/0x130
[ 129.564606] __schedule+0xedd/0x2470
[ 129.564892] ? io_schedule_timeout+0x150/0x150
[ 129.565240] ? futex_wait_setup+0x166/0x230
[ 129.565581] schedule+0xda/0x1b0
[ 129.565842] futex_wait_queue+0xf5/0x1e0
[ 129.566134] futex_wait+0x28e/0x690
[ 129.566404] ? futex_wait_setup+0x230/0x230
[ 129.566719] ? wake_up_q+0x8b/0xf0
[ 129.566980] ? do_raw_spin_unlock+0x4f/0x220
[ 129.567306] ? futex_wake+0x158/0x490
[ 129.567587] ? fd_install+0x1f9/0x640
[ 129.567868] do_futex+0x2ff/0x380
[ 129.568122] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0
[ 129.568535] __x64_sys_futex+0x1c6/0x4d0
[ 129.568830] ? __x64_sys_futex_time32+0x480/0x480
[ 129.569173] ? syscall_enter_from_user_mode+0x1d/0x50
[ 129.569559] ? syscall_enter_from_user_mode+0x1d/0x50
[ 129.569933] do_syscall_64+0x3b/0x90
[ 129.570207] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 129.570580] RIP: 0033:0x7fb0b588cb19
[ 129.570847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 129.572108] RSP: 002b:00007fb0b2e02218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 129.572648] RAX: ffffffffffffffda RBX: 00007fb0b599ff68 RCX: 00007fb0b588cb19
[ 129.573146] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb0b599ff68
[ 129.573654] RBP: 00007fb0b599ff60 R08: 0000000000000000 R09: 0000000000000000
[ 129.574153] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb0b599ff6c
[ 129.574649] R13: 00007ffd6e59bdbf R14: 00007fb0b2e02300 R15: 0000000000022000
[ 129.575154]
[ 129.575327] irq event stamp: 1964
[ 129.575570] hardirqs last enabled at (1963): [] syscall_enter_from_user_mode+0x1d/0x50
[ 129.576242] hardirqs last disabled at (1964): [] __schedule+0x1225/0x2470
[ 129.576825] softirqs last enabled at (1730): [] __irq_exit_rcu+0x11b/0x180
[ 129.577447] softirqs last disabled at (1483): [] __irq_exit_rcu+0x11b/0x180
[ 129.578045] ---[ end trace 0000000000000000 ]---
[ 129.656055] Process accounting resumed
[ 129.682256] Process accounting resumed
12:38:01 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000000)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',\x00'])
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008})
epoll_wait(0xffffffffffffffff, &(0x7f0000000300)=[{}, {}, {}], 0x3, 0x5)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
acct(&(0x7f00000001c0)='./file1\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000340)={{0x101, 0x7}, 0x100, './file1\x00'})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x6, 0x0, 0x0, 0x0)
[ 129.752279] loop4: detected capacity change from 0 to 40
[ 129.771536] random: crng reseeded on system resumption
12:38:01 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r3 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ff9000/0x2000)=nil)
shmctl$SHM_UNLOCK(r3, 0xc)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
[ 129.852587] Process accounting resumed
[ 129.868572] random: crng reseeded on system resumption
12:38:01 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000000)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',\x00'])
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008})
epoll_wait(0xffffffffffffffff, &(0x7f0000000300)=[{}, {}, {}], 0x3, 0x5)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
acct(&(0x7f00000001c0)='./file1\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000340)={{0x101, 0x7}, 0x100, './file1\x00'})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x6, 0x0, 0x0, 0x0)
[ 129.912539] loop4: detected capacity change from 0 to 40
12:38:01 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r3 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ff9000/0x2000)=nil)
shmctl$SHM_UNLOCK(r3, 0xc)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
[ 129.980461] random: crng reseeded on system resumption
[ 130.023603] Process accounting resumed
12:38:01 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000000)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3d014f29ef99ad8b2ee6ab88d3ddf9f64fb3263bd7d202acf75f549842835dcf4ecacd3bf6ef28ae3dc96c80090000000000000094cfe0ef6c098e4367db36878fc3b3cf59362ed513ef778807b55fbb784c2941987cdeac0bcc06bf94cc37d1821115ee3b44d8118103b840f49b133f761bd39ea4534cef3295fdd2b9850de61d1d33bf176c9bd266a3439db7f00f2a5b7dd9968b77eb1d3d7fcdc768cab0e718cfee4ca51c9be3153d4bd300c66f66b04880d493e9c998204148f342e8caeb66cd0d13b3df034e229e03813a86ac8f5b647fa72c380c8d84991e911426038b286fa503c014586c32c0deaed9a5c0e46d7825993f5820b05770", @ANYRESHEX, @ANYBLOB=',\x00'])
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008})
epoll_wait(0xffffffffffffffff, &(0x7f0000000300)=[{}, {}, {}], 0x3, 0x5)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0)
acct(&(0x7f00000001c0)='./file1\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000340)={{0x101, 0x7}, 0x100, './file1\x00'})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x6, 0x0, 0x0, 0x0)
12:38:01 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r3 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ff9000/0x2000)=nil)
shmctl$SHM_UNLOCK(r3, 0xc)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
[ 130.077351] loop4: detected capacity change from 0 to 40
[ 130.116721] random: crng reseeded on system resumption
[ 130.156363] Process accounting resumed
12:38:01 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r3 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ff9000/0x2000)=nil)
shmctl$SHM_UNLOCK(r3, 0xc)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
12:38:01 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r3 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ff9000/0x2000)=nil)
shmctl$SHM_UNLOCK(r3, 0xc)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
[ 130.235725] random: crng reseeded on system resumption
[ 135.352833] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[ 135.354195] Bluetooth: hci4: Injecting HCI hardware error event
[ 135.355312] Bluetooth: hci4: hardware error 0x00
[ 136.248789] Bluetooth: hci5: Opcode 0x c03 failed: -110
[ 136.249948] Bluetooth: hci3: Opcode 0x c03 failed: -110
[ 137.400668] Bluetooth: hci4: Opcode 0x c03 failed: -110
VM DIAGNOSIS:
12:38:01 Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff84263457 RDX=ffffed100d9e6f99
RSI=0000000000000004 RDI=ffff88806cf37cc0 RBP=ffff88806cf37cc0 RSP=ffff888017d07a98
R8 =0000000000000000 R9 =ffff88806cf37cc3 R10=ffffed100d9e6f98 R11=0000000000000001
R12=0000000000000003 R13=ffffed100d9e6f98 R14=0000000000000001 R15=1ffff11002fa0f54
RIP=ffffffff842634d4 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f826ae838c0 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000000020002481 CR3=000000000eda0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM02=0000000000000000 0000000000000000 ffffffffffffffff 00000000000000ff
YMM03=0000000000000000 0000000000000000 696e656420737365 636341002f737973
YMM04=0000000000000000 0000000000000000 00005589e2be1400 00005589e2be13e0
YMM05=0000000000000000 0000000000000000 ffff000302030201 0000000000000002
YMM06=0000000000000000 0000000000000000 0000000100000000 00005589e2be13c0
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 7269762f73656369 7665642f7379732f
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b24f1 RDI=ffffffff87641b60 RBP=ffffffff87641b20 RSP=ffff88801b44f348
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000073 R11=0000000000000001
R12=0000000000000073 R13=ffffffff87641b20 R14=0000000000000010 R15=ffffffff822b24e0
RIP=ffffffff822b2549 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fb0b2e02700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4230420000 CR3=0000000040352000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 ff00000000ff0000 00000000000000ff
YMM01=0000000000000000 0000000000000000 2525252525252525 2525252525252525
YMM02=0000000000000000 0000000000000000 00007fb0b59737e0 00007fb0b59737c0
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000