syzkaller login: [ 43.968884] sshd (250) used greatest stack depth: 24520 bytes left Warning: Permanently added '[localhost]:47320' (ECDSA) to the list of known hosts. 2022/09/21 12:32:47 fuzzer started 2022/09/21 12:32:47 dialing manager at localhost:40289 [ 46.244452] cgroup: Unknown subsys name 'net' [ 46.366882] cgroup: Unknown subsys name 'rlimit' 2022/09/21 12:33:02 syscalls: 2215 2022/09/21 12:33:02 code coverage: enabled 2022/09/21 12:33:02 comparison tracing: enabled 2022/09/21 12:33:02 extra coverage: enabled 2022/09/21 12:33:02 setuid sandbox: enabled 2022/09/21 12:33:02 namespace sandbox: enabled 2022/09/21 12:33:02 Android sandbox: enabled 2022/09/21 12:33:02 fault injection: enabled 2022/09/21 12:33:02 leak checking: enabled 2022/09/21 12:33:02 net packet injection: enabled 2022/09/21 12:33:02 net device setup: enabled 2022/09/21 12:33:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/21 12:33:02 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/21 12:33:02 USB emulation: enabled 2022/09/21 12:33:02 hci packet injection: enabled 2022/09/21 12:33:02 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220921) 2022/09/21 12:33:02 802.15.4 emulation: enabled 2022/09/21 12:33:02 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/21 12:33:02 fetching corpus: 50, signal 31286/33731 (executing program) 2022/09/21 12:33:03 fetching corpus: 100, signal 44585/47207 (executing program) 2022/09/21 12:33:03 fetching corpus: 150, signal 51893/54658 (executing program) 2022/09/21 12:33:03 fetching corpus: 200, signal 58064/60908 (executing program) 2022/09/21 12:33:03 fetching corpus: 250, signal 63956/66540 (executing program) 2022/09/21 12:33:03 fetching corpus: 300, signal 67868/70271 (executing program) 2022/09/21 12:33:04 fetching corpus: 350, signal 71092/73209 (executing program) 2022/09/21 12:33:04 fetching corpus: 400, signal 74090/75815 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/77527 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/77687 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/77828 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/77975 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/78121 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/78266 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/78400 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/78526 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/78672 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/78829 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/78978 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/79119 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/79265 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/79419 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/79594 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/79730 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/79873 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/80010 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/80129 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/80251 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/80397 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/80549 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/80691 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/80831 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/80985 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/81121 (executing program) 2022/09/21 12:33:04 fetching corpus: 434, signal 76124/81263 (executing program) 2022/09/21 12:33:05 fetching corpus: 434, signal 76124/81395 (executing program) 2022/09/21 12:33:05 fetching corpus: 434, signal 76124/81526 (executing program) 2022/09/21 12:33:05 fetching corpus: 434, signal 76124/81639 (executing program) 2022/09/21 12:33:05 fetching corpus: 434, signal 76124/81639 (executing program) 2022/09/21 12:33:07 starting 8 fuzzer processes 12:33:07 executing program 0: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) add_key(&(0x7f0000000180)='pkcs7_test\x00', 0x0, &(0x7f0000000300), 0x0, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xa, r2, 0x2) fcntl$setown(r1, 0x8, 0x0) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0) sendfile(r1, r1, 0x0, 0x5f1) 12:33:07 executing program 1: syz_mount_image$iso9660(&(0x7f0000000a40), 0x0, 0x0, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="885cb2bf92f8573fdddb44beda1b7bfed1116995de57651f374691ee9aca31dc2d8179909bce38cd881b09db981df61aa2bb557cc514945bd306ced644eb0f837a", 0x41, 0xffffffffffffffc0}], 0x0, &(0x7f0000000bc0)) 12:33:07 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) close(r0) 12:33:07 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf}}) 12:33:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffffd}) 12:33:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0xa00) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x4000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e7d04259269e54037bbbe04a6543272733d7463702c706f72743d3078303030303030303030303030346532342c616669643d3078303030303030303030303030303030322c616669643d307830303030303030aadb6ae730303030342c6163636573733d7573655f747970653d2f70726f632f6c6f636b73002c726f6f74636f6e746578743d757365725f752c657569643d", @ANYRESDEC=0x0, @ANYBLOB=',obj_type=,rootcontext=staff_u,\x00']) 12:33:07 executing program 6: ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000400)=[{}, {}], 0x2, &(0x7f0000000440)={0x77359400}, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) epoll_pwait2(r0, &(0x7f00000004c0)=[{}, {}], 0x2, &(0x7f0000000500)={0x0, 0x989680}, &(0x7f0000000540), 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0) 12:33:07 executing program 7: syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "e81eaf", 0x20, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, {[@dstopts={0x0, 0x3, '\x00', [@calipso={0x7, 0x10, {0x0, 0x3, 0x0, 0x0, [0x0]}}, @jumbo]}]}}}}}, 0x0) [ 65.785908] audit: type=1400 audit(1663763587.520:6): avc: denied { execmem } for pid=292 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 67.058922] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.060648] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.081502] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.083130] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.085293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.086254] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.093640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.095117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.099294] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.100364] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.102404] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.107980] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.110072] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.111210] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.114435] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.115632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.116481] Bluetooth: hci0: HCI_REQ-0x0c1a [ 67.123917] Bluetooth: hci1: HCI_REQ-0x0c1a [ 67.124524] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.132926] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.134081] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.139313] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.143226] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.150254] Bluetooth: hci2: HCI_REQ-0x0c1a [ 67.153175] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.156651] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 67.158333] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 67.159638] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 67.163968] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 67.165348] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 67.166497] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 67.171323] Bluetooth: hci6: HCI_REQ-0x0c1a [ 67.194035] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.198116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.206663] Bluetooth: hci3: HCI_REQ-0x0c1a [ 67.221586] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 67.225060] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 67.226719] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 67.236158] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 67.268621] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 67.274646] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 67.289583] Bluetooth: hci7: HCI_REQ-0x0c1a [ 69.173247] Bluetooth: hci0: command 0x0409 tx timeout [ 69.173438] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 69.174216] Bluetooth: hci1: command 0x0409 tx timeout [ 69.175294] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 69.237453] Bluetooth: hci3: command 0x0409 tx timeout [ 69.239055] Bluetooth: hci2: command 0x0409 tx timeout [ 69.240393] Bluetooth: hci6: command 0x0409 tx timeout [ 69.301143] Bluetooth: hci7: command 0x0409 tx timeout [ 71.221097] Bluetooth: hci0: command 0x041b tx timeout [ 71.225224] Bluetooth: hci1: command 0x041b tx timeout [ 71.284924] Bluetooth: hci6: command 0x041b tx timeout [ 71.285478] Bluetooth: hci2: command 0x041b tx timeout [ 71.286380] Bluetooth: hci3: command 0x041b tx timeout [ 71.349943] Bluetooth: hci7: command 0x041b tx timeout [ 73.268892] Bluetooth: hci1: command 0x040f tx timeout [ 73.268922] Bluetooth: hci0: command 0x040f tx timeout [ 73.334381] Bluetooth: hci3: command 0x040f tx timeout [ 73.334411] Bluetooth: hci2: command 0x040f tx timeout [ 73.335847] Bluetooth: hci6: command 0x040f tx timeout [ 73.396930] Bluetooth: hci7: command 0x040f tx timeout [ 74.484966] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 74.487161] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 75.316874] Bluetooth: hci1: command 0x0419 tx timeout [ 75.318356] Bluetooth: hci0: command 0x0419 tx timeout [ 75.380907] Bluetooth: hci2: command 0x0419 tx timeout [ 75.382276] Bluetooth: hci6: command 0x0419 tx timeout [ 75.382793] Bluetooth: hci3: command 0x0419 tx timeout [ 75.445938] Bluetooth: hci7: command 0x0419 tx timeout [ 77.437379] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 77.441034] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 77.444042] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 77.491107] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 77.500033] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 77.504028] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 77.513913] Bluetooth: hci5: HCI_REQ-0x0c1a [ 79.348900] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 79.540911] Bluetooth: hci5: command 0x0409 tx timeout [ 81.588925] Bluetooth: hci5: command 0x041b tx timeout [ 83.636947] Bluetooth: hci5: command 0x040f tx timeout [ 84.020896] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 85.685883] Bluetooth: hci5: command 0x0419 tx timeout [ 86.760977] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.762660] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.763675] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.766926] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.768251] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.769208] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.772991] Bluetooth: hci4: HCI_REQ-0x0c1a [ 88.820930] Bluetooth: hci4: command 0x0409 tx timeout [ 90.868956] Bluetooth: hci4: command 0x041b tx timeout [ 92.917952] Bluetooth: hci4: command 0x040f tx timeout [ 94.966005] Bluetooth: hci4: command 0x0419 tx timeout [ 129.547378] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.556323] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.557679] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.569042] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.571123] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 129.572466] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.586103] Bluetooth: hci2: HCI_REQ-0x0c1a [ 129.681697] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 129.683129] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 129.685656] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.687656] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.689432] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.692119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.697201] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 129.698602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.703942] Bluetooth: hci3: HCI_REQ-0x0c1a [ 129.717774] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 129.728100] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 129.730436] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 129.733495] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 129.755271] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 129.756910] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 129.762289] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 129.762356] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 129.764112] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 129.764970] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 129.789949] Bluetooth: hci7: HCI_REQ-0x0c1a [ 129.813733] Bluetooth: hci6: HCI_REQ-0x0c1a [ 131.252949] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 131.445059] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 131.638008] Bluetooth: hci2: command 0x0409 tx timeout [ 131.764922] Bluetooth: hci3: command 0x0409 tx timeout [ 131.830118] Bluetooth: hci7: command 0x0409 tx timeout [ 131.892972] Bluetooth: hci6: command 0x0409 tx timeout [ 133.684945] Bluetooth: hci2: command 0x041b tx timeout [ 133.813944] Bluetooth: hci3: command 0x041b tx timeout [ 133.876979] Bluetooth: hci7: command 0x041b tx timeout [ 133.943914] Bluetooth: hci6: command 0x041b tx timeout [ 134.024309] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.031704] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 134.039280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 134.061042] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 134.087185] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 134.109269] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.122105] Bluetooth: hci0: HCI_REQ-0x0c1a [ 135.733892] Bluetooth: hci2: command 0x040f tx timeout [ 135.861953] Bluetooth: hci3: command 0x040f tx timeout [ 135.926111] Bluetooth: hci7: command 0x040f tx timeout [ 135.989926] Bluetooth: hci6: command 0x040f tx timeout [ 136.181892] Bluetooth: hci0: command 0x0409 tx timeout [ 136.246330] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 137.781868] Bluetooth: hci2: command 0x0419 tx timeout [ 137.910045] Bluetooth: hci3: command 0x0419 tx timeout [ 137.973926] Bluetooth: hci7: command 0x0419 tx timeout [ 138.037979] Bluetooth: hci6: command 0x0419 tx timeout [ 138.228914] Bluetooth: hci0: command 0x041b tx timeout [ 139.135605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 139.138008] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 139.139499] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 139.154046] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 139.156341] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 139.158744] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 139.218640] Bluetooth: hci5: HCI_REQ-0x0c1a [ 140.277144] Bluetooth: hci0: command 0x040f tx timeout [ 140.980905] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 141.239939] Bluetooth: hci5: command 0x0409 tx timeout [ 142.324936] Bluetooth: hci0: command 0x0419 tx timeout [ 143.284909] Bluetooth: hci5: command 0x041b tx timeout [ 143.671337] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 143.672946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 143.674052] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 143.676229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 143.677430] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 143.678351] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 143.713714] Bluetooth: hci1: HCI_REQ-0x0c1a [ 145.332877] Bluetooth: hci5: command 0x040f tx timeout [ 145.781671] Bluetooth: hci1: command 0x0409 tx timeout [ 147.380950] Bluetooth: hci5: command 0x0419 tx timeout [ 147.828911] Bluetooth: hci1: command 0x041b tx timeout [ 148.281156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.282953] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.283954] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.345760] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.380186] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 148.381575] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.417320] Bluetooth: hci4: HCI_REQ-0x0c1a [ 149.877028] Bluetooth: hci1: command 0x040f tx timeout [ 150.452997] Bluetooth: hci4: command 0x0409 tx timeout [ 151.925157] Bluetooth: hci1: command 0x0419 tx timeout [ 152.500941] Bluetooth: hci4: command 0x041b tx timeout [ 154.548873] Bluetooth: hci4: command 0x040f tx timeout [ 156.596919] Bluetooth: hci4: command 0x0419 tx timeout [ 191.422971] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.424544] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.425503] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.428334] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.429590] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 191.430720] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 191.440486] Bluetooth: hci2: HCI_REQ-0x0c1a [ 192.013703] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 192.015503] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 192.021139] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 192.024052] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 192.026016] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 192.027187] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 192.033329] Bluetooth: hci6: HCI_REQ-0x0c1a [ 192.160669] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 192.169751] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 192.172190] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 192.186321] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 192.187583] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 192.189192] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 192.219901] Bluetooth: hci7: HCI_REQ-0x0c1a [ 193.525096] Bluetooth: hci2: command 0x0409 tx timeout [ 193.844901] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 194.100906] Bluetooth: hci6: command 0x0409 tx timeout [ 194.228916] Bluetooth: hci7: command 0x0409 tx timeout [ 195.572885] Bluetooth: hci2: command 0x041b tx timeout [ 196.148937] Bluetooth: hci6: command 0x041b tx timeout [ 196.276983] Bluetooth: hci7: command 0x041b tx timeout [ 197.492976] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 197.620869] Bluetooth: hci2: command 0x040f tx timeout [ 198.196887] Bluetooth: hci6: command 0x040f tx timeout [ 198.324898] Bluetooth: hci7: command 0x040f tx timeout [ 198.452879] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 199.668885] Bluetooth: hci2: command 0x0419 tx timeout [ 199.997259] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.999991] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.001059] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.003695] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.005632] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 200.006706] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.012202] Bluetooth: hci0: HCI_REQ-0x0c1a [ 200.244912] Bluetooth: hci6: command 0x0419 tx timeout [ 200.373124] Bluetooth: hci7: command 0x0419 tx timeout [ 200.958689] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 200.974642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 200.990305] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 201.009791] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 201.031598] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 201.048473] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 201.075655] Bluetooth: hci5: HCI_REQ-0x0c1a [ 202.036908] Bluetooth: hci0: command 0x0409 tx timeout [ 202.484887] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 203.124935] Bluetooth: hci5: command 0x0409 tx timeout [ 204.084958] Bluetooth: hci0: command 0x041b tx timeout [ 205.173299] Bluetooth: hci5: command 0x041b tx timeout [ 205.183891] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.240160] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.246556] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.282064] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.295482] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 205.310423] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.327660] Bluetooth: hci1: HCI_REQ-0x0c1a [ 205.490860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.494025] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.504532] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.523708] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.534131] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 205.537646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 205.558918] Bluetooth: hci3: HCI_REQ-0x0c1a [ 206.132917] Bluetooth: hci0: command 0x040f tx timeout [ 207.220945] Bluetooth: hci5: command 0x040f tx timeout [ 207.348909] Bluetooth: hci1: command 0x0409 tx timeout [ 207.604908] Bluetooth: hci3: command 0x0409 tx timeout [ 208.181152] Bluetooth: hci0: command 0x0419 tx timeout [ 209.269670] Bluetooth: hci5: command 0x0419 tx timeout [ 209.396972] Bluetooth: hci1: command 0x041b tx timeout [ 209.652943] Bluetooth: hci3: command 0x041b tx timeout [ 209.849711] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.852506] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.853611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.858561] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.861583] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.872385] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.876053] Bluetooth: hci4: HCI_REQ-0x0c1a [ 211.444935] Bluetooth: hci1: command 0x040f tx timeout [ 211.700867] Bluetooth: hci3: command 0x040f tx timeout [ 211.892932] Bluetooth: hci4: command 0x0409 tx timeout [ 213.492935] Bluetooth: hci1: command 0x0419 tx timeout [ 213.748942] Bluetooth: hci3: command 0x0419 tx timeout [ 213.941063] Bluetooth: hci4: command 0x041b tx timeout [ 215.988882] Bluetooth: hci4: command 0x040f tx timeout [ 218.036930] Bluetooth: hci4: command 0x0419 tx timeout [ 253.394586] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.401403] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.411700] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.460681] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.465682] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 253.483665] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.491908] Bluetooth: hci2: HCI_REQ-0x0c1a [ 254.093751] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 254.101196] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 254.102878] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 254.105516] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 254.106925] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 254.108003] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 254.114920] Bluetooth: hci6: HCI_REQ-0x0c1a [ 254.239179] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 254.246479] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 254.258036] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 254.265400] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 254.272050] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 254.273273] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 254.279902] Bluetooth: hci7: HCI_REQ-0x0c1a [ 255.541922] Bluetooth: hci2: command 0x0409 tx timeout [ 256.181921] Bluetooth: hci6: command 0x0409 tx timeout [ 256.308906] Bluetooth: hci7: command 0x0409 tx timeout [ 257.588920] Bluetooth: hci2: command 0x041b tx timeout [ 258.228944] Bluetooth: hci6: command 0x041b tx timeout [ 258.357903] Bluetooth: hci7: command 0x041b tx timeout [ 259.636875] Bluetooth: hci2: command 0x040f tx timeout [ 260.277938] Bluetooth: hci6: command 0x040f tx timeout [ 260.404915] Bluetooth: hci7: command 0x040f tx timeout [ 261.685978] Bluetooth: hci2: command 0x0419 tx timeout [ 261.818049] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 261.820517] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 261.822927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 261.827724] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 261.838010] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 261.841446] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 261.909765] Bluetooth: hci0: HCI_REQ-0x0c1a [ 262.324905] Bluetooth: hci6: command 0x0419 tx timeout [ 262.453961] Bluetooth: hci7: command 0x0419 tx timeout [ 262.458687] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 262.461121] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 262.463237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 262.467139] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 262.469695] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 262.471847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 262.533326] Bluetooth: hci5: HCI_REQ-0x0c1a [ 263.988974] Bluetooth: hci0: command 0x0409 tx timeout [ 264.564996] Bluetooth: hci5: command 0x0409 tx timeout [ 266.036892] Bluetooth: hci0: command 0x041b tx timeout [ 266.614307] Bluetooth: hci5: command 0x041b tx timeout [ 266.776655] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 266.788854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 266.790554] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 266.793696] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 266.796018] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 266.797522] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 266.809497] Bluetooth: hci1: HCI_REQ-0x0c1a [ 267.080564] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 267.083638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 267.089220] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 267.104721] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 267.147990] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 267.155064] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 267.171083] Bluetooth: hci3: HCI_REQ-0x0c1a [ 268.084889] Bluetooth: hci0: command 0x040f tx timeout [ 268.660873] Bluetooth: hci5: command 0x040f tx timeout [ 268.853904] Bluetooth: hci1: command 0x0409 tx timeout [ 269.236927] Bluetooth: hci3: command 0x0409 tx timeout [ 270.132905] Bluetooth: hci0: command 0x0419 tx timeout [ 270.709521] Bluetooth: hci5: command 0x0419 tx timeout [ 270.900882] Bluetooth: hci1: command 0x041b tx timeout [ 271.285090] Bluetooth: hci3: command 0x041b tx timeout [ 271.356665] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.358299] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.364074] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.370739] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.376067] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.378039] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.386896] Bluetooth: hci4: HCI_REQ-0x0c1a [ 272.948880] Bluetooth: hci1: command 0x040f tx timeout [ 273.332882] Bluetooth: hci3: command 0x040f tx timeout [ 273.396975] Bluetooth: hci4: command 0x0409 tx timeout [ 274.996998] Bluetooth: hci1: command 0x0419 tx timeout [ 275.381871] Bluetooth: hci3: command 0x0419 tx timeout [ 275.445934] Bluetooth: hci4: command 0x041b tx timeout [ 277.493881] Bluetooth: hci4: command 0x040f tx timeout [ 279.551238] Bluetooth: hci4: command 0x0419 tx timeout [ 314.573188] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.587943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 314.599041] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 314.601960] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.603099] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 314.604238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 314.606822] Bluetooth: hci2: HCI_REQ-0x0c1a [ 315.512730] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 315.514473] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 315.516403] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 315.518472] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 315.520231] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 315.521399] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 315.523988] Bluetooth: hci7: HCI_REQ-0x0c1a [ 316.660899] Bluetooth: hci2: command 0x0409 tx timeout [ 317.428897] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 317.557895] Bluetooth: hci7: command 0x0409 tx timeout [ 318.708842] Bluetooth: hci2: command 0x041b tx timeout [ 319.604902] Bluetooth: hci7: command 0x041b tx timeout [ 319.840828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 319.844992] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 319.846621] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 319.859454] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 319.861706] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 319.864492] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 319.871375] Bluetooth: hci6: HCI_REQ-0x0c1a [ 320.756883] Bluetooth: hci2: command 0x040f tx timeout [ 321.652844] Bluetooth: hci7: command 0x040f tx timeout [ 321.908944] Bluetooth: hci6: command 0x0409 tx timeout [ 322.804894] Bluetooth: hci2: command 0x0419 tx timeout [ 323.596004] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 323.606590] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 323.610528] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 323.621016] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 323.629782] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 323.638231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 323.655897] Bluetooth: hci5: HCI_REQ-0x0c1a [ 323.700918] Bluetooth: hci7: command 0x0419 tx timeout [ 323.956873] Bluetooth: hci6: command 0x041b tx timeout 12:37:26 executing program 6: ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000400)=[{}, {}], 0x2, &(0x7f0000000440)={0x77359400}, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) epoll_pwait2(r0, &(0x7f00000004c0)=[{}, {}], 0x2, &(0x7f0000000500)={0x0, 0x989680}, &(0x7f0000000540), 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0) 12:37:26 executing program 6: ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000400)=[{}, {}], 0x2, &(0x7f0000000440)={0x77359400}, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) epoll_pwait2(r0, &(0x7f00000004c0)=[{}, {}], 0x2, &(0x7f0000000500)={0x0, 0x989680}, &(0x7f0000000540), 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0) [ 325.301018] Bluetooth: hci0: Opcode 0x c03 failed: -110 12:37:27 executing program 6: ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000400)=[{}, {}], 0x2, &(0x7f0000000440)={0x77359400}, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) epoll_pwait2(r0, &(0x7f00000004c0)=[{}, {}], 0x2, &(0x7f0000000500)={0x0, 0x989680}, &(0x7f0000000540), 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0) [ 325.685921] Bluetooth: hci5: command 0x0409 tx timeout 12:37:27 executing program 6: ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000400)=[{}, {}], 0x2, &(0x7f0000000440)={0x77359400}, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) epoll_pwait2(r0, &(0x7f00000004c0)=[{}, {}], 0x2, &(0x7f0000000500)={0x0, 0x989680}, &(0x7f0000000540), 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0) 12:37:27 executing program 6: ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000400)=[{}, {}], 0x2, &(0x7f0000000440)={0x77359400}, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) epoll_pwait2(r0, &(0x7f00000004c0)=[{}, {}], 0x2, &(0x7f0000000500)={0x0, 0x989680}, &(0x7f0000000540), 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0) [ 326.005890] Bluetooth: hci6: command 0x040f tx timeout 12:37:27 executing program 6: ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000400)=[{}, {}], 0x2, &(0x7f0000000440)={0x77359400}, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) epoll_pwait2(r0, &(0x7f00000004c0)=[{}, {}], 0x2, &(0x7f0000000500)={0x0, 0x989680}, &(0x7f0000000540), 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0) 12:37:28 executing program 6: ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000400)=[{}, {}], 0x2, &(0x7f0000000440)={0x77359400}, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) epoll_pwait2(r0, &(0x7f00000004c0)=[{}, {}], 0x2, &(0x7f0000000500)={0x0, 0x989680}, &(0x7f0000000540), 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0) 12:37:28 executing program 6: ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000400)=[{}, {}], 0x2, &(0x7f0000000440)={0x77359400}, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) epoll_pwait2(r0, &(0x7f00000004c0)=[{}, {}], 0x2, &(0x7f0000000500)={0x0, 0x989680}, &(0x7f0000000540), 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0) [ 327.732850] Bluetooth: hci5: command 0x041b tx timeout [ 328.052899] Bluetooth: hci6: command 0x0419 tx timeout [ 328.124888] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 328.126606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 328.127374] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 328.129372] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 328.130419] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 328.131192] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 328.133859] Bluetooth: hci0: HCI_REQ-0x0c1a [ 328.568400] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 328.569422] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 328.571600] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 328.573697] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 328.575388] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 328.577396] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 328.585860] Bluetooth: hci3: HCI_REQ-0x0c1a [ 329.780884] Bluetooth: hci5: command 0x040f tx timeout [ 330.165906] Bluetooth: hci0: command 0x0409 tx timeout [ 330.612947] Bluetooth: hci3: command 0x0409 tx timeout [ 331.828928] Bluetooth: hci5: command 0x0419 tx timeout [ 332.212872] Bluetooth: hci0: command 0x041b tx timeout [ 332.505275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 332.506360] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 332.507829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 332.510455] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.511874] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 332.513419] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.518839] Bluetooth: hci4: HCI_REQ-0x0c1a [ 332.660927] Bluetooth: hci3: command 0x041b tx timeout [ 334.261940] Bluetooth: hci0: command 0x040f tx timeout [ 334.581930] Bluetooth: hci4: command 0x0409 tx timeout [ 334.709850] Bluetooth: hci3: command 0x040f tx timeout [ 336.308845] Bluetooth: hci0: command 0x0419 tx timeout [ 336.628876] Bluetooth: hci4: command 0x041b tx timeout [ 336.756881] Bluetooth: hci3: command 0x0419 tx timeout [ 338.677944] Bluetooth: hci4: command 0x040f tx timeout [ 340.724851] Bluetooth: hci4: command 0x0419 tx timeout [ 359.271767] audit: type=1400 audit(1663763881.006:7): avc: denied { open } for pid=14852 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 359.273888] audit: type=1400 audit(1663763881.006:8): avc: denied { kernel } for pid=14852 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 359.284318] ------------[ cut here ]------------ [ 359.284341] [ 359.284345] ====================================================== [ 359.284349] WARNING: possible circular locking dependency detected [ 359.284354] 6.0.0-rc6-next-20220921 #1 Not tainted [ 359.284360] ------------------------------------------------------ [ 359.284364] syz-executor.5/14854 is trying to acquire lock: [ 359.284371] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 359.284415] [ 359.284415] but task is already holding lock: [ 359.284419] ffff888009adb020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 359.284449] [ 359.284449] which lock already depends on the new lock. [ 359.284449] [ 359.284452] [ 359.284452] the existing dependency chain (in reverse order) is: [ 359.284456] [ 359.284456] -> #3 (&ctx->lock){....}-{2:2}: [ 359.284471] _raw_spin_lock+0x2a/0x40 [ 359.284491] __perf_event_task_sched_out+0x53b/0x18d0 [ 359.284504] __schedule+0xedd/0x2470 [ 359.284518] schedule+0xda/0x1b0 [ 359.284531] exit_to_user_mode_prepare+0x114/0x1a0 [ 359.284544] syscall_exit_to_user_mode+0x19/0x40 [ 359.284556] do_syscall_64+0x48/0x90 [ 359.284576] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 359.284588] [ 359.284588] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 359.284602] _raw_spin_lock_nested+0x30/0x40 [ 359.284624] raw_spin_rq_lock_nested+0x1e/0x30 [ 359.284639] task_fork_fair+0x63/0x4d0 [ 359.284657] sched_cgroup_fork+0x3d0/0x540 [ 359.284673] copy_process+0x4183/0x6e20 [ 359.284684] kernel_clone+0xe7/0x890 [ 359.284694] user_mode_thread+0xad/0xf0 [ 359.284705] rest_init+0x24/0x250 [ 359.284717] arch_call_rest_init+0xf/0x14 [ 359.284735] start_kernel+0x4c1/0x4e6 [ 359.284749] secondary_startup_64_no_verify+0xe0/0xeb [ 359.284765] [ 359.284765] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 359.284779] _raw_spin_lock_irqsave+0x39/0x60 [ 359.284799] try_to_wake_up+0xab/0x1930 [ 359.284816] up+0x75/0xb0 [ 359.284831] __up_console_sem+0x6e/0x80 [ 359.284849] console_unlock+0x46a/0x590 [ 359.284866] do_con_write+0xc05/0x1d50 [ 359.284879] con_write+0x21/0x40 [ 359.284890] n_tty_write+0x4d4/0xfe0 [ 359.284904] file_tty_write.constprop.0+0x49c/0x8f0 [ 359.284918] vfs_write+0x9c3/0xd90 [ 359.284938] ksys_write+0x127/0x250 [ 359.284958] do_syscall_64+0x3b/0x90 [ 359.284975] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 359.284987] [ 359.284987] -> #0 ((console_sem).lock){....}-{2:2}: [ 359.285002] __lock_acquire+0x2a02/0x5e70 [ 359.285021] lock_acquire+0x1a2/0x530 [ 359.285038] _raw_spin_lock_irqsave+0x39/0x60 [ 359.285058] down_trylock+0xe/0x70 [ 359.285073] __down_trylock_console_sem+0x3b/0xd0 [ 359.285091] vprintk_emit+0x16b/0x560 [ 359.285110] vprintk+0x84/0xa0 [ 359.285127] _printk+0xba/0xf1 [ 359.285139] report_bug.cold+0x72/0xab [ 359.285156] handle_bug+0x3c/0x70 [ 359.285173] exc_invalid_op+0x14/0x50 [ 359.285190] asm_exc_invalid_op+0x16/0x20 [ 359.285202] group_sched_out.part.0+0x2c7/0x460 [ 359.285213] ctx_sched_out+0x8f1/0xc10 [ 359.285224] __perf_event_task_sched_out+0x6d0/0x18d0 [ 359.285237] __schedule+0xedd/0x2470 [ 359.285251] schedule+0xda/0x1b0 [ 359.285264] exit_to_user_mode_prepare+0x114/0x1a0 [ 359.285276] syscall_exit_to_user_mode+0x19/0x40 [ 359.285288] do_syscall_64+0x48/0x90 [ 359.285305] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 359.285317] [ 359.285317] other info that might help us debug this: [ 359.285317] [ 359.285320] Chain exists of: [ 359.285320] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 359.285320] [ 359.285336] Possible unsafe locking scenario: [ 359.285336] [ 359.285338] CPU0 CPU1 [ 359.285341] ---- ---- [ 359.285343] lock(&ctx->lock); [ 359.285349] lock(&rq->__lock); [ 359.285357] lock(&ctx->lock); [ 359.285363] lock((console_sem).lock); [ 359.285369] [ 359.285369] *** DEADLOCK *** [ 359.285369] [ 359.285372] 2 locks held by syz-executor.5/14854: [ 359.285379] #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 359.285410] #1: ffff888009adb020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 359.285440] [ 359.285440] stack backtrace: [ 359.285443] CPU: 1 PID: 14854 Comm: syz-executor.5 Not tainted 6.0.0-rc6-next-20220921 #1 [ 359.285457] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 359.285466] Call Trace: [ 359.285469] [ 359.285474] dump_stack_lvl+0x8b/0xb3 [ 359.285492] check_noncircular+0x263/0x2e0 [ 359.285511] ? format_decode+0x26c/0xb50 [ 359.285528] ? print_circular_bug+0x450/0x450 [ 359.285548] ? enable_ptr_key_workfn+0x20/0x20 [ 359.285565] ? format_decode+0x26c/0xb50 [ 359.285582] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 359.285602] __lock_acquire+0x2a02/0x5e70 [ 359.285625] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 359.285649] lock_acquire+0x1a2/0x530 [ 359.285668] ? down_trylock+0xe/0x70 [ 359.285686] ? lock_release+0x750/0x750 [ 359.285708] ? vprintk+0x84/0xa0 [ 359.285728] _raw_spin_lock_irqsave+0x39/0x60 [ 359.285748] ? down_trylock+0xe/0x70 [ 359.285764] down_trylock+0xe/0x70 [ 359.285780] ? vprintk+0x84/0xa0 [ 359.285799] __down_trylock_console_sem+0x3b/0xd0 [ 359.285818] vprintk_emit+0x16b/0x560 [ 359.285839] vprintk+0x84/0xa0 [ 359.285858] _printk+0xba/0xf1 [ 359.285869] ? record_print_text.cold+0x16/0x16 [ 359.285885] ? report_bug.cold+0x66/0xab [ 359.285904] ? group_sched_out.part.0+0x2c7/0x460 [ 359.285916] report_bug.cold+0x72/0xab [ 359.285935] handle_bug+0x3c/0x70 [ 359.285953] exc_invalid_op+0x14/0x50 [ 359.285972] asm_exc_invalid_op+0x16/0x20 [ 359.285984] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 359.285998] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 2b 12 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 359.286010] RSP: 0018:ffff88802c957c48 EFLAGS: 00010006 [ 359.286020] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 359.286028] RDX: ffff888034201ac0 RSI: ffffffff815663a7 RDI: 0000000000000005 [ 359.286036] RBP: ffff88801eaa8000 R08: 0000000000000005 R09: 0000000000000001 [ 359.286044] R10: 0000000000000000 R11: ffffffff865b005b R12: ffff888009adb000 [ 359.286053] R13: ffff88806cf3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 359.286065] ? group_sched_out.part.0+0x2c7/0x460 [ 359.286078] ? group_sched_out.part.0+0x2c7/0x460 [ 359.286092] ctx_sched_out+0x8f1/0xc10 [ 359.286105] __perf_event_task_sched_out+0x6d0/0x18d0 [ 359.286122] ? lock_is_held_type+0xd7/0x130 [ 359.286135] ? __perf_cgroup_move+0x160/0x160 [ 359.286148] ? set_next_entity+0x304/0x550 [ 359.286167] ? update_curr+0x267/0x740 [ 359.286188] ? lock_is_held_type+0xd7/0x130 [ 359.286201] __schedule+0xedd/0x2470 [ 359.286218] ? io_schedule_timeout+0x150/0x150 [ 359.286235] ? rcu_read_lock_sched_held+0x3e/0x80 [ 359.286257] schedule+0xda/0x1b0 [ 359.286272] exit_to_user_mode_prepare+0x114/0x1a0 [ 359.286285] syscall_exit_to_user_mode+0x19/0x40 [ 359.286298] do_syscall_64+0x48/0x90 [ 359.286316] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 359.286329] RIP: 0033:0x7febca939b19 [ 359.286338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 359.286349] RSP: 002b:00007febc7eaf218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 359.286361] RAX: 0000000000000001 RBX: 00007febcaa4cf68 RCX: 00007febca939b19 [ 359.286369] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007febcaa4cf6c [ 359.286377] RBP: 00007febcaa4cf60 R08: 000000000000000e R09: 0000000000000000 [ 359.286384] R10: 0000000000000003 R11: 0000000000000246 R12: 00007febcaa4cf6c [ 359.286400] R13: 00007ffd1008349f R14: 00007febc7eaf300 R15: 0000000000022000 [ 359.286414] [ 359.344204] WARNING: CPU: 1 PID: 14854 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 359.344897] Modules linked in: [ 359.345147] CPU: 1 PID: 14854 Comm: syz-executor.5 Not tainted 6.0.0-rc6-next-20220921 #1 [ 359.345761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 359.346646] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 359.347059] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 2b 12 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 359.348424] RSP: 0018:ffff88802c957c48 EFLAGS: 00010006 [ 359.348832] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 359.349368] RDX: ffff888034201ac0 RSI: ffffffff815663a7 RDI: 0000000000000005 [ 359.349915] RBP: ffff88801eaa8000 R08: 0000000000000005 R09: 0000000000000001 [ 359.350466] R10: 0000000000000000 R11: ffffffff865b005b R12: ffff888009adb000 [ 359.351008] R13: ffff88806cf3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 359.351545] FS: 00007febc7eaf700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 359.352165] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.352612] CR2: 00007ff04c5991f0 CR3: 00000000359a2000 CR4: 0000000000350ee0 [ 359.353165] Call Trace: [ 359.353375] [ 359.353550] ctx_sched_out+0x8f1/0xc10 [ 359.353859] __perf_event_task_sched_out+0x6d0/0x18d0 [ 359.354259] ? lock_is_held_type+0xd7/0x130 [ 359.354608] ? __perf_cgroup_move+0x160/0x160 [ 359.354970] ? set_next_entity+0x304/0x550 [ 359.355299] ? update_curr+0x267/0x740 [ 359.355605] ? lock_is_held_type+0xd7/0x130 [ 359.355945] __schedule+0xedd/0x2470 [ 359.356243] ? io_schedule_timeout+0x150/0x150 [ 359.356595] ? rcu_read_lock_sched_held+0x3e/0x80 [ 359.356986] schedule+0xda/0x1b0 [ 359.357259] exit_to_user_mode_prepare+0x114/0x1a0 [ 359.357636] syscall_exit_to_user_mode+0x19/0x40 [ 359.358012] do_syscall_64+0x48/0x90 [ 359.358333] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 359.358755] RIP: 0033:0x7febca939b19 [ 359.359056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 359.360495] RSP: 002b:00007febc7eaf218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 359.361094] RAX: 0000000000000001 RBX: 00007febcaa4cf68 RCX: 00007febca939b19 [ 359.361652] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007febcaa4cf6c [ 359.362216] RBP: 00007febcaa4cf60 R08: 000000000000000e R09: 0000000000000000 [ 359.362764] R10: 0000000000000003 R11: 0000000000000246 R12: 00007febcaa4cf6c [ 359.363308] R13: 00007ffd1008349f R14: 00007febc7eaf300 R15: 0000000000022000 [ 359.363865] [ 359.364052] irq event stamp: 834 [ 359.364318] hardirqs last enabled at (833): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 359.365029] hardirqs last disabled at (834): [] __schedule+0x1225/0x2470 [ 359.365668] softirqs last enabled at (822): [] __irq_exit_rcu+0x11b/0x180 [ 359.366325] softirqs last disabled at (681): [] __irq_exit_rcu+0x11b/0x180 [ 359.366998] ---[ end trace 0000000000000000 ]--- [ 359.620598] 9pnet_virtio: no channels available for device 127.0.0.1 [ 359.646972] 9pnet_virtio: no channels available for device 127.0.0.1 [ 364.873955] loop1: detected capacity change from 0 to 16383 [ 364.878912] loop1: detected capacity change from 0 to 16383 [ 365.282804] hrtimer: interrupt took 22623 ns 12:38:08 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) close(r0) 12:38:08 executing program 6: ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000400)=[{}, {}], 0x2, &(0x7f0000000440)={0x77359400}, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) epoll_pwait2(r0, &(0x7f00000004c0)=[{}, {}], 0x2, &(0x7f0000000500)={0x0, 0x989680}, &(0x7f0000000540), 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0) 12:38:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0xa00) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x4000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e7d04259269e54037bbbe04a6543272733d7463702c706f72743d3078303030303030303030303030346532342c616669643d3078303030303030303030303030303030322c616669643d307830303030303030aadb6ae730303030342c6163636573733d7573655f747970653d2f70726f632f6c6f636b73002c726f6f74636f6e746578743d757365725f752c657569643d", @ANYRESDEC=0x0, @ANYBLOB=',obj_type=,rootcontext=staff_u,\x00']) 12:38:08 executing program 7: syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "e81eaf", 0x20, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, {[@dstopts={0x0, 0x3, '\x00', [@calipso={0x7, 0x10, {0x0, 0x3, 0x0, 0x0, [0x0]}}, @jumbo]}]}}}}}, 0x0) 12:38:08 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf}}) 12:38:08 executing program 1: syz_mount_image$iso9660(&(0x7f0000000a40), 0x0, 0x0, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="885cb2bf92f8573fdddb44beda1b7bfed1116995de57651f374691ee9aca31dc2d8179909bce38cd881b09db981df61aa2bb557cc514945bd306ced644eb0f837a", 0x41, 0xffffffffffffffc0}], 0x0, &(0x7f0000000bc0)) 12:38:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffffd}) 12:38:08 executing program 0: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) add_key(&(0x7f0000000180)='pkcs7_test\x00', 0x0, &(0x7f0000000300), 0x0, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xa, r2, 0x2) fcntl$setown(r1, 0x8, 0x0) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0) sendfile(r1, r1, 0x0, 0x5f1) [ 366.752686] loop1: detected capacity change from 0 to 16383 12:38:08 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf}}) 12:38:08 executing program 7: syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "e81eaf", 0x20, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, {[@dstopts={0x0, 0x3, '\x00', [@calipso={0x7, 0x10, {0x0, 0x3, 0x0, 0x0, [0x0]}}, @jumbo]}]}}}}}, 0x0) 12:38:08 executing program 6: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) add_key(&(0x7f0000000180)='pkcs7_test\x00', 0x0, &(0x7f0000000300), 0x0, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xa, r2, 0x2) fcntl$setown(r1, 0x8, 0x0) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0) sendfile(r1, r1, 0x0, 0x5f1) 12:38:08 executing program 1: syz_mount_image$iso9660(&(0x7f0000000a40), 0x0, 0x0, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="885cb2bf92f8573fdddb44beda1b7bfed1116995de57651f374691ee9aca31dc2d8179909bce38cd881b09db981df61aa2bb557cc514945bd306ced644eb0f837a", 0x41, 0xffffffffffffffc0}], 0x0, &(0x7f0000000bc0)) [ 366.955171] loop1: detected capacity change from 0 to 16383 [ 367.239450] 9pnet_virtio: no channels available for device 127.0.0.1 12:38:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) close(r0) 12:38:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffffd}) 12:38:09 executing program 0: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) add_key(&(0x7f0000000180)='pkcs7_test\x00', 0x0, &(0x7f0000000300), 0x0, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xa, r2, 0x2) fcntl$setown(r1, 0x8, 0x0) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0) sendfile(r1, r1, 0x0, 0x5f1) 12:38:09 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf}}) 12:38:09 executing program 7: syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "e81eaf", 0x20, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, {[@dstopts={0x0, 0x3, '\x00', [@calipso={0x7, 0x10, {0x0, 0x3, 0x0, 0x0, [0x0]}}, @jumbo]}]}}}}}, 0x0) 12:38:09 executing program 1: syz_mount_image$iso9660(&(0x7f0000000a40), 0x0, 0x0, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="885cb2bf92f8573fdddb44beda1b7bfed1116995de57651f374691ee9aca31dc2d8179909bce38cd881b09db981df61aa2bb557cc514945bd306ced644eb0f837a", 0x41, 0xffffffffffffffc0}], 0x0, &(0x7f0000000bc0)) 12:38:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0xa00) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x4000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e7d04259269e54037bbbe04a6543272733d7463702c706f72743d3078303030303030303030303030346532342c616669643d3078303030303030303030303030303030322c616669643d307830303030303030aadb6ae730303030342c6163636573733d7573655f747970653d2f70726f632f6c6f636b73002c726f6f74636f6e746578743d757365725f752c657569643d", @ANYRESDEC=0x0, @ANYBLOB=',obj_type=,rootcontext=staff_u,\x00']) 12:38:09 executing program 6: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) add_key(&(0x7f0000000180)='pkcs7_test\x00', 0x0, &(0x7f0000000300), 0x0, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xa, r2, 0x2) fcntl$setown(r1, 0x8, 0x0) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0) sendfile(r1, r1, 0x0, 0x5f1) [ 367.422119] loop1: detected capacity change from 0 to 16383 [ 367.898458] 9pnet_virtio: no channels available for device 127.0.0.1 12:38:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffffd}) 12:38:10 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) close(r0) 12:38:10 executing program 3: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) add_key(&(0x7f0000000180)='pkcs7_test\x00', 0x0, &(0x7f0000000300), 0x0, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xa, r2, 0x2) fcntl$setown(r1, 0x8, 0x0) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0) sendfile(r1, r1, 0x0, 0x5f1) 12:38:10 executing program 1: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) add_key(&(0x7f0000000180)='pkcs7_test\x00', 0x0, &(0x7f0000000300), 0x0, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xa, r2, 0x2) fcntl$setown(r1, 0x8, 0x0) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0) sendfile(r1, r1, 0x0, 0x5f1) 12:38:10 executing program 0: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) add_key(&(0x7f0000000180)='pkcs7_test\x00', 0x0, &(0x7f0000000300), 0x0, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xa, r2, 0x2) fcntl$setown(r1, 0x8, 0x0) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0) sendfile(r1, r1, 0x0, 0x5f1) 12:38:10 executing program 6: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) add_key(&(0x7f0000000180)='pkcs7_test\x00', 0x0, &(0x7f0000000300), 0x0, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xa, r2, 0x2) fcntl$setown(r1, 0x8, 0x0) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0) sendfile(r1, r1, 0x0, 0x5f1) 12:38:10 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0xa00) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x4000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e7d04259269e54037bbbe04a6543272733d7463702c706f72743d3078303030303030303030303030346532342c616669643d3078303030303030303030303030303030322c616669643d307830303030303030aadb6ae730303030342c6163636573733d7573655f747970653d2f70726f632f6c6f636b73002c726f6f74636f6e746578743d757365725f752c657569643d", @ANYRESDEC=0x0, @ANYBLOB=',obj_type=,rootcontext=staff_u,\x00']) 12:38:10 executing program 7: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) add_key(&(0x7f0000000180)='pkcs7_test\x00', 0x0, &(0x7f0000000300), 0x0, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xa, r2, 0x2) fcntl$setown(r1, 0x8, 0x0) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0) sendfile(r1, r1, 0x0, 0x5f1) 12:38:10 executing program 2: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) add_key(&(0x7f0000000180)='pkcs7_test\x00', 0x0, &(0x7f0000000300), 0x0, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xa, r2, 0x2) fcntl$setown(r1, 0x8, 0x0) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0) sendfile(r1, r1, 0x0, 0x5f1) 12:38:10 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) add_key(&(0x7f0000000180)='pkcs7_test\x00', 0x0, &(0x7f0000000300), 0x0, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xa, r2, 0x2) fcntl$setown(r1, 0x8, 0x0) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0) sendfile(r1, r1, 0x0, 0x5f1) [ 368.489965] syz-executor.1 (15536) used greatest stack depth: 24360 bytes left [ 368.575257] 9pnet_virtio: no channels available for device 127.0.0.1 12:38:10 executing program 1: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) add_key(&(0x7f0000000180)='pkcs7_test\x00', 0x0, &(0x7f0000000300), 0x0, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xa, r2, 0x2) fcntl$setown(r1, 0x8, 0x0) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0) sendfile(r1, r1, 0x0, 0x5f1) 12:38:10 executing program 3: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) add_key(&(0x7f0000000180)='pkcs7_test\x00', 0x0, &(0x7f0000000300), 0x0, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xa, r2, 0x2) fcntl$setown(r1, 0x8, 0x0) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0) sendfile(r1, r1, 0x0, 0x5f1) 12:38:10 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) close(r0) 12:38:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0xa00) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x4000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e7d04259269e54037bbbe04a6543272733d7463702c706f72743d3078303030303030303030303030346532342c616669643d3078303030303030303030303030303030322c616669643d307830303030303030aadb6ae730303030342c6163636573733d7573655f747970653d2f70726f632f6c6f636b73002c726f6f74636f6e746578743d757365725f752c657569643d", @ANYRESDEC=0x0, @ANYBLOB=',obj_type=,rootcontext=staff_u,\x00']) VM DIAGNOSIS: 12:38:02 Registers: info registers vcpu 0 RAX=0000000080000001 RBX=0000000000000000 RCX=ffffffff840f2dec RDX=0000000000000000 RSI=0000000000000300 RDI=0000000000000005 RBP=ffff88803d0f4e50 RSP=ffff888038f57ad0 R8 =0000000000000005 R9 =0000000000000300 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000003 R14=1ffffffff09c0118 R15=dffffc0000000000 RIP=ffffffff81461890 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5da82e46f4 CR3=0000000005226000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f5da82f3470 00007f5da82f2f20 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 756e20796d6d7564 20736e6f6974706f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 73253d656d616e6c 6165722073253d73 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1c91 RDI=ffffffff87645ba0 RBP=ffffffff87645b60 RSP=ffff88802c957698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000030 R11=0000000000000001 R12=0000000000000030 R13=ffffffff87645b60 R14=0000000000000010 R15=ffffffff822b1c80 RIP=ffffffff822b1ce9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007febc7eaf700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff04c5991f0 CR3=00000000359a2000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007febcaa207c0 00007febcaa207c8 YMM02=0000000000000000 0000000000000000 00007febcaa207e0 00007febcaa207c0 YMM03=0000000000000000 0000000000000000 00007febcaa207c8 00007febcaa207c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000