Warning: Permanently added '[localhost]:58467' (ECDSA) to the list of known hosts. 2022/09/21 12:52:17 fuzzer started 2022/09/21 12:52:17 dialing manager at localhost:40289 syzkaller login: [ 45.794906] cgroup: Unknown subsys name 'net' [ 45.916136] cgroup: Unknown subsys name 'rlimit' 2022/09/21 12:52:32 syscalls: 2215 2022/09/21 12:52:32 code coverage: enabled 2022/09/21 12:52:32 comparison tracing: enabled 2022/09/21 12:52:32 extra coverage: enabled 2022/09/21 12:52:32 setuid sandbox: enabled 2022/09/21 12:52:32 namespace sandbox: enabled 2022/09/21 12:52:32 Android sandbox: enabled 2022/09/21 12:52:32 fault injection: enabled 2022/09/21 12:52:32 leak checking: enabled 2022/09/21 12:52:32 net packet injection: enabled 2022/09/21 12:52:32 net device setup: enabled 2022/09/21 12:52:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/21 12:52:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/21 12:52:32 USB emulation: enabled 2022/09/21 12:52:32 hci packet injection: enabled 2022/09/21 12:52:32 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220921) 2022/09/21 12:52:32 802.15.4 emulation: enabled 2022/09/21 12:52:32 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/21 12:52:32 fetching corpus: 42, signal 23546/26714 (executing program) 2022/09/21 12:52:32 fetching corpus: 91, signal 39376/43280 (executing program) 2022/09/21 12:52:32 fetching corpus: 141, signal 50169/54675 (executing program) 2022/09/21 12:52:32 fetching corpus: 191, signal 58192/63055 (executing program) 2022/09/21 12:52:33 fetching corpus: 241, signal 63875/69104 (executing program) 2022/09/21 12:52:33 fetching corpus: 291, signal 69539/74944 (executing program) 2022/09/21 12:52:33 fetching corpus: 341, signal 72598/78313 (executing program) 2022/09/21 12:52:33 fetching corpus: 391, signal 77658/83345 (executing program) 2022/09/21 12:52:33 fetching corpus: 441, signal 81800/87419 (executing program) 2022/09/21 12:52:33 fetching corpus: 491, signal 84499/90202 (executing program) 2022/09/21 12:52:34 fetching corpus: 541, signal 88263/93656 (executing program) 2022/09/21 12:52:34 fetching corpus: 591, signal 90848/96306 (executing program) 2022/09/21 12:52:34 fetching corpus: 641, signal 93432/98695 (executing program) 2022/09/21 12:52:34 fetching corpus: 691, signal 95698/100696 (executing program) 2022/09/21 12:52:34 fetching corpus: 741, signal 96961/101937 (executing program) 2022/09/21 12:52:34 fetching corpus: 791, signal 99256/103859 (executing program) 2022/09/21 12:52:34 fetching corpus: 840, signal 101662/105734 (executing program) 2022/09/21 12:52:35 fetching corpus: 890, signal 103268/107020 (executing program) 2022/09/21 12:52:35 fetching corpus: 940, signal 105449/108683 (executing program) 2022/09/21 12:52:35 fetching corpus: 990, signal 108359/110816 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/111359 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/111483 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/111604 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/111730 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/111843 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/111927 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/112029 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/112153 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/112253 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/112357 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/112479 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/112588 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/112694 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/112778 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/112889 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/112987 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/113089 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/113210 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/113310 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/113408 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/113511 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/113595 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/113701 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/113811 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/113909 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/113998 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/114098 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/114209 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/114308 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/114414 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/114508 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/114611 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/114660 (executing program) 2022/09/21 12:52:35 fetching corpus: 1019, signal 108996/114660 (executing program) 2022/09/21 12:52:38 starting 8 fuzzer processes 12:52:38 executing program 0: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) 12:52:38 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xe7, 0x4) sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x2}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="00030000001b00fbe3d94c9c1e303aeb14283fcadf56eea4baccca62db9e", 0x1e}], 0x1}}], 0x1, 0x0) 12:52:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x8993, &(0x7f0000000540)={'syztnl1\x00', 0x0}) 12:52:38 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x4c58, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x6975, &(0x7f0000000540), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) [ 66.561547] audit: type=1400 audit(1663764758.736:6): avc: denied { execmem } for pid=289 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:52:38 executing program 5: read$ptp(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2000) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000300), 0x10dc00, 0x0) ioctl$CDROMREADMODE1(r0, 0x530d, 0x0) 12:52:38 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f0000000180)={[{@i_version}]}) 12:52:38 executing program 3: openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20082, 0x0) 12:52:38 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d72f5eeb6a088740740c2c066fd0ebaab3ea8a9756759834f09d6cea49a3ea6808f64e52ef148f7860777597486b340af70f6982a60"]) [ 67.925745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.929140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.931074] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.935152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.938462] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.940542] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.943189] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.945201] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.947336] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.980418] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.983348] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.985239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.996274] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 67.998313] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.999727] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 68.004274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.005867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.008405] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.008517] Bluetooth: hci1: HCI_REQ-0x0c1a [ 68.011595] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.012938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.014070] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.020528] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.022441] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.025134] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 68.026883] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.031951] Bluetooth: hci0: HCI_REQ-0x0c1a [ 68.033615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.034751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.036628] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.038227] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.039395] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.040717] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 68.041825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.042917] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.046341] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.047847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 68.052555] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 68.054615] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 68.055856] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 68.057233] Bluetooth: hci3: HCI_REQ-0x0c1a [ 68.060747] Bluetooth: hci2: HCI_REQ-0x0c1a [ 68.061769] Bluetooth: hci6: HCI_REQ-0x0c1a [ 68.072613] Bluetooth: hci4: HCI_REQ-0x0c1a [ 68.088773] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 68.092086] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 68.093487] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 68.095342] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 68.096527] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 68.098158] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 68.100226] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 68.105670] Bluetooth: hci5: HCI_REQ-0x0c1a [ 68.107737] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 68.109603] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 68.114390] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 68.126578] Bluetooth: hci7: HCI_REQ-0x0c1a [ 70.060916] Bluetooth: hci0: command 0x0409 tx timeout [ 70.060939] Bluetooth: hci1: command 0x0409 tx timeout [ 70.124494] Bluetooth: hci2: command 0x0409 tx timeout [ 70.124554] Bluetooth: hci5: command 0x0409 tx timeout [ 70.125249] Bluetooth: hci6: command 0x0409 tx timeout [ 70.126430] Bluetooth: hci4: command 0x0409 tx timeout [ 70.127132] Bluetooth: hci3: command 0x0409 tx timeout [ 70.188080] Bluetooth: hci7: command 0x0409 tx timeout [ 72.108143] Bluetooth: hci0: command 0x041b tx timeout [ 72.109046] Bluetooth: hci1: command 0x041b tx timeout [ 72.172247] Bluetooth: hci3: command 0x041b tx timeout [ 72.173186] Bluetooth: hci4: command 0x041b tx timeout [ 72.174094] Bluetooth: hci6: command 0x041b tx timeout [ 72.174917] Bluetooth: hci5: command 0x041b tx timeout [ 72.175834] Bluetooth: hci2: command 0x041b tx timeout [ 72.236090] Bluetooth: hci7: command 0x041b tx timeout [ 74.156020] Bluetooth: hci0: command 0x040f tx timeout [ 74.156561] Bluetooth: hci1: command 0x040f tx timeout [ 74.221043] Bluetooth: hci2: command 0x040f tx timeout [ 74.221502] Bluetooth: hci5: command 0x040f tx timeout [ 74.221887] Bluetooth: hci6: command 0x040f tx timeout [ 74.222308] Bluetooth: hci4: command 0x040f tx timeout [ 74.222696] Bluetooth: hci3: command 0x040f tx timeout [ 74.285117] Bluetooth: hci7: command 0x040f tx timeout [ 76.205113] Bluetooth: hci1: command 0x0419 tx timeout [ 76.205586] Bluetooth: hci0: command 0x0419 tx timeout [ 76.268095] Bluetooth: hci3: command 0x0419 tx timeout [ 76.268578] Bluetooth: hci4: command 0x0419 tx timeout [ 76.269017] Bluetooth: hci6: command 0x0419 tx timeout [ 76.269409] Bluetooth: hci5: command 0x0419 tx timeout [ 76.269809] Bluetooth: hci2: command 0x0419 tx timeout [ 76.333073] Bluetooth: hci7: command 0x0419 tx timeout 12:53:37 executing program 7: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000240)=""/186) 12:53:37 executing program 7: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000240)=""/186) 12:53:38 executing program 7: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000240)=""/186) 12:53:38 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xe7, 0x4) sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x2}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="00030000001b00fbe3d94c9c1e303aeb14283fcadf56eea4baccca62db9e", 0x1e}], 0x1}}], 0x1, 0x0) 12:53:38 executing program 7: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000240)=""/186) 12:53:38 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xe7, 0x4) sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x2}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="00030000001b00fbe3d94c9c1e303aeb14283fcadf56eea4baccca62db9e", 0x1e}], 0x1}}], 0x1, 0x0) 12:53:38 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xe7, 0x4) sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x2}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="00030000001b00fbe3d94c9c1e303aeb14283fcadf56eea4baccca62db9e", 0x1e}], 0x1}}], 0x1, 0x0) 12:53:38 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xe7, 0x4) sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x2}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="00030000001b00fbe3d94c9c1e303aeb14283fcadf56eea4baccca62db9e", 0x1e}], 0x1}}], 0x1, 0x0) [ 127.035070] syz-executor.3 (301) used greatest stack depth: 24536 bytes left [ 129.587252] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.589537] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.591315] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.604190] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.607533] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 129.609165] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.616060] Bluetooth: hci3: HCI_REQ-0x0c1a [ 129.667783] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 129.670055] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 129.671613] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 129.673659] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 129.674883] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 129.676807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 129.679099] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 129.681551] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 129.683302] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 129.684791] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 129.686264] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 129.688135] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 129.695660] Bluetooth: hci5: HCI_REQ-0x0c1a [ 129.697302] Bluetooth: hci7: HCI_REQ-0x0c1a [ 131.564073] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 131.565752] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 131.628049] Bluetooth: hci3: command 0x0409 tx timeout [ 131.628065] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 131.756081] Bluetooth: hci7: command 0x0409 tx timeout [ 131.756147] Bluetooth: hci5: command 0x0409 tx timeout [ 133.676532] Bluetooth: hci3: command 0x041b tx timeout [ 133.804033] Bluetooth: hci5: command 0x041b tx timeout [ 133.805402] Bluetooth: hci7: command 0x041b tx timeout [ 134.341528] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 134.343557] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 134.344687] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.347379] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 134.349449] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 134.351488] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 134.362093] Bluetooth: hci1: HCI_REQ-0x0c1a [ 135.724172] Bluetooth: hci3: command 0x040f tx timeout [ 135.852108] Bluetooth: hci7: command 0x040f tx timeout [ 135.852900] Bluetooth: hci5: command 0x040f tx timeout [ 136.428155] Bluetooth: hci1: command 0x0409 tx timeout [ 136.429104] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 136.492049] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 137.772058] Bluetooth: hci3: command 0x0419 tx timeout [ 137.908131] Bluetooth: hci5: command 0x0419 tx timeout [ 137.908193] Bluetooth: hci7: command 0x0419 tx timeout [ 138.476083] Bluetooth: hci1: command 0x041b tx timeout [ 140.524024] Bluetooth: hci1: command 0x040f tx timeout [ 141.101212] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 141.228068] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 142.572182] Bluetooth: hci1: command 0x0419 tx timeout [ 145.517032] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 145.708195] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 147.888456] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.889742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.890578] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.894662] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.896414] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.897514] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.900617] Bluetooth: hci2: HCI_REQ-0x0c1a [ 148.111723] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.112929] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.122607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.128126] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.135872] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 148.141767] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.149090] Bluetooth: hci4: HCI_REQ-0x0c1a [ 149.932192] Bluetooth: hci2: command 0x0409 tx timeout [ 150.188128] Bluetooth: hci4: command 0x0409 tx timeout [ 151.980027] Bluetooth: hci2: command 0x041b tx timeout [ 152.236064] Bluetooth: hci4: command 0x041b tx timeout [ 154.028128] Bluetooth: hci2: command 0x040f tx timeout [ 154.284195] Bluetooth: hci4: command 0x040f tx timeout [ 156.076142] Bluetooth: hci2: command 0x0419 tx timeout [ 156.332062] Bluetooth: hci4: command 0x0419 tx timeout [ 169.812125] audit: type=1400 audit(1663764861.983:7): avc: denied { open } for pid=6057 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 169.814833] audit: type=1400 audit(1663764861.984:8): avc: denied { kernel } for pid=6057 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 169.848865] ------------[ cut here ]------------ [ 169.848903] [ 169.848908] ====================================================== [ 169.848923] WARNING: possible circular locking dependency detected [ 169.848930] 6.0.0-rc6-next-20220921 #1 Not tainted [ 169.848942] ------------------------------------------------------ [ 169.848947] syz-executor.0/6059 is trying to acquire lock: [ 169.848963] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 169.849032] [ 169.849032] but task is already holding lock: [ 169.849037] ffff888008a01820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 169.849089] [ 169.849089] which lock already depends on the new lock. [ 169.849089] [ 169.849095] [ 169.849095] the existing dependency chain (in reverse order) is: [ 169.849101] [ 169.849101] -> #3 (&ctx->lock){....}-{2:2}: [ 169.849127] _raw_spin_lock+0x2a/0x40 [ 169.849163] __perf_event_task_sched_out+0x53b/0x18d0 [ 169.849187] __schedule+0xedd/0x2470 [ 169.849212] schedule+0xda/0x1b0 [ 169.849236] futex_wait_queue+0xf5/0x1e0 [ 169.849258] futex_wait+0x28e/0x690 [ 169.849281] do_futex+0x2ff/0x380 [ 169.849298] __x64_sys_futex+0x1c6/0x4d0 [ 169.849316] do_syscall_64+0x3b/0x90 [ 169.849348] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 169.849370] [ 169.849370] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 169.849396] _raw_spin_lock_nested+0x30/0x40 [ 169.849431] raw_spin_rq_lock_nested+0x1e/0x30 [ 169.849455] task_fork_fair+0x63/0x4d0 [ 169.849489] sched_cgroup_fork+0x3d0/0x540 [ 169.849516] copy_process+0x4183/0x6e20 [ 169.849535] kernel_clone+0xe7/0x890 [ 169.849553] user_mode_thread+0xad/0xf0 [ 169.849572] rest_init+0x24/0x250 [ 169.849593] arch_call_rest_init+0xf/0x14 [ 169.849622] start_kernel+0x4c1/0x4e6 [ 169.849649] secondary_startup_64_no_verify+0xe0/0xeb [ 169.849675] [ 169.849675] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 169.849701] _raw_spin_lock_irqsave+0x39/0x60 [ 169.849737] try_to_wake_up+0xab/0x1930 [ 169.849762] up+0x75/0xb0 [ 169.849788] __up_console_sem+0x6e/0x80 [ 169.849819] console_unlock+0x46a/0x590 [ 169.849850] vt_ioctl+0x2822/0x2ca0 [ 169.849874] tty_ioctl+0x7c4/0x1700 [ 169.849896] __x64_sys_ioctl+0x19a/0x210 [ 169.849925] do_syscall_64+0x3b/0x90 [ 169.849956] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 169.849978] [ 169.849978] -> #0 ((console_sem).lock){....}-{2:2}: [ 169.850004] __lock_acquire+0x2a02/0x5e70 [ 169.850037] lock_acquire+0x1a2/0x530 [ 169.850069] _raw_spin_lock_irqsave+0x39/0x60 [ 169.850104] down_trylock+0xe/0x70 [ 169.850132] __down_trylock_console_sem+0x3b/0xd0 [ 169.850163] vprintk_emit+0x16b/0x560 [ 169.850196] vprintk+0x84/0xa0 [ 169.850228] _printk+0xba/0xf1 [ 169.850247] report_bug.cold+0x72/0xab [ 169.850277] handle_bug+0x3c/0x70 [ 169.850308] exc_invalid_op+0x14/0x50 [ 169.850340] asm_exc_invalid_op+0x16/0x20 [ 169.850360] group_sched_out.part.0+0x2c7/0x460 [ 169.850381] ctx_sched_out+0x8f1/0xc10 [ 169.850399] __perf_event_task_sched_out+0x6d0/0x18d0 [ 169.850423] __schedule+0xedd/0x2470 [ 169.850447] schedule+0xda/0x1b0 [ 169.850471] futex_wait_queue+0xf5/0x1e0 [ 169.850491] futex_wait+0x28e/0x690 [ 169.850510] do_futex+0x2ff/0x380 [ 169.850527] __x64_sys_futex+0x1c6/0x4d0 [ 169.850545] do_syscall_64+0x3b/0x90 [ 169.850577] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 169.850598] [ 169.850598] other info that might help us debug this: [ 169.850598] [ 169.850604] Chain exists of: [ 169.850604] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 169.850604] [ 169.850632] Possible unsafe locking scenario: [ 169.850632] [ 169.850637] CPU0 CPU1 [ 169.850641] ---- ---- [ 169.850645] lock(&ctx->lock); [ 169.850656] lock(&rq->__lock); [ 169.850669] lock(&ctx->lock); [ 169.850681] lock((console_sem).lock); [ 169.850692] [ 169.850692] *** DEADLOCK *** [ 169.850692] [ 169.850695] 2 locks held by syz-executor.0/6059: [ 169.850708] #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 169.850763] #1: ffff888008a01820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 169.850817] [ 169.850817] stack backtrace: [ 169.850822] CPU: 1 PID: 6059 Comm: syz-executor.0 Not tainted 6.0.0-rc6-next-20220921 #1 [ 169.850845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 169.850860] Call Trace: [ 169.850866] [ 169.850874] dump_stack_lvl+0x8b/0xb3 [ 169.850908] check_noncircular+0x263/0x2e0 [ 169.850941] ? format_decode+0x26c/0xb50 [ 169.850971] ? print_circular_bug+0x450/0x450 [ 169.851005] ? enable_ptr_key_workfn+0x20/0x20 [ 169.851036] ? format_decode+0x26c/0xb50 [ 169.851068] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 169.851102] __lock_acquire+0x2a02/0x5e70 [ 169.851145] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 169.851189] lock_acquire+0x1a2/0x530 [ 169.851222] ? down_trylock+0xe/0x70 [ 169.851254] ? lock_release+0x750/0x750 [ 169.851294] ? vprintk+0x84/0xa0 [ 169.851330] _raw_spin_lock_irqsave+0x39/0x60 [ 169.851367] ? down_trylock+0xe/0x70 [ 169.851396] down_trylock+0xe/0x70 [ 169.851426] ? vprintk+0x84/0xa0 [ 169.851459] __down_trylock_console_sem+0x3b/0xd0 [ 169.851493] vprintk_emit+0x16b/0x560 [ 169.851531] vprintk+0x84/0xa0 [ 169.851566] _printk+0xba/0xf1 [ 169.851586] ? record_print_text.cold+0x16/0x16 [ 169.851615] ? report_bug.cold+0x66/0xab [ 169.851648] ? group_sched_out.part.0+0x2c7/0x460 [ 169.851670] report_bug.cold+0x72/0xab [ 169.851705] handle_bug+0x3c/0x70 [ 169.851738] exc_invalid_op+0x14/0x50 [ 169.851772] asm_exc_invalid_op+0x16/0x20 [ 169.851794] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 169.851820] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 2b 12 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 169.851841] RSP: 0018:ffff8880337a78f8 EFLAGS: 00010006 [ 169.851858] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 169.851873] RDX: ffff88803c1c5040 RSI: ffffffff815663a7 RDI: 0000000000000005 [ 169.851888] RBP: ffff88803d5e8000 R08: 0000000000000005 R09: 0000000000000001 [ 169.851902] R10: 0000000000000000 R11: ffffffff865b005b R12: ffff888008a01800 [ 169.851917] R13: ffff88806cf3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 169.851937] ? group_sched_out.part.0+0x2c7/0x460 [ 169.851962] ? group_sched_out.part.0+0x2c7/0x460 [ 169.851987] ctx_sched_out+0x8f1/0xc10 [ 169.852011] __perf_event_task_sched_out+0x6d0/0x18d0 [ 169.852041] ? lock_is_held_type+0xd7/0x130 [ 169.852065] ? __perf_cgroup_move+0x160/0x160 [ 169.852088] ? set_next_entity+0x304/0x550 [ 169.852127] ? lock_is_held_type+0xd7/0x130 [ 169.852152] __schedule+0xedd/0x2470 [ 169.852183] ? io_schedule_timeout+0x150/0x150 [ 169.852211] ? futex_wait_setup+0x166/0x230 [ 169.852238] schedule+0xda/0x1b0 [ 169.852265] futex_wait_queue+0xf5/0x1e0 [ 169.852288] futex_wait+0x28e/0x690 [ 169.852312] ? futex_wait_setup+0x230/0x230 [ 169.852337] ? wake_up_q+0x8b/0xf0 [ 169.852363] ? do_raw_spin_unlock+0x4f/0x220 [ 169.852401] ? futex_wake+0x158/0x490 [ 169.852432] ? fd_install+0x1f9/0x640 [ 169.852463] do_futex+0x2ff/0x380 [ 169.852484] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 169.852514] __x64_sys_futex+0x1c6/0x4d0 [ 169.852538] ? __x64_sys_futex_time32+0x480/0x480 [ 169.852562] ? syscall_enter_from_user_mode+0x1d/0x50 [ 169.852586] ? syscall_enter_from_user_mode+0x1d/0x50 [ 169.852613] do_syscall_64+0x3b/0x90 [ 169.852647] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 169.852670] RIP: 0033:0x7f7778e01b19 [ 169.852686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 169.852707] RSP: 002b:00007f7776377218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 169.852727] RAX: ffffffffffffffda RBX: 00007f7778f14f68 RCX: 00007f7778e01b19 [ 169.852742] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7778f14f68 [ 169.852756] RBP: 00007f7778f14f60 R08: 0000000000000000 R09: 0000000000000000 [ 169.852770] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7778f14f6c [ 169.852784] R13: 00007ffc5ffab5bf R14: 00007f7776377300 R15: 0000000000022000 [ 169.852808] [ 169.962337] WARNING: CPU: 1 PID: 6059 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 169.963582] Modules linked in: [ 169.964028] CPU: 1 PID: 6059 Comm: syz-executor.0 Not tainted 6.0.0-rc6-next-20220921 #1 [ 169.965112] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 169.966599] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 169.967341] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 2b 12 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 169.969761] RSP: 0018:ffff8880337a78f8 EFLAGS: 00010006 [ 169.970463] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 169.971408] RDX: ffff88803c1c5040 RSI: ffffffff815663a7 RDI: 0000000000000005 [ 169.972368] RBP: ffff88803d5e8000 R08: 0000000000000005 R09: 0000000000000001 [ 169.973326] R10: 0000000000000000 R11: ffffffff865b005b R12: ffff888008a01800 [ 169.974282] R13: ffff88806cf3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 169.975232] FS: 00007f7776377700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 169.976297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.977084] CR2: 00007fedbfcb4000 CR3: 000000003dc0c000 CR4: 0000000000350ee0 [ 169.978038] Call Trace: [ 169.978392] [ 169.978711] ctx_sched_out+0x8f1/0xc10 [ 169.979249] __perf_event_task_sched_out+0x6d0/0x18d0 [ 169.979953] ? lock_is_held_type+0xd7/0x130 [ 169.980544] ? __perf_cgroup_move+0x160/0x160 [ 169.981183] ? set_next_entity+0x304/0x550 [ 169.981781] ? lock_is_held_type+0xd7/0x130 [ 169.982374] __schedule+0xedd/0x2470 [ 169.982894] ? io_schedule_timeout+0x150/0x150 [ 169.983520] ? futex_wait_setup+0x166/0x230 [ 169.984114] schedule+0xda/0x1b0 [ 169.984592] futex_wait_queue+0xf5/0x1e0 [ 169.985165] futex_wait+0x28e/0x690 [ 169.985674] ? futex_wait_setup+0x230/0x230 [ 169.986269] ? wake_up_q+0x8b/0xf0 [ 169.986770] ? do_raw_spin_unlock+0x4f/0x220 [ 169.987389] ? futex_wake+0x158/0x490 [ 169.987921] ? fd_install+0x1f9/0x640 [ 169.988450] do_futex+0x2ff/0x380 [ 169.988932] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 169.989726] __x64_sys_futex+0x1c6/0x4d0 [ 169.990286] ? __x64_sys_futex_time32+0x480/0x480 [ 169.990956] ? syscall_enter_from_user_mode+0x1d/0x50 [ 169.991655] ? syscall_enter_from_user_mode+0x1d/0x50 [ 169.992366] do_syscall_64+0x3b/0x90 [ 169.992893] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 169.993613] RIP: 0033:0x7f7778e01b19 [ 169.994125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 169.996540] RSP: 002b:00007f7776377218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 169.997573] RAX: ffffffffffffffda RBX: 00007f7778f14f68 RCX: 00007f7778e01b19 [ 169.998528] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7778f14f68 [ 169.999484] RBP: 00007f7778f14f60 R08: 0000000000000000 R09: 0000000000000000 [ 170.000444] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7778f14f6c [ 170.001402] R13: 00007ffc5ffab5bf R14: 00007f7776377300 R15: 0000000000022000 [ 170.002363] [ 170.002690] irq event stamp: 2898 [ 170.003164] hardirqs last enabled at (2897): [] syscall_enter_from_user_mode+0x1d/0x50 [ 170.004444] hardirqs last disabled at (2898): [] __schedule+0x1225/0x2470 [ 170.005574] softirqs last enabled at (2674): [] __irq_exit_rcu+0x11b/0x180 [ 170.006731] softirqs last disabled at (2563): [] __irq_exit_rcu+0x11b/0x180 [ 170.007886] ---[ end trace 0000000000000000 ]--- [ 170.064396] random: crng reseeded on system resumption [ 170.100978] hrtimer: interrupt took 18755 ns [ 170.185988] random: crng reseeded on system resumption [ 170.710935] EXT4-fs: Mount option "i_version" will be removed by 5.20 [ 170.710935] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 170.710935] [ 170.713012] EXT4-fs: Use iversion instead [ 170.713012] [ 170.749078] EXT4-fs (sda): re-mounted. Quota mode: none. [ 170.758325] EXT4-fs: Mount option "i_version" will be removed by 5.20 [ 170.758325] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 170.758325] [ 170.759563] EXT4-fs: Use iversion instead [ 170.759563] [ 170.760695] EXT4-fs (sda): re-mounted. Quota mode: none. [ 171.341379] 9pnet: Could not find request transport: rt@f>ugYO Τ>d.HwYt@p*` 12:54:30 executing program 0: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) 12:54:30 executing program 3: openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20082, 0x0) 12:54:30 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f0000000180)={[{@i_version}]}) 12:54:30 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d72f5eeb6a088740740c2c066fd0ebaab3ea8a9756759834f09d6cea49a3ea6808f64e52ef148f7860777597486b340af70f6982a60"]) 12:54:30 executing program 5: read$ptp(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2000) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000300), 0x10dc00, 0x0) ioctl$CDROMREADMODE1(r0, 0x530d, 0x0) 12:54:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x8993, &(0x7f0000000540)={'syztnl1\x00', 0x0}) 12:54:30 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000240)=""/186) 12:54:30 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xe7, 0x4) sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x2}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="00030000001b00fbe3d94c9c1e303aeb14283fcadf56eea4baccca62db9e", 0x1e}], 0x1}}], 0x1, 0x0) [ 178.077680] 9pnet: Could not find request transport: rt@f>ugYO Τ>d.HwYt@p*` [ 178.088246] EXT4-fs: Mount option "i_version" will be removed by 5.20 [ 178.088246] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 178.088246] [ 178.090705] EXT4-fs: Use iversion instead [ 178.090705] [ 178.124410] EXT4-fs (sda): re-mounted. Quota mode: none. 12:54:30 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xe7, 0x4) sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x2}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="00030000001b00fbe3d94c9c1e303aeb14283fcadf56eea4baccca62db9e", 0x1e}], 0x1}}], 0x1, 0x0) 12:54:30 executing program 5: read$ptp(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2000) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000300), 0x10dc00, 0x0) ioctl$CDROMREADMODE1(r0, 0x530d, 0x0) 12:54:30 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000240)=""/186) 12:54:30 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f0000000180)={[{@i_version}]}) [ 178.208076] random: crng reseeded on system resumption 12:54:30 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d72f5eeb6a088740740c2c066fd0ebaab3ea8a9756759834f09d6cea49a3ea6808f64e52ef148f7860777597486b340af70f6982a60"]) 12:54:30 executing program 7: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) 12:54:30 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000240)=""/186) [ 178.482786] 9pnet: Could not find request transport: rt@f>ugYO Τ>d.HwYt@p*` [ 178.486760] EXT4-fs: Mount option "i_version" will be removed by 5.20 [ 178.486760] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 178.486760] [ 178.488677] EXT4-fs: Use iversion instead [ 178.488677] [ 178.493181] EXT4-fs (sda): re-mounted. Quota mode: none. 12:54:30 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d72f5eeb6a088740740c2c066fd0ebaab3ea8a9756759834f09d6cea49a3ea6808f64e52ef148f7860777597486b340af70f6982a60"]) [ 178.617536] 9pnet: Could not find request transport: rt@f>ugYO Τ>d.HwYt@p*` 12:54:30 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f0000000180)={[{@i_version}]}) 12:54:30 executing program 0: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) 12:54:30 executing program 1: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) 12:54:30 executing program 3: openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20082, 0x0) 12:54:30 executing program 5: read$ptp(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2000) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000300), 0x10dc00, 0x0) ioctl$CDROMREADMODE1(r0, 0x530d, 0x0) 12:54:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x8993, &(0x7f0000000540)={'syztnl1\x00', 0x0}) 12:54:30 executing program 7: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) [ 178.740221] EXT4-fs: Mount option "i_version" will be removed by 5.20 [ 178.740221] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 178.740221] [ 178.742174] EXT4-fs: Use iversion instead [ 178.742174] [ 178.747453] random: crng reseeded on system resumption [ 178.750017] EXT4-fs (sda): re-mounted. Quota mode: none. [ 178.818323] 9pnet: Could not find request transport: rt@f>ugYO Τ>d.HwYt@p*` 12:54:30 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d72f5eeb6a088740740c2c066fd0ebaab3ea8a9756759834f09d6cea49a3ea6808f64e52ef148f7860777597486b340af70f6982a60"]) 12:54:31 executing program 0: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) 12:54:31 executing program 1: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) [ 178.908408] random: crng reseeded on system resumption 12:54:31 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d72f5eeb6a088740740c2c066fd0ebaab3ea8a9756759834f09d6cea49a3ea6808f64e52ef148f7860777597486b340af70f6982a60"]) 12:54:31 executing program 7: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) 12:54:31 executing program 3: openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20082, 0x0) 12:54:31 executing program 5: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000240)=""/186) 12:54:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x8993, &(0x7f0000000540)={'syztnl1\x00', 0x0}) 12:54:31 executing program 1: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) 12:54:31 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000240)=""/186) [ 179.034592] 9pnet: Could not find request transport: rt@f>ugYO Τ>d.HwYt@p*` [ 179.049124] random: crng reseeded on system resumption 12:54:31 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d72f5eeb6a088740740c2c066fd0ebaab3ea8a9756759834f09d6cea49a3ea6808f64e52ef148f7860777597486b340af70f6982a60"]) [ 179.124841] 9pnet: Could not find request transport: rt@f>ugYO Τ>d.HwYt@p*` 12:54:31 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000240)=""/186) [ 179.254144] tmpfs: Bad value for 'nr_blocks' 12:54:31 executing program 5: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000240)=""/186) 12:54:31 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)) timer_delete(0x0) 12:54:31 executing program 1: clone3(&(0x7f0000004c00)={0xc0003900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:54:31 executing program 7: syz_mount_image$tmpfs(&(0x7f0000001d00), &(0x7f0000001d40)='./file0\x00', 0x0, 0x1, &(0x7f0000002d80)=[{&(0x7f0000001d80)}], 0x0, &(0x7f0000002e80)={[{@huge_never}, {@mode}, {@nr_blocks={'nr_blocks', 0x3d, [0x5d]}}]}) 12:54:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4) r1 = socket$netlink(0x10, 0x3, 0xc) write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0) close_range(0xffffffffffffffff, r2, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440)) r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0) close_range(0xffffffffffffffff, r4, 0x0) name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400) [ 179.258087] tmpfs: Bad value for 'nr_blocks' 12:54:31 executing program 2: r0 = io_uring_setup(0x490f, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 12:54:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x34, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ID={0x8}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}]}, 0x34}}, 0x0) 12:54:31 executing program 5: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000240)=""/186) 12:54:31 executing program 7: syz_mount_image$tmpfs(&(0x7f0000001d00), &(0x7f0000001d40)='./file0\x00', 0x0, 0x1, &(0x7f0000002d80)=[{&(0x7f0000001d80)}], 0x0, &(0x7f0000002e80)={[{@huge_never}, {@mode}, {@nr_blocks={'nr_blocks', 0x3d, [0x5d]}}]}) 12:54:31 executing program 2: r0 = io_uring_setup(0x490f, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 12:54:31 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000240)=""/186) 12:54:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x34, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ID={0x8}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}]}, 0x34}}, 0x0) [ 179.364213] tmpfs: Bad value for 'nr_blocks' 12:54:31 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)) timer_delete(0x0) 12:54:31 executing program 2: r0 = io_uring_setup(0x490f, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 12:54:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)) timer_delete(0x0) 12:54:31 executing program 7: syz_mount_image$tmpfs(&(0x7f0000001d00), &(0x7f0000001d40)='./file0\x00', 0x0, 0x1, &(0x7f0000002d80)=[{&(0x7f0000001d80)}], 0x0, &(0x7f0000002e80)={[{@huge_never}, {@mode}, {@nr_blocks={'nr_blocks', 0x3d, [0x5d]}}]}) [ 179.462147] tmpfs: Bad value for 'nr_blocks' 12:54:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4) r1 = socket$netlink(0x10, 0x3, 0xc) write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0) close_range(0xffffffffffffffff, r2, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440)) r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0) close_range(0xffffffffffffffff, r4, 0x0) name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400) 12:54:31 executing program 7: syz_mount_image$tmpfs(&(0x7f0000001d00), &(0x7f0000001d40)='./file0\x00', 0x0, 0x1, &(0x7f0000002d80)=[{&(0x7f0000001d80)}], 0x0, &(0x7f0000002e80)={[{@huge_never}, {@mode}, {@nr_blocks={'nr_blocks', 0x3d, [0x5d]}}]}) [ 179.553494] tmpfs: Bad value for 'nr_blocks' 12:54:31 executing program 2: r0 = io_uring_setup(0x490f, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 12:54:31 executing program 1: clone3(&(0x7f0000004c00)={0xc0003900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:54:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4) r1 = socket$netlink(0x10, 0x3, 0xc) write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0) close_range(0xffffffffffffffff, r2, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440)) r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0) close_range(0xffffffffffffffff, r4, 0x0) name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400) 12:54:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)) timer_delete(0x0) 12:54:31 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)) timer_delete(0x0) 12:54:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4) r1 = socket$netlink(0x10, 0x3, 0xc) write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0) close_range(0xffffffffffffffff, r2, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440)) r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0) close_range(0xffffffffffffffff, r4, 0x0) name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400) 12:54:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x34, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ID={0x8}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}]}, 0x34}}, 0x0) 12:54:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x34, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ID={0x8}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}]}, 0x34}}, 0x0) 12:54:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4) r1 = socket$netlink(0x10, 0x3, 0xc) write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0) close_range(0xffffffffffffffff, r2, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440)) r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0) close_range(0xffffffffffffffff, r4, 0x0) name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400) 12:54:31 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4) r1 = socket$netlink(0x10, 0x3, 0xc) write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0) close_range(0xffffffffffffffff, r2, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440)) r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0) close_range(0xffffffffffffffff, r4, 0x0) name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400) 12:54:31 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4) r1 = socket$netlink(0x10, 0x3, 0xc) write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0) close_range(0xffffffffffffffff, r2, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440)) r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0) close_range(0xffffffffffffffff, r4, 0x0) name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400) 12:54:31 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)) timer_delete(0x0) 12:54:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)) timer_delete(0x0) 12:54:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4) r1 = socket$netlink(0x10, 0x3, 0xc) write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0) close_range(0xffffffffffffffff, r2, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440)) r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0) close_range(0xffffffffffffffff, r4, 0x0) name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400) 12:54:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4) r1 = socket$netlink(0x10, 0x3, 0xc) write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0) close_range(0xffffffffffffffff, r2, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440)) r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0) close_range(0xffffffffffffffff, r4, 0x0) name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400) 12:54:32 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000500)='./file0/file0\x00', 0x54) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x404201, 0xc4) r1 = socket$netlink(0x10, 0x3, 0xc) write(r1, &(0x7f0000000300)="3aa75990ad1214472f060657b82d0ca6e6c82a7c0cc676b1d48763bc00b73d945f4f3743383c62e2120b5ffb89533dbc687eb3852aff0fe570106d8f9bb68d11f0d12164c27ec9a0c0f0b9a71b227876ff70532e7426406ff6d6a303fec3230aa13ba2a12659d7159561faf47bd923f9488902c3f96b618a322afcb8c690744ebee9f52e0d2cb819373f9b03ab68d60ca2c19c5ba4ad5d484ffe29fd6048751322e1fd1a966fd28833ab9ddde5ceb4af8c008878afad5e7fd326e14c82b35145", 0xc0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0) close_range(0xffffffffffffffff, r2, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000440)) r3 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x408c00, 0x0) close_range(0xffffffffffffffff, r4, 0x0) name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x5}}, &(0x7f00000001c0), 0x1400) VM DIAGNOSIS: 12:54:22 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000001000 RCX=1ffff11007ae4732 RDX=1ffff11007ae473f RSI=0000000000000004 RDI=ffff88803d723a00 RBP=ffff8880325b3300 RSP=ffff88803ddafcb0 R8 =0000000000000001 R9 =ffff88803d7239e3 R10=ffffed1007ae473c R11=0000000000000001 R12=ffff88803d723998 R13=0000000000000000 R14=0000000000000001 R15=ffff88803d723950 RIP=ffffffff817bda47 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff598b54540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055abbda1bfa8 CR3=000000003894e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 2525252525252525 2525252525252525 YMM01=0000000000000000 0000000000000000 00ff000000000000 0000000000ff0000 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 756e20796d6d7564 20736e6f6974706f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 73253d656d616e6c 6165722073253d73 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822b1c0c RDI=ffffffff87645ba0 RBP=ffffffff87645b60 RSP=ffff8880337a72f0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000002710 R13=0000000000000020 R14=fffffbfff0ec8bc3 R15=dffffc0000000000 RIP=ffffffff822b1c61 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7776377700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fedbfcb4000 CR3=000000003dc0c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f7778ee87c0 00007f7778ee87c8 YMM02=0000000000000000 0000000000000000 00007f7778ee87e0 00007f7778ee87c0 YMM03=0000000000000000 0000000000000000 00007f7778ee87c8 00007f7778ee87c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000