Extracting prog: 1h15m23.685578059s
Minimizing prog: 29m20.742846522s
Simplifying prog options: 0s
Extracting C: 2m10.903584062s
Simplifying C: 9m17.946032632s


extracting reproducer from 59 programs
testing a last program of every proc
single: executing 20 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-close-nanosleep-openat-write-close-nanosleep
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)
close(r0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1\n', 0x2)
close(r1)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-nanosleep-write-nanosleep-close
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0', 0x1)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
close(r0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CHECK_EXTENSION
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x26)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-getdents64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/event_source/devices\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200)=""/4096, 0x1000)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='0', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='1', 0x1)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hci-ioctl$sock_bt_hci-close-mkdirat-mount-openat-write-close-openat-write-close-openat-write-close
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00')
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='0\n\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='processors\n\x00', 0xb)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='disk\n\x00', 0x5)
close(r3)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-write-close-nanosleep
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0\x00', 0x1)
write(r0, &(0x7f0000000180)='1\x00', 0x1)
close(r0)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-getdents64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/event_source/devices\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200)=""/4096, 0x1000)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CHECK_EXTENSION
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x26)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-write-close-nanosleep
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0\x00', 0x1)
write(r0, &(0x7f0000000180)='1\x00', 0x1)
close(r0)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hci-ioctl$sock_bt_hci-close-mkdirat-mount-openat-write-close-openat-write-close-openat-write-close
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00')
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='0\n\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='processors\n\x00', 0xb)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='disk\n\x00', 0x5)
close(r3)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='0', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='1', 0x1)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-close-openat-write-close-openat-write-close-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='core\x00', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/power/mem_sleep\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='deep\x00', 0x4)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/power/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='mem\x00', 0x3)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-close
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/snapshot\x00', 0x0, 0x0)
close(r0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-ioctl$KVM_GET_MSRS_cpu-ioctl$KVM_GET_MSRS_cpu-ioctl$KVM_GET_MSRS_cpu-ioctl$KVM_GET_MSRS_cpu
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x3f1}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x600}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x38d}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x186}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xc0010200}]})
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0xc0010002}]})
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x3f1}]})
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x600}]})
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x38d}]})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x18000, &(0x7f0000000000/0x18000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000300)="c70538100000ffff0000c7053c1000000093cf00b8380000008ed8c7050000c0fe00000000f4", 0x26}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-close
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='core\n\x00', 0x5)
close(r0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x18000, &(0x7f0000000000/0x18000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000300)="c70538100000ffff0000c7053c1000000093cf00b8380000008ed8c7050000c0fe00000000f4", 0x26}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-close
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/snapshot\x00', 0x0, 0x0)
close(r0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-close-openat-write-close-openat-write-close-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='core\x00', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/power/mem_sleep\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='deep\x00', 0x4)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/power/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='mem\x00', 0x3)

program did not crash
single: failed to extract reproducer
bisect: bisecting 59 programs with base timeout 30s
testing program (duration=44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 6, 8, 5, 9, 11, 12, 21, 3, 8, 9, 16, 4, 13, 7, 15, 5, 5, 7, 13, 4, 13, 12, 11, 4, 6, 7, 10, 4, 11, 6, 4, 4, 4, 2, 4, 4, 4, 3, 6, 6, 4, 1, 7, 4, 14, 5, 15, 6, 7, 2, 4, 7, 14, 6, 4, 2, 8, 10]
detailed listing:
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='core\x00', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/power/mem_sleep\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='deep\x00', 0x4)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/power/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='mem\x00', 0x3)
executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0xa, 0x0, 0x0, 0x7300402, 0x0, 0x0, 0x603}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [{0x38d, 0x0, 0x3}, {0x38f, 0x0, 0x100000000}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/event_source/devices\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000100)=""/1024, 0x400)
close(r0)
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0xa, 0x0, 0x0, 0x7300402, 0x0, 0x0, 0x603}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc1, 0x0, 0x1234}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x309, 0x0, 0x5678}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x4c1, 0x0, 0x9abc}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0xc0010004, 0x0, 0xdef0}]})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f0000000200)='W\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x83f)
pwrite64(r0, &(0x7f0000000220)="5700040000000000", 0x8, 0x830)
pwrite64(r0, &(0x7f0000000240)='w\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x83f)
pwrite64(r0, &(0x7f0000000260)="7700040000000000", 0x8, 0x830)
pwrite64(r0, &(0x7f0000000280)="9700000000000000", 0x8, 0x83f)
pwrite64(r0, &(0x7f00000002a0)="9700040000000000", 0x8, 0x830)
pwrite64(r0, &(0x7f00000002c0)="b700000000000000", 0x8, 0x83f)
pwrite64(r0, &(0x7f00000002e0)="b700040000000000", 0x8, 0x830)
executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia-generic)\x00'}, 0x58)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'camellia\x00'}, 0x58)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'camellia-generic\x00'}, 0x58)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des)\x00'}, 0x58)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/kernel/nmi_watchdog\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0\n', 0x2)
write(r0, &(0x7f0000000180)='1\n', 0x2)
write(r0, &(0x7f0000000140)='0\n', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/watchdog\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='0\n', 0x2)
write(r1, &(0x7f0000000180)='1\n', 0x2)
write(r1, &(0x7f0000000140)='0\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/kernel/watchdog_thresh\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='20\n', 0x3)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(&(0x7f0000000340)=@filename='none\x00', &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r3, &(0x7f0000000140)='0\n', 0x2)
write(r3, &(0x7f0000000180)='1\n', 0x2)
close(r3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sgx_vepc\x00', 0x2, 0x0)
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="48c7c101800000b8018000004831d24d31c00f01c10f01d9f4", 0x19}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)={0x6, 0x0, [{0x0, 0x0, 0x0, 0xd, 0x756e6547, 0x6c65746e, 0x49656e69}, {0x1, 0x0, 0x0, 0x1067a, 0x0, 0x80000001, 0x78bfbfd}, {0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20100800}, {0x40000000, 0x0, 0x0, 0x40000005, 0x7263694d, 0x666f736f, 0x76482074}, {0x40000001, 0x0, 0x0, 0x31237648}, {0x40000003, 0x0, 0x0, 0x0, 0x100000}]})
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068ae69, &(0x7f0000000500)={0xc7, 0x0, 0x1})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000600)={0x1, 0x0, [{0x40000000, 0x0, 0x1}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x13, {"90f4", 0x2}}], 0x13})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000000040)="90909090909090909090909090909090c3", 0x11)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='tracefs\x00', &(0x7f0000000100)='./tracing\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/uprobe_events\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)='p:s/p ./file0:0x0\n', 0x12)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/s/p/enable\x00', 0x2, 0x0)
write(r2, &(0x7f00000002c0)='1\n', 0x2)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
wait4(r3, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r3, 0x80, 0x7f0000800000)
ptrace$pokeuser(0x6, r3, 0x90, 0x102)
ptrace$cont(0x9, r3, 0x0, 0x0)
wait4(r3, 0x0, 0x0, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/snapshot\x00', 0x0, 0x0)
close(r0)
executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x3f1}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x600}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x38d}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x186}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xc0010200}]})
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0xc0010002}]})
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x3f1}]})
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x600}]})
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x38d}]})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x18000, &(0x7f0000000000/0x18000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000300)="c70538100000ffff0000c7053c1000000093cf00b8380000008ed8c7050000c0fe00000000f4", 0x26}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='on\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/cpu/0/msr\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f0000000200)='W\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x83f)
pwrite64(r1, &(0x7f0000000220)="5700040000000000", 0x8, 0x830)
pwrite64(r1, &(0x7f0000000240)='w\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x83f)
pwrite64(r1, &(0x7f0000000260)="7700040000000000", 0x8, 0x830)
pwrite64(r1, &(0x7f0000000280)="9700000000000000", 0x8, 0x83f)
pwrite64(r1, &(0x7f00000002a0)="9700040000000000", 0x8, 0x830)
pwrite64(r1, &(0x7f00000002c0)="b700000000000000", 0x8, 0x83f)
pwrite64(r1, &(0x7f00000002e0)="b700040000000000", 0x8, 0x830)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='core\n\x00', 0x5)
close(r0)
executing program 32:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='core\n\x00', 0x5)
close(r0)
executing program 33:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x18000, &(0x7f0000000000/0x18000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000300)="c70538100000ffff0000c7053c1000000093cf00b8380000008ed8c7050000c0fe00000000f4", 0x26}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 34:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x3f1}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x600}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x38d}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x186}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xc0010200}]})
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0xc0010002}]})
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x3f1}]})
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x600}]})
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x38d}]})
executing program 35:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/snapshot\x00', 0x0, 0x0)
close(r0)
executing program 36:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='core\x00', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/power/mem_sleep\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='deep\x00', 0x4)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/power/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='mem\x00', 0x3)
executing program 7:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='on\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/cpu/0/msr\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f0000000200)='W\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x83f)
pwrite64(r1, &(0x7f0000000220)="5700040000000000", 0x8, 0x830)
pwrite64(r1, &(0x7f0000000240)='w\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x83f)
pwrite64(r1, &(0x7f0000000260)="7700040000000000", 0x8, 0x830)
pwrite64(r1, &(0x7f0000000280)="9700000000000000", 0x8, 0x83f)
executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x19, {0x0, "f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x61})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x15)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x14)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4)
executing program 7:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x0, 0x0)
read(r0, &(0x7f0000000140)=""/16, 0x10)
executing program 5:
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x88)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0x40000a, 0x3, 0x40000000, 0x10})
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)
executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x0, 0x40000000})
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x41, {"31c00fa281fb41757468741248c7c00f00000048c7c7e80300000f01c1c348c7c00f00000048c7c7e80300000f01d9c3"}}], 0x41})
ioctl(r3, 0x4048aecb, &(0x7f0000000200)="070000000000000001000000ffffffff00"/80)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 7:
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x19, {0x0, "f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x61})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 6:
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000001440)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3e, 0x1, 0x100, 0x40, 0x200, 0x0, 0x40, 0x38, 0x3, 0x40, 0x2, 0x1}, [{0x1, 0x0, 0x0, 0x10000, 0x150, 0x10, 0x1000}, {0x1, 0x0, 0x0, 0x20000, 0x200, 0x0, 0x2000, 0x10}, {}], '\x00'/4096, ['\x00', '\x00', '\x00']}, 0x13e8)
close$binfmt(r1)
executing program 8:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='base=0x200000000 size=0x10000000 type=uncachable', 0x31)
write(r0, &(0x7f0000000200)='base=0x300000000 size=0x10000000 type=write-combining', 0x36)
write(r0, &(0x7f0000000300)='disable=0', 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000640)='./sys\x00', &(0x7f0000000680)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='0', 0x1)
write(r1, &(0x7f0000000740)='1', 0x1)
executing program 7:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='0', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='1', 0x1)
executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/aesni_intel\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/aes_generic\x00', 0x0, 0x0)
executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/event_source/devices/cpu\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/event_source/devices/uncore_cbox_0\x00', 0x0, 0x0)
executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./sys/bus/pci/devices/0000:00:01.0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000080)='driver_override\x00', 0x1, 0x0)
executing program 9:
r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
pread64(r0, &(0x7f0000000100)=""/8, 0x8, 0x179)
executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)='0\x00', 0x1)
executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/event_source/devices/software/type\x00', 0x0, 0x0)
read(r0, &(0x7f0000000000)=""/1024, 0x400)
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/cpu\x00', 0x0, 0x0)
executing program 8:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/event_source/devices/kprobes/type\x00', 0x0, 0x0)
executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/cache/index0/subcaches\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/cache/index1/subcaches\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/cpu/cpu1/cache/index2/subcaches\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/cache/index3/subcaches\x00', 0x0, 0x0)
executing program 9:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/cpu/0/msr\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f0000000200)='W\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x83f)
pwrite64(r0, &(0x7f0000000220)="5700040000000000", 0x8, 0x830)
pwrite64(r0, &(0x7f0000000240)='w\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x83f)
pwrite64(r0, &(0x7f0000000260)="7700040000000000", 0x8, 0x830)
pwrite64(r0, &(0x7f0000000280)="9700000000000000", 0x8, 0x83f)
executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000100)=""/4096, 0x1000)
executing program 8:
uname(&(0x7f0000000080)=""/65)
executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x2d, {"b807000000b9010000000fa24889cf48be000104000000000048893e"}}], 0x2d})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/event_source/devices/cpu\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000100), 0x1000)
executing program 6:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00')
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='0\n\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='processors\n\x00', 0xb)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='disk\n\x00', 0x5)
close(r3)
executing program 8:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/sync_on_suspend\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/mem_sleep\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/power/autosleep\x00', 0x0, 0x0)
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/event_source/devices/cstate_core/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/event_source/devices/intel_pt/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/event_source/devices/msr/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/event_source/devices/power/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/event_source/devices/software/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/event_source/devices/tracepoint/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/event_source/devices/breakpoint/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/event_source/devices/kprobe/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/event_source/devices/uprobe/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/event_source/devices/amd_df/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/event_source/devices/amd_nb/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/event_source/devices/ibs_op/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/event_source/devices/ibs_fetch/type\x00', 0x0, 0x0)
executing program 8:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/dax/devices\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200), 0x1000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/nd/devices\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000200), 0x1000)
executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0\x00', 0x1)
write(r0, &(0x7f0000000180)='1\x00', 0x1)
close(r0)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
executing program 9:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x26)
executing program 8:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/event_source/devices\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200)=""/4096, 0x1000)
executing program 37:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0\x00', 0x1)
write(r0, &(0x7f0000000180)='1\x00', 0x1)
close(r0)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
executing program 38:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00')
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='0\n\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='processors\n\x00', 0xb)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='disk\n\x00', 0x5)
close(r3)
executing program 39:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='0', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='1', 0x1)
executing program 40:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/event_source/devices\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200)=""/4096, 0x1000)
executing program 41:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x26)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0', 0x1)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
close(r0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)
close(r0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1\n', 0x2)
close(r1)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 20 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-close-nanosleep-openat-write-close-nanosleep
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)
close(r0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1\n', 0x2)
close(r1)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-nanosleep-write-nanosleep-close
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0', 0x1)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
close(r0)

VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CHECK_EXTENSION
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x26)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-getdents64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/event_source/devices\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200)=""/4096, 0x1000)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='0', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='1', 0x1)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hci-ioctl$sock_bt_hci-close-mkdirat-mount-openat-write-close-openat-write-close-openat-write-close
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00')
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='0\n\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='processors\n\x00', 0xb)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='disk\n\x00', 0x5)
close(r3)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-write-close-nanosleep
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0\x00', 0x1)
write(r0, &(0x7f0000000180)='1\x00', 0x1)
close(r0)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-getdents64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/event_source/devices\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200)=""/4096, 0x1000)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CHECK_EXTENSION
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x26)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-write-close-nanosleep
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0\x00', 0x1)
write(r0, &(0x7f0000000180)='1\x00', 0x1)
close(r0)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hci-ioctl$sock_bt_hci-close-mkdirat-mount-openat-write-close-openat-write-close-openat-write-close
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00')
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='0\n\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='processors\n\x00', 0xb)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='disk\n\x00', 0x5)
close(r3)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='0', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='1', 0x1)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-close-openat-write-close-openat-write-close-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='core\x00', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/power/mem_sleep\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='deep\x00', 0x4)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/power/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='mem\x00', 0x3)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-close
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/snapshot\x00', 0x0, 0x0)
close(r0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-ioctl$KVM_GET_MSRS_cpu-ioctl$KVM_GET_MSRS_cpu-ioctl$KVM_GET_MSRS_cpu-ioctl$KVM_GET_MSRS_cpu
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x3f1}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x600}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x38d}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x186}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xc0010200}]})
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0xc0010002}]})
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x3f1}]})
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x600}]})
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x38d}]})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x18000, &(0x7f0000000000/0x18000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000300)="c70538100000ffff0000c7053c1000000093cf00b8380000008ed8c7050000c0fe00000000f4", 0x26}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-close
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='core\n\x00', 0x5)
close(r0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x18000, &(0x7f0000000000/0x18000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000300)="c70538100000ffff0000c7053c1000000093cf00b8380000008ed8c7050000c0fe00000000f4", 0x26}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-close
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/snapshot\x00', 0x0, 0x0)
close(r0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-close-openat-write-close-openat-write-close-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='core\x00', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/power/mem_sleep\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='deep\x00', 0x4)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/power/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='mem\x00', 0x3)

program did not crash
single: failed to extract reproducer
bisect: bisecting 59 programs with base timeout 1m40s
testing program (duration=1m54s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 6, 8, 5, 9, 11, 12, 21, 3, 8, 9, 16, 4, 13, 7, 15, 5, 5, 7, 13, 4, 13, 12, 11, 4, 6, 7, 10, 4, 11, 6, 4, 4, 4, 2, 4, 4, 4, 3, 6, 6, 4, 1, 7, 4, 14, 5, 15, 6, 7, 2, 4, 7, 14, 6, 4, 2, 8, 10]
detailed listing:
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='core\x00', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/power/mem_sleep\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='deep\x00', 0x4)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/power/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='mem\x00', 0x3)
executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0xa, 0x0, 0x0, 0x7300402, 0x0, 0x0, 0x603}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [{0x38d, 0x0, 0x3}, {0x38f, 0x0, 0x100000000}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/event_source/devices\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000100)=""/1024, 0x400)
close(r0)
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0xa, 0x0, 0x0, 0x7300402, 0x0, 0x0, 0x603}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc1, 0x0, 0x1234}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x309, 0x0, 0x5678}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x4c1, 0x0, 0x9abc}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0xc0010004, 0x0, 0xdef0}]})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f0000000200)='W\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x83f)
pwrite64(r0, &(0x7f0000000220)="5700040000000000", 0x8, 0x830)
pwrite64(r0, &(0x7f0000000240)='w\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x83f)
pwrite64(r0, &(0x7f0000000260)="7700040000000000", 0x8, 0x830)
pwrite64(r0, &(0x7f0000000280)="9700000000000000", 0x8, 0x83f)
pwrite64(r0, &(0x7f00000002a0)="9700040000000000", 0x8, 0x830)
pwrite64(r0, &(0x7f00000002c0)="b700000000000000", 0x8, 0x83f)
pwrite64(r0, &(0x7f00000002e0)="b700040000000000", 0x8, 0x830)
executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia-generic)\x00'}, 0x58)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'camellia\x00'}, 0x58)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'camellia-generic\x00'}, 0x58)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des)\x00'}, 0x58)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/kernel/nmi_watchdog\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0\n', 0x2)
write(r0, &(0x7f0000000180)='1\n', 0x2)
write(r0, &(0x7f0000000140)='0\n', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/watchdog\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='0\n', 0x2)
write(r1, &(0x7f0000000180)='1\n', 0x2)
write(r1, &(0x7f0000000140)='0\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/kernel/watchdog_thresh\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='20\n', 0x3)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(&(0x7f0000000340)=@filename='none\x00', &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r3, &(0x7f0000000140)='0\n', 0x2)
write(r3, &(0x7f0000000180)='1\n', 0x2)
close(r3)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sgx_vepc\x00', 0x2, 0x0)
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="48c7c101800000b8018000004831d24d31c00f01c10f01d9f4", 0x19}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)={0x6, 0x0, [{0x0, 0x0, 0x0, 0xd, 0x756e6547, 0x6c65746e, 0x49656e69}, {0x1, 0x0, 0x0, 0x1067a, 0x0, 0x80000001, 0x78bfbfd}, {0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20100800}, {0x40000000, 0x0, 0x0, 0x40000005, 0x7263694d, 0x666f736f, 0x76482074}, {0x40000001, 0x0, 0x0, 0x31237648}, {0x40000003, 0x0, 0x0, 0x0, 0x100000}]})
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068ae69, &(0x7f0000000500)={0xc7, 0x0, 0x1})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000600)={0x1, 0x0, [{0x40000000, 0x0, 0x1}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x13, {"90f4", 0x2}}], 0x13})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000000040)="90909090909090909090909090909090c3", 0x11)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='tracefs\x00', &(0x7f0000000100)='./tracing\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/uprobe_events\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)='p:s/p ./file0:0x0\n', 0x12)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/s/p/enable\x00', 0x2, 0x0)
write(r2, &(0x7f00000002c0)='1\n', 0x2)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
wait4(r3, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r3, 0x80, 0x7f0000800000)
ptrace$pokeuser(0x6, r3, 0x90, 0x102)
ptrace$cont(0x9, r3, 0x0, 0x0)
wait4(r3, 0x0, 0x0, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/snapshot\x00', 0x0, 0x0)
close(r0)
executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x3f1}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x600}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x38d}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x186}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xc0010200}]})
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0xc0010002}]})
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x3f1}]})
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x600}]})
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x38d}]})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x18000, &(0x7f0000000000/0x18000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000300)="c70538100000ffff0000c7053c1000000093cf00b8380000008ed8c7050000c0fe00000000f4", 0x26}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='on\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/cpu/0/msr\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f0000000200)='W\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x83f)
pwrite64(r1, &(0x7f0000000220)="5700040000000000", 0x8, 0x830)
pwrite64(r1, &(0x7f0000000240)='w\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x83f)
pwrite64(r1, &(0x7f0000000260)="7700040000000000", 0x8, 0x830)
pwrite64(r1, &(0x7f0000000280)="9700000000000000", 0x8, 0x83f)
pwrite64(r1, &(0x7f00000002a0)="9700040000000000", 0x8, 0x830)
pwrite64(r1, &(0x7f00000002c0)="b700000000000000", 0x8, 0x83f)
pwrite64(r1, &(0x7f00000002e0)="b700040000000000", 0x8, 0x830)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='core\n\x00', 0x5)
close(r0)
executing program 32:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='core\n\x00', 0x5)
close(r0)
executing program 33:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x18000, &(0x7f0000000000/0x18000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000300)="c70538100000ffff0000c7053c1000000093cf00b8380000008ed8c7050000c0fe00000000f4", 0x26}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 34:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x3f1}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x600}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x38d}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x186}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xc0010200}]})
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0xc0010002}]})
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x3f1}]})
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x600}]})
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x38d}]})
executing program 35:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/snapshot\x00', 0x0, 0x0)
close(r0)
executing program 36:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='core\x00', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/power/mem_sleep\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='deep\x00', 0x4)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/power/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='mem\x00', 0x3)
executing program 7:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='on\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/cpu/0/msr\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f0000000200)='W\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x83f)
pwrite64(r1, &(0x7f0000000220)="5700040000000000", 0x8, 0x830)
pwrite64(r1, &(0x7f0000000240)='w\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x83f)
pwrite64(r1, &(0x7f0000000260)="7700040000000000", 0x8, 0x830)
pwrite64(r1, &(0x7f0000000280)="9700000000000000", 0x8, 0x83f)
executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x19, {0x0, "f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x61})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x15)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x14)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4)
executing program 7:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x0, 0x0)
read(r0, &(0x7f0000000140)=""/16, 0x10)
executing program 5:
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x88)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0x40000a, 0x3, 0x40000000, 0x10})
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)
executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x0, 0x40000000})
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x41, {"31c00fa281fb41757468741248c7c00f00000048c7c7e80300000f01c1c348c7c00f00000048c7c7e80300000f01d9c3"}}], 0x41})
ioctl(r3, 0x4048aecb, &(0x7f0000000200)="070000000000000001000000ffffffff00"/80)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 7:
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x19, {0x0, "f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x61})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 6:
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000001440)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3e, 0x1, 0x100, 0x40, 0x200, 0x0, 0x40, 0x38, 0x3, 0x40, 0x2, 0x1}, [{0x1, 0x0, 0x0, 0x10000, 0x150, 0x10, 0x1000}, {0x1, 0x0, 0x0, 0x20000, 0x200, 0x0, 0x2000, 0x10}, {}], '\x00'/4096, ['\x00', '\x00', '\x00']}, 0x13e8)
close$binfmt(r1)
executing program 8:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='base=0x200000000 size=0x10000000 type=uncachable', 0x31)
write(r0, &(0x7f0000000200)='base=0x300000000 size=0x10000000 type=write-combining', 0x36)
write(r0, &(0x7f0000000300)='disable=0', 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000640)='./sys\x00', &(0x7f0000000680)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='0', 0x1)
write(r1, &(0x7f0000000740)='1', 0x1)
executing program 7:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='0', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='1', 0x1)
executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/aesni_intel\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/aes_generic\x00', 0x0, 0x0)
executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/event_source/devices/cpu\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/event_source/devices/uncore_cbox_0\x00', 0x0, 0x0)
executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./sys/bus/pci/devices/0000:00:01.0\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000080)='driver_override\x00', 0x1, 0x0)
executing program 9:
r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
pread64(r0, &(0x7f0000000100)=""/8, 0x8, 0x179)
executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)='0\x00', 0x1)
executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/event_source/devices/software/type\x00', 0x0, 0x0)
read(r0, &(0x7f0000000000)=""/1024, 0x400)
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/cpu\x00', 0x0, 0x0)
executing program 8:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/event_source/devices/kprobes/type\x00', 0x0, 0x0)
executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/cache/index0/subcaches\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/cache/index1/subcaches\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/cpu/cpu1/cache/index2/subcaches\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/cache/index3/subcaches\x00', 0x0, 0x0)
executing program 9:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/cpu/0/msr\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f0000000200)='W\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x83f)
pwrite64(r0, &(0x7f0000000220)="5700040000000000", 0x8, 0x830)
pwrite64(r0, &(0x7f0000000240)='w\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x83f)
pwrite64(r0, &(0x7f0000000260)="7700040000000000", 0x8, 0x830)
pwrite64(r0, &(0x7f0000000280)="9700000000000000", 0x8, 0x83f)
executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000100)=""/4096, 0x1000)
executing program 8:
uname(&(0x7f0000000080)=""/65)
executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x2d, {"b807000000b9010000000fa24889cf48be000104000000000048893e"}}], 0x2d})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/event_source/devices/cpu\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000100), 0x1000)
executing program 6:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00')
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='0\n\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='processors\n\x00', 0xb)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='disk\n\x00', 0x5)
close(r3)
executing program 8:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/sync_on_suspend\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/mem_sleep\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/power/autosleep\x00', 0x0, 0x0)
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/event_source/devices/cstate_core/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/event_source/devices/intel_pt/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/event_source/devices/msr/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/event_source/devices/power/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/event_source/devices/software/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/event_source/devices/tracepoint/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/event_source/devices/breakpoint/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/event_source/devices/kprobe/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/event_source/devices/uprobe/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/event_source/devices/amd_df/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/event_source/devices/amd_nb/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/event_source/devices/ibs_op/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/event_source/devices/ibs_fetch/type\x00', 0x0, 0x0)
executing program 8:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/dax/devices\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200), 0x1000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/nd/devices\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000200), 0x1000)
executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0\x00', 0x1)
write(r0, &(0x7f0000000180)='1\x00', 0x1)
close(r0)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
executing program 9:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x26)
executing program 8:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/event_source/devices\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200)=""/4096, 0x1000)
executing program 37:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0\x00', 0x1)
write(r0, &(0x7f0000000180)='1\x00', 0x1)
close(r0)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
executing program 38:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00')
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='0\n\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='processors\n\x00', 0xb)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='disk\n\x00', 0x5)
close(r3)
executing program 39:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='0', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='1', 0x1)
executing program 40:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/event_source/devices\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200)=""/4096, 0x1000)
executing program 41:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x26)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0', 0x1)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
close(r0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)
close(r0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1\n', 0x2)
close(r1)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 20 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-close-nanosleep-openat-write-close-nanosleep
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)
close(r0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1\n', 0x2)
close(r1)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

program crashed: possible deadlock in kernfs_remove_by_name_ns
single: successfully extracted reproducer
found reproducer with 10 syscalls
minimizing guilty program
testing program (duration=1m14.405789406s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-close-nanosleep-openat-write-close
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)
close(r0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1\n', 0x2)
close(r1)

program crashed: possible deadlock in kernfs_remove_by_name_ns
testing program (duration=1m14.405789406s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-close-nanosleep-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)
close(r0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1\n', 0x2)

program crashed: possible deadlock in kernfs_remove_by_name_ns
testing program (duration=1m14.405789406s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-close-nanosleep-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)
close(r0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0)

program crashed: possible deadlock in kernfs_remove_by_name_ns
testing program (duration=1m14.405789406s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-close-nanosleep
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)
close(r0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

program crashed: possible deadlock in kernfs_remove_by_name_ns
testing program (duration=1m14.405789406s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-close
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)
close(r0)

program crashed: possible deadlock in kernfs_remove_by_name_ns
testing program (duration=1m14.405789406s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)

program crashed: possible deadlock in kernfs_remove_by_name_ns
testing program (duration=1m14.405789406s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)

program did not crash
testing program (duration=1m14.405789406s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000200)='1\n', 0x2)

program did not crash
testing program (duration=1m14.405789406s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)

program did not crash
testing program (duration=1m14.405789406s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-write
detailed listing:
executing program 0:
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)

program did not crash
testing program (duration=1m14.405789406s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)

program did not crash
testing program (duration=1m14.405789406s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)

program did not crash
testing program (duration=1m14.405789406s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)

program did not crash
testing program (duration=1m14.405789406s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)

program did not crash
testing program (duration=1m14.405789406s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)

program did not crash
testing program (duration=1m14.405789406s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

program did not crash
testing program (duration=1m14.405789406s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200), 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m14.405789406s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program crashed: possible deadlock in kernfs_remove_by_name_ns
simplifying C reproducer
testing compiled C program (duration=1m14.405789406s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program crashed: possible deadlock in kernfs_remove_by_name_ns
testing compiled C program (duration=1m14.405789406s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program crashed: possible deadlock in kernfs_remove_by_name_ns
testing compiled C program (duration=1m14.405789406s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program crashed: possible deadlock in kernfs_remove_by_name_ns
testing compiled C program (duration=1m14.405789406s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program crashed: possible deadlock in kernfs_remove_by_name_ns
testing compiled C program (duration=1m14.405789406s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program crashed: possible deadlock in kernfs_remove_by_name_ns
testing compiled C program (duration=1m14.405789406s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program crashed: possible deadlock in kernfs_remove_by_name_ns
testing compiled C program (duration=1m14.405789406s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program crashed: possible deadlock in kernfs_remove_by_name_ns
testing program (duration=1m14.405789406s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)

program did not crash
validation run: crashed=false
testing program (duration=1m14.405789406s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)

program crashed: possible deadlock in kernfs_remove_by_name_ns
validation run: crashed=true
testing program (duration=1m14.405789406s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)

program crashed: possible deadlock in kernfs_remove_by_name_ns
validation run: crashed=true
testing program (duration=1m14.405789406s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)

program crashed: possible deadlock in kernfs_remove_by_name_ns
validation run: crashed=true
reproducing took 2h2m38.066623403s
repro crashed as (corrupted=false):
======================================================
WARNING: possible circular locking dependency detected
syzkaller #0 Not tainted
------------------------------------------------------
cpuhp/1/18 is trying to acquire lock:
ffff88802c9fb748 (kn->active#32){++++}-{0:0}, at: kernfs_remove_by_name_ns+0x91/0x100 fs/kernfs/dir.c:1566

but task is already holding lock:
ffffffff8cfbd7e0 (cpuhp_state-down){+.+.}-{0:0}, at: cpuhp_lock_acquire+0x8/0x40 kernel/cpu.c:99

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #4 (cpuhp_state-down){+.+.}-{0:0}:
       cpuhp_lock_acquire+0x3a/0x40 kernel/cpu.c:100
       cpuhp_kick_ap_work+0x7f/0x1b0 kernel/cpu.c:901
       _cpu_down+0x35b/0xbb0 kernel/cpu.c:1170
       cpu_down_maps_locked kernel/cpu.c:1217 [inline]
       cpu_down kernel/cpu.c:1225 [inline]
       cpu_device_down+0x69/0xa0 kernel/cpu.c:1242
       device_offline+0x259/0x3a0 drivers/base/core.c:3948
       acpi_bus_offline+0x23e/0x400 drivers/acpi/scan.c:163
       acpi_scan_try_to_offline drivers/acpi/scan.c:226 [inline]
       acpi_scan_hot_remove drivers/acpi/scan.c:258 [inline]
       acpi_generic_hotplug_event drivers/acpi/scan.c:374 [inline]
       acpi_device_hotplug+0x56c/0xc60 drivers/acpi/scan.c:398
       acpi_hotplug_work_fn+0x8f/0xc0 drivers/acpi/osl.c:1160
       process_one_work+0x867/0xff0 kernel/workqueue.c:2310
       worker_thread+0xad7/0x12a0 kernel/workqueue.c:2457
       kthread+0x42e/0x520 kernel/kthread.c:334
       ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287

-> #3 (cpu_hotplug_lock){++++}-{0:0}:
       percpu_down_write+0x52/0x2f0 kernel/locking/percpu-rwsem.c:217
       cpus_write_lock kernel/cpu.c:327 [inline]
       _cpu_up+0x77/0x810 kernel/cpu.c:1354
       cpu_up+0x16d/0x1a0 kernel/cpu.c:1436
       bringup_nonboot_cpus+0x100/0x1a0 kernel/cpu.c:1502
       smp_init+0x3a/0x150 kernel/smp.c:1091
       kernel_init_freeable+0x3bc/0x560 init/main.c:1581
       kernel_init+0x19/0x1b0 init/main.c:1480
       ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287

-> #2 (cpu_add_remove_lock){+.+.}-{3:3}:
       __mutex_lock_common+0x1e5/0x2400 kernel/locking/mutex.c:596
       __mutex_lock kernel/locking/mutex.c:729 [inline]
       mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743
       cpu_maps_update_begin kernel/cpu.c:289 [inline]
       cpu_down kernel/cpu.c:1224 [inline]
       cpu_device_down+0x3a/0xa0 kernel/cpu.c:1242
       device_offline+0x259/0x3a0 drivers/base/core.c:3948
       acpi_bus_offline+0x23e/0x400 drivers/acpi/scan.c:163
       acpi_scan_try_to_offline drivers/acpi/scan.c:226 [inline]
       acpi_scan_hot_remove drivers/acpi/scan.c:258 [inline]
       acpi_generic_hotplug_event drivers/acpi/scan.c:374 [inline]
       acpi_device_hotplug+0x56c/0xc60 drivers/acpi/scan.c:398
       acpi_hotplug_work_fn+0x8f/0xc0 drivers/acpi/osl.c:1160
       process_one_work+0x867/0xff0 kernel/workqueue.c:2310
       worker_thread+0xad7/0x12a0 kernel/workqueue.c:2457
       kthread+0x42e/0x520 kernel/kthread.c:334
       ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287

-> #1 (&device->physical_node_lock){+.+.}-{3:3}:
       __mutex_lock_common+0x1e5/0x2400 kernel/locking/mutex.c:596
       __mutex_lock kernel/locking/mutex.c:729 [inline]
       mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743
       acpi_get_first_physical_node drivers/acpi/bus.c:644 [inline]
       acpi_primary_dev_companion drivers/acpi/bus.c:663 [inline]
       acpi_companion_match+0x86/0x110 drivers/acpi/bus.c:717
       acpi_device_uevent_modalias+0x16/0x30 drivers/acpi/device_sysfs.c:283
       platform_uevent+0x38/0xb0 drivers/base/platform.c:1357
       dev_uevent+0x3a5/0x740 drivers/base/core.c:2344
       kobject_uevent_env+0x465/0x890 lib/kobject_uevent.c:572
       kobject_synth_uevent+0x457/0x940 lib/kobject_uevent.c:208
       uevent_store+0x22/0x60 drivers/base/core.c:2428
       kernfs_fop_write_iter+0x3a8/0x500 fs/kernfs/file.c:296
       call_write_iter include/linux/fs.h:2179 [inline]
       new_sync_write fs/read_write.c:507 [inline]
       vfs_write+0x748/0xd70 fs/read_write.c:594
       ksys_write+0x153/0x260 fs/read_write.c:647
       do_syscall_x64 arch/x86/entry/common.c:50 [inline]
       do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
       entry_SYSCALL_64_after_hwframe+0x66/0xd0

-> #0 (kn->active#32){++++}-{0:0}:
       check_prev_add kernel/locking/lockdep.c:3120 [inline]
       check_prevs_add kernel/locking/lockdep.c:3239 [inline]
       validate_chain kernel/locking/lockdep.c:3855 [inline]
       __lock_acquire+0x38f7/0x7d40 kernel/locking/lockdep.c:5120
       lock_acquire+0x19f/0x400 kernel/locking/lockdep.c:5737
       kernfs_drain fs/kernfs/dir.c:478 [inline]
       __kernfs_remove+0x5da/0xcb0 fs/kernfs/dir.c:1372
       kernfs_remove_by_name_ns+0x91/0x100 fs/kernfs/dir.c:1566
       sysfs_remove_file include/linux/sysfs.h:613 [inline]
       device_remove_file drivers/base/core.c:2796 [inline]
       device_del+0x62f/0xa80 drivers/base/core.c:3613
       device_unregister+0x1c/0xc0 drivers/base/core.c:3660
       mce_device_remove arch/x86/kernel/cpu/mce/core.c:2575 [inline]
       mce_cpu_pre_down+0x33f/0x540 arch/x86/kernel/cpu/mce/core.c:2638
       cpuhp_invoke_callback+0x423/0x7e0 kernel/cpu.c:191
       cpuhp_thread_fun+0x3b2/0x7f0 kernel/cpu.c:822
       smpboot_thread_fn+0x520/0x990 kernel/smpboot.c:164
       kthread+0x42e/0x520 kernel/kthread.c:334
       ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287

other info that might help us debug this:

Chain exists of:
  kn->active#32 --> cpu_hotplug_lock --> cpuhp_state-down

 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(cpuhp_state-down);
                               lock(cpu_hotplug_lock);
                               lock(cpuhp_state-down);
  lock(kn->active#32);

 *** DEADLOCK ***

2 locks held by cpuhp/1/18:
 #0: ffffffff8cfbd670 (cpu_hotplug_lock){++++}-{0:0}, at: lockdep_acquire_cpus_lock+0x5/0x30 kernel/cpu.c:357
 #1: ffffffff8cfbd7e0 (cpuhp_state-down){+.+.}-{0:0}, at: cpuhp_lock_acquire+0x8/0x40 kernel/cpu.c:99

stack backtrace:
CPU: 1 PID: 18 Comm: cpuhp/1 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
 check_noncircular+0x2f8/0x400 kernel/locking/lockdep.c:2178
 check_prev_add kernel/locking/lockdep.c:3120 [inline]
 check_prevs_add kernel/locking/lockdep.c:3239 [inline]
 validate_chain kernel/locking/lockdep.c:3855 [inline]
 __lock_acquire+0x38f7/0x7d40 kernel/locking/lockdep.c:5120
 lock_acquire+0x19f/0x400 kernel/locking/lockdep.c:5737
 kernfs_drain fs/kernfs/dir.c:478 [inline]
 __kernfs_remove+0x5da/0xcb0 fs/kernfs/dir.c:1372
 kernfs_remove_by_name_ns+0x91/0x100 fs/kernfs/dir.c:1566
 sysfs_remove_file include/linux/sysfs.h:613 [inline]
 device_remove_file drivers/base/core.c:2796 [inline]
 device_del+0x62f/0xa80 drivers/base/core.c:3613
 device_unregister+0x1c/0xc0 drivers/base/core.c:3660
 mce_device_remove arch/x86/kernel/cpu/mce/core.c:2575 [inline]
 mce_cpu_pre_down+0x33f/0x540 arch/x86/kernel/cpu/mce/core.c:2638
 cpuhp_invoke_callback+0x423/0x7e0 kernel/cpu.c:191
 cpuhp_thread_fun+0x3b2/0x7f0 kernel/cpu.c:822
 smpboot_thread_fn+0x520/0x990 kernel/smpboot.c:164
 kthread+0x42e/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>

final repro crashed as (corrupted=false):
======================================================
WARNING: possible circular locking dependency detected
syzkaller #0 Not tainted
------------------------------------------------------
cpuhp/1/18 is trying to acquire lock:
ffff88802c9fb748 (kn->active#32){++++}-{0:0}, at: kernfs_remove_by_name_ns+0x91/0x100 fs/kernfs/dir.c:1566

but task is already holding lock:
ffffffff8cfbd7e0 (cpuhp_state-down){+.+.}-{0:0}, at: cpuhp_lock_acquire+0x8/0x40 kernel/cpu.c:99

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #4 (cpuhp_state-down){+.+.}-{0:0}:
       cpuhp_lock_acquire+0x3a/0x40 kernel/cpu.c:100
       cpuhp_kick_ap_work+0x7f/0x1b0 kernel/cpu.c:901
       _cpu_down+0x35b/0xbb0 kernel/cpu.c:1170
       cpu_down_maps_locked kernel/cpu.c:1217 [inline]
       cpu_down kernel/cpu.c:1225 [inline]
       cpu_device_down+0x69/0xa0 kernel/cpu.c:1242
       device_offline+0x259/0x3a0 drivers/base/core.c:3948
       acpi_bus_offline+0x23e/0x400 drivers/acpi/scan.c:163
       acpi_scan_try_to_offline drivers/acpi/scan.c:226 [inline]
       acpi_scan_hot_remove drivers/acpi/scan.c:258 [inline]
       acpi_generic_hotplug_event drivers/acpi/scan.c:374 [inline]
       acpi_device_hotplug+0x56c/0xc60 drivers/acpi/scan.c:398
       acpi_hotplug_work_fn+0x8f/0xc0 drivers/acpi/osl.c:1160
       process_one_work+0x867/0xff0 kernel/workqueue.c:2310
       worker_thread+0xad7/0x12a0 kernel/workqueue.c:2457
       kthread+0x42e/0x520 kernel/kthread.c:334
       ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287

-> #3 (cpu_hotplug_lock){++++}-{0:0}:
       percpu_down_write+0x52/0x2f0 kernel/locking/percpu-rwsem.c:217
       cpus_write_lock kernel/cpu.c:327 [inline]
       _cpu_up+0x77/0x810 kernel/cpu.c:1354
       cpu_up+0x16d/0x1a0 kernel/cpu.c:1436
       bringup_nonboot_cpus+0x100/0x1a0 kernel/cpu.c:1502
       smp_init+0x3a/0x150 kernel/smp.c:1091
       kernel_init_freeable+0x3bc/0x560 init/main.c:1581
       kernel_init+0x19/0x1b0 init/main.c:1480
       ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287

-> #2 (cpu_add_remove_lock){+.+.}-{3:3}:
       __mutex_lock_common+0x1e5/0x2400 kernel/locking/mutex.c:596
       __mutex_lock kernel/locking/mutex.c:729 [inline]
       mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743
       cpu_maps_update_begin kernel/cpu.c:289 [inline]
       cpu_down kernel/cpu.c:1224 [inline]
       cpu_device_down+0x3a/0xa0 kernel/cpu.c:1242
       device_offline+0x259/0x3a0 drivers/base/core.c:3948
       acpi_bus_offline+0x23e/0x400 drivers/acpi/scan.c:163
       acpi_scan_try_to_offline drivers/acpi/scan.c:226 [inline]
       acpi_scan_hot_remove drivers/acpi/scan.c:258 [inline]
       acpi_generic_hotplug_event drivers/acpi/scan.c:374 [inline]
       acpi_device_hotplug+0x56c/0xc60 drivers/acpi/scan.c:398
       acpi_hotplug_work_fn+0x8f/0xc0 drivers/acpi/osl.c:1160
       process_one_work+0x867/0xff0 kernel/workqueue.c:2310
       worker_thread+0xad7/0x12a0 kernel/workqueue.c:2457
       kthread+0x42e/0x520 kernel/kthread.c:334
       ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287

-> #1 (&device->physical_node_lock){+.+.}-{3:3}:
       __mutex_lock_common+0x1e5/0x2400 kernel/locking/mutex.c:596
       __mutex_lock kernel/locking/mutex.c:729 [inline]
       mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743
       acpi_get_first_physical_node drivers/acpi/bus.c:644 [inline]
       acpi_primary_dev_companion drivers/acpi/bus.c:663 [inline]
       acpi_companion_match+0x86/0x110 drivers/acpi/bus.c:717
       acpi_device_uevent_modalias+0x16/0x30 drivers/acpi/device_sysfs.c:283
       platform_uevent+0x38/0xb0 drivers/base/platform.c:1357
       dev_uevent+0x3a5/0x740 drivers/base/core.c:2344
       kobject_uevent_env+0x465/0x890 lib/kobject_uevent.c:572
       kobject_synth_uevent+0x457/0x940 lib/kobject_uevent.c:208
       uevent_store+0x22/0x60 drivers/base/core.c:2428
       kernfs_fop_write_iter+0x3a8/0x500 fs/kernfs/file.c:296
       call_write_iter include/linux/fs.h:2179 [inline]
       new_sync_write fs/read_write.c:507 [inline]
       vfs_write+0x748/0xd70 fs/read_write.c:594
       ksys_write+0x153/0x260 fs/read_write.c:647
       do_syscall_x64 arch/x86/entry/common.c:50 [inline]
       do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
       entry_SYSCALL_64_after_hwframe+0x66/0xd0

-> #0 (kn->active#32){++++}-{0:0}:
       check_prev_add kernel/locking/lockdep.c:3120 [inline]
       check_prevs_add kernel/locking/lockdep.c:3239 [inline]
       validate_chain kernel/locking/lockdep.c:3855 [inline]
       __lock_acquire+0x38f7/0x7d40 kernel/locking/lockdep.c:5120
       lock_acquire+0x19f/0x400 kernel/locking/lockdep.c:5737
       kernfs_drain fs/kernfs/dir.c:478 [inline]
       __kernfs_remove+0x5da/0xcb0 fs/kernfs/dir.c:1372
       kernfs_remove_by_name_ns+0x91/0x100 fs/kernfs/dir.c:1566
       sysfs_remove_file include/linux/sysfs.h:613 [inline]
       device_remove_file drivers/base/core.c:2796 [inline]
       device_del+0x62f/0xa80 drivers/base/core.c:3613
       device_unregister+0x1c/0xc0 drivers/base/core.c:3660
       mce_device_remove arch/x86/kernel/cpu/mce/core.c:2575 [inline]
       mce_cpu_pre_down+0x33f/0x540 arch/x86/kernel/cpu/mce/core.c:2638
       cpuhp_invoke_callback+0x423/0x7e0 kernel/cpu.c:191
       cpuhp_thread_fun+0x3b2/0x7f0 kernel/cpu.c:822
       smpboot_thread_fn+0x520/0x990 kernel/smpboot.c:164
       kthread+0x42e/0x520 kernel/kthread.c:334
       ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287

other info that might help us debug this:

Chain exists of:
  kn->active#32 --> cpu_hotplug_lock --> cpuhp_state-down

 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(cpuhp_state-down);
                               lock(cpu_hotplug_lock);
                               lock(cpuhp_state-down);
  lock(kn->active#32);

 *** DEADLOCK ***

2 locks held by cpuhp/1/18:
 #0: ffffffff8cfbd670 (cpu_hotplug_lock){++++}-{0:0}, at: lockdep_acquire_cpus_lock+0x5/0x30 kernel/cpu.c:357
 #1: ffffffff8cfbd7e0 (cpuhp_state-down){+.+.}-{0:0}, at: cpuhp_lock_acquire+0x8/0x40 kernel/cpu.c:99

stack backtrace:
CPU: 1 PID: 18 Comm: cpuhp/1 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
 check_noncircular+0x2f8/0x400 kernel/locking/lockdep.c:2178
 check_prev_add kernel/locking/lockdep.c:3120 [inline]
 check_prevs_add kernel/locking/lockdep.c:3239 [inline]
 validate_chain kernel/locking/lockdep.c:3855 [inline]
 __lock_acquire+0x38f7/0x7d40 kernel/locking/lockdep.c:5120
 lock_acquire+0x19f/0x400 kernel/locking/lockdep.c:5737
 kernfs_drain fs/kernfs/dir.c:478 [inline]
 __kernfs_remove+0x5da/0xcb0 fs/kernfs/dir.c:1372
 kernfs_remove_by_name_ns+0x91/0x100 fs/kernfs/dir.c:1566
 sysfs_remove_file include/linux/sysfs.h:613 [inline]
 device_remove_file drivers/base/core.c:2796 [inline]
 device_del+0x62f/0xa80 drivers/base/core.c:3613
 device_unregister+0x1c/0xc0 drivers/base/core.c:3660
 mce_device_remove arch/x86/kernel/cpu/mce/core.c:2575 [inline]
 mce_cpu_pre_down+0x33f/0x540 arch/x86/kernel/cpu/mce/core.c:2638
 cpuhp_invoke_callback+0x423/0x7e0 kernel/cpu.c:191
 cpuhp_thread_fun+0x3b2/0x7f0 kernel/cpu.c:822
 smpboot_thread_fn+0x520/0x990 kernel/smpboot.c:164
 kthread+0x42e/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>