Warning: Permanently added '[localhost]:29540' (ECDSA) to the list of known hosts.
2025/09/01 08:39:31 fuzzer started
2025/09/01 08:39:31 dialing manager at localhost:35473
syzkaller login: [ 51.216853] cgroup: Unknown subsys name 'net'
[ 51.269096] cgroup: Unknown subsys name 'cpuset'
[ 51.281207] cgroup: Unknown subsys name 'rlimit'
2025/09/01 08:39:41 syscalls: 2214
2025/09/01 08:39:41 code coverage: enabled
2025/09/01 08:39:41 comparison tracing: enabled
2025/09/01 08:39:41 extra coverage: enabled
2025/09/01 08:39:41 setuid sandbox: enabled
2025/09/01 08:39:41 namespace sandbox: enabled
2025/09/01 08:39:41 Android sandbox: enabled
2025/09/01 08:39:41 fault injection: enabled
2025/09/01 08:39:41 leak checking: enabled
2025/09/01 08:39:41 net packet injection: enabled
2025/09/01 08:39:41 net device setup: enabled
2025/09/01 08:39:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/09/01 08:39:41 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/09/01 08:39:41 USB emulation: enabled
2025/09/01 08:39:41 hci packet injection: enabled
2025/09/01 08:39:41 wifi device emulation: enabled
2025/09/01 08:39:41 802.15.4 emulation: enabled
2025/09/01 08:39:41 fetching corpus: 0, signal 0/2000 (executing program)
2025/09/01 08:39:41 fetching corpus: 50, signal 28626/31736 (executing program)
2025/09/01 08:39:41 fetching corpus: 100, signal 41602/45691 (executing program)
2025/09/01 08:39:41 fetching corpus: 150, signal 48846/53882 (executing program)
2025/09/01 08:39:41 fetching corpus: 200, signal 54098/60028 (executing program)
2025/09/01 08:39:42 fetching corpus: 250, signal 58572/65309 (executing program)
2025/09/01 08:39:42 fetching corpus: 300, signal 62154/69650 (executing program)
2025/09/01 08:39:42 fetching corpus: 350, signal 65269/73455 (executing program)
2025/09/01 08:39:42 fetching corpus: 400, signal 69634/78208 (executing program)
2025/09/01 08:39:42 fetching corpus: 450, signal 73228/82214 (executing program)
2025/09/01 08:39:42 fetching corpus: 500, signal 75483/85028 (executing program)
2025/09/01 08:39:42 fetching corpus: 550, signal 80882/90328 (executing program)
2025/09/01 08:39:42 fetching corpus: 600, signal 83069/92900 (executing program)
2025/09/01 08:39:42 fetching corpus: 650, signal 85616/95651 (executing program)
2025/09/01 08:39:42 fetching corpus: 700, signal 88096/98330 (executing program)
2025/09/01 08:39:43 fetching corpus: 750, signal 90235/100638 (executing program)
2025/09/01 08:39:43 fetching corpus: 800, signal 93852/103969 (executing program)
2025/09/01 08:39:43 fetching corpus: 850, signal 97241/107132 (executing program)
2025/09/01 08:39:43 fetching corpus: 900, signal 99308/109122 (executing program)
2025/09/01 08:39:43 fetching corpus: 950, signal 101050/110870 (executing program)
2025/09/01 08:39:43 fetching corpus: 1000, signal 102516/112402 (executing program)
2025/09/01 08:39:43 fetching corpus: 1050, signal 103780/113730 (executing program)
2025/09/01 08:39:43 fetching corpus: 1100, signal 105930/115623 (executing program)
2025/09/01 08:39:43 fetching corpus: 1150, signal 107498/117072 (executing program)
2025/09/01 08:39:44 fetching corpus: 1200, signal 109337/118582 (executing program)
2025/09/01 08:39:44 fetching corpus: 1250, signal 110494/119646 (executing program)
2025/09/01 08:39:44 fetching corpus: 1300, signal 111410/120518 (executing program)
2025/09/01 08:39:44 fetching corpus: 1350, signal 112706/121628 (executing program)
2025/09/01 08:39:44 fetching corpus: 1400, signal 113967/122686 (executing program)
2025/09/01 08:39:44 fetching corpus: 1450, signal 115052/123584 (executing program)
2025/09/01 08:39:44 fetching corpus: 1500, signal 115768/124246 (executing program)
2025/09/01 08:39:44 fetching corpus: 1550, signal 117834/125555 (executing program)
2025/09/01 08:39:44 fetching corpus: 1600, signal 118803/126251 (executing program)
2025/09/01 08:39:45 fetching corpus: 1650, signal 120043/127079 (executing program)
2025/09/01 08:39:45 fetching corpus: 1700, signal 121096/127785 (executing program)
2025/09/01 08:39:45 fetching corpus: 1750, signal 121727/128285 (executing program)
2025/09/01 08:39:45 fetching corpus: 1800, signal 123351/129220 (executing program)
2025/09/01 08:39:45 fetching corpus: 1850, signal 124239/129792 (executing program)
2025/09/01 08:39:45 fetching corpus: 1900, signal 125386/130344 (executing program)
2025/09/01 08:39:45 fetching corpus: 1950, signal 126378/130884 (executing program)
2025/09/01 08:39:45 fetching corpus: 2000, signal 127671/131508 (executing program)
2025/09/01 08:39:46 fetching corpus: 2050, signal 128747/132014 (executing program)
2025/09/01 08:39:46 fetching corpus: 2100, signal 129566/132445 (executing program)
2025/09/01 08:39:46 fetching corpus: 2150, signal 130258/132765 (executing program)
2025/09/01 08:39:46 fetching corpus: 2200, signal 130872/133021 (executing program)
2025/09/01 08:39:46 fetching corpus: 2244, signal 131716/133348 (executing program)
2025/09/01 08:39:46 fetching corpus: 2244, signal 131716/133377 (executing program)
2025/09/01 08:39:46 fetching corpus: 2244, signal 131716/133411 (executing program)
2025/09/01 08:39:46 fetching corpus: 2244, signal 131716/133450 (executing program)
2025/09/01 08:39:46 fetching corpus: 2244, signal 131716/133488 (executing program)
2025/09/01 08:39:46 fetching corpus: 2244, signal 131716/133513 (executing program)
2025/09/01 08:39:46 fetching corpus: 2244, signal 131716/133549 (executing program)
2025/09/01 08:39:46 fetching corpus: 2244, signal 131716/133580 (executing program)
2025/09/01 08:39:46 fetching corpus: 2244, signal 131716/133614 (executing program)
2025/09/01 08:39:46 fetching corpus: 2244, signal 131716/133651 (executing program)
2025/09/01 08:39:46 fetching corpus: 2244, signal 131716/133691 (executing program)
2025/09/01 08:39:46 fetching corpus: 2244, signal 131716/133721 (executing program)
2025/09/01 08:39:46 fetching corpus: 2244, signal 131716/133765 (executing program)
2025/09/01 08:39:46 fetching corpus: 2244, signal 131716/133800 (executing program)
2025/09/01 08:39:46 fetching corpus: 2244, signal 131716/133826 (executing program)
2025/09/01 08:39:46 fetching corpus: 2244, signal 131716/133867 (executing program)
2025/09/01 08:39:46 fetching corpus: 2244, signal 131716/133900 (executing program)
2025/09/01 08:39:46 fetching corpus: 2244, signal 131716/133939 (executing program)
2025/09/01 08:39:46 fetching corpus: 2244, signal 131716/133978 (executing program)
2025/09/01 08:39:46 fetching corpus: 2244, signal 131716/134012 (executing program)
2025/09/01 08:39:46 fetching corpus: 2244, signal 131716/134050 (executing program)
2025/09/01 08:39:46 fetching corpus: 2244, signal 131716/134059 (executing program)
2025/09/01 08:39:46 fetching corpus: 2244, signal 131716/134059 (executing program)
2025/09/01 08:39:48 starting 8 fuzzer processes
08:39:48 executing program 0:
rt_sigprocmask(0x1, &(0x7f0000000000), &(0x7f0000000040), 0x8)
08:39:48 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366805d8600080801000240004000f801", 0x17}], 0x0, &(0x7f0000010d00))
08:39:48 executing program 4:
r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
08:39:48 executing program 2:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
r0 = gettid()
r1 = gettid()
kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)
08:39:48 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f000300040000000000000000000f007f5c", 0x20, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@grpjquota}]})
08:39:48 executing program 7:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fcntl$getown(r0, 0x9)
08:39:48 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x1, &(0x7f0000000340)=[0x0])
[ 67.529136] audit: type=1400 audit(1756715988.925:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
08:39:48 executing program 6:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x12, r0, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
[ 68.750095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 68.753060] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 68.756808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 68.760719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 68.763084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 68.821268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 68.833703] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 68.834712] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 68.836954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 68.838650] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 68.840674] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 68.842134] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 68.844351] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 68.846070] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 68.846863] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 68.849253] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 68.849403] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 68.853031] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 68.853324] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 68.855024] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 68.857718] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 68.860654] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 68.869461] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 68.874261] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 68.878960] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 68.880157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 68.883695] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 68.884681] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 68.886250] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 68.890544] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 68.890577] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 68.891678] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 68.895775] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 68.904763] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 68.908175] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 68.910304] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 68.912361] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 68.921790] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 68.972707] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 68.980732] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 70.786997] Bluetooth: hci0: command tx timeout
[ 70.914728] Bluetooth: hci2: command tx timeout
[ 70.915364] Bluetooth: hci3: command tx timeout
[ 70.915994] Bluetooth: hci5: command tx timeout
[ 70.916270] Bluetooth: hci1: command tx timeout
[ 70.978567] Bluetooth: hci6: command tx timeout
[ 70.978631] Bluetooth: hci4: command tx timeout
[ 71.043559] Bluetooth: hci7: command tx timeout
[ 72.836526] Bluetooth: hci0: command tx timeout
[ 72.962607] Bluetooth: hci1: command tx timeout
[ 72.963116] Bluetooth: hci3: command tx timeout
[ 72.963564] Bluetooth: hci5: command tx timeout
[ 72.963968] Bluetooth: hci2: command tx timeout
[ 73.027767] Bluetooth: hci6: command tx timeout
[ 73.028164] Bluetooth: hci4: command tx timeout
[ 73.090641] Bluetooth: hci7: command tx timeout
[ 74.882805] Bluetooth: hci0: command tx timeout
[ 75.010573] Bluetooth: hci2: command tx timeout
[ 75.010604] Bluetooth: hci5: command tx timeout
[ 75.011009] Bluetooth: hci3: command tx timeout
[ 75.011419] Bluetooth: hci1: command tx timeout
[ 75.074622] Bluetooth: hci6: command tx timeout
[ 75.075608] Bluetooth: hci4: command tx timeout
[ 75.140496] Bluetooth: hci7: command tx timeout
[ 76.931693] Bluetooth: hci0: command tx timeout
[ 77.058612] Bluetooth: hci2: command tx timeout
[ 77.058714] Bluetooth: hci1: command tx timeout
[ 77.059582] Bluetooth: hci3: command tx timeout
[ 77.059603] Bluetooth: hci5: command tx timeout
[ 77.122559] Bluetooth: hci4: command tx timeout
[ 77.122978] Bluetooth: hci6: command tx timeout
[ 77.186510] Bluetooth: hci7: command tx timeout
[ 105.948703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.949332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.120973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.122009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.277108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.277881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.433536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.434104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.620600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.621378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.686235] loop1: detected capacity change from 0 to 1
[ 106.699214] FAT-fs (loop1): unable to read boot sector (logical sector size = 2048)
[ 106.709900] loop1: detected capacity change from 0 to 1
[ 106.717366] FAT-fs (loop1): unable to read boot sector (logical sector size = 2048)
08:40:28 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366805d8600080801000240004000f801", 0x17}], 0x0, &(0x7f0000010d00))
[ 106.803084] loop1: detected capacity change from 0 to 1
[ 106.837554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.838126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.844732] FAT-fs (loop1): unable to read boot sector (logical sector size = 2048)
08:40:28 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366805d8600080801000240004000f801", 0x17}], 0x0, &(0x7f0000010d00))
[ 106.922840] loop1: detected capacity change from 0 to 1
[ 106.926200] FAT-fs (loop1): unable to read boot sector (logical sector size = 2048)
[ 106.948113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.949259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:40:28 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366805d8600080801000240004000f801", 0x17}], 0x0, &(0x7f0000010d00))
[ 107.008241] loop1: detected capacity change from 0 to 1
[ 107.013354] loop3: detected capacity change from 0 to 512
[ 107.017810] FAT-fs (loop1): unable to read boot sector (logical sector size = 2048)
[ 107.091734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 107.126018] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
08:40:28 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f000300040000000000000000000f007f5c", 0x20, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@grpjquota}]})
[ 107.179365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.179971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.181665] loop3: detected capacity change from 0 to 512
[ 107.201501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 107.250463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.251074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.268713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.269266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:40:28 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f000300040000000000000000000f007f5c", 0x20, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@grpjquota}]})
[ 107.286953] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 107.364098] loop3: detected capacity change from 0 to 512
[ 107.379437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 107.409781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
08:40:28 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f000300040000000000000000000f007f5c", 0x20, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@grpjquota}]})
08:40:28 executing program 1:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xf84e7f3, 0x1000000000})
unlink(&(0x7f00000000c0)='./file0\x00')
sendfile(r1, r2, 0x0, 0xa0103)
[ 107.518523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.519113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.594006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.594941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.627620] audit: type=1400 audit(1756716029.020:8): avc: denied { open } for pid=3901 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 107.648957] audit: type=1400 audit(1756716029.021:9): avc: denied { kernel } for pid=3901 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 107.673582] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 107.674358] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current]
[ 107.675018] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 107.675661] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 02 00 00 02 00
[ 107.676285] I/O error, dev sr0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 107.677326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 107.677929] I/O error, dev sr0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 107.678660] Buffer I/O error on dev sr0, logical block 8, async page read
[ 107.680621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 107.681093] I/O error, dev sr0, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 107.681922] Buffer I/O error on dev sr0, logical block 9, async page read
[ 107.687815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 107.688276] I/O error, dev sr0, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 107.689012] Buffer I/O error on dev sr0, logical block 10, async page read
[ 107.692795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 107.693269] I/O error, dev sr0, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 107.693986] Buffer I/O error on dev sr0, logical block 11, async page read
[ 107.699612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 107.700079] I/O error, dev sr0, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 107.700923] Buffer I/O error on dev sr0, logical block 12, async page read
08:40:29 executing program 2:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
r0 = gettid()
r1 = gettid()
kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)
[ 107.727747] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 107.728720] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current]
[ 107.729632] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 107.730322] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00
[ 107.731068] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 107.732252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 107.733099] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 107.733791] Buffer I/O error on dev sr0, logical block 0, async page read
[ 107.734506] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 107.735043] I/O error, dev sr0, sector 13 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[ 107.736841] Buffer I/O error on dev sr0, logical block 13, async page read
[ 107.738425] Buffer I/O error on dev sr0, logical block 14, async page read
[ 107.739059] Buffer I/O error on dev sr0, logical block 15, async page read
[ 107.745956] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 107.746448] I/O error, dev sr0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 107.747158] Buffer I/O error on dev sr0, logical block 8, async page read
[ 107.755564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 107.756160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 107.767178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 107.774927] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 107.777826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 107.780491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.781186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.782311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 107.789079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 107.794834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 107.795411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 107.805118] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 107.805733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 107.809572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 107.810335] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 107.814789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 107.827907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.828527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.965175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.965900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.002232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.003160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:40:29 executing program 0:
rt_sigprocmask(0x1, &(0x7f0000000000), &(0x7f0000000040), 0x8)
08:40:29 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x31, 0x1, 0x0, 0x0, "", [@generic="80"]}, 0x14}], 0x1}, 0x0)
08:40:29 executing program 2:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
r0 = gettid()
r1 = gettid()
kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)
08:40:29 executing program 4:
r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
08:40:29 executing program 6:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x12, r0, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
08:40:29 executing program 1:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xf84e7f3, 0x1000000000})
unlink(&(0x7f00000000c0)='./file0\x00')
sendfile(r1, r2, 0x0, 0xa0103)
08:40:29 executing program 7:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fcntl$getown(r0, 0x9)
08:40:29 executing program 5:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
r0 = gettid()
r1 = gettid()
kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)
[ 108.239689] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 108.240583] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current]
[ 108.241202] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 108.241809] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 02 00 00 02 00
08:40:29 executing program 7:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fcntl$getown(r0, 0x9)
08:40:29 executing program 2:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
r0 = gettid()
r1 = gettid()
kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)
[ 108.244951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.248741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.249339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
08:40:29 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x31, 0x1, 0x0, 0x0, "", [@generic="80"]}, 0x14}], 0x1}, 0x0)
08:40:29 executing program 5:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
r0 = gettid()
r1 = gettid()
kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)
[ 108.259986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.260596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.262339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.264995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.266165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.267635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.268223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.268905] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.269513] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.300245] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 108.301115] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current]
[ 108.301759] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 108.302286] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00
[ 108.312231] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 108.313076] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current]
[ 108.313641] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 108.314173] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 03 00 00 01 00
[ 108.319803] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 108.320568] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current]
[ 108.321129] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 108.321685] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00
[ 108.322727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.323326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.323989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.324618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.325204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.334575] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 108.335330] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current]
[ 108.335989] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 108.336635] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 02 00 00 02 00
[ 108.337674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.339217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.339846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.340389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.341002] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.352677] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 108.353412] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current]
[ 108.353988] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 108.354525] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 02 00 00 02 00
[ 108.367852] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 108.368607] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current]
[ 108.369149] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 108.369697] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 01 00 00 01 00
08:40:29 executing program 0:
rt_sigprocmask(0x1, &(0x7f0000000000), &(0x7f0000000040), 0x8)
08:40:29 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x31, 0x1, 0x0, 0x0, "", [@generic="80"]}, 0x14}], 0x1}, 0x0)
08:40:29 executing program 2:
r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
08:40:29 executing program 7:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fcntl$getown(r0, 0x9)
08:40:29 executing program 1:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xf84e7f3, 0x1000000000})
unlink(&(0x7f00000000c0)='./file0\x00')
sendfile(r1, r2, 0x0, 0xa0103)
08:40:29 executing program 6:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x12, r0, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
08:40:29 executing program 5:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
r0 = gettid()
r1 = gettid()
kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)
08:40:29 executing program 4:
r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
[ 108.630587] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 108.631387] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current]
[ 108.632063] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 108.632610] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 02 00 00 02 00
[ 108.635979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.636617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.642861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.643541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.650877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.655654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.665070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
08:40:30 executing program 0:
rt_sigprocmask(0x1, &(0x7f0000000000), &(0x7f0000000040), 0x8)
08:40:30 executing program 4:
r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
[ 108.675102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.700906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.702147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
08:40:30 executing program 6:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x12, r0, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
08:40:30 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x31, 0x1, 0x0, 0x0, "", [@generic="80"]}, 0x14}], 0x1}, 0x0)
08:40:30 executing program 5:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xf84e7f3, 0x1000000000})
unlink(&(0x7f00000000c0)='./file0\x00')
sendfile(r1, r2, 0x0, 0xa0103)
08:40:30 executing program 0:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x12, r0, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
08:40:30 executing program 2:
r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
08:40:30 executing program 4:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x12, r0, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
08:40:30 executing program 1:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xf84e7f3, 0x1000000000})
unlink(&(0x7f00000000c0)='./file0\x00')
sendfile(r1, r2, 0x0, 0xa0103)
08:40:30 executing program 7:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0xc1ebaef55df08010}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20}, 0x20}}, 0x0)
[ 108.973948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.974712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.975315] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.975945] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.979391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.980305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.981662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.982301] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.986595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 108.987179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
08:40:30 executing program 7:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0xc1ebaef55df08010}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20}, 0x20}}, 0x0)
08:40:30 executing program 2:
r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
08:40:30 executing program 3:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80, 0x8, 0x4})
[ 109.043876] kmemleak: Found object by alias at 0x607f1a63e674
[ 109.043892] CPU: 1 UID: 0 PID: 3989 Comm: syz-executor.7 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
[ 109.043911] Tainted: [W]=WARN
[ 109.043915] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 109.043923] Call Trace:
[ 109.043927]
[ 109.043931] dump_stack_lvl+0xca/0x120
[ 109.043958] __lookup_object+0x94/0xb0
[ 109.043977] delete_object_full+0x27/0x70
[ 109.043993] free_percpu+0x30/0x1160
[ 109.044011] ? arch_uprobe_clear_state+0x16/0x140
[ 109.044032] futex_hash_free+0x38/0xc0
[ 109.044048] mmput+0x2d3/0x390
[ 109.044068] do_exit+0x79d/0x2970
[ 109.044082] ? signal_wake_up_state+0x85/0x120
[ 109.044099] ? zap_other_threads+0x2b9/0x3a0
[ 109.044115] ? __pfx_do_exit+0x10/0x10
[ 109.044128] ? do_group_exit+0x1c3/0x2a0
[ 109.044143] ? lock_release+0xc8/0x290
[ 109.044161] do_group_exit+0xd3/0x2a0
[ 109.044176] __x64_sys_exit_group+0x3e/0x50
[ 109.044190] x64_sys_call+0x18c5/0x18d0
[ 109.044207] do_syscall_64+0xbf/0x360
[ 109.044220] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.044232] RIP: 0033:0x7f85ccc70b19
[ 109.044241] Code: Unable to access opcode bytes at 0x7f85ccc70aef.
[ 109.044246] RSP: 002b:00007ffe22a32b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 109.044258] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f85ccc70b19
[ 109.044265] RDX: 00007f85ccc2372b RSI: ffffffffffffffbc RDI: 0000000000000000
[ 109.044273] RBP: 0000000000000000 R08: 0000001b2cf21240 R09: 0000000000000000
[ 109.044280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 109.044286] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe22a32c70
[ 109.044306]
[ 109.044309] kmemleak: Object (percpu) 0x607f1a63e670 (size 8):
[ 109.044316] kmemleak: comm "syz-executor.4", pid 3978, jiffies 4294775827
[ 109.044324] kmemleak: min_count = 1
[ 109.044328] kmemleak: count = 0
[ 109.044331] kmemleak: flags = 0x21
[ 109.044335] kmemleak: checksum = 0
[ 109.044339] kmemleak: backtrace:
[ 109.044342] pcpu_alloc_noprof+0x87a/0x1170
[ 109.044358] percpu_ref_init+0x37/0x400
[ 109.044370] blkg_alloc+0xe9/0x7d0
[ 109.044383] blkg_create+0xe08/0x1420
[ 109.044396] bio_associate_blkg_from_css+0xe06/0x1380
[ 109.044410] bio_associate_blkg+0x10e/0x2a0
[ 109.044424] bio_init+0x2dd/0x570
[ 109.044437] bio_alloc_bioset+0x2cf/0x8c0
[ 109.044452] submit_bh_wbc+0x286/0x720
[ 109.044470] block_read_full_folio+0x405/0x760
[ 109.044482] filemap_read_folio+0x4a/0x1e0
[ 109.044499] filemap_fault+0xf04/0x2ca0
[ 109.044509] __do_fault+0x10d/0x480
[ 109.044523] __handle_mm_fault+0x1aba/0x3260
[ 109.044539] handle_mm_fault+0x2c3/0x9b0
[ 109.044554] __get_user_pages+0x58a/0x2f10
08:40:30 executing program 7:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0xc1ebaef55df08010}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20}, 0x20}}, 0x0)
[ 109.146155] kmemleak: Found object by alias at 0x607f1a62f604
[ 109.146178] CPU: 0 UID: 0 PID: 3975 Comm: syz-executor.0 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
[ 109.146202] Tainted: [W]=WARN
[ 109.146205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 109.146213] Call Trace:
[ 109.146217]
[ 109.146222] dump_stack_lvl+0xca/0x120
[ 109.146248] __lookup_object+0x94/0xb0
[ 109.146265] delete_object_full+0x27/0x70
[ 109.146282] free_percpu+0x30/0x1160
[ 109.146300] ? arch_uprobe_clear_state+0x16/0x140
[ 109.146320] futex_hash_free+0x38/0xc0
[ 109.146335] mmput+0x2d3/0x390
[ 109.146354] do_exit+0x79d/0x2970
[ 109.146372] ? __pfx_do_exit+0x10/0x10
[ 109.146386] ? find_held_lock+0x2b/0x80
[ 109.146404] ? get_signal+0x835/0x2340
[ 109.146424] do_group_exit+0xd3/0x2a0
[ 109.146440] get_signal+0x2315/0x2340
[ 109.146462] ? __pfx_get_signal+0x10/0x10
[ 109.146480] ? up_write+0x195/0x520
[ 109.146494] ? lock_is_held_type+0x9e/0x120
[ 109.146515] arch_do_signal_or_restart+0x80/0x790
[ 109.146533] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 109.146549] ? __pfx_do_mlock+0x10/0x10
[ 109.146561] ? __x64_sys_futex+0x1c9/0x4d0
[ 109.146574] ? __x64_sys_futex+0x1d2/0x4d0
[ 109.146589] ? __pfx___x64_sys_futex+0x10/0x10
[ 109.146603] ? xfd_validate_state+0x55/0x180
[ 109.146624] exit_to_user_mode_loop+0x8b/0x110
[ 109.146638] do_syscall_64+0x2f7/0x360
[ 109.146650] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.146662] RIP: 0033:0x7f9e8ce66b19
[ 109.146671] Code: Unable to access opcode bytes at 0x7f9e8ce66aef.
[ 109.146676] RSP: 002b:00007f9e8a3dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[ 109.146688] RAX: 0000000000000000 RBX: 00007f9e8cf79f60 RCX: 00007f9e8ce66b19
[ 109.146696] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000
[ 109.146703] RBP: 00007f9e8cec0f6d R08: 0000000000000000 R09: 0000000000000000
[ 109.146710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 109.146717] R13: 00007fff52c8ff5f R14: 00007f9e8a3dc300 R15: 0000000000022000
[ 109.146732]
[ 109.146736] kmemleak: Object (percpu) 0x607f1a62f600 (size 8):
[ 109.146743] kmemleak: comm "syz-executor.0", pid 3975, jiffies 4294775755
[ 109.146750] kmemleak: min_count = 1
[ 109.146754] kmemleak: count = 0
[ 109.146757] kmemleak: flags = 0x21
[ 109.146761] kmemleak: checksum = 0
[ 109.146765] kmemleak: backtrace:
[ 109.146769] pcpu_alloc_noprof+0x87a/0x1170
[ 109.146784] percpu_ref_init+0x37/0x400
[ 109.146795] blkg_alloc+0xe9/0x7d0
[ 109.146807] blkg_create+0xe08/0x1420
[ 109.146820] bio_associate_blkg_from_css+0xe06/0x1380
[ 109.146834] bio_associate_blkg+0x10e/0x2a0
[ 109.146847] bio_init+0x2dd/0x570
[ 109.146860] bio_alloc_bioset+0x2cf/0x8c0
[ 109.146875] do_mpage_readpage.isra.0+0xc9c/0x15e0
[ 109.146889] mpage_readahead+0x31e/0x550
[ 109.146902] read_pages+0x196/0xb10
[ 109.146916] page_cache_ra_unbounded+0x391/0x6a0
[ 109.146930] page_cache_ra_order+0x236/0x2f0
[ 109.146945] filemap_fault+0x1831/0x2ca0
[ 109.146956] __do_fault+0x10d/0x480
[ 109.146967] __handle_mm_fault+0x1aba/0x3260
08:40:30 executing program 4:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x12, r0, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
08:40:30 executing program 7:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0xc1ebaef55df08010}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20}, 0x20}}, 0x0)
08:40:30 executing program 0:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x12, r0, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
08:40:30 executing program 5:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xf84e7f3, 0x1000000000})
unlink(&(0x7f00000000c0)='./file0\x00')
sendfile(r1, r2, 0x0, 0xa0103)
08:40:30 executing program 2:
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3)
[ 109.327690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.328635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.329200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.336065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.337002] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.337984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.339085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.341432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.343392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.343989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.344613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.345168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.347694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.348303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.352629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.353244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.354055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.356567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.357186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.358591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.359158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.362809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.363379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.364383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.365059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.366313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.367831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.368420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.369188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.370623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.371182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.382209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.447195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.448095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.449310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.450697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.451251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.454973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 109.463198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
08:40:30 executing program 3:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80, 0x8, 0x4})
08:40:30 executing program 0:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x12, r0, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
08:40:30 executing program 2:
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3)
08:40:30 executing program 6:
socket(0x0, 0x0, 0x0)
08:40:30 executing program 7:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
fsetxattr$system_posix_acl(r0, &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {0x4}}, 0x24, 0x0)
08:40:30 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
dup2(r1, r0)
08:40:30 executing program 4:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x12, r0, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
08:40:30 executing program 5:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xf84e7f3, 0x1000000000})
unlink(&(0x7f00000000c0)='./file0\x00')
sendfile(r1, r2, 0x0, 0xa0103)
[ 109.643288] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI
[ 109.644162] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 109.644770] CPU: 1 UID: 0 PID: 4026 Comm: syz-executor.7 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
[ 109.646069] Tainted: [W]=WARN
[ 109.646569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 109.647895] RIP: 0010:perf_tp_event+0x175/0xe70
[ 109.648629] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 109.651281] RSP: 0018:ffff888045fd7840 EFLAGS: 00010212
[ 109.652473] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 109.653637] RDX: ffff888045fe1b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[ 109.654713] RBP: ffff888045fd7ab0 R08: ffff88806cf31340 R09: ffffe8ffffd07600
[ 109.655781] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 109.656902] R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
[ 109.657452] FS: 000055555cb95400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[ 109.658054] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 109.658502] CR2: 0000001b2cd25000 CR3: 00000000460bc000 CR4: 0000000000350ef0
[ 109.659038] Call Trace:
[ 109.659237]
[ 109.659415] ? __lock_acquire+0x694/0x1b70
[ 109.659751] ? __pfx_perf_tp_event+0x10/0x10
[ 109.660098] ? __lock_acquire+0x694/0x1b70
[ 109.660426] ? css_rstat_updated+0x1b8/0x4d0
[ 109.660772] ? __pfx_css_rstat_updated+0x10/0x10
[ 109.661150] ? lock_is_held_type+0x9e/0x120
[ 109.661494] ? __cgroup_account_cputime+0x88/0xc0
[ 109.661873] ? perf_trace_run_bpf_submit+0xef/0x180
[ 109.662258] ? update_curr+0x39e/0x500
[ 109.662564] perf_trace_run_bpf_submit+0xef/0x180
[ 109.662943] perf_trace_contention_begin+0x235/0x3e0
[ 109.663335] ? __pfx_perf_trace_contention_begin+0x10/0x10
[ 109.663762] ? lock_acquire+0x15e/0x2f0
[ 109.664072] ? tty_release+0x87/0x10a0
[ 109.664386] ? __pfx_tty_release+0x10/0x10
[ 109.664723] trace_contention_begin+0xae/0x110
[ 109.665087] __mutex_lock+0x14b/0x1020
[ 109.665396] ? tty_release+0x87/0x10a0
[ 109.665703] ? tty_release+0x87/0x10a0
[ 109.666008] ? futex_hash_put+0x3f/0x50
[ 109.666314] ? futex_wake+0x1c0/0x540
[ 109.666612] ? __pfx___mutex_lock+0x10/0x10
[ 109.666949] ? __fsnotify_parent+0x1dc/0xb50
[ 109.667298] ? __pfx___fsnotify_parent+0x10/0x10
[ 109.667670] ? __pfx_tty_release+0x10/0x10
[ 109.668001] tty_release+0x87/0x10a0
[ 109.668296] ? __pfx_tty_release+0x10/0x10
[ 109.668626] __fput+0x401/0xb50
[ 109.668897] fput_close_sync+0x10f/0x240
[ 109.669227] ? __pfx_fput_close_sync+0x10/0x10
[ 109.669584] ? dnotify_flush+0x79/0x4c0
[ 109.669891] __x64_sys_close+0x8f/0x120
[ 109.670205] do_syscall_64+0xbf/0x360
[ 109.670500] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.670893] RIP: 0033:0x7f85ccc2372b
[ 109.671179] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44
[ 109.672538] RSP: 002b:00007ffe22a329c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 109.673118] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f85ccc2372b
[ 109.673653] RDX: 00007f85ccd88348 RSI: 0000000000000081 RDI: 0000000000000003
[ 109.674187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 109.674720] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f85ccd88348
[ 109.675253] R13: 00007ffe22a32ae0 R14: 00007f85ccd83f60 R15: 000000000001abd2
[ 109.675792]
[ 109.675973] Modules linked in:
[ 109.676304] ---[ end trace 0000000000000000 ]---
[ 109.676684] RIP: 0010:perf_tp_event+0x175/0xe70
[ 109.677054] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 109.678427] RSP: 0018:ffff888045fd7840 EFLAGS: 00010212
[ 109.678854] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 109.679388] RDX: ffff888045fe1b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[ 109.679941] RBP: ffff888045fd7ab0 R08: ffff88806cf31340 R09: ffffe8ffffd07600
[ 109.680504] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 109.681954] R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
[ 109.683203] FS: 000055555cb95400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[ 109.683919] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 109.684365] CR2: 0000001b2cd25000 CR3: 00000000460bc000 CR4: 0000000000350ef0
[ 109.684927] note: syz-executor.7[4026] exited with preempt_count 2
08:40:31 executing program 3:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80, 0x8, 0x4})
08:40:31 executing program 2:
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3)
08:40:31 executing program 6:
socket(0x0, 0x0, 0x0)
08:40:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001b000000060021"], 0x2c}}, 0x0)
[ 109.817677] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 109.836600] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
08:40:34 executing program 2:
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3)
08:40:34 executing program 7:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
fsetxattr$system_posix_acl(r0, &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {0x4}}, 0x24, 0x0)
08:40:34 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
dup2(r1, r0)
08:40:34 executing program 6:
socket(0x0, 0x0, 0x0)
08:40:34 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001b000000060021"], 0x2c}}, 0x0)
08:40:34 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001b000000060021"], 0x2c}}, 0x0)
08:40:34 executing program 3:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80, 0x8, 0x4})
08:40:34 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
dup2(r1, r0)
[ 112.723072] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 112.733806] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
08:40:34 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
dup2(r1, r0)
08:40:34 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001b000000060021"], 0x2c}}, 0x0)
08:40:34 executing program 6:
socket(0x0, 0x0, 0x0)
08:40:34 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001b000000060021"], 0x2c}}, 0x0)
08:40:34 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001b000000060021"], 0x2c}}, 0x0)
08:40:34 executing program 7:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
fsetxattr$system_posix_acl(r0, &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {0x4}}, 0x24, 0x0)
08:40:34 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000021000100000000000000000002"], 0x28}], 0x1}, 0x0)
[ 112.806791] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 112.822016] kmemleak: Found object by alias at 0x607f1a62f604
[ 112.822043] CPU: 1 UID: 0 PID: 4074 Comm: syz-executor.0 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
[ 112.822079] Tainted: [D]=DIE, [W]=WARN
[ 112.822087] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 112.822099] Call Trace:
[ 112.822106]
[ 112.822114] dump_stack_lvl+0xca/0x120
[ 112.822154] __lookup_object+0x94/0xb0
[ 112.822184] delete_object_full+0x27/0x70
[ 112.822213] free_percpu+0x30/0x1160
[ 112.822243] ? arch_uprobe_clear_state+0x16/0x140
[ 112.822275] futex_hash_free+0x38/0xc0
[ 112.822300] mmput+0x2d3/0x390
[ 112.822332] do_exit+0x79d/0x2970
[ 112.822356] ? lock_release+0x1c7/0x290
[ 112.822383] ? __pfx_do_exit+0x10/0x10
[ 112.822407] ? do_raw_spin_lock+0x123/0x260
[ 112.822435] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 112.822465] do_group_exit+0xd3/0x2a0
[ 112.822499] get_signal+0x2315/0x2340
[ 112.822535] ? __pfx_get_signal+0x10/0x10
[ 112.822566] ? do_futex+0x135/0x370
[ 112.822590] ? __pfx_do_futex+0x10/0x10
[ 112.822615] arch_do_signal_or_restart+0x80/0x790
[ 112.822645] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 112.822675] ? __x64_sys_futex+0x1c9/0x4d0
[ 112.822698] ? __x64_sys_futex+0x1d2/0x4d0
[ 112.822723] ? __pfx___x64_sys_futex+0x10/0x10
[ 112.822751] exit_to_user_mode_loop+0x8b/0x110
[ 112.822773] do_syscall_64+0x2f7/0x360
[ 112.822795] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.822816] RIP: 0033:0x7f9e8ce66b19
[ 112.822832] Code: Unable to access opcode bytes at 0x7f9e8ce66aef.
[ 112.822842] RSP: 002b:00007f9e8a3dc218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 112.822863] RAX: fffffffffffffe00 RBX: 00007f9e8cf79f68 RCX: 00007f9e8ce66b19
[ 112.822877] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9e8cf79f68
[ 112.822890] RBP: 00007f9e8cf79f60 R08: 0000000000000000 R09: 0000000000000000
[ 112.822903] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9e8cf79f6c
[ 112.822916] R13: 00007fff52c8ff5f R14: 00007f9e8a3dc300 R15: 0000000000022000
[ 112.822936]
[ 112.822943] kmemleak: Object (percpu) 0x607f1a62f600 (size 8):
[ 112.822955] kmemleak: comm "syz-executor.1", pid 4082, jiffies 4294779617
[ 112.822968] kmemleak: min_count = 1
[ 112.822975] kmemleak: count = 0
[ 112.822982] kmemleak: flags = 0x21
[ 112.822989] kmemleak: checksum = 0
[ 112.822996] kmemleak: backtrace:
[ 112.823002] pcpu_alloc_noprof+0x87a/0x1170
[ 112.823031] perf_trace_event_init+0x366/0xa10
[ 112.823056] perf_trace_init+0x1a4/0x2f0
[ 112.823079] perf_tp_event_init+0xa6/0x120
[ 112.823109] perf_try_init_event+0x140/0x9f0
[ 112.823133] perf_event_alloc.part.0+0x118e/0x45f0
[ 112.823165] __do_sys_perf_event_open+0x719/0x2c20
[ 112.823189] do_syscall_64+0xbf/0x360
[ 112.823207] entry_SYSCALL_64_after_hwframe+0x77/0x7f
08:40:34 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001b000000060021"], 0x2c}}, 0x0)
[ 112.900166] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 112.909247] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI
[ 112.911194] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 112.912352] CPU: 1 UID: 0 PID: 4086 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
[ 112.914264] Tainted: [D]=DIE, [W]=WARN
[ 112.914889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 112.916114] RIP: 0010:perf_tp_event+0x175/0xe70
[ 112.916834] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 112.919784] RSP: 0018:ffff888045f47780 EFLAGS: 00010012
[ 112.920620] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 112.921723] RDX: ffff888043739b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[ 112.922912] RBP: ffff888045f479f0 R08: ffff88806cf31340 R09: ffffe8ffffd07600
[ 112.924150] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
08:40:34 executing program 6:
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @redirect={0x5, 0x0, 0x0, @multicast1, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @broadcast=0x20020000}}}}}}, 0x0)
[ 112.925314] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000
[ 112.926400] FS: 0000555558dc6400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[ 112.927685] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 112.928576] CR2: 00007ffe22a31fb8 CR3: 000000001f5d5000 CR4: 0000000000350ef0
[ 112.929668] Call Trace:
[ 112.930069]
[ 112.930420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.931232] ? __pfx_perf_tp_event+0x10/0x10
[ 112.931926] ? __mutex_trylock_common+0xf9/0x260
[ 112.932662] ? arch_scale_cpu_capacity+0x17/0xa0
[ 112.933416] ? cpu_util.constprop.0+0x17d/0x340
[ 112.934140] ? __asan_memset+0x24/0x50
[ 112.934742] ? sched_balance_find_dst_group+0xa9a/0x1c00
[ 112.935570] ? lock_release+0x1c7/0x290
[ 112.936186] ? __pfx___mutex_lock+0x10/0x10
[ 112.936865] ? __pfx_sched_balance_find_dst_group+0x10/0x10
[ 112.937744] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 112.938552] ? perf_trace_run_bpf_submit+0xef/0x180
[ 112.939333] ? sched_clock+0x37/0x60
[ 112.939927] ? sched_clock_cpu+0x6c/0x4e0
[ 112.940581] perf_trace_run_bpf_submit+0xef/0x180
[ 112.941349] perf_trace_preemptirq_template+0x259/0x430
[ 112.942181] ? __pick_eevdf+0x326/0x570
[ 112.942800] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 112.943697] ? update_curr+0x39e/0x500
[ 112.944306] ? check_preempt_wakeup_fair+0x406/0x950
[ 112.945103] ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 112.945902] trace_irq_enable.constprop.0+0xa6/0x100
[ 112.946692] trace_hardirqs_on+0x26/0x40
[ 112.947331] _raw_spin_unlock_irqrestore+0x2c/0x50
[ 112.948111] try_to_wake_up+0x8ae/0x11d0
[ 112.948761] ? __pfx_try_to_wake_up+0x10/0x10
[ 112.949478] ? plist_del+0x122/0x270
[ 112.950096] ? __futex_unqueue+0xda/0x1c0
[ 112.950764] wake_up_q+0xa1/0x130
[ 112.951329] futex_wake+0x47e/0x540
[ 112.951914] ? __pfx_futex_wake+0x10/0x10
[ 112.952568] ? xfd_validate_state+0x55/0x180
[ 112.953279] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 112.954098] ? finish_task_switch.isra.0+0x206/0x840
[ 112.954903] do_futex+0x26d/0x370
[ 112.955463] ? __pfx_do_futex+0x10/0x10
[ 112.956091] ? __pfx___schedule+0x10/0x10
[ 112.956748] __x64_sys_futex+0x1c9/0x4d0
[ 112.957412] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 112.958324] ? __pfx___x64_sys_futex+0x10/0x10
[ 112.959049] ? xfd_validate_state+0x55/0x180
[ 112.959765] do_syscall_64+0xbf/0x360
[ 112.960377] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.961202] RIP: 0033:0x7f7af5602b19
[ 112.961788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 112.964607] RSP: 002b:00007ffe3b9c5d68 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 112.965802] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7af5602b19
[ 112.966912] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7af5715f68
[ 112.968035] RBP: 00007f7af5715f60 R08: 00007f7af2b78700 R09: 0000000000000000
[ 112.969176] R10: 00007f7af2b78700 R11: 0000000000000246 R12: 00007f7af571a060
[ 112.970313] R13: 00007ffe3b9c5e70 R14: 00007f7af5715f60 R15: 000000000001b895
[ 112.971453]
[ 112.971831] Modules linked in:
[ 112.972349] ---[ end trace 0000000000000000 ]---
[ 112.973120] RIP: 0010:perf_tp_event+0x175/0xe70
[ 112.973880] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 112.976462] RSP: 0018:ffff888045fd7840 EFLAGS: 00010212
[ 112.977197] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 112.978170] RDX: ffff888045fe1b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[ 112.979139] RBP: ffff888045fd7ab0 R08: ffff88806cf31340 R09: ffffe8ffffd07600
[ 112.980105] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 112.981067] R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
[ 112.982062] FS: 0000555558dc6400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[ 112.983173] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 112.983974] CR2: 00007ffe22a31fb8 CR3: 000000001f5d5000 CR4: 0000000000350ef0
[ 112.984960] note: syz-executor.5[4086] exited with irqs disabled
[ 112.985845] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#3] SMP KASAN NOPTI
[ 112.987364] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 112.988409] CPU: 1 UID: 0 PID: 4086 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
[ 112.990051] Tainted: [D]=DIE, [W]=WARN
[ 112.990582] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 112.991709] RIP: 0010:perf_tp_event+0x175/0xe70
[ 112.992379] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 112.994895] RSP: 0018:ffff88806cf08b80 EFLAGS: 00010012
[ 112.995638] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 112.996627] RDX: ffff888043739b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[ 112.997617] RBP: ffff88806cf08df0 R08: ffff88806cf313e8 R09: ffffe8ffffd07600
[ 112.998632] R10: 0000000000000000 R11: ffff88801763fc98 R12: dffffc0000000000
[ 112.999637] R13: 0000000000000014 R14: ffff88806cf313e8 R15: dffffc0000000000
[ 113.000640] FS: 0000555558dc6400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[ 113.001771] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 113.002585] CR2: 00007ffe22a31fb8 CR3: 000000001f5d5000 CR4: 0000000000350ef0
[ 113.003593] Call Trace:
[ 113.003976]
[ 113.004309] ? __kasan_slab_free+0x3f/0x50
[ 113.004958] ? __pfx_perf_tp_event+0x10/0x10
[ 113.005634] ? sysvec_apic_timer_interrupt+0x70/0x80
[ 113.005843] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 113.006393] ? stack_trace_save+0x8e/0xc0
[ 113.007766] ? kasan_save_stack+0x24/0x50
[ 113.008389] ? kasan_record_aux_stack+0x89/0xa0
[ 113.009092] ? kvfree_call_rcu+0x39/0x3e0
[ 113.009722] ? fib_table_flush_external+0x296/0x660
[ 113.010486] ? fib_unmerge+0x38a/0x500
[ 113.011076] ? kvm_sched_clock_read+0x16/0x30
[ 113.011758] ? sched_clock+0x37/0x60
[ 113.012341] ? sched_clock_cpu+0x6c/0x4e0
[ 113.012981] ? trace_pelt_se_tp+0xdf/0x130
[ 113.013622] ? __update_load_avg_se+0x428/0xa40
[ 113.014348] ? place_entity+0x300/0x410
[ 113.014958] ? kvm_sched_clock_read+0x16/0x30
[ 113.015638] ? perf_trace_run_bpf_submit+0xef/0x180
[ 113.016394] perf_trace_run_bpf_submit+0xef/0x180
[ 113.017150] perf_trace_preemptirq_template+0x259/0x430
[ 113.017943] ? do_raw_spin_unlock+0x53/0x220
[ 113.018635] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 113.019523] ? sched_ttwu_pending+0x2e0/0x4a0
[ 113.020230] ? __pfx_try_to_wake_up+0x10/0x10
[ 113.020935] ? __pfx_sched_ttwu_pending+0x10/0x10
[ 113.021690] ? handle_softirqs+0x16e/0x770
[ 113.022349] trace_irq_enable.constprop.0+0xa6/0x100
[ 113.023124] trace_hardirqs_on+0x26/0x40
[ 113.023744] handle_softirqs+0x16e/0x770
[ 113.024385] __irq_exit_rcu+0xc4/0x100
[ 113.024996] irq_exit_rcu+0x9/0x20
[ 113.025553] sysvec_call_function_single+0xa6/0xc0
[ 113.026321]
[ 113.026672]
[ 113.027024] asm_sysvec_call_function_single+0x1a/0x20
[ 113.027836] RIP: 0010:make_task_dead+0xa2/0x3b0
[ 113.028557] Code: 38 00 85 db 0f 84 21 01 00 00 e8 09 a6 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 57 a1 38 00 48 85 db 0f 84 17 01 00 00 e9 a5 38 00 31 ff 65 8b 1d 60 2f 49 06 81 e3 ff ff ff 7f 89 de
[ 113.031342] RSP: 0018:ffff888045f47f28 EFLAGS: 00000246
[ 113.032170] RAX: 0000000000000001 RBX: ffff888043739b80 RCX: ffffffff817c3ab6
[ 113.033279] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234
[ 113.034360] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000
[ 113.035458] R10: ffffffff8643b457 R11: 0000000000000001 R12: ffff888043739b80
[ 113.036539] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000
[ 113.037649] ? trace_irq_enable.constprop.0+0x26/0x100
[ 113.038469] ? make_task_dead+0x214/0x3b0
[ 113.039132] ? make_task_dead+0x214/0x3b0
[ 113.039789] ? do_syscall_64+0xbf/0x360
[ 113.040420] rewind_stack_and_make_dead+0x16/0x20
[ 113.041196] RIP: 0033:0x7f7af5602b19
[ 113.041784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 113.044591] RSP: 002b:00007ffe3b9c5d68 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 113.045771] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7af5602b19
[ 113.046881] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7af5715f68
[ 113.047990] RBP: 00007f7af5715f60 R08: 00007f7af2b78700 R09: 0000000000000000
[ 113.049102] R10: 00007f7af2b78700 R11: 0000000000000246 R12: 00007f7af571a060
[ 113.050228] R13: 00007ffe3b9c5e70 R14: 00007f7af5715f60 R15: 000000000001b895
[ 113.051359]
[ 113.051734] Modules linked in:
[ 113.052262] ---[ end trace 0000000000000000 ]---
[ 113.052997] RIP: 0010:perf_tp_event+0x175/0xe70
[ 113.053763] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 113.056636] RSP: 0018:ffff888045fd7840 EFLAGS: 00010212
[ 113.057483] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 113.058615] RDX: ffff888045fe1b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[ 113.059742] RBP: ffff888045fd7ab0 R08: ffff88806cf31340 R09: ffffe8ffffd07600
[ 113.060878] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 113.062021] R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
[ 113.063177] FS: 0000555558dc6400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[ 113.064459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 113.065395] CR2: 00007ffe22a31fb8 CR3: 000000001f5d5000 CR4: 0000000000350ef0
[ 113.066544] Kernel panic - not syncing: Fatal exception in interrupt
[ 113.067792] Kernel Offset: disabled
[ 113.068398] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---
VM DIAGNOSIS:
08:40:31 Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff88806cf3c300 RCX=ffffffff816880fc RDX=ffff8880448eb700
RSI=ffffffff816880d6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff888016edf980
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=1ffff1100d9c6bb1
R12=ffffed100d9e7861 R13=ffff88806cf3c308 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff8173f6b8 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055555cd8c400 00000000 00000000
GS =0000 ffff8880e55d8000 00000000 00000000
LDT=0000 fffffe6300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2cc24000 CR3=000000000e703000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000ff00000000ff00000000 XMM01=00000000000001000000000100000000
XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007f0feba1d7c800007f0feba1d7c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff888045fd71b0
R8 =0000000000000000 R9 =ffffed1001727046 R10=0000000000000030 R11=3030303030302052
R12=0000000000000030 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0
RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055555cb95400 00000000 00000000
GS =0000 ffff8880e56d8000 00000000 00000000
LDT=0000 fffffe5300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2cd25000 CR3=00000000460bc000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007f85ccd577c800007f85ccd577c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000