Warning: Permanently added '[localhost]:30381' (ECDSA) to the list of known hosts. 2025/09/01 10:29:44 fuzzer started 2025/09/01 10:29:44 dialing manager at localhost:35473 syzkaller login: [ 56.131241] cgroup: Unknown subsys name 'net' [ 56.171299] cgroup: Unknown subsys name 'cpuset' [ 56.181432] cgroup: Unknown subsys name 'rlimit' 2025/09/01 10:29:54 syscalls: 2214 2025/09/01 10:29:54 code coverage: enabled 2025/09/01 10:29:54 comparison tracing: enabled 2025/09/01 10:29:54 extra coverage: enabled 2025/09/01 10:29:54 setuid sandbox: enabled 2025/09/01 10:29:54 namespace sandbox: enabled 2025/09/01 10:29:54 Android sandbox: enabled 2025/09/01 10:29:54 fault injection: enabled 2025/09/01 10:29:54 leak checking: enabled 2025/09/01 10:29:54 net packet injection: enabled 2025/09/01 10:29:54 net device setup: enabled 2025/09/01 10:29:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 10:29:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 10:29:54 USB emulation: enabled 2025/09/01 10:29:54 hci packet injection: enabled 2025/09/01 10:29:54 wifi device emulation: enabled 2025/09/01 10:29:54 802.15.4 emulation: enabled 2025/09/01 10:29:54 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 10:29:54 fetching corpus: 44, signal 13912/17613 (executing program) 2025/09/01 10:29:54 fetching corpus: 85, signal 20129/25496 (executing program) 2025/09/01 10:29:54 fetching corpus: 135, signal 32374/38945 (executing program) 2025/09/01 10:29:54 fetching corpus: 185, signal 44503/52013 (executing program) 2025/09/01 10:29:55 fetching corpus: 235, signal 50394/58949 (executing program) 2025/09/01 10:29:55 fetching corpus: 285, signal 54476/64158 (executing program) 2025/09/01 10:29:55 fetching corpus: 335, signal 57957/68737 (executing program) 2025/09/01 10:29:55 fetching corpus: 385, signal 62243/73948 (executing program) 2025/09/01 10:29:55 fetching corpus: 435, signal 65333/78039 (executing program) 2025/09/01 10:29:55 fetching corpus: 485, signal 68180/81793 (executing program) 2025/09/01 10:29:55 fetching corpus: 535, signal 71046/85524 (executing program) 2025/09/01 10:29:55 fetching corpus: 585, signal 72553/87952 (executing program) 2025/09/01 10:29:56 fetching corpus: 635, signal 74842/91021 (executing program) 2025/09/01 10:29:56 fetching corpus: 685, signal 79792/96274 (executing program) 2025/09/01 10:29:56 fetching corpus: 735, signal 82227/99388 (executing program) 2025/09/01 10:29:56 fetching corpus: 785, signal 83889/101837 (executing program) 2025/09/01 10:29:56 fetching corpus: 835, signal 88616/106722 (executing program) 2025/09/01 10:29:56 fetching corpus: 885, signal 90042/108866 (executing program) 2025/09/01 10:29:56 fetching corpus: 935, signal 91429/110954 (executing program) 2025/09/01 10:29:56 fetching corpus: 985, signal 92709/112898 (executing program) 2025/09/01 10:29:56 fetching corpus: 1034, signal 94381/115177 (executing program) 2025/09/01 10:29:56 fetching corpus: 1084, signal 95825/117148 (executing program) 2025/09/01 10:29:57 fetching corpus: 1134, signal 97458/119316 (executing program) 2025/09/01 10:29:57 fetching corpus: 1184, signal 98807/121177 (executing program) 2025/09/01 10:29:57 fetching corpus: 1234, signal 100872/123565 (executing program) 2025/09/01 10:29:57 fetching corpus: 1284, signal 102108/125259 (executing program) 2025/09/01 10:29:57 fetching corpus: 1334, signal 103539/127033 (executing program) 2025/09/01 10:29:57 fetching corpus: 1384, signal 104711/128651 (executing program) 2025/09/01 10:29:57 fetching corpus: 1434, signal 106041/130399 (executing program) 2025/09/01 10:29:57 fetching corpus: 1484, signal 107062/131866 (executing program) 2025/09/01 10:29:57 fetching corpus: 1534, signal 110060/134569 (executing program) 2025/09/01 10:29:57 fetching corpus: 1583, signal 111182/136071 (executing program) 2025/09/01 10:29:58 fetching corpus: 1633, signal 113203/138043 (executing program) 2025/09/01 10:29:58 fetching corpus: 1683, signal 114238/139454 (executing program) 2025/09/01 10:29:58 fetching corpus: 1733, signal 115209/140751 (executing program) 2025/09/01 10:29:58 fetching corpus: 1783, signal 116649/142316 (executing program) 2025/09/01 10:29:58 fetching corpus: 1832, signal 118011/143934 (executing program) 2025/09/01 10:29:58 fetching corpus: 1882, signal 119234/145299 (executing program) 2025/09/01 10:29:58 fetching corpus: 1932, signal 120315/146598 (executing program) 2025/09/01 10:29:58 fetching corpus: 1982, signal 121364/147852 (executing program) 2025/09/01 10:29:58 fetching corpus: 2032, signal 122708/149246 (executing program) 2025/09/01 10:29:58 fetching corpus: 2082, signal 123656/150370 (executing program) 2025/09/01 10:29:58 fetching corpus: 2132, signal 124413/151378 (executing program) 2025/09/01 10:29:59 fetching corpus: 2182, signal 125221/152353 (executing program) 2025/09/01 10:29:59 fetching corpus: 2232, signal 126164/153441 (executing program) 2025/09/01 10:29:59 fetching corpus: 2282, signal 126980/154430 (executing program) 2025/09/01 10:29:59 fetching corpus: 2332, signal 128024/155495 (executing program) 2025/09/01 10:29:59 fetching corpus: 2382, signal 128886/156448 (executing program) 2025/09/01 10:29:59 fetching corpus: 2432, signal 129880/157470 (executing program) 2025/09/01 10:29:59 fetching corpus: 2482, signal 131020/158512 (executing program) 2025/09/01 10:29:59 fetching corpus: 2532, signal 131685/159334 (executing program) 2025/09/01 10:29:59 fetching corpus: 2581, signal 132372/160173 (executing program) 2025/09/01 10:29:59 fetching corpus: 2631, signal 132854/160954 (executing program) 2025/09/01 10:30:00 fetching corpus: 2680, signal 133951/161942 (executing program) 2025/09/01 10:30:00 fetching corpus: 2730, signal 134705/162798 (executing program) 2025/09/01 10:30:00 fetching corpus: 2780, signal 135809/163742 (executing program) 2025/09/01 10:30:00 fetching corpus: 2830, signal 136501/164473 (executing program) 2025/09/01 10:30:00 fetching corpus: 2880, signal 137099/165147 (executing program) 2025/09/01 10:30:00 fetching corpus: 2930, signal 137935/165904 (executing program) 2025/09/01 10:30:00 fetching corpus: 2980, signal 138549/166595 (executing program) 2025/09/01 10:30:00 fetching corpus: 3030, signal 139448/167353 (executing program) 2025/09/01 10:30:00 fetching corpus: 3080, signal 140142/168037 (executing program) 2025/09/01 10:30:00 fetching corpus: 3130, signal 141315/168791 (executing program) 2025/09/01 10:30:01 fetching corpus: 3180, signal 141842/169340 (executing program) 2025/09/01 10:30:01 fetching corpus: 3230, signal 142580/169952 (executing program) 2025/09/01 10:30:01 fetching corpus: 3280, signal 143131/170516 (executing program) 2025/09/01 10:30:01 fetching corpus: 3330, signal 143751/171079 (executing program) 2025/09/01 10:30:01 fetching corpus: 3380, signal 144232/171578 (executing program) 2025/09/01 10:30:01 fetching corpus: 3430, signal 144913/172144 (executing program) 2025/09/01 10:30:01 fetching corpus: 3480, signal 145383/172622 (executing program) 2025/09/01 10:30:01 fetching corpus: 3530, signal 145867/173043 (executing program) 2025/09/01 10:30:01 fetching corpus: 3580, signal 146540/173603 (executing program) 2025/09/01 10:30:01 fetching corpus: 3630, signal 147234/174086 (executing program) 2025/09/01 10:30:01 fetching corpus: 3680, signal 147711/174522 (executing program) 2025/09/01 10:30:01 fetching corpus: 3730, signal 148279/175006 (executing program) 2025/09/01 10:30:02 fetching corpus: 3780, signal 149479/175549 (executing program) 2025/09/01 10:30:02 fetching corpus: 3830, signal 149830/175951 (executing program) 2025/09/01 10:30:02 fetching corpus: 3880, signal 150509/176350 (executing program) 2025/09/01 10:30:02 fetching corpus: 3930, signal 150919/176709 (executing program) 2025/09/01 10:30:02 fetching corpus: 3980, signal 151945/177119 (executing program) 2025/09/01 10:30:02 fetching corpus: 4030, signal 152553/177526 (executing program) 2025/09/01 10:30:02 fetching corpus: 4080, signal 152846/177852 (executing program) 2025/09/01 10:30:02 fetching corpus: 4129, signal 153444/178216 (executing program) 2025/09/01 10:30:02 fetching corpus: 4179, signal 153804/178550 (executing program) 2025/09/01 10:30:02 fetching corpus: 4228, signal 154172/178867 (executing program) 2025/09/01 10:30:02 fetching corpus: 4277, signal 154807/179187 (executing program) 2025/09/01 10:30:02 fetching corpus: 4327, signal 155324/179453 (executing program) 2025/09/01 10:30:03 fetching corpus: 4377, signal 155711/179567 (executing program) 2025/09/01 10:30:03 fetching corpus: 4427, signal 156023/179576 (executing program) 2025/09/01 10:30:03 fetching corpus: 4476, signal 156513/179591 (executing program) 2025/09/01 10:30:03 fetching corpus: 4526, signal 156997/179642 (executing program) 2025/09/01 10:30:03 fetching corpus: 4576, signal 157454/179645 (executing program) 2025/09/01 10:30:03 fetching corpus: 4626, signal 157957/179672 (executing program) 2025/09/01 10:30:03 fetching corpus: 4676, signal 158242/179676 (executing program) 2025/09/01 10:30:03 fetching corpus: 4726, signal 158700/179681 (executing program) 2025/09/01 10:30:03 fetching corpus: 4776, signal 159259/179714 (executing program) 2025/09/01 10:30:03 fetching corpus: 4826, signal 159529/179716 (executing program) 2025/09/01 10:30:03 fetching corpus: 4876, signal 160007/179718 (executing program) 2025/09/01 10:30:03 fetching corpus: 4926, signal 160396/179720 (executing program) 2025/09/01 10:30:03 fetching corpus: 4976, signal 160917/179725 (executing program) 2025/09/01 10:30:04 fetching corpus: 5026, signal 161263/179746 (executing program) 2025/09/01 10:30:04 fetching corpus: 5076, signal 161659/179800 (executing program) 2025/09/01 10:30:04 fetching corpus: 5124, signal 161945/179843 (executing program) 2025/09/01 10:30:04 fetching corpus: 5173, signal 162321/179844 (executing program) 2025/09/01 10:30:04 fetching corpus: 5223, signal 162710/179848 (executing program) 2025/09/01 10:30:04 fetching corpus: 5273, signal 163231/179874 (executing program) 2025/09/01 10:30:04 fetching corpus: 5323, signal 163599/179878 (executing program) 2025/09/01 10:30:04 fetching corpus: 5373, signal 163958/179882 (executing program) 2025/09/01 10:30:04 fetching corpus: 5423, signal 164336/179905 (executing program) 2025/09/01 10:30:04 fetching corpus: 5473, signal 164917/179948 (executing program) 2025/09/01 10:30:05 fetching corpus: 5523, signal 165393/179958 (executing program) 2025/09/01 10:30:05 fetching corpus: 5573, signal 165727/180016 (executing program) 2025/09/01 10:30:05 fetching corpus: 5623, signal 166120/180026 (executing program) 2025/09/01 10:30:05 fetching corpus: 5672, signal 166569/180039 (executing program) 2025/09/01 10:30:05 fetching corpus: 5722, signal 167076/180060 (executing program) 2025/09/01 10:30:05 fetching corpus: 5772, signal 167362/180093 (executing program) 2025/09/01 10:30:05 fetching corpus: 5822, signal 167783/180131 (executing program) 2025/09/01 10:30:05 fetching corpus: 5872, signal 168019/180138 (executing program) 2025/09/01 10:30:05 fetching corpus: 5922, signal 168281/180242 (executing program) 2025/09/01 10:30:05 fetching corpus: 5972, signal 168508/180250 (executing program) 2025/09/01 10:30:05 fetching corpus: 6022, signal 168930/180251 (executing program) 2025/09/01 10:30:05 fetching corpus: 6072, signal 169197/180251 (executing program) 2025/09/01 10:30:05 fetching corpus: 6122, signal 169524/180291 (executing program) 2025/09/01 10:30:06 fetching corpus: 6172, signal 169883/180317 (executing program) 2025/09/01 10:30:06 fetching corpus: 6222, signal 170344/180329 (executing program) 2025/09/01 10:30:06 fetching corpus: 6272, signal 170654/180336 (executing program) 2025/09/01 10:30:06 fetching corpus: 6322, signal 170992/180338 (executing program) 2025/09/01 10:30:06 fetching corpus: 6372, signal 171482/180339 (executing program) 2025/09/01 10:30:06 fetching corpus: 6422, signal 172025/180372 (executing program) 2025/09/01 10:30:06 fetching corpus: 6472, signal 172478/180383 (executing program) 2025/09/01 10:30:06 fetching corpus: 6522, signal 172906/180406 (executing program) 2025/09/01 10:30:06 fetching corpus: 6572, signal 173662/180414 (executing program) 2025/09/01 10:30:06 fetching corpus: 6622, signal 174116/180453 (executing program) 2025/09/01 10:30:06 fetching corpus: 6672, signal 174265/180461 (executing program) 2025/09/01 10:30:07 fetching corpus: 6722, signal 174637/180467 (executing program) 2025/09/01 10:30:07 fetching corpus: 6772, signal 174994/180482 (executing program) 2025/09/01 10:30:07 fetching corpus: 6822, signal 175271/180490 (executing program) 2025/09/01 10:30:07 fetching corpus: 6872, signal 175796/180519 (executing program) 2025/09/01 10:30:07 fetching corpus: 6922, signal 176209/180522 (executing program) 2025/09/01 10:30:07 fetching corpus: 6972, signal 176449/180523 (executing program) 2025/09/01 10:30:07 fetching corpus: 7022, signal 176980/180534 (executing program) 2025/09/01 10:30:07 fetching corpus: 7072, signal 177426/180566 (executing program) 2025/09/01 10:30:07 fetching corpus: 7122, signal 177661/180589 (executing program) 2025/09/01 10:30:07 fetching corpus: 7172, signal 177917/180593 (executing program) 2025/09/01 10:30:07 fetching corpus: 7172, signal 177917/180593 (executing program) 2025/09/01 10:30:10 starting 8 fuzzer processes 10:30:10 executing program 0: name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2400) 10:30:10 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') 10:30:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x1d, 0x0, &(0x7f0000007dc0)) 10:30:10 executing program 1: perf_event_open(&(0x7f0000003740)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:30:10 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmstat\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/29, 0x1d, 0x1000) 10:30:10 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long}, 0x7) [ 81.692862] audit: type=1400 audit(1756722610.102:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:30:10 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 10:30:10 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x42132, 0xffffffffffffffff, 0x0) [ 82.797375] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.800066] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.803996] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.810050] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.812372] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.999117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.001694] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.005239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.006969] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.008693] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.017188] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.018761] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.021554] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.023231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.029548] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.058617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.060289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.062088] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.063980] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.064712] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.065765] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.067983] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.069076] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.069833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.070456] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.071403] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.073078] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 83.074684] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.075032] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.077572] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.088586] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.089611] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.103625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.104355] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.105106] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.108231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.111134] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.111867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.114724] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.119401] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.888901] Bluetooth: hci0: command tx timeout [ 85.078268] Bluetooth: hci1: command tx timeout [ 85.079362] Bluetooth: hci2: command tx timeout [ 85.145267] Bluetooth: hci6: command tx timeout [ 85.145942] Bluetooth: hci5: command tx timeout [ 85.146388] Bluetooth: hci7: command tx timeout [ 85.205860] Bluetooth: hci4: command tx timeout [ 85.206425] Bluetooth: hci3: command tx timeout [ 86.933845] Bluetooth: hci0: command tx timeout [ 87.125845] Bluetooth: hci2: command tx timeout [ 87.126317] Bluetooth: hci1: command tx timeout [ 87.189990] Bluetooth: hci7: command tx timeout [ 87.190447] Bluetooth: hci5: command tx timeout [ 87.190506] Bluetooth: hci6: command tx timeout [ 87.253931] Bluetooth: hci3: command tx timeout [ 87.254651] Bluetooth: hci4: command tx timeout [ 88.984043] Bluetooth: hci0: command tx timeout [ 89.173966] Bluetooth: hci1: command tx timeout [ 89.174007] Bluetooth: hci2: command tx timeout [ 89.238183] Bluetooth: hci7: command tx timeout [ 89.238204] Bluetooth: hci5: command tx timeout [ 89.239892] Bluetooth: hci6: command tx timeout [ 89.303837] Bluetooth: hci3: command tx timeout [ 89.303863] Bluetooth: hci4: command tx timeout [ 91.029902] Bluetooth: hci0: command tx timeout [ 91.222034] Bluetooth: hci2: command tx timeout [ 91.222236] Bluetooth: hci1: command tx timeout [ 91.285952] Bluetooth: hci6: command tx timeout [ 91.286742] Bluetooth: hci7: command tx timeout [ 91.287549] Bluetooth: hci5: command tx timeout [ 91.349902] Bluetooth: hci4: command tx timeout [ 91.350648] Bluetooth: hci3: command tx timeout [ 120.541183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.542114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.627806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.628389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.753277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.753885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.838981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.839565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:30:49 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long}, 0x7) 10:30:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') 10:30:49 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long}, 0x7) 10:30:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') 10:30:49 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long}, 0x7) 10:30:49 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') 10:30:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') [ 121.602343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.602946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:30:50 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') [ 121.675487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.676763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.764449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.765178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.810637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.811796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.875769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.877102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.953294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.953971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.011482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.012162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.058255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.058970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.134097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.134690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.179437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.180028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.227813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.228372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.238170] audit: type=1400 audit(1756722650.645:8): avc: denied { open } for pid=3904 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 122.243367] audit: type=1400 audit(1756722650.645:9): avc: denied { kernel } for pid=3904 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 122.287774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.288572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:30:50 executing program 0: name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2400) 10:30:50 executing program 1: perf_event_open(&(0x7f0000003740)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:30:50 executing program 2: syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000004c0)) clone3(&(0x7f0000000a40)={0x0, &(0x7f00000007c0), 0x0, 0x0, {}, &(0x7f0000000880)=""/92, 0x5c, 0x0, 0x0}, 0x58) 10:30:50 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') 10:30:50 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x42132, 0xffffffffffffffff, 0x0) 10:30:50 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x2b) r1 = epoll_create(0xdc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 10:30:50 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmstat\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/29, 0x1d, 0x1000) 10:30:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x1d, 0x0, &(0x7f0000007dc0)) [ 122.465409] kmemleak: Found object by alias at 0x607f1a63eb14 [ 122.465429] CPU: 1 UID: 0 PID: 3927 Comm: syz-executor.6 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 122.465447] Tainted: [W]=WARN [ 122.465451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 122.465459] Call Trace: [ 122.465462] [ 122.465468] dump_stack_lvl+0xca/0x120 [ 122.465498] __lookup_object+0x94/0xb0 [ 122.465520] delete_object_full+0x27/0x70 [ 122.465536] free_percpu+0x30/0x1160 [ 122.465554] ? arch_uprobe_clear_state+0x16/0x140 [ 122.465574] futex_hash_free+0x38/0xc0 [ 122.465590] mmput+0x2d3/0x390 [ 122.465609] do_exit+0x79d/0x2970 [ 122.465623] ? lock_release+0xc8/0x290 [ 122.465640] ? __pfx_do_exit+0x10/0x10 [ 122.465655] ? find_held_lock+0x2b/0x80 [ 122.465672] ? get_signal+0x835/0x2340 [ 122.465693] do_group_exit+0xd3/0x2a0 [ 122.465708] get_signal+0x2315/0x2340 [ 122.465731] ? __pfx_get_signal+0x10/0x10 [ 122.465748] ? do_futex+0x135/0x370 [ 122.465762] ? __pfx_do_futex+0x10/0x10 [ 122.465777] arch_do_signal_or_restart+0x80/0x790 [ 122.465796] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 122.465812] ? __x64_sys_futex+0x1c9/0x4d0 [ 122.465825] ? __x64_sys_futex+0x1d2/0x4d0 [ 122.465840] ? __pfx___x64_sys_futex+0x10/0x10 [ 122.465854] ? xfd_validate_state+0x55/0x180 [ 122.465875] exit_to_user_mode_loop+0x8b/0x110 [ 122.465889] do_syscall_64+0x2f7/0x360 [ 122.465903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.465915] RIP: 0033:0x7fcef841ab19 [ 122.465924] Code: Unable to access opcode bytes at 0x7fcef841aaef. [ 122.465929] RSP: 002b:00007fcef5990218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.465941] RAX: fffffffffffffe00 RBX: 00007fcef852df68 RCX: 00007fcef841ab19 [ 122.465949] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcef852df68 [ 122.465957] RBP: 00007fcef852df60 R08: 0000000000000000 R09: 0000000000000000 [ 122.465964] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcef852df6c [ 122.465971] R13: 00007ffc8ba50f5f R14: 00007fcef5990300 R15: 0000000000022000 [ 122.465987] [ 122.465991] kmemleak: Object (percpu) 0x607f1a63eb10 (size 8): [ 122.465998] kmemleak: comm "syz-executor.3", pid 286, jiffies 4294789012 [ 122.466005] kmemleak: min_count = 1 [ 122.466009] kmemleak: count = 0 [ 122.466013] kmemleak: flags = 0x21 [ 122.466016] kmemleak: checksum = 0 [ 122.466020] kmemleak: backtrace: [ 122.466024] pcpu_alloc_noprof+0x87a/0x1170 [ 122.466040] percpu_ref_init+0x37/0x400 [ 122.466051] cgroup_apply_control_enable+0x4a6/0x9f0 [ 122.466064] cgroup_mkdir+0x86e/0x1110 [ 122.466077] kernfs_iop_mkdir+0x111/0x190 [ 122.466093] vfs_mkdir+0x59a/0x8d0 [ 122.466109] do_mkdirat+0x19f/0x3d0 [ 122.466120] __x64_sys_mkdir+0xf3/0x140 [ 122.466132] do_syscall_64+0xbf/0x360 [ 122.466170] entry_SYSCALL_64_after_hwframe+0x77/0x7f 10:30:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x1d, 0x0, &(0x7f0000007dc0)) 10:30:50 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x2b) r1 = epoll_create(0xdc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 10:30:50 executing program 1: perf_event_open(&(0x7f0000003740)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:30:51 executing program 0: name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2400) 10:30:51 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmstat\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/29, 0x1d, 0x1000) 10:30:51 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x42132, 0xffffffffffffffff, 0x0) 10:30:51 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x1d, 0x0, &(0x7f0000007dc0)) 10:30:51 executing program 1: perf_event_open(&(0x7f0000003740)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:30:51 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x2b) r1 = epoll_create(0xdc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 10:30:51 executing program 4: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 10:30:51 executing program 2: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) [ 122.717808] process 'syz-executor.4' launched './file1' with NULL argv: empty string added [ 122.738041] kmemleak: Found object by alias at 0x607f1a63eb14 [ 122.738058] CPU: 0 UID: 0 PID: 3952 Comm: syz-executor.6 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 122.738076] Tainted: [W]=WARN [ 122.738080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 122.738088] Call Trace: [ 122.738092] [ 122.738097] dump_stack_lvl+0xca/0x120 [ 122.738123] __lookup_object+0x94/0xb0 [ 122.738141] delete_object_full+0x27/0x70 [ 122.738168] free_percpu+0x30/0x1160 [ 122.738185] ? arch_uprobe_clear_state+0x16/0x140 [ 122.738206] futex_hash_free+0x38/0xc0 [ 122.738221] mmput+0x2d3/0x390 [ 122.738240] do_exit+0x79d/0x2970 [ 122.738259] ? __pfx_do_exit+0x10/0x10 [ 122.738273] ? find_held_lock+0x2b/0x80 [ 122.738292] ? get_signal+0x835/0x2340 [ 122.738312] do_group_exit+0xd3/0x2a0 [ 122.738327] get_signal+0x2315/0x2340 [ 122.738345] ? put_task_stack+0xd2/0x240 [ 122.738360] ? __pfx_get_signal+0x10/0x10 [ 122.738376] ? __schedule+0xe91/0x3590 [ 122.738398] arch_do_signal_or_restart+0x80/0x790 [ 122.738417] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 122.738433] ? __x64_sys_futex+0x1c9/0x4d0 [ 122.738446] ? __x64_sys_futex+0x1d2/0x4d0 [ 122.738461] ? __pfx___x64_sys_futex+0x10/0x10 [ 122.738475] ? ksys_mmap_pgoff+0x85/0x520 [ 122.738495] exit_to_user_mode_loop+0x8b/0x110 [ 122.738508] do_syscall_64+0x2f7/0x360 [ 122.738521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.738534] RIP: 0033:0x7fcef841ab19 [ 122.738543] Code: Unable to access opcode bytes at 0x7fcef841aaef. [ 122.738548] RSP: 002b:00007fcef5990218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.738560] RAX: 0000000000000001 RBX: 00007fcef852df68 RCX: 00007fcef841ab19 [ 122.738567] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcef852df6c [ 122.738574] RBP: 00007fcef852df60 R08: 0000000000000016 R09: 0000000000000000 [ 122.738581] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fcef852df6c [ 122.738588] R13: 00007ffc8ba50f5f R14: 00007fcef5990300 R15: 0000000000022000 [ 122.738604] [ 122.738608] kmemleak: Object (percpu) 0x607f1a63eb08 (size 16): [ 122.738615] kmemleak: comm "syz-executor.0", pid 275, jiffies 4294789408 [ 122.738622] kmemleak: min_count = 1 [ 122.738626] kmemleak: count = 0 [ 122.738629] kmemleak: flags = 0x21 [ 122.738633] kmemleak: checksum = 0 [ 122.738637] kmemleak: backtrace: [ 122.738640] pcpu_alloc_noprof+0x87a/0x1170 [ 122.738656] mm_init+0x99b/0x1170 [ 122.738664] copy_process+0x3ab7/0x73c0 [ 122.738675] kernel_clone+0xea/0x7f0 [ 122.738685] __do_sys_clone+0xce/0x120 [ 122.738695] do_syscall_64+0xbf/0x360 [ 122.738704] entry_SYSCALL_64_after_hwframe+0x77/0x7f 10:30:51 executing program 0: name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2400) 10:30:51 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x2b) r1 = epoll_create(0xdc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 10:30:51 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmstat\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/29, 0x1d, 0x1000) 10:30:51 executing program 4: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 10:30:51 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 10:30:51 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r2, 0x227c, 0x0) 10:30:51 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x42132, 0xffffffffffffffff, 0x0) 10:30:51 executing program 0: io_uring_setup(0x3e84, &(0x7f00000041c0)={0x0, 0xa70d}) 10:30:51 executing program 2: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) [ 123.039699] kmemleak: Found object by alias at 0x607f1a63eb10 [ 123.039718] CPU: 0 UID: 0 PID: 3973 Comm: syz-executor.7 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 123.039737] Tainted: [W]=WARN [ 123.039741] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 123.039752] Call Trace: [ 123.039755] [ 123.039761] dump_stack_lvl+0xca/0x120 [ 123.039786] __lookup_object+0x94/0xb0 [ 123.039803] delete_object_full+0x27/0x70 [ 123.039820] free_percpu+0x30/0x1160 [ 123.039837] ? arch_uprobe_clear_state+0x16/0x140 [ 123.039858] futex_hash_free+0x38/0xc0 [ 123.039873] mmput+0x2d3/0x390 [ 123.039892] do_exit+0x79d/0x2970 [ 123.039910] ? __pfx_do_exit+0x10/0x10 [ 123.039924] ? find_held_lock+0x2b/0x80 [ 123.039943] ? get_signal+0x835/0x2340 [ 123.039964] do_group_exit+0xd3/0x2a0 [ 123.039979] get_signal+0x2315/0x2340 [ 123.039997] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 123.040015] ? __pfx_get_signal+0x10/0x10 [ 123.040031] ? __schedule+0xe91/0x3590 [ 123.040053] arch_do_signal_or_restart+0x80/0x790 [ 123.040072] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 123.040088] ? __x64_sys_futex+0x1c9/0x4d0 [ 123.040101] ? __x64_sys_futex+0x1d2/0x4d0 [ 123.040114] ? lock_release+0xc8/0x290 [ 123.040128] ? __pfx___x64_sys_futex+0x10/0x10 [ 123.040147] exit_to_user_mode_loop+0x8b/0x110 [ 123.040160] do_syscall_64+0x2f7/0x360 [ 123.040174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.040186] RIP: 0033:0x7fcc23699b19 [ 123.040195] Code: Unable to access opcode bytes at 0x7fcc23699aef. [ 123.040200] RSP: 002b:00007fcc20c0f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 123.040213] RAX: 0000000000000001 RBX: 00007fcc237acf68 RCX: 00007fcc23699b19 [ 123.040221] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcc237acf6c [ 123.040228] RBP: 00007fcc237acf60 R08: 000000000000000e R09: 0000000000000000 [ 123.040235] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc237acf6c [ 123.040242] R13: 00007ffff5ed0e9f R14: 00007fcc20c0f300 R15: 0000000000022000 [ 123.040258] [ 123.040262] kmemleak: Object (percpu) 0x607f1a63eb08 (size 16): [ 123.040270] kmemleak: comm "syz-executor.5", pid 285, jiffies 4294789710 [ 123.040277] kmemleak: min_count = 1 [ 123.040281] kmemleak: count = 0 [ 123.040284] kmemleak: flags = 0x21 [ 123.040288] kmemleak: checksum = 0 [ 123.040292] kmemleak: backtrace: [ 123.040296] pcpu_alloc_noprof+0x87a/0x1170 [ 123.040311] mm_init+0x99b/0x1170 [ 123.040320] copy_process+0x3ab7/0x73c0 [ 123.040330] kernel_clone+0xea/0x7f0 [ 123.040341] __do_sys_clone+0xce/0x120 [ 123.040351] do_syscall_64+0xbf/0x360 [ 123.040361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.065082] kmemleak: Found object by alias at 0x607f1a63db2c [ 123.065094] CPU: 0 UID: 0 PID: 3975 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 123.065112] Tainted: [W]=WARN [ 123.065116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 123.065122] Call Trace: [ 123.065125] [ 123.065129] dump_stack_lvl+0xca/0x120 [ 123.065148] __lookup_object+0x94/0xb0 [ 123.065167] delete_object_full+0x27/0x70 [ 123.065184] free_percpu+0x30/0x1160 [ 123.065199] ? arch_uprobe_clear_state+0x16/0x140 [ 123.065218] futex_hash_free+0x38/0xc0 [ 123.065231] mmput+0x2d3/0x390 [ 123.065249] do_exit+0x79d/0x2970 [ 123.065263] ? signal_wake_up_state+0x85/0x120 [ 123.065278] ? zap_other_threads+0x2b9/0x3a0 [ 123.065294] ? __pfx_do_exit+0x10/0x10 [ 123.065307] ? do_group_exit+0x1c3/0x2a0 [ 123.065321] ? lock_release+0xc8/0x290 [ 123.065337] do_group_exit+0xd3/0x2a0 [ 123.065353] __x64_sys_exit_group+0x3e/0x50 [ 123.065367] x64_sys_call+0x18c5/0x18d0 [ 123.065382] do_syscall_64+0xbf/0x360 [ 123.065394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.065406] RIP: 0033:0x7fee6d2ceb19 [ 123.065414] Code: Unable to access opcode bytes at 0x7fee6d2ceaef. [ 123.065420] RSP: 002b:00007ffd13b75c58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 123.065431] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fee6d2ceb19 [ 123.065438] RDX: 00007fee6d28172b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 123.065445] RBP: 0000000000000000 R08: 0000001b2d52125c R09: 0000000000000000 [ 123.065453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.065459] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd13b75d40 [ 123.065475] [ 123.065478] kmemleak: Object (percpu) 0x607f1a63db28 (size 8): [ 123.065485] kmemleak: comm "syz-executor.2", pid 3965, jiffies 4294789541 [ 123.065492] kmemleak: min_count = 1 [ 123.065496] kmemleak: count = 0 [ 123.065500] kmemleak: flags = 0x21 [ 123.065504] kmemleak: checksum = 0 [ 123.065507] kmemleak: backtrace: [ 123.065511] pcpu_alloc_noprof+0x87a/0x1170 [ 123.065526] percpu_ref_init+0x37/0x400 [ 123.065537] blkg_alloc+0xe9/0x7d0 [ 123.065550] blkg_create+0xe08/0x1420 [ 123.065563] bio_associate_blkg_from_css+0xe06/0x1380 10:30:51 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x9, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 123.065577] bio_associate_blkg+0x10e/0x2a0 [ 123.065591] bio_init+0x2dd/0x570 [ 123.065604] bio_alloc_bioset+0x2cf/0x8c0 [ 123.065619] submit_bh_wbc+0x286/0x720 [ 123.065636] ext4_read_bh_nowait+0x156/0x240 [ 123.065649] ext4_read_bh_lock+0xa7/0xd0 [ 123.065661] ext4_block_write_begin+0x9ca/0xcd0 [ 123.065675] ext4_da_write_begin+0x4d5/0xb40 [ 123.065687] generic_perform_write+0x392/0x810 [ 123.065703] ext4_buffered_write_iter+0x11a/0x430 [ 123.065715] ext4_file_write_iter+0xff6/0x1990 [ 123.070477] kmemleak: Found object by alias at 0x607f1a63eb14 [ 123.070496] CPU: 1 UID: 0 PID: 3970 Comm: syz-executor.6 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 123.070514] Tainted: [W]=WARN [ 123.070518] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 123.070526] Call Trace: [ 123.070530] [ 123.070535] dump_stack_lvl+0xca/0x120 [ 123.070567] __lookup_object+0x94/0xb0 [ 123.070586] delete_object_full+0x27/0x70 [ 123.070603] free_percpu+0x30/0x1160 [ 123.070621] ? arch_uprobe_clear_state+0x16/0x140 [ 123.070642] futex_hash_free+0x38/0xc0 [ 123.070658] mmput+0x2d3/0x390 [ 123.070678] do_exit+0x79d/0x2970 [ 123.070692] ? signal_wake_up_state+0x85/0x120 [ 123.070708] ? zap_other_threads+0x2b9/0x3a0 [ 123.070724] ? __pfx_do_exit+0x10/0x10 [ 123.070738] ? do_group_exit+0x1c3/0x2a0 [ 123.070752] ? lock_release+0xc8/0x290 [ 123.070770] do_group_exit+0xd3/0x2a0 [ 123.070789] __x64_sys_exit_group+0x3e/0x50 [ 123.070804] x64_sys_call+0x18c5/0x18d0 [ 123.070820] do_syscall_64+0xbf/0x360 [ 123.070833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.070846] RIP: 0033:0x7fcef841ab19 [ 123.070856] Code: Unable to access opcode bytes at 0x7fcef841aaef. [ 123.070861] RSP: 002b:00007ffc8ba51188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 123.070873] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fcef841ab19 [ 123.070881] RDX: 00007fcef83cd72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 123.070888] RBP: 0000000000000000 R08: 0000001b2d42001c R09: 0000000000000000 [ 123.070896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.070903] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc8ba51270 [ 123.070918] [ 123.070923] kmemleak: Object (percpu) 0x607f1a63eb08 (size 16): [ 123.070930] kmemleak: comm "syz-executor.5", pid 285, jiffies 4294789710 [ 123.070937] kmemleak: min_count = 1 [ 123.070941] kmemleak: count = 0 [ 123.070945] kmemleak: flags = 0x21 [ 123.070949] kmemleak: checksum = 0 [ 123.070953] kmemleak: backtrace: [ 123.070956] pcpu_alloc_noprof+0x87a/0x1170 [ 123.070972] mm_init+0x99b/0x1170 [ 123.070981] copy_process+0x3ab7/0x73c0 [ 123.070991] kernel_clone+0xea/0x7f0 [ 123.071001] __do_sys_clone+0xce/0x120 [ 123.071012] do_syscall_64+0xbf/0x360 [ 123.071021] entry_SYSCALL_64_after_hwframe+0x77/0x7f 10:30:51 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) [ 123.137653] kmemleak: Found object by alias at 0x607f1a63eb0c [ 123.137667] CPU: 0 UID: 0 PID: 3978 Comm: syz-executor.5 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 123.137685] Tainted: [W]=WARN [ 123.137689] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 123.137695] Call Trace: [ 123.137698] [ 123.137703] dump_stack_lvl+0xca/0x120 [ 123.137724] __lookup_object+0x94/0xb0 [ 123.137740] delete_object_full+0x27/0x70 [ 123.137756] free_percpu+0x30/0x1160 [ 123.137772] ? arch_uprobe_clear_state+0x16/0x140 10:30:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/29, 0x1d, 0x0) [ 123.137794] futex_hash_free+0x38/0xc0 [ 123.137808] mmput+0x2d3/0x390 [ 123.137826] do_exit+0x79d/0x2970 [ 123.137839] ? lock_release+0xc8/0x290 [ 123.137855] ? __pfx_do_exit+0x10/0x10 [ 123.137870] ? find_held_lock+0x2b/0x80 [ 123.137887] ? get_signal+0x835/0x2340 [ 123.137907] do_group_exit+0xd3/0x2a0 [ 123.137922] get_signal+0x2315/0x2340 [ 123.137940] ? fput+0x6a/0x100 [ 123.137960] ? __pfx_get_signal+0x10/0x10 [ 123.137977] ? do_futex+0x135/0x370 [ 123.137991] ? __pfx_do_futex+0x10/0x10 [ 123.138007] arch_do_signal_or_restart+0x80/0x790 [ 123.138024] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 123.138041] ? __x64_sys_futex+0x1c9/0x4d0 [ 123.138054] ? __x64_sys_futex+0x1d2/0x4d0 [ 123.138069] ? __pfx___x64_sys_futex+0x10/0x10 [ 123.138082] ? __x64_sys_epoll_ctl+0x14a/0x1c0 [ 123.138099] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 123.138119] exit_to_user_mode_loop+0x8b/0x110 [ 123.138132] do_syscall_64+0x2f7/0x360 [ 123.138145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.138163] RIP: 0033:0x7fbdddeedb19 [ 123.138171] Code: Unable to access opcode bytes at 0x7fbdddeedaef. [ 123.138177] RSP: 002b:00007fbddb463218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 123.138188] RAX: fffffffffffffe00 RBX: 00007fbdde000f68 RCX: 00007fbdddeedb19 [ 123.138196] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbdde000f68 [ 123.138203] RBP: 00007fbdde000f60 R08: 0000000000000000 R09: 0000000000000000 [ 123.138210] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbdde000f6c [ 123.138217] R13: 00007ffc5ab2788f R14: 00007fbddb463300 R15: 0000000000022000 [ 123.138233] [ 123.138237] kmemleak: Object (percpu) 0x607f1a63eb08 (size 16): [ 123.138244] kmemleak: comm "syz-executor.5", pid 285, jiffies 4294789710 [ 123.138251] kmemleak: min_count = 1 [ 123.138255] kmemleak: count = 0 [ 123.138259] kmemleak: flags = 0x21 [ 123.138263] kmemleak: checksum = 0 [ 123.138266] kmemleak: backtrace: [ 123.138269] pcpu_alloc_noprof+0x87a/0x1170 [ 123.138285] mm_init+0x99b/0x1170 [ 123.138294] copy_process+0x3ab7/0x73c0 [ 123.138304] kernel_clone+0xea/0x7f0 [ 123.138314] __do_sys_clone+0xce/0x120 [ 123.138324] do_syscall_64+0xbf/0x360 [ 123.138334] entry_SYSCALL_64_after_hwframe+0x77/0x7f 10:30:51 executing program 4: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 10:30:51 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00') 10:30:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r0, 0x1, 0x3e, 0x0, &(0x7f0000000140)) 10:30:51 executing program 1: r0 = getpid() r1 = pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000016c0)=[{&(0x7f0000000000)='B', 0x1}, {0x0, 0xf4000000}, {0x0}, {&(0x7f00000003c0)}, {&(0x7f00000004c0)}, {0x0}, {0x0}, {&(0x7f00000015c0)}, {0x0}], 0x9, 0x4, 0x0) 10:30:51 executing program 4: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 123.258438] kmemleak: Found object by alias at 0x607f1a63eb10 [ 123.258458] CPU: 0 UID: 0 PID: 3996 Comm: syz-executor.7 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 123.258477] Tainted: [W]=WARN [ 123.258481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 123.258489] Call Trace: [ 123.258493] [ 123.258498] dump_stack_lvl+0xca/0x120 [ 123.258531] __lookup_object+0x94/0xb0 [ 123.258549] delete_object_full+0x27/0x70 [ 123.258566] free_percpu+0x30/0x1160 [ 123.258582] ? arch_uprobe_clear_state+0x16/0x140 [ 123.258603] futex_hash_free+0x38/0xc0 [ 123.258618] mmput+0x2d3/0x390 [ 123.258638] do_exit+0x79d/0x2970 [ 123.258655] ? __pfx_do_exit+0x10/0x10 [ 123.258670] ? find_held_lock+0x2b/0x80 [ 123.258688] ? get_signal+0x835/0x2340 [ 123.258709] do_group_exit+0xd3/0x2a0 [ 123.258724] get_signal+0x2315/0x2340 [ 123.258747] ? __pfx_get_signal+0x10/0x10 [ 123.258764] ? do_futex+0x135/0x370 [ 123.258778] ? __pfx_do_futex+0x10/0x10 [ 123.258798] arch_do_signal_or_restart+0x80/0x790 [ 123.258816] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 123.258833] ? __x64_sys_futex+0x1c9/0x4d0 [ 123.258845] ? __x64_sys_futex+0x1d2/0x4d0 [ 123.258859] ? lock_release+0xc8/0x290 [ 123.258874] ? __pfx___x64_sys_futex+0x10/0x10 [ 123.258892] exit_to_user_mode_loop+0x8b/0x110 [ 123.258906] do_syscall_64+0x2f7/0x360 [ 123.258919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.258932] RIP: 0033:0x7fcc23699b19 [ 123.258941] Code: Unable to access opcode bytes at 0x7fcc23699aef. [ 123.258947] RSP: 002b:00007fcc20c0f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 123.258958] RAX: fffffffffffffe00 RBX: 00007fcc237acf68 RCX: 00007fcc23699b19 [ 123.258967] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcc237acf68 [ 123.258974] RBP: 00007fcc237acf60 R08: 0000000000000000 R09: 0000000000000000 [ 123.258981] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc237acf6c [ 123.258988] R13: 00007ffff5ed0e9f R14: 00007fcc20c0f300 R15: 0000000000022000 [ 123.259004] [ 123.259008] kmemleak: Object (percpu) 0x607f1a63eb08 (size 16): [ 123.259015] kmemleak: comm "syz-executor.6", pid 288, jiffies 4294789895 [ 123.259023] kmemleak: min_count = 1 [ 123.259027] kmemleak: count = 0 [ 123.259031] kmemleak: flags = 0x21 [ 123.259035] kmemleak: checksum = 0 [ 123.259038] kmemleak: backtrace: [ 123.259042] pcpu_alloc_noprof+0x87a/0x1170 [ 123.259057] mm_init+0x99b/0x1170 [ 123.259065] copy_process+0x3ab7/0x73c0 [ 123.259076] kernel_clone+0xea/0x7f0 [ 123.259086] __do_sys_clone+0xce/0x120 [ 123.259096] do_syscall_64+0xbf/0x360 [ 123.259106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.279263] kmemleak: Found object by alias at 0x607f1a63eb0c [ 123.279275] CPU: 0 UID: 0 PID: 3998 Comm: syz-executor.5 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 123.279293] Tainted: [W]=WARN [ 123.279297] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 123.279303] Call Trace: [ 123.279307] [ 123.279311] dump_stack_lvl+0xca/0x120 [ 123.279330] __lookup_object+0x94/0xb0 [ 123.279346] delete_object_full+0x27/0x70 [ 123.279362] free_percpu+0x30/0x1160 [ 123.279377] ? arch_uprobe_clear_state+0x16/0x140 [ 123.279396] futex_hash_free+0x38/0xc0 [ 123.279409] mmput+0x2d3/0x390 [ 123.279428] do_exit+0x79d/0x2970 [ 123.279445] ? __pfx_do_exit+0x10/0x10 [ 123.279459] ? find_held_lock+0x2b/0x80 [ 123.279476] ? get_signal+0x835/0x2340 [ 123.279496] do_group_exit+0xd3/0x2a0 [ 123.279511] get_signal+0x2315/0x2340 [ 123.279529] ? __might_fault+0xe0/0x190 [ 123.279548] ? __pfx_get_signal+0x10/0x10 [ 123.279565] ? do_futex+0x135/0x370 [ 123.279579] ? __pfx_do_futex+0x10/0x10 [ 123.279591] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 123.279608] arch_do_signal_or_restart+0x80/0x790 [ 123.279625] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 123.279642] ? __x64_sys_futex+0x1c9/0x4d0 [ 123.279654] ? __x64_sys_futex+0x1d2/0x4d0 [ 123.279670] ? __pfx___x64_sys_futex+0x10/0x10 [ 123.279684] ? __sys_getsockopt+0x146/0x1b0 [ 123.279705] exit_to_user_mode_loop+0x8b/0x110 [ 123.279718] do_syscall_64+0x2f7/0x360 [ 123.279730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.279741] RIP: 0033:0x7fbdddeedb19 [ 123.279750] Code: Unable to access opcode bytes at 0x7fbdddeedaef. [ 123.279755] RSP: 002b:00007fbddb463218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 123.279766] RAX: fffffffffffffe00 RBX: 00007fbdde000f68 RCX: 00007fbdddeedb19 [ 123.279774] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbdde000f68 [ 123.279786] RBP: 00007fbdde000f60 R08: 0000000000000000 R09: 0000000000000000 [ 123.279793] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbdde000f6c [ 123.279800] R13: 00007ffc5ab2788f R14: 00007fbddb463300 R15: 0000000000022000 [ 123.279816] [ 123.279820] kmemleak: Object (percpu) 0x607f1a63eb08 (size 16): [ 123.279827] kmemleak: comm "syz-executor.6", pid 288, jiffies 4294789895 [ 123.279834] kmemleak: min_count = 1 [ 123.279838] kmemleak: count = 0 [ 123.279841] kmemleak: flags = 0x21 [ 123.279845] kmemleak: checksum = 0 [ 123.279849] kmemleak: backtrace: [ 123.279852] pcpu_alloc_noprof+0x87a/0x1170 [ 123.279867] mm_init+0x99b/0x1170 [ 123.279876] copy_process+0x3ab7/0x73c0 [ 123.279886] kernel_clone+0xea/0x7f0 [ 123.279896] __do_sys_clone+0xce/0x120 [ 123.279907] do_syscall_64+0xbf/0x360 [ 123.279916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.318489] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 123.319404] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 123.320009] CPU: 1 UID: 0 PID: 3979 Comm: syz-executor.2 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 123.320950] Tainted: [W]=WARN [ 123.321836] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 123.323494] RIP: 0010:perf_tp_event+0x175/0xe70 [ 123.324367] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 123.327843] RSP: 0018:ffff8880189ef080 EFLAGS: 00010212 [ 123.328747] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90007ec9000 [ 123.329923] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 123.331242] RBP: ffff8880189ef2f0 R08: ffff88806cf31340 R09: ffffe8ffffd15b28 [ 123.332857] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 123.333416] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 123.333979] FS: 00007f421d45c700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 123.334613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.335074] CR2: 0000000020039000 CR3: 00000000179ef000 CR4: 0000000000350ef0 [ 123.335628] Call Trace: [ 123.335838] [ 123.336024] ? __pfx_perf_tp_event+0x10/0x10 [ 123.336382] ? unwind_next_frame+0xb9/0x2540 [ 123.336745] ? unwind_next_frame+0x3b2/0x2540 [ 123.337113] ? lock_release+0xc8/0x290 [ 123.337432] ? unwind_next_frame+0x3bc/0x2540 [ 123.337800] ? do_syscall_64+0xbf/0x360 [ 123.338120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.338549] ? kernel_text_address+0x11/0xc0 [ 123.338905] ? __kernel_text_address+0xd/0x40 [ 123.339269] ? unwind_get_return_address+0x59/0xa0 [ 123.339659] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 123.340093] ? arch_stack_walk+0x76/0xf0 [ 123.340422] ? perf_trace_lock+0xb5/0x5d0 [ 123.340761] ? perf_trace_run_bpf_submit+0xef/0x180 [ 123.341160] perf_trace_run_bpf_submit+0xef/0x180 [ 123.341554] perf_trace_lock+0x337/0x5d0 [ 123.341885] ? __pfx_perf_trace_lock+0x10/0x10 [ 123.342259] ? lock_acquire+0x15e/0x2f0 [ 123.342577] ? bio_associate_blkg_from_css+0x426/0x1380 [ 123.343009] ? bio_associate_blkg_from_css+0x747/0x1380 [ 123.343431] lock_release+0x1ab/0x290 [ 123.343742] bio_associate_blkg_from_css+0x74c/0x1380 [ 123.344157] ? lock_is_held_type+0x9e/0x120 [ 123.344511] bio_associate_blkg+0x10e/0x2a0 [ 123.344856] bio_init+0x2dd/0x570 [ 123.345143] bio_alloc_bioset+0x2cf/0x8c0 [ 123.345485] ? perf_trace_lock+0xb5/0x5d0 [ 123.345822] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 123.346204] ? __pfx_perf_trace_lock+0x10/0x10 [ 123.346573] ? __pfx_perf_trace_lock+0x10/0x10 [ 123.346939] submit_bh_wbc+0x286/0x720 [ 123.347263] ? __pfx_end_buffer_read_sync+0x10/0x10 [ 123.347659] ext4_read_bh_nowait+0x156/0x240 [ 123.348019] ext4_read_bh_lock+0xa7/0xd0 [ 123.348345] ext4_block_write_begin+0x9ca/0xcd0 [ 123.348725] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 123.349132] ? __pfx_ext4_block_write_begin+0x10/0x10 [ 123.349544] ? folio_wait_stable+0x5d/0x100 [ 123.349888] ? __filemap_get_folio+0x2bf/0x960 [ 123.350264] ext4_da_write_begin+0x4d5/0xb40 [ 123.350623] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 123.351018] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 123.351506] generic_perform_write+0x392/0x810 [ 123.351885] ? __pfx_generic_perform_write+0x10/0x10 [ 123.352299] ext4_buffered_write_iter+0x11a/0x430 [ 123.352690] ext4_file_write_iter+0xff6/0x1990 [ 123.353058] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 123.353460] ? __lock_acquire+0xc65/0x1b70 [ 123.353801] do_iter_readv_writev+0x5af/0x910 [ 123.354170] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 123.354576] ? lock_is_held_type+0x9e/0x120 [ 123.354929] vfs_writev+0x2d4/0xcd0 [ 123.355227] ? __pfx_vfs_writev+0x10/0x10 [ 123.355561] ? kmem_cache_free+0x2a1/0x540 [ 123.355902] ? __fget_files+0x34/0x3b0 [ 123.356225] ? find_held_lock+0x2b/0x80 [ 123.356553] ? lock_release+0xc8/0x290 [ 123.356868] ? __fget_files+0x20d/0x3b0 [ 123.357195] do_pwritev+0x1ab/0x280 [ 123.357494] ? __pfx_do_pwritev+0x10/0x10 [ 123.357830] do_syscall_64+0xbf/0x360 [ 123.358135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.358548] RIP: 0033:0x7f421fee6b19 [ 123.358846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 123.360260] RSP: 002b:00007f421d45c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 123.360862] RAX: ffffffffffffffda RBX: 00007f421fff9f60 RCX: 00007f421fee6b19 [ 123.361420] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000004 [ 123.361987] RBP: 00007f421ff40f6d R08: 0000000000000000 R09: 0000000000000000 [ 123.362552] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000 [ 123.363116] R13: 00007ffdba8e126f R14: 00007f421d45c300 R15: 0000000000022000 [ 123.363683] [ 123.363872] Modules linked in: [ 123.364153] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 123.365028] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 123.365624] CPU: 1 UID: 0 PID: 3979 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 123.366559] Tainted: [D]=DIE, [W]=WARN [ 123.366862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 123.367508] RIP: 0010:perf_tp_event+0x175/0xe70 [ 123.367887] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 123.369297] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012 [ 123.369715] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 123.370282] RDX: ffff88800ea6b700 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 123.370845] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd15b28 [ 123.371402] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000 [ 123.371963] R13: 000000000000002c R14: ffff88806cf31490 R15: dffffc0000000000 [ 123.372524] FS: 00007f421d45c700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 123.373155] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.373616] CR2: 0000000020039000 CR3: 00000000179ef000 CR4: 0000000000350ef0 [ 123.374182] Call Trace: [ 123.374389] [ 123.374573] ? __pfx_perf_tp_event+0x10/0x10 [ 123.374933] ? trace_pelt_se_tp+0xdf/0x130 [ 123.375269] ? __update_load_avg_se+0x428/0xa40 [ 123.375646] ? match_held_lock+0xb0/0xd0 [ 123.375977] ? perf_trace_lock+0xb5/0x5d0 [ 123.376306] ? perf_trace_lock+0xb5/0x5d0 [ 123.376641] ? place_entity+0x300/0x410 [ 123.376961] ? kvm_sched_clock_read+0x16/0x30 [ 123.377328] ? __pfx_perf_trace_lock+0x10/0x10 [ 123.377696] ? __pfx_perf_trace_lock+0x10/0x10 [ 123.378062] ? lock_is_held_type+0x9e/0x120 [ 123.378421] ? perf_trace_run_bpf_submit+0xef/0x180 [ 123.378821] perf_trace_run_bpf_submit+0xef/0x180 [ 123.379212] perf_trace_lock+0x337/0x5d0 [ 123.379546] ? __pfx_perf_trace_lock+0x10/0x10 [ 123.379915] ? find_held_lock+0x2b/0x80 [ 123.380238] ? hrtimer_interrupt+0x114/0x830 [ 123.380590] lock_release+0x1ab/0x290 [ 123.380899] ktime_get_update_offsets_now+0xab/0x3c0 [ 123.381304] ? hrtimer_interrupt+0x114/0x830 [ 123.381662] ? __pfx_lapic_next_deadline+0x10/0x10 [ 123.382057] hrtimer_interrupt+0x114/0x830 [ 123.382411] __sysvec_apic_timer_interrupt+0xbb/0x330 [ 123.382834] sysvec_apic_timer_interrupt+0x6b/0x80 [ 123.383229] [ 123.383411] [ 123.383592] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 123.384008] RIP: 0010:oops_exit+0x0/0x50 [ 123.384334] Code: 00 3a 00 be ff ff ff ff 48 c7 c7 50 b4 43 86 e8 c6 0f f9 ff 5b e9 50 00 3a 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 36 00 3a 00 8b 1d c0 3d 4f 06 31 ff 89 de e8 57 [ 123.385752] RSP: 0018:ffff8880189eef10 EFLAGS: 00000202 [ 123.386176] RAX: 0000000000040000 RBX: 0000000000000216 RCX: ffffc90007ec9000 [ 123.386740] RDX: 0000000000040000 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 123.387300] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f12690 [ 123.387856] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880189eefd8 [ 123.388415] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000 [ 123.388977] ? oops_end+0x4a/0xe0 [ 123.389267] oops_end+0x65/0xe0 [ 123.389541] exc_general_protection+0x1a2/0x330 [ 123.389923] asm_exc_general_protection+0x26/0x30 [ 123.390311] RIP: 0010:perf_tp_event+0x175/0xe70 [ 123.390685] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 123.392103] RSP: 0018:ffff8880189ef080 EFLAGS: 00010212 [ 123.392518] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90007ec9000 [ 123.393079] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 123.393640] RBP: ffff8880189ef2f0 R08: ffff88806cf31340 R09: ffffe8ffffd15b28 [ 123.394202] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 123.394760] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 123.395325] ? perf_tp_event+0x167/0xe70 [ 123.395656] ? __pfx_perf_tp_event+0x10/0x10 [ 123.396010] ? unwind_next_frame+0xb9/0x2540 [ 123.396370] ? unwind_next_frame+0x3b2/0x2540 [ 123.396731] ? lock_release+0xc8/0x290 [ 123.397046] ? unwind_next_frame+0x3bc/0x2540 [ 123.397410] ? do_syscall_64+0xbf/0x360 [ 123.397725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.398147] ? kernel_text_address+0x11/0xc0 [ 123.398507] ? __kernel_text_address+0xd/0x40 [ 123.398871] ? unwind_get_return_address+0x59/0xa0 [ 123.399271] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 123.399704] ? arch_stack_walk+0x76/0xf0 [ 123.400032] ? perf_trace_lock+0xb5/0x5d0 [ 123.400368] ? perf_trace_run_bpf_submit+0xef/0x180 [ 123.400767] perf_trace_run_bpf_submit+0xef/0x180 [ 123.401159] perf_trace_lock+0x337/0x5d0 [ 123.401488] ? __pfx_perf_trace_lock+0x10/0x10 [ 123.401854] ? lock_acquire+0x15e/0x2f0 [ 123.402179] ? bio_associate_blkg_from_css+0x426/0x1380 [ 123.402608] ? bio_associate_blkg_from_css+0x747/0x1380 [ 123.403034] lock_release+0x1ab/0x290 [ 123.403342] bio_associate_blkg_from_css+0x74c/0x1380 [ 123.403756] ? lock_is_held_type+0x9e/0x120 [ 123.404109] bio_associate_blkg+0x10e/0x2a0 [ 123.404457] bio_init+0x2dd/0x570 [ 123.404742] bio_alloc_bioset+0x2cf/0x8c0 [ 123.405076] ? perf_trace_lock+0xb5/0x5d0 [ 123.405405] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 123.405780] ? __pfx_perf_trace_lock+0x10/0x10 [ 123.406147] ? __pfx_perf_trace_lock+0x10/0x10 [ 123.406523] submit_bh_wbc+0x286/0x720 [ 123.406841] ? __pfx_end_buffer_read_sync+0x10/0x10 [ 123.407235] ext4_read_bh_nowait+0x156/0x240 [ 123.407589] ext4_read_bh_lock+0xa7/0xd0 [ 123.407920] ext4_block_write_begin+0x9ca/0xcd0 [ 123.408296] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 123.408705] ? __pfx_ext4_block_write_begin+0x10/0x10 [ 123.409115] ? folio_wait_stable+0x5d/0x100 [ 123.409458] ? __filemap_get_folio+0x2bf/0x960 [ 123.409826] ext4_da_write_begin+0x4d5/0xb40 [ 123.410192] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 123.410589] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 123.411072] generic_perform_write+0x392/0x810 [ 123.411446] ? __pfx_generic_perform_write+0x10/0x10 [ 123.411864] ext4_buffered_write_iter+0x11a/0x430 [ 123.412250] ext4_file_write_iter+0xff6/0x1990 [ 123.412624] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 123.413037] ? __lock_acquire+0xc65/0x1b70 [ 123.413386] do_iter_readv_writev+0x5af/0x910 [ 123.413770] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 123.414178] ? lock_is_held_type+0x9e/0x120 [ 123.414532] vfs_writev+0x2d4/0xcd0 [ 123.414828] ? __pfx_vfs_writev+0x10/0x10 [ 123.415159] ? kmem_cache_free+0x2a1/0x540 [ 123.415497] ? __fget_files+0x34/0x3b0 [ 123.415808] ? find_held_lock+0x2b/0x80 [ 123.416133] ? lock_release+0xc8/0x290 [ 123.416445] ? __fget_files+0x20d/0x3b0 [ 123.416772] do_pwritev+0x1ab/0x280 [ 123.417068] ? __pfx_do_pwritev+0x10/0x10 [ 123.417406] do_syscall_64+0xbf/0x360 [ 123.417716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.418128] RIP: 0033:0x7f421fee6b19 [ 123.418429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 123.419856] RSP: 002b:00007f421d45c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 123.420450] RAX: ffffffffffffffda RBX: 00007f421fff9f60 RCX: 00007f421fee6b19 [ 123.421014] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000004 [ 123.421568] RBP: 00007f421ff40f6d R08: 0000000000000000 R09: 0000000000000000 [ 123.422129] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000 [ 123.422697] R13: 00007ffdba8e126f R14: 00007f421d45c300 R15: 0000000000022000 [ 123.423262] [ 123.423452] Modules linked in: [ 123.423716] ---[ end trace 0000000000000000 ]--- [ 123.424088] RIP: 0010:perf_tp_event+0x175/0xe70 [ 123.424460] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 123.425878] RSP: 0018:ffff8880189ef080 EFLAGS: 00010212 [ 123.426307] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90007ec9000 [ 123.426867] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 123.427429] RBP: ffff8880189ef2f0 R08: ffff88806cf31340 R09: ffffe8ffffd15b28 [ 123.428002] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 123.428567] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 123.429136] FS: 00007f421d45c700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 123.429775] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.430250] CR2: 0000000020039000 CR3: 00000000179ef000 CR4: 0000000000350ef0 [ 123.430819] Kernel panic - not syncing: Fatal exception in interrupt [ 124.473733] Shutting down cpus with NMI [ 124.474209] Kernel Offset: disabled [ 124.474510] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 10:30:51 Registers: info registers vcpu 0 RAX=ffffed1003104f96 RBX=ffffed1003104fa8 RCX=ffffffff8250f32d RDX=0000000000000012 RSI=0000000000000090 RDI=ffff888018827cb0 RBP=ffffed1003104f96 RSP=ffff888018827c28 R8 =0000000000000000 R9 =ffffed1003104fa7 R10=ffff888018827d3f R11=0000000000000000 R12=ffff888018827cb0 R13=00007ffceb378c10 R14=00007ffffffff000 R15=0000000000000000 RIP=ffffffff81b00884 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fdf4e05c8c0 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555569da1c58 CR3=000000000dea3000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffff00ff00000000000000 XMM02=00000000000000c100736576616c732f XMM03=7269762f736563697665642f7379732f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000562b8e7b36800000562b8e7b8b10 XMM06=0000562b8e7c6e400000000000000000 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000200000000000000020000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff828e5070 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff8880189ee998 R8 =0000000000000000 R9 =ffffed100172b046 R10=00000000000fe503 R11=3838666666662052 R12=0000000000000823 R13=0000000000000020 R14=fffffbfff10e52a2 R15=dffffc0000000000 RIP=ffffffff828e50c5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f421d45c700 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020039000 CR3=00000000179ef000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000ff000000000000000000000000ff XMM01=736c00727474617865766f6d65726c00 XMM02=00000000000000000000000000000000 XMM03=00007f421ffcd7c800007f421ffcd7c0 XMM04=ff000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000