Warning: Permanently added '[localhost]:56622' (ECDSA) to the list of known hosts. 2025/08/29 10:59:49 fuzzer started 2025/08/29 10:59:50 dialing manager at localhost:43077 syzkaller login: [ 52.094178] cgroup: Unknown subsys name 'net' [ 52.185123] cgroup: Unknown subsys name 'cpuset' [ 52.197887] cgroup: Unknown subsys name 'rlimit' 2025/08/29 11:00:00 syscalls: 2214 2025/08/29 11:00:00 code coverage: enabled 2025/08/29 11:00:00 comparison tracing: enabled 2025/08/29 11:00:00 extra coverage: enabled 2025/08/29 11:00:00 setuid sandbox: enabled 2025/08/29 11:00:00 namespace sandbox: enabled 2025/08/29 11:00:00 Android sandbox: enabled 2025/08/29 11:00:00 fault injection: enabled 2025/08/29 11:00:00 leak checking: enabled 2025/08/29 11:00:00 net packet injection: enabled 2025/08/29 11:00:00 net device setup: enabled 2025/08/29 11:00:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 11:00:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 11:00:00 USB emulation: enabled 2025/08/29 11:00:00 hci packet injection: enabled 2025/08/29 11:00:00 wifi device emulation: enabled 2025/08/29 11:00:00 802.15.4 emulation: enabled 2025/08/29 11:00:00 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 11:00:00 fetching corpus: 37, signal 16218/19843 (executing program) 2025/08/29 11:00:00 fetching corpus: 72, signal 23374/28591 (executing program) 2025/08/29 11:00:00 fetching corpus: 115, signal 31796/38370 (executing program) 2025/08/29 11:00:00 fetching corpus: 164, signal 39481/47212 (executing program) 2025/08/29 11:00:01 fetching corpus: 213, signal 49815/58485 (executing program) 2025/08/29 11:00:01 fetching corpus: 262, signal 54005/63768 (executing program) 2025/08/29 11:00:01 fetching corpus: 312, signal 59314/70017 (executing program) 2025/08/29 11:00:01 fetching corpus: 362, signal 62430/74126 (executing program) 2025/08/29 11:00:01 fetching corpus: 412, signal 64983/77695 (executing program) 2025/08/29 11:00:01 fetching corpus: 461, signal 68189/81809 (executing program) 2025/08/29 11:00:01 fetching corpus: 511, signal 73800/87914 (executing program) 2025/08/29 11:00:01 fetching corpus: 561, signal 75409/90527 (executing program) 2025/08/29 11:00:01 fetching corpus: 610, signal 79751/95389 (executing program) 2025/08/29 11:00:01 fetching corpus: 659, signal 83293/99435 (executing program) 2025/08/29 11:00:02 fetching corpus: 706, signal 85156/102058 (executing program) 2025/08/29 11:00:02 fetching corpus: 755, signal 86949/104515 (executing program) 2025/08/29 11:00:02 fetching corpus: 804, signal 88886/107121 (executing program) 2025/08/29 11:00:02 fetching corpus: 854, signal 90390/109325 (executing program) 2025/08/29 11:00:02 fetching corpus: 904, signal 92225/111761 (executing program) 2025/08/29 11:00:02 fetching corpus: 954, signal 95412/115201 (executing program) 2025/08/29 11:00:02 fetching corpus: 1004, signal 96571/117055 (executing program) 2025/08/29 11:00:02 fetching corpus: 1054, signal 98949/119791 (executing program) 2025/08/29 11:00:02 fetching corpus: 1104, signal 100446/121776 (executing program) 2025/08/29 11:00:02 fetching corpus: 1153, signal 102157/123885 (executing program) 2025/08/29 11:00:03 fetching corpus: 1202, signal 103965/126049 (executing program) 2025/08/29 11:00:03 fetching corpus: 1252, signal 105474/127995 (executing program) 2025/08/29 11:00:03 fetching corpus: 1302, signal 106194/129358 (executing program) 2025/08/29 11:00:03 fetching corpus: 1352, signal 107351/130918 (executing program) 2025/08/29 11:00:03 fetching corpus: 1402, signal 108363/132501 (executing program) 2025/08/29 11:00:03 fetching corpus: 1452, signal 109435/134029 (executing program) 2025/08/29 11:00:03 fetching corpus: 1502, signal 110715/135662 (executing program) 2025/08/29 11:00:03 fetching corpus: 1552, signal 112021/137313 (executing program) 2025/08/29 11:00:03 fetching corpus: 1601, signal 113090/138736 (executing program) 2025/08/29 11:00:03 fetching corpus: 1651, signal 114190/140210 (executing program) 2025/08/29 11:00:03 fetching corpus: 1701, signal 115307/141631 (executing program) 2025/08/29 11:00:04 fetching corpus: 1751, signal 116321/142984 (executing program) 2025/08/29 11:00:04 fetching corpus: 1801, signal 117454/144432 (executing program) 2025/08/29 11:00:04 fetching corpus: 1851, signal 118463/145727 (executing program) 2025/08/29 11:00:04 fetching corpus: 1901, signal 121285/148074 (executing program) 2025/08/29 11:00:04 fetching corpus: 1951, signal 122082/149184 (executing program) 2025/08/29 11:00:04 fetching corpus: 2001, signal 124212/150983 (executing program) 2025/08/29 11:00:04 fetching corpus: 2051, signal 125629/152401 (executing program) 2025/08/29 11:00:04 fetching corpus: 2101, signal 126467/153470 (executing program) 2025/08/29 11:00:04 fetching corpus: 2150, signal 127164/154459 (executing program) 2025/08/29 11:00:05 fetching corpus: 2200, signal 127985/155515 (executing program) 2025/08/29 11:00:05 fetching corpus: 2250, signal 129606/156951 (executing program) 2025/08/29 11:00:05 fetching corpus: 2300, signal 130941/158125 (executing program) 2025/08/29 11:00:05 fetching corpus: 2350, signal 131760/159041 (executing program) 2025/08/29 11:00:05 fetching corpus: 2400, signal 132583/160002 (executing program) 2025/08/29 11:00:05 fetching corpus: 2450, signal 133106/160806 (executing program) 2025/08/29 11:00:05 fetching corpus: 2500, signal 134147/161806 (executing program) 2025/08/29 11:00:05 fetching corpus: 2550, signal 134661/162565 (executing program) 2025/08/29 11:00:05 fetching corpus: 2600, signal 135528/163425 (executing program) 2025/08/29 11:00:05 fetching corpus: 2650, signal 136221/164205 (executing program) 2025/08/29 11:00:05 fetching corpus: 2700, signal 136799/164951 (executing program) 2025/08/29 11:00:06 fetching corpus: 2750, signal 137842/165815 (executing program) 2025/08/29 11:00:06 fetching corpus: 2800, signal 138694/166604 (executing program) 2025/08/29 11:00:06 fetching corpus: 2850, signal 139206/167318 (executing program) 2025/08/29 11:00:06 fetching corpus: 2899, signal 140005/168095 (executing program) 2025/08/29 11:00:06 fetching corpus: 2949, signal 140722/168823 (executing program) 2025/08/29 11:00:06 fetching corpus: 2999, signal 141496/169547 (executing program) 2025/08/29 11:00:06 fetching corpus: 3049, signal 142235/170223 (executing program) 2025/08/29 11:00:06 fetching corpus: 3099, signal 143116/170924 (executing program) 2025/08/29 11:00:06 fetching corpus: 3149, signal 143533/171477 (executing program) 2025/08/29 11:00:06 fetching corpus: 3199, signal 144257/172118 (executing program) 2025/08/29 11:00:06 fetching corpus: 3249, signal 144767/172653 (executing program) 2025/08/29 11:00:07 fetching corpus: 3299, signal 145300/173247 (executing program) 2025/08/29 11:00:07 fetching corpus: 3349, signal 146124/173834 (executing program) 2025/08/29 11:00:07 fetching corpus: 3399, signal 146811/174402 (executing program) 2025/08/29 11:00:07 fetching corpus: 3449, signal 147598/174986 (executing program) 2025/08/29 11:00:07 fetching corpus: 3498, signal 148189/175482 (executing program) 2025/08/29 11:00:07 fetching corpus: 3548, signal 149180/176046 (executing program) 2025/08/29 11:00:07 fetching corpus: 3598, signal 149670/176531 (executing program) 2025/08/29 11:00:07 fetching corpus: 3648, signal 150113/176963 (executing program) 2025/08/29 11:00:07 fetching corpus: 3698, signal 150670/177396 (executing program) 2025/08/29 11:00:07 fetching corpus: 3748, signal 151256/177943 (executing program) 2025/08/29 11:00:07 fetching corpus: 3797, signal 151867/178380 (executing program) 2025/08/29 11:00:08 fetching corpus: 3847, signal 152536/178797 (executing program) 2025/08/29 11:00:08 fetching corpus: 3897, signal 152863/179144 (executing program) 2025/08/29 11:00:08 fetching corpus: 3947, signal 153269/179495 (executing program) 2025/08/29 11:00:08 fetching corpus: 3997, signal 153825/179875 (executing program) 2025/08/29 11:00:08 fetching corpus: 4047, signal 154244/180249 (executing program) 2025/08/29 11:00:08 fetching corpus: 4097, signal 154591/180597 (executing program) 2025/08/29 11:00:08 fetching corpus: 4147, signal 155359/180978 (executing program) 2025/08/29 11:00:08 fetching corpus: 4197, signal 155737/181315 (executing program) 2025/08/29 11:00:08 fetching corpus: 4247, signal 156252/181638 (executing program) 2025/08/29 11:00:08 fetching corpus: 4297, signal 156876/181935 (executing program) 2025/08/29 11:00:08 fetching corpus: 4347, signal 157340/182133 (executing program) 2025/08/29 11:00:09 fetching corpus: 4397, signal 158256/182204 (executing program) 2025/08/29 11:00:09 fetching corpus: 4447, signal 158739/182218 (executing program) 2025/08/29 11:00:09 fetching corpus: 4497, signal 159478/182224 (executing program) 2025/08/29 11:00:09 fetching corpus: 4547, signal 159925/182265 (executing program) 2025/08/29 11:00:09 fetching corpus: 4597, signal 160346/182276 (executing program) 2025/08/29 11:00:09 fetching corpus: 4647, signal 160821/182296 (executing program) 2025/08/29 11:00:09 fetching corpus: 4697, signal 161190/182307 (executing program) 2025/08/29 11:00:09 fetching corpus: 4747, signal 161591/182316 (executing program) 2025/08/29 11:00:10 fetching corpus: 4797, signal 162017/182324 (executing program) 2025/08/29 11:00:10 fetching corpus: 4845, signal 162655/182351 (executing program) 2025/08/29 11:00:10 fetching corpus: 4895, signal 163053/182358 (executing program) 2025/08/29 11:00:10 fetching corpus: 4945, signal 163397/182360 (executing program) 2025/08/29 11:00:10 fetching corpus: 4995, signal 163925/182360 (executing program) 2025/08/29 11:00:10 fetching corpus: 5045, signal 164425/182365 (executing program) 2025/08/29 11:00:10 fetching corpus: 5095, signal 164759/182369 (executing program) 2025/08/29 11:00:10 fetching corpus: 5145, signal 165245/182375 (executing program) 2025/08/29 11:00:10 fetching corpus: 5195, signal 165542/182376 (executing program) 2025/08/29 11:00:10 fetching corpus: 5245, signal 165912/182491 (executing program) 2025/08/29 11:00:10 fetching corpus: 5295, signal 166214/182524 (executing program) 2025/08/29 11:00:10 fetching corpus: 5344, signal 166565/182533 (executing program) 2025/08/29 11:00:11 fetching corpus: 5394, signal 166964/182557 (executing program) 2025/08/29 11:00:11 fetching corpus: 5444, signal 167348/182559 (executing program) 2025/08/29 11:00:11 fetching corpus: 5494, signal 167709/182616 (executing program) 2025/08/29 11:00:11 fetching corpus: 5544, signal 167962/182623 (executing program) 2025/08/29 11:00:11 fetching corpus: 5594, signal 168323/182634 (executing program) 2025/08/29 11:00:11 fetching corpus: 5644, signal 168716/182667 (executing program) 2025/08/29 11:00:11 fetching corpus: 5694, signal 168975/182667 (executing program) 2025/08/29 11:00:11 fetching corpus: 5743, signal 169258/182679 (executing program) 2025/08/29 11:00:11 fetching corpus: 5793, signal 169537/182684 (executing program) 2025/08/29 11:00:11 fetching corpus: 5843, signal 169828/182715 (executing program) 2025/08/29 11:00:11 fetching corpus: 5893, signal 170155/182719 (executing program) 2025/08/29 11:00:11 fetching corpus: 5943, signal 170593/182721 (executing program) 2025/08/29 11:00:12 fetching corpus: 5993, signal 170869/182734 (executing program) 2025/08/29 11:00:12 fetching corpus: 6043, signal 171272/182737 (executing program) 2025/08/29 11:00:12 fetching corpus: 6093, signal 171557/182745 (executing program) 2025/08/29 11:00:12 fetching corpus: 6143, signal 171933/182756 (executing program) 2025/08/29 11:00:12 fetching corpus: 6193, signal 172223/182762 (executing program) 2025/08/29 11:00:12 fetching corpus: 6243, signal 172677/182780 (executing program) 2025/08/29 11:00:12 fetching corpus: 6293, signal 173088/182782 (executing program) 2025/08/29 11:00:12 fetching corpus: 6343, signal 173350/182805 (executing program) 2025/08/29 11:00:12 fetching corpus: 6392, signal 173678/182809 (executing program) 2025/08/29 11:00:12 fetching corpus: 6442, signal 174009/182816 (executing program) 2025/08/29 11:00:12 fetching corpus: 6492, signal 174262/182851 (executing program) 2025/08/29 11:00:12 fetching corpus: 6542, signal 174485/182866 (executing program) 2025/08/29 11:00:13 fetching corpus: 6592, signal 174989/182878 (executing program) 2025/08/29 11:00:13 fetching corpus: 6642, signal 175225/182924 (executing program) 2025/08/29 11:00:13 fetching corpus: 6692, signal 175468/182935 (executing program) 2025/08/29 11:00:13 fetching corpus: 6742, signal 175897/182938 (executing program) 2025/08/29 11:00:13 fetching corpus: 6792, signal 176260/182979 (executing program) 2025/08/29 11:00:13 fetching corpus: 6842, signal 176540/182986 (executing program) 2025/08/29 11:00:13 fetching corpus: 6892, signal 177051/183009 (executing program) 2025/08/29 11:00:13 fetching corpus: 6942, signal 177304/183054 (executing program) 2025/08/29 11:00:13 fetching corpus: 6992, signal 177607/183068 (executing program) 2025/08/29 11:00:13 fetching corpus: 7042, signal 178010/183136 (executing program) 2025/08/29 11:00:13 fetching corpus: 7092, signal 178278/183150 (executing program) 2025/08/29 11:00:13 fetching corpus: 7142, signal 178676/183208 (executing program) 2025/08/29 11:00:13 fetching corpus: 7192, signal 178900/183213 (executing program) 2025/08/29 11:00:14 fetching corpus: 7242, signal 179216/183219 (executing program) 2025/08/29 11:00:14 fetching corpus: 7292, signal 179458/183272 (executing program) 2025/08/29 11:00:14 fetching corpus: 7342, signal 179729/183278 (executing program) 2025/08/29 11:00:14 fetching corpus: 7361, signal 179960/183278 (executing program) 2025/08/29 11:00:14 fetching corpus: 7361, signal 179960/183278 (executing program) 2025/08/29 11:00:15 starting 8 fuzzer processes 11:00:15 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x14, 0x11, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 11:00:15 executing program 2: r0 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r0, 0x0, 0xf, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 11:00:15 executing program 7: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0xc, &(0x7f0000000000), 0x0) 11:00:15 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) preadv2(r0, &(0x7f0000003500)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x3, 0x0, 0x0) 11:00:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5) [ 77.653933] audit: type=1400 audit(1756465215.938:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:00:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') open_tree(r0, &(0x7f0000000300)='./mnt\x00', 0x88001) 11:00:15 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 11:00:16 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x0) [ 78.791601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.795698] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.798480] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.802559] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.806698] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.914909] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.923873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.928685] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.937322] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.947856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.986917] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.992564] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.994216] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.996776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.003501] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.004756] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.007629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.009886] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.011891] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.013922] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.016606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.018171] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.022097] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.031663] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.038468] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.056856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 79.059148] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 79.061398] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 79.062166] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 79.072641] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 79.075139] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 79.077413] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 79.078209] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 79.083844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 79.096969] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 79.099633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 79.101203] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 79.103196] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 79.111593] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 79.123611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.883795] Bluetooth: hci0: command tx timeout [ 81.011504] Bluetooth: hci1: command tx timeout [ 81.076484] Bluetooth: hci3: command tx timeout [ 81.076501] Bluetooth: hci2: command tx timeout [ 81.139954] Bluetooth: hci6: command tx timeout [ 81.140474] Bluetooth: hci7: command tx timeout [ 81.140888] Bluetooth: hci4: command tx timeout [ 81.203454] Bluetooth: hci5: command tx timeout [ 82.931499] Bluetooth: hci0: command tx timeout [ 83.059442] Bluetooth: hci1: command tx timeout [ 83.123558] Bluetooth: hci3: command tx timeout [ 83.124464] Bluetooth: hci2: command tx timeout [ 83.187552] Bluetooth: hci4: command tx timeout [ 83.189260] Bluetooth: hci6: command tx timeout [ 83.190060] Bluetooth: hci7: command tx timeout [ 83.251678] Bluetooth: hci5: command tx timeout [ 84.979741] Bluetooth: hci0: command tx timeout [ 85.107933] Bluetooth: hci1: command tx timeout [ 85.172606] Bluetooth: hci3: command tx timeout [ 85.173879] Bluetooth: hci2: command tx timeout [ 85.235498] Bluetooth: hci7: command tx timeout [ 85.236247] Bluetooth: hci4: command tx timeout [ 85.236977] Bluetooth: hci6: command tx timeout [ 85.299478] Bluetooth: hci5: command tx timeout [ 87.028406] Bluetooth: hci0: command tx timeout [ 87.155415] Bluetooth: hci1: command tx timeout [ 87.219461] Bluetooth: hci2: command tx timeout [ 87.219904] Bluetooth: hci3: command tx timeout [ 87.283594] Bluetooth: hci6: command tx timeout [ 87.284028] Bluetooth: hci4: command tx timeout [ 87.285098] Bluetooth: hci7: command tx timeout [ 87.348480] Bluetooth: hci5: command tx timeout [ 115.536012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.537433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.754622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.755243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:00:54 executing program 7: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0xc, &(0x7f0000000000), 0x0) 11:00:54 executing program 7: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0xc, &(0x7f0000000000), 0x0) 11:00:54 executing program 7: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0xc, &(0x7f0000000000), 0x0) [ 116.627415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.628047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:00:54 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x63, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 116.688489] audit: type=1400 audit(1756465254.971:8): avc: denied { open } for pid=3855 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 116.692964] audit: type=1400 audit(1756465254.971:9): avc: denied { kernel } for pid=3855 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 11:00:55 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x63, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 116.809165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.809808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:00:55 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x63, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 116.876598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.877218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:00:55 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x63, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 116.937010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.937620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:00:55 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @loopback}}}], 0x20}, 0x0) [ 117.017425] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.038405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.039018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.114204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.114995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.128995] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 117.129768] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 117.130320] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 117.130914] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 117.131541] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 [ 117.134403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.134922] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.135714] Buffer I/O error on dev sr0, logical block 0, async page read [ 117.141837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.142286] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.143078] Buffer I/O error on dev sr0, logical block 1, async page read [ 117.150851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.151316] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.152082] Buffer I/O error on dev sr0, logical block 2, async page read [ 117.161223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.161764] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.162436] Buffer I/O error on dev sr0, logical block 3, async page read [ 117.163695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.164145] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.164873] Buffer I/O error on dev sr0, logical block 4, async page read [ 117.168630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.169100] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.169900] Buffer I/O error on dev sr0, logical block 5, async page read [ 117.173540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.173620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.174032] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.174584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.175753] Buffer I/O error on dev sr0, logical block 6, async page read [ 117.185493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.185959] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.186728] Buffer I/O error on dev sr0, logical block 7, async page read [ 117.218537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.219147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.247059] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 117.247942] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 117.248623] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 117.249149] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 117.249855] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 [ 117.275006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.275660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.315145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.315795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.375908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.376565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.449935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.450580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.483609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.484204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.575172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.576138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:00:56 executing program 2: r0 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r0, 0x0, 0xf, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 11:00:56 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x0) 11:00:56 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @loopback}}}], 0x20}, 0x0) 11:00:56 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) preadv2(r0, &(0x7f0000003500)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x3, 0x0, 0x0) 11:00:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') open_tree(r0, &(0x7f0000000300)='./mnt\x00', 0x88001) 11:00:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5) 11:00:56 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x14, 0x11, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 11:00:56 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) [ 117.798436] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 117.799250] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 117.799840] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 117.800410] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 11:00:56 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @loopback}}}], 0x20}, 0x0) [ 117.801775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.802264] Buffer I/O error on dev sr0, logical block 0, async page read [ 117.809299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.809799] Buffer I/O error on dev sr0, logical block 1, async page read [ 117.813013] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.816233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.816828] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.820714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.821273] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.827886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 11:00:56 executing program 2: r0 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r0, 0x0, 0xf, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 11:00:56 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 11:00:56 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x14, 0x11, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 11:00:56 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x0) 11:00:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') open_tree(r0, &(0x7f0000000300)='./mnt\x00', 0x88001) 11:00:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5) 11:00:56 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @loopback}}}], 0x20}, 0x0) 11:00:56 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) preadv2(r0, &(0x7f0000003500)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x3, 0x0, 0x0) 11:00:56 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x0) [ 117.988544] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 117.989312] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 117.989898] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 117.990448] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 117.991391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.991962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.993568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.998018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.999997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.002560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.004898] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.008233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 11:00:56 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x14, 0x11, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 11:00:56 executing program 2: r0 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r0, 0x0, 0xf, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 11:00:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5) 11:00:56 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) preadv2(r0, &(0x7f0000003500)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x3, 0x0, 0x0) 11:00:56 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 11:00:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') open_tree(r0, &(0x7f0000000300)='./mnt\x00', 0x88001) 11:00:56 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)) timer_gettime(0x0, &(0x7f0000000100)) 11:00:56 executing program 6: prctl$PR_SET_MM(0x26, 0x1, &(0x7f0000ffd000/0x3000)=nil) 11:00:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000240008000f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0", 0x25, 0x1e0}, {0x0, 0x0, 0x400}], 0x0, &(0x7f0000010d00)) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/159) 11:00:56 executing program 0: r0 = io_uring_setup(0x44a, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0xffffffcb, 0x3, 0x0, 0x0) 11:00:56 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000100)) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffa) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 11:00:56 executing program 6: prctl$PR_SET_MM(0x26, 0x1, &(0x7f0000ffd000/0x3000)=nil) [ 118.300598] loop3: detected capacity change from 0 to 4 11:00:56 executing program 0: r0 = io_uring_setup(0x44a, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0xffffffcb, 0x3, 0x0, 0x0) [ 118.325044] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 118.325859] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 118.326449] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 118.326981] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 118.327993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.328686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.335504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.336067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.339935] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.343615] FAT-fs (loop3): Directory bread(block 4) failed [ 118.346595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.347195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.347708] FAT-fs (loop3): Directory bread(block 5) failed [ 118.353725] FAT-fs (loop3): Directory bread(block 6) failed [ 118.358785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 11:00:56 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)) timer_gettime(0x0, &(0x7f0000000100)) 11:00:56 executing program 6: prctl$PR_SET_MM(0x26, 0x1, &(0x7f0000ffd000/0x3000)=nil) [ 118.419087] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI [ 118.420942] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 118.427832] CPU: 1 UID: 0 PID: 3964 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 118.429784] Tainted: [W]=WARN [ 118.430307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 118.431652] RIP: 0010:perf_tp_event+0x175/0xe70 [ 118.432448] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 118.435405] RSP: 0018:ffff888047787800 EFLAGS: 00010212 [ 118.436287] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc9000842f000 [ 118.437455] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 118.438617] RBP: ffff888047787a70 R08: ffff88806cf31340 R09: ffffe8ffffd15e00 [ 118.439784] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000 [ 118.440959] R13: 0000000000000024 R14: ffff88806cf31340 R15: dffffc0000000000 [ 118.442129] FS: 00007f9cfb8c8700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 118.443447] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.444414] CR2: 0000001b2d128000 CR3: 000000001e56e000 CR4: 0000000000350ef0 [ 118.445543] Call Trace: [ 118.445962] [ 118.446346] ? __pfx_perf_tp_event+0x10/0x10 [ 118.447079] ? lock_acquire+0x15e/0x2f0 [ 118.447725] ? __is_insn_slot_addr+0x2e/0x290 [ 118.448472] ? find_held_lock+0x2b/0x80 [ 118.449129] ? __is_insn_slot_addr+0x136/0x290 [ 118.449879] ? lock_release+0xc8/0x290 [ 118.450524] ? __is_insn_slot_addr+0x140/0x290 [ 118.451280] ? kernel_text_address+0x5b/0xc0 [ 118.451995] ? __kernel_text_address+0xd/0x40 [ 118.452740] ? unwind_get_return_address+0x59/0xa0 [ 118.453547] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 118.454415] ? arch_stack_walk+0x9c/0xf0 [ 118.455086] ? perf_trace_run_bpf_submit+0xef/0x180 [ 118.455888] perf_trace_run_bpf_submit+0xef/0x180 [ 118.456688] perf_trace_lock_acquire+0x3c2/0x700 [ 118.457483] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 118.458334] ? futex_ref_get+0x48/0x300 [ 118.458974] ? find_held_lock+0x2b/0x80 [ 118.459634] lock_acquire+0xc5/0x2f0 [ 118.460240] ? futex_wake+0x228/0x540 [ 118.460897] _raw_spin_lock+0x2b/0x40 [ 118.461527] ? futex_wake+0x228/0x540 [ 118.462152] futex_wake+0x228/0x540 [ 118.462778] ? __pfx_futex_wake+0x10/0x10 [ 118.463463] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 118.464316] ? __call_rcu_common.constprop.0+0x4c1/0x960 [ 118.465206] do_futex+0x26d/0x370 [ 118.465780] ? __fput+0x67b/0xb50 [ 118.466360] ? __pfx_do_futex+0x10/0x10 [ 118.467091] ? __fput+0x67b/0xb50 [ 118.467704] __x64_sys_futex+0x1c9/0x4d0 [ 118.468416] ? fput_close_sync+0x114/0x240 [ 118.469147] ? __pfx___x64_sys_futex+0x10/0x10 [ 118.469908] ? __pfx_fput_close_sync+0x10/0x10 [ 118.470662] ? dnotify_flush+0x79/0x4c0 [ 118.471358] do_syscall_64+0xbf/0x360 [ 118.472002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.472850] RIP: 0033:0x7f9cfe352b19 [ 118.473485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 118.476394] RSP: 002b:00007f9cfb8c8218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.477562] RAX: ffffffffffffffda RBX: 00007f9cfe465f68 RCX: 00007f9cfe352b19 [ 118.478749] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9cfe465f6c [ 118.479925] RBP: 00007f9cfe465f60 R08: 0000000000000010 R09: 0000000000000000 [ 118.480996] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f9cfe465f6c [ 118.482158] R13: 00007ffeec80e8ff R14: 00007f9cfb8c8300 R15: 0000000000022000 [ 118.483349] [ 118.483742] Modules linked in: [ 118.486126] ---[ end trace 0000000000000000 ]--- [ 118.488150] RIP: 0010:perf_tp_event+0x175/0xe70 [ 118.488911] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 118.491924] RSP: 0018:ffff888047787800 EFLAGS: 00010212 [ 118.492973] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc9000842f000 [ 118.494240] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 118.495422] RBP: ffff888047787a70 R08: ffff88806cf31340 R09: ffffe8ffffd15e00 [ 118.496520] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000 [ 118.497591] R13: 0000000000000024 R14: ffff88806cf31340 R15: dffffc0000000000 [ 118.498677] FS: 00007f9cfb8c8700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 118.499901] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.500793] CR2: 0000001b2d128000 CR3: 000000001e56e000 CR4: 0000000000350ef0 [ 118.501954] note: syz-executor.3[3964] exited with preempt_count 2 11:00:56 executing program 0: r0 = io_uring_setup(0x44a, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0xffffffcb, 0x3, 0x0, 0x0) 11:00:56 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000100)) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffa) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 11:00:56 executing program 6: prctl$PR_SET_MM(0x26, 0x1, &(0x7f0000ffd000/0x3000)=nil) 11:00:56 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)) timer_gettime(0x0, &(0x7f0000000100)) 11:00:56 executing program 0: r0 = io_uring_setup(0x44a, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0xffffffcb, 0x3, 0x0, 0x0) 11:00:56 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000100)) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffa) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 11:00:56 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)) timer_gettime(0x0, &(0x7f0000000100)) 11:00:56 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/98, 0x62}], 0x1) 11:00:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000240008000f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0", 0x25, 0x1e0}, {0x0, 0x0, 0x400}], 0x0, &(0x7f0000010d00)) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/159) 11:00:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) 11:00:57 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000100)) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffa) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 118.747146] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI [ 118.748889] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 118.750253] CPU: 1 UID: 0 PID: 3990 Comm: syz-executor.4 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 118.752014] Tainted: [D]=DIE, [W]=WARN [ 118.752601] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 118.753830] RIP: 0010:perf_tp_event+0x175/0xe70 [ 118.754542] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 118.757229] RSP: 0018:ffff888045fdf800 EFLAGS: 00010212 [ 118.758029] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90004610000 [ 118.759078] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 118.760126] RBP: ffff888045fdfa70 R08: ffff88806cf31340 R09: ffffe8ffffd15b78 [ 118.761197] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000 [ 118.762246] R13: 0000000000000024 R14: ffff88806cf31340 R15: dffffc0000000000 [ 118.763303] FS: 00007f663d353700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 118.764499] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.765361] CR2: 00007f663fef1018 CR3: 000000001e56e000 CR4: 0000000000350ef0 [ 118.766417] Call Trace: [ 118.766810] [ 118.767161] ? __pfx_perf_tp_event+0x10/0x10 [ 118.767837] ? kvm_sched_clock_read+0x16/0x30 [ 118.768532] ? local_clock_noinstr+0xf/0xc0 [ 118.769191] ? ctx_sched_in+0x134/0x9b0 [ 118.769793] ? __kernel_text_address+0xd/0x40 [ 118.770483] ? __pfx_ctx_sched_in+0x10/0x10 [ 118.771124] ? arch_stack_walk+0x9c/0xf0 [ 118.771747] ? lock_release+0x1c7/0x290 [ 118.772363] ? lock_release+0x1c7/0x290 [ 118.772976] ? do_raw_spin_unlock+0x53/0x220 [ 118.773671] ? perf_trace_run_bpf_submit+0xef/0x180 [ 118.774442] perf_trace_run_bpf_submit+0xef/0x180 [ 118.775192] perf_trace_lock_acquire+0x3c2/0x700 [ 118.775923] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 118.776749] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 118.777560] ? lock_acquire+0xc5/0x2f0 [ 118.778170] ? lock_acquire+0x18c/0x2f0 [ 118.778793] lock_acquire+0xc5/0x2f0 [ 118.779377] ? futex_wake+0x228/0x540 [ 118.779976] ? futex_hash+0x15c/0x390 [ 118.780589] _raw_spin_lock+0x2b/0x40 [ 118.781183] ? futex_wake+0x228/0x540 [ 118.781790] futex_wake+0x228/0x540 [ 118.782370] ? __pfx_futex_wake+0x10/0x10 [ 118.783016] ? lock_release+0x1c7/0x290 [ 118.783639] ? lock_release+0x1c7/0x290 [ 118.784267] ? fd_install+0x1f0/0x660 [ 118.784865] do_futex+0x26d/0x370 [ 118.785414] ? __pfx_do_futex+0x10/0x10 [ 118.786037] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 118.786857] ? count_memcg_events+0x32b/0x420 [ 118.787560] __x64_sys_futex+0x1c9/0x4d0 [ 118.788200] ? __pfx___x64_sys_futex+0x10/0x10 [ 118.788914] ? xfd_validate_state+0x55/0x180 [ 118.789613] do_syscall_64+0xbf/0x360 [ 118.790206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.790996] RIP: 0033:0x7f663fdddb19 [ 118.791568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 118.794336] RSP: 002b:00007f663d353218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.795490] RAX: ffffffffffffffda RBX: 00007f663fef0f68 RCX: 00007f663fdddb19 [ 118.796582] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f663fef0f6c [ 118.797668] RBP: 00007f663fef0f60 R08: 000000000000000e R09: 0000000000000000 [ 118.798766] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f663fef0f6c [ 118.799861] R13: 00007ffe5e9e7a7f R14: 00007f663d353300 R15: 0000000000022000 [ 118.800969] [ 118.801334] Modules linked in: [ 118.801884] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#3] SMP KASAN NOPTI [ 118.803563] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 118.804887] CPU: 1 UID: 0 PID: 3990 Comm: syz-executor.4 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 118.806695] Tainted: [D]=DIE, [W]=WARN [ 118.807282] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 118.808547] RIP: 0010:perf_tp_event+0x175/0xe70 [ 118.809267] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 118.812020] RSP: 0018:ffff88806cf08a40 EFLAGS: 00010012 [ 118.812842] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 118.813932] RDX: ffff888015d35280 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 118.815033] RBP: ffff88806cf08cb0 R08: ffff88806cf31490 R09: ffffe8ffffd15b78 [ 118.816120] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000 [ 118.817219] R13: 0000000000000024 R14: ffff88806cf31490 R15: dffffc0000000000 [ 118.818321] FS: 00007f663d353700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 118.819546] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.820441] CR2: 00007f663fef1018 CR3: 000000001e56e000 CR4: 0000000000350ef0 [ 118.821526] Call Trace: [ 118.821927] [ 118.822268] ? __kernel_text_address+0xd/0x40 [ 118.822972] ? __pfx_perf_tp_event+0x10/0x10 [ 118.823663] ? css_rstat_updated+0x1b8/0x4d0 [ 118.824360] ? __pfx_css_rstat_updated+0x10/0x10 [ 118.825095] ? stack_depot_save_flags+0x2c/0xa20 [ 118.825827] ? trace_pelt_se_tp+0xdf/0x130 [ 118.826476] ? __update_load_avg_se+0x428/0xa40 [ 118.827206] ? __cgroup_account_cputime+0x30/0xc0 [ 118.827958] ? trace_sched_set_need_resched_tp+0xd4/0x110 [ 118.828813] ? __resched_curr+0x2a2/0x330 [ 118.829453] ? __pfx___resched_curr+0x10/0x10 [ 118.830161] ? perf_trace_run_bpf_submit+0xef/0x180 [ 118.830920] perf_trace_run_bpf_submit+0xef/0x180 [ 118.831663] perf_trace_lock_acquire+0x3c2/0x700 [ 118.832398] ? _raw_spin_unlock_irqrestore+0x22/0x50 [ 118.833176] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 118.833973] ? __pfx_try_to_wake_up+0x10/0x10 [ 118.834665] ? lock_release+0x1c7/0x290 [ 118.835282] lock_acquire+0xc5/0x2f0 [ 118.835862] ? sched_ttwu_pending+0xa1/0x4a0 [ 118.836557] ? lock_release+0x1c7/0x290 [ 118.837171] _raw_spin_lock_nested+0x29/0x40 [ 118.837847] ? sched_ttwu_pending+0xa1/0x4a0 [ 118.838530] sched_ttwu_pending+0xa1/0x4a0 [ 118.839190] ? __pfx_lapic_next_deadline+0x10/0x10 [ 118.839947] ? clockevents_program_event+0x135/0x360 [ 118.840738] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 118.841485] ? hrtimer_interrupt+0x652/0x830 [ 118.842168] __flush_smp_call_function_queue+0x434/0x740 [ 118.843007] __sysvec_call_function_single+0x6d/0x370 [ 118.843808] sysvec_call_function_single+0xa1/0xc0 [ 118.844571] [ 118.844930] [ 118.845279] asm_sysvec_call_function_single+0x1a/0x20 [ 118.846084] RIP: 0010:oops_exit+0x0/0x50 [ 118.846716] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27 [ 118.849474] RSP: 0018:ffff888045fdf690 EFLAGS: 00000202 [ 118.850279] RAX: 000000000002bbcb RBX: 0000000000000212 RCX: ffffc90004610000 [ 118.851365] RDX: 0000000000040000 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 118.852461] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90 [ 118.853539] R10: 0000000000000000 R11: 000000000000002c R12: ffff888045fdf758 [ 118.854629] R13: 0000000000000000 R14: dffffc0020000032 R15: 0000000000000000 [ 118.855721] ? oops_end+0x4a/0xe0 [ 118.856288] oops_end+0x65/0xe0 [ 118.856816] exc_general_protection+0x1a2/0x330 [ 118.857542] asm_exc_general_protection+0x26/0x30 [ 118.858277] RIP: 0010:perf_tp_event+0x175/0xe70 [ 118.858995] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 118.861753] RSP: 0018:ffff888045fdf800 EFLAGS: 00010212 [ 118.862571] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90004610000 [ 118.863658] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 118.864753] RBP: ffff888045fdfa70 R08: ffff88806cf31340 R09: ffffe8ffffd15b78 [ 118.865845] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000 [ 118.866935] R13: 0000000000000024 R14: ffff88806cf31340 R15: dffffc0000000000 [ 118.868042] ? perf_tp_event+0x167/0xe70 [ 118.868693] ? __pfx_perf_tp_event+0x10/0x10 [ 118.869388] ? kvm_sched_clock_read+0x16/0x30 [ 118.870091] ? local_clock_noinstr+0xf/0xc0 [ 118.870772] ? ctx_sched_in+0x134/0x9b0 [ 118.871398] ? __kernel_text_address+0xd/0x40 [ 118.872100] ? __pfx_ctx_sched_in+0x10/0x10 [ 118.872776] ? arch_stack_walk+0x9c/0xf0 [ 118.873413] ? lock_release+0x1c7/0x290 [ 118.874035] ? lock_release+0x1c7/0x290 [ 118.874649] ? do_raw_spin_unlock+0x53/0x220 [ 118.875345] ? perf_trace_run_bpf_submit+0xef/0x180 [ 118.876123] perf_trace_run_bpf_submit+0xef/0x180 [ 118.876885] perf_trace_lock_acquire+0x3c2/0x700 [ 118.877621] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 118.878441] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 118.879257] ? lock_acquire+0xc5/0x2f0 [ 118.879871] ? lock_acquire+0x18c/0x2f0 [ 118.880511] lock_acquire+0xc5/0x2f0 [ 118.881094] ? futex_wake+0x228/0x540 [ 118.881693] ? futex_hash+0x15c/0x390 [ 118.882289] _raw_spin_lock+0x2b/0x40 [ 118.882889] ? futex_wake+0x228/0x540 [ 118.883491] futex_wake+0x228/0x540 [ 118.884069] ? __pfx_futex_wake+0x10/0x10 [ 118.884728] ? lock_release+0x1c7/0x290 [ 118.885358] ? lock_release+0x1c7/0x290 [ 118.885980] ? fd_install+0x1f0/0x660 [ 118.886580] do_futex+0x26d/0x370 [ 118.887130] ? __pfx_do_futex+0x10/0x10 [ 118.887754] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 118.888586] ? count_memcg_events+0x32b/0x420 [ 118.889298] __x64_sys_futex+0x1c9/0x4d0 [ 118.889932] ? __pfx___x64_sys_futex+0x10/0x10 [ 118.890651] ? xfd_validate_state+0x55/0x180 [ 118.891360] do_syscall_64+0xbf/0x360 [ 118.891961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.892770] RIP: 0033:0x7f663fdddb19 [ 118.893346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 118.896142] RSP: 002b:00007f663d353218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.897315] RAX: ffffffffffffffda RBX: 00007f663fef0f68 RCX: 00007f663fdddb19 [ 118.898408] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f663fef0f6c [ 118.899504] RBP: 00007f663fef0f60 R08: 000000000000000e R09: 0000000000000000 [ 118.900602] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f663fef0f6c [ 118.901689] R13: 00007ffe5e9e7a7f R14: 00007f663d353300 R15: 0000000000022000 [ 118.902798] [ 118.903167] Modules linked in: [ 118.903673] ---[ end trace 0000000000000000 ]--- [ 118.904405] RIP: 0010:perf_tp_event+0x175/0xe70 [ 118.905131] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 118.907905] RSP: 0018:ffff888047787800 EFLAGS: 00010212 [ 118.908724] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc9000842f000 [ 118.909812] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 118.910902] RBP: ffff888047787a70 R08: ffff88806cf31340 R09: ffffe8ffffd15e00 [ 118.911993] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000 [ 118.913098] R13: 0000000000000024 R14: ffff88806cf31340 R15: dffffc0000000000 [ 118.914198] FS: 00007f663d353700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 118.915435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.916342] CR2: 00007f663fef1018 CR3: 000000001e56e000 CR4: 0000000000350ef0 [ 118.917440] Kernel panic - not syncing: Fatal exception in interrupt [ 118.918547] Kernel Offset: disabled [ 118.919104] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 11:00:56 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88806cf3c300 RCX=ffffffff816880fc RDX=ffff888017ad1b80 RSI=ffffffff816880d6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88800cb17980 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=1ffff1100d9c6bb1 R12=ffffed100d9e7861 R13=ffff88806cf3c308 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8173e788 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556a05b400 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2ce23000 CR3=0000000045dc1000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffff812c8387ffffffff812c82a8 XMM01=ffffffff812c8387ffffffff812c82a8 XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007f77004d97c800007f77004d97c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff8880477871f0 R8 =0000000000000000 R9 =ffffed10014f2046 R10=0000000000000037 R11=000000000000002c R12=0000000000000037 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9cfb8c8700 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe5000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d128000 CR3=000000001e56e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=ffffffffffffffffffffffffffffffff XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000