Warning: Permanently added '[localhost]:29742' (ECDSA) to the list of known hosts. 2025/08/29 09:17:59 fuzzer started 2025/08/29 09:18:00 dialing manager at localhost:43077 syzkaller login: [ 48.981651] cgroup: Unknown subsys name 'net' [ 49.130672] cgroup: Unknown subsys name 'cpuset' [ 49.159700] cgroup: Unknown subsys name 'rlimit' 2025/08/29 09:18:09 syscalls: 2214 2025/08/29 09:18:09 code coverage: enabled 2025/08/29 09:18:09 comparison tracing: enabled 2025/08/29 09:18:09 extra coverage: enabled 2025/08/29 09:18:09 setuid sandbox: enabled 2025/08/29 09:18:09 namespace sandbox: enabled 2025/08/29 09:18:09 Android sandbox: enabled 2025/08/29 09:18:09 fault injection: enabled 2025/08/29 09:18:09 leak checking: enabled 2025/08/29 09:18:09 net packet injection: enabled 2025/08/29 09:18:09 net device setup: enabled 2025/08/29 09:18:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 09:18:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 09:18:09 USB emulation: enabled 2025/08/29 09:18:09 hci packet injection: enabled 2025/08/29 09:18:09 wifi device emulation: enabled 2025/08/29 09:18:09 802.15.4 emulation: enabled 2025/08/29 09:18:09 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 09:18:09 fetching corpus: 50, signal 26715/30022 (executing program) 2025/08/29 09:18:09 fetching corpus: 100, signal 41260/45576 (executing program) 2025/08/29 09:18:09 fetching corpus: 150, signal 47670/53117 (executing program) 2025/08/29 09:18:09 fetching corpus: 200, signal 54381/60685 (executing program) 2025/08/29 09:18:10 fetching corpus: 250, signal 59611/66757 (executing program) 2025/08/29 09:18:10 fetching corpus: 300, signal 62442/70499 (executing program) 2025/08/29 09:18:10 fetching corpus: 350, signal 64957/73874 (executing program) 2025/08/29 09:18:10 fetching corpus: 400, signal 67475/77230 (executing program) 2025/08/29 09:18:10 fetching corpus: 450, signal 71027/81446 (executing program) 2025/08/29 09:18:10 fetching corpus: 500, signal 73538/84659 (executing program) 2025/08/29 09:18:10 fetching corpus: 550, signal 76102/87868 (executing program) 2025/08/29 09:18:10 fetching corpus: 600, signal 78621/90879 (executing program) 2025/08/29 09:18:11 fetching corpus: 650, signal 81549/94198 (executing program) 2025/08/29 09:18:11 fetching corpus: 700, signal 83650/96770 (executing program) 2025/08/29 09:18:11 fetching corpus: 750, signal 85877/99324 (executing program) 2025/08/29 09:18:11 fetching corpus: 800, signal 87854/101753 (executing program) 2025/08/29 09:18:11 fetching corpus: 850, signal 89673/103908 (executing program) 2025/08/29 09:18:11 fetching corpus: 900, signal 93546/107585 (executing program) 2025/08/29 09:18:11 fetching corpus: 950, signal 96413/110461 (executing program) 2025/08/29 09:18:11 fetching corpus: 1000, signal 98189/112470 (executing program) 2025/08/29 09:18:11 fetching corpus: 1050, signal 99219/113874 (executing program) 2025/08/29 09:18:12 fetching corpus: 1100, signal 101204/115887 (executing program) 2025/08/29 09:18:12 fetching corpus: 1150, signal 102646/117513 (executing program) 2025/08/29 09:18:12 fetching corpus: 1200, signal 104022/119051 (executing program) 2025/08/29 09:18:12 fetching corpus: 1250, signal 105388/120527 (executing program) 2025/08/29 09:18:12 fetching corpus: 1300, signal 106934/122091 (executing program) 2025/08/29 09:18:12 fetching corpus: 1350, signal 108113/123398 (executing program) 2025/08/29 09:18:12 fetching corpus: 1400, signal 109638/124875 (executing program) 2025/08/29 09:18:13 fetching corpus: 1450, signal 111125/126262 (executing program) 2025/08/29 09:18:13 fetching corpus: 1500, signal 111963/127247 (executing program) 2025/08/29 09:18:13 fetching corpus: 1550, signal 113759/128708 (executing program) 2025/08/29 09:18:13 fetching corpus: 1600, signal 114936/129877 (executing program) 2025/08/29 09:18:13 fetching corpus: 1650, signal 116143/131017 (executing program) 2025/08/29 09:18:13 fetching corpus: 1700, signal 117061/131961 (executing program) 2025/08/29 09:18:13 fetching corpus: 1750, signal 117862/132755 (executing program) 2025/08/29 09:18:13 fetching corpus: 1800, signal 118791/133630 (executing program) 2025/08/29 09:18:13 fetching corpus: 1850, signal 120343/134810 (executing program) 2025/08/29 09:18:14 fetching corpus: 1900, signal 121175/135548 (executing program) 2025/08/29 09:18:14 fetching corpus: 1950, signal 121810/136217 (executing program) 2025/08/29 09:18:14 fetching corpus: 2000, signal 122787/136999 (executing program) 2025/08/29 09:18:14 fetching corpus: 2050, signal 123700/137742 (executing program) 2025/08/29 09:18:14 fetching corpus: 2100, signal 124187/138301 (executing program) 2025/08/29 09:18:14 fetching corpus: 2150, signal 125327/139129 (executing program) 2025/08/29 09:18:14 fetching corpus: 2200, signal 126443/139861 (executing program) 2025/08/29 09:18:14 fetching corpus: 2250, signal 127580/140544 (executing program) 2025/08/29 09:18:14 fetching corpus: 2300, signal 128437/141142 (executing program) 2025/08/29 09:18:15 fetching corpus: 2350, signal 129315/141834 (executing program) 2025/08/29 09:18:15 fetching corpus: 2400, signal 130047/142318 (executing program) 2025/08/29 09:18:15 fetching corpus: 2450, signal 131114/142929 (executing program) 2025/08/29 09:18:15 fetching corpus: 2500, signal 131895/143425 (executing program) 2025/08/29 09:18:15 fetching corpus: 2550, signal 132545/143860 (executing program) 2025/08/29 09:18:15 fetching corpus: 2600, signal 133242/144323 (executing program) 2025/08/29 09:18:15 fetching corpus: 2650, signal 133773/144686 (executing program) 2025/08/29 09:18:15 fetching corpus: 2700, signal 134822/145127 (executing program) 2025/08/29 09:18:15 fetching corpus: 2750, signal 135318/145421 (executing program) 2025/08/29 09:18:16 fetching corpus: 2800, signal 136423/145844 (executing program) 2025/08/29 09:18:16 fetching corpus: 2850, signal 137119/146145 (executing program) 2025/08/29 09:18:16 fetching corpus: 2900, signal 137840/146461 (executing program) 2025/08/29 09:18:16 fetching corpus: 2950, signal 138710/146736 (executing program) 2025/08/29 09:18:16 fetching corpus: 3000, signal 139484/146975 (executing program) 2025/08/29 09:18:16 fetching corpus: 3050, signal 140053/147220 (executing program) 2025/08/29 09:18:16 fetching corpus: 3100, signal 140558/147443 (executing program) 2025/08/29 09:18:16 fetching corpus: 3150, signal 141015/147635 (executing program) 2025/08/29 09:18:17 fetching corpus: 3200, signal 141783/147792 (executing program) 2025/08/29 09:18:17 fetching corpus: 3250, signal 142293/147956 (executing program) 2025/08/29 09:18:17 fetching corpus: 3300, signal 143034/148083 (executing program) 2025/08/29 09:18:17 fetching corpus: 3350, signal 143891/148238 (executing program) 2025/08/29 09:18:17 fetching corpus: 3400, signal 144537/148328 (executing program) 2025/08/29 09:18:17 fetching corpus: 3450, signal 145657/148438 (executing program) 2025/08/29 09:18:17 fetching corpus: 3500, signal 146176/148497 (executing program) 2025/08/29 09:18:17 fetching corpus: 3503, signal 146187/148536 (executing program) 2025/08/29 09:18:17 fetching corpus: 3503, signal 146187/148536 (executing program) 2025/08/29 09:18:20 starting 8 fuzzer processes 09:18:20 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5390, 0x0) 09:18:20 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') read$char_usb(r0, &(0x7f0000000040)=""/226, 0xe2) 09:18:20 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001280), 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, 0x0) 09:18:20 executing program 2: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setuid(r0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 09:18:20 executing program 7: r0 = getpid() sched_setparam(r0, &(0x7f0000000500)) 09:18:20 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) poll(&(0x7f0000000400)=[{r0}], 0x1, 0x8a) signalfd4(r0, &(0x7f0000000080), 0x8, 0x0) [ 68.959468] audit: type=1400 audit(1756459100.179:7): avc: denied { execmem } for pid=271 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:18:20 executing program 5: futex(0x0, 0x1, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) 09:18:20 executing program 6: perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 70.184249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.188729] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.191576] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.196984] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.199800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.310047] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.312538] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.314622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.318356] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.321518] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.327732] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.332357] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.334133] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.346793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.360313] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.378111] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.380717] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.386804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.399121] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.404121] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.444705] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.454780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.463534] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.465416] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 70.468057] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 70.469678] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 70.474655] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 70.475694] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 70.476003] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.477718] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 70.483145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 70.487001] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 70.495523] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 70.497629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.548698] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 70.549915] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 70.556506] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 70.574776] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 70.591592] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 70.595578] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 72.275856] Bluetooth: hci0: command tx timeout [ 72.404094] Bluetooth: hci2: command tx timeout [ 72.404671] Bluetooth: hci1: command tx timeout [ 72.467317] Bluetooth: hci3: command tx timeout [ 72.595455] Bluetooth: hci4: command tx timeout [ 72.659476] Bluetooth: hci6: command tx timeout [ 72.660506] Bluetooth: hci5: command tx timeout [ 72.723325] Bluetooth: hci7: command tx timeout [ 74.323297] Bluetooth: hci0: command tx timeout [ 74.451352] Bluetooth: hci1: command tx timeout [ 74.452165] Bluetooth: hci2: command tx timeout [ 74.516272] Bluetooth: hci3: command tx timeout [ 74.643853] Bluetooth: hci4: command tx timeout [ 74.707654] Bluetooth: hci6: command tx timeout [ 74.708705] Bluetooth: hci5: command tx timeout [ 74.771302] Bluetooth: hci7: command tx timeout [ 76.371308] Bluetooth: hci0: command tx timeout [ 76.499430] Bluetooth: hci1: command tx timeout [ 76.500326] Bluetooth: hci2: command tx timeout [ 76.563317] Bluetooth: hci3: command tx timeout [ 76.691906] Bluetooth: hci4: command tx timeout [ 76.755347] Bluetooth: hci5: command tx timeout [ 76.756320] Bluetooth: hci6: command tx timeout [ 76.820459] Bluetooth: hci7: command tx timeout [ 78.419300] Bluetooth: hci0: command tx timeout [ 78.548248] Bluetooth: hci2: command tx timeout [ 78.548880] Bluetooth: hci1: command tx timeout [ 78.611272] Bluetooth: hci3: command tx timeout [ 78.740235] Bluetooth: hci4: command tx timeout [ 78.803280] Bluetooth: hci5: command tx timeout [ 78.803799] Bluetooth: hci6: command tx timeout [ 78.867355] Bluetooth: hci7: command tx timeout [ 115.972818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.974041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.054796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.055654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.149159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.150553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.338500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.339895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:19:07 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001280), 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, 0x0) [ 116.547303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.548568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:19:07 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001280), 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, 0x0) 09:19:07 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001280), 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, 0x0) 09:19:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)={0x18, 0x5a, 0x101, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) 09:19:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)={0x18, 0x5a, 0x101, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) [ 116.823045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.824413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.874867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.876262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:19:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)={0x18, 0x5a, 0x101, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) [ 116.944562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.945727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:19:08 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) poll(&(0x7f0000000400)=[{r0}], 0x1, 0x8a) signalfd4(r0, &(0x7f0000000080), 0x8, 0x0) 09:19:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)={0x18, 0x5a, 0x101, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) [ 117.056390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.057580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.078338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.078938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.163907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.165093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.254712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.255952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.326628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.327495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.394683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.395555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.488816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.489940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.586600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.587774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.703929] audit: type=1400 audit(2000000000.028:8): avc: denied { open } for pid=3904 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 117.710366] audit: type=1400 audit(2000000000.029:9): avc: denied { kernel } for pid=3904 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 118.747786] kmemleak: Found object by alias at 0x607f1a639d0c [ 118.747803] CPU: 0 UID: 0 PID: 3963 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 118.747821] Tainted: [W]=WARN [ 118.747824] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 118.747831] Call Trace: [ 118.747834] [ 118.747838] dump_stack_lvl+0xca/0x120 [ 118.747859] __lookup_object+0x94/0xb0 [ 118.747875] delete_object_full+0x27/0x70 [ 118.747890] free_percpu+0x30/0x1160 [ 118.747905] ? arch_uprobe_clear_state+0x16/0x140 [ 118.747924] futex_hash_free+0x38/0xc0 [ 118.747938] mmput+0x2d3/0x390 [ 118.747955] do_exit+0x79d/0x2970 [ 118.747968] ? signal_wake_up_state+0x85/0x120 [ 118.747983] ? zap_other_threads+0x2b9/0x3a0 [ 118.747998] ? __pfx_do_exit+0x10/0x10 [ 118.748010] ? do_group_exit+0x1c3/0x2a0 [ 118.748023] ? lock_release+0xc8/0x290 [ 118.748039] do_group_exit+0xd3/0x2a0 [ 118.748053] __x64_sys_exit_group+0x3e/0x50 [ 118.748067] x64_sys_call+0x18c5/0x18d0 [ 118.748081] do_syscall_64+0xbf/0x360 [ 118.748092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.748103] RIP: 0033:0x7feee3d1fb19 [ 118.748111] Code: Unable to access opcode bytes at 0x7feee3d1faef. [ 118.748116] RSP: 002b:00007ffc4bde6828 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 118.748127] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007feee3d1fb19 [ 118.748135] RDX: 00007feee3cd272b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 118.748142] RBP: 0000000000000000 R08: 0000001b2ce208ac R09: 0000000000000000 [ 118.748148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.748154] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc4bde6910 [ 118.748175] [ 118.748179] kmemleak: Object (percpu) 0x607f1a639d08 (size 8): [ 118.748186] kmemleak: comm "(ogrotate)", pid 3939, jiffies 4294785359 [ 118.748193] kmemleak: min_count = 1 [ 118.748196] kmemleak: count = 0 [ 118.748200] kmemleak: flags = 0x21 [ 118.748203] kmemleak: checksum = 0 [ 118.748207] kmemleak: backtrace: [ 118.748210] pcpu_alloc_noprof+0x87a/0x1170 [ 118.748224] alloc_vfsmnt+0x135/0x6e0 [ 118.748237] clone_mnt+0x6c/0xb70 [ 118.748250] copy_tree+0x34b/0xaf0 [ 118.748260] copy_mnt_ns+0x1ab/0xab0 [ 118.748270] create_new_namespaces+0xd6/0xab0 [ 118.748286] unshare_nsproxy_namespaces+0xc0/0x200 [ 118.748301] ksys_unshare+0x468/0xa10 [ 118.748311] __x64_sys_unshare+0x31/0x40 [ 118.748322] do_syscall_64+0xbf/0x360 [ 118.748331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.759391] kmemleak: Found object by alias at 0x607f1a62cb84 [ 118.759414] CPU: 1 UID: 0 PID: 3971 Comm: isc-worker0000 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 118.759448] Tainted: [W]=WARN [ 118.759455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 118.759467] Call Trace: [ 118.759474] [ 118.759483] dump_stack_lvl+0xca/0x120 [ 118.759520] __lookup_object+0x94/0xb0 [ 118.759548] delete_object_full+0x27/0x70 [ 118.759579] free_percpu+0x30/0x1160 [ 118.759607] ? arch_uprobe_clear_state+0x16/0x140 [ 118.759643] futex_hash_free+0x38/0xc0 [ 118.759668] mmput+0x2d3/0x390 [ 118.759702] begin_new_exec+0x14bd/0x36c0 [ 118.759732] ? kernel_read+0xcb/0x230 [ 118.759765] load_elf_binary+0x855/0x4f70 [ 118.759812] ? load_misc_binary+0x979/0xcd0 [ 118.759845] ? __pfx_load_elf_binary+0x10/0x10 [ 118.759873] ? find_held_lock+0x2b/0x80 [ 118.759906] ? bprm_execve+0x8b7/0x15a0 [ 118.759925] ? lock_release+0xc8/0x290 [ 118.759956] bprm_execve+0x8d9/0x15a0 [ 118.759983] ? __pfx_bprm_execve+0x10/0x10 [ 118.760013] do_execveat_common+0x5b2/0x770 [ 118.760036] ? __pfx_do_execveat_common+0x10/0x10 [ 118.760063] ? getname_flags.part.0+0x1c6/0x540 [ 118.760101] __x64_sys_execve+0x95/0xc0 [ 118.760125] do_syscall_64+0xbf/0x360 [ 118.760147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.760169] RIP: 0033:0x7fcf094316c7 [ 118.760200] Code: Unable to access opcode bytes at 0x7fcf0943169d. [ 118.760210] RSP: 002b:00007fcf09001c18 EFLAGS: 00000202 ORIG_RAX: 000000000000003b [ 118.760231] RAX: ffffffffffffffda RBX: 00005653394cdca0 RCX: 00007fcf094316c7 [ 118.760245] RDX: 00007fcf00003980 RSI: 00007fcf09001c30 RDI: 0000565303e730f0 [ 118.760259] RBP: 0000565303e730f0 R08: 00007fcf000020e0 R09: 00007fcf0935b2d0 [ 118.760273] R10: 00007fcf09003700 R11: 0000000000000202 R12: 00007fcf00003980 [ 118.760287] R13: 0000000000000000 R14: 0000565303e55ed8 R15: 0000565303e7f630 [ 118.760319] [ 118.760326] kmemleak: Object (percpu) 0x607f1a62cb80 (size 8): [ 118.760338] kmemleak: comm "(ogrotate)", pid 3939, jiffies 4294785359 [ 118.760351] kmemleak: min_count = 1 [ 118.760359] kmemleak: count = 0 [ 118.760366] kmemleak: flags = 0x21 [ 118.760373] kmemleak: checksum = 0 [ 118.760380] kmemleak: backtrace: [ 118.760388] pcpu_alloc_noprof+0x87a/0x1170 [ 118.760423] alloc_vfsmnt+0x135/0x6e0 [ 118.760447] clone_mnt+0x6c/0xb70 [ 118.760474] copy_tree+0x34b/0xaf0 [ 118.760492] copy_mnt_ns+0x1ab/0xab0 [ 118.760512] create_new_namespaces+0xd6/0xab0 [ 118.760542] unshare_nsproxy_namespaces+0xc0/0x200 [ 118.760589] ksys_unshare+0x468/0xa10 [ 118.760610] __x64_sys_unshare+0x31/0x40 [ 118.760632] do_syscall_64+0xbf/0x360 [ 118.760648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.936585] kmemleak: Cannot insert 0x607f1a62cb84 into the object search tree (overlaps existing) [ 118.936603] CPU: 0 UID: 0 PID: 196 Comm: isc-worker0000 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 118.936621] Tainted: [W]=WARN [ 118.936625] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 118.936631] Call Trace: [ 118.936635] [ 118.936640] dump_stack_lvl+0xca/0x120 [ 118.936665] __link_object+0x190/0x210 [ 118.936683] __create_object+0x48/0x80 [ 118.936699] pcpu_alloc_noprof+0x87a/0x1170 [ 118.936723] __percpu_counter_init_many+0x44/0x360 [ 118.936741] fprop_local_init_percpu+0x2b/0xb0 [ 118.936759] wb_init+0x583/0x740 [ 118.936769] wb_get_create+0x225/0x1120 [ 118.936783] ? balance_dirty_pages_ratelimited_flags+0x51f/0x1190 [ 118.936798] ? lock_release+0xc8/0x290 [ 118.936814] balance_dirty_pages_ratelimited_flags+0x539/0x1190 [ 118.936831] generic_perform_write+0x305/0x810 [ 118.936854] ? __pfx_generic_perform_write+0x10/0x10 [ 118.936868] ? __mark_inode_dirty+0x5bc/0xd00 [ 118.936885] ? generic_update_time+0xcb/0xf0 [ 118.936899] ? mnt_put_write_access_file+0x45/0xe0 [ 118.936920] ext4_buffered_write_iter+0x11a/0x430 [ 118.936935] ext4_file_write_iter+0x9df/0x1990 [ 118.936947] ? acpi_install_sci_handler+0x34c/0x3c0 [ 118.936963] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 118.936974] ? ksys_write+0x121/0x240 [ 118.936988] ? lock_is_held_type+0x9e/0x120 [ 118.937008] vfs_write+0xbe9/0x1150 [ 118.937020] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 118.937033] ? __pfx_vfs_write+0x10/0x10 [ 118.937056] ksys_write+0x121/0x240 [ 118.937067] ? __pfx_ksys_write+0x10/0x10 [ 118.937080] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 118.937095] do_syscall_64+0xbf/0x360 [ 118.937107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.937119] RIP: 0033:0x7fcf09454f6f [ 118.937128] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 5e f9 ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 5c 5e f9 ff 48 [ 118.937139] RSP: 002b:00007fcf09001b20 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 118.937150] RAX: ffffffffffffffda RBX: 0000000000000124 RCX: 00007fcf09454f6f [ 118.937158] RDX: 0000000000000124 RSI: 00005653394ce530 RDI: 0000000000000007 [ 118.937165] RBP: 00005653394ce530 R08: 0000000000000000 R09: 0000000000000002 [ 118.937171] R10: 0000000000000001 R11: 0000000000000293 R12: 0000000000000124 [ 118.937178] R13: 00005653394b1430 R14: 0000000000000124 R15: 00007fcf095258a0 [ 118.937198] [ 118.937788] kmemleak: Kernel memory leak detector disabled [ 118.937792] kmemleak: Object (percpu) 0x607f1a62cb80 (size 8): [ 118.937798] kmemleak: comm "(ogrotate)", pid 3939, jiffies 4294785359 [ 118.937805] kmemleak: min_count = 1 [ 118.937809] kmemleak: count = 0 [ 118.937813] kmemleak: flags = 0x21 [ 118.937816] kmemleak: checksum = 0 [ 118.937820] kmemleak: backtrace: [ 118.937823] pcpu_alloc_noprof+0x87a/0x1170 [ 118.937838] alloc_vfsmnt+0x135/0x6e0 [ 118.937850] clone_mnt+0x6c/0xb70 [ 118.937864] copy_tree+0x34b/0xaf0 [ 118.937873] copy_mnt_ns+0x1ab/0xab0 [ 118.937884] create_new_namespaces+0xd6/0xab0 [ 118.937900] unshare_nsproxy_namespaces+0xc0/0x200 [ 118.937916] ksys_unshare+0x468/0xa10 [ 118.937928] __x64_sys_unshare+0x31/0x40 [ 118.937939] do_syscall_64+0xbf/0x360 [ 118.937947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.406098] kmemleak: Automatic memory scanning thread ended 03:33:20 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5390, 0x0) 03:33:20 executing program 2: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setuid(r0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 03:33:20 executing program 5: futex(0x0, 0x1, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) 03:33:20 executing program 6: perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:33:20 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) poll(&(0x7f0000000400)=[{r0}], 0x1, 0x8a) signalfd4(r0, &(0x7f0000000080), 0x8, 0x0) 03:33:20 executing program 7: r0 = getpid() sched_setparam(r0, &(0x7f0000000500)) 03:33:20 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) poll(&(0x7f0000000400)=[{r0}], 0x1, 0x8a) signalfd4(r0, &(0x7f0000000080), 0x8, 0x0) 03:33:20 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') read$char_usb(r0, &(0x7f0000000040)=""/226, 0xe2) 03:33:20 executing program 2: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setuid(r0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 03:33:20 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') read$char_usb(r0, &(0x7f0000000040)=""/226, 0xe2) 03:33:20 executing program 6: perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:33:20 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5390, 0x0) 03:33:20 executing program 7: r0 = getpid() sched_setparam(r0, &(0x7f0000000500)) 03:33:20 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) poll(&(0x7f0000000400)=[{r0}], 0x1, 0x8a) signalfd4(r0, &(0x7f0000000080), 0x8, 0x0) 03:33:20 executing program 5: futex(0x0, 0x1, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) 03:33:20 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) poll(&(0x7f0000000400)=[{r0}], 0x1, 0x8a) signalfd4(r0, &(0x7f0000000080), 0x8, 0x0) 03:33:20 executing program 2: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setuid(r0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 03:33:20 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') read$char_usb(r0, &(0x7f0000000040)=""/226, 0xe2) 03:33:20 executing program 6: perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:33:20 executing program 7: r0 = getpid() sched_setparam(r0, &(0x7f0000000500)) 03:33:20 executing program 5: futex(0x0, 0x1, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) 03:33:20 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5390, 0x0) 03:33:20 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) poll(&(0x7f0000000400)=[{r0}], 0x1, 0x8a) signalfd4(r0, &(0x7f0000000080), 0x8, 0x0) 03:33:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x560f, &(0x7f0000000880)) 03:33:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x3}) 03:33:21 executing program 1: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000001c0), 0x24, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) chroot(&(0x7f0000000080)='./file0\x00') 03:33:21 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2f2802", 0x18, 0x0, 0x0, @local, @local, {[@hopopts={0x0, 0x1, '\x00', [@enc_lim={0x31}, @calipso={0x7, 0x8}]}]}}}}}, 0x0) 03:33:21 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000000c0)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) 03:33:21 executing program 7: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01010101", 0x4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0) 03:33:21 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x13, 0x0, 0x0) 03:33:21 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$DVD_AUTH(r0, 0x5317, &(0x7f0000000140)=@lsc={0x3, 0x0, "8c2e9c993edfe1625d5a"}) [ 119.493121] process 'syz-executor.7' launched './file1' with NULL argv: empty string added 03:33:21 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2f2802", 0x18, 0x0, 0x0, @local, @local, {[@hopopts={0x0, 0x1, '\x00', [@enc_lim={0x31}, @calipso={0x7, 0x8}]}]}}}}}, 0x0) 03:33:21 executing program 1: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000001c0), 0x24, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) chroot(&(0x7f0000000080)='./file0\x00') 03:33:21 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x13, 0x0, 0x0) 03:33:21 executing program 3: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000001c0), 0x24, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) chroot(&(0x7f0000000080)='./file0\x00') 03:33:21 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000000c0)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) 03:33:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x560f, &(0x7f0000000880)) 03:33:21 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2f2802", 0x18, 0x0, 0x0, @local, @local, {[@hopopts={0x0, 0x1, '\x00', [@enc_lim={0x31}, @calipso={0x7, 0x8}]}]}}}}}, 0x0) 03:33:21 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$DVD_AUTH(r0, 0x5317, &(0x7f0000000140)=@lsc={0x3, 0x0, "8c2e9c993edfe1625d5a"}) 03:33:21 executing program 7: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01010101", 0x4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0) 03:33:22 executing program 1: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000001c0), 0x24, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) chroot(&(0x7f0000000080)='./file0\x00') 03:33:22 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000000c0)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) 03:33:22 executing program 3: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000001c0), 0x24, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) chroot(&(0x7f0000000080)='./file0\x00') 03:33:22 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2f2802", 0x18, 0x0, 0x0, @local, @local, {[@hopopts={0x0, 0x1, '\x00', [@enc_lim={0x31}, @calipso={0x7, 0x8}]}]}}}}}, 0x0) 03:33:22 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x13, 0x0, 0x0) 03:33:22 executing program 7: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01010101", 0x4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0) 03:33:22 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$DVD_AUTH(r0, 0x5317, &(0x7f0000000140)=@lsc={0x3, 0x0, "8c2e9c993edfe1625d5a"}) 03:33:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x560f, &(0x7f0000000880)) 03:33:22 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x13, 0x0, 0x0) 03:33:22 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000000c0)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) 03:33:22 executing program 1: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000001c0), 0x24, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) chroot(&(0x7f0000000080)='./file0\x00') 03:33:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x560f, &(0x7f0000000880)) 03:33:22 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$DVD_AUTH(r0, 0x5317, &(0x7f0000000140)=@lsc={0x3, 0x0, "8c2e9c993edfe1625d5a"}) 03:33:22 executing program 7: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01010101", 0x4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0) 03:33:22 executing program 3: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000001c0), 0x24, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) chroot(&(0x7f0000000080)='./file0\x00') 03:33:22 executing program 1: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01010101", 0x4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0) 03:33:22 executing program 2: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01010101", 0x4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0) 03:33:22 executing program 1: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01010101", 0x4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0) 03:33:22 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000480)='autofs\x00', 0x0, &(0x7f0000000540)='TIPCv2\x00') 03:33:22 executing program 4: syz_mount_image$msdos(&(0x7f0000001400), &(0x7f0000001440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)={[{@fat=@uid}]}) 03:33:22 executing program 2: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01010101", 0x4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0) [ 120.124359] No source specified [ 120.129720] autofs: Unknown parameter 'TIPCv2' [ 120.130610] No source specified 03:33:22 executing program 4: syz_mount_image$msdos(&(0x7f0000001400), &(0x7f0000001440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)={[{@fat=@uid}]}) 03:33:22 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000480)='autofs\x00', 0x0, &(0x7f0000000540)='TIPCv2\x00') [ 120.183996] No source specified 03:33:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x100) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x3, 0x0, 0x0) 03:33:22 executing program 1: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01010101", 0x4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0) 03:33:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e36383530363930383600"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040000c00000000000000dbf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000004700000000000000", 0x20, 0x560}, {&(0x7f0000010300)="02000000030000000400000015000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="ff070000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000dbf4655fdbf4655fdbf4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2080}, {&(0x7f0000011600)="8081000000601020dbf4655fdbf4655fdbf4655f00000000000001004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000", 0x60, 0x2300}, {&(0x7f0000011700)="c041000000400000dbf4655fdbf4655fdbf4655f00000000000002004000000000000800000000000af301000400000000000000000000000800000020000000", 0x40, 0x2500}, {&(0x7f0000011800)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000002004000000000000800030000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000005142ad1000000000000000000000000000000000000000000000000ed8100001a040000dbf4655fdbf4655fdbf4655f00000000000001004000000000000800010000000af301000400000000000000000000000100000060000000000000000000000000000000000000000000000000000000000000000000000000000000a7ea2103000000000000000000000000000000000000000000000000ffa1000026000000dbf4655fdbf4655fdbf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3638353036393038362f66696c65302f66696c653000000000000000000000000000000000000000000000e28cd836000000000000000000000000000000000000000000000000ed8100000a000000dbf4655fdbf4655fdbf4655f00000000000001008000000000000800010000000af30100040000000000000000000000010000007000000000000000000000000000000000000000000000000000000000000000000000000000000037875b34800000000000000000000000000000000000000000000000ed81000028230000dbf4655fdbf4655fdbf4655f00000000000002004000000000000800010000000af3010004000000000000000000000005000000900000000000000000000000000000000000000000000000000000000000000000000000000000004f0132c3000000000000000000000000000000000000000000000000ed81000064000000dbf4655fdbf4655fdbf4655f00000000000001004000000000000800010000000af3010004000000000000000000000001000000a000000000000000000000000000000000000000000000000000000000000000000000000000000024e4c0fc00"/768, 0x300, 0x2580}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x10000}, {&(0x7f0000011d00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000011e00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000011f00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012000)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13800}, {&(0x7f0000012400)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033340075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x20000}, {&(0x7f0000012500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x28000}, {&(0x7f0000012600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}, {&(0x7f0000012b00)='syzkallers\x00'/32, 0x20, 0x38000}, {&(0x7f0000012c00)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8070000000006000000779b539778617474723100000601f00700000000060000007498539778617474723200"/96, 0x60, 0x40000}, {&(0x7f0000012d00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x407e0}, {&(0x7f0000012e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x50000}], 0x0, &(0x7f0000012f00)) 03:33:22 executing program 2: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01010101", 0x4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0) 03:33:22 executing program 4: syz_mount_image$msdos(&(0x7f0000001400), &(0x7f0000001440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)={[{@fat=@uid}]}) [ 120.230393] autofs: Unknown parameter 'TIPCv2' 03:33:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, "e2af9e8988bb528ca664c1e6d6a4570feba047fc48c1c9c3cacbffa31b9ee305"}) [ 120.265669] loop5: detected capacity change from 0 to 2048 [ 120.276864] No source specified 03:33:22 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000480)='autofs\x00', 0x0, &(0x7f0000000540)='TIPCv2\x00') [ 120.288671] Oops: general protection fault, probably for non-canonical address 0xdffffc0002f9fb00: 0000 [#1] SMP KASAN NOPTI [ 120.289518] KASAN: probably user-memory-access in range [0x0000000017cfd800-0x0000000017cfd807] [ 120.290296] CPU: 0 UID: 0 PID: 4071 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 120.292285] Tainted: [W]=WARN [ 120.293134] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 120.295492] RIP: 0010:__queue_work+0x202/0x1240 [ 120.295927] Code: 48 8b 6d 00 e8 4f 9e 79 03 31 ff 41 89 c5 89 c6 e8 93 f3 31 00 45 85 ed 0f 85 e1 05 00 00 e8 55 f8 31 00 48 89 e8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 a0 0e 00 00 4c 8b 75 00 48 89 df 4c 89 34 24 [ 120.297564] RSP: 0018:ffff88801c7872f8 EFLAGS: 00010016 [ 120.298047] RAX: 0000000002f9fb00 RBX: ffff88800e1d9818 RCX: ffffc9000822a000 [ 120.298643] RDX: 0000000000040000 RSI: ffffffff8141ef2b RDI: 0000000000000005 [ 120.299192] RBP: 0000000017cfd800 R08: 0000000000000001 R09: fffffbfff0f11ef4 [ 120.299832] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 120.300468] R13: 0000000000000001 R14: 0000000000000000 R15: ffff888019c75800 [ 120.301116] FS: 00007f0d399f6700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 120.301835] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.302352] CR2: 0000001b2d322000 CR3: 0000000042000000 CR4: 0000000000350ef0 [ 120.302990] Call Trace: [ 120.303223] [ 120.303433] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 120.303859] queue_work_on+0xd0/0xe0 [ 120.304198] loop_queue_rq+0x5c8/0x1180 [ 120.304575] __blk_mq_issue_directly+0xd5/0x260 [ 120.305009] ? __pfx___blk_mq_issue_directly+0x10/0x10 [ 120.305486] blk_mq_request_issue_directly+0x11c/0x1e0 [ 120.305958] blk_mq_issue_direct+0x192/0x640 [ 120.306359] blk_mq_dispatch_queue_requests+0x4b0/0x7c0 [ 120.306833] blk_mq_flush_plug_list+0x1ec/0x5b0 [ 120.307254] ? read_tsc+0x9/0x20 [ 120.307567] ? ktime_get+0x16d/0x270 [ 120.307907] ? trace_block_plug+0x149/0x1b0 [ 120.308297] ? blk_add_rq_to_plug+0x234/0x550 [ 120.308707] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 120.309170] ? blk_mq_submit_bio+0x4fd/0x2220 [ 120.309577] __blk_flush_plug+0x25c/0x460 [ 120.309950] ? __pfx___blk_flush_plug+0x10/0x10 [ 120.310365] ? bio_associate_blkg_from_css+0x4fe/0x1380 [ 120.310845] __submit_bio+0x480/0x5b0 [ 120.311188] ? __pfx___submit_bio+0x10/0x10 [ 120.311574] ? read_tsc+0x9/0x20 [ 120.311884] ? ktime_get+0x16d/0x270 [ 120.312221] submit_bio_noacct_nocheck+0x68e/0xcb0 [ 120.312676] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 120.313164] submit_bio_noacct+0x359/0x1350 [ 120.313553] ? __pfx_end_buffer_read_sync+0x10/0x10 [ 120.314007] ext4_read_bh+0x15a/0x2e0 [ 120.314358] read_mmp_block+0xf8/0x5b0 [ 120.314719] ext4_multi_mount_protect+0x2b0/0xb20 [ 120.315159] ? __init_swait_queue_head+0xca/0x150 [ 120.315602] ? __pfx_ext4_multi_mount_protect+0x10/0x10 [ 120.316084] ? lockdep_init_map_type+0x4b/0x240 [ 120.316512] ? lockdep_init_map_type+0x4b/0x240 [ 120.316944] ext4_fill_super+0x99e7/0xba20 [ 120.317340] ? __pfx_ext4_fill_super+0x10/0x10 [ 120.317766] ? find_held_lock+0x2b/0x80 [ 120.318138] ? setup_bdev_super+0x2ed/0x6e0 [ 120.318531] ? set_blocksize+0x1b4/0x470 [ 120.318905] ? lock_release+0xc8/0x290 [ 120.319262] ? sb_set_blocksize+0x177/0x1c0 [ 120.319267] autofs: Unknown parameter 'TIPCv2' [ 120.320057] ? setup_bdev_super+0x31f/0x6e0 [ 120.320563] get_tree_bdev_flags+0x38a/0x620 [ 120.320923] ? __pfx_ext4_fill_super+0x10/0x10 [ 120.321282] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 120.321656] ? cap_capable+0xdb/0x3b0 [ 120.321951] ? security_capable+0x2f/0x90 [ 120.322269] vfs_get_tree+0x93/0x340 [ 120.322560] path_mount+0x132d/0x1dd0 [ 120.322878] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 120.323274] ? __pfx_path_mount+0x10/0x10 [ 120.323602] ? kmem_cache_free+0x2a1/0x540 [ 120.323930] ? putname.part.0+0x11b/0x160 [ 120.324345] ? getname_flags.part.0+0x1c6/0x540 [ 120.324784] ? putname.part.0+0x11b/0x160 [ 120.325163] __x64_sys_mount+0x27b/0x300 [ 120.325535] ? __pfx___x64_sys_mount+0x10/0x10 [ 120.325961] do_syscall_64+0xbf/0x360 [ 120.326314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.326787] RIP: 0033:0x7f0d3c48204a [ 120.327125] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 120.328754] RSP: 002b:00007f0d399f5fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 120.329440] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f0d3c48204a [ 120.330086] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f0d399f6000 [ 120.330729] RBP: 00007f0d399f6040 R08: 00007f0d399f6040 R09: 0000000020000000 [ 120.331364] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 120.332000] R13: 0000000020000100 R14: 00007f0d399f6000 R15: 0000000020012f00 [ 120.332648] [ 120.332863] Modules linked in: [ 120.333167] ---[ end trace 0000000000000000 ]--- [ 120.333591] RIP: 0010:__queue_work+0x202/0x1240 [ 120.334022] Code: 48 8b 6d 00 e8 4f 9e 79 03 31 ff 41 89 c5 89 c6 e8 93 f3 31 00 45 85 ed 0f 85 e1 05 00 00 e8 55 f8 31 00 48 89 e8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 a0 0e 00 00 4c 8b 75 00 48 89 df 4c 89 34 24 [ 120.335523] RSP: 0018:ffff88801c7872f8 EFLAGS: 00010016 [ 120.335925] RAX: 0000000002f9fb00 RBX: ffff88800e1d9818 RCX: ffffc9000822a000 [ 120.336453] RDX: 0000000000040000 RSI: ffffffff8141ef2b RDI: 0000000000000005 [ 120.336998] RBP: 0000000017cfd800 R08: 0000000000000001 R09: fffffbfff0f11ef4 [ 120.337531] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 120.338066] R13: 0000000000000001 R14: 0000000000000000 R15: ffff888019c75800 [ 120.338598] FS: 00007f0d399f6700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 120.339197] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.339637] CR2: 0000001b2d322000 CR3: 0000000042000000 CR4: 0000000000350ef0 [ 120.340175] note: syz-executor.5[4071] exited with irqs disabled [ 120.340739] note: syz-executor.5[4071] exited with preempt_count 1 [ 120.342358] ------------[ cut here ]------------ [ 120.342720] WARNING: kernel/exit.c:898 at do_exit+0x1c36/0x2970, CPU#0: syz-executor.5/4071 [ 120.343376] Modules linked in: [ 120.343993] CPU: 0 UID: 0 PID: 4071 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 120.345388] Tainted: [D]=DIE, [W]=WARN [ 120.345693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 120.346681] RIP: 0010:do_exit+0x1c36/0x2970 [ 120.347221] Code: 96 0a 00 00 c7 43 18 00 00 00 00 e9 21 e6 ff ff e8 bf a4 38 00 bf 02 24 00 00 e8 f5 ab 0b 00 e9 41 ff ff ff e8 ab a4 38 00 90 <0f> 0b 90 e9 87 e4 ff ff e8 9d a4 38 00 4c 89 e6 bf 05 06 00 00 e8 [ 120.348874] RSP: 0018:ffff88801c787e40 EFLAGS: 00010212 [ 120.349371] RAX: 000000000003f932 RBX: 0000000000000200 RCX: ffffc9000822a000 [ 120.350134] RDX: 0000000000040000 RSI: ffffffff813b42d5 RDI: ffff8880462511e8 [ 120.350796] RBP: ffff888046250000 R08: 0000000000000001 R09: fffffbfff0f11cd8 [ 120.351451] R10: 0000000000000200 R11: 0000000000000001 R12: 000000000000000b [ 120.352086] R13: 0000000000002710 R14: dffffc0002f9fb00 R15: 0000000000000000 [ 120.352762] FS: 00007f0d399f6700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 120.353505] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.354025] CR2: 0000001b2d322000 CR3: 0000000042000000 CR4: 0000000000350ef0 [ 120.354679] Call Trace: [ 120.354914] [ 120.355122] ? _printk+0xbe/0xf0 [ 120.355460] ? __pfx__printk+0x10/0x10 [ 120.355818] ? __pfx_do_exit+0x10/0x10 [ 120.356178] make_task_dead+0x174/0x3b0 [ 120.356562] ? do_syscall_64+0xbf/0x360 [ 120.356939] rewind_stack_and_make_dead+0x16/0x20 [ 120.357405] RIP: 0033:0x7f0d3c48204a [ 120.357742] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 120.359375] RSP: 002b:00007f0d399f5fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 120.360049] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f0d3c48204a [ 120.360722] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f0d399f6000 [ 120.361386] RBP: 00007f0d399f6040 R08: 00007f0d399f6040 R09: 0000000020000000 [ 120.362024] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 120.362676] R13: 0000000020000100 R14: 00007f0d399f6000 R15: 0000000020012f00 [ 120.363331] [ 120.363546] irq event stamp: 1546 [ 120.363866] hardirqs last enabled at (1545): [] ktime_get+0x1c7/0x270 [ 120.364614] hardirqs last disabled at (1546): [] _raw_spin_lock_irq+0x42/0x50 [ 120.365413] softirqs last enabled at (1336): [] kernel_fpu_end+0x59/0x70 [ 120.366158] softirqs last disabled at (1334): [] kernel_fpu_begin_mask+0x1b7/0x290 [ 120.366995] ---[ end trace 0000000000000000 ]--- [ 120.367444] BUG: sleeping function called from invalid context at ./include/linux/percpu-rwsem.h:51 [ 120.368259] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 4071, name: syz-executor.5 [ 120.369021] preempt_count: 0, expected: 0 [ 120.369414] RCU nest depth: 2, expected: 0 [ 120.369732] INFO: lockdep is turned off. [ 120.370044] CPU: 0 UID: 0 PID: 4071 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 120.370063] Tainted: [D]=DIE, [W]=WARN [ 120.370067] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 120.370074] Call Trace: [ 120.370078] [ 120.370083] dump_stack_lvl+0xfa/0x120 [ 120.370103] __might_resched+0x2f3/0x510 [ 120.370118] exit_signals+0x25/0x940 [ 120.370136] do_exit+0x2db/0x2970 [ 120.370148] ? _printk+0xbe/0xf0 [ 120.370160] ? __pfx__printk+0x10/0x10 [ 120.370173] ? __pfx_do_exit+0x10/0x10 [ 120.370192] make_task_dead+0x174/0x3b0 [ 120.370204] ? do_syscall_64+0xbf/0x360 [ 120.370214] rewind_stack_and_make_dead+0x16/0x20 [ 120.370230] RIP: 0033:0x7f0d3c48204a [ 120.370238] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 120.370248] RSP: 002b:00007f0d399f5fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 120.370259] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f0d3c48204a [ 120.370267] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f0d399f6000 [ 120.370274] RBP: 00007f0d399f6040 R08: 00007f0d399f6040 R09: 0000000020000000 [ 120.370281] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 120.370288] R13: 0000000020000100 R14: 00007f0d399f6000 R15: 0000000020012f00 [ 120.370299] VM DIAGNOSIS: 09:19:11 Registers: info registers vcpu 0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff88801c786c88 R8 =0000000000000000 R9 =ffffed10016d9046 R10=0000000000000031 R11=6572617764726148 R12=0000000000000031 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f0d399f6700 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe0e00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d322000 CR3=0000000042000000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000080000000 RBX=0000000000000000 RCX=ffffffff81e8387b RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffff888016a6fb98 RSP=ffff888016a6fa90 R8 =0000000000000000 R9 =ffffed1001267657 R10=0000000000000000 R11=ffffffff81b26105 R12=0000000000000001 R13=0000000000000001 R14=ffff88800933b2b8 R15=ffff888016a6fb98 RIP=ffffffff8173e0ea RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555577c12400 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe5000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc4bde4ff4 CR3=0000000040f70000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000