Warning: Permanently added '[localhost]:26485' (ECDSA) to the list of known hosts. 2025/09/01 10:49:09 fuzzer started 2025/09/01 10:49:09 dialing manager at localhost:35473 syzkaller login: [ 58.913828] cgroup: Unknown subsys name 'net' [ 58.968151] cgroup: Unknown subsys name 'cpuset' [ 58.984127] cgroup: Unknown subsys name 'rlimit' 2025/09/01 10:49:18 syscalls: 2214 2025/09/01 10:49:18 code coverage: enabled 2025/09/01 10:49:18 comparison tracing: enabled 2025/09/01 10:49:18 extra coverage: enabled 2025/09/01 10:49:18 setuid sandbox: enabled 2025/09/01 10:49:18 namespace sandbox: enabled 2025/09/01 10:49:18 Android sandbox: enabled 2025/09/01 10:49:18 fault injection: enabled 2025/09/01 10:49:18 leak checking: enabled 2025/09/01 10:49:18 net packet injection: enabled 2025/09/01 10:49:18 net device setup: enabled 2025/09/01 10:49:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 10:49:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 10:49:18 USB emulation: enabled 2025/09/01 10:49:18 hci packet injection: enabled 2025/09/01 10:49:18 wifi device emulation: enabled 2025/09/01 10:49:18 802.15.4 emulation: enabled 2025/09/01 10:49:18 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 10:49:18 fetching corpus: 50, signal 23807/27292 (executing program) 2025/09/01 10:49:19 fetching corpus: 100, signal 36791/41572 (executing program) 2025/09/01 10:49:19 fetching corpus: 150, signal 43324/49491 (executing program) 2025/09/01 10:49:19 fetching corpus: 200, signal 51442/58646 (executing program) 2025/09/01 10:49:19 fetching corpus: 250, signal 56998/65301 (executing program) 2025/09/01 10:49:19 fetching corpus: 300, signal 61302/70657 (executing program) 2025/09/01 10:49:19 fetching corpus: 350, signal 63856/74307 (executing program) 2025/09/01 10:49:19 fetching corpus: 400, signal 67556/78901 (executing program) 2025/09/01 10:49:19 fetching corpus: 450, signal 70632/82895 (executing program) 2025/09/01 10:49:19 fetching corpus: 500, signal 72533/85755 (executing program) 2025/09/01 10:49:19 fetching corpus: 550, signal 74994/89113 (executing program) 2025/09/01 10:49:19 fetching corpus: 600, signal 77144/92179 (executing program) 2025/09/01 10:49:20 fetching corpus: 650, signal 79447/95338 (executing program) 2025/09/01 10:49:20 fetching corpus: 700, signal 81686/98357 (executing program) 2025/09/01 10:49:20 fetching corpus: 750, signal 84522/101803 (executing program) 2025/09/01 10:49:20 fetching corpus: 800, signal 87876/105615 (executing program) 2025/09/01 10:49:20 fetching corpus: 850, signal 89222/107767 (executing program) 2025/09/01 10:49:20 fetching corpus: 900, signal 91216/110377 (executing program) 2025/09/01 10:49:20 fetching corpus: 950, signal 92923/112703 (executing program) 2025/09/01 10:49:20 fetching corpus: 1000, signal 95076/115350 (executing program) 2025/09/01 10:49:20 fetching corpus: 1050, signal 96794/117621 (executing program) 2025/09/01 10:49:20 fetching corpus: 1100, signal 98061/119504 (executing program) 2025/09/01 10:49:20 fetching corpus: 1150, signal 98939/121106 (executing program) 2025/09/01 10:49:20 fetching corpus: 1200, signal 100478/123104 (executing program) 2025/09/01 10:49:21 fetching corpus: 1250, signal 101830/124971 (executing program) 2025/09/01 10:49:21 fetching corpus: 1300, signal 103417/126994 (executing program) 2025/09/01 10:49:21 fetching corpus: 1350, signal 105986/129664 (executing program) 2025/09/01 10:49:21 fetching corpus: 1400, signal 107335/131444 (executing program) 2025/09/01 10:49:21 fetching corpus: 1450, signal 108620/133127 (executing program) 2025/09/01 10:49:21 fetching corpus: 1500, signal 109948/134813 (executing program) 2025/09/01 10:49:21 fetching corpus: 1550, signal 111049/136357 (executing program) 2025/09/01 10:49:21 fetching corpus: 1600, signal 112091/137867 (executing program) 2025/09/01 10:49:21 fetching corpus: 1650, signal 113210/139408 (executing program) 2025/09/01 10:49:21 fetching corpus: 1700, signal 114202/140829 (executing program) 2025/09/01 10:49:22 fetching corpus: 1750, signal 115130/142137 (executing program) 2025/09/01 10:49:22 fetching corpus: 1800, signal 116613/143805 (executing program) 2025/09/01 10:49:22 fetching corpus: 1850, signal 117529/145066 (executing program) 2025/09/01 10:49:22 fetching corpus: 1900, signal 118181/146148 (executing program) 2025/09/01 10:49:22 fetching corpus: 1950, signal 119164/147452 (executing program) 2025/09/01 10:49:22 fetching corpus: 2000, signal 120052/148693 (executing program) 2025/09/01 10:49:22 fetching corpus: 2050, signal 121203/150048 (executing program) 2025/09/01 10:49:22 fetching corpus: 2100, signal 122414/151440 (executing program) 2025/09/01 10:49:22 fetching corpus: 2150, signal 123415/152663 (executing program) 2025/09/01 10:49:22 fetching corpus: 2200, signal 124468/153851 (executing program) 2025/09/01 10:49:22 fetching corpus: 2250, signal 125149/154880 (executing program) 2025/09/01 10:49:23 fetching corpus: 2300, signal 126063/155982 (executing program) 2025/09/01 10:49:23 fetching corpus: 2350, signal 126977/157059 (executing program) 2025/09/01 10:49:23 fetching corpus: 2400, signal 127726/158014 (executing program) 2025/09/01 10:49:23 fetching corpus: 2450, signal 128358/158955 (executing program) 2025/09/01 10:49:23 fetching corpus: 2500, signal 129162/159941 (executing program) 2025/09/01 10:49:23 fetching corpus: 2550, signal 129812/160788 (executing program) 2025/09/01 10:49:23 fetching corpus: 2600, signal 130677/161758 (executing program) 2025/09/01 10:49:23 fetching corpus: 2650, signal 131231/162617 (executing program) 2025/09/01 10:49:23 fetching corpus: 2700, signal 131800/163431 (executing program) 2025/09/01 10:49:23 fetching corpus: 2750, signal 132618/164377 (executing program) 2025/09/01 10:49:23 fetching corpus: 2800, signal 133718/165376 (executing program) 2025/09/01 10:49:23 fetching corpus: 2850, signal 134437/166184 (executing program) 2025/09/01 10:49:24 fetching corpus: 2900, signal 135942/167261 (executing program) 2025/09/01 10:49:24 fetching corpus: 2950, signal 136499/167965 (executing program) 2025/09/01 10:49:24 fetching corpus: 3000, signal 137323/168781 (executing program) 2025/09/01 10:49:24 fetching corpus: 3050, signal 138926/169859 (executing program) 2025/09/01 10:49:24 fetching corpus: 3100, signal 139563/170542 (executing program) 2025/09/01 10:49:24 fetching corpus: 3150, signal 140087/171200 (executing program) 2025/09/01 10:49:24 fetching corpus: 3200, signal 141029/171953 (executing program) 2025/09/01 10:49:24 fetching corpus: 3250, signal 141596/172615 (executing program) 2025/09/01 10:49:24 fetching corpus: 3300, signal 142300/173324 (executing program) 2025/09/01 10:49:25 fetching corpus: 3350, signal 142886/173940 (executing program) 2025/09/01 10:49:25 fetching corpus: 3400, signal 143346/174503 (executing program) 2025/09/01 10:49:25 fetching corpus: 3450, signal 143831/175051 (executing program) 2025/09/01 10:49:25 fetching corpus: 3500, signal 144391/175618 (executing program) 2025/09/01 10:49:25 fetching corpus: 3550, signal 145133/176255 (executing program) 2025/09/01 10:49:25 fetching corpus: 3600, signal 145564/176818 (executing program) 2025/09/01 10:49:25 fetching corpus: 3650, signal 146535/177484 (executing program) 2025/09/01 10:49:25 fetching corpus: 3700, signal 146975/177974 (executing program) 2025/09/01 10:49:25 fetching corpus: 3750, signal 147630/178460 (executing program) 2025/09/01 10:49:25 fetching corpus: 3800, signal 148264/178926 (executing program) 2025/09/01 10:49:25 fetching corpus: 3850, signal 148858/179398 (executing program) 2025/09/01 10:49:26 fetching corpus: 3900, signal 149375/179889 (executing program) 2025/09/01 10:49:26 fetching corpus: 3950, signal 149925/180369 (executing program) 2025/09/01 10:49:26 fetching corpus: 4000, signal 150961/180904 (executing program) 2025/09/01 10:49:26 fetching corpus: 4050, signal 151491/181361 (executing program) 2025/09/01 10:49:26 fetching corpus: 4100, signal 152060/181763 (executing program) 2025/09/01 10:49:26 fetching corpus: 4150, signal 152773/182171 (executing program) 2025/09/01 10:49:26 fetching corpus: 4200, signal 153411/182556 (executing program) 2025/09/01 10:49:26 fetching corpus: 4250, signal 153668/182922 (executing program) 2025/09/01 10:49:26 fetching corpus: 4300, signal 153963/183296 (executing program) 2025/09/01 10:49:26 fetching corpus: 4350, signal 154425/183695 (executing program) 2025/09/01 10:49:26 fetching corpus: 4400, signal 154875/184070 (executing program) 2025/09/01 10:49:27 fetching corpus: 4450, signal 155429/184434 (executing program) 2025/09/01 10:49:27 fetching corpus: 4500, signal 156157/184768 (executing program) 2025/09/01 10:49:27 fetching corpus: 4550, signal 156542/184846 (executing program) 2025/09/01 10:49:27 fetching corpus: 4600, signal 157089/184883 (executing program) 2025/09/01 10:49:27 fetching corpus: 4650, signal 157373/184894 (executing program) 2025/09/01 10:49:27 fetching corpus: 4700, signal 157921/184894 (executing program) 2025/09/01 10:49:27 fetching corpus: 4750, signal 158291/184897 (executing program) 2025/09/01 10:49:27 fetching corpus: 4800, signal 158662/184932 (executing program) 2025/09/01 10:49:27 fetching corpus: 4850, signal 159089/184944 (executing program) 2025/09/01 10:49:27 fetching corpus: 4900, signal 159508/184956 (executing program) 2025/09/01 10:49:27 fetching corpus: 4950, signal 160144/184962 (executing program) 2025/09/01 10:49:28 fetching corpus: 5000, signal 160487/184967 (executing program) 2025/09/01 10:49:28 fetching corpus: 5050, signal 161097/184994 (executing program) 2025/09/01 10:49:28 fetching corpus: 5100, signal 161492/185024 (executing program) 2025/09/01 10:49:28 fetching corpus: 5150, signal 161828/185024 (executing program) 2025/09/01 10:49:28 fetching corpus: 5200, signal 162248/185032 (executing program) 2025/09/01 10:49:28 fetching corpus: 5250, signal 163078/185125 (executing program) 2025/09/01 10:49:28 fetching corpus: 5300, signal 163482/185126 (executing program) 2025/09/01 10:49:28 fetching corpus: 5350, signal 163758/185129 (executing program) 2025/09/01 10:49:28 fetching corpus: 5400, signal 164320/185255 (executing program) 2025/09/01 10:49:28 fetching corpus: 5450, signal 164817/185262 (executing program) 2025/09/01 10:49:28 fetching corpus: 5500, signal 165220/185267 (executing program) 2025/09/01 10:49:29 fetching corpus: 5550, signal 165590/185271 (executing program) 2025/09/01 10:49:29 fetching corpus: 5600, signal 165977/185277 (executing program) 2025/09/01 10:49:29 fetching corpus: 5650, signal 166549/185295 (executing program) 2025/09/01 10:49:29 fetching corpus: 5700, signal 168363/185325 (executing program) 2025/09/01 10:49:29 fetching corpus: 5750, signal 168742/185327 (executing program) 2025/09/01 10:49:29 fetching corpus: 5800, signal 169300/185330 (executing program) 2025/09/01 10:49:29 fetching corpus: 5850, signal 169637/185358 (executing program) 2025/09/01 10:49:29 fetching corpus: 5900, signal 169984/185360 (executing program) 2025/09/01 10:49:29 fetching corpus: 5950, signal 170485/185366 (executing program) 2025/09/01 10:49:29 fetching corpus: 6000, signal 170736/185368 (executing program) 2025/09/01 10:49:29 fetching corpus: 6050, signal 171089/185387 (executing program) 2025/09/01 10:49:29 fetching corpus: 6100, signal 171560/185391 (executing program) 2025/09/01 10:49:30 fetching corpus: 6150, signal 171925/185392 (executing program) 2025/09/01 10:49:30 fetching corpus: 6200, signal 172311/185411 (executing program) 2025/09/01 10:49:30 fetching corpus: 6250, signal 172691/185451 (executing program) 2025/09/01 10:49:30 fetching corpus: 6300, signal 173088/185455 (executing program) 2025/09/01 10:49:30 fetching corpus: 6350, signal 173319/185468 (executing program) 2025/09/01 10:49:30 fetching corpus: 6400, signal 173573/185471 (executing program) 2025/09/01 10:49:30 fetching corpus: 6450, signal 173799/185489 (executing program) 2025/09/01 10:49:30 fetching corpus: 6500, signal 174409/185510 (executing program) 2025/09/01 10:49:30 fetching corpus: 6550, signal 174656/185538 (executing program) 2025/09/01 10:49:30 fetching corpus: 6600, signal 174990/185538 (executing program) 2025/09/01 10:49:31 fetching corpus: 6650, signal 175412/185570 (executing program) 2025/09/01 10:49:31 fetching corpus: 6700, signal 175784/185573 (executing program) 2025/09/01 10:49:31 fetching corpus: 6750, signal 176270/185594 (executing program) 2025/09/01 10:49:31 fetching corpus: 6800, signal 176605/185634 (executing program) 2025/09/01 10:49:31 fetching corpus: 6850, signal 176890/185643 (executing program) 2025/09/01 10:49:31 fetching corpus: 6900, signal 177187/185668 (executing program) 2025/09/01 10:49:31 fetching corpus: 6950, signal 177455/185672 (executing program) 2025/09/01 10:49:31 fetching corpus: 7000, signal 177974/185672 (executing program) 2025/09/01 10:49:31 fetching corpus: 7050, signal 178411/185807 (executing program) 2025/09/01 10:49:31 fetching corpus: 7100, signal 178627/185817 (executing program) 2025/09/01 10:49:31 fetching corpus: 7150, signal 178850/185823 (executing program) 2025/09/01 10:49:31 fetching corpus: 7200, signal 179193/185830 (executing program) 2025/09/01 10:49:32 fetching corpus: 7250, signal 179591/185834 (executing program) 2025/09/01 10:49:32 fetching corpus: 7300, signal 179924/185837 (executing program) 2025/09/01 10:49:32 fetching corpus: 7350, signal 180128/185841 (executing program) 2025/09/01 10:49:32 fetching corpus: 7400, signal 180337/185863 (executing program) 2025/09/01 10:49:32 fetching corpus: 7450, signal 180865/185888 (executing program) 2025/09/01 10:49:33 fetching corpus: 7500, signal 181220/185894 (executing program) 2025/09/01 10:49:33 fetching corpus: 7550, signal 181518/185896 (executing program) 2025/09/01 10:49:33 fetching corpus: 7600, signal 181855/185909 (executing program) 2025/09/01 10:49:33 fetching corpus: 7650, signal 182134/185959 (executing program) 2025/09/01 10:49:33 fetching corpus: 7700, signal 182383/185964 (executing program) 2025/09/01 10:49:33 fetching corpus: 7750, signal 182606/185975 (executing program) 2025/09/01 10:49:33 fetching corpus: 7800, signal 183067/186014 (executing program) 2025/09/01 10:49:33 fetching corpus: 7848, signal 183276/186020 (executing program) 2025/09/01 10:49:33 fetching corpus: 7848, signal 183276/186020 (executing program) 2025/09/01 10:49:35 starting 8 fuzzer processes 10:49:35 executing program 0: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x3, &(0x7f0000002ec0)=[{&(0x7f0000000ac0)='a', 0x1}, {&(0x7f0000000b80)="a2", 0x1}, {&(0x7f0000000d40)='w', 0x1}], 0x0, 0x0) 10:49:35 executing program 1: socket$inet(0x2, 0xa, 0x8) syz_emit_ethernet(0x8a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@end]}}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "20937c4ce6bf53324e3fd3ca2707a8092a2ff5d42eb31a661cc3cd6ea6d0133c", "c538df2eabede21c2be8aa0d3df877a7", {"fc0a2e74062eace7149ae53eb80191d1", "97a696bb38fed5ea32b2238a3fe9ac2f"}}}}}}}, 0x0) 10:49:35 executing program 5: r0 = epoll_create1(0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 10:49:35 executing program 7: io_setup(0x8, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 84.191057] audit: type=1400 audit(1756723775.127:7): avc: denied { execmem } for pid=273 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:49:35 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 10:49:35 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000002f80)={'sit0\x00', 0x0}) 10:49:35 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:49:35 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2cb1, &(0x7f00000001c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) io_uring_enter(r0, 0x0, 0x0, 0x6, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x2, 0x0, 0x0) [ 85.371224] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.374032] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.376280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.382352] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.385830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.430418] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.432854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.434955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.438776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.442939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.531884] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.536241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.564758] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.568670] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.574104] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.577355] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.578641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.580663] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 85.584040] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 85.585074] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.586407] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.591736] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.596067] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.598110] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.601924] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.604090] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 85.609683] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.611524] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.614190] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.620065] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.622280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.623707] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.625715] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.634942] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.648720] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.651007] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.656619] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.661796] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.687376] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.689311] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 87.399911] Bluetooth: hci0: command tx timeout [ 87.461659] Bluetooth: hci1: command tx timeout [ 87.654572] Bluetooth: hci6: command tx timeout [ 87.718891] Bluetooth: hci2: command tx timeout [ 87.719709] Bluetooth: hci3: command tx timeout [ 87.720315] Bluetooth: hci4: command tx timeout [ 87.782188] Bluetooth: hci7: command tx timeout [ 87.782544] Bluetooth: hci5: command tx timeout [ 89.445496] Bluetooth: hci0: command tx timeout [ 89.509597] Bluetooth: hci1: command tx timeout [ 89.701553] Bluetooth: hci6: command tx timeout [ 89.765893] Bluetooth: hci4: command tx timeout [ 89.766382] Bluetooth: hci3: command tx timeout [ 89.766420] Bluetooth: hci2: command tx timeout [ 89.829516] Bluetooth: hci5: command tx timeout [ 89.831074] Bluetooth: hci7: command tx timeout [ 91.493526] Bluetooth: hci0: command tx timeout [ 91.557659] Bluetooth: hci1: command tx timeout [ 91.749612] Bluetooth: hci6: command tx timeout [ 91.815515] Bluetooth: hci4: command tx timeout [ 91.815974] Bluetooth: hci2: command tx timeout [ 91.816007] Bluetooth: hci3: command tx timeout [ 91.878503] Bluetooth: hci7: command tx timeout [ 91.878553] Bluetooth: hci5: command tx timeout [ 93.541671] Bluetooth: hci0: command tx timeout [ 93.605611] Bluetooth: hci1: command tx timeout [ 93.797792] Bluetooth: hci6: command tx timeout [ 93.861593] Bluetooth: hci4: command tx timeout [ 93.861610] Bluetooth: hci2: command tx timeout [ 93.862513] Bluetooth: hci3: command tx timeout [ 93.925653] Bluetooth: hci5: command tx timeout [ 93.928474] Bluetooth: hci7: command tx timeout [ 124.872635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.873306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.017542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.018164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.418193] audit: type=1400 audit(1756723816.356:8): avc: denied { open } for pid=3761 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.427326] audit: type=1400 audit(1756723816.358:9): avc: denied { kernel } for pid=3761 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.551057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.551728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:50:16 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2cb1, &(0x7f00000001c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) io_uring_enter(r0, 0x0, 0x0, 0x6, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x2, 0x0, 0x0) [ 125.708058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.709535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:50:16 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2cb1, &(0x7f00000001c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) io_uring_enter(r0, 0x0, 0x0, 0x6, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 10:50:16 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2cb1, &(0x7f00000001c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) io_uring_enter(r0, 0x0, 0x0, 0x6, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 10:50:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2cb1, &(0x7f00000001c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) io_uring_enter(r0, 0x0, 0x0, 0x6, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x2, 0x0, 0x0) [ 126.139672] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 126.140444] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 126.141066] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 126.141607] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 126.142209] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 126.143305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.144010] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.144944] Buffer I/O error on dev sr0, logical block 0, async page read [ 126.148675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.149113] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.149913] Buffer I/O error on dev sr0, logical block 1, async page read [ 126.153669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.154124] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.154920] Buffer I/O error on dev sr0, logical block 2, async page read [ 126.162794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.163233] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.163905] Buffer I/O error on dev sr0, logical block 3, async page read [ 126.174568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.175012] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.175688] Buffer I/O error on dev sr0, logical block 4, async page read [ 126.182635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.183075] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.183743] Buffer I/O error on dev sr0, logical block 5, async page read [ 126.190604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.191186] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.192031] Buffer I/O error on dev sr0, logical block 6, async page read [ 126.197249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.197844] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.198570] Buffer I/O error on dev sr0, logical block 7, async page read [ 126.207291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.207950] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.208757] Buffer I/O error on dev sr0, logical block 0, async page read [ 126.220615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.221061] Buffer I/O error on dev sr0, logical block 1, async page read [ 126.227967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 10:50:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2cb1, &(0x7f00000001c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) io_uring_enter(r0, 0x0, 0x0, 0x6, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x2, 0x0, 0x0) [ 126.240763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.241597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.248766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.249320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.256622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.278276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.282665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.292718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.293679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.308731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.357488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.358081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:50:17 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 10:50:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2cb1, &(0x7f00000001c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) io_uring_enter(r0, 0x0, 0x0, 0x6, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x2, 0x0, 0x0) [ 126.437865] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 126.438664] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 126.439204] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 126.439840] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 126.440968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.445653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.446200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.446947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.448810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.449367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.454559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.455108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.455767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.456311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.459562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.460151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.462662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.463207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.466550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.467143] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.546933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.547567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:50:17 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 126.610672] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 126.611431] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 126.612066] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 126.612708] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 126.613596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.614166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.614730] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.615271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.629547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.630094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.632644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.633191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.643789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.644387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.644598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.646538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.647079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.651575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.652125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.661607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.662177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.665723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 126.768784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.769356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.865069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.865692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.891543] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 126.943539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.944133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.042795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.044723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.185222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.186298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.258044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.258771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.316043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.316774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.367435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.368097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.400322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.401040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.402249] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 10:50:18 executing program 0: io_setup(0x8, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:50:18 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001dc0)=[{{&(0x7f00000007c0)={0x2, 0x4e22, @empty}, 0x10, 0x0}}, {{&(0x7f0000000fc0)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="100000000000000000000000070000001c000000000000000000000008000000ba"], 0x30}}], 0x2, 0x0) 10:50:18 executing program 7: io_setup(0x8, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:50:18 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 10:50:18 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x8203, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 10:50:18 executing program 6: io_setup(0x8, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:50:18 executing program 5: r0 = epoll_create1(0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 10:50:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:50:18 executing program 4: io_setup(0x8, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 127.716642] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 127.717531] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 127.718225] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 127.718857] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 127.720423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.725579] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 10:50:18 executing program 6: io_setup(0x8, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:50:18 executing program 1: syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @mcast1}}}}}}, 0x0) [ 127.729065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.729645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.734892] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 10:50:18 executing program 7: io_setup(0x8, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 127.735443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.743609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.744162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.754573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.755128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.756430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.766070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.768267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.774799] kmemleak: Found object by alias at 0x607f1a63dd24 [ 127.774816] CPU: 1 UID: 0 PID: 3948 Comm: syz-executor.4 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 127.774835] Tainted: [W]=WARN [ 127.774839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 127.774846] Call Trace: [ 127.774851] [ 127.774856] dump_stack_lvl+0xca/0x120 [ 127.774887] __lookup_object+0x94/0xb0 [ 127.774906] delete_object_full+0x27/0x70 [ 127.774924] free_percpu+0x30/0x1160 [ 127.774941] ? arch_uprobe_clear_state+0x16/0x140 [ 127.774962] futex_hash_free+0x38/0xc0 [ 127.774977] mmput+0x2d3/0x390 [ 127.774996] do_exit+0x79d/0x2970 [ 127.775015] ? __pfx_do_exit+0x10/0x10 [ 127.775029] ? find_held_lock+0x2b/0x80 [ 127.775048] ? get_signal+0x835/0x2340 [ 127.775069] do_group_exit+0xd3/0x2a0 [ 127.775084] get_signal+0x2315/0x2340 [ 127.775102] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 127.775120] ? __pfx_get_signal+0x10/0x10 [ 127.775137] ? __schedule+0xe91/0x3590 [ 127.775159] arch_do_signal_or_restart+0x80/0x790 [ 127.775178] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 127.775195] ? __x64_sys_futex+0x1c9/0x4d0 [ 127.775208] ? __x64_sys_futex+0x1d2/0x4d0 [ 127.775222] ? __x64_sys_openat+0x142/0x200 [ 127.775240] ? __pfx___x64_sys_futex+0x10/0x10 [ 127.775254] ? xfd_validate_state+0x55/0x180 [ 127.775276] exit_to_user_mode_loop+0x8b/0x110 [ 127.775289] do_syscall_64+0x2f7/0x360 [ 127.775303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.775316] RIP: 0033:0x7fd907e89b19 [ 127.775325] Code: Unable to access opcode bytes at 0x7fd907e89aef. [ 127.775331] RSP: 002b:00007fd9053ff218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 127.775343] RAX: 0000000000000001 RBX: 00007fd907f9cf68 RCX: 00007fd907e89b19 [ 127.775351] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd907f9cf6c [ 127.775358] RBP: 00007fd907f9cf60 R08: 000000000000000e R09: 0000000000000000 [ 127.775366] R10: 0000000000000001 R11: 0000000000000246 R12: 00007fd907f9cf6c [ 127.775373] R13: 00007ffc980c3e4f R14: 00007fd9053ff300 R15: 0000000000022000 [ 127.775389] [ 127.775393] kmemleak: Object (percpu) 0x607f1a63dd20 (size 8): [ 127.775400] kmemleak: comm "syz-executor.6", pid 3952, jiffies 4294794610 [ 127.775407] kmemleak: min_count = 1 [ 127.775412] kmemleak: count = 0 [ 127.775415] kmemleak: flags = 0x21 [ 127.775419] kmemleak: checksum = 0 [ 127.775423] kmemleak: backtrace: [ 127.775427] pcpu_alloc_noprof+0x87a/0x1170 [ 127.775442] percpu_ref_init+0x37/0x400 [ 127.775458] ioctx_alloc+0x27f/0x1e10 [ 127.775473] __x64_sys_io_setup+0xc8/0x1f0 [ 127.775486] do_syscall_64+0xbf/0x360 [ 127.775495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.780648] kmemleak: Found object by alias at 0x607f1a63e75c [ 127.780666] CPU: 0 UID: 0 PID: 3950 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 127.780685] Tainted: [W]=WARN [ 127.780689] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 127.780697] Call Trace: [ 127.780701] [ 127.780706] dump_stack_lvl+0xca/0x120 [ 127.780732] __lookup_object+0x94/0xb0 [ 127.780750] delete_object_full+0x27/0x70 [ 127.780767] free_percpu+0x30/0x1160 [ 127.780784] ? arch_uprobe_clear_state+0x16/0x140 [ 127.780805] futex_hash_free+0x38/0xc0 [ 127.780820] mmput+0x2d3/0x390 [ 127.780839] do_exit+0x79d/0x2970 [ 127.780853] ? signal_wake_up_state+0x85/0x120 [ 127.780870] ? zap_other_threads+0x2b9/0x3a0 [ 127.780886] ? __pfx_do_exit+0x10/0x10 [ 127.780899] ? do_group_exit+0x1c3/0x2a0 [ 127.780913] ? lock_release+0xc8/0x290 [ 127.780930] do_group_exit+0xd3/0x2a0 [ 127.780945] __x64_sys_exit_group+0x3e/0x50 [ 127.780960] x64_sys_call+0x18c5/0x18d0 [ 127.780976] do_syscall_64+0xbf/0x360 [ 127.780989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.781000] RIP: 0033:0x7fd537d0fb19 [ 127.781009] Code: Unable to access opcode bytes at 0x7fd537d0faef. [ 127.781014] RSP: 002b:00007ffea2fbef18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 127.781026] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fd537d0fb19 [ 127.781034] RDX: 00007fd537cc272b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 127.781041] RBP: 0000000000000000 R08: 00007fd537e275e0 R09: 0000000000000001 [ 127.781048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.781055] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffea2fbf000 [ 127.781070] [ 127.781074] kmemleak: Object (percpu) 0x607f1a63e758 (size 8): [ 127.781081] kmemleak: comm "syz-executor.6", pid 3952, jiffies 4294794610 [ 127.781088] kmemleak: min_count = 1 [ 127.781092] kmemleak: count = 0 [ 127.781095] kmemleak: flags = 0x21 [ 127.781099] kmemleak: checksum = 0 [ 127.781103] kmemleak: backtrace: [ 127.781106] pcpu_alloc_noprof+0x87a/0x1170 [ 127.781122] percpu_ref_init+0x37/0x400 [ 127.781133] ioctx_alloc+0x368/0x1e10 [ 127.781146] __x64_sys_io_setup+0xc8/0x1f0 [ 127.781159] do_syscall_64+0xbf/0x360 [ 127.781169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.788644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.822866] ------------[ cut here ]------------ [ 127.823373] percpu ref (free_ioctx_reqs) <= 0 (-1) after switching to atomic [ 127.823563] WARNING: lib/percpu-refcount.c:197 at percpu_ref_switch_to_atomic_rcu+0x3cc/0x480, CPU#0: kworker/0:3/3881 [ 127.825029] Modules linked in: [ 127.825330] CPU: 0 UID: 0 PID: 3881 Comm: kworker/0:3 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 127.827560] Tainted: [W]=WARN [ 127.828228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 127.829888] Workqueue: events delayed_fput [ 127.831207] RIP: 0010:percpu_ref_switch_to_atomic_rcu+0x3cc/0x480 [ 127.832425] Code: 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 9e 00 00 00 49 8b 75 e8 48 c7 c7 c0 99 e2 84 e8 25 ac e9 fe 90 <0f> 0b 90 90 e9 2b ff ff ff e8 56 de 5f ff e9 9e fe ff ff e8 dc de [ 127.832681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.834952] RSP: 0018:ffff88806ce08e38 EFLAGS: 00010282 [ 127.835829] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8139de70 [ 127.836405] RDX: ffff88801b05d280 RSI: ffffffff8139de7e RDI: 0000000000000001 [ 127.837003] RBP: 8000000000000000 R08: 0000000000000001 R09: ffffed100d9c4801 [ 127.837599] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888046514400 [ 127.837835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.838175] R13: ffff888046514420 R14: 0000000000000002 R15: 0000000000000003 [ 127.839187] FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 127.839853] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.840326] CR2: 00007ffd5f2d1c28 CR3: 0000000046102000 CR4: 0000000000350ef0 [ 127.840935] Call Trace: [ 127.841153] [ 127.841337] ? rcu_core+0x7c3/0x1800 [ 127.841673] rcu_core+0x7c8/0x1800 [ 127.841981] ? __pfx_rcu_core+0x10/0x10 [ 127.842314] ? mark_held_locks+0x49/0x80 [ 127.842676] handle_softirqs+0x1b1/0x770 [ 127.843025] ? unix_release_sock+0x4df/0x13c0 [ 127.843402] do_softirq+0x48/0x80 [ 127.843711] [ 127.843903] [ 127.844091] __local_bh_enable_ip+0xf1/0x110 [ 127.844461] unix_release_sock+0x4df/0x13c0 [ 127.844822] ? __pfx_unix_release_sock+0x10/0x10 [ 127.845209] ? down_write+0x119/0x1f0 [ 127.845538] ? __pfx_down_write+0x10/0x10 [ 127.845878] unix_release+0x91/0xf0 [ 127.846188] __sock_release+0xb3/0x270 [ 127.846541] ? __pfx_sock_close+0x10/0x10 [ 127.846883] sock_close+0x1c/0x30 [ 127.847183] __fput+0x401/0xb50 [ 127.847503] ? lock_release+0xc8/0x290 [ 127.847825] delayed_fput+0x72/0x90 [ 127.848126] process_one_work+0x8e1/0x19c0 [ 127.848498] ? __pfx_process_one_work+0x10/0x10 [ 127.848893] ? move_linked_works+0x172/0x270 [ 127.849259] ? assign_work+0x196/0x240 [ 127.849603] worker_thread+0x67e/0xe90 [ 127.849926] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 127.850352] ? __pfx_worker_thread+0x10/0x10 [ 127.850733] kthread+0x3c8/0x740 [ 127.851014] ? __pfx_kthread+0x10/0x10 [ 127.851329] ? ret_from_fork+0x23/0x430 [ 127.851678] ? lock_release+0xc8/0x290 [ 127.851999] ? __pfx_kthread+0x10/0x10 [ 127.852317] ret_from_fork+0x34b/0x430 [ 127.852670] ? __pfx_kthread+0x10/0x10 [ 127.852991] ret_from_fork_asm+0x1a/0x30 [ 127.853333] [ 127.853541] irq event stamp: 4462 [ 127.853817] hardirqs last enabled at (4470): [] __up_console_sem+0x78/0x80 [ 127.854514] hardirqs last disabled at (4479): [] __up_console_sem+0x5d/0x80 [ 127.855191] softirqs last enabled at (3766): [] unix_release_sock+0x4df/0x13c0 [ 127.855913] softirqs last disabled at (3767): [] do_softirq+0x48/0x80 [ 127.856564] ---[ end trace 0000000000000000 ]--- [ 127.856963] percpu_ref_switch_to_atomic_rcu: percpu_ref_switch_to_atomic_rcu(): percpu_ref underflow slab kmalloc-64 start ffff888046514400 pointer offset 0 size 64 VM DIAGNOSIS: 10:50:18 Registers: info registers vcpu 0 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff88806ce08648 R8 =0000000000000000 R9 =ffffed10016d6046 R10=000000000000005b R11=0000000000000001 R12=000000000000005b R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0 RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd5f2d1c28 CR3=0000000046102000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000002259a RBX=1ffff110033eadc7 RCX=ffffc90005835000 RDX=0000000000040000 RSI=ffffffff8154bead RDI=0000000000000001 RBP=0000000000000001 RSP=ffff888019f56e30 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=000000000000002a R13=0000000000000200 R14=ffff88801b05d280 R15=ffff888019f56ef0 RIP=ffffffff8154beaf RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7de58e8700 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f670d5ce000 CR3=0000000009c18000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000000000000ffffffff XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007f7de84597c800007f7de84597c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000