Debian GNU/Linux 11 syzkaller ttyS0
Warning: Permanently added '[localhost]:44766' (ECDSA) to the list of known hosts.
2025/08/29 08:37:33 fuzzer started
2025/08/29 08:37:34 dialing manager at localhost:43077
syzkaller login: [ 49.736376] cgroup: Unknown subsys name 'net'
[ 49.815583] cgroup: Unknown subsys name 'cpuset'
[ 49.831737] cgroup: Unknown subsys name 'rlimit'
2025/08/29 08:37:44 syscalls: 2214
2025/08/29 08:37:44 code coverage: enabled
2025/08/29 08:37:44 comparison tracing: enabled
2025/08/29 08:37:44 extra coverage: enabled
2025/08/29 08:37:44 setuid sandbox: enabled
2025/08/29 08:37:44 namespace sandbox: enabled
2025/08/29 08:37:44 Android sandbox: enabled
2025/08/29 08:37:44 fault injection: enabled
2025/08/29 08:37:44 leak checking: enabled
2025/08/29 08:37:44 net packet injection: enabled
2025/08/29 08:37:44 net device setup: enabled
2025/08/29 08:37:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/29 08:37:44 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/29 08:37:44 USB emulation: enabled
2025/08/29 08:37:44 hci packet injection: enabled
2025/08/29 08:37:44 wifi device emulation: enabled
2025/08/29 08:37:44 802.15.4 emulation: enabled
2025/08/29 08:37:44 fetching corpus: 0, signal 0/2000 (executing program)
2025/08/29 08:37:44 fetching corpus: 50, signal 23498/26606 (executing program)
2025/08/29 08:37:44 fetching corpus: 100, signal 33169/37285 (executing program)
2025/08/29 08:37:44 fetching corpus: 150, signal 42123/47036 (executing program)
2025/08/29 08:37:44 fetching corpus: 200, signal 47579/53235 (executing program)
2025/08/29 08:37:45 fetching corpus: 250, signal 53725/59840 (executing program)
2025/08/29 08:37:45 fetching corpus: 300, signal 60579/66842 (executing program)
2025/08/29 08:37:45 fetching corpus: 350, signal 65240/71637 (executing program)
2025/08/29 08:37:45 fetching corpus: 400, signal 68195/74865 (executing program)
2025/08/29 08:37:45 fetching corpus: 450, signal 71444/78252 (executing program)
2025/08/29 08:37:45 fetching corpus: 500, signal 75036/81777 (executing program)
2025/08/29 08:37:45 fetching corpus: 550, signal 77922/84678 (executing program)
2025/08/29 08:37:46 fetching corpus: 600, signal 80974/87529 (executing program)
2025/08/29 08:37:46 fetching corpus: 650, signal 84360/90579 (executing program)
2025/08/29 08:37:46 fetching corpus: 700, signal 86145/92298 (executing program)
2025/08/29 08:37:46 fetching corpus: 750, signal 88073/94103 (executing program)
2025/08/29 08:37:46 fetching corpus: 800, signal 90004/95740 (executing program)
2025/08/29 08:37:46 fetching corpus: 850, signal 92150/97570 (executing program)
2025/08/29 08:37:46 fetching corpus: 900, signal 93807/98939 (executing program)
2025/08/29 08:37:46 fetching corpus: 950, signal 95207/100075 (executing program)
2025/08/29 08:37:47 fetching corpus: 1000, signal 96724/101234 (executing program)
2025/08/29 08:37:47 fetching corpus: 1050, signal 97713/102044 (executing program)
2025/08/29 08:37:47 fetching corpus: 1100, signal 99375/103177 (executing program)
2025/08/29 08:37:47 fetching corpus: 1150, signal 100167/103801 (executing program)
2025/08/29 08:37:47 fetching corpus: 1200, signal 101828/104865 (executing program)
2025/08/29 08:37:47 fetching corpus: 1250, signal 102777/105452 (executing program)
2025/08/29 08:37:47 fetching corpus: 1300, signal 104213/106261 (executing program)
2025/08/29 08:37:48 fetching corpus: 1350, signal 106090/107227 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/107295 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/107338 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/107377 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/107411 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/107458 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/107488 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/107526 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/107567 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/107616 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/107657 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/107709 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/107748 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/107789 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/107821 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/107867 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/107908 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/107951 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/107993 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/108040 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/108080 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/108121 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/108165 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/108212 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/108252 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/108274 (executing program)
2025/08/29 08:37:48 fetching corpus: 1352, signal 106109/108274 (executing program)
2025/08/29 08:37:50 starting 8 fuzzer processes
08:37:50 executing program 0:
signalfd(0xffffffffffffffff, &(0x7f00000033c0)={[0x3]}, 0x8)
r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00')
pread64(r0, &(0x7f0000000100)=""/147, 0x93, 0x0)
08:37:50 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x600, 0x0, 0x0, 0x0, @empty, @broadcast}}}}}, 0x0)
08:37:50 executing program 2:
r0 = memfd_create(&(0x7f0000000040)='*!\x00', 0x0)
ftruncate(r0, 0xdc06)
r1 = eventfd2(0x0, 0x0)
sendfile(r1, r0, 0x0, 0x80)
08:37:50 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f80100200040000300000000000000800029c98f6af153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x600}, {&(0x7f0000010400)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x800}, {&(0x7f0000010500)="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", 0x120, 0xa00}, {&(0x7f0000010700)="2e2020202020202020202010005fe970325132510000e97032510300000000002e2e20202020202020202010005fe970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200060e970325132510000e970325104001a040000", 0x80, 0x11200}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x21200}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x31200}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x51200}], 0x0, &(0x7f0000010f00))
08:37:50 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x38, 0x0, 0x0)
08:37:50 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{}]})
08:37:50 executing program 6:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x40e5, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r2 = fcntl$dupfd(r1, 0x0, r0)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x17, &(0x7f0000001480)=[{0x0, 0x200000000000000}], 0x1)
08:37:50 executing program 7:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCGARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @private}, {}, 0x2c, {0x2, 0x0, @empty}})
[ 66.185512] audit: type=1400 audit(1756456670.658:7): avc: denied { execmem } for pid=273 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[ 67.425009] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 67.427142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 67.429368] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 67.431491] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 67.433486] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 67.439488] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 67.443498] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 67.445436] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 67.447331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 67.447770] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 67.448673] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 67.455568] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 67.456442] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 67.458702] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 67.462510] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 67.462706] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 67.468434] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 67.471273] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 67.476647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 67.477820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 67.506547] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 67.508151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 67.523156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 67.524493] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 67.527064] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 67.529441] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 67.536781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 67.538119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 67.539147] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 67.542374] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 67.547801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 67.549857] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 67.557816] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 67.563225] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 67.573058] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 67.577310] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 67.583215] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 67.592340] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 67.597827] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 67.599796] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 69.500475] Bluetooth: hci1: command tx timeout
[ 69.563004] Bluetooth: hci4: command tx timeout
[ 69.563492] Bluetooth: hci0: command tx timeout
[ 69.564159] Bluetooth: hci3: command tx timeout
[ 69.564274] Bluetooth: hci2: command tx timeout
[ 69.627084] Bluetooth: hci5: command tx timeout
[ 69.628147] Bluetooth: hci6: command tx timeout
[ 69.691155] Bluetooth: hci7: command tx timeout
[ 71.546999] Bluetooth: hci1: command tx timeout
[ 71.611415] Bluetooth: hci2: command tx timeout
[ 71.611769] Bluetooth: hci0: command tx timeout
[ 71.611847] Bluetooth: hci3: command tx timeout
[ 71.613357] Bluetooth: hci4: command tx timeout
[ 71.675224] Bluetooth: hci5: command tx timeout
[ 71.676248] Bluetooth: hci6: command tx timeout
[ 71.739930] Bluetooth: hci7: command tx timeout
[ 73.595942] Bluetooth: hci1: command tx timeout
[ 73.659086] Bluetooth: hci4: command tx timeout
[ 73.660186] Bluetooth: hci3: command tx timeout
[ 73.660614] Bluetooth: hci2: command tx timeout
[ 73.661103] Bluetooth: hci0: command tx timeout
[ 73.723118] Bluetooth: hci6: command tx timeout
[ 73.723610] Bluetooth: hci5: command tx timeout
[ 73.786943] Bluetooth: hci7: command tx timeout
[ 75.644970] Bluetooth: hci1: command tx timeout
[ 75.708936] Bluetooth: hci3: command tx timeout
[ 75.709386] Bluetooth: hci4: command tx timeout
[ 75.709769] Bluetooth: hci2: command tx timeout
[ 75.710210] Bluetooth: hci0: command tx timeout
[ 75.772183] Bluetooth: hci5: command tx timeout
[ 75.772611] Bluetooth: hci6: command tx timeout
[ 75.834932] Bluetooth: hci7: command tx timeout
[ 103.992768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.993459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.192737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.193510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:38:29 executing program 2:
r0 = memfd_create(&(0x7f0000000040)='*!\x00', 0x0)
ftruncate(r0, 0xdc06)
r1 = eventfd2(0x0, 0x0)
sendfile(r1, r0, 0x0, 0x80)
08:38:29 executing program 2:
r0 = memfd_create(&(0x7f0000000040)='*!\x00', 0x0)
ftruncate(r0, 0xdc06)
r1 = eventfd2(0x0, 0x0)
sendfile(r1, r0, 0x0, 0x80)
08:38:29 executing program 2:
r0 = memfd_create(&(0x7f0000000040)='*!\x00', 0x0)
ftruncate(r0, 0xdc06)
r1 = eventfd2(0x0, 0x0)
sendfile(r1, r0, 0x0, 0x80)
08:38:29 executing program 2:
r0 = memfd_create(&(0x7f0000000040)='*!\x00', 0x0)
ftruncate(r0, 0xdc06)
r1 = eventfd2(0x0, 0x0)
sendfile(r1, r0, 0x0, 0x80)
[ 105.029572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.030359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:38:29 executing program 2:
r0 = memfd_create(&(0x7f0000000040)='*!\x00', 0x0)
ftruncate(r0, 0xdc06)
r1 = eventfd2(0x0, 0x0)
sendfile(r1, r0, 0x0, 0x80)
[ 105.118485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.119405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:38:29 executing program 2:
r0 = memfd_create(&(0x7f0000000040)='*!\x00', 0x0)
ftruncate(r0, 0xdc06)
r1 = eventfd2(0x0, 0x0)
sendfile(r1, r0, 0x0, 0x80)
08:38:29 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736676209600088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736676209600088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="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", 0x120, 0x11000}, {&(0x7f0000010800)="2e202020202020202020201000b4ea70325132510000ea7032510300000000002e2e2020202020202020201000b4ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000b4ea70325132510000ea70325104001a040000", 0x80, 0x51000}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x91000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0xd1000}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x151000}], 0x0, &(0x7f0000011000))
[ 105.396614] loop2: detected capacity change from 0 to 5392
[ 105.467100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.467728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.500993] audit: type=1400 audit(1756456709.972:8): avc: denied { open } for pid=3860 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 105.509013] audit: type=1400 audit(1756456709.972:9): avc: denied { kernel } for pid=3860 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
08:38:30 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736676209600088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736676209600088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="53595a4b414c4c45522020080000ea80325132510000ea80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020201000b4ea70325132510000ea70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c45312020202020202000b4ea70325132510000ea70325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c45322020202020202000b4ea70325132510000ea70325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c2000b4ea70325132510000ea703251070064000000", 0x120, 0x11000}, {&(0x7f0000010800)="2e202020202020202020201000b4ea70325132510000ea7032510300000000002e2e2020202020202020201000b4ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000b4ea70325132510000ea70325104001a040000", 0x80, 0x51000}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x91000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0xd1000}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x151000}], 0x0, &(0x7f0000011000))
[ 105.592088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.592711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.619524] loop2: detected capacity change from 0 to 5392
[ 105.648600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.649277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.794829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.795473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.887199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.887821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.967431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.968331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.094140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.094764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.220827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.221664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.240337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.240991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.286652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.287849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.329772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.330672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.444852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.445484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.541519] loop4: detected capacity change from 0 to 1298
08:38:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f80100200040000300000000000000800029c98f6af153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x600}, {&(0x7f0000010400)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x800}, {&(0x7f0000010500)="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", 0x120, 0xa00}, {&(0x7f0000010700)="2e2020202020202020202010005fe970325132510000e97032510300000000002e2e20202020202020202010005fe970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200060e970325132510000e970325104001a040000", 0x80, 0x11200}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x21200}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x31200}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x51200}], 0x0, &(0x7f0000010f00))
08:38:31 executing program 7:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCGARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @private}, {}, 0x2c, {0x2, 0x0, @empty}})
08:38:31 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x38, 0x0, 0x0)
08:38:31 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x600, 0x0, 0x0, 0x0, @empty, @broadcast}}}}}, 0x0)
08:38:31 executing program 0:
signalfd(0xffffffffffffffff, &(0x7f00000033c0)={[0x3]}, 0x8)
r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00')
pread64(r0, &(0x7f0000000100)=""/147, 0x93, 0x0)
08:38:31 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = add_key(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="d8", 0x1, 0xffffffffffffffff)
keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
08:38:31 executing program 6:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x40e5, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r2 = fcntl$dupfd(r1, 0x0, r0)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x17, &(0x7f0000001480)=[{0x0, 0x200000000000000}], 0x1)
08:38:31 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736676209600088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736676209600088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="53595a4b414c4c45522020080000ea80325132510000ea80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020201000b4ea70325132510000ea70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c45312020202020202000b4ea70325132510000ea70325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c45322020202020202000b4ea70325132510000ea70325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c2000b4ea70325132510000ea703251070064000000", 0x120, 0x11000}, {&(0x7f0000010800)="2e202020202020202020201000b4ea70325132510000ea7032510300000000002e2e2020202020202020201000b4ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000b4ea70325132510000ea70325104001a040000", 0x80, 0x51000}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x91000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0xd1000}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x151000}], 0x0, &(0x7f0000011000))
[ 106.642568] loop2: detected capacity change from 0 to 5392
[ 106.655554] loop4: detected capacity change from 0 to 1298
08:38:31 executing program 0:
signalfd(0xffffffffffffffff, &(0x7f00000033c0)={[0x3]}, 0x8)
r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00')
pread64(r0, &(0x7f0000000100)=""/147, 0x93, 0x0)
08:38:31 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x600, 0x0, 0x0, 0x0, @empty, @broadcast}}}}}, 0x0)
08:38:31 executing program 7:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCGARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @private}, {}, 0x2c, {0x2, 0x0, @empty}})
08:38:31 executing program 0:
signalfd(0xffffffffffffffff, &(0x7f00000033c0)={[0x3]}, 0x8)
r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00')
pread64(r0, &(0x7f0000000100)=""/147, 0x93, 0x0)
08:38:31 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x38, 0x0, 0x0)
08:38:31 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736676209600088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736676209600088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="53595a4b414c4c45522020080000ea80325132510000ea80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020201000b4ea70325132510000ea70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c45312020202020202000b4ea70325132510000ea70325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c45322020202020202000b4ea70325132510000ea70325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c2000b4ea70325132510000ea703251070064000000", 0x120, 0x11000}, {&(0x7f0000010800)="2e202020202020202020201000b4ea70325132510000ea7032510300000000002e2e2020202020202020201000b4ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000b4ea70325132510000ea70325104001a040000", 0x80, 0x51000}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x91000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0xd1000}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x151000}], 0x0, &(0x7f0000011000))
08:38:31 executing program 6:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x40e5, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r2 = fcntl$dupfd(r1, 0x0, r0)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x17, &(0x7f0000001480)=[{0x0, 0x200000000000000}], 0x1)
08:38:31 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = add_key(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="d8", 0x1, 0xffffffffffffffff)
keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
08:38:31 executing program 7:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCGARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @private}, {}, 0x2c, {0x2, 0x0, @empty}})
08:38:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f80100200040000300000000000000800029c98f6af153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x600}, {&(0x7f0000010400)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x800}, {&(0x7f0000010500)="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", 0x120, 0xa00}, {&(0x7f0000010700)="2e2020202020202020202010005fe970325132510000e97032510300000000002e2e20202020202020202010005fe970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200060e970325132510000e970325104001a040000", 0x80, 0x11200}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x21200}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x31200}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x51200}], 0x0, &(0x7f0000010f00))
08:38:31 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x600, 0x0, 0x0, 0x0, @empty, @broadcast}}}}}, 0x0)
[ 106.873694] loop4: detected capacity change from 0 to 1298
[ 106.874465] loop2: detected capacity change from 0 to 5392
[ 106.890111] kmemleak: Found object by alias at 0x607f1a6394bc
[ 106.890129] CPU: 0 UID: 0 PID: 3945 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 106.890147] Tainted: [W]=WARN
[ 106.890151] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 106.890158] Call Trace:
[ 106.890162]
[ 106.890167] dump_stack_lvl+0xca/0x120
[ 106.890192] __lookup_object+0x94/0xb0
[ 106.890209] delete_object_full+0x27/0x70
[ 106.890225] free_percpu+0x30/0x1160
[ 106.890242] ? arch_uprobe_clear_state+0x16/0x140
[ 106.890262] futex_hash_free+0x38/0xc0
[ 106.890276] mmput+0x2d3/0x390
[ 106.890295] do_exit+0x79d/0x2970
[ 106.890309] ? signal_wake_up_state+0x85/0x120
[ 106.890325] ? zap_other_threads+0x2b9/0x3a0
[ 106.890340] ? __pfx_do_exit+0x10/0x10
[ 106.890353] ? do_group_exit+0x1c3/0x2a0
[ 106.890366] ? lock_release+0xc8/0x290
[ 106.890383] do_group_exit+0xd3/0x2a0
[ 106.890398] __x64_sys_exit_group+0x3e/0x50
[ 106.890411] x64_sys_call+0x18c5/0x18d0
[ 106.890426] do_syscall_64+0xbf/0x360
[ 106.890439] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.890450] RIP: 0033:0x7fd4ba256b19
[ 106.890458] Code: Unable to access opcode bytes at 0x7fd4ba256aef.
[ 106.890463] RSP: 002b:00007ffeb0523418 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 106.890475] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fd4ba256b19
[ 106.890482] RDX: 00007fd4ba20972b RSI: ffffffffffffffbc RDI: 0000000000000000
[ 106.890489] RBP: 0000000000000000 R08: 0000001b2d4214cc R09: 0000000000000000
[ 106.890496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 106.890502] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffeb0523500
[ 106.890518]
[ 106.890521] kmemleak: Object (percpu) 0x607f1a6394b8 (size 8):
[ 106.890528] kmemleak: comm "systemd-udevd", pid 3719, jiffies 4294773544
[ 106.890535] kmemleak: min_count = 1
[ 106.890539] kmemleak: count = 0
[ 106.890542] kmemleak: flags = 0x21
[ 106.890546] kmemleak: checksum = 0
[ 106.890549] kmemleak: backtrace:
[ 106.890553] pcpu_alloc_noprof+0x87a/0x1170
[ 106.890568] percpu_ref_init+0x37/0x400
[ 106.890586] blkg_alloc+0xe9/0x7d0
[ 106.890598] blkg_create+0xe08/0x1420
[ 106.890609] bio_associate_blkg_from_css+0xe06/0x1380
[ 106.890622] bio_associate_blkg+0x10e/0x2a0
[ 106.890635] bio_init+0x2dd/0x570
[ 106.890647] bio_alloc_bioset+0x2cf/0x8c0
[ 106.890661] do_mpage_readpage.isra.0+0xc9c/0x15e0
[ 106.890675] mpage_readahead+0x31e/0x550
[ 106.890687] read_pages+0x196/0xb10
[ 106.890701] page_cache_ra_unbounded+0x391/0x6a0
[ 106.890714] force_page_cache_ra+0x253/0x370
[ 106.890727] page_cache_sync_ra+0x104/0xaa0
[ 106.890740] filemap_get_pages+0x354/0x18e0
[ 106.890750] filemap_read+0x388/0xcf0
08:38:31 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = add_key(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="d8", 0x1, 0xffffffffffffffff)
keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
08:38:31 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0)
08:38:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f80100200040000300000000000000800029c98f6af153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x600}, {&(0x7f0000010400)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x800}, {&(0x7f0000010500)="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", 0x120, 0xa00}, {&(0x7f0000010700)="2e2020202020202020202010005fe970325132510000e97032510300000000002e2e20202020202020202010005fe970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200060e970325132510000e970325104001a040000", 0x80, 0x11200}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x21200}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x31200}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x51200}], 0x0, &(0x7f0000010f00))
08:38:31 executing program 6:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x40e5, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r2 = fcntl$dupfd(r1, 0x0, r0)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x17, &(0x7f0000001480)=[{0x0, 0x200000000000000}], 0x1)
08:38:31 executing program 2:
setgid(0x0)
08:38:31 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROMREADTOCENTRY(r0, 0x125d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, @lba})
08:38:31 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x38, 0x0, 0x0)
08:38:31 executing program 7:
r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000400)='dns_resolver\x00', 0x0, &(0x7f0000000480)="0080", 0x2, r0)
[ 107.146415] loop4: detected capacity change from 0 to 1298
08:38:31 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = add_key(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="d8", 0x1, 0xffffffffffffffff)
keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
08:38:31 executing program 7:
r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000400)='dns_resolver\x00', 0x0, &(0x7f0000000480)="0080", 0x2, r0)
[ 107.230574] ------------[ cut here ]------------
[ 107.231273] WARNING: fs/namespace.c:1434 at mntput_no_expire+0x78e/0xbe0, CPU#1: syz-executor.4/287
[ 107.232083] Modules linked in:
[ 107.232402] CPU: 1 UID: 0 PID: 287 Comm: syz-executor.4 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 107.235012] Tainted: [W]=WARN
[ 107.235755] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 107.238230] RIP: 0010:mntput_no_expire+0x78e/0xbe0
[ 107.239598] Code: 05 16 42 81 04 01 e8 31 f8 91 ff e9 41 fc ff ff e8 b7 50 b4 ff 31 ff 44 89 ee e8 dd 4b b4 ff 45 85 ed 79 09 e8 a3 50 b4 ff 90 <0f> 0b 90 e8 9a 50 b4 ff e8 75 f6 fb 02 31 ff 89 c5 89 c6 e8 ba 4b
[ 107.241777] RSP: 0018:ffff8880188bfc00 EFLAGS: 00010293
[ 107.242238] RAX: 0000000000000000 RBX: 1ffff11003117f85 RCX: ffffffff81bf96d3
[ 107.242824] RDX: ffff88801606b700 RSI: ffffffff81bf96dd RDI: 0000000000000005
[ 107.243440] RBP: ffff8880171be380 R08: 0000000000000001 R09: 0000000000000000
[ 107.244049] R10: 00000000ffffffff R11: 0000000000000001 R12: ffff8880188bfc68
[ 107.244648] R13: 00000000ffffffff R14: dead000000000100 R15: ffff8880171be380
[ 107.245270] FS: 0000555565b0d400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[ 107.245971] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 107.246479] CR2: 00007f504b03a3a4 CR3: 00000000418c3000 CR4: 0000000000350ef0
[ 107.247090] Call Trace:
[ 107.247315]
[ 107.247510] ? find_held_lock+0x2b/0x80
[ 107.247852] ? __pfx_mntput_no_expire+0x10/0x10
[ 107.248263] ? __pfx_wait_rcu_exp_gp+0x10/0x10
[ 107.248664] ? shrink_dentry_list+0x1a/0x650
[ 107.249057] ? up_write+0x195/0x520
[ 107.249381] namespace_unlock+0x7f1/0x810
[ 107.249741] ? __pfx_namespace_unlock+0x10/0x10
[ 107.250157] ? find_held_lock+0x2b/0x80
[ 107.250501] ? lock_release+0xc8/0x290
[ 107.250843] path_umount+0x6a4/0x1100
[ 107.251215] ? kmem_cache_free+0x2a1/0x540
[ 107.251566] ? __pfx_path_umount+0x10/0x10
[ 107.251946] ? putname.part.0+0x11b/0x160
[ 107.252305] __x64_sys_umount+0x15c/0x190
[ 107.252645] ? __pfx___x64_sys_umount+0x10/0x10
[ 107.253048] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 107.253499] do_syscall_64+0xbf/0x360
[ 107.253825] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.254269] RIP: 0033:0x7f1f95a9ff87
[ 107.254581] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 107.256114] RSP: 002b:00007ffe980de478 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 107.256754] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f1f95a9ff87
[ 107.257388] RDX: 00007ffe980de549 RSI: 000000000000000a RDI: 00007ffe980de540
[ 107.258012] RBP: 00007ffe980de540 R08: 00000000ffffffff R09: 00007ffe980de310
[ 107.258593] R10: 0000555565b0ec7b R11: 0000000000000246 R12: 00007f1f95af8105
[ 107.259206] R13: 00007ffe980df600 R14: 0000555565b0ec20 R15: 00007ffe980df640
[ 107.259818]
[ 107.260036] irq event stamp: 174673
[ 107.260341] hardirqs last enabled at (174681): [] __up_console_sem+0x78/0x80
[ 107.261097] hardirqs last disabled at (174690): [] __up_console_sem+0x5d/0x80
[ 107.261834] softirqs last enabled at (174600): [] handle_softirqs+0x50c/0x770
[ 107.262611] softirqs last disabled at (174595): [] __irq_exit_rcu+0xc4/0x100
[ 107.263355] ---[ end trace 0000000000000000 ]---
[ 107.273495] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#1] SMP KASAN NOPTI
[ 107.274411] KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f]
[ 107.275103] CPU: 1 UID: 0 PID: 283 Comm: syz-executor.7 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 107.276040] Tainted: [W]=WARN
[ 107.276294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 107.276946] RIP: 0010:perf_tp_event+0x175/0xe70
[ 107.277329] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 107.278765] RSP: 0018:ffff8880173bf080 EFLAGS: 00010213
[ 107.279188] RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002
[ 107.279754] RDX: ffff88801729b700 RSI: ffffffff818995b7 RDI: 000000010000018f
[ 107.280313] RBP: ffff8880173bf2f0 R08: ffff88806cf31340 R09: ffffe8ffffd164b8
[ 107.280876] R10: 0000000000000000 R11: 0000000000006cee R12: dffffc0000000000
[ 107.281437] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[ 107.282005] FS: 0000555566f49400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[ 107.282638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 107.283100] CR2: 0000555560f09708 CR3: 000000003b48b000 CR4: 0000000000350ef0
[ 107.283660] Call Trace:
[ 107.283871]
[ 107.284065] ? __pfx_perf_tp_event+0x10/0x10
[ 107.284422] ? unwind_get_return_address+0x59/0xa0
[ 107.284830] ? __lock_acquire+0x694/0x1b70
[ 107.285174] ? __lock_acquire+0x694/0x1b70
[ 107.285531] ? lock_acquire+0x15e/0x2f0
[ 107.285854] ? __is_insn_slot_addr+0x2e/0x290
[ 107.286221] ? find_held_lock+0x2b/0x80
[ 107.286546] ? __is_insn_slot_addr+0x136/0x290
[ 107.286919] ? lock_release+0xc8/0x290
[ 107.287244] ? perf_trace_run_bpf_submit+0xef/0x180
[ 107.287645] ? kernel_text_address+0x5b/0xc0
[ 107.288005] perf_trace_run_bpf_submit+0xef/0x180
[ 107.288401] perf_trace_lock+0x337/0x5d0
[ 107.288737] ? __pfx_perf_trace_lock+0x10/0x10
[ 107.289112] ? unwind_next_frame+0x3b2/0x2540
[ 107.289478] ? lock_release+0x172/0x290
[ 107.289807] ? unwind_next_frame+0x3b2/0x2540
[ 107.290175] lock_release+0x1ab/0x290
[ 107.290492] unwind_next_frame+0x3b7/0x2540
[ 107.290844] ? __unwind_start+0x592/0x7c0
[ 107.291184] ? get_stack_info_noinstr+0x16/0xf0
[ 107.291568] __unwind_start+0x517/0x7c0
[ 107.291894] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 107.292329] arch_stack_walk+0x62/0xf0
[ 107.292651] ? arch_stack_walk+0x62/0xf0
[ 107.292981] stack_trace_save+0x8e/0xc0
[ 107.293306] ? __pfx_stack_trace_save+0x10/0x10
[ 107.293688] ? lock_is_held_type+0x9e/0x120
[ 107.294046] kasan_save_stack+0x24/0x50
[ 107.294369] ? copy_page_range+0x57b/0x5140
[ 107.294741] ? __lock_acquire+0x694/0x1b70
[ 107.295092] ? lock_acquire+0x15e/0x2f0
[ 107.295414] ? kmem_cache_alloc_noprof+0xdb/0x690
[ 107.295800] ? find_held_lock+0x2b/0x80
[ 107.296126] ? kmem_cache_alloc_noprof+0x191/0x690
[ 107.296521] kasan_save_track+0x14/0x30
[ 107.296842] __kasan_slab_alloc+0x59/0x70
[ 107.297180] kmem_cache_alloc_noprof+0x205/0x690
[ 107.297571] ? find_held_lock+0x2b/0x80
[ 107.297903] ? vm_area_dup+0x25/0x6f0
[ 107.298211] vm_area_dup+0x25/0x6f0
[ 107.298512] dup_mmap+0x80d/0x1d10
[ 107.298816] ? __pfx_dup_mmap+0x10/0x10
[ 107.299154] ? lock_is_held_type+0x9e/0x120
[ 107.299512] copy_process+0x3ad5/0x73c0
[ 107.299848] ? __pfx_copy_process+0x10/0x10
[ 107.300200] ? do_raw_spin_lock+0x123/0x260
[ 107.300556] kernel_clone+0xea/0x7f0
[ 107.300863] ? __pfx_kernel_clone+0x10/0x10
[ 107.301211] ? __lock_acquire+0x694/0x1b70
[ 107.301561] ? css_rstat_updated+0x1b8/0x4d0
[ 107.301923] ? __pfx_css_rstat_updated+0x10/0x10
[ 107.302313] __do_sys_clone+0xce/0x120
[ 107.302627] ? __pfx___do_sys_clone+0x10/0x10
[ 107.302986] ? find_held_lock+0x2b/0x80
[ 107.303329] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 107.303754] do_syscall_64+0xbf/0x360
[ 107.304061] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.304472] RIP: 0033:0x7f5049fec10b
[ 107.304771] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
[ 107.306200] RSP: 002b:00007fffae2a3410 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 107.306799] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5049fec10b
[ 107.307361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 107.307924] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555566f49400
[ 107.308486] R10: 0000555566f496d0 R11: 0000000000000246 R12: 0000000000000001
[ 107.309049] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffae2a34f0
[ 107.309631]
[ 107.309824] Modules linked in:
[ 107.310091] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI
[ 107.311723] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[ 107.312983] CPU: 0 UID: 0 PID: 3975 Comm: syz-executor.1 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 107.314715] Tainted: [D]=DIE, [W]=WARN
[ 107.315278] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 107.316479] RIP: 0010:perf_tp_event+0x175/0xe70
[ 107.317184] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 107.319818] RSP: 0018:ffff888044f4f340 EFLAGS: 00010212
[ 107.320590] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc900069da000
[ 107.321634] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190
[ 107.322684] RBP: ffff888044f4f5b0 R08: ffff88806ce31340 R09: ffffe8ffffc164b8
[ 107.323716] R10: 0000000000000000 R11: 2963736564747028 R12: dffffc0000000000
[ 107.324754] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[ 107.325821] FS: 00007fe007761700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 107.326989] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 107.327839] CR2: 0000001b2d025000 CR3: 0000000041dbb000 CR4: 0000000000350ef0
[ 107.328865] Call Trace:
[ 107.329252]
[ 107.329630] ? __pfx_perf_tp_event+0x10/0x10
[ 107.330303] ? __lock_acquire+0xc65/0x1b70
[ 107.330957] ? do_raw_spin_lock+0x123/0x260
[ 107.331606] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 107.332320] ? __lock_acquire+0xc65/0x1b70
[ 107.332960] ? perf_trace_run_bpf_submit+0xef/0x180
[ 107.333708] perf_trace_run_bpf_submit+0xef/0x180
[ 107.334439] perf_trace_lock+0x337/0x5d0
[ 107.335067] ? __pfx_perf_trace_lock+0x10/0x10
[ 107.335756] ? lock_release+0x172/0x290
[ 107.336350] ? __text_poke+0x407/0x860
[ 107.336935] lock_release+0x1ab/0x290
[ 107.337501] ? lock_release+0x26/0x290
[ 107.338107] _raw_spin_unlock+0x16/0x40
[ 107.338722] __text_poke+0x407/0x860
[ 107.339276] ? __pfx_text_poke_memcpy+0x10/0x10
[ 107.339982] ? __pfx___text_poke+0x10/0x10
[ 107.340614] ? lock_is_held_type+0x9e/0x120
[ 107.341275] ? lock_release+0x26/0x290
[ 107.341872] ? lock_release+0x26/0x290
[ 107.342455] smp_text_poke_batch_finish+0x326/0xb50
[ 107.343201] ? __pfx___mutex_lock+0x10/0x10
[ 107.343849] ? lock_release+0x26/0x290
[ 107.344433] ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[ 107.345249] ? arch_jump_label_transform_queue+0xbd/0x110
[ 107.346073] ? __jump_label_update+0x29a/0x410
[ 107.346781] arch_jump_label_transform_apply+0x1c/0x30
[ 107.347564] jump_label_update+0x376/0x550
[ 107.348205] ? __pfx_perf_trace_lock+0x10/0x10
[ 107.348897] static_key_enable_cpuslocked+0x1b7/0x270
[ 107.349679] static_key_enable+0x1a/0x20
[ 107.350286] tracepoint_add_func+0xaf2/0xec0
[ 107.350964] ? __pfx_perf_trace_lock+0x10/0x10
[ 107.351648] tracepoint_probe_register+0xa4/0xf0
[ 107.352351] ? __pfx_tracepoint_probe_register+0x10/0x10
[ 107.353150] ? pcpu_obj_full_size+0x3c/0x90
[ 107.353802] ? __pfx_perf_trace_lock+0x10/0x10
[ 107.354477] ? pcpu_alloc_noprof+0x12d/0x1170
[ 107.355158] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 107.355936] trace_event_reg+0x297/0x350
[ 107.356557] perf_trace_event_init+0x511/0xa10
[ 107.357258] perf_trace_init+0x1a4/0x2f0
[ 107.357881] perf_tp_event_init+0xa6/0x120
[ 107.358519] perf_try_init_event+0x140/0x9f0
[ 107.359185] perf_event_alloc.part.0+0x118e/0x45f0
[ 107.359921] ? perf_event_alloc.part.0+0x1074/0x45f0
[ 107.360684] ? __fget_files+0x203/0x3b0
[ 107.361291] ? __pfx_perf_event_alloc.part.0+0x10/0x10
[ 107.362083] ? find_held_lock+0x2b/0x80
[ 107.362686] ? __do_sys_perf_event_open+0x11df/0x2c20
[ 107.363467] __do_sys_perf_event_open+0x719/0x2c20
[ 107.364201] ? __pfx_do_futex+0x10/0x10
[ 107.364793] ? down_read_trylock+0x30d/0x3d0
[ 107.365449] ? __pfx___do_sys_perf_event_open+0x10/0x10
[ 107.366235] ? find_held_lock+0x2b/0x80
[ 107.366851] ? selinux_file_ioctl+0xb9/0x280
[ 107.367517] ? xfd_validate_state+0x55/0x180
[ 107.368199] do_syscall_64+0xbf/0x360
[ 107.368767] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.369535] RIP: 0033:0x7fe00a1ebb19
[ 107.370084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 107.372700] RSP: 002b:00007fe007761188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[ 107.373804] RAX: ffffffffffffffda RBX: 00007fe00a2fef60 RCX: 00007fe00a1ebb19
[ 107.374848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000340
[ 107.375887] RBP: 00007fe00a245f6d R08: 0000000000000000 R09: 0000000000000000
[ 107.376924] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 107.377957] R13: 00007ffd36e61e9f R14: 00007fe007761300 R15: 0000000000022000
[ 107.379030]
[ 107.379384] Modules linked in:
[ 107.379872] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#3] SMP KASAN NOPTI
[ 107.380748] KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f]
[ 107.381434] CPU: 1 UID: 0 PID: 283 Comm: syz-executor.7 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 107.382373] Tainted: [D]=DIE, [W]=WARN
[ 107.382678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 107.383325] RIP: 0010:perf_tp_event+0x175/0xe70
[ 107.383706] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 107.385133] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010013
[ 107.385563] RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002
[ 107.386125] RDX: ffff88801729b700 RSI: ffffffff818995b7 RDI: 000000010000018f
[ 107.386684] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd164b8
[ 107.387245] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000
[ 107.387815] R13: 000000000000002c R14: ffff88806cf31490 R15: dffffc0000000000
[ 107.388380] FS: 0000555566f49400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[ 107.389027] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 107.389516] CR2: 0000555560f09708 CR3: 000000003b48b000 CR4: 0000000000350ef0
[ 107.390111] Call Trace:
[ 107.390336]
[ 107.390530] ? __pfx_perf_tp_event+0x10/0x10
[ 107.390911] ? __lock_acquire+0xc65/0x1b70
[ 107.391285] ? __lock_acquire+0x694/0x1b70
[ 107.391655] ? lock_acquire+0x15e/0x2f0
[ 107.392002] ? perf_trace_run_bpf_submit+0xef/0x180
[ 107.392422] perf_trace_run_bpf_submit+0xef/0x180
[ 107.392838] perf_trace_lock+0x337/0x5d0
[ 107.393190] ? __pfx_perf_trace_lock+0x10/0x10
[ 107.393583] ? hrtimer_interrupt+0x114/0x830
[ 107.393957] ? lock_release+0x172/0x290
[ 107.394296] ? hrtimer_interrupt+0x114/0x830
[ 107.394669] lock_release+0x1ab/0x290
[ 107.394999] ktime_get_update_offsets_now+0xab/0x3c0
[ 107.395436] ? hrtimer_interrupt+0x114/0x830
[ 107.395807] ? __pfx_lapic_next_deadline+0x10/0x10
[ 107.396231] hrtimer_interrupt+0x114/0x830
[ 107.396588] ? __pfx_do_sync_core+0x10/0x10
[ 107.396952] ? trace_csd_function_exit+0x134/0x190
[ 107.397371] ? __flush_smp_call_function_queue+0x28c/0x740
[ 107.397852] __sysvec_apic_timer_interrupt+0xbb/0x330
[ 107.398288] sysvec_apic_timer_interrupt+0x6b/0x80
[ 107.398707]
[ 107.398906]
[ 107.399102] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 107.399536] RIP: 0010:oops_exit+0x0/0x50
[ 107.399882] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27
[ 107.401392] RSP: 0018:ffff8880173bef10 EFLAGS: 00000202
[ 107.401841] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff8139f06f
[ 107.402437] RDX: ffff88801729b700 RSI: ffffffff812a3dca RDI: 0000000000000007
[ 107.403027] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90
[ 107.403613] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880173befd8
[ 107.404207] R13: 0000000000000000 R14: dffffc0020000031 R15: 0000000000000000
[ 107.404807] ? add_taint+0x5f/0xd0
[ 107.405116] ? oops_end+0x4a/0xe0
[ 107.405427] oops_end+0x65/0xe0
[ 107.405727] exc_general_protection+0x1a2/0x330
[ 107.406131] asm_exc_general_protection+0x26/0x30
[ 107.406537] RIP: 0010:perf_tp_event+0x175/0xe70
[ 107.406936] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 107.408437] RSP: 0018:ffff8880173bf080 EFLAGS: 00010213
[ 107.408880] RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002
[ 107.409475] RDX: ffff88801729b700 RSI: ffffffff818995b7 RDI: 000000010000018f
[ 107.410076] RBP: ffff8880173bf2f0 R08: ffff88806cf31340 R09: ffffe8ffffd164b8
[ 107.410670] R10: 0000000000000000 R11: 0000000000006cee R12: dffffc0000000000
[ 107.411262] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[ 107.411861] ? perf_tp_event+0x167/0xe70
[ 107.412223] ? __pfx_perf_tp_event+0x10/0x10
[ 107.412599] ? unwind_get_return_address+0x59/0xa0
[ 107.413027] ? __lock_acquire+0x694/0x1b70
[ 107.413394] ? __lock_acquire+0x694/0x1b70
[ 107.413773] ? lock_acquire+0x15e/0x2f0
[ 107.414112] ? __is_insn_slot_addr+0x2e/0x290
[ 107.414501] ? find_held_lock+0x2b/0x80
[ 107.414843] ? __is_insn_slot_addr+0x136/0x290
[ 107.415236] ? lock_release+0xc8/0x290
[ 107.415583] ? perf_trace_run_bpf_submit+0xef/0x180
[ 107.416008] ? kernel_text_address+0x5b/0xc0
[ 107.416381] perf_trace_run_bpf_submit+0xef/0x180
[ 107.416798] perf_trace_lock+0x337/0x5d0
[ 107.417146] ? __pfx_perf_trace_lock+0x10/0x10
[ 107.417548] ? unwind_next_frame+0x3b2/0x2540
[ 107.417935] ? lock_release+0x172/0x290
[ 107.418275] ? unwind_next_frame+0x3b2/0x2540
[ 107.418664] lock_release+0x1ab/0x290
[ 107.418992] unwind_next_frame+0x3b7/0x2540
[ 107.419352] ? __unwind_start+0x592/0x7c0
[ 107.419695] ? get_stack_info_noinstr+0x16/0xf0
[ 107.420079] __unwind_start+0x517/0x7c0
[ 107.420409] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 107.420848] arch_stack_walk+0x62/0xf0
[ 107.421173] ? arch_stack_walk+0x62/0xf0
[ 107.421514] stack_trace_save+0x8e/0xc0
[ 107.421839] ? __pfx_stack_trace_save+0x10/0x10
[ 107.422217] ? lock_is_held_type+0x9e/0x120
[ 107.422575] kasan_save_stack+0x24/0x50
[ 107.422900] ? copy_page_range+0x57b/0x5140
[ 107.423275] ? __lock_acquire+0x694/0x1b70
[ 107.423631] ? lock_acquire+0x15e/0x2f0
[ 107.423954] ? kmem_cache_alloc_noprof+0xdb/0x690
[ 107.424342] ? find_held_lock+0x2b/0x80
[ 107.424671] ? kmem_cache_alloc_noprof+0x191/0x690
[ 107.425069] kasan_save_track+0x14/0x30
[ 107.425392] __kasan_slab_alloc+0x59/0x70
[ 107.425738] kmem_cache_alloc_noprof+0x205/0x690
[ 107.426122] ? find_held_lock+0x2b/0x80
[ 107.426457] ? vm_area_dup+0x25/0x6f0
[ 107.426769] vm_area_dup+0x25/0x6f0
[ 107.427072] dup_mmap+0x80d/0x1d10
[ 107.427380] ? __pfx_dup_mmap+0x10/0x10
[ 107.427719] ? lock_is_held_type+0x9e/0x120
[ 107.428076] copy_process+0x3ad5/0x73c0
[ 107.428411] ? __pfx_copy_process+0x10/0x10
[ 107.428770] ? do_raw_spin_lock+0x123/0x260
[ 107.429131] kernel_clone+0xea/0x7f0
[ 107.429419] ? __pfx_kernel_clone+0x10/0x10
[ 107.429754] ? __lock_acquire+0x694/0x1b70
[ 107.430075] ? css_rstat_updated+0x1b8/0x4d0
[ 107.430415] ? __pfx_css_rstat_updated+0x10/0x10
[ 107.430781] __do_sys_clone+0xce/0x120
[ 107.431078] ? __pfx___do_sys_clone+0x10/0x10
[ 107.431416] ? find_held_lock+0x2b/0x80
[ 107.431742] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 107.432136] do_syscall_64+0xbf/0x360
[ 107.432426] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.432811] RIP: 0033:0x7f5049fec10b
[ 107.433091] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
[ 107.434431] RSP: 002b:00007fffae2a3410 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 107.434989] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5049fec10b
[ 107.435511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 107.436030] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555566f49400
[ 107.436553] R10: 0000555566f496d0 R11: 0000000000000246 R12: 0000000000000001
[ 107.437074] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffae2a34f0
[ 107.437616]
[ 107.437795] Modules linked in:
[ 107.438041] ---[ end trace 0000000000000000 ]---
[ 107.438043] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#4] SMP KASAN NOPTI
[ 107.438389] RIP: 0010:perf_tp_event+0x175/0xe70
[ 107.439955] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[ 107.440292] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 107.441523] CPU: 0 UID: 0 PID: 3975 Comm: syz-executor.1 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 107.442827] RSP: 0018:ffff8880173bf080 EFLAGS: 00010213
[ 107.444506] Tainted: [D]=DIE, [W]=WARN
[ 107.444887] RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002
[ 107.445437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 107.445961] RDX: ffff88801729b700 RSI: ffffffff818995b7 RDI: 000000010000018f
[ 107.447122] RIP: 0010:perf_tp_event+0x175/0xe70
[ 107.447650] RBP: ffff8880173bf2f0 R08: ffff88806cf31340 R09: ffffe8ffffd164b8
[ 107.448299] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 107.448824] R10: 0000000000000000 R11: 0000000000006cee R12: dffffc0000000000
[ 107.451392] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012
[ 107.451908] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[ 107.451913]
[ 107.451924] FS: 0000555566f49400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[ 107.452673] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[ 107.453189] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 107.453443] RDX: ffff888015b19b80 RSI: ffffffff818995b7 RDI: 0000000100000190
[ 107.454031] CR2: 0000555560f09708 CR3: 000000003b48b000 CR4: 0000000000350ef0
[ 107.455032] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc164b8
[ 107.455457] Kernel panic - not syncing: Fatal exception in interrupt
[ 108.497320] Shutting down cpus with NMI
[ 108.499368] Kernel Offset: disabled
[ 108.499643] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---
VM DIAGNOSIS:
08:38:31 Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000100 RCX=ffffffff81b96dd8 RDX=ffff888013e83700
RSI=ffffffff81b96da3 RDI=0000000000000001 RBP=ffff888015087ae0 RSP=ffff888015087a50
R8 =0000000000000001 R9 =ffffffff81b964d3 R10=0000000000000001 R11=0000000000000001
R12=ffff888015087c74 R13=00000000000007a7 R14=ffff888015087c38 R15=0000000000000001
RIP=ffffffff81b96da5 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f3012cdd900 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe4f00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2d025000 CR3=000000000df58000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffffffffffffffffffff XMM01=30306234386136303638616663356134
XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572
XMM04=5651b66d292cf2c0000000000014af40 XMM05=d3fdd5f48436fbd700000000000aead0
XMM06=c12ddbb987a8548100000000000ae988 XMM07=00000000000000000000000000000000
XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000
XMM10=00000000000000000020002000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff828e3230 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff8880188bf478
R8 =0000000000000000 R9 =ffffed10016d0046 R10=00000000000fe503 R11=0000000000000001
R12=0000000000000823 R13=0000000000000020 R14=fffffbfff10e4882 R15=dffffc0000000000
RIP=ffffffff828e3285 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555565b0d400 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe3300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f504b03a3a4 CR3=00000000418c3000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000