Warning: Permanently added '[localhost]:25749' (ECDSA) to the list of known hosts. 2025/08/29 08:56:49 fuzzer started 2025/08/29 08:56:50 dialing manager at localhost:43077 syzkaller login: [ 51.271175] cgroup: Unknown subsys name 'net' [ 51.315031] cgroup: Unknown subsys name 'cpuset' [ 51.321408] cgroup: Unknown subsys name 'rlimit' 2025/08/29 08:57:00 syscalls: 2214 2025/08/29 08:57:00 code coverage: enabled 2025/08/29 08:57:00 comparison tracing: enabled 2025/08/29 08:57:00 extra coverage: enabled 2025/08/29 08:57:00 setuid sandbox: enabled 2025/08/29 08:57:00 namespace sandbox: enabled 2025/08/29 08:57:00 Android sandbox: enabled 2025/08/29 08:57:00 fault injection: enabled 2025/08/29 08:57:00 leak checking: enabled 2025/08/29 08:57:00 net packet injection: enabled 2025/08/29 08:57:00 net device setup: enabled 2025/08/29 08:57:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 08:57:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 08:57:00 USB emulation: enabled 2025/08/29 08:57:00 hci packet injection: enabled 2025/08/29 08:57:00 wifi device emulation: enabled 2025/08/29 08:57:00 802.15.4 emulation: enabled 2025/08/29 08:57:00 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 08:57:00 fetching corpus: 50, signal 25900/29114 (executing program) 2025/08/29 08:57:00 fetching corpus: 100, signal 38272/42517 (executing program) 2025/08/29 08:57:00 fetching corpus: 150, signal 46655/51843 (executing program) 2025/08/29 08:57:00 fetching corpus: 200, signal 53087/59055 (executing program) 2025/08/29 08:57:00 fetching corpus: 250, signal 55802/62673 (executing program) 2025/08/29 08:57:00 fetching corpus: 300, signal 59101/66754 (executing program) 2025/08/29 08:57:01 fetching corpus: 350, signal 61489/69953 (executing program) 2025/08/29 08:57:01 fetching corpus: 400, signal 64397/73521 (executing program) 2025/08/29 08:57:01 fetching corpus: 450, signal 69068/78466 (executing program) 2025/08/29 08:57:01 fetching corpus: 500, signal 71880/81764 (executing program) 2025/08/29 08:57:01 fetching corpus: 550, signal 75108/85244 (executing program) 2025/08/29 08:57:01 fetching corpus: 600, signal 77726/88294 (executing program) 2025/08/29 08:57:01 fetching corpus: 650, signal 82337/92580 (executing program) 2025/08/29 08:57:01 fetching corpus: 700, signal 84555/95030 (executing program) 2025/08/29 08:57:02 fetching corpus: 750, signal 86791/97408 (executing program) 2025/08/29 08:57:02 fetching corpus: 800, signal 88845/99531 (executing program) 2025/08/29 08:57:02 fetching corpus: 850, signal 90697/101523 (executing program) 2025/08/29 08:57:02 fetching corpus: 900, signal 92652/103522 (executing program) 2025/08/29 08:57:02 fetching corpus: 950, signal 95407/105985 (executing program) 2025/08/29 08:57:02 fetching corpus: 1000, signal 97170/107772 (executing program) 2025/08/29 08:57:02 fetching corpus: 1050, signal 98709/109247 (executing program) 2025/08/29 08:57:02 fetching corpus: 1100, signal 100916/111185 (executing program) 2025/08/29 08:57:03 fetching corpus: 1150, signal 102425/112617 (executing program) 2025/08/29 08:57:03 fetching corpus: 1200, signal 103690/113831 (executing program) 2025/08/29 08:57:03 fetching corpus: 1250, signal 105045/115040 (executing program) 2025/08/29 08:57:03 fetching corpus: 1300, signal 106701/116365 (executing program) 2025/08/29 08:57:03 fetching corpus: 1350, signal 108425/117713 (executing program) 2025/08/29 08:57:03 fetching corpus: 1400, signal 110096/118934 (executing program) 2025/08/29 08:57:03 fetching corpus: 1450, signal 111343/119899 (executing program) 2025/08/29 08:57:04 fetching corpus: 1500, signal 112861/120974 (executing program) 2025/08/29 08:57:04 fetching corpus: 1550, signal 113465/121514 (executing program) 2025/08/29 08:57:04 fetching corpus: 1600, signal 114449/122269 (executing program) 2025/08/29 08:57:04 fetching corpus: 1650, signal 115625/123035 (executing program) 2025/08/29 08:57:04 fetching corpus: 1700, signal 116776/123761 (executing program) 2025/08/29 08:57:04 fetching corpus: 1750, signal 117601/124340 (executing program) 2025/08/29 08:57:04 fetching corpus: 1800, signal 118513/124991 (executing program) 2025/08/29 08:57:04 fetching corpus: 1850, signal 119854/125822 (executing program) 2025/08/29 08:57:05 fetching corpus: 1900, signal 120733/126321 (executing program) 2025/08/29 08:57:05 fetching corpus: 1950, signal 121703/126829 (executing program) 2025/08/29 08:57:05 fetching corpus: 2000, signal 122906/127416 (executing program) 2025/08/29 08:57:05 fetching corpus: 2050, signal 123550/127750 (executing program) 2025/08/29 08:57:05 fetching corpus: 2100, signal 124695/128396 (executing program) 2025/08/29 08:57:05 fetching corpus: 2150, signal 125517/128732 (executing program) 2025/08/29 08:57:05 fetching corpus: 2200, signal 126406/129045 (executing program) 2025/08/29 08:57:05 fetching corpus: 2250, signal 127352/129421 (executing program) 2025/08/29 08:57:05 fetching corpus: 2289, signal 128019/129644 (executing program) 2025/08/29 08:57:05 fetching corpus: 2289, signal 128019/129685 (executing program) 2025/08/29 08:57:05 fetching corpus: 2289, signal 128019/129709 (executing program) 2025/08/29 08:57:05 fetching corpus: 2289, signal 128019/129747 (executing program) 2025/08/29 08:57:05 fetching corpus: 2289, signal 128019/129783 (executing program) 2025/08/29 08:57:05 fetching corpus: 2289, signal 128019/129811 (executing program) 2025/08/29 08:57:05 fetching corpus: 2289, signal 128019/129859 (executing program) 2025/08/29 08:57:05 fetching corpus: 2289, signal 128019/129890 (executing program) 2025/08/29 08:57:05 fetching corpus: 2289, signal 128019/129931 (executing program) 2025/08/29 08:57:06 fetching corpus: 2289, signal 128019/129964 (executing program) 2025/08/29 08:57:06 fetching corpus: 2289, signal 128019/129991 (executing program) 2025/08/29 08:57:06 fetching corpus: 2289, signal 128019/130023 (executing program) 2025/08/29 08:57:06 fetching corpus: 2289, signal 128019/130057 (executing program) 2025/08/29 08:57:06 fetching corpus: 2289, signal 128019/130094 (executing program) 2025/08/29 08:57:06 fetching corpus: 2289, signal 128019/130137 (executing program) 2025/08/29 08:57:06 fetching corpus: 2289, signal 128019/130165 (executing program) 2025/08/29 08:57:06 fetching corpus: 2289, signal 128019/130195 (executing program) 2025/08/29 08:57:06 fetching corpus: 2289, signal 128019/130196 (executing program) 2025/08/29 08:57:06 fetching corpus: 2289, signal 128019/130196 (executing program) 2025/08/29 08:57:08 starting 8 fuzzer processes 08:57:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r0, &(0x7f0000000100)=""/51, 0x33) getdents64(r0, &(0x7f0000000300)=""/133, 0x85) 08:57:08 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x13) setuid(0xee01) 08:57:08 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000140)={@multicast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @private, @random="645b467e8bd0", @rand_addr=0x7f000000}}}}, 0x0) 08:57:08 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x2a, 0x0, "6c7abb3e9a9a691096b5eb47d00faa3f87c4977f0e265c767bc4efcf846530ace2b9d3f684a50d0b1e7c136a28dfcd2b470e6904d7208e05d688f255b9df442a8090a173937522cbeb7c2948aede5252"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 08:57:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce={0x0, 0x7ff}}) 08:57:08 executing program 7: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x14800, 0xf, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="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"/1408, 0x580, 0x8800}, {&(0x7f0000010c00)="ff43443030310100"/32, 0x20, 0x9000}, {&(0x7f0000010d00)="01001c0000000100000005001d000000010046494c4530000000000000000000", 0x20, 0xa000}, {&(0x7f0000010e00)="01000000001c0001000005000000001d000146494c4530000000000000000000", 0x20, 0xb000}, {&(0x7f0000010f00)="01001e000000010000000a001f000000010000660069006c0065003000000000", 0x20, 0xc000}, {&(0x7f0000011000)="01000000001e000100000a000000001f000100660069006c0065003000000000", 0x20, 0xd000}, {&(0x7f0000011100)="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", 0x380, 0xe000}, {&(0x7f0000011500)="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", 0x200, 0xe800}, {&(0x7f0000011700)="22001e0000000000001e00080000000008007809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809140b2a3a080200000100000101013400210000000000002164000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c001f0000000000001f00080000000008007809140b2a3a08020000010000010a00660069006c00650030002c0022000000000000220a0000000000000a7809140b2a3a08000000010000010a00660069006c00650031002c00230000000000002328230000000023287809140b2a3a08000000010000010a00660069006c00650032002c00230000000000002328230000000023287809140b2a3a08000000010000010a00660069006c0065003300"/320, 0x140, 0xf000}, {&(0x7f0000011900)="22001f0000000000001f00080000000008007809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809140b2a3a080200000100000101012c0028000000000000281a0400000000041a7809140b2a3a08000000010000010a00660069006c00650030002c00290000000000002900000000000000007809140b2a3a08000000010000010a00660069006c006500310000000000", 0xa0, 0xf800}, {&(0x7f0000011a00)="4552ed010a548701525249505f313939314154484520524f434b20524944474520494e5445524348414e47452050524f544f434f4c2050524f564944455320535550504f525420464f5220504f5349582046494c452053595354454d2053454d414e54494353504c4541534520434f4e544143542044495343205055424c495348455220464f522053504543494649434154494f4e20534f555243452e2020534545205055424c4953484552204944454e54494649455220494e205052494d41525920564f4c554d452044455343524950544f5220464f5220434f4e5441435420494e464f524d4154494f4e2e00"/256, 0x100, 0x10000}, {&(0x7f0000011b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x10800}, {&(0x7f0000011c00)='syzkallers\x00'/32, 0x20, 0x11000}, {&(0x7f0000011d00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x14000}], 0x0, &(0x7f0000012200)) 08:57:08 executing program 4: unlinkat(0xffffffffffffff9c, 0x0, 0x0) [ 69.602339] audit: type=1400 audit(1756457828.615:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:57:08 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40086602, &(0x7f0000002a00)) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xb) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000440)={0x0, 0x1000}) [ 70.788781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.793310] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.799205] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.801115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.804415] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.812462] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.814371] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.821446] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.824528] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.837348] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.926104] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.927649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.929078] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.938915] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 70.943517] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.945633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.950312] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.951507] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 70.952692] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.958104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.959241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.967163] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.968276] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 70.971186] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.977615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.983441] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.983585] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.984851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 70.987712] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.011162] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 71.014252] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 71.026361] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 71.030596] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 71.032212] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 71.034733] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 71.041239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 71.048591] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 71.054720] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 71.072309] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 71.073646] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 72.876487] Bluetooth: hci0: command tx timeout [ 72.877342] Bluetooth: hci1: command tx timeout [ 73.068388] Bluetooth: hci3: command tx timeout [ 73.069543] Bluetooth: hci4: command tx timeout [ 73.070054] Bluetooth: hci2: command tx timeout [ 73.132440] Bluetooth: hci7: command tx timeout [ 73.133038] Bluetooth: hci5: command tx timeout [ 73.133095] Bluetooth: hci6: command tx timeout [ 74.925183] Bluetooth: hci1: command tx timeout [ 74.925751] Bluetooth: hci0: command tx timeout [ 75.116634] Bluetooth: hci4: command tx timeout [ 75.116681] Bluetooth: hci2: command tx timeout [ 75.117156] Bluetooth: hci3: command tx timeout [ 75.180059] Bluetooth: hci7: command tx timeout [ 75.180545] Bluetooth: hci6: command tx timeout [ 75.180569] Bluetooth: hci5: command tx timeout [ 76.972077] Bluetooth: hci1: command tx timeout [ 76.972870] Bluetooth: hci0: command tx timeout [ 77.164115] Bluetooth: hci2: command tx timeout [ 77.164515] Bluetooth: hci3: command tx timeout [ 77.164879] Bluetooth: hci4: command tx timeout [ 77.228069] Bluetooth: hci7: command tx timeout [ 77.228093] Bluetooth: hci6: command tx timeout [ 77.228786] Bluetooth: hci5: command tx timeout [ 79.020040] Bluetooth: hci0: command tx timeout [ 79.020203] Bluetooth: hci1: command tx timeout [ 79.212053] Bluetooth: hci3: command tx timeout [ 79.212619] Bluetooth: hci2: command tx timeout [ 79.212667] Bluetooth: hci4: command tx timeout [ 79.276105] Bluetooth: hci6: command tx timeout [ 79.276128] Bluetooth: hci7: command tx timeout [ 79.277064] Bluetooth: hci5: command tx timeout [ 107.283509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.284216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.488760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.489410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:57:46 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x13) setuid(0xee01) 08:57:47 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x13) setuid(0xee01) 08:57:47 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x13) setuid(0xee01) 08:57:47 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x13) setuid(0xee01) 08:57:47 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x13) setuid(0xee01) 08:57:47 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x13) setuid(0xee01) 08:57:47 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x5421, &(0x7f0000002a00)) [ 108.766071] audit: type=1400 audit(1756457867.777:8): avc: denied { open } for pid=3704 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 108.776037] audit: type=1400 audit(1756457867.777:9): avc: denied { kernel } for pid=3704 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:57:47 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x5421, &(0x7f0000002a00)) [ 109.463820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.464482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.562621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.563207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.123600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.124452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.186067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.186673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.252793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.253407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.330447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.331052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.417608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.418241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.536761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.537467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.812888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.813565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.876672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.877303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.061189] loop7: detected capacity change from 0 to 320 [ 111.122259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.122831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.142135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.142660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.187320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.187929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.211599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.212190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:57:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r0, &(0x7f0000000100)=""/51, 0x33) getdents64(r0, &(0x7f0000000300)=""/133, 0x85) 08:57:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x5421, &(0x7f0000002a00)) 08:57:50 executing program 4: unlinkat(0xffffffffffffff9c, 0x0, 0x0) 08:57:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce={0x0, 0x7ff}}) 08:57:50 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40086602, &(0x7f0000002a00)) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xb) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000440)={0x0, 0x1000}) 08:57:50 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000140)={@multicast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @private, @random="645b467e8bd0", @rand_addr=0x7f000000}}}}, 0x0) 08:57:50 executing program 7: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x14800, 0xf, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="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"/1408, 0x580, 0x8800}, {&(0x7f0000010c00)="ff43443030310100"/32, 0x20, 0x9000}, {&(0x7f0000010d00)="01001c0000000100000005001d000000010046494c4530000000000000000000", 0x20, 0xa000}, {&(0x7f0000010e00)="01000000001c0001000005000000001d000146494c4530000000000000000000", 0x20, 0xb000}, {&(0x7f0000010f00)="01001e000000010000000a001f000000010000660069006c0065003000000000", 0x20, 0xc000}, {&(0x7f0000011000)="01000000001e000100000a000000001f000100660069006c0065003000000000", 0x20, 0xd000}, {&(0x7f0000011100)="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", 0x380, 0xe000}, {&(0x7f0000011500)="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", 0x200, 0xe800}, {&(0x7f0000011700)="22001e0000000000001e00080000000008007809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809140b2a3a080200000100000101013400210000000000002164000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c001f0000000000001f00080000000008007809140b2a3a08020000010000010a00660069006c00650030002c0022000000000000220a0000000000000a7809140b2a3a08000000010000010a00660069006c00650031002c00230000000000002328230000000023287809140b2a3a08000000010000010a00660069006c00650032002c00230000000000002328230000000023287809140b2a3a08000000010000010a00660069006c0065003300"/320, 0x140, 0xf000}, {&(0x7f0000011900)="22001f0000000000001f00080000000008007809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809140b2a3a080200000100000101012c0028000000000000281a0400000000041a7809140b2a3a08000000010000010a00660069006c00650030002c00290000000000002900000000000000007809140b2a3a08000000010000010a00660069006c006500310000000000", 0xa0, 0xf800}, {&(0x7f0000011a00)="4552ed010a548701525249505f313939314154484520524f434b20524944474520494e5445524348414e47452050524f544f434f4c2050524f564944455320535550504f525420464f5220504f5349582046494c452053595354454d2053454d414e54494353504c4541534520434f4e544143542044495343205055424c495348455220464f522053504543494649434154494f4e20534f555243452e2020534545205055424c4953484552204944454e54494649455220494e205052494d41525920564f4c554d452044455343524950544f5220464f5220434f4e5441435420494e464f524d4154494f4e2e00"/256, 0x100, 0x10000}, {&(0x7f0000011b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x10800}, {&(0x7f0000011c00)='syzkallers\x00'/32, 0x20, 0x11000}, {&(0x7f0000011d00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x14000}], 0x0, &(0x7f0000012200)) 08:57:50 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x2a, 0x0, "6c7abb3e9a9a691096b5eb47d00faa3f87c4977f0e265c767bc4efcf846530ace2b9d3f684a50d0b1e7c136a28dfcd2b470e6904d7208e05d688f255b9df442a8090a173937522cbeb7c2948aede5252"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) [ 111.391640] loop7: detected capacity change from 0 to 320 08:57:50 executing program 4: unlinkat(0xffffffffffffff9c, 0x0, 0x0) 08:57:50 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000140)={@multicast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @private, @random="645b467e8bd0", @rand_addr=0x7f000000}}}}, 0x0) 08:57:50 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40086602, &(0x7f0000002a00)) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xb) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000440)={0x0, 0x1000}) 08:57:50 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x2a, 0x0, "6c7abb3e9a9a691096b5eb47d00faa3f87c4977f0e265c767bc4efcf846530ace2b9d3f684a50d0b1e7c136a28dfcd2b470e6904d7208e05d688f255b9df442a8090a173937522cbeb7c2948aede5252"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 08:57:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x5421, &(0x7f0000002a00)) 08:57:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce={0x0, 0x7ff}}) 08:57:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r0, &(0x7f0000000100)=""/51, 0x33) getdents64(r0, &(0x7f0000000300)=""/133, 0x85) 08:57:50 executing program 4: unlinkat(0xffffffffffffff9c, 0x0, 0x0) 08:57:50 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000140)={@multicast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @private, @random="645b467e8bd0", @rand_addr=0x7f000000}}}}, 0x0) 08:57:50 executing program 7: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x14800, 0xf, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002900000000000029252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e0000000000001e00080000000008007809140b2a3a08020000010000010100002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000730079007a006b0061006c006c006500720020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000470045004e00490053004f0049004d004100470045002000490053004f00200039003600360030005f004800460053002000460049004c004500530059005300540045004d002000430052004500410054004f005200200028004300290020003100390039003300200045002e0059004f0055004e004700440041004c004500660069006c0065003300200020002000200020002000200020002000200020002000200000660069006c0065003100200020002000200020002000200020002000200020002000200000660069006c0065003200200020002000200020002000200020002000200020002000200032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8800}, {&(0x7f0000010c00)="ff43443030310100"/32, 0x20, 0x9000}, {&(0x7f0000010d00)="01001c0000000100000005001d000000010046494c4530000000000000000000", 0x20, 0xa000}, {&(0x7f0000010e00)="01000000001c0001000005000000001d000146494c4530000000000000000000", 0x20, 0xb000}, {&(0x7f0000010f00)="01001e000000010000000a001f000000010000660069006c0065003000000000", 0x20, 0xc000}, {&(0x7f0000011000)="01000000001e000100000a000000001f000100660069006c0065003000000000", 0x20, 0xd000}, {&(0x7f0000011100)="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", 0x380, 0xe000}, {&(0x7f0000011500)="66001d0000000000001d00080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080066001c0000000000001c00080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800860028000000000000281a0400000000041a7809140b2a3a08000000010000010846494c45302e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6530505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800a800290000000000002900000000000000007809140b2a3a08000000010000010846494c45312e3b3100525205018d4e4d0a010066696c6531505824016da100000000a16d010000000000000100000000000000000000000000000000534c31010008000003746d70001573797a2d696d61676567656e393632343934303438000566696c6530000566696c653054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08000000000000", 0x200, 0xe800}, {&(0x7f0000011700)="22001e0000000000001e00080000000008007809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809140b2a3a080200000100000101013400210000000000002164000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c001f0000000000001f00080000000008007809140b2a3a08020000010000010a00660069006c00650030002c0022000000000000220a0000000000000a7809140b2a3a08000000010000010a00660069006c00650031002c00230000000000002328230000000023287809140b2a3a08000000010000010a00660069006c00650032002c00230000000000002328230000000023287809140b2a3a08000000010000010a00660069006c0065003300"/320, 0x140, 0xf000}, {&(0x7f0000011900)="22001f0000000000001f00080000000008007809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809140b2a3a080200000100000101012c0028000000000000281a0400000000041a7809140b2a3a08000000010000010a00660069006c00650030002c00290000000000002900000000000000007809140b2a3a08000000010000010a00660069006c006500310000000000", 0xa0, 0xf800}, {&(0x7f0000011a00)="4552ed010a548701525249505f313939314154484520524f434b20524944474520494e5445524348414e47452050524f544f434f4c2050524f564944455320535550504f525420464f5220504f5349582046494c452053595354454d2053454d414e54494353504c4541534520434f4e544143542044495343205055424c495348455220464f522053504543494649434154494f4e20534f555243452e2020534545205055424c4953484552204944454e54494649455220494e205052494d41525920564f4c554d452044455343524950544f5220464f5220434f4e5441435420494e464f524d4154494f4e2e00"/256, 0x100, 0x10000}, {&(0x7f0000011b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x10800}, {&(0x7f0000011c00)='syzkallers\x00'/32, 0x20, 0x11000}, {&(0x7f0000011d00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x14000}], 0x0, &(0x7f0000012200)) 08:57:50 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x2a, 0x0, "6c7abb3e9a9a691096b5eb47d00faa3f87c4977f0e265c767bc4efcf846530ace2b9d3f684a50d0b1e7c136a28dfcd2b470e6904d7208e05d688f255b9df442a8090a173937522cbeb7c2948aede5252"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 08:57:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce={0x0, 0x7ff}}) 08:57:50 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40086602, &(0x7f0000002a00)) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xb) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000440)={0x0, 0x1000}) [ 111.601308] loop7: detected capacity change from 0 to 320 08:57:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r0, &(0x7f0000000100)=""/51, 0x33) getdents64(r0, &(0x7f0000000300)=""/133, 0x85) [ 111.623000] kmemleak: Found object by alias at 0x607f1a6394f4 [ 111.623016] CPU: 0 UID: 0 PID: 3946 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 111.623034] Tainted: [W]=WARN [ 111.623038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 111.623045] Call Trace: [ 111.623049] [ 111.623054] dump_stack_lvl+0xca/0x120 [ 111.623078] __lookup_object+0x94/0xb0 [ 111.623095] delete_object_full+0x27/0x70 [ 111.623111] free_percpu+0x30/0x1160 [ 111.623127] ? arch_uprobe_clear_state+0x16/0x140 [ 111.623148] futex_hash_free+0x38/0xc0 [ 111.623162] mmput+0x2d3/0x390 [ 111.623181] do_exit+0x79d/0x2970 [ 111.623199] ? __pfx_do_exit+0x10/0x10 [ 111.623212] ? find_held_lock+0x2b/0x80 [ 111.623231] ? get_signal+0x835/0x2340 [ 111.623251] do_group_exit+0xd3/0x2a0 [ 111.623266] get_signal+0x2315/0x2340 [ 111.623282] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 111.623300] ? __pfx_get_signal+0x10/0x10 [ 111.623315] ? __schedule+0xe91/0x3590 [ 111.623335] arch_do_signal_or_restart+0x80/0x790 [ 111.623357] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 111.623373] ? __x64_sys_futex+0x1c9/0x4d0 [ 111.623385] ? __x64_sys_futex+0x1d2/0x4d0 [ 111.623399] ? fput+0x6a/0x100 [ 111.623413] ? __pfx___x64_sys_futex+0x10/0x10 [ 111.623425] ? ksys_write+0x1a3/0x240 [ 111.623442] exit_to_user_mode_loop+0x8b/0x110 [ 111.623455] do_syscall_64+0x2f7/0x360 [ 111.623467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.623479] RIP: 0033:0x7f947dabab19 [ 111.623487] Code: Unable to access opcode bytes at 0x7f947dabaaef. [ 111.623492] RSP: 002b:00007f947b030218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.623503] RAX: 0000000000000001 RBX: 00007f947dbcdf68 RCX: 00007f947dabab19 [ 111.623511] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f947dbcdf6c [ 111.623518] RBP: 00007f947dbcdf60 R08: 000000000000000e R09: 0000000000000000 [ 111.623525] R10: 000000000000002a R11: 0000000000000246 R12: 00007f947dbcdf6c [ 111.623531] R13: 00007ffc5354c0af R14: 00007f947b030300 R15: 0000000000022000 [ 111.623547] [ 111.623551] kmemleak: Object (percpu) 0x607f1a6394f0 (size 16): [ 111.623558] kmemleak: comm "syz-executor.2", pid 285, jiffies 4294778198 [ 111.623565] kmemleak: min_count = 1 [ 111.623568] kmemleak: count = 0 [ 111.623572] kmemleak: flags = 0x21 [ 111.623576] kmemleak: checksum = 0 [ 111.623580] kmemleak: backtrace: [ 111.623583] pcpu_alloc_noprof+0x87a/0x1170 [ 111.623597] mm_init+0x99b/0x1170 [ 111.623605] copy_process+0x3ab7/0x73c0 [ 111.623615] kernel_clone+0xea/0x7f0 [ 111.623633] __do_sys_clone+0xce/0x120 [ 111.623643] do_syscall_64+0xbf/0x360 [ 111.623651] entry_SYSCALL_64_after_hwframe+0x77/0x7f 08:57:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r0, &(0x7f0000000100)=""/51, 0x33) getdents64(r0, &(0x7f0000000300)=""/133, 0x85) 08:57:50 executing program 6: syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) 08:57:50 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40086602, &(0x7f0000002a00)) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xb) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000440)={0x0, 0x1000}) 08:57:50 executing program 5: r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) fallocate(r0, 0x0, 0x0, 0x3f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) sendfile(r1, r0, 0x0, 0x9) 08:57:50 executing program 7: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x14800, 0xf, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000002900000000000029000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c0000000000001c00080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="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"/1408, 0x580, 0x8800}, {&(0x7f0000010c00)="ff43443030310100"/32, 0x20, 0x9000}, {&(0x7f0000010d00)="01001c0000000100000005001d000000010046494c4530000000000000000000", 0x20, 0xa000}, {&(0x7f0000010e00)="01000000001c0001000005000000001d000146494c4530000000000000000000", 0x20, 0xb000}, {&(0x7f0000010f00)="01001e000000010000000a001f000000010000660069006c0065003000000000", 0x20, 0xc000}, {&(0x7f0000011000)="01000000001e000100000a000000001f000100660069006c0065003000000000", 0x20, 0xd000}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0120000000000000200000000000000000ed000000000000ed66001c0000000000001c00080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c00210000000000002164000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080074001d0000000000001d00080000000008007809140b2a3a08020000010000010546494c453052520501894e4d0a010066696c6530505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800860022000000000000220a0000000000000a7809140b2a3a08000000010000010846494c45312e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6531505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008600230000000000002328230000000023287809140b2a3a08000000010000010846494c45322e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6532505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008600230000000000002328230000000023287809140b2a3a08000000010000010846494c45332e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6533505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800", 0x380, 0xe000}, {&(0x7f0000011500)="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", 0x200, 0xe800}, {&(0x7f0000011700)="22001e0000000000001e00080000000008007809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809140b2a3a080200000100000101013400210000000000002164000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c001f0000000000001f00080000000008007809140b2a3a08020000010000010a00660069006c00650030002c0022000000000000220a0000000000000a7809140b2a3a08000000010000010a00660069006c00650031002c00230000000000002328230000000023287809140b2a3a08000000010000010a00660069006c00650032002c00230000000000002328230000000023287809140b2a3a08000000010000010a00660069006c0065003300"/320, 0x140, 0xf000}, {&(0x7f0000011900)="22001f0000000000001f00080000000008007809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809140b2a3a080200000100000101012c0028000000000000281a0400000000041a7809140b2a3a08000000010000010a00660069006c00650030002c00290000000000002900000000000000007809140b2a3a08000000010000010a00660069006c006500310000000000", 0xa0, 0xf800}, {&(0x7f0000011a00)="4552ed010a548701525249505f313939314154484520524f434b20524944474520494e5445524348414e47452050524f544f434f4c2050524f564944455320535550504f525420464f5220504f5349582046494c452053595354454d2053454d414e54494353504c4541534520434f4e544143542044495343205055424c495348455220464f522053504543494649434154494f4e20534f555243452e2020534545205055424c4953484552204944454e54494649455220494e205052494d41525920564f4c554d452044455343524950544f5220464f5220434f4e5441435420494e464f524d4154494f4e2e00"/256, 0x100, 0x10000}, {&(0x7f0000011b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x10800}, {&(0x7f0000011c00)='syzkallers\x00'/32, 0x20, 0x11000}, {&(0x7f0000011d00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x14000}], 0x0, &(0x7f0000012200)) 08:57:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r0, &(0x7f0000000100)=""/51, 0x33) getdents64(r0, &(0x7f0000000300)=""/133, 0x85) 08:57:50 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40086602, &(0x7f0000002a00)) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xb) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000440)={0x0, 0x1000}) 08:57:50 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) [ 111.767309] loop7: detected capacity change from 0 to 320 08:57:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r0, &(0x7f0000000100)=""/51, 0x33) getdents64(r0, &(0x7f0000000300)=""/133, 0x85) [ 111.808787] kmemleak: Found object by alias at 0x607f1a6394fc [ 111.808803] CPU: 0 UID: 0 PID: 3964 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 111.808822] Tainted: [W]=WARN [ 111.808826] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 111.808833] Call Trace: [ 111.808837] [ 111.808842] dump_stack_lvl+0xca/0x120 [ 111.808868] __lookup_object+0x94/0xb0 [ 111.808884] delete_object_full+0x27/0x70 [ 111.808900] free_percpu+0x30/0x1160 [ 111.808916] ? arch_uprobe_clear_state+0x16/0x140 [ 111.808936] futex_hash_free+0x38/0xc0 [ 111.808951] mmput+0x2d3/0x390 [ 111.808974] do_exit+0x79d/0x2970 [ 111.808991] ? __pfx_do_exit+0x10/0x10 [ 111.809005] ? trace_irq_enable.constprop.0+0x26/0x100 [ 111.809018] ? _raw_spin_unlock_irq+0x23/0x40 [ 111.809036] do_group_exit+0xd3/0x2a0 [ 111.809050] __x64_sys_exit_group+0x3e/0x50 [ 111.809064] x64_sys_call+0x18c5/0x18d0 [ 111.809079] do_syscall_64+0xbf/0x360 [ 111.809091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.809102] RIP: 0033:0x7f6cc00f7b19 [ 111.809111] Code: Unable to access opcode bytes at 0x7f6cc00f7aef. [ 111.809116] RSP: 002b:00007ffd05002f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 111.809127] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f6cc00f7b19 [ 111.809134] RDX: 00007f6cc00aa72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 111.809141] RBP: 0000000000000000 R08: 0000001b2d029578 R09: 0000000000000000 [ 111.809148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.809155] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd05003040 [ 111.809170] [ 111.809174] kmemleak: Object (percpu) 0x607f1a6394f0 (size 16): [ 111.809181] kmemleak: comm "syz-executor.6", pid 286, jiffies 4294778375 [ 111.809188] kmemleak: min_count = 1 [ 111.809192] kmemleak: count = 0 [ 111.809196] kmemleak: flags = 0x21 [ 111.809199] kmemleak: checksum = 0 [ 111.809203] kmemleak: backtrace: [ 111.809206] pcpu_alloc_noprof+0x87a/0x1170 [ 111.809221] mm_init+0x99b/0x1170 [ 111.809229] copy_process+0x3ab7/0x73c0 [ 111.809238] kernel_clone+0xea/0x7f0 [ 111.809248] __do_sys_clone+0xce/0x120 [ 111.809258] do_syscall_64+0xbf/0x360 [ 111.809266] entry_SYSCALL_64_after_hwframe+0x77/0x7f 08:57:50 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x5412, &(0x7f00000000c0)=""/4096) 08:57:50 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40086602, &(0x7f0000002a00)) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xb) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000440)={0x0, 0x1000}) 08:57:50 executing program 5: r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) fallocate(r0, 0x0, 0x0, 0x3f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) sendfile(r1, r0, 0x0, 0x9) 08:57:50 executing program 2: r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) fallocate(r0, 0x0, 0x0, 0x3f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) sendfile(r1, r0, 0x0, 0x9) 08:57:50 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) 08:57:50 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40086602, &(0x7f0000002a00)) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xb) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000440)={0x0, 0x1000}) [ 111.906922] process 'syz-executor.0' launched './file1' with NULL argv: empty string added 08:57:51 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40086602, &(0x7f0000002a00)) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xb) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000440)={0x0, 0x1000}) 08:57:51 executing program 2: r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) fallocate(r0, 0x0, 0x0, 0x3f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) sendfile(r1, r0, 0x0, 0x9) 08:57:51 executing program 5: r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) fallocate(r0, 0x0, 0x0, 0x3f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) sendfile(r1, r0, 0x0, 0x9) 08:57:51 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x5412, &(0x7f00000000c0)=""/4096) 08:57:51 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0xc8}) 08:57:51 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) 08:57:51 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40086602, &(0x7f0000002a00)) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xb) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000440)={0x0, 0x1000}) 08:57:51 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='schedstat\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/212, 0x2}], 0x22) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 08:57:51 executing program 5: r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) fallocate(r0, 0x0, 0x0, 0x3f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) sendfile(r1, r0, 0x0, 0x9) 08:57:51 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0xc8}) [ 112.081803] kmemleak: Found object by alias at 0x607f1a6394f4 [ 112.081824] CPU: 0 UID: 0 PID: 3997 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 112.081842] Tainted: [W]=WARN [ 112.081846] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.081854] Call Trace: [ 112.081858] [ 112.081863] dump_stack_lvl+0xca/0x120 [ 112.081892] __lookup_object+0x94/0xb0 [ 112.081910] delete_object_full+0x27/0x70 [ 112.081926] free_percpu+0x30/0x1160 [ 112.081943] ? arch_uprobe_clear_state+0x16/0x140 [ 112.081967] futex_hash_free+0x38/0xc0 [ 112.081982] mmput+0x2d3/0x390 [ 112.082001] do_exit+0x79d/0x2970 [ 112.082017] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 112.082038] ? __pfx_do_exit+0x10/0x10 [ 112.082051] ? find_held_lock+0x2b/0x80 [ 112.082069] ? get_signal+0x835/0x2340 [ 112.082089] do_group_exit+0xd3/0x2a0 [ 112.082104] get_signal+0x2315/0x2340 [ 112.082121] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 112.082136] ? __pfx_get_signal+0x10/0x10 [ 112.082152] ? __schedule+0xe91/0x3590 [ 112.082172] arch_do_signal_or_restart+0x80/0x790 [ 112.082190] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 112.082206] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 112.082227] ? __pfx___x64_sys_futex+0x10/0x10 [ 112.082246] exit_to_user_mode_loop+0x8b/0x110 [ 112.082259] do_syscall_64+0x2f7/0x360 [ 112.082271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.082284] RIP: 0033:0x7f947dabab19 [ 112.082293] Code: Unable to access opcode bytes at 0x7f947dabaaef. [ 112.082298] RSP: 002b:00007f947b030218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.082310] RAX: 0000000000000001 RBX: 00007f947dbcdf68 RCX: 00007f947dabab19 [ 112.082317] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f947dbcdf6c [ 112.082324] RBP: 00007f947dbcdf60 R08: 000000000000000e R09: 0000000000000000 [ 112.082331] R10: 0000000000000009 R11: 0000000000000246 R12: 00007f947dbcdf6c [ 112.082338] R13: 00007ffc5354c0af R14: 00007f947b030300 R15: 0000000000022000 [ 112.082354] [ 112.082358] kmemleak: Object (percpu) 0x607f1a6394f0 (size 8): [ 112.082365] kmemleak: comm "syz-executor.7", pid 3998, jiffies 4294778716 [ 112.082372] kmemleak: min_count = 1 [ 112.082376] kmemleak: count = 0 [ 112.082379] kmemleak: flags = 0x21 [ 112.082383] kmemleak: checksum = 0 [ 112.082387] kmemleak: backtrace: [ 112.082390] pcpu_alloc_noprof+0x87a/0x1170 [ 112.082405] perf_trace_event_init+0x366/0xa10 [ 112.082418] perf_trace_init+0x1a4/0x2f0 [ 112.082429] perf_tp_event_init+0xa6/0x120 [ 112.082445] perf_try_init_event+0x140/0x9f0 [ 112.082458] perf_event_alloc.part.0+0x118e/0x45f0 [ 112.082474] __do_sys_perf_event_open+0x719/0x2c20 [ 112.082487] do_syscall_64+0xbf/0x360 [ 112.082496] entry_SYSCALL_64_after_hwframe+0x77/0x7f 08:57:51 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x5412, &(0x7f00000000c0)=""/4096) 08:57:51 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0xc8}) [ 112.169577] kmemleak: Found object by alias at 0x607f1a6394f8 [ 112.169596] CPU: 1 UID: 0 PID: 3992 Comm: syz-executor.7 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 112.169615] Tainted: [W]=WARN [ 112.169619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.169626] Call Trace: [ 112.169631] [ 112.169636] dump_stack_lvl+0xca/0x120 [ 112.169666] __lookup_object+0x94/0xb0 [ 112.169684] delete_object_full+0x27/0x70 [ 112.169700] free_percpu+0x30/0x1160 [ 112.169716] ? arch_uprobe_clear_state+0x16/0x140 [ 112.169737] futex_hash_free+0x38/0xc0 [ 112.169752] mmput+0x2d3/0x390 [ 112.169771] do_exit+0x79d/0x2970 [ 112.169785] ? signal_wake_up_state+0x85/0x120 [ 112.169801] ? zap_other_threads+0x2b9/0x3a0 [ 112.169817] ? __pfx_do_exit+0x10/0x10 [ 112.169829] ? do_group_exit+0x1c3/0x2a0 [ 112.169843] ? lock_release+0xc8/0x290 [ 112.169860] do_group_exit+0xd3/0x2a0 [ 112.169875] __x64_sys_exit_group+0x3e/0x50 [ 112.169888] x64_sys_call+0x18c5/0x18d0 [ 112.169904] do_syscall_64+0xbf/0x360 [ 112.169916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.169928] RIP: 0033:0x7fd5ed05bb19 [ 112.169937] Code: Unable to access opcode bytes at 0x7fd5ed05baef. [ 112.169942] RSP: 002b:00007fffc38ab358 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 112.169953] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fd5ed05bb19 [ 112.169966] RDX: 00007fd5ed00e72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 112.169974] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 112.169980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.169987] R13: 0000000000000001 R14: 0000000000000001 R15: 00007fffc38ab440 [ 112.170003] [ 112.170007] kmemleak: Object (percpu) 0x607f1a6394f0 (size 16): [ 112.170014] kmemleak: comm "syz-executor.6", pid 286, jiffies 4294778792 [ 112.170021] kmemleak: min_count = 1 [ 112.170025] kmemleak: count = 0 [ 112.170029] kmemleak: flags = 0x21 [ 112.170033] kmemleak: checksum = 0 [ 112.170037] kmemleak: backtrace: [ 112.170040] pcpu_alloc_noprof+0x87a/0x1170 [ 112.170055] mm_init+0x99b/0x1170 [ 112.170063] copy_process+0x3ab7/0x73c0 [ 112.170073] kernel_clone+0xea/0x7f0 [ 112.170083] __do_sys_clone+0xce/0x120 [ 112.170093] do_syscall_64+0xbf/0x360 [ 112.170101] entry_SYSCALL_64_after_hwframe+0x77/0x7f 08:57:51 executing program 2: r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) fallocate(r0, 0x0, 0x0, 0x3f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) sendfile(r1, r0, 0x0, 0x9) 08:57:51 executing program 4: rt_sigprocmask(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex(&(0x7f00000000c0)=0x1, 0x6, 0x0, &(0x7f0000000140)={r0, r1+60000000}, 0x0, 0x0) futex(&(0x7f00000001c0)=0x1, 0xa, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240), 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) 08:57:51 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) 08:57:51 executing program 3: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:57:51 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='schedstat\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/212, 0x2}], 0x22) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 08:57:51 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='schedstat\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/212, 0x2}], 0x22) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) [ 112.277534] kmemleak: Found object by alias at 0x607f1a6394f4 [ 112.277553] CPU: 0 UID: 0 PID: 4012 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 112.277571] Tainted: [W]=WARN [ 112.277575] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.277582] Call Trace: [ 112.277587] [ 112.277592] dump_stack_lvl+0xca/0x120 [ 112.277622] __lookup_object+0x94/0xb0 [ 112.277639] delete_object_full+0x27/0x70 [ 112.277656] free_percpu+0x30/0x1160 [ 112.277673] ? arch_uprobe_clear_state+0x16/0x140 [ 112.277693] futex_hash_free+0x38/0xc0 [ 112.277708] mmput+0x2d3/0x390 [ 112.277727] do_exit+0x79d/0x2970 [ 112.277741] ? lock_release+0xc8/0x290 [ 112.277758] ? __pfx_do_exit+0x10/0x10 [ 112.277772] ? find_held_lock+0x2b/0x80 [ 112.277789] ? get_signal+0x835/0x2340 [ 112.277809] do_group_exit+0xd3/0x2a0 [ 112.277828] get_signal+0x2315/0x2340 [ 112.277850] ? __pfx_get_signal+0x10/0x10 [ 112.277866] ? do_futex+0x135/0x370 [ 112.277880] ? __pfx_do_futex+0x10/0x10 [ 112.277894] arch_do_signal_or_restart+0x80/0x790 [ 112.277912] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 112.277928] ? __x64_sys_futex+0x1c9/0x4d0 [ 112.277940] ? __x64_sys_futex+0x1d2/0x4d0 [ 112.277954] ? __pfx___x64_sys_futex+0x10/0x10 [ 112.277968] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 112.277987] exit_to_user_mode_loop+0x8b/0x110 [ 112.278000] do_syscall_64+0x2f7/0x360 [ 112.278012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.278025] RIP: 0033:0x7f947dabab19 [ 112.278034] Code: Unable to access opcode bytes at 0x7f947dabaaef. [ 112.278039] RSP: 002b:00007f947b030218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.278051] RAX: fffffffffffffe00 RBX: 00007f947dbcdf68 RCX: 00007f947dabab19 [ 112.278058] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f947dbcdf68 [ 112.278066] RBP: 00007f947dbcdf60 R08: 0000000000000000 R09: 0000000000000000 [ 112.278073] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f947dbcdf6c [ 112.278080] R13: 00007ffc5354c0af R14: 00007f947b030300 R15: 0000000000022000 [ 112.278095] [ 112.278099] kmemleak: Object (percpu) 0x607f1a6394f0 (size 16): [ 112.278106] kmemleak: comm "syz-executor.3", pid 282, jiffies 4294778861 [ 112.278113] kmemleak: min_count = 1 [ 112.278117] kmemleak: count = 0 [ 112.278120] kmemleak: flags = 0x21 [ 112.278124] kmemleak: checksum = 0 [ 112.278128] kmemleak: backtrace: [ 112.278131] pcpu_alloc_noprof+0x87a/0x1170 [ 112.278146] mm_init+0x99b/0x1170 [ 112.278154] copy_process+0x3ab7/0x73c0 [ 112.278164] kernel_clone+0xea/0x7f0 [ 112.278173] __do_sys_clone+0xce/0x120 [ 112.278183] do_syscall_64+0xbf/0x360 [ 112.278191] entry_SYSCALL_64_after_hwframe+0x77/0x7f 08:57:51 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0xc8}) 08:57:51 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x5412, &(0x7f00000000c0)=""/4096) 08:57:51 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='schedstat\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/212, 0x2}], 0x22) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 08:57:51 executing program 4: rt_sigprocmask(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex(&(0x7f00000000c0)=0x1, 0x6, 0x0, &(0x7f0000000140)={r0, r1+60000000}, 0x0, 0x0) futex(&(0x7f00000001c0)=0x1, 0xa, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240), 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) 08:57:51 executing program 3: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:57:51 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) 08:57:51 executing program 2: rt_sigprocmask(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex(&(0x7f00000000c0)=0x1, 0x6, 0x0, &(0x7f0000000140)={r0, r1+60000000}, 0x0, 0x0) futex(&(0x7f00000001c0)=0x1, 0xa, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240), 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) 08:57:51 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='schedstat\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/212, 0x2}], 0x22) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 08:57:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x17e}) [ 112.447885] kmemleak: Found object by alias at 0x607f1a6394fc [ 112.447905] CPU: 0 UID: 0 PID: 4032 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 112.447923] Tainted: [W]=WARN [ 112.447927] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.447934] Call Trace: [ 112.447939] [ 112.447943] dump_stack_lvl+0xca/0x120 [ 112.447973] __lookup_object+0x94/0xb0 [ 112.447990] delete_object_full+0x27/0x70 [ 112.448006] free_percpu+0x30/0x1160 [ 112.448022] ? arch_uprobe_clear_state+0x16/0x140 [ 112.448043] futex_hash_free+0x38/0xc0 [ 112.448057] mmput+0x2d3/0x390 [ 112.448076] do_exit+0x79d/0x2970 [ 112.448090] ? signal_wake_up_state+0x85/0x120 [ 112.448106] ? zap_other_threads+0x2b9/0x3a0 [ 112.448122] ? __pfx_do_exit+0x10/0x10 [ 112.448135] ? do_group_exit+0x1c3/0x2a0 [ 112.448148] ? lock_release+0xc8/0x290 [ 112.448165] do_group_exit+0xd3/0x2a0 [ 112.448180] __x64_sys_exit_group+0x3e/0x50 [ 112.448194] x64_sys_call+0x18c5/0x18d0 [ 112.448209] do_syscall_64+0xbf/0x360 [ 112.448221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.448232] RIP: 0033:0x7f6cc00f7b19 [ 112.448241] Code: Unable to access opcode bytes at 0x7f6cc00f7aef. [ 112.448246] RSP: 002b:00007ffd05002f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 112.448258] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f6cc00f7b19 [ 112.448266] RDX: 00007f6cc00aa72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 112.448273] RBP: 0000000000000000 R08: 0000001b2d02001c R09: 0000000000000000 [ 112.448280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.448286] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd05003040 [ 112.448302] [ 112.448306] kmemleak: Object (percpu) 0x607f1a6394f0 (size 16): [ 112.448313] kmemleak: comm "syz-executor.4", pid 287, jiffies 4294779026 [ 112.448320] kmemleak: min_count = 1 [ 112.448323] kmemleak: count = 0 [ 112.448327] kmemleak: flags = 0x21 [ 112.448331] kmemleak: checksum = 0 [ 112.448335] kmemleak: backtrace: [ 112.448338] pcpu_alloc_noprof+0x87a/0x1170 [ 112.448353] mm_init+0x99b/0x1170 [ 112.448361] copy_process+0x3ab7/0x73c0 [ 112.448370] kernel_clone+0xea/0x7f0 [ 112.448380] __do_sys_clone+0xce/0x120 [ 112.448390] do_syscall_64+0xbf/0x360 [ 112.448398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.479810] kmemleak: Found object by alias at 0x607f1a6394f8 [ 112.479822] CPU: 0 UID: 0 PID: 4027 Comm: syz-executor.7 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 112.479838] Tainted: [W]=WARN [ 112.479842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.479848] Call Trace: [ 112.479851] [ 112.479855] dump_stack_lvl+0xca/0x120 [ 112.479874] __lookup_object+0x94/0xb0 [ 112.479888] delete_object_full+0x27/0x70 [ 112.479904] free_percpu+0x30/0x1160 [ 112.479918] ? arch_uprobe_clear_state+0x16/0x140 [ 112.479936] futex_hash_free+0x38/0xc0 [ 112.479948] mmput+0x2d3/0x390 [ 112.479970] do_exit+0x79d/0x2970 [ 112.479983] ? signal_wake_up_state+0x85/0x120 [ 112.479997] ? zap_other_threads+0x2b9/0x3a0 [ 112.480012] ? __pfx_do_exit+0x10/0x10 [ 112.480024] ? do_group_exit+0x1c3/0x2a0 [ 112.480038] ? lock_release+0xc8/0x290 [ 112.480053] do_group_exit+0xd3/0x2a0 [ 112.480068] __x64_sys_exit_group+0x3e/0x50 [ 112.480081] x64_sys_call+0x18c5/0x18d0 [ 112.480095] do_syscall_64+0xbf/0x360 [ 112.480106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.480117] RIP: 0033:0x7fd5ed05bb19 [ 112.480126] Code: Unable to access opcode bytes at 0x7fd5ed05baef. [ 112.480131] RSP: 002b:00007fffc38ab358 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 112.480141] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fd5ed05bb19 [ 112.480149] RDX: 00007fd5ed00e72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 112.480156] RBP: 0000000000000000 R08: 0000001b2d127ab4 R09: 0000000000000000 [ 112.480163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.480170] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffc38ab440 [ 112.480185] [ 112.480189] kmemleak: Object (percpu) 0x607f1a6394f0 (size 16): [ 112.480196] kmemleak: comm "syz-executor.4", pid 287, jiffies 4294779026 [ 112.480202] kmemleak: min_count = 1 [ 112.480206] kmemleak: count = 0 [ 112.480210] kmemleak: flags = 0x21 [ 112.480213] kmemleak: checksum = 0 [ 112.480217] kmemleak: backtrace: [ 112.480220] pcpu_alloc_noprof+0x87a/0x1170 [ 112.480234] mm_init+0x99b/0x1170 [ 112.480242] copy_process+0x3ab7/0x73c0 [ 112.480252] kernel_clone+0xea/0x7f0 [ 112.480262] __do_sys_clone+0xce/0x120 [ 112.480271] do_syscall_64+0xbf/0x360 [ 112.480280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.507788] kmemleak: Found object by alias at 0x607f1a6394f4 [ 112.507807] CPU: 1 UID: 0 PID: 4031 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 112.507829] Tainted: [W]=WARN [ 112.507833] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.507840] Call Trace: [ 112.507844] [ 112.507849] dump_stack_lvl+0xca/0x120 [ 112.507879] __lookup_object+0x94/0xb0 [ 112.507897] delete_object_full+0x27/0x70 [ 112.507913] free_percpu+0x30/0x1160 [ 112.507932] ? arch_uprobe_clear_state+0x16/0x140 [ 112.507955] futex_hash_free+0x38/0xc0 [ 112.507970] mmput+0x2d3/0x390 [ 112.507989] do_exit+0x79d/0x2970 [ 112.508003] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 112.508024] ? zap_other_threads+0x2b9/0x3a0 [ 112.508042] ? __pfx_do_exit+0x10/0x10 [ 112.508054] ? do_group_exit+0x1c3/0x2a0 [ 112.508068] ? _raw_spin_unlock_irq+0x23/0x40 [ 112.508087] do_group_exit+0xd3/0x2a0 [ 112.508102] __x64_sys_exit_group+0x3e/0x50 [ 112.508115] x64_sys_call+0x18c5/0x18d0 [ 112.508131] do_syscall_64+0xbf/0x360 [ 112.508143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.508155] RIP: 0033:0x7f947dabab19 [ 112.508163] Code: Unable to access opcode bytes at 0x7f947dabaaef. [ 112.508169] RSP: 002b:00007ffc5354c2d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 112.508180] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f947dabab19 [ 112.508188] RDX: 00007f947da6d72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 112.508195] RBP: 0000000000000000 R08: 0000001b2cf21184 R09: 0000000000000000 [ 112.508202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.508209] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc5354c3c0 [ 112.508224] [ 112.508228] kmemleak: Object (percpu) 0x607f1a6394f0 (size 16): [ 112.508235] kmemleak: comm "syz-executor.4", pid 287, jiffies 4294779026 [ 112.508243] kmemleak: min_count = 1 [ 112.508246] kmemleak: count = 0 [ 112.508250] kmemleak: flags = 0x21 [ 112.508254] kmemleak: checksum = 0 08:57:51 executing program 3: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 112.508258] kmemleak: backtrace: [ 112.508262] pcpu_alloc_noprof+0x87a/0x1170 [ 112.508276] mm_init+0x99b/0x1170 [ 112.508284] copy_process+0x3ab7/0x73c0 [ 112.508294] kernel_clone+0xea/0x7f0 [ 112.508304] __do_sys_clone+0xce/0x120 [ 112.508314] do_syscall_64+0xbf/0x360 [ 112.508322] entry_SYSCALL_64_after_hwframe+0x77/0x7f 08:57:51 executing program 4: rt_sigprocmask(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex(&(0x7f00000000c0)=0x1, 0x6, 0x0, &(0x7f0000000140)={r0, r1+60000000}, 0x0, 0x0) futex(&(0x7f00000001c0)=0x1, 0xa, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240), 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) 08:57:51 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='schedstat\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/212, 0x2}], 0x22) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 08:57:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x17e}) 08:57:51 executing program 2: rt_sigprocmask(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex(&(0x7f00000000c0)=0x1, 0x6, 0x0, &(0x7f0000000140)={r0, r1+60000000}, 0x0, 0x0) futex(&(0x7f00000001c0)=0x1, 0xa, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240), 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) 08:57:51 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x17e}) 08:57:51 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='schedstat\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/212, 0x2}], 0x22) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) VM DIAGNOSIS: 09:02:59 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84bdec0e RDX=ffffed100d9e6dd9 RSI=0000000000000004 RDI=ffff88806cf36ec0 RBP=ffff88806cf36ec0 RSP=ffff888042e2fa40 R8 =0000000000000000 R9 =ffffed100d9e6dd8 R10=ffff88806cf36ec3 R11=0000000000000001 R12=1ffff110085c5f49 R13=0000000000000003 R14=ffffed100d9e6dd8 R15=ffff888042e2fa78 RIP=ffffffff84bdeda0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555566d79400 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555566d7ac18 CR3=000000000ec78000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f3997b187c000007f3997b187c8 XMM02=00007f3997b187e000007f3997b187c0 XMM03=00007f3997b187c800007f3997b187c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000002 RBX=0000000000000002 RCX=ffffffff8146741d RDX=0000000000000002 RSI=0000000000000004 RDI=ffff888016a7f690 RBP=ffffed1001ea255b RSP=ffff888016a7f628 R8 =0000000000000001 R9 =ffffed1002d4fed2 R10=0000000000000003 R11=ffff88800a7484b8 R12=ffff88800f5133d0 R13=ffff88800f512a00 R14=ffffed1001ea267a R15=ffff88800f512ac4 RIP=ffffffff81467503 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555579908400 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff48c3553a4 CR3=0000000041c2f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000