Warning: Permanently added '[localhost]:45289' (ECDSA) to the list of known hosts.
2025/09/01 10:01:41 fuzzer started
2025/09/01 10:01:42 dialing manager at localhost:35473
syzkaller login: [   51.971072] cgroup: Unknown subsys name 'net'
[   52.144830] cgroup: Unknown subsys name 'cpuset'
[   52.210669] cgroup: Unknown subsys name 'rlimit'
2025/09/01 10:01:53 syscalls: 2214
2025/09/01 10:01:53 code coverage: enabled
2025/09/01 10:01:53 comparison tracing: enabled
2025/09/01 10:01:53 extra coverage: enabled
2025/09/01 10:01:53 setuid sandbox: enabled
2025/09/01 10:01:53 namespace sandbox: enabled
2025/09/01 10:01:53 Android sandbox: enabled
2025/09/01 10:01:53 fault injection: enabled
2025/09/01 10:01:53 leak checking: enabled
2025/09/01 10:01:53 net packet injection: enabled
2025/09/01 10:01:53 net device setup: enabled
2025/09/01 10:01:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/09/01 10:01:53 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/09/01 10:01:53 USB emulation: enabled
2025/09/01 10:01:53 hci packet injection: enabled
2025/09/01 10:01:53 wifi device emulation: enabled
2025/09/01 10:01:53 802.15.4 emulation: enabled
2025/09/01 10:01:53 fetching corpus: 0, signal 0/2000 (executing program)
2025/09/01 10:01:53 fetching corpus: 50, signal 18177/21738 (executing program)
2025/09/01 10:01:54 fetching corpus: 100, signal 25545/30591 (executing program)
2025/09/01 10:01:54 fetching corpus: 150, signal 34062/40347 (executing program)
2025/09/01 10:01:54 fetching corpus: 200, signal 41936/49351 (executing program)
2025/09/01 10:01:54 fetching corpus: 250, signal 46797/55369 (executing program)
2025/09/01 10:01:54 fetching corpus: 300, signal 49922/59622 (executing program)
2025/09/01 10:01:54 fetching corpus: 350, signal 54986/65616 (executing program)
2025/09/01 10:01:54 fetching corpus: 400, signal 58548/70103 (executing program)
2025/09/01 10:01:54 fetching corpus: 450, signal 64474/76547 (executing program)
2025/09/01 10:01:54 fetching corpus: 500, signal 66826/79796 (executing program)
2025/09/01 10:01:54 fetching corpus: 550, signal 71618/85120 (executing program)
2025/09/01 10:01:55 fetching corpus: 600, signal 75423/89411 (executing program)
2025/09/01 10:01:55 fetching corpus: 650, signal 78675/93149 (executing program)
2025/09/01 10:01:55 fetching corpus: 700, signal 81418/96422 (executing program)
2025/09/01 10:01:55 fetching corpus: 750, signal 83632/99278 (executing program)
2025/09/01 10:01:55 fetching corpus: 800, signal 85576/101789 (executing program)
2025/09/01 10:01:55 fetching corpus: 850, signal 86685/103633 (executing program)
2025/09/01 10:01:55 fetching corpus: 900, signal 88197/105725 (executing program)
2025/09/01 10:01:55 fetching corpus: 950, signal 90588/108509 (executing program)
2025/09/01 10:01:55 fetching corpus: 1000, signal 92862/111099 (executing program)
2025/09/01 10:01:56 fetching corpus: 1050, signal 94270/113018 (executing program)
2025/09/01 10:01:56 fetching corpus: 1100, signal 95914/115052 (executing program)
2025/09/01 10:01:56 fetching corpus: 1150, signal 98124/117481 (executing program)
2025/09/01 10:01:56 fetching corpus: 1200, signal 99429/119229 (executing program)
2025/09/01 10:01:56 fetching corpus: 1250, signal 102252/121989 (executing program)
2025/09/01 10:01:56 fetching corpus: 1300, signal 103538/123607 (executing program)
2025/09/01 10:01:56 fetching corpus: 1350, signal 105167/125382 (executing program)
2025/09/01 10:01:57 fetching corpus: 1400, signal 106081/126719 (executing program)
2025/09/01 10:01:57 fetching corpus: 1450, signal 107345/128259 (executing program)
2025/09/01 10:01:57 fetching corpus: 1500, signal 108543/129699 (executing program)
2025/09/01 10:01:57 fetching corpus: 1550, signal 109740/131092 (executing program)
2025/09/01 10:01:57 fetching corpus: 1600, signal 110740/132344 (executing program)
2025/09/01 10:01:57 fetching corpus: 1650, signal 111911/133637 (executing program)
2025/09/01 10:01:57 fetching corpus: 1700, signal 113270/135084 (executing program)
2025/09/01 10:01:57 fetching corpus: 1750, signal 114252/136277 (executing program)
2025/09/01 10:01:57 fetching corpus: 1800, signal 116023/137807 (executing program)
2025/09/01 10:01:57 fetching corpus: 1850, signal 117112/139013 (executing program)
2025/09/01 10:01:58 fetching corpus: 1900, signal 118370/140218 (executing program)
2025/09/01 10:01:58 fetching corpus: 1950, signal 119925/141606 (executing program)
2025/09/01 10:01:58 fetching corpus: 2000, signal 120808/142574 (executing program)
2025/09/01 10:01:58 fetching corpus: 2050, signal 121418/143400 (executing program)
2025/09/01 10:01:58 fetching corpus: 2100, signal 123024/144698 (executing program)
2025/09/01 10:01:58 fetching corpus: 2150, signal 123929/145612 (executing program)
2025/09/01 10:01:58 fetching corpus: 2200, signal 125235/146711 (executing program)
2025/09/01 10:01:58 fetching corpus: 2250, signal 126098/147590 (executing program)
2025/09/01 10:01:58 fetching corpus: 2300, signal 127491/148657 (executing program)
2025/09/01 10:01:58 fetching corpus: 2350, signal 128233/149451 (executing program)
2025/09/01 10:01:59 fetching corpus: 2400, signal 129101/150200 (executing program)
2025/09/01 10:01:59 fetching corpus: 2450, signal 129871/150974 (executing program)
2025/09/01 10:01:59 fetching corpus: 2500, signal 130672/151725 (executing program)
2025/09/01 10:01:59 fetching corpus: 2550, signal 131505/152453 (executing program)
2025/09/01 10:01:59 fetching corpus: 2600, signal 132214/153137 (executing program)
2025/09/01 10:01:59 fetching corpus: 2650, signal 134094/154104 (executing program)
2025/09/01 10:01:59 fetching corpus: 2700, signal 134669/154680 (executing program)
2025/09/01 10:01:59 fetching corpus: 2750, signal 135442/155315 (executing program)
2025/09/01 10:01:59 fetching corpus: 2800, signal 136695/156074 (executing program)
2025/09/01 10:01:59 fetching corpus: 2850, signal 137452/156631 (executing program)
2025/09/01 10:01:59 fetching corpus: 2900, signal 137952/157073 (executing program)
2025/09/01 10:02:00 fetching corpus: 2950, signal 138526/157557 (executing program)
2025/09/01 10:02:00 fetching corpus: 3000, signal 139430/158126 (executing program)
2025/09/01 10:02:00 fetching corpus: 3050, signal 139908/158528 (executing program)
2025/09/01 10:02:00 fetching corpus: 3100, signal 140531/158998 (executing program)
2025/09/01 10:02:00 fetching corpus: 3150, signal 141436/159548 (executing program)
2025/09/01 10:02:00 fetching corpus: 3200, signal 141950/159918 (executing program)
2025/09/01 10:02:00 fetching corpus: 3250, signal 142360/160292 (executing program)
2025/09/01 10:02:00 fetching corpus: 3300, signal 142909/160659 (executing program)
2025/09/01 10:02:00 fetching corpus: 3350, signal 143579/161045 (executing program)
2025/09/01 10:02:00 fetching corpus: 3400, signal 144167/161382 (executing program)
2025/09/01 10:02:01 fetching corpus: 3450, signal 144637/161714 (executing program)
2025/09/01 10:02:01 fetching corpus: 3500, signal 145359/162052 (executing program)
2025/09/01 10:02:01 fetching corpus: 3550, signal 145848/162379 (executing program)
2025/09/01 10:02:01 fetching corpus: 3600, signal 146429/162675 (executing program)
2025/09/01 10:02:01 fetching corpus: 3650, signal 146834/162928 (executing program)
2025/09/01 10:02:01 fetching corpus: 3700, signal 147903/163263 (executing program)
2025/09/01 10:02:01 fetching corpus: 3750, signal 148521/163502 (executing program)
2025/09/01 10:02:01 fetching corpus: 3800, signal 149104/163849 (executing program)
2025/09/01 10:02:01 fetching corpus: 3850, signal 149423/164085 (executing program)
2025/09/01 10:02:02 fetching corpus: 3900, signal 150276/164284 (executing program)
2025/09/01 10:02:02 fetching corpus: 3950, signal 150630/164467 (executing program)
2025/09/01 10:02:02 fetching corpus: 4000, signal 151178/164631 (executing program)
2025/09/01 10:02:02 fetching corpus: 4050, signal 151912/164652 (executing program)
2025/09/01 10:02:02 fetching corpus: 4100, signal 152391/164660 (executing program)
2025/09/01 10:02:02 fetching corpus: 4150, signal 153073/164662 (executing program)
2025/09/01 10:02:02 fetching corpus: 4200, signal 153564/164678 (executing program)
2025/09/01 10:02:02 fetching corpus: 4250, signal 155291/164705 (executing program)
2025/09/01 10:02:02 fetching corpus: 4300, signal 155905/164712 (executing program)
2025/09/01 10:02:02 fetching corpus: 4350, signal 156263/164731 (executing program)
2025/09/01 10:02:03 fetching corpus: 4400, signal 156918/164735 (executing program)
2025/09/01 10:02:03 fetching corpus: 4450, signal 157552/164761 (executing program)
2025/09/01 10:02:03 fetching corpus: 4500, signal 158029/164772 (executing program)
2025/09/01 10:02:03 fetching corpus: 4550, signal 158292/164775 (executing program)
2025/09/01 10:02:03 fetching corpus: 4600, signal 158670/164799 (executing program)
2025/09/01 10:02:03 fetching corpus: 4650, signal 159177/164799 (executing program)
2025/09/01 10:02:03 fetching corpus: 4700, signal 159722/164806 (executing program)
2025/09/01 10:02:04 fetching corpus: 4750, signal 160313/164827 (executing program)
2025/09/01 10:02:04 fetching corpus: 4800, signal 160611/164827 (executing program)
2025/09/01 10:02:04 fetching corpus: 4850, signal 161065/164842 (executing program)
2025/09/01 10:02:04 fetching corpus: 4900, signal 161485/164849 (executing program)
2025/09/01 10:02:04 fetching corpus: 4950, signal 161944/164858 (executing program)
2025/09/01 10:02:04 fetching corpus: 4956, signal 161987/164858 (executing program)
2025/09/01 10:02:04 fetching corpus: 4956, signal 161987/164858 (executing program)
2025/09/01 10:02:06 starting 8 fuzzer processes
10:02:06 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)
shutdown(r0, 0x1)

10:02:06 executing program 2:
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

10:02:06 executing program 1:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/clockevents', 0x200100, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000001d80)={0xb3}, 0x0, 0x0, 0x0, 0x0)

10:02:06 executing program 6:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001540)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@private1}, 0x0, @in=@multicast1}}, 0xe8)

10:02:06 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ipv6_route\x00')
pread64(r0, &(0x7f00000000c0)=""/194, 0xc2, 0x40000000000000)

10:02:06 executing program 7:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')
setns(r0, 0x40000000)

10:02:06 executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x40, 0x0)

[   75.815743] audit: type=1400 audit(1756720926.672:7): avc:  denied  { execmem } for  pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
10:02:06 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[   77.007051] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   77.009449] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   77.011627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   77.015966] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   77.018394] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   77.072183] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   77.075224] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   77.081744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   77.089001] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   77.094828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   77.227724] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   77.234466] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   77.236870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   77.240909] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   77.244101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   77.277268] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   77.282710] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   77.289895] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   77.293997] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   77.301725] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   77.304862] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   77.307084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   77.316394] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   77.319228] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   77.319471] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   77.322395] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   77.329787] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   77.331483] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   77.335275] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   77.342600] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   77.345971] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   77.354362] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   77.357599] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   77.362198] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   77.374423] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   77.376614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   77.380429] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   77.394519] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   77.412295] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   77.420931] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   79.039650] Bluetooth: hci0: command tx timeout
[   79.167388] Bluetooth: hci1: command tx timeout
[   79.295498] Bluetooth: hci2: command tx timeout
[   79.359290] Bluetooth: hci4: command tx timeout
[   79.425173] Bluetooth: hci7: command tx timeout
[   79.488260] Bluetooth: hci6: command tx timeout
[   79.488954] Bluetooth: hci3: command tx timeout
[   79.552426] Bluetooth: hci5: command tx timeout
[   81.087845] Bluetooth: hci0: command tx timeout
[   81.216025] Bluetooth: hci1: command tx timeout
[   81.343327] Bluetooth: hci2: command tx timeout
[   81.407205] Bluetooth: hci4: command tx timeout
[   81.471315] Bluetooth: hci7: command tx timeout
[   81.536161] Bluetooth: hci3: command tx timeout
[   81.536562] Bluetooth: hci6: command tx timeout
[   81.599451] Bluetooth: hci5: command tx timeout
[   83.136182] Bluetooth: hci0: command tx timeout
[   83.264432] Bluetooth: hci1: command tx timeout
[   83.391277] Bluetooth: hci2: command tx timeout
[   83.455234] Bluetooth: hci4: command tx timeout
[   83.519228] Bluetooth: hci7: command tx timeout
[   83.583280] Bluetooth: hci3: command tx timeout
[   83.584061] Bluetooth: hci6: command tx timeout
[   83.647299] Bluetooth: hci5: command tx timeout
[   85.183737] Bluetooth: hci0: command tx timeout
[   85.313305] Bluetooth: hci1: command tx timeout
[   85.440213] Bluetooth: hci2: command tx timeout
[   85.505245] Bluetooth: hci4: command tx timeout
[   85.567333] Bluetooth: hci7: command tx timeout
[   85.631641] Bluetooth: hci6: command tx timeout
[   85.632505] Bluetooth: hci3: command tx timeout
[   85.696543] Bluetooth: hci5: command tx timeout
[  114.440463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.441097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.648407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.648992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.936149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.936733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:02:45 executing program 7:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')
setns(r0, 0x40000000)

[  115.136119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.136705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:02:46 executing program 7:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')
setns(r0, 0x40000000)

10:02:46 executing program 7:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')
setns(r0, 0x40000000)

10:02:46 executing program 7:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[  115.402358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.402913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:02:46 executing program 7:
r0 = msgget$private(0x0, 0x400)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/4096)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000001000)=""/108)
r1 = msgget(0x0, 0x100)
msgrcv(r1, &(0x7f0000001300)={0x0, ""/150}, 0x9e, 0x3, 0x3000)

10:02:46 executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x40, 0x0)

[  115.557632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.558276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:02:46 executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x40, 0x0)

[  115.656674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.657779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:02:46 executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x40, 0x0)

[  115.746825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.747422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.841866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.842465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.893826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.894484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.960045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.960624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.021287] audit: type=1400 audit(1756720966.877:8): avc:  denied  { open } for  pid=3888 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  116.027274] audit: type=1400 audit(1756720966.877:9): avc:  denied  { kernel } for  pid=3888 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  116.096679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.097273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.128800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.129386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.151151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.151720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.263083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.263702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.306964] loop0: detected capacity change from 0 to 2097151
[  116.347546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.348306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:02:47 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x121802, 0x0)
write$cgroup_devices(r0, &(0x7f00000004c0)={'b', ' *:* ', 'rwm\x00'}, 0xa)

10:02:47 executing program 6:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001540)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@private1}, 0x0, @in=@multicast1}}, 0xe8)

10:02:47 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)

10:02:47 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14)
close(r0)

10:02:47 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
close(r0)

10:02:47 executing program 2:
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

10:02:47 executing program 1:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/clockevents', 0x200100, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000001d80)={0xb3}, 0x0, 0x0, 0x0, 0x0)

10:02:47 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)
shutdown(r0, 0x1)

10:02:47 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)

10:02:47 executing program 6:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001540)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@private1}, 0x0, @in=@multicast1}}, 0xe8)

10:02:47 executing program 2:
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

10:02:47 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x121802, 0x0)
write$cgroup_devices(r0, &(0x7f00000004c0)={'b', ' *:* ', 'rwm\x00'}, 0xa)

10:02:47 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14)
close(r0)

10:02:47 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
close(r0)

10:02:47 executing program 6:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001540)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@private1}, 0x0, @in=@multicast1}}, 0xe8)

10:02:47 executing program 1:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/clockevents', 0x200100, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000001d80)={0xb3}, 0x0, 0x0, 0x0, 0x0)

10:02:47 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)
shutdown(r0, 0x1)

10:02:47 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)

10:02:47 executing program 2:
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[  116.796976] BUG: unable to handle page fault for address: ffffed10212c91ce
[  116.797554] #PF: supervisor read access in kernel mode
[  116.797971] #PF: error_code(0x0000) - not-present page
[  116.798387] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 
[  116.798832] Oops: Oops: 0000 [#1] SMP KASAN NOPTI
[  116.799752] CPU: 0 UID: 0 PID: 3948 Comm: syz-executor.7 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  116.802388] Tainted: [W]=WARN
[  116.803106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  116.805335] RIP: 0010:perf_tp_event+0x175/0xe70
[  116.806396] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  116.809253] RSP: 0018:ffff8880436e7800 EFLAGS: 00010212
[  116.809674] RAX: 1ffff110212c91ce RBX: ffff888109648c80 RCX: ffffc9000b04d000
[  116.810237] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: ffff888109648e70
[  116.810798] RBP: ffff8880436e7a70 R08: ffff88806ce31340 R09: ffffe8ffffc15ef0
[  116.811363] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  116.811933] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[  116.812496] FS:  00007f35c3038700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  116.813123] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.813583] CR2: ffffed10212c91ce CR3: 000000000e7a2000 CR4: 0000000000350ef0
[  116.814139] Call Trace:
[  116.814346]  <TASK>
[  116.814530]  ? perf_swevent_event+0x63/0x3f0
[  116.814915]  ? __pfx_perf_tp_event+0x10/0x10
[  116.815282]  ? tracing_gen_ctx_irq_test+0x167/0x1f0
[  116.815688]  ? perf_swevent_event+0x63/0x3f0
[  116.816044]  ? tracing_gen_ctx_irq_test+0x167/0x1f0
[  116.816440]  ? perf_swevent_event+0x63/0x3f0
[  116.816795]  ? perf_tp_event+0x807/0xe70
[  116.817127]  ? __pfx_perf_tp_event+0x10/0x10
[  116.817484]  ? __perf_install_in_context+0x503/0xb90
[  116.817888]  ? do_raw_spin_unlock+0x53/0x220
[  116.818252]  ? perf_trace_run_bpf_submit+0xef/0x180
[  116.818651]  perf_trace_run_bpf_submit+0xef/0x180
[  116.819042]  perf_trace_lock+0x337/0x5d0
[  116.819372]  ? __pfx_perf_trace_lock+0x10/0x10
[  116.819750]  ? lock_acquire+0x15e/0x2f0
[  116.820070]  ? futex_ref_get+0x48/0x300
[  116.820390]  ? futex_ref_get+0x114/0x300
[  116.820711]  ? futex_hash+0x15c/0x390
[  116.821017]  lock_release+0x1ab/0x290
[  116.821326]  ? futex_hash+0x15c/0x390
[  116.821629]  futex_ref_get+0x119/0x300
[  116.821939]  ? futex_hash+0x15c/0x390
[  116.822241]  futex_hash+0x70/0x390
[  116.822529]  futex_wake+0x143/0x540
[  116.822826]  ? __pfx_perf_trace_lock+0x10/0x10
[  116.823193]  ? __pfx_futex_wake+0x10/0x10
[  116.823535]  ? __do_sys_perf_event_open+0x44d/0x2c20
[  116.823941]  ? lock_release+0xc8/0x290
[  116.824259]  do_futex+0x26d/0x370
[  116.824544]  ? __pfx_do_futex+0x10/0x10
[  116.824863]  ? __pfx___do_sys_perf_event_open+0x10/0x10
[  116.825285]  ? find_held_lock+0x2b/0x80
[  116.825610]  __x64_sys_futex+0x1c9/0x4d0
[  116.825937]  ? __pfx___x64_sys_futex+0x10/0x10
[  116.826306]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  116.826726]  do_syscall_64+0xbf/0x360
[  116.827032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.827447] RIP: 0033:0x7f35c5ac2b19
[  116.827744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  116.829147] RSP: 002b:00007f35c3038218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  116.829735] RAX: ffffffffffffffda RBX: 00007f35c5bd5f68 RCX: 00007f35c5ac2b19
[  116.830291] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f35c5bd5f6c
[  116.830845] RBP: 00007f35c5bd5f60 R08: 000000000000000e R09: 0000000000000000
[  116.831400] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f35c5bd5f6c
[  116.831968] R13: 00007fffdf187bdf R14: 00007f35c3038300 R15: 0000000000022000
[  116.832535]  </TASK>
[  116.832722] Modules linked in:
[  116.832980] CR2: ffffed10212c91ce
[  116.833252] ---[ end trace 0000000000000000 ]---
[  116.833621] RIP: 0010:perf_tp_event+0x175/0xe70
[  116.833995] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  116.835413] RSP: 0018:ffff8880436e7800 EFLAGS: 00010212
[  116.835841] RAX: 1ffff110212c91ce RBX: ffff888109648c80 RCX: ffffc9000b04d000
[  116.836399] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: ffff888109648e70
[  116.836951] RBP: ffff8880436e7a70 R08: ffff88806ce31340 R09: ffffe8ffffc15ef0
[  116.837508] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  116.838060] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[  116.838618] FS:  00007f35c3038700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  116.839242] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.839707] CR2: ffffed10212c91ce CR3: 000000000e7a2000 CR4: 0000000000350ef0
[  116.840265] note: syz-executor.7[3948] exited with irqs disabled
[  116.840748] BUG: unable to handle page fault for address: ffffed10212c91ce
[  116.841287] #PF: supervisor read access in kernel mode
[  116.841690] #PF: error_code(0x0000) - not-present page
[  116.842096] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 
[  116.842537] Oops: Oops: 0000 [#2] SMP KASAN NOPTI
[  116.842922] CPU: 0 UID: 0 PID: 3948 Comm: syz-executor.7 Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  116.843884] Tainted: [D]=DIE, [W]=WARN
[  116.844200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  116.844832] RIP: 0010:perf_tp_event+0x175/0xe70
[  116.845208] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  116.846610] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012
[  116.847026] RAX: 1ffff110212c91ce RBX: ffff888109648c80 RCX: 0000000000000002
[  116.847585] RDX: ffff888017150000 RSI: ffffffff8189a4e7 RDI: ffff888109648e70
[  116.848138] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc15ef0
[  116.848689] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000
[  116.849242] R13: 000000000000002c R14: ffff88806ce31490 R15: dffffc0000000000
[  116.849792] FS:  00007f35c3038700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  116.850413] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.850867] CR2: ffffed10212c91ce CR3: 000000000e7a2000 CR4: 0000000000350ef0
[  116.851446] Call Trace:
[  116.851659]  <IRQ>
[  116.851838]  ? __pfx_perf_tp_event+0x10/0x10
[  116.852195]  ? __lock_acquire+0xc65/0x1b70
[  116.852532]  ? trace_rcu_utilization+0x26/0x190
[  116.852904]  ? rcu_sched_clock_irq+0x7a0/0x2b40
[  116.853278]  ? __lock_acquire+0x694/0x1b70
[  116.853614]  ? __update_load_avg_se+0x428/0xa40
[  116.853990]  ? lock_acquire+0x15e/0x2f0
[  116.854313]  ? perf_trace_run_bpf_submit+0xef/0x180
[  116.854707]  perf_trace_run_bpf_submit+0xef/0x180
[  116.855094]  perf_trace_lock+0x337/0x5d0
[  116.855441]  ? __pfx_perf_trace_lock+0x10/0x10
[  116.855827]  ? find_held_lock+0x2b/0x80
[  116.856164]  ? hrtimer_interrupt+0x114/0x830
[  116.856538]  lock_release+0x1ab/0x290
[  116.856860]  ktime_get_update_offsets_now+0xab/0x3c0
[  116.857278]  ? hrtimer_interrupt+0x114/0x830
[  116.857648]  ? __pfx_lapic_next_deadline+0x10/0x10
[  116.858058]  hrtimer_interrupt+0x114/0x830
[  116.858407]  __sysvec_apic_timer_interrupt+0xbb/0x330
[  116.858811]  sysvec_apic_timer_interrupt+0x6b/0x80
[  116.859200]  </IRQ>
[  116.859382]  <TASK>
[  116.859571]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  116.859985] RIP: 0010:make_task_dead+0xa2/0x3b0
[  116.860357] Code: 38 00 85 db 0f 84 21 01 00 00 e8 09 a6 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 57 a1 38 00 48 85 db 0f 84 17 01 00 00 <e8> e9 a5 38 00 31 ff 65 8b 1d 60 2f 49 06 81 e3 ff ff ff 7f 89 de
[  116.861755] RSP: 0018:ffff8880436e7f28 EFLAGS: 00000246
[  116.862170] RAX: 0000000000000001 RBX: ffff888017150000 RCX: ffffffff817c3ab6
[  116.862726] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234
[  116.863277] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000
[  116.863836] R10: ffffffff8643b457 R11: 0000000000000001 R12: ffff888017150000
[  116.864387] R13: 0000000000000009 R14: ffff8880436e77e0 R15: 0000000000000000
[  116.864942]  ? trace_irq_enable.constprop.0+0x26/0x100
[  116.865349]  ? make_task_dead+0x214/0x3b0
[  116.865677]  ? make_task_dead+0x214/0x3b0
[  116.866006]  ? do_syscall_64+0xbf/0x360
[  116.866320]  rewind_stack_and_make_dead+0x16/0x20
[  116.866703] RIP: 0033:0x7f35c5ac2b19
[  116.866993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  116.868405] RSP: 002b:00007f35c3038218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  116.868996] RAX: ffffffffffffffda RBX: 00007f35c5bd5f68 RCX: 00007f35c5ac2b19
[  116.869549] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f35c5bd5f6c
[  116.870098] RBP: 00007f35c5bd5f60 R08: 000000000000000e R09: 0000000000000000
[  116.870647] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f35c5bd5f6c
[  116.871202] R13: 00007fffdf187bdf R14: 00007f35c3038300 R15: 0000000000022000
[  116.871769]  </TASK>
[  116.871956] Modules linked in:
[  116.872212] CR2: ffffed10212c91ce
[  116.872483] ---[ end trace 0000000000000000 ]---
[  116.872849] RIP: 0010:perf_tp_event+0x175/0xe70
[  116.873219] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  116.874622] RSP: 0018:ffff8880436e7800 EFLAGS: 00010212
[  116.875039] RAX: 1ffff110212c91ce RBX: ffff888109648c80 RCX: ffffc9000b04d000
[  116.875602] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: ffff888109648e70
[  116.876154] RBP: ffff8880436e7a70 R08: ffff88806ce31340 R09: ffffe8ffffc15ef0
[  116.876707] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  116.877280] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[  116.877857] FS:  00007f35c3038700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  116.878498] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.878954] CR2: ffffed10212c91ce CR3: 000000000e7a2000 CR4: 0000000000350ef0
[  116.879521] Kernel panic - not syncing: Fatal exception in interrupt
[  116.880204] Kernel Offset: disabled
[  116.880492] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---

VM DIAGNOSIS:
10:02:47  Registers:
info registers vcpu 0
RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff8880436e7048
R8 =0000000000000000 R9 =ffffed100151b046 R10=0000000000000034 R11=6572617764726148
R12=0000000000000034 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0
RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f35c3038700 00000000 00000000
GS =0000 ffff8880e55d8000 00000000 00000000
LDT=0000 fffffe7c00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=ffffed10212c91ce CR3=000000000e7a2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f35c5ba97c000007f35c5ba97c8
XMM02=00007f35c5ba97e000007f35c5ba97c0 XMM03=00007f35c5ba97c800007f35c5ba97c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffff88800f271c00 RCX=ffffffff8143cbaf RDX=1ffff11001ecb0cd
RSI=0000000000000008 RDI=ffff88800f271c00 RBP=0000000000200000 RSP=ffff88800f85fdb0
R8 =0000000000000000 R9 =ffffed1001e4e380 R10=0000000000200000 R11=1ffff1100d9e6f7b
R12=ffff888078894ff9 R13=ffffffff886f3150 R14=ffff88800f658000 R15=0000000000000086
RIP=ffffffff81b01730 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e56d8000 00000000 00000000
LDT=0000 fffffe7c00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f35c5fda004 CR3=000000004167b000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000