Warning: Permanently added '[localhost]:1334' (ECDSA) to the list of known hosts. 2025/09/01 11:40:43 fuzzer started 2025/09/01 11:40:43 dialing manager at localhost:35473 syzkaller login: [ 50.527498] cgroup: Unknown subsys name 'net' [ 50.594290] cgroup: Unknown subsys name 'cpuset' [ 50.611677] cgroup: Unknown subsys name 'rlimit' 2025/09/01 11:40:54 syscalls: 2214 2025/09/01 11:40:54 code coverage: enabled 2025/09/01 11:40:54 comparison tracing: enabled 2025/09/01 11:40:54 extra coverage: enabled 2025/09/01 11:40:54 setuid sandbox: enabled 2025/09/01 11:40:54 namespace sandbox: enabled 2025/09/01 11:40:54 Android sandbox: enabled 2025/09/01 11:40:54 fault injection: enabled 2025/09/01 11:40:54 leak checking: enabled 2025/09/01 11:40:54 net packet injection: enabled 2025/09/01 11:40:54 net device setup: enabled 2025/09/01 11:40:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 11:40:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 11:40:54 USB emulation: enabled 2025/09/01 11:40:54 hci packet injection: enabled 2025/09/01 11:40:54 wifi device emulation: enabled 2025/09/01 11:40:54 802.15.4 emulation: enabled 2025/09/01 11:40:54 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 11:40:54 fetching corpus: 50, signal 21293/24870 (executing program) 2025/09/01 11:40:54 fetching corpus: 100, signal 31923/36913 (executing program) 2025/09/01 11:40:54 fetching corpus: 150, signal 48403/54365 (executing program) 2025/09/01 11:40:54 fetching corpus: 200, signal 54257/61405 (executing program) 2025/09/01 11:40:54 fetching corpus: 250, signal 60675/68831 (executing program) 2025/09/01 11:40:54 fetching corpus: 300, signal 64112/73403 (executing program) 2025/09/01 11:40:54 fetching corpus: 350, signal 69196/79346 (executing program) 2025/09/01 11:40:55 fetching corpus: 400, signal 71236/82465 (executing program) 2025/09/01 11:40:55 fetching corpus: 450, signal 74865/86974 (executing program) 2025/09/01 11:40:55 fetching corpus: 500, signal 77120/90227 (executing program) 2025/09/01 11:40:55 fetching corpus: 550, signal 80129/94081 (executing program) 2025/09/01 11:40:55 fetching corpus: 600, signal 82074/96913 (executing program) 2025/09/01 11:40:55 fetching corpus: 650, signal 85101/100653 (executing program) 2025/09/01 11:40:55 fetching corpus: 700, signal 87007/103361 (executing program) 2025/09/01 11:40:55 fetching corpus: 750, signal 89339/106445 (executing program) 2025/09/01 11:40:55 fetching corpus: 800, signal 91336/109174 (executing program) 2025/09/01 11:40:55 fetching corpus: 850, signal 93242/111786 (executing program) 2025/09/01 11:40:55 fetching corpus: 900, signal 96172/115136 (executing program) 2025/09/01 11:40:56 fetching corpus: 950, signal 97333/117061 (executing program) 2025/09/01 11:40:56 fetching corpus: 1000, signal 99252/119509 (executing program) 2025/09/01 11:40:56 fetching corpus: 1050, signal 100258/121211 (executing program) 2025/09/01 11:40:56 fetching corpus: 1100, signal 101906/123489 (executing program) 2025/09/01 11:40:56 fetching corpus: 1150, signal 103391/125518 (executing program) 2025/09/01 11:40:56 fetching corpus: 1200, signal 105270/127788 (executing program) 2025/09/01 11:40:56 fetching corpus: 1250, signal 107019/129996 (executing program) 2025/09/01 11:40:56 fetching corpus: 1300, signal 108472/131954 (executing program) 2025/09/01 11:40:56 fetching corpus: 1350, signal 109654/133674 (executing program) 2025/09/01 11:40:56 fetching corpus: 1400, signal 110864/135384 (executing program) 2025/09/01 11:40:57 fetching corpus: 1450, signal 112331/137243 (executing program) 2025/09/01 11:40:57 fetching corpus: 1500, signal 113659/139012 (executing program) 2025/09/01 11:40:57 fetching corpus: 1550, signal 114761/140574 (executing program) 2025/09/01 11:40:57 fetching corpus: 1600, signal 116389/142510 (executing program) 2025/09/01 11:40:57 fetching corpus: 1650, signal 117694/144119 (executing program) 2025/09/01 11:40:57 fetching corpus: 1700, signal 118651/145476 (executing program) 2025/09/01 11:40:57 fetching corpus: 1750, signal 119822/147045 (executing program) 2025/09/01 11:40:57 fetching corpus: 1800, signal 121000/148506 (executing program) 2025/09/01 11:40:57 fetching corpus: 1850, signal 122429/150118 (executing program) 2025/09/01 11:40:57 fetching corpus: 1900, signal 123225/151338 (executing program) 2025/09/01 11:40:57 fetching corpus: 1950, signal 124103/152574 (executing program) 2025/09/01 11:40:58 fetching corpus: 2000, signal 124766/153703 (executing program) 2025/09/01 11:40:58 fetching corpus: 2050, signal 125842/155003 (executing program) 2025/09/01 11:40:58 fetching corpus: 2100, signal 126796/156223 (executing program) 2025/09/01 11:40:58 fetching corpus: 2150, signal 127605/157377 (executing program) 2025/09/01 11:40:58 fetching corpus: 2200, signal 128236/158431 (executing program) 2025/09/01 11:40:58 fetching corpus: 2250, signal 129273/159618 (executing program) 2025/09/01 11:40:58 fetching corpus: 2300, signal 130119/160740 (executing program) 2025/09/01 11:40:58 fetching corpus: 2350, signal 130930/161812 (executing program) 2025/09/01 11:40:58 fetching corpus: 2400, signal 132588/163315 (executing program) 2025/09/01 11:40:58 fetching corpus: 2450, signal 133291/164307 (executing program) 2025/09/01 11:40:58 fetching corpus: 2500, signal 134040/165299 (executing program) 2025/09/01 11:40:58 fetching corpus: 2550, signal 135058/166482 (executing program) 2025/09/01 11:40:59 fetching corpus: 2600, signal 135986/167504 (executing program) 2025/09/01 11:40:59 fetching corpus: 2650, signal 136623/168378 (executing program) 2025/09/01 11:40:59 fetching corpus: 2700, signal 137265/169199 (executing program) 2025/09/01 11:40:59 fetching corpus: 2750, signal 138124/170121 (executing program) 2025/09/01 11:40:59 fetching corpus: 2800, signal 138851/171001 (executing program) 2025/09/01 11:40:59 fetching corpus: 2850, signal 139702/171874 (executing program) 2025/09/01 11:40:59 fetching corpus: 2900, signal 140439/172774 (executing program) 2025/09/01 11:40:59 fetching corpus: 2950, signal 141024/173534 (executing program) 2025/09/01 11:40:59 fetching corpus: 3000, signal 141587/174300 (executing program) 2025/09/01 11:40:59 fetching corpus: 3050, signal 142217/175116 (executing program) 2025/09/01 11:40:59 fetching corpus: 3100, signal 142933/175968 (executing program) 2025/09/01 11:41:00 fetching corpus: 3150, signal 143482/176652 (executing program) 2025/09/01 11:41:00 fetching corpus: 3200, signal 144137/177368 (executing program) 2025/09/01 11:41:00 fetching corpus: 3250, signal 144639/178051 (executing program) 2025/09/01 11:41:00 fetching corpus: 3300, signal 145321/178791 (executing program) 2025/09/01 11:41:00 fetching corpus: 3350, signal 146113/179480 (executing program) 2025/09/01 11:41:00 fetching corpus: 3400, signal 146627/180117 (executing program) 2025/09/01 11:41:00 fetching corpus: 3450, signal 147267/180790 (executing program) 2025/09/01 11:41:00 fetching corpus: 3500, signal 147700/181398 (executing program) 2025/09/01 11:41:00 fetching corpus: 3550, signal 148251/182045 (executing program) 2025/09/01 11:41:00 fetching corpus: 3600, signal 148845/182655 (executing program) 2025/09/01 11:41:00 fetching corpus: 3650, signal 149492/183286 (executing program) 2025/09/01 11:41:01 fetching corpus: 3700, signal 149976/183899 (executing program) 2025/09/01 11:41:01 fetching corpus: 3750, signal 150726/184500 (executing program) 2025/09/01 11:41:01 fetching corpus: 3800, signal 151112/185038 (executing program) 2025/09/01 11:41:01 fetching corpus: 3850, signal 151772/185655 (executing program) 2025/09/01 11:41:01 fetching corpus: 3900, signal 152283/186234 (executing program) 2025/09/01 11:41:01 fetching corpus: 3950, signal 152843/186786 (executing program) 2025/09/01 11:41:01 fetching corpus: 4000, signal 153225/187304 (executing program) 2025/09/01 11:41:01 fetching corpus: 4050, signal 153711/187795 (executing program) 2025/09/01 11:41:01 fetching corpus: 4100, signal 154137/188295 (executing program) 2025/09/01 11:41:01 fetching corpus: 4150, signal 154399/188777 (executing program) 2025/09/01 11:41:01 fetching corpus: 4200, signal 154739/189198 (executing program) 2025/09/01 11:41:02 fetching corpus: 4250, signal 155191/189655 (executing program) 2025/09/01 11:41:02 fetching corpus: 4300, signal 155938/190168 (executing program) 2025/09/01 11:41:02 fetching corpus: 4350, signal 156599/190667 (executing program) 2025/09/01 11:41:02 fetching corpus: 4400, signal 157075/191103 (executing program) 2025/09/01 11:41:02 fetching corpus: 4450, signal 157499/191542 (executing program) 2025/09/01 11:41:02 fetching corpus: 4500, signal 158093/191962 (executing program) 2025/09/01 11:41:02 fetching corpus: 4550, signal 158594/192386 (executing program) 2025/09/01 11:41:02 fetching corpus: 4600, signal 159123/192812 (executing program) 2025/09/01 11:41:02 fetching corpus: 4650, signal 159726/193176 (executing program) 2025/09/01 11:41:02 fetching corpus: 4700, signal 160243/193528 (executing program) 2025/09/01 11:41:02 fetching corpus: 4750, signal 160701/193670 (executing program) 2025/09/01 11:41:03 fetching corpus: 4800, signal 161086/193670 (executing program) 2025/09/01 11:41:03 fetching corpus: 4850, signal 161482/193672 (executing program) 2025/09/01 11:41:03 fetching corpus: 4900, signal 161971/193673 (executing program) 2025/09/01 11:41:03 fetching corpus: 4950, signal 162299/193687 (executing program) 2025/09/01 11:41:03 fetching corpus: 5000, signal 162841/193691 (executing program) 2025/09/01 11:41:03 fetching corpus: 5050, signal 163354/193717 (executing program) 2025/09/01 11:41:03 fetching corpus: 5100, signal 163682/193740 (executing program) 2025/09/01 11:41:03 fetching corpus: 5150, signal 164090/193748 (executing program) 2025/09/01 11:41:03 fetching corpus: 5200, signal 164661/193749 (executing program) 2025/09/01 11:41:03 fetching corpus: 5250, signal 165003/193750 (executing program) 2025/09/01 11:41:03 fetching corpus: 5300, signal 165407/193754 (executing program) 2025/09/01 11:41:03 fetching corpus: 5350, signal 165741/193799 (executing program) 2025/09/01 11:41:04 fetching corpus: 5400, signal 166145/193803 (executing program) 2025/09/01 11:41:04 fetching corpus: 5450, signal 166659/193806 (executing program) 2025/09/01 11:41:04 fetching corpus: 5500, signal 167073/193821 (executing program) 2025/09/01 11:41:04 fetching corpus: 5550, signal 167276/193836 (executing program) 2025/09/01 11:41:04 fetching corpus: 5600, signal 167558/193839 (executing program) 2025/09/01 11:41:04 fetching corpus: 5650, signal 167990/193853 (executing program) 2025/09/01 11:41:04 fetching corpus: 5700, signal 168519/193880 (executing program) 2025/09/01 11:41:04 fetching corpus: 5750, signal 169144/193886 (executing program) 2025/09/01 11:41:04 fetching corpus: 5800, signal 169458/193894 (executing program) 2025/09/01 11:41:04 fetching corpus: 5850, signal 169851/193907 (executing program) 2025/09/01 11:41:04 fetching corpus: 5900, signal 170163/193930 (executing program) 2025/09/01 11:41:05 fetching corpus: 5950, signal 170357/193933 (executing program) 2025/09/01 11:41:05 fetching corpus: 6000, signal 170720/193936 (executing program) 2025/09/01 11:41:05 fetching corpus: 6050, signal 171564/193961 (executing program) 2025/09/01 11:41:05 fetching corpus: 6100, signal 171934/193969 (executing program) 2025/09/01 11:41:05 fetching corpus: 6150, signal 172341/193992 (executing program) 2025/09/01 11:41:05 fetching corpus: 6200, signal 173071/194012 (executing program) 2025/09/01 11:41:05 fetching corpus: 6250, signal 173697/194017 (executing program) 2025/09/01 11:41:05 fetching corpus: 6300, signal 173961/194019 (executing program) 2025/09/01 11:41:05 fetching corpus: 6350, signal 174370/194021 (executing program) 2025/09/01 11:41:05 fetching corpus: 6400, signal 174670/194021 (executing program) 2025/09/01 11:41:05 fetching corpus: 6450, signal 174937/194023 (executing program) 2025/09/01 11:41:05 fetching corpus: 6500, signal 175443/194026 (executing program) 2025/09/01 11:41:06 fetching corpus: 6550, signal 175920/194031 (executing program) 2025/09/01 11:41:06 fetching corpus: 6600, signal 176204/194053 (executing program) 2025/09/01 11:41:06 fetching corpus: 6650, signal 176484/194075 (executing program) 2025/09/01 11:41:06 fetching corpus: 6700, signal 176925/194089 (executing program) 2025/09/01 11:41:06 fetching corpus: 6750, signal 177368/194091 (executing program) 2025/09/01 11:41:06 fetching corpus: 6800, signal 177608/194091 (executing program) 2025/09/01 11:41:06 fetching corpus: 6850, signal 177967/194104 (executing program) 2025/09/01 11:41:06 fetching corpus: 6900, signal 178193/194121 (executing program) 2025/09/01 11:41:06 fetching corpus: 6950, signal 178751/194125 (executing program) 2025/09/01 11:41:06 fetching corpus: 7000, signal 179245/194126 (executing program) 2025/09/01 11:41:06 fetching corpus: 7050, signal 179474/194127 (executing program) 2025/09/01 11:41:06 fetching corpus: 7100, signal 179878/194171 (executing program) 2025/09/01 11:41:07 fetching corpus: 7150, signal 180149/194178 (executing program) 2025/09/01 11:41:07 fetching corpus: 7200, signal 180464/194180 (executing program) 2025/09/01 11:41:07 fetching corpus: 7250, signal 180725/194196 (executing program) 2025/09/01 11:41:07 fetching corpus: 7300, signal 181014/194200 (executing program) 2025/09/01 11:41:07 fetching corpus: 7350, signal 181327/194219 (executing program) 2025/09/01 11:41:07 fetching corpus: 7400, signal 181601/194220 (executing program) 2025/09/01 11:41:07 fetching corpus: 7450, signal 181926/194223 (executing program) 2025/09/01 11:41:07 fetching corpus: 7500, signal 182248/194225 (executing program) 2025/09/01 11:41:07 fetching corpus: 7550, signal 182685/194230 (executing program) 2025/09/01 11:41:07 fetching corpus: 7600, signal 183145/194269 (executing program) 2025/09/01 11:41:07 fetching corpus: 7650, signal 183371/194273 (executing program) 2025/09/01 11:41:07 fetching corpus: 7700, signal 183539/194280 (executing program) 2025/09/01 11:41:08 fetching corpus: 7750, signal 183856/194284 (executing program) 2025/09/01 11:41:08 fetching corpus: 7800, signal 184306/194284 (executing program) 2025/09/01 11:41:08 fetching corpus: 7850, signal 184562/194284 (executing program) 2025/09/01 11:41:08 fetching corpus: 7900, signal 184882/194286 (executing program) 2025/09/01 11:41:08 fetching corpus: 7950, signal 185046/194292 (executing program) 2025/09/01 11:41:08 fetching corpus: 8000, signal 185403/194293 (executing program) 2025/09/01 11:41:08 fetching corpus: 8050, signal 185885/194304 (executing program) 2025/09/01 11:41:08 fetching corpus: 8100, signal 186206/194306 (executing program) 2025/09/01 11:41:08 fetching corpus: 8150, signal 186447/194308 (executing program) 2025/09/01 11:41:08 fetching corpus: 8200, signal 186763/194320 (executing program) 2025/09/01 11:41:08 fetching corpus: 8250, signal 187071/194367 (executing program) 2025/09/01 11:41:08 fetching corpus: 8300, signal 187355/194376 (executing program) 2025/09/01 11:41:09 fetching corpus: 8350, signal 187923/194406 (executing program) 2025/09/01 11:41:09 fetching corpus: 8400, signal 188190/194409 (executing program) 2025/09/01 11:41:09 fetching corpus: 8450, signal 188590/194411 (executing program) 2025/09/01 11:41:09 fetching corpus: 8500, signal 188897/194413 (executing program) 2025/09/01 11:41:09 fetching corpus: 8550, signal 189140/194413 (executing program) 2025/09/01 11:41:09 fetching corpus: 8600, signal 189438/194428 (executing program) 2025/09/01 11:41:09 fetching corpus: 8650, signal 189659/194434 (executing program) 2025/09/01 11:41:09 fetching corpus: 8700, signal 189849/194439 (executing program) 2025/09/01 11:41:09 fetching corpus: 8750, signal 190097/194444 (executing program) 2025/09/01 11:41:09 fetching corpus: 8800, signal 190336/194451 (executing program) 2025/09/01 11:41:09 fetching corpus: 8850, signal 190551/194451 (executing program) 2025/09/01 11:41:09 fetching corpus: 8900, signal 190996/194459 (executing program) 2025/09/01 11:41:10 fetching corpus: 8950, signal 191214/194465 (executing program) 2025/09/01 11:41:10 fetching corpus: 9000, signal 191410/194468 (executing program) 2025/09/01 11:41:10 fetching corpus: 9050, signal 191612/194469 (executing program) 2025/09/01 11:41:10 fetching corpus: 9058, signal 191646/194469 (executing program) 2025/09/01 11:41:10 fetching corpus: 9058, signal 191646/194469 (executing program) 2025/09/01 11:41:11 starting 8 fuzzer processes 11:41:11 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) 11:41:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) 11:41:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) 11:41:11 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5322, &(0x7f00000000c0)) 11:41:11 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000002680)={&(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000002580)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xd, 0x3, 0x0, [{@dev}, {@dev}]}]}}}], 0x28}, 0x0) 11:41:11 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x0) 11:41:11 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, 0x0) 11:41:11 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 79.035220] audit: type=1400 audit(1756726871.944:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 80.180658] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.183956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.185854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.190603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.196724] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.251905] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.258039] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.259555] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.267081] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.273064] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.306956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.312442] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.314167] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.326858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.329293] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.331387] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.332589] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.338115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.338151] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.341223] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.341279] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 80.344078] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.347331] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.352245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.354793] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 80.355234] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 80.358134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.361407] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.364986] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.370159] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 80.371552] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 80.375488] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 80.381064] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 80.382695] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 80.385123] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 80.387538] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 80.390486] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.397465] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.409287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.415042] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 82.215241] Bluetooth: hci0: command tx timeout [ 82.344111] Bluetooth: hci1: command tx timeout [ 82.407856] Bluetooth: hci2: command tx timeout [ 82.470844] Bluetooth: hci6: command tx timeout [ 82.471371] Bluetooth: hci7: command tx timeout [ 82.471878] Bluetooth: hci4: command tx timeout [ 82.472335] Bluetooth: hci3: command tx timeout [ 82.535857] Bluetooth: hci5: command tx timeout [ 84.262789] Bluetooth: hci0: command tx timeout [ 84.390833] Bluetooth: hci1: command tx timeout [ 84.454913] Bluetooth: hci2: command tx timeout [ 84.518910] Bluetooth: hci3: command tx timeout [ 84.519351] Bluetooth: hci4: command tx timeout [ 84.519796] Bluetooth: hci7: command tx timeout [ 84.520182] Bluetooth: hci6: command tx timeout [ 84.582963] Bluetooth: hci5: command tx timeout [ 86.311229] Bluetooth: hci0: command tx timeout [ 86.438798] Bluetooth: hci1: command tx timeout [ 86.503045] Bluetooth: hci2: command tx timeout [ 86.567232] Bluetooth: hci3: command tx timeout [ 86.567676] Bluetooth: hci6: command tx timeout [ 86.568787] Bluetooth: hci7: command tx timeout [ 86.569178] Bluetooth: hci4: command tx timeout [ 86.630851] Bluetooth: hci5: command tx timeout [ 88.358801] Bluetooth: hci0: command tx timeout [ 88.487236] Bluetooth: hci1: command tx timeout [ 88.551130] Bluetooth: hci2: command tx timeout [ 88.614826] Bluetooth: hci3: command tx timeout [ 88.615259] Bluetooth: hci7: command tx timeout [ 88.615654] Bluetooth: hci6: command tx timeout [ 88.616092] Bluetooth: hci4: command tx timeout [ 88.678791] Bluetooth: hci5: command tx timeout [ 115.515067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.515847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.748630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.749640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.096959] audit: type=1400 audit(1756726909.001:8): avc: denied { open } for pid=3723 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 116.105041] audit: type=1400 audit(1756726909.001:9): avc: denied { kernel } for pid=3723 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 11:41:49 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) prlimit64(0x0, 0x0, 0x0, 0x0) 11:41:49 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) prlimit64(0x0, 0x0, 0x0, 0x0) 11:41:49 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) prlimit64(0x0, 0x0, 0x0, 0x0) 11:41:49 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) prlimit64(0x0, 0x0, 0x0, 0x0) 11:41:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4008850) 11:41:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4008850) [ 116.875527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.876149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:41:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4008850) [ 117.044605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.045297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:41:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4008850) [ 117.445819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.446402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.527052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.527678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.554251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.554878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.678634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.679558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.779640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.780414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.932274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.932914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.145593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.146302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.158792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.159379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.245103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.246099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.345565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.346360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.416811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.417437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.451336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.452087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:41:51 executing program 1: getrusage(0xfffffffffffffffe, 0x0) 11:41:51 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/dev_snmp6\x00') mknodat$loop(r0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync() 11:41:51 executing program 0: r0 = inotify_init() fgetxattr(r0, &(0x7f0000000500)=@known='security.selinux\x00', 0x0, 0x0) 11:41:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0) 11:41:51 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) 11:41:51 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 11:41:51 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5322, &(0x7f00000000c0)) 11:41:51 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x0) 11:41:51 executing program 0: r0 = inotify_init() fgetxattr(r0, &(0x7f0000000500)=@known='security.selinux\x00', 0x0, 0x0) 11:41:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0) 11:41:51 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x0) 11:41:51 executing program 1: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8) 11:41:51 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_ringparam}) 11:41:51 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) 11:41:51 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5322, &(0x7f00000000c0)) 11:41:51 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x0) 11:41:51 executing program 0: r0 = inotify_init() fgetxattr(r0, &(0x7f0000000500)=@known='security.selinux\x00', 0x0, 0x0) 11:41:51 executing program 2: syz_usb_connect$uac1(0x5, 0x71, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 11:41:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0) 11:41:51 executing program 1: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8) [ 118.875836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.879794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:41:51 executing program 1: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8) [ 118.933839] kmemleak: Found object by alias at 0x607f1a6314d4 [ 118.933856] CPU: 0 UID: 0 PID: 3944 Comm: syz-executor.6 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 118.933878] Tainted: [W]=WARN [ 118.933882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 118.933890] Call Trace: [ 118.933894] [ 118.933899] dump_stack_lvl+0xca/0x120 [ 118.933926] __lookup_object+0x94/0xb0 [ 118.933944] delete_object_full+0x27/0x70 [ 118.933961] free_percpu+0x30/0x1160 [ 118.933978] ? arch_uprobe_clear_state+0x16/0x140 [ 118.933999] futex_hash_free+0x38/0xc0 [ 118.934015] mmput+0x2d3/0x390 [ 118.934034] do_exit+0x79d/0x2970 [ 118.934048] ? signal_wake_up_state+0x85/0x120 [ 118.934064] ? zap_other_threads+0x2b9/0x3a0 [ 118.934081] ? __pfx_do_exit+0x10/0x10 [ 118.934094] ? do_group_exit+0x1c3/0x2a0 [ 118.934108] ? lock_release+0xc8/0x290 [ 118.934126] do_group_exit+0xd3/0x2a0 [ 118.934141] __x64_sys_exit_group+0x3e/0x50 [ 118.934155] x64_sys_call+0x18c5/0x18d0 [ 118.934171] do_syscall_64+0xbf/0x360 [ 118.934185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.934197] RIP: 0033:0x7f32c7ce1b19 [ 118.934206] Code: Unable to access opcode bytes at 0x7f32c7ce1aef. [ 118.934211] RSP: 002b:00007ffdf8645d08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 118.934223] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f32c7ce1b19 [ 118.934230] RDX: 00007f32c7c9472b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 118.934238] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 118.934244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.934251] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffdf8645df0 [ 118.934266] [ 118.934270] kmemleak: Object (percpu) 0x607f1a6314d0 (size 8): [ 118.934277] kmemleak: comm "syz-executor.2", pid 3928, jiffies 4294785607 [ 118.934284] kmemleak: min_count = 1 [ 118.934288] kmemleak: count = 0 [ 118.934292] kmemleak: flags = 0x21 [ 118.934296] kmemleak: checksum = 0 [ 118.934299] kmemleak: backtrace: [ 118.934303] pcpu_alloc_noprof+0x87a/0x1170 [ 118.934319] percpu_ref_init+0x37/0x400 [ 118.934330] blkg_alloc+0xe9/0x7d0 [ 118.934343] blkg_create+0xe08/0x1420 [ 118.934356] bio_associate_blkg_from_css+0xe06/0x1380 [ 118.934370] bio_associate_blkg+0x10e/0x2a0 [ 118.934383] bio_init+0x2dd/0x570 [ 118.934396] bio_alloc_bioset+0x2cf/0x8c0 [ 118.934412] submit_bh_wbc+0x286/0x720 [ 118.934429] __block_write_full_folio+0x723/0xde0 [ 118.934441] block_write_full_folio+0x2d6/0x390 [ 118.934454] blkdev_writepages+0x96/0x120 [ 118.934466] do_writepages+0x244/0x5c0 [ 118.934480] filemap_fdatawrite_wbc+0x10b/0x150 [ 118.934495] __filemap_fdatawrite_range+0xb9/0x100 [ 118.934512] sync_bdevs+0x2e6/0x360 [ 119.385214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.386287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.428339] BUG: unable to handle page fault for address: ffffed10212c9106 [ 119.428926] #PF: supervisor read access in kernel mode [ 119.429329] #PF: error_code(0x0000) - not-present page [ 119.429740] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 [ 119.431014] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 119.434178] CPU: 0 UID: 0 PID: 3966 Comm: syz-executor.6 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 119.435111] Tainted: [W]=WARN [ 119.435372] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 119.436021] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.436409] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 119.437824] RSP: 0018:ffff888045817800 EFLAGS: 00010216 [ 119.438244] RAX: 1ffff110212c9106 RBX: ffff888109648640 RCX: ffffc90005cb8000 [ 119.438803] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: ffff888109648830 [ 119.439373] RBP: ffff888045817a70 R08: ffff88806ce31340 R09: ffffe8ffffc094d0 [ 119.439938] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 119.440493] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 119.441055] FS: 00007f32c5257700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 119.441685] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.442146] CR2: ffffed10212c9106 CR3: 000000001bb9e000 CR4: 0000000000350ef0 [ 119.442703] Call Trace: [ 119.442913] [ 119.443098] ? perf_swevent_event+0x63/0x3f0 [ 119.443462] ? __pfx_perf_tp_event+0x10/0x10 [ 119.443824] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 119.444225] ? perf_swevent_event+0x63/0x3f0 [ 119.444580] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 119.444978] ? perf_swevent_event+0x63/0x3f0 [ 119.445334] ? perf_tp_event+0x807/0xe70 [ 119.445664] ? __pfx_perf_tp_event+0x10/0x10 [ 119.446020] ? __perf_install_in_context+0x503/0xb90 [ 119.446427] ? do_raw_spin_unlock+0x53/0x220 [ 119.446789] ? perf_trace_run_bpf_submit+0xef/0x180 [ 119.447190] perf_trace_run_bpf_submit+0xef/0x180 [ 119.447595] perf_trace_lock+0x337/0x5d0 [ 119.447932] ? __pfx_perf_trace_lock+0x10/0x10 [ 119.448302] ? lock_acquire+0x15e/0x2f0 [ 119.448622] ? futex_ref_get+0x48/0x300 [ 119.448941] ? futex_ref_get+0x114/0x300 [ 119.449261] ? futex_hash+0x15c/0x390 [ 119.449566] lock_release+0x1ab/0x290 [ 119.449874] ? futex_hash+0x15c/0x390 [ 119.450178] futex_ref_get+0x119/0x300 [ 119.450490] ? futex_hash+0x15c/0x390 [ 119.450791] futex_hash+0x70/0x390 [ 119.451081] futex_wake+0x143/0x540 [ 119.451384] ? __pfx_perf_trace_lock+0x10/0x10 [ 119.451755] ? __pfx_futex_wake+0x10/0x10 [ 119.452090] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 119.452495] ? lock_release+0xc8/0x290 [ 119.452810] do_futex+0x26d/0x370 [ 119.453093] ? __pfx_do_futex+0x10/0x10 [ 119.453415] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 119.453834] ? find_held_lock+0x2b/0x80 [ 119.454158] __x64_sys_futex+0x1c9/0x4d0 [ 119.454486] ? __pfx___x64_sys_futex+0x10/0x10 [ 119.454849] ? xfd_validate_state+0x55/0x180 [ 119.455216] do_syscall_64+0xbf/0x360 [ 119.455536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.455943] RIP: 0033:0x7f32c7ce1b19 [ 119.456241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.457648] RSP: 002b:00007f32c5257218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.458237] RAX: ffffffffffffffda RBX: 00007f32c7df4f68 RCX: 00007f32c7ce1b19 [ 119.458793] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f32c7df4f6c [ 119.459351] RBP: 00007f32c7df4f60 R08: 000000000000000e R09: 0000000000000000 [ 119.459905] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f32c7df4f6c [ 119.460466] R13: 00007ffdf8645adf R14: 00007f32c5257300 R15: 0000000000022000 [ 119.461031] [ 119.461220] Modules linked in: [ 119.461480] CR2: ffffed10212c9106 [ 119.461755] ---[ end trace 0000000000000000 ]--- [ 119.461758] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 119.462128] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.463032] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 119.463396] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 119.463986] CPU: 1 UID: 0 PID: 3969 Comm: syz-executor.7 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 119.465373] RSP: 0018:ffff888045817800 EFLAGS: 00010216 [ 119.466291] Tainted: [D]=DIE, [W]=WARN [ 119.466700] RAX: 1ffff110212c9106 RBX: ffff888109648640 RCX: ffffc90005cb8000 [ 119.467003] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 119.467560] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: ffff888109648830 [ 119.468200] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.468745] RBP: ffff888045817a70 R08: ffff88806ce31340 R09: ffffe8ffffc094d0 [ 119.469105] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 119.469654] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 119.471055] RSP: 0018:ffff88804862f800 EFLAGS: 00010212 [ 119.471612] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 119.472032] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 119.472582] FS: 00007f32c5257700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 119.473130] RDX: ffff8880469a8000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 119.473745] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.474292] RBP: ffff88804862fa70 R08: ffff88806cf31340 R09: ffffe8ffffd094d0 [ 119.474737] CR2: ffffed10212c9106 CR3: 000000001bb9e000 CR4: 0000000000350ef0 [ 119.475294] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 119.475841] note: syz-executor.6[3966] exited with irqs disabled [ 119.476393] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 119.477407] FS: 00005555838a9400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 119.478044] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.478503] CR2: 00005555838aac18 CR3: 0000000046d83000 CR4: 0000000000350ef0 [ 119.479064] Call Trace: [ 119.479275] [ 119.479468] ? arch_scale_cpu_capacity+0x17/0xa0 [ 119.479856] ? __pfx_perf_tp_event+0x10/0x10 [ 119.480209] ? __asan_memset+0x24/0x50 [ 119.480536] ? __pfx_perf_trace_lock+0x10/0x10 [ 119.480907] ? __pfx___mutex_lock+0x10/0x10 [ 119.481260] ? perf_trace_lock+0xb5/0x5d0 [ 119.481596] ? kvm_sched_clock_read+0x16/0x30 [ 119.481958] ? sched_clock+0x37/0x60 [ 119.482264] ? sched_clock_cpu+0x6c/0x4e0 [ 119.482602] ? perf_trace_run_bpf_submit+0xef/0x180 [ 119.483002] perf_trace_run_bpf_submit+0xef/0x180 [ 119.483399] perf_trace_lock+0x337/0x5d0 [ 119.483727] ? __pfx_perf_trace_lock+0x10/0x10 [ 119.484096] ? __pfx_perf_trace_lock+0x10/0x10 [ 119.484467] ? get_futex_key+0x592/0x14a0 [ 119.484801] ? futex_ref_get+0x114/0x300 [ 119.485125] ? futex_hash+0x15c/0x390 [ 119.485430] lock_release+0x1ab/0x290 [ 119.485739] ? futex_hash+0x15c/0x390 [ 119.486043] futex_ref_get+0x119/0x300 [ 119.486355] ? futex_hash+0x15c/0x390 [ 119.486659] futex_hash+0x70/0x390 [ 119.486948] futex_wake+0x143/0x540 [ 119.487251] ? put_pid+0x1f/0x30 [ 119.487531] ? kernel_clone+0x204/0x7f0 [ 119.487849] ? __pfx_futex_wake+0x10/0x10 [ 119.488190] ? __pfx_kernel_clone+0x10/0x10 [ 119.488533] ? perf_trace_lock+0xb5/0x5d0 [ 119.488868] ? __pfx___handle_mm_fault+0x10/0x10 [ 119.489254] do_futex+0x26d/0x370 [ 119.489539] ? __pfx_do_futex+0x10/0x10 [ 119.489859] ? __pfx___do_sys_clone+0x10/0x10 [ 119.490218] ? handle_mm_fault+0x590/0x9b0 [ 119.490560] __x64_sys_futex+0x1c9/0x4d0 [ 119.490890] ? __pfx___x64_sys_futex+0x10/0x10 [ 119.491263] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 119.491691] do_syscall_64+0xbf/0x360 [ 119.491997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.492403] RIP: 0033:0x7f25ac8d4b19 [ 119.492702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.494121] RSP: 002b:00007ffd93f57838 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.494714] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f25ac8d4b19 [ 119.495273] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f25ac9e7f68 [ 119.495841] RBP: 00007f25ac9e7f60 R08: 00007f25a9e4a700 R09: 0000000000000000 [ 119.496401] R10: 00007f25a9e4a700 R11: 0000000000000246 R12: 00007f25ac9eca68 [ 119.496960] R13: 00007ffd93f57940 R14: 00007f25ac9e7f60 R15: 000000000001d224 [ 119.497565] [ 119.497763] Modules linked in: [ 119.498036] BUG: unable to handle page fault for address: ffffed10212c9106 [ 119.498588] #PF: supervisor read access in kernel mode [ 119.498998] #PF: error_code(0x0000) - not-present page [ 119.499410] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 [ 119.499853] Oops: Oops: 0000 [#3] SMP KASAN NOPTI [ 119.500234] CPU: 0 UID: 0 PID: 3966 Comm: syz-executor.6 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 119.501154] Tainted: [D]=DIE, [W]=WARN [ 119.501455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 119.502087] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.502460] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 119.503866] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010016 [ 119.504281] RAX: 1ffff110212c9106 RBX: ffff888109648640 RCX: 0000000000000002 [ 119.504836] RDX: ffff888046915280 RSI: ffffffff8189a4e7 RDI: ffff888109648830 [ 119.505386] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc094d0 [ 119.505939] R10: 0000000000000000 R11: ffff88806ce37018 R12: dffffc0000000000 [ 119.506491] R13: 0000000000000024 R14: ffff88806ce31490 R15: dffffc0000000000 [ 119.507047] FS: 00007f32c5257700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 119.507678] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.508132] CR2: ffffed10212c9106 CR3: 000000001bb9e000 CR4: 0000000000350ef0 [ 119.508685] Call Trace: [ 119.508890] [ 119.509071] ? __pfx_perf_tp_event+0x10/0x10 [ 119.509424] ? stack_depot_save_flags+0x2c/0xa20 [ 119.509800] ? stack_depot_save_flags+0x2c/0xa20 [ 119.510174] ? kasan_save_stack+0x34/0x50 [ 119.510507] ? kasan_save_stack+0x24/0x50 [ 119.510833] ? kasan_save_track+0x14/0x30 [ 119.511159] ? __kasan_save_free_info+0x3a/0x60 [ 119.511536] ? __kasan_slab_free+0x3f/0x50 [ 119.511872] ? kmem_cache_free+0x2a1/0x540 [ 119.512207] ? rcu_core+0x7c8/0x1800 [ 119.512508] ? handle_softirqs+0x1b1/0x770 [ 119.512849] ? __irq_exit_rcu+0xc4/0x100 [ 119.513174] ? irq_exit_rcu+0x9/0x20 [ 119.513469] ? sysvec_apic_timer_interrupt+0x70/0x80 [ 119.513870] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 119.514293] ? lock_acquire+0x5b/0x2f0 [ 119.514602] ? is_module_text_address+0x32/0x100 [ 119.514976] ? kernel_text_address+0x35/0xc0 [ 119.515335] ? __kernel_text_address+0xd/0x40 [ 119.515693] ? unwind_get_return_address+0x59/0xa0 [ 119.516088] ? arch_stack_walk+0x9c/0xf0 [ 119.516408] ? stack_trace_save+0x8e/0xc0 [ 119.516740] ? set_track_prepare+0x35/0x70 [ 119.517078] ? __alloc_object+0xf0/0x2c0 [ 119.517400] ? __create_object+0x1d/0x80 [ 119.517723] ? kmem_cache_alloc_noprof+0x414/0x690 [ 119.518108] ? security_file_alloc+0x35/0x130 [ 119.518468] ? init_file+0x95/0x4c0 [ 119.518766] ? alloc_empty_file+0x76/0x1e0 [ 119.519101] ? alloc_file_pseudo+0x12b/0x220 [ 119.519458] ? __anon_inode_getfile+0xe1/0x280 [ 119.519827] ? __do_sys_perf_event_open+0x18cb/0x2c20 [ 119.520233] ? do_syscall_64+0xbf/0x360 [ 119.520545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.520962] ? __anon_inode_getfile+0xe1/0x280 [ 119.521325] ? __do_sys_perf_event_open+0x18cb/0x2c20 [ 119.521731] ? do_syscall_64+0xbf/0x360 [ 119.522048] ? perf_trace_run_bpf_submit+0xef/0x180 [ 119.522446] perf_trace_run_bpf_submit+0xef/0x180 [ 119.522832] perf_trace_lock+0x337/0x5d0 [ 119.523156] ? __pfx_perf_trace_lock+0x10/0x10 [ 119.523526] ? check_preempt_wakeup_fair+0x6e/0x950 [ 119.523925] ? sched_ttwu_pending+0x2e0/0x4a0 [ 119.524288] lock_release+0x1ab/0x290 [ 119.524592] ? ttwu_do_activate+0x1a4/0x8a0 [ 119.524936] _raw_spin_unlock+0x16/0x40 [ 119.525255] sched_ttwu_pending+0x2e0/0x4a0 [ 119.525601] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 119.525984] ? mark_held_locks+0x49/0x80 [ 119.526309] __flush_smp_call_function_queue+0x434/0x740 [ 119.526741] __sysvec_call_function_single+0x6d/0x370 [ 119.527156] sysvec_call_function_single+0xa1/0xc0 [ 119.527557] [ 119.527740] [ 119.527922] asm_sysvec_call_function_single+0x1a/0x20 [ 119.528335] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 119.528706] Code: 38 00 85 db 0f 84 21 01 00 00 e8 09 a6 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 57 a1 38 00 48 85 db 0f 84 17 01 00 00 e9 a5 38 00 31 ff 65 8b 1d 60 2f 49 06 81 e3 ff ff ff 7f 89 de [ 119.530111] RSP: 0018:ffff888045817f28 EFLAGS: 00000246 [ 119.530526] RAX: 0000000000000001 RBX: ffff888046915280 RCX: ffffffff817c3ab6 [ 119.531079] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 119.531639] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 119.532191] R10: ffffffff8643b457 R11: 7973203a65746f6e R12: ffff888046915280 [ 119.532741] R13: 0000000000000009 R14: ffff8880458177e0 R15: 0000000000000000 [ 119.533298] ? trace_irq_enable.constprop.0+0x26/0x100 [ 119.533710] ? make_task_dead+0x214/0x3b0 [ 119.534040] ? make_task_dead+0x214/0x3b0 [ 119.534366] ? do_syscall_64+0xbf/0x360 [ 119.534683] rewind_stack_and_make_dead+0x16/0x20 [ 119.535071] RIP: 0033:0x7f32c7ce1b19 [ 119.535371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.536768] RSP: 002b:00007f32c5257218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.537358] RAX: ffffffffffffffda RBX: 00007f32c7df4f68 RCX: 00007f32c7ce1b19 [ 119.537950] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f32c7df4f6c [ 119.538627] RBP: 00007f32c7df4f60 R08: 000000000000000e R09: 0000000000000000 [ 119.539316] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f32c7df4f6c [ 119.539993] R13: 00007ffdf8645adf R14: 00007f32c5257300 R15: 0000000000022000 [ 119.540684] [ 119.540915] Modules linked in: [ 119.541230] CR2: ffffed10212c9106 [ 119.541562] ---[ end trace 0000000000000000 ]--- [ 119.541563] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#4] SMP KASAN NOPTI [ 119.542018] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.542874] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 119.543317] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 119.543908] CPU: 1 UID: 0 PID: 3969 Comm: syz-executor.7 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 119.545380] RSP: 0018:ffff888045817800 EFLAGS: 00010216 [ 119.546302] Tainted: [D]=DIE, [W]=WARN [ 119.546710] RAX: 1ffff110212c9106 RBX: ffff888109648640 RCX: ffffc90005cb8000 [ 119.547009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 119.547586] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: ffff888109648830 [ 119.548232] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.548782] RBP: ffff888045817a70 R08: ffff88806ce31340 R09: ffffe8ffffc094d0 [ 119.549148] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 119.549697] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 119.551117] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012 [ 119.551681] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 119.551692] FS: 00007f32c5257700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 119.552103] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 119.552657] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.553281] RDX: ffff8880469a8000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 119.553834] CR2: ffffed10212c9106 CR3: 000000001bb9e000 CR4: 0000000000350ef0 [ 119.554289] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd094d0 [ 119.554849] Kernel panic - not syncing: Fatal exception in interrupt [ 120.598861] Shutting down cpus with NMI [ 120.600497] Kernel Offset: disabled [ 120.600790] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 11:41:52 Registers: info registers vcpu 0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff888045817088 R8 =0000000000000000 R9 =ffffed10016d4046 R10=0000000000000031 R11=0000000073706f4f R12=0000000000000031 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0 RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f32c5257700 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=ffffed10212c9106 CR3=000000001bb9e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f32c7dc87c000007f32c7dc87c8 XMM02=00007f32c7dc87e000007f32c7dc87c0 XMM03=00007f32c7dc87c800007f32c7dc87c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=000000000003b58b RCX=ffffffff819cef54 RDX=ffff888017383700 RSI=0000000000000000 RDI=0000000000000000 RBP=1ffff11002f5cec5 RSP=ffff888017ae7620 R8 =0000000000000000 R9 =fffff940001dac50 R10=0000000000000001 R11=00000000000001ff R12=800000003b58b007 R13=ffff88800d2fb8c0 R14=00007f82691fa000 R15=0000000000000000 RIP=ffffffff8173f1e8 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555ebba400 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffcc8af66f8 CR3=000000004084b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000