Warning: Permanently added '[localhost]:6098' (ECDSA) to the list of known hosts.
2025/08/29 10:37:33 fuzzer started
2025/08/29 10:37:33 dialing manager at localhost:43077
syzkaller login: [ 51.735750] cgroup: Unknown subsys name 'net'
[ 51.789987] cgroup: Unknown subsys name 'cpuset'
[ 51.801906] cgroup: Unknown subsys name 'rlimit'
2025/08/29 10:37:44 syscalls: 2214
2025/08/29 10:37:44 code coverage: enabled
2025/08/29 10:37:44 comparison tracing: enabled
2025/08/29 10:37:44 extra coverage: enabled
2025/08/29 10:37:44 setuid sandbox: enabled
2025/08/29 10:37:44 namespace sandbox: enabled
2025/08/29 10:37:44 Android sandbox: enabled
2025/08/29 10:37:44 fault injection: enabled
2025/08/29 10:37:44 leak checking: enabled
2025/08/29 10:37:44 net packet injection: enabled
2025/08/29 10:37:44 net device setup: enabled
2025/08/29 10:37:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/29 10:37:44 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/29 10:37:44 USB emulation: enabled
2025/08/29 10:37:44 hci packet injection: enabled
2025/08/29 10:37:44 wifi device emulation: enabled
2025/08/29 10:37:44 802.15.4 emulation: enabled
2025/08/29 10:37:44 fetching corpus: 0, signal 0/2000 (executing program)
2025/08/29 10:37:44 fetching corpus: 50, signal 22158/25625 (executing program)
2025/08/29 10:37:44 fetching corpus: 100, signal 33136/37959 (executing program)
2025/08/29 10:37:44 fetching corpus: 150, signal 41592/47651 (executing program)
2025/08/29 10:37:44 fetching corpus: 200, signal 50252/57368 (executing program)
2025/08/29 10:37:44 fetching corpus: 250, signal 55428/63609 (executing program)
2025/08/29 10:37:44 fetching corpus: 300, signal 59694/68899 (executing program)
2025/08/29 10:37:44 fetching corpus: 350, signal 62797/73063 (executing program)
2025/08/29 10:37:45 fetching corpus: 400, signal 66242/77432 (executing program)
2025/08/29 10:37:45 fetching corpus: 450, signal 68632/80789 (executing program)
2025/08/29 10:37:45 fetching corpus: 500, signal 71320/84337 (executing program)
2025/08/29 10:37:45 fetching corpus: 550, signal 73679/87509 (executing program)
2025/08/29 10:37:45 fetching corpus: 600, signal 77892/92269 (executing program)
2025/08/29 10:37:45 fetching corpus: 650, signal 80210/95378 (executing program)
2025/08/29 10:37:45 fetching corpus: 700, signal 83768/99479 (executing program)
2025/08/29 10:37:45 fetching corpus: 750, signal 86075/102446 (executing program)
2025/08/29 10:37:45 fetching corpus: 800, signal 88883/105750 (executing program)
2025/08/29 10:37:45 fetching corpus: 850, signal 93060/110108 (executing program)
2025/08/29 10:37:46 fetching corpus: 900, signal 95089/112659 (executing program)
2025/08/29 10:37:46 fetching corpus: 950, signal 96991/115058 (executing program)
2025/08/29 10:37:46 fetching corpus: 1000, signal 99180/117607 (executing program)
2025/08/29 10:37:46 fetching corpus: 1050, signal 100567/119524 (executing program)
2025/08/29 10:37:46 fetching corpus: 1100, signal 102137/121542 (executing program)
2025/08/29 10:37:46 fetching corpus: 1150, signal 103196/123172 (executing program)
2025/08/29 10:37:46 fetching corpus: 1200, signal 104555/124953 (executing program)
2025/08/29 10:37:46 fetching corpus: 1250, signal 105701/126561 (executing program)
2025/08/29 10:37:46 fetching corpus: 1300, signal 106970/128230 (executing program)
2025/08/29 10:37:46 fetching corpus: 1350, signal 108209/129875 (executing program)
2025/08/29 10:37:47 fetching corpus: 1400, signal 111110/132624 (executing program)
2025/08/29 10:37:47 fetching corpus: 1450, signal 112232/134093 (executing program)
2025/08/29 10:37:47 fetching corpus: 1500, signal 113943/136007 (executing program)
2025/08/29 10:37:47 fetching corpus: 1550, signal 115238/137556 (executing program)
2025/08/29 10:37:47 fetching corpus: 1600, signal 116403/138977 (executing program)
2025/08/29 10:37:47 fetching corpus: 1650, signal 117724/140508 (executing program)
2025/08/29 10:37:47 fetching corpus: 1700, signal 118575/141702 (executing program)
2025/08/29 10:37:47 fetching corpus: 1750, signal 120030/143282 (executing program)
2025/08/29 10:37:47 fetching corpus: 1800, signal 121204/144615 (executing program)
2025/08/29 10:37:47 fetching corpus: 1850, signal 122171/145855 (executing program)
2025/08/29 10:37:48 fetching corpus: 1900, signal 123231/147149 (executing program)
2025/08/29 10:37:48 fetching corpus: 1950, signal 125022/148752 (executing program)
2025/08/29 10:37:48 fetching corpus: 2000, signal 126158/149928 (executing program)
2025/08/29 10:37:48 fetching corpus: 2050, signal 126803/150883 (executing program)
2025/08/29 10:37:48 fetching corpus: 2100, signal 128042/152127 (executing program)
2025/08/29 10:37:48 fetching corpus: 2150, signal 129126/153286 (executing program)
2025/08/29 10:37:48 fetching corpus: 2200, signal 129668/154099 (executing program)
2025/08/29 10:37:48 fetching corpus: 2250, signal 130352/154962 (executing program)
2025/08/29 10:37:48 fetching corpus: 2300, signal 131916/156229 (executing program)
2025/08/29 10:37:48 fetching corpus: 2350, signal 132813/157206 (executing program)
2025/08/29 10:37:49 fetching corpus: 2400, signal 133371/157985 (executing program)
2025/08/29 10:37:49 fetching corpus: 2450, signal 134575/159022 (executing program)
2025/08/29 10:37:49 fetching corpus: 2500, signal 135146/159757 (executing program)
2025/08/29 10:37:49 fetching corpus: 2550, signal 135601/160459 (executing program)
2025/08/29 10:37:49 fetching corpus: 2600, signal 136728/161381 (executing program)
2025/08/29 10:37:49 fetching corpus: 2650, signal 137352/162079 (executing program)
2025/08/29 10:37:49 fetching corpus: 2700, signal 137934/162767 (executing program)
2025/08/29 10:37:49 fetching corpus: 2750, signal 138460/163418 (executing program)
2025/08/29 10:37:49 fetching corpus: 2800, signal 139506/164203 (executing program)
2025/08/29 10:37:49 fetching corpus: 2850, signal 140686/165012 (executing program)
2025/08/29 10:37:49 fetching corpus: 2900, signal 141070/165541 (executing program)
2025/08/29 10:37:49 fetching corpus: 2950, signal 141612/166152 (executing program)
2025/08/29 10:37:50 fetching corpus: 3000, signal 142375/166773 (executing program)
2025/08/29 10:37:50 fetching corpus: 3050, signal 143078/167375 (executing program)
2025/08/29 10:37:50 fetching corpus: 3100, signal 143796/167990 (executing program)
2025/08/29 10:37:50 fetching corpus: 3150, signal 144461/168559 (executing program)
2025/08/29 10:37:50 fetching corpus: 3200, signal 145058/169118 (executing program)
2025/08/29 10:37:50 fetching corpus: 3250, signal 145843/169713 (executing program)
2025/08/29 10:37:50 fetching corpus: 3300, signal 146516/170246 (executing program)
2025/08/29 10:37:50 fetching corpus: 3350, signal 146895/170709 (executing program)
2025/08/29 10:37:50 fetching corpus: 3400, signal 147573/171235 (executing program)
2025/08/29 10:37:50 fetching corpus: 3450, signal 148253/171777 (executing program)
2025/08/29 10:37:50 fetching corpus: 3500, signal 148832/172228 (executing program)
2025/08/29 10:37:51 fetching corpus: 3550, signal 149290/172653 (executing program)
2025/08/29 10:37:51 fetching corpus: 3600, signal 149603/173038 (executing program)
2025/08/29 10:37:51 fetching corpus: 3650, signal 149956/173429 (executing program)
2025/08/29 10:37:51 fetching corpus: 3700, signal 150635/173862 (executing program)
2025/08/29 10:37:51 fetching corpus: 3750, signal 151137/174244 (executing program)
2025/08/29 10:37:51 fetching corpus: 3800, signal 151662/174621 (executing program)
2025/08/29 10:37:51 fetching corpus: 3850, signal 152434/174996 (executing program)
2025/08/29 10:37:51 fetching corpus: 3900, signal 152980/175342 (executing program)
2025/08/29 10:37:51 fetching corpus: 3950, signal 153505/175648 (executing program)
2025/08/29 10:37:51 fetching corpus: 4000, signal 153933/175975 (executing program)
2025/08/29 10:37:52 fetching corpus: 4050, signal 154756/176323 (executing program)
2025/08/29 10:37:52 fetching corpus: 4100, signal 155476/176609 (executing program)
2025/08/29 10:37:52 fetching corpus: 4150, signal 156001/176919 (executing program)
2025/08/29 10:37:52 fetching corpus: 4200, signal 156545/177199 (executing program)
2025/08/29 10:37:52 fetching corpus: 4250, signal 157201/177457 (executing program)
2025/08/29 10:37:52 fetching corpus: 4300, signal 157568/177561 (executing program)
2025/08/29 10:37:52 fetching corpus: 4350, signal 157965/177592 (executing program)
2025/08/29 10:37:52 fetching corpus: 4400, signal 158333/177601 (executing program)
2025/08/29 10:37:52 fetching corpus: 4450, signal 158985/177605 (executing program)
2025/08/29 10:37:52 fetching corpus: 4500, signal 159461/177608 (executing program)
2025/08/29 10:37:52 fetching corpus: 4550, signal 159786/177659 (executing program)
2025/08/29 10:37:53 fetching corpus: 4600, signal 160391/177667 (executing program)
2025/08/29 10:37:53 fetching corpus: 4650, signal 160724/177717 (executing program)
2025/08/29 10:37:53 fetching corpus: 4700, signal 161101/177730 (executing program)
2025/08/29 10:37:53 fetching corpus: 4750, signal 161550/177778 (executing program)
2025/08/29 10:37:53 fetching corpus: 4800, signal 162094/177780 (executing program)
2025/08/29 10:37:53 fetching corpus: 4850, signal 162468/177844 (executing program)
2025/08/29 10:37:53 fetching corpus: 4900, signal 162790/177864 (executing program)
2025/08/29 10:37:53 fetching corpus: 4950, signal 163185/177873 (executing program)
2025/08/29 10:37:53 fetching corpus: 5000, signal 163522/177889 (executing program)
2025/08/29 10:37:53 fetching corpus: 5050, signal 164112/177990 (executing program)
2025/08/29 10:37:54 fetching corpus: 5100, signal 164426/178024 (executing program)
2025/08/29 10:37:54 fetching corpus: 5150, signal 164783/178030 (executing program)
2025/08/29 10:37:54 fetching corpus: 5200, signal 165055/178032 (executing program)
2025/08/29 10:37:54 fetching corpus: 5250, signal 165277/178065 (executing program)
2025/08/29 10:37:54 fetching corpus: 5300, signal 165677/178087 (executing program)
2025/08/29 10:37:54 fetching corpus: 5350, signal 165968/178088 (executing program)
2025/08/29 10:37:54 fetching corpus: 5400, signal 166262/178091 (executing program)
2025/08/29 10:37:54 fetching corpus: 5450, signal 166912/178104 (executing program)
2025/08/29 10:37:54 fetching corpus: 5500, signal 167266/178141 (executing program)
2025/08/29 10:37:54 fetching corpus: 5550, signal 167635/178141 (executing program)
2025/08/29 10:37:54 fetching corpus: 5600, signal 167966/178147 (executing program)
2025/08/29 10:37:55 fetching corpus: 5650, signal 168327/178162 (executing program)
2025/08/29 10:37:55 fetching corpus: 5700, signal 168847/178180 (executing program)
2025/08/29 10:37:55 fetching corpus: 5750, signal 169370/178289 (executing program)
2025/08/29 10:37:55 fetching corpus: 5800, signal 169576/178315 (executing program)
2025/08/29 10:37:55 fetching corpus: 5850, signal 169949/178322 (executing program)
2025/08/29 10:37:55 fetching corpus: 5900, signal 170173/178336 (executing program)
2025/08/29 10:37:55 fetching corpus: 5950, signal 170594/178337 (executing program)
2025/08/29 10:37:55 fetching corpus: 6000, signal 170891/178338 (executing program)
2025/08/29 10:37:55 fetching corpus: 6050, signal 171462/178406 (executing program)
2025/08/29 10:37:55 fetching corpus: 6100, signal 171785/178423 (executing program)
2025/08/29 10:37:55 fetching corpus: 6150, signal 172090/178423 (executing program)
2025/08/29 10:37:56 fetching corpus: 6200, signal 172457/178434 (executing program)
2025/08/29 10:37:56 fetching corpus: 6250, signal 172843/178435 (executing program)
2025/08/29 10:37:56 fetching corpus: 6300, signal 173374/178455 (executing program)
2025/08/29 10:37:56 fetching corpus: 6350, signal 173661/178461 (executing program)
2025/08/29 10:37:56 fetching corpus: 6400, signal 173926/178466 (executing program)
2025/08/29 10:37:56 fetching corpus: 6450, signal 174240/178469 (executing program)
2025/08/29 10:37:56 fetching corpus: 6500, signal 174578/178473 (executing program)
2025/08/29 10:37:56 fetching corpus: 6550, signal 175055/178489 (executing program)
2025/08/29 10:37:56 fetching corpus: 6600, signal 175395/178489 (executing program)
2025/08/29 10:37:56 fetching corpus: 6650, signal 175653/178491 (executing program)
2025/08/29 10:37:56 fetching corpus: 6681, signal 175804/178498 (executing program)
2025/08/29 10:37:56 fetching corpus: 6681, signal 175804/178498 (executing program)
2025/08/29 10:37:59 starting 8 fuzzer processes
10:37:59 executing program 0:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x5a, 0x0, 0x0, 0x0)
mount(&(0x7f00000002c0)=@sg0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='nfs4\x00', 0x0, 0x0)
10:37:59 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$EVIOCGSND(r0, 0x8040451a, 0x0)
10:37:59 executing program 1:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000000400))
10:37:59 executing program 7:
rt_sigtimedwait(&(0x7f0000000200), 0x0, &(0x7f00000002c0), 0x8)
10:37:59 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000))
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$TCXONC(r1, 0x540a, 0x2)
10:37:59 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x4)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'})
10:37:59 executing program 6:
openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0)
eventfd2(0x0, 0x0)
semget$private(0x0, 0x4, 0x0)
semop(0x0, 0x0, 0x0)
semop(0x0, 0x0, 0x0)
10:37:59 executing program 4:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448e6, 0x0)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
[ 77.437825] audit: type=1400 audit(1756463879.462:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[ 78.766514] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 78.768807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 78.771829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 78.773443] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 78.776806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 78.778556] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 78.781313] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 78.783632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 78.786586] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 78.795547] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 78.799529] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 78.802112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 78.803043] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 78.807009] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 78.817388] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 78.820018] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 78.830102] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 78.831698] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 78.843726] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 78.850195] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 78.857037] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 78.860498] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 78.861967] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 78.872988] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 78.878879] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 78.881559] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 78.883303] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 78.885031] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 78.886167] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 78.886631] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 78.890790] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 78.901211] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 78.905751] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 78.906867] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 78.906994] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 78.916940] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 78.919471] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 78.929223] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 78.930609] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 78.941773] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 80.848968] Bluetooth: hci1: command tx timeout
[ 80.911437] Bluetooth: hci0: command tx timeout
[ 80.912538] Bluetooth: hci3: command tx timeout
[ 80.913127] Bluetooth: hci2: command tx timeout
[ 80.975460] Bluetooth: hci4: command tx timeout
[ 80.976584] Bluetooth: hci6: command tx timeout
[ 80.977578] Bluetooth: hci5: command tx timeout
[ 81.040462] Bluetooth: hci7: command tx timeout
[ 82.896402] Bluetooth: hci1: command tx timeout
[ 82.959545] Bluetooth: hci2: command tx timeout
[ 82.959958] Bluetooth: hci3: command tx timeout
[ 82.961422] Bluetooth: hci0: command tx timeout
[ 83.023444] Bluetooth: hci5: command tx timeout
[ 83.023834] Bluetooth: hci6: command tx timeout
[ 83.024216] Bluetooth: hci4: command tx timeout
[ 83.088299] Bluetooth: hci7: command tx timeout
[ 84.945496] Bluetooth: hci1: command tx timeout
[ 85.009378] Bluetooth: hci0: command tx timeout
[ 85.009653] Bluetooth: hci3: command tx timeout
[ 85.009847] Bluetooth: hci2: command tx timeout
[ 85.071572] Bluetooth: hci6: command tx timeout
[ 85.071718] Bluetooth: hci5: command tx timeout
[ 85.073097] Bluetooth: hci4: command tx timeout
[ 85.136457] Bluetooth: hci7: command tx timeout
[ 86.994386] Bluetooth: hci1: command tx timeout
[ 87.055418] Bluetooth: hci3: command tx timeout
[ 87.057272] Bluetooth: hci2: command tx timeout
[ 87.057352] Bluetooth: hci0: command tx timeout
[ 87.120081] Bluetooth: hci4: command tx timeout
[ 87.120671] Bluetooth: hci5: command tx timeout
[ 87.121053] Bluetooth: hci6: command tx timeout
[ 87.183561] Bluetooth: hci7: command tx timeout
[ 115.470930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 115.471633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 115.654781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 115.655433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.308627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.309220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.615429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.616659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 117.291409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 117.292468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 117.418770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 117.419444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 117.528233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 117.529955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 117.631511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 117.632312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 117.730182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 117.731473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 117.828664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 117.829297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 118.077215] loop1: detected capacity change from 0 to 128
[ 118.095957] isofs_fill_super: bread failed, dev=loop1, iso_blknum=32, block=64
[ 118.108897] loop1: detected capacity change from 0 to 128
[ 118.120761] isofs_fill_super: bread failed, dev=loop1, iso_blknum=32, block=64
[ 118.291523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 118.292142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 118.363165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 118.363879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 118.453113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 118.453733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 118.494468] audit: type=1400 audit(1756463920.518:8): avc: denied { open } for pid=3881 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 118.499530] audit: type=1400 audit(1756463920.518:9): avc: denied { kernel } for pid=3881 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 118.506926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 118.507843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 118.582970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 118.583776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 118.625768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 118.626377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:38:40 executing program 0:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x5a, 0x0, 0x0, 0x0)
mount(&(0x7f00000002c0)=@sg0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='nfs4\x00', 0x0, 0x0)
10:38:40 executing program 6:
openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0)
eventfd2(0x0, 0x0)
semget$private(0x0, 0x4, 0x0)
semop(0x0, 0x0, 0x0)
semop(0x0, 0x0, 0x0)
10:38:40 executing program 7:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, &(0x7f0000000000), 0x14)
10:38:40 executing program 5:
msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8)
10:38:40 executing program 1:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000000400))
10:38:40 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x4)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'})
10:38:40 executing program 4:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448e6, 0x0)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
10:38:40 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000))
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$TCXONC(r1, 0x540a, 0x2)
[ 118.789159] loop1: detected capacity change from 0 to 128
[ 118.806997] isofs_fill_super: bread failed, dev=loop1, iso_blknum=32, block=64
[ 118.828441] Unsupported ieee802154 address type: 0
10:38:40 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000))
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$TCXONC(r1, 0x540a, 0x2)
10:38:40 executing program 6:
openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0)
eventfd2(0x0, 0x0)
semget$private(0x0, 0x4, 0x0)
semop(0x0, 0x0, 0x0)
semop(0x0, 0x0, 0x0)
10:38:40 executing program 5:
msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8)
10:38:40 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x4)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'})
10:38:40 executing program 4:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448e6, 0x0)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
10:38:40 executing program 1:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000000400))
10:38:40 executing program 0:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x5a, 0x0, 0x0, 0x0)
mount(&(0x7f00000002c0)=@sg0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='nfs4\x00', 0x0, 0x0)
10:38:40 executing program 7:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, &(0x7f0000000000), 0x14)
[ 118.919276] BUG: unable to handle page fault for address: ffffed10212c9106
[ 118.919871] #PF: supervisor read access in kernel mode
[ 118.920277] #PF: error_code(0x0000) - not-present page
[ 118.920682] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0
[ 118.921124] Oops: Oops: 0000 [#1] SMP KASAN NOPTI
[ 118.922213] CPU: 0 UID: 0 PID: 3917 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 118.924984] Tainted: [W]=WARN
[ 118.926064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 118.927914] RIP: 0010:perf_tp_event+0x175/0xe70
[ 118.928996] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 118.930883] RSP: 0018:ffff888017097800 EFLAGS: 00010216
[ 118.931141] loop1: detected capacity change from 0 to 128
[ 118.931302] RAX: 1ffff110212c9106 RBX: ffff888109648640 RCX: ffffc90000fe5000
[ 118.932345] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff888109648830
[ 118.932897] RBP: ffff888017097a70 R08: ffff88806ce31340 R09: ffffe8ffffc15208
[ 118.933457] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000
[ 118.934008] R13: 0000000000000024 R14: ffff88806ce31340 R15: dffffc0000000000
[ 118.934562] FS: 00007f1e4da20700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 118.935184] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 118.935645] CR2: ffffed10212c9106 CR3: 000000003bf3e000 CR4: 0000000000350ef0
[ 118.936198] Call Trace:
[ 118.936405]
[ 118.936592] ? __pfx_perf_tp_event+0x10/0x10
[ 118.936948] ? perf_tp_event+0x807/0xe70
[ 118.937272] ? lock_is_held_type+0x9e/0x120
[ 118.937622] ? __pfx_perf_tp_event+0x10/0x10
[ 118.937973] ? __pfx_ctx_sched_in+0x10/0x10
[ 118.938309] ? arch_stack_walk+0x9c/0xf0
[ 118.938634] ? find_held_lock+0x2b/0x80
[ 118.938957] ? perf_trace_run_bpf_submit+0xef/0x180
[ 118.939352] ? perf_trace_run_bpf_submit+0xef/0x180
[ 118.939757] ? perf_trace_run_bpf_submit+0xef/0x180
[ 118.940148] perf_trace_run_bpf_submit+0xef/0x180
[ 118.940534] perf_trace_lock_acquire+0x3c2/0x700
[ 118.940918] ? __pfx_perf_trace_lock_acquire+0x10/0x10
[ 118.941333] ? futex_ref_get+0x48/0x300
[ 118.941645] ? find_held_lock+0x2b/0x80
[ 118.941964] lock_acquire+0xc5/0x2f0
[ 118.942261] ? futex_wake+0x228/0x540
[ 118.942570] _raw_spin_lock+0x2b/0x40
[ 118.942873] ? futex_wake+0x228/0x540
[ 118.943178] futex_wake+0x228/0x540
[ 118.943472] ? __pfx_futex_wake+0x10/0x10
[ 118.943811] ? __do_sys_perf_event_open+0x44d/0x2c20
[ 118.944205] ? lock_release+0xc8/0x290
[ 118.944517] do_futex+0x26d/0x370
[ 118.944796] ? __pfx_do_futex+0x10/0x10
[ 118.945110] ? __pfx___do_sys_perf_event_open+0x10/0x10
[ 118.945523] ? find_held_lock+0x2b/0x80
[ 118.945843] __x64_sys_futex+0x1c9/0x4d0
[ 118.946166] ? __pfx___x64_sys_futex+0x10/0x10
[ 118.946531] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 118.946940] do_syscall_64+0xbf/0x360
[ 118.947242] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 118.947652] RIP: 0033:0x7f1e504aab19
[ 118.947943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 118.949328] RSP: 002b:00007f1e4da20218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 118.949910] RAX: ffffffffffffffda RBX: 00007f1e505bdf68 RCX: 00007f1e504aab19
[ 118.950458] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1e505bdf6c
[ 118.951006] RBP: 00007f1e505bdf60 R08: 000000000000000e R09: 0000000000000000
[ 118.951553] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f1e505bdf6c
[ 118.952110] R13: 00007ffc6cb5ef2f R14: 00007f1e4da20300 R15: 0000000000022000
[ 118.952669]
[ 118.952857] Modules linked in:
[ 118.953112] CR2: ffffed10212c9106
[ 118.953383] ---[ end trace 0000000000000000 ]---
[ 118.953385] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI
[ 118.953748] RIP: 0010:perf_tp_event+0x175/0xe70
[ 118.954617] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 118.954970] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 118.955557] CPU: 1 UID: 0 PID: 3921 Comm: syz-executor.0 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 118.956943] RSP: 0018:ffff888017097800 EFLAGS: 00010216
[ 118.957861] Tainted: [D]=DIE, [W]=WARN
[ 118.958266] RAX: 1ffff110212c9106 RBX: ffff888109648640 RCX: ffffc90000fe5000
[ 118.958567] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 118.959108] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff888109648830
[ 118.959753] RIP: 0010:perf_tp_event+0x175/0xe70
[ 118.960294] RBP: ffff888017097a70 R08: ffff88806ce31340 R09: ffffe8ffffc15208
[ 118.960652] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 118.961194] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000
[ 118.962601] RSP: 0018:ffff88800f777600 EFLAGS: 00010212
[ 118.963140] R13: 0000000000000024 R14: ffff88806ce31340 R15: dffffc0000000000
[ 118.963556] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc900007e1000
[ 118.964102] FS: 00007f1e4da20700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 118.964651] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 118.965262] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 118.965814] RBP: ffff88800f777870 R08: ffff88806cf31340 R09: ffffe8ffffd15208
[ 118.966254] CR2: ffffed10212c9106 CR3: 000000003bf3e000 CR4: 0000000000350ef0
[ 118.966807] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000
[ 118.967351] note: syz-executor.3[3917] exited with irqs disabled
[ 118.967907] R13: 0000000000000024 R14: ffff88806cf31340 R15: dffffc0000000000
[ 118.968921] FS: 00007fd285bc5700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[ 118.969545] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 118.969999] CR2: 00007fb9ac72bfe8 CR3: 000000004387e000 CR4: 0000000000350ef0
[ 118.970562] Call Trace:
[ 118.970775]
[ 118.970967] ? __pfx_perf_tp_event+0x10/0x10
[ 118.971348] ? perf_trace_run_bpf_submit+0xef/0x180
[ 118.971758] perf_trace_run_bpf_submit+0xef/0x180
[ 118.972150] perf_trace_lock_acquire+0x3c2/0x700
[ 118.972534] ? __pfx_perf_trace_lock_acquire+0x10/0x10
[ 118.972957] ? __pfx_perf_trace_lock_acquire+0x10/0x10
[ 118.973373] ? perf_trace_lock_acquire+0xc9/0x700
[ 118.973759] ? lock_acquire+0xc5/0x2f0
[ 118.974072] ? lock_acquire+0x18c/0x2f0
[ 118.974393] lock_acquire+0xc5/0x2f0
[ 118.974693] ? futex_wait_setup+0xbe/0x550
[ 118.975036] ? futex_hash+0x15c/0x390
[ 118.975346] _raw_spin_lock+0x2b/0x40
[ 118.975666] ? futex_wait_setup+0xbe/0x550
[ 118.976009] futex_wait_setup+0xbe/0x550
[ 118.976342] __futex_wait+0x151/0x300
[ 118.976658] ? __pfx___futex_wait+0x10/0x10
[ 118.977010] ? __pfx_futex_wake_mark+0x10/0x10
[ 118.977387] futex_wait+0xde/0x380
[ 118.977681] ? __pfx_futex_wait+0x10/0x10
[ 118.978018] ? perf_trace_lock_acquire+0xc9/0x700
[ 118.978406] ? perf_trace_lock_acquire+0xc9/0x700
[ 118.978796] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 118.979215] do_futex+0x2ee/0x370
[ 118.979503] ? __pfx_do_futex+0x10/0x10
[ 118.979833] ? do_raw_spin_lock+0x123/0x260
[ 118.980182] __x64_sys_futex+0x1c9/0x4d0
[ 118.980511] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 118.980926] ? __pfx___x64_sys_futex+0x10/0x10
[ 118.981293] ? kcov_ioctl+0x386/0x6c0
[ 118.981608] ? fput+0x6a/0x100
[ 118.981880] do_syscall_64+0xbf/0x360
[ 118.982188] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 118.982597] RIP: 0033:0x7fd28864fb19
[ 118.982896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 118.984320] RSP: 002b:00007fd285bc5218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 118.984915] RAX: ffffffffffffffda RBX: 00007fd288762f68 RCX: 00007fd28864fb19
[ 118.985475] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd288762f68
[ 118.986033] RBP: 00007fd288762f60 R08: 00007fd285bc5700 R09: 0000000000000000
[ 118.986591] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd288762f6c
[ 118.987149] R13: 00007ffd459aaf6f R14: 00007fd285bc5300 R15: 0000000000022000
[ 118.987726]
[ 118.987917] Modules linked in:
[ 118.988182] BUG: unable to handle page fault for address: ffffed10212c9106
[ 118.988732] #PF: supervisor read access in kernel mode
[ 118.989140] #PF: error_code(0x0000) - not-present page
[ 118.989546] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0
[ 118.989995] Oops: Oops: 0000 [#3] SMP KASAN NOPTI
[ 118.990379] CPU: 0 UID: 0 PID: 3917 Comm: syz-executor.3 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 118.991314] Tainted: [D]=DIE, [W]=WARN
[ 118.991625] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 118.992276] RIP: 0010:perf_tp_event+0x175/0xe70
[ 118.992655] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 118.994080] RSP: 0018:ffff88806ce08a40 EFLAGS: 00010016
[ 118.994500] RAX: 1ffff110212c9106 RBX: ffff888109648640 RCX: 0000000000000002
[ 118.995063] RDX: ffff88801a078000 RSI: ffffffff818995b7 RDI: ffff888109648830
[ 118.995629] RBP: ffff88806ce08cb0 R08: ffff88806ce31490 R09: ffffe8ffffc15208
[ 118.996191] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000
[ 118.996753] R13: 0000000000000024 R14: ffff88806ce31490 R15: dffffc0000000000
[ 118.997317] FS: 00007f1e4da20700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 118.997950] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 118.998411] CR2: ffffed10212c9106 CR3: 000000003bf3e000 CR4: 0000000000350ef0
[ 118.998972] Call Trace:
[ 118.999180]
[ 118.999360] ? __kernel_text_address+0xd/0x40
[ 118.999736] ? __pfx_perf_tp_event+0x10/0x10
[ 119.000096] ? __lock_acquire+0x694/0x1b70
[ 119.000435] ? trace_softirq_raise+0xbe/0x100
[ 119.000808] ? lock_acquire+0x15e/0x2f0
[ 119.001125] ? select_task_rq_fair+0x2b6/0x38b0
[ 119.001496] ? find_held_lock+0x2b/0x80
[ 119.001819] ? select_task_rq_fair+0x48c/0x38b0
[ 119.002188] ? __pfx_call_function_single_prep_ipi+0x10/0x10
[ 119.002652] ? trace_ipi_send_cpu.constprop.0+0x158/0x1c0
[ 119.003092] ? perf_trace_run_bpf_submit+0xef/0x180
[ 119.003489] perf_trace_run_bpf_submit+0xef/0x180
[ 119.003883] perf_trace_lock_acquire+0x3c2/0x700
[ 119.004267] ? do_raw_spin_unlock+0x53/0x220
[ 119.004623] ? __pfx_perf_trace_lock_acquire+0x10/0x10
[ 119.005042] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 119.005416] ? __pfx_try_to_wake_up+0x10/0x10
[ 119.005782] lock_acquire+0xc5/0x2f0
[ 119.006080] ? sched_ttwu_pending+0xa1/0x4a0
[ 119.006440] ? trace_rcu_utilization+0x26/0x190
[ 119.006818] ? rcu_core+0xa98/0x1800
[ 119.007125] _raw_spin_lock_nested+0x29/0x40
[ 119.007477] ? sched_ttwu_pending+0xa1/0x4a0
[ 119.007843] sched_ttwu_pending+0xa1/0x4a0
[ 119.008181] ? __pfx_rcu_core+0x10/0x10
[ 119.008502] ? clockevents_program_event+0x135/0x360
[ 119.008910] ? __pfx_sched_ttwu_pending+0x10/0x10
[ 119.009300] ? mark_held_locks+0x49/0x80
[ 119.009626] __flush_smp_call_function_queue+0x434/0x740
[ 119.010061] __sysvec_call_function_single+0x6d/0x370
[ 119.010480] sysvec_call_function_single+0xa1/0xc0
[ 119.010873]
[ 119.011055]
[ 119.011238] asm_sysvec_call_function_single+0x1a/0x20
[ 119.011661] RIP: 0010:make_task_dead+0xa2/0x3b0
[ 119.012036] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de
[ 119.013456] RSP: 0018:ffff888017097f28 EFLAGS: 00000246
[ 119.013876] RAX: 0000000000000001 RBX: ffff88801a078000 RCX: ffffffff817c2b86
[ 119.014437] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234
[ 119.015001] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000
[ 119.015563] R10: ffffffff8643ac57 R11: 000000000000002c R12: ffff88801a078000
[ 119.016130] R13: 0000000000000009 R14: ffff8880170977e0 R15: 0000000000000000
[ 119.016693] ? trace_irq_enable.constprop.0+0x26/0x100
[ 119.017108] ? make_task_dead+0x214/0x3b0
[ 119.017442] ? make_task_dead+0x214/0x3b0
[ 119.017770] ? do_syscall_64+0xbf/0x360
[ 119.018088] rewind_stack_and_make_dead+0x16/0x20
[ 119.018476] RIP: 0033:0x7f1e504aab19
[ 119.018770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 119.020202] RSP: 002b:00007f1e4da20218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 119.020799] RAX: ffffffffffffffda RBX: 00007f1e505bdf68 RCX: 00007f1e504aab19
[ 119.021352] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1e505bdf6c
[ 119.021915] RBP: 00007f1e505bdf60 R08: 000000000000000e R09: 0000000000000000
[ 119.022473] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f1e505bdf6c
[ 119.023033] R13: 00007ffc6cb5ef2f R14: 00007f1e4da20300 R15: 0000000000022000
[ 119.023598]
[ 119.023792] Modules linked in:
[ 119.024050] CR2: ffffed10212c9106
[ 119.024323] ---[ end trace 0000000000000000 ]---
[ 119.024324] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#4] SMP KASAN NOPTI
[ 119.024690] RIP: 0010:perf_tp_event+0x175/0xe70
[ 119.025543] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 119.025903] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 119.026494] CPU: 1 UID: 0 PID: 3921 Comm: syz-executor.0 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 119.027905] RSP: 0018:ffff888017097800 EFLAGS: 00010216
[ 119.028828] Tainted: [D]=DIE, [W]=WARN
[ 119.029230] RAX: 1ffff110212c9106 RBX: ffff888109648640 RCX: ffffc90000fe5000
[ 119.029529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 119.030067] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff888109648830
[ 119.030707] RIP: 0010:perf_tp_event+0x175/0xe70
[ 119.031248] RBP: ffff888017097a70 R08: ffff88806ce31340 R09: ffffe8ffffc15208
[ 119.031612] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 119.032158] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000
[ 119.033562] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012
[ 119.034100] R13: 0000000000000024 R14: ffff88806ce31340 R15: dffffc0000000000
[ 119.034103]
[ 119.034516] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 119.035058] FS: 00007f1e4da20700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 119.035194] RDX: ffff888044b5d280 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 119.035742] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 119.036359] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd15208
[ 119.036903] CR2: ffffed10212c9106 CR3: 000000003bf3e000 CR4: 0000000000350ef0
[ 119.037352] R10: 0000000000000000 R11: 000000000000002c R12: dffffc0000000000
[ 119.037894] Kernel panic - not syncing: Fatal exception in interrupt
[ 120.079430] Shutting down cpus with NMI
[ 120.091302] Kernel Offset: disabled
[ 120.091593] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---
VM DIAGNOSIS:
10:38:41 Registers:
info registers vcpu 0
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff828e3230 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888017096ff0
R8 =0000000000000000 R9 =ffffed100172f046 R10=00000000000fe503 R11=000000000000002c
R12=0000000000000823 R13=0000000000000020 R14=fffffbfff10e4882 R15=dffffc0000000000
RIP=ffffffff828e3285 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f1e4da20700 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe5000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=ffffed10212c9106 CR3=000000003bf3e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f1e505917c000007f1e505917c8
XMM02=00007f1e505917e000007f1e505917c0 XMM03=00007f1e505917c800007f1e505917c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffff88806cf36f80 RCX=1ffff11002fae9aa RDX=1ffff1100d9e6e1f
RSI=0000000000000000 RDI=ffff88806cf36ec0 RBP=ffff888017d74400 RSP=ffff88800a66fb30
R8 =0000000000000000 R9 =fffffbfff0c8758a R10=ffffffff8643ac57 R11=ffff88806cf37018
R12=0000000000000001 R13=0000000000000001 R14=ffff888017d744c0 R15=ffff88806cf370f8
RIP=ffffffff8148eb2a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555559d66400 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe0e00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd288625bd0 CR3=000000004387e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000