Warning: Permanently added '[localhost]:62648' (ECDSA) to the list of known hosts. 2025/08/29 08:31:00 fuzzer started 2025/08/29 08:31:01 dialing manager at localhost:43077 syzkaller login: [ 56.850227] cgroup: Unknown subsys name 'net' [ 56.922356] cgroup: Unknown subsys name 'cpuset' [ 56.933843] cgroup: Unknown subsys name 'rlimit' 2025/08/29 08:31:11 syscalls: 2214 2025/08/29 08:31:11 code coverage: enabled 2025/08/29 08:31:11 comparison tracing: enabled 2025/08/29 08:31:11 extra coverage: enabled 2025/08/29 08:31:11 setuid sandbox: enabled 2025/08/29 08:31:11 namespace sandbox: enabled 2025/08/29 08:31:11 Android sandbox: enabled 2025/08/29 08:31:11 fault injection: enabled 2025/08/29 08:31:11 leak checking: enabled 2025/08/29 08:31:11 net packet injection: enabled 2025/08/29 08:31:11 net device setup: enabled 2025/08/29 08:31:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 08:31:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 08:31:11 USB emulation: enabled 2025/08/29 08:31:11 hci packet injection: enabled 2025/08/29 08:31:11 wifi device emulation: enabled 2025/08/29 08:31:11 802.15.4 emulation: enabled 2025/08/29 08:31:11 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 08:31:11 fetching corpus: 50, signal 25346/28300 (executing program) 2025/08/29 08:31:11 fetching corpus: 100, signal 39965/43485 (executing program) 2025/08/29 08:31:11 fetching corpus: 150, signal 47713/51843 (executing program) 2025/08/29 08:31:11 fetching corpus: 200, signal 54984/59409 (executing program) 2025/08/29 08:31:11 fetching corpus: 250, signal 58314/63232 (executing program) 2025/08/29 08:31:11 fetching corpus: 300, signal 62709/67857 (executing program) 2025/08/29 08:31:12 fetching corpus: 350, signal 66511/71771 (executing program) 2025/08/29 08:31:12 fetching corpus: 400, signal 69457/74841 (executing program) 2025/08/29 08:31:12 fetching corpus: 450, signal 72242/77577 (executing program) 2025/08/29 08:31:12 fetching corpus: 500, signal 74139/79570 (executing program) 2025/08/29 08:31:12 fetching corpus: 550, signal 77479/82679 (executing program) 2025/08/29 08:31:12 fetching corpus: 600, signal 78970/84239 (executing program) 2025/08/29 08:31:12 fetching corpus: 650, signal 80433/85667 (executing program) 2025/08/29 08:31:12 fetching corpus: 700, signal 82454/87544 (executing program) 2025/08/29 08:31:13 fetching corpus: 750, signal 85747/90146 (executing program) 2025/08/29 08:31:13 fetching corpus: 800, signal 87663/91681 (executing program) 2025/08/29 08:31:13 fetching corpus: 850, signal 89324/92974 (executing program) 2025/08/29 08:31:13 fetching corpus: 900, signal 91511/94796 (executing program) 2025/08/29 08:31:13 fetching corpus: 950, signal 93503/96156 (executing program) 2025/08/29 08:31:13 fetching corpus: 1000, signal 95161/97291 (executing program) 2025/08/29 08:31:13 fetching corpus: 1050, signal 96742/98395 (executing program) 2025/08/29 08:31:13 fetching corpus: 1097, signal 98324/99303 (executing program) 2025/08/29 08:31:13 fetching corpus: 1097, signal 98324/99342 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/99386 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/99422 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/99469 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/99511 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/99557 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/99606 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/99662 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/99702 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/99747 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/99786 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/99819 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/99857 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/99892 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/99933 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/99984 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/100019 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/100053 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/100085 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/100126 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/100171 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/100216 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/100248 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/100290 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/100330 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/100349 (executing program) 2025/08/29 08:31:14 fetching corpus: 1097, signal 98324/100349 (executing program) 2025/08/29 08:31:16 starting 8 fuzzer processes 08:31:16 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r2, r1, 0x0) r4 = eventfd(0x8) dup3(r4, r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 08:31:16 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1e, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) 08:31:16 executing program 7: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000006c40)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x96, @time}) 08:31:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x920, 0x6aa1}) 08:31:16 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r0, &(0x7f00000000c0)=""/194, 0xc2, 0x0) [ 72.095148] audit: type=1400 audit(1756456276.669:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:31:16 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x404c534a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 08:31:16 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_open_dev$mouse(0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) dup2(r0, r1) 08:31:16 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) [ 73.273697] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.276153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.279329] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.283591] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.286921] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.350793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.355250] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.358713] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.366663] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.377725] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.413105] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.416234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.425175] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.427190] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.428980] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.432023] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.435488] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.441832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.444050] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.448098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.450276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.457650] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.463169] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.465231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.480051] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.483040] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.486714] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.488531] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.490559] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 73.492378] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.494935] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 73.499649] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 73.504195] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 73.506025] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.514218] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 73.518721] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 73.521669] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 73.529658] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 73.550175] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 73.563692] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 75.308845] Bluetooth: hci0: command tx timeout [ 75.436612] Bluetooth: hci1: command tx timeout [ 75.501482] Bluetooth: hci4: command tx timeout [ 75.501516] Bluetooth: hci3: command tx timeout [ 75.564828] Bluetooth: hci6: command tx timeout [ 75.565436] Bluetooth: hci2: command tx timeout [ 75.566235] Bluetooth: hci5: command tx timeout [ 75.628539] Bluetooth: hci7: command tx timeout [ 77.356490] Bluetooth: hci0: command tx timeout [ 77.484608] Bluetooth: hci1: command tx timeout [ 77.548709] Bluetooth: hci4: command tx timeout [ 77.549163] Bluetooth: hci3: command tx timeout [ 77.614423] Bluetooth: hci2: command tx timeout [ 77.614877] Bluetooth: hci5: command tx timeout [ 77.615254] Bluetooth: hci6: command tx timeout [ 77.677550] Bluetooth: hci7: command tx timeout [ 79.404481] Bluetooth: hci0: command tx timeout [ 79.532595] Bluetooth: hci1: command tx timeout [ 79.598509] Bluetooth: hci3: command tx timeout [ 79.599311] Bluetooth: hci4: command tx timeout [ 79.662450] Bluetooth: hci6: command tx timeout [ 79.663296] Bluetooth: hci5: command tx timeout [ 79.664276] Bluetooth: hci2: command tx timeout [ 79.724678] Bluetooth: hci7: command tx timeout [ 81.453510] Bluetooth: hci0: command tx timeout [ 81.581479] Bluetooth: hci1: command tx timeout [ 81.644512] Bluetooth: hci4: command tx timeout [ 81.644956] Bluetooth: hci3: command tx timeout [ 81.708527] Bluetooth: hci6: command tx timeout [ 81.709498] Bluetooth: hci5: command tx timeout [ 81.709884] Bluetooth: hci2: command tx timeout [ 81.772435] Bluetooth: hci7: command tx timeout [ 109.779827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.780506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.918202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.918856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.393800] audit: type=1400 audit(1756456314.964:8): avc: denied { open } for pid=3682 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 110.407542] audit: type=1400 audit(1756456314.965:9): avc: denied { kernel } for pid=3682 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 110.450512] kernel write not supported for file [eventfd] (pid: 49 comm: kworker/1:1) [ 110.471350] kernel write not supported for file [eventfd] (pid: 49 comm: kworker/1:1) [ 111.434432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.435064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.585454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.586087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.992669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.993287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.107452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.108079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.210781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.211438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.233954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.234555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.293231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.293834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.412784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.413370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.823453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.824076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.861032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.861748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.965158] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.967670] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.020862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.021657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.063669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.064312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.096523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.097141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.120200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.120796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:31:57 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r2, r1, 0x0) r4 = eventfd(0x8) dup3(r4, r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 08:31:57 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r0, &(0x7f00000000c0)=""/194, 0xc2, 0x0) 08:31:57 executing program 7: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000006c40)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x96, @time}) 08:31:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1e, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) 08:31:57 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) 08:31:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x920, 0x6aa1}) 08:31:57 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x404c534a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 08:31:57 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_open_dev$mouse(0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) dup2(r0, r1) [ 113.311054] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.328939] kernel write not supported for file [eventfd] (pid: 73 comm: kworker/1:2) 08:31:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x920, 0x6aa1}) 08:31:57 executing program 7: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000006c40)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x96, @time}) 08:31:57 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r2, r1, 0x0) r4 = eventfd(0x8) dup3(r4, r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 113.407719] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 08:31:57 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_open_dev$mouse(0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) dup2(r0, r1) 08:31:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1e, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) 08:31:57 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x404c534a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 113.457777] kernel write not supported for file [eventfd] (pid: 73 comm: kworker/1:2) 08:31:58 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_open_dev$mouse(0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) dup2(r0, r1) 08:31:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x920, 0x6aa1}) 08:31:58 executing program 7: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000006c40)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x96, @time}) 08:31:58 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r0, &(0x7f00000000c0)=""/194, 0xc2, 0x0) 08:31:58 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r2, r1, 0x0) r4 = eventfd(0x8) dup3(r4, r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 08:31:58 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1e, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) 08:31:58 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x404c534a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 08:31:58 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) [ 113.564545] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.576242] BUG: unable to handle page fault for address: ffffed10212c9746 [ 113.576815] #PF: supervisor read access in kernel mode [ 113.577237] #PF: error_code(0x0000) - not-present page [ 113.577664] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 [ 113.578119] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 113.578915] CPU: 0 UID: 0 PID: 3932 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 113.581719] Tainted: [W]=WARN [ 113.582539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 113.584764] RIP: 0010:perf_tp_event+0x175/0xe70 [ 113.585797] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 113.587982] RSP: 0018:ffff8880454f7800 EFLAGS: 00010212 [ 113.588413] RAX: 1ffff110212c9746 RBX: ffff88810964b840 RCX: ffffc90005015000 [ 113.588988] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff88810964ba30 [ 113.589565] RBP: ffff8880454f7a70 R08: ffff88806ce31340 R09: ffffe8ffffc15b38 [ 113.590137] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000 [ 113.590726] R13: 0000000000000024 R14: ffff88806ce31340 R15: dffffc0000000000 [ 113.591310] FS: 00007fc95bb17700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 113.591958] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.592432] CR2: ffffed10212c9746 CR3: 0000000044a9e000 CR4: 0000000000350ef0 [ 113.593010] Call Trace: [ 113.593224] [ 113.593417] ? __pfx_perf_tp_event+0x10/0x10 [ 113.593786] ? perf_tp_event+0x807/0xe70 [ 113.594122] ? lock_is_held_type+0x9e/0x120 [ 113.594486] ? __pfx_perf_tp_event+0x10/0x10 [ 113.594873] ? __pfx_ctx_sched_in+0x10/0x10 [ 113.595231] ? arch_stack_walk+0x9c/0xf0 [ 113.595568] ? find_held_lock+0x2b/0x80 [ 113.595907] ? perf_trace_run_bpf_submit+0xef/0x180 [ 113.596321] ? perf_trace_run_bpf_submit+0xef/0x180 [ 113.596734] ? perf_trace_run_bpf_submit+0xef/0x180 [ 113.597145] perf_trace_run_bpf_submit+0xef/0x180 [ 113.597553] perf_trace_lock_acquire+0x3c2/0x700 [ 113.597953] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 113.598376] ? futex_ref_get+0x48/0x300 [ 113.598721] ? find_held_lock+0x2b/0x80 [ 113.599056] lock_acquire+0xc5/0x2f0 [ 113.599370] ? futex_wake+0x228/0x540 [ 113.599697] _raw_spin_lock+0x2b/0x40 [ 113.600011] ? futex_wake+0x228/0x540 [ 113.600327] futex_wake+0x228/0x540 [ 113.600631] ? __pfx_futex_wake+0x10/0x10 [ 113.600980] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 113.601393] ? lock_release+0xc8/0x290 [ 113.601716] do_futex+0x26d/0x370 [ 113.602007] ? __pfx_do_futex+0x10/0x10 [ 113.602340] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 113.602786] ? find_held_lock+0x2b/0x80 [ 113.603120] __x64_sys_futex+0x1c9/0x4d0 [ 113.603455] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 113.603940] ? __pfx___x64_sys_futex+0x10/0x10 [ 113.604312] ? xfd_validate_state+0x55/0x180 [ 113.604683] do_syscall_64+0xbf/0x360 [ 113.605001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.605420] RIP: 0033:0x7fc95e5a1b19 [ 113.605719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 113.607184] RSP: 002b:00007fc95bb17218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 113.607793] RAX: ffffffffffffffda RBX: 00007fc95e6b4f68 RCX: 00007fc95e5a1b19 [ 113.608363] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc95e6b4f6c [ 113.608929] RBP: 00007fc95e6b4f60 R08: 000000000000000e R09: 0000000000000000 [ 113.609508] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fc95e6b4f6c [ 113.610075] R13: 00007ffe67c5f8cf R14: 00007fc95bb17300 R15: 0000000000022000 [ 113.610672] [ 113.610863] Modules linked in: [ 113.611128] CR2: ffffed10212c9746 [ 113.611408] ---[ end trace 0000000000000000 ]--- [ 113.611788] RIP: 0010:perf_tp_event+0x175/0xe70 [ 113.612171] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 113.613622] RSP: 0018:ffff8880454f7800 EFLAGS: 00010212 [ 113.614048] RAX: 1ffff110212c9746 RBX: ffff88810964b840 RCX: ffffc90005015000 [ 113.614623] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff88810964ba30 [ 113.615201] RBP: ffff8880454f7a70 R08: ffff88806ce31340 R09: ffffe8ffffc15b38 [ 113.615774] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000 [ 113.616342] R13: 0000000000000024 R14: ffff88806ce31340 R15: dffffc0000000000 [ 113.616913] FS: 00007fc95bb17700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 113.617563] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.618029] CR2: ffffed10212c9746 CR3: 0000000044a9e000 CR4: 0000000000350ef0 [ 113.618609] note: syz-executor.3[3932] exited with irqs disabled [ 113.619122] BUG: unable to handle page fault for address: ffffed10212c9746 [ 113.619668] #PF: supervisor read access in kernel mode [ 113.620076] #PF: error_code(0x0000) - not-present page [ 113.620487] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 [ 113.620933] Oops: Oops: 0000 [#2] SMP KASAN NOPTI [ 113.621321] CPU: 0 UID: 0 PID: 3932 Comm: syz-executor.3 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 113.622276] Tainted: [D]=DIE, [W]=WARN [ 113.622585] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 113.623259] RIP: 0010:perf_tp_event+0x175/0xe70 [ 113.623636] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 113.625083] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012 [ 113.625508] RAX: 1ffff110212c9746 RBX: ffff88810964b840 RCX: 0000000000000002 [ 113.626066] RDX: ffff88804445d280 RSI: ffffffff818995b7 RDI: ffff88810964ba30 [ 113.626648] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc15b38 [ 113.627213] R10: 0000000000000000 R11: 000000000000002c R12: dffffc0000000000 [ 113.627771] R13: 000000000000002c R14: ffff88806ce31490 R15: dffffc0000000000 [ 113.628336] FS: 00007fc95bb17700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 113.628974] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.629432] CR2: ffffed10212c9746 CR3: 0000000044a9e000 CR4: 0000000000350ef0 [ 113.630000] Call Trace: [ 113.630208] [ 113.630396] ? __pfx_perf_tp_event+0x10/0x10 [ 113.630781] ? trace_sched_set_need_resched_tp+0xd4/0x110 [ 113.631226] ? __resched_curr+0x2a2/0x330 [ 113.631562] ? __pfx___resched_curr+0x10/0x10 [ 113.631925] ? __pick_eevdf+0x208/0x570 [ 113.632250] ? perf_trace_lock_acquire+0xc9/0x700 [ 113.632642] ? perf_trace_run_bpf_submit+0xef/0x180 [ 113.633042] ? perf_trace_lock_acquire+0xc9/0x700 [ 113.633436] perf_trace_run_bpf_submit+0xef/0x180 [ 113.633828] perf_trace_lock_acquire+0x3c2/0x700 [ 113.634208] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 113.634589] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 113.635024] ? lock_acquire+0x15e/0x2f0 [ 113.635346] ? find_held_lock+0x2b/0x80 [ 113.635671] ? clockevents_program_event+0x14f/0x360 [ 113.636079] ? lock_release+0xc8/0x290 [ 113.636395] lock_acquire+0xc5/0x2f0 [ 113.636696] ? hrtimer_interrupt+0xd6/0x830 [ 113.637043] ? __pfx_lapic_next_deadline+0x10/0x10 [ 113.637440] _raw_spin_lock_irqsave+0x3a/0x60 [ 113.637812] ? hrtimer_interrupt+0xd6/0x830 [ 113.638159] hrtimer_interrupt+0xd6/0x830 [ 113.638498] ? __pfx_do_sync_core+0x10/0x10 [ 113.638864] ? trace_csd_function_exit+0x134/0x190 [ 113.639263] ? __flush_smp_call_function_queue+0x28c/0x740 [ 113.639712] __sysvec_apic_timer_interrupt+0xbb/0x330 [ 113.640127] sysvec_apic_timer_interrupt+0x6b/0x80 [ 113.640521] [ 113.640709] [ 113.640891] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 113.641308] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 113.641683] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de [ 113.643132] RSP: 0018:ffff8880454f7f28 EFLAGS: 00000246 [ 113.643558] RAX: 0000000000000001 RBX: ffff88804445d280 RCX: ffffffff817c2b86 [ 113.644127] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 113.644692] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 113.645254] R10: ffffffff8643ac57 R11: 0000000000000001 R12: ffff88804445d280 [ 113.645814] R13: 0000000000000009 R14: ffff8880454f77e0 R15: 0000000000000000 [ 113.646380] ? trace_irq_enable.constprop.0+0x26/0x100 [ 113.646820] ? make_task_dead+0x214/0x3b0 [ 113.647155] ? make_task_dead+0x214/0x3b0 [ 113.647487] ? do_syscall_64+0xbf/0x360 [ 113.647807] rewind_stack_and_make_dead+0x16/0x20 [ 113.648193] RIP: 0033:0x7fc95e5a1b19 [ 113.648492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 113.649917] RSP: 002b:00007fc95bb17218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 113.650516] RAX: ffffffffffffffda RBX: 00007fc95e6b4f68 RCX: 00007fc95e5a1b19 [ 113.651098] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc95e6b4f6c [ 113.651662] RBP: 00007fc95e6b4f60 R08: 000000000000000e R09: 0000000000000000 [ 113.652221] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fc95e6b4f6c [ 113.652783] R13: 00007ffe67c5f8cf R14: 00007fc95bb17300 R15: 0000000000022000 [ 113.653351] [ 113.653541] Modules linked in: [ 113.653805] CR2: ffffed10212c9746 [ 113.654078] ---[ end trace 0000000000000000 ]--- [ 113.654457] RIP: 0010:perf_tp_event+0x175/0xe70 [ 113.654849] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 113.656278] RSP: 0018:ffff8880454f7800 EFLAGS: 00010212 [ 113.656706] RAX: 1ffff110212c9746 RBX: ffff88810964b840 RCX: ffffc90005015000 [ 113.657263] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff88810964ba30 [ 113.657821] RBP: ffff8880454f7a70 R08: ffff88806ce31340 R09: ffffe8ffffc15b38 [ 113.658382] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000 [ 113.658965] R13: 0000000000000024 R14: ffff88806ce31340 R15: dffffc0000000000 [ 113.659528] FS: 00007fc95bb17700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 113.660170] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.660630] CR2: ffffed10212c9746 CR3: 0000000044a9e000 CR4: 0000000000350ef0 [ 113.661195] Kernel panic - not syncing: Fatal exception in interrupt [ 113.661781] Kernel Offset: disabled [ 113.662081] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 08:31:58 Registers: info registers vcpu 0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff8880454f7048 R8 =0000000000000000 R9 =ffffed1001650046 R10=0000000000000031 R11=000000000000002c R12=0000000000000031 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc95bb17700 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=ffffed10212c9746 CR3=0000000044a9e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fc95e6887c000007fc95e6887c8 XMM02=00007fc95e6887e000007fc95e6887c0 XMM03=00007fc95e6887c800007fc95e6887c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000002dfed RBX=ffff88806ce3de00 RCX=ffffc900009f2000 RDX=0000000000040000 RSI=ffffffff816880d6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88801b7b7968 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=1ffff1100d9e6bb1 R12=ffffed100d9c7bc1 R13=ffff88806ce3de08 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff816880d8 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f931baf0700 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2cf22000 CR3=000000001ebb8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000