Warning: Permanently added '[localhost]:3739' (ECDSA) to the list of known hosts. 2025/08/29 12:28:56 fuzzer started 2025/08/29 12:28:56 dialing manager at localhost:43077 syzkaller login: [ 43.708670] cgroup: Unknown subsys name 'net' [ 43.784079] cgroup: Unknown subsys name 'cpuset' [ 43.803979] cgroup: Unknown subsys name 'rlimit' 2025/08/29 12:29:07 syscalls: 2214 2025/08/29 12:29:07 code coverage: enabled 2025/08/29 12:29:07 comparison tracing: enabled 2025/08/29 12:29:07 extra coverage: enabled 2025/08/29 12:29:07 setuid sandbox: enabled 2025/08/29 12:29:07 namespace sandbox: enabled 2025/08/29 12:29:07 Android sandbox: enabled 2025/08/29 12:29:07 fault injection: enabled 2025/08/29 12:29:07 leak checking: enabled 2025/08/29 12:29:07 net packet injection: enabled 2025/08/29 12:29:07 net device setup: enabled 2025/08/29 12:29:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 12:29:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 12:29:07 USB emulation: enabled 2025/08/29 12:29:07 hci packet injection: enabled 2025/08/29 12:29:07 wifi device emulation: enabled 2025/08/29 12:29:07 802.15.4 emulation: enabled 2025/08/29 12:29:07 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 12:29:07 fetching corpus: 50, signal 19750/23348 (executing program) 2025/08/29 12:29:07 fetching corpus: 100, signal 31606/36603 (executing program) 2025/08/29 12:29:07 fetching corpus: 150, signal 40236/46571 (executing program) 2025/08/29 12:29:07 fetching corpus: 200, signal 46430/54050 (executing program) 2025/08/29 12:29:07 fetching corpus: 250, signal 51990/60814 (executing program) 2025/08/29 12:29:07 fetching corpus: 300, signal 56481/66493 (executing program) 2025/08/29 12:29:08 fetching corpus: 350, signal 60969/72011 (executing program) 2025/08/29 12:29:08 fetching corpus: 400, signal 63587/75783 (executing program) 2025/08/29 12:29:08 fetching corpus: 450, signal 67328/80498 (executing program) 2025/08/29 12:29:08 fetching corpus: 500, signal 70326/84465 (executing program) 2025/08/29 12:29:08 fetching corpus: 550, signal 73819/88878 (executing program) 2025/08/29 12:29:08 fetching corpus: 600, signal 76213/92218 (executing program) 2025/08/29 12:29:08 fetching corpus: 650, signal 78413/95366 (executing program) 2025/08/29 12:29:08 fetching corpus: 700, signal 79983/97893 (executing program) 2025/08/29 12:29:08 fetching corpus: 750, signal 83671/102196 (executing program) 2025/08/29 12:29:08 fetching corpus: 800, signal 85611/104960 (executing program) 2025/08/29 12:29:08 fetching corpus: 850, signal 88558/108561 (executing program) 2025/08/29 12:29:08 fetching corpus: 900, signal 89904/110791 (executing program) 2025/08/29 12:29:09 fetching corpus: 950, signal 91691/113296 (executing program) 2025/08/29 12:29:09 fetching corpus: 1000, signal 93690/115968 (executing program) 2025/08/29 12:29:09 fetching corpus: 1050, signal 94992/118036 (executing program) 2025/08/29 12:29:09 fetching corpus: 1100, signal 97154/120721 (executing program) 2025/08/29 12:29:09 fetching corpus: 1150, signal 98791/122994 (executing program) 2025/08/29 12:29:09 fetching corpus: 1200, signal 99842/124769 (executing program) 2025/08/29 12:29:09 fetching corpus: 1250, signal 103747/128668 (executing program) 2025/08/29 12:29:09 fetching corpus: 1300, signal 104728/130321 (executing program) 2025/08/29 12:29:09 fetching corpus: 1350, signal 106035/132236 (executing program) 2025/08/29 12:29:09 fetching corpus: 1400, signal 106960/133815 (executing program) 2025/08/29 12:29:09 fetching corpus: 1450, signal 108092/135575 (executing program) 2025/08/29 12:29:10 fetching corpus: 1500, signal 110159/137928 (executing program) 2025/08/29 12:29:10 fetching corpus: 1550, signal 112524/140422 (executing program) 2025/08/29 12:29:10 fetching corpus: 1600, signal 113885/142168 (executing program) 2025/08/29 12:29:10 fetching corpus: 1650, signal 114634/143496 (executing program) 2025/08/29 12:29:10 fetching corpus: 1700, signal 115742/145050 (executing program) 2025/08/29 12:29:10 fetching corpus: 1750, signal 116841/146584 (executing program) 2025/08/29 12:29:10 fetching corpus: 1800, signal 118557/148442 (executing program) 2025/08/29 12:29:10 fetching corpus: 1850, signal 119778/149986 (executing program) 2025/08/29 12:29:10 fetching corpus: 1900, signal 121139/151595 (executing program) 2025/08/29 12:29:10 fetching corpus: 1950, signal 122413/153074 (executing program) 2025/08/29 12:29:11 fetching corpus: 2000, signal 123634/154559 (executing program) 2025/08/29 12:29:11 fetching corpus: 2050, signal 124749/155975 (executing program) 2025/08/29 12:29:11 fetching corpus: 2100, signal 126022/157419 (executing program) 2025/08/29 12:29:11 fetching corpus: 2150, signal 126704/158493 (executing program) 2025/08/29 12:29:11 fetching corpus: 2200, signal 128747/160325 (executing program) 2025/08/29 12:29:11 fetching corpus: 2250, signal 129500/161440 (executing program) 2025/08/29 12:29:11 fetching corpus: 2300, signal 130249/162501 (executing program) 2025/08/29 12:29:11 fetching corpus: 2350, signal 130942/163549 (executing program) 2025/08/29 12:29:11 fetching corpus: 2400, signal 131642/164579 (executing program) 2025/08/29 12:29:11 fetching corpus: 2450, signal 132364/165592 (executing program) 2025/08/29 12:29:11 fetching corpus: 2500, signal 133000/166556 (executing program) 2025/08/29 12:29:12 fetching corpus: 2550, signal 133830/167530 (executing program) 2025/08/29 12:29:12 fetching corpus: 2600, signal 134609/168540 (executing program) 2025/08/29 12:29:12 fetching corpus: 2650, signal 135581/169634 (executing program) 2025/08/29 12:29:12 fetching corpus: 2700, signal 136093/170504 (executing program) 2025/08/29 12:29:12 fetching corpus: 2750, signal 137033/171510 (executing program) 2025/08/29 12:29:12 fetching corpus: 2800, signal 137588/172391 (executing program) 2025/08/29 12:29:12 fetching corpus: 2850, signal 138547/173413 (executing program) 2025/08/29 12:29:12 fetching corpus: 2900, signal 139117/174245 (executing program) 2025/08/29 12:29:12 fetching corpus: 2950, signal 139749/175052 (executing program) 2025/08/29 12:29:12 fetching corpus: 3000, signal 140944/176102 (executing program) 2025/08/29 12:29:12 fetching corpus: 3050, signal 141626/176940 (executing program) 2025/08/29 12:29:13 fetching corpus: 3100, signal 142321/177778 (executing program) 2025/08/29 12:29:13 fetching corpus: 3150, signal 142806/178485 (executing program) 2025/08/29 12:29:13 fetching corpus: 3200, signal 143521/179297 (executing program) 2025/08/29 12:29:13 fetching corpus: 3250, signal 144040/179985 (executing program) 2025/08/29 12:29:13 fetching corpus: 3300, signal 144850/180772 (executing program) 2025/08/29 12:29:13 fetching corpus: 3350, signal 145460/181531 (executing program) 2025/08/29 12:29:13 fetching corpus: 3400, signal 145868/182164 (executing program) 2025/08/29 12:29:13 fetching corpus: 3450, signal 146494/182961 (executing program) 2025/08/29 12:29:13 fetching corpus: 3500, signal 147029/183646 (executing program) 2025/08/29 12:29:13 fetching corpus: 3550, signal 147338/184235 (executing program) 2025/08/29 12:29:13 fetching corpus: 3600, signal 148114/184924 (executing program) 2025/08/29 12:29:14 fetching corpus: 3650, signal 148645/185567 (executing program) 2025/08/29 12:29:14 fetching corpus: 3700, signal 149204/186241 (executing program) 2025/08/29 12:29:14 fetching corpus: 3750, signal 149756/186879 (executing program) 2025/08/29 12:29:14 fetching corpus: 3800, signal 150388/187504 (executing program) 2025/08/29 12:29:14 fetching corpus: 3850, signal 151008/188160 (executing program) 2025/08/29 12:29:14 fetching corpus: 3900, signal 151458/188769 (executing program) 2025/08/29 12:29:14 fetching corpus: 3950, signal 152007/189384 (executing program) 2025/08/29 12:29:14 fetching corpus: 4000, signal 152582/189918 (executing program) 2025/08/29 12:29:14 fetching corpus: 4050, signal 153029/190449 (executing program) 2025/08/29 12:29:14 fetching corpus: 4100, signal 153506/190984 (executing program) 2025/08/29 12:29:14 fetching corpus: 4150, signal 153908/191470 (executing program) 2025/08/29 12:29:15 fetching corpus: 4200, signal 154349/191944 (executing program) 2025/08/29 12:29:15 fetching corpus: 4250, signal 154832/192426 (executing program) 2025/08/29 12:29:15 fetching corpus: 4300, signal 155248/192950 (executing program) 2025/08/29 12:29:15 fetching corpus: 4350, signal 156023/193456 (executing program) 2025/08/29 12:29:15 fetching corpus: 4400, signal 156538/193907 (executing program) 2025/08/29 12:29:15 fetching corpus: 4450, signal 157051/194419 (executing program) 2025/08/29 12:29:15 fetching corpus: 4500, signal 157481/194840 (executing program) 2025/08/29 12:29:15 fetching corpus: 4550, signal 158049/195326 (executing program) 2025/08/29 12:29:15 fetching corpus: 4600, signal 158412/195746 (executing program) 2025/08/29 12:29:15 fetching corpus: 4650, signal 159002/196193 (executing program) 2025/08/29 12:29:16 fetching corpus: 4700, signal 159434/196611 (executing program) 2025/08/29 12:29:16 fetching corpus: 4750, signal 160224/197030 (executing program) 2025/08/29 12:29:16 fetching corpus: 4800, signal 160754/197043 (executing program) 2025/08/29 12:29:16 fetching corpus: 4850, signal 161322/197045 (executing program) 2025/08/29 12:29:16 fetching corpus: 4900, signal 161795/197058 (executing program) 2025/08/29 12:29:16 fetching corpus: 4950, signal 162362/197059 (executing program) 2025/08/29 12:29:16 fetching corpus: 5000, signal 162972/197069 (executing program) 2025/08/29 12:29:16 fetching corpus: 5050, signal 163428/197072 (executing program) 2025/08/29 12:29:16 fetching corpus: 5100, signal 163638/197079 (executing program) 2025/08/29 12:29:16 fetching corpus: 5150, signal 164221/197106 (executing program) 2025/08/29 12:29:16 fetching corpus: 5200, signal 164670/197114 (executing program) 2025/08/29 12:29:17 fetching corpus: 5250, signal 165409/197131 (executing program) 2025/08/29 12:29:17 fetching corpus: 5300, signal 165830/197140 (executing program) 2025/08/29 12:29:17 fetching corpus: 5350, signal 166608/197140 (executing program) 2025/08/29 12:29:17 fetching corpus: 5400, signal 167152/197229 (executing program) 2025/08/29 12:29:17 fetching corpus: 5450, signal 167766/197237 (executing program) 2025/08/29 12:29:17 fetching corpus: 5500, signal 168219/197247 (executing program) 2025/08/29 12:29:17 fetching corpus: 5550, signal 168695/197315 (executing program) 2025/08/29 12:29:17 fetching corpus: 5600, signal 168998/197317 (executing program) 2025/08/29 12:29:17 fetching corpus: 5650, signal 169236/197319 (executing program) 2025/08/29 12:29:17 fetching corpus: 5700, signal 169710/197409 (executing program) 2025/08/29 12:29:17 fetching corpus: 5750, signal 170016/197410 (executing program) 2025/08/29 12:29:18 fetching corpus: 5800, signal 170489/197530 (executing program) 2025/08/29 12:29:18 fetching corpus: 5850, signal 170825/197543 (executing program) 2025/08/29 12:29:18 fetching corpus: 5900, signal 171274/197551 (executing program) 2025/08/29 12:29:18 fetching corpus: 5950, signal 171900/197562 (executing program) 2025/08/29 12:29:18 fetching corpus: 6000, signal 173070/197576 (executing program) 2025/08/29 12:29:18 fetching corpus: 6050, signal 173375/197606 (executing program) 2025/08/29 12:29:18 fetching corpus: 6100, signal 173658/197608 (executing program) 2025/08/29 12:29:18 fetching corpus: 6150, signal 174014/197612 (executing program) 2025/08/29 12:29:18 fetching corpus: 6200, signal 174385/197623 (executing program) 2025/08/29 12:29:18 fetching corpus: 6250, signal 174762/197638 (executing program) 2025/08/29 12:29:18 fetching corpus: 6300, signal 175040/197666 (executing program) 2025/08/29 12:29:19 fetching corpus: 6350, signal 175431/197678 (executing program) 2025/08/29 12:29:19 fetching corpus: 6400, signal 175737/197679 (executing program) 2025/08/29 12:29:19 fetching corpus: 6450, signal 176167/197684 (executing program) 2025/08/29 12:29:19 fetching corpus: 6500, signal 176471/197707 (executing program) 2025/08/29 12:29:19 fetching corpus: 6550, signal 176955/197711 (executing program) 2025/08/29 12:29:19 fetching corpus: 6600, signal 177357/197726 (executing program) 2025/08/29 12:29:19 fetching corpus: 6650, signal 177643/197735 (executing program) 2025/08/29 12:29:19 fetching corpus: 6700, signal 177959/197736 (executing program) 2025/08/29 12:29:19 fetching corpus: 6750, signal 178404/197754 (executing program) 2025/08/29 12:29:19 fetching corpus: 6800, signal 178836/197763 (executing program) 2025/08/29 12:29:19 fetching corpus: 6850, signal 179233/197770 (executing program) 2025/08/29 12:29:19 fetching corpus: 6900, signal 179575/197774 (executing program) 2025/08/29 12:29:20 fetching corpus: 6950, signal 179942/197775 (executing program) 2025/08/29 12:29:20 fetching corpus: 7000, signal 180258/197775 (executing program) 2025/08/29 12:29:20 fetching corpus: 7050, signal 180537/197775 (executing program) 2025/08/29 12:29:20 fetching corpus: 7100, signal 180839/197782 (executing program) 2025/08/29 12:29:20 fetching corpus: 7150, signal 181194/197805 (executing program) 2025/08/29 12:29:20 fetching corpus: 7200, signal 181499/197811 (executing program) 2025/08/29 12:29:20 fetching corpus: 7250, signal 181743/197827 (executing program) 2025/08/29 12:29:20 fetching corpus: 7300, signal 182324/197829 (executing program) 2025/08/29 12:29:20 fetching corpus: 7350, signal 182542/197832 (executing program) 2025/08/29 12:29:20 fetching corpus: 7400, signal 182797/197837 (executing program) 2025/08/29 12:29:20 fetching corpus: 7450, signal 183049/197873 (executing program) 2025/08/29 12:29:20 fetching corpus: 7500, signal 183307/197874 (executing program) 2025/08/29 12:29:21 fetching corpus: 7550, signal 183579/197875 (executing program) 2025/08/29 12:29:21 fetching corpus: 7600, signal 183835/197884 (executing program) 2025/08/29 12:29:21 fetching corpus: 7650, signal 184284/197897 (executing program) 2025/08/29 12:29:21 fetching corpus: 7700, signal 184546/197898 (executing program) 2025/08/29 12:29:21 fetching corpus: 7750, signal 184724/197905 (executing program) 2025/08/29 12:29:21 fetching corpus: 7800, signal 185031/197907 (executing program) 2025/08/29 12:29:21 fetching corpus: 7850, signal 185238/197916 (executing program) 2025/08/29 12:29:21 fetching corpus: 7900, signal 185627/197925 (executing program) 2025/08/29 12:29:21 fetching corpus: 7950, signal 185856/197941 (executing program) 2025/08/29 12:29:21 fetching corpus: 8000, signal 186152/197942 (executing program) 2025/08/29 12:29:22 fetching corpus: 8050, signal 186451/197945 (executing program) 2025/08/29 12:29:22 fetching corpus: 8100, signal 186672/197950 (executing program) 2025/08/29 12:29:22 fetching corpus: 8150, signal 186888/197956 (executing program) 2025/08/29 12:29:22 fetching corpus: 8200, signal 187103/197965 (executing program) 2025/08/29 12:29:22 fetching corpus: 8250, signal 187357/197967 (executing program) 2025/08/29 12:29:22 fetching corpus: 8300, signal 187736/197967 (executing program) 2025/08/29 12:29:22 fetching corpus: 8350, signal 188022/197968 (executing program) 2025/08/29 12:29:22 fetching corpus: 8400, signal 188297/197997 (executing program) 2025/08/29 12:29:22 fetching corpus: 8450, signal 188492/198002 (executing program) 2025/08/29 12:29:22 fetching corpus: 8500, signal 188831/198024 (executing program) 2025/08/29 12:29:22 fetching corpus: 8550, signal 189096/198035 (executing program) 2025/08/29 12:29:23 fetching corpus: 8600, signal 189341/198037 (executing program) 2025/08/29 12:29:23 fetching corpus: 8650, signal 189650/198062 (executing program) 2025/08/29 12:29:23 fetching corpus: 8700, signal 189905/198069 (executing program) 2025/08/29 12:29:23 fetching corpus: 8750, signal 190155/198072 (executing program) 2025/08/29 12:29:23 fetching corpus: 8800, signal 190376/198080 (executing program) 2025/08/29 12:29:23 fetching corpus: 8850, signal 190672/198087 (executing program) 2025/08/29 12:29:23 fetching corpus: 8900, signal 190898/198091 (executing program) 2025/08/29 12:29:23 fetching corpus: 8950, signal 191148/198091 (executing program) 2025/08/29 12:29:23 fetching corpus: 9000, signal 191412/198106 (executing program) 2025/08/29 12:29:23 fetching corpus: 9050, signal 191619/198113 (executing program) 2025/08/29 12:29:23 fetching corpus: 9100, signal 191867/198124 (executing program) 2025/08/29 12:29:23 fetching corpus: 9150, signal 192060/198136 (executing program) 2025/08/29 12:29:23 fetching corpus: 9200, signal 192249/198150 (executing program) 2025/08/29 12:29:24 fetching corpus: 9250, signal 192474/198153 (executing program) 2025/08/29 12:29:24 fetching corpus: 9300, signal 192660/198153 (executing program) 2025/08/29 12:29:24 fetching corpus: 9350, signal 192912/198165 (executing program) 2025/08/29 12:29:24 fetching corpus: 9400, signal 193131/198211 (executing program) 2025/08/29 12:29:24 fetching corpus: 9450, signal 193433/198216 (executing program) 2025/08/29 12:29:24 fetching corpus: 9500, signal 193664/198223 (executing program) 2025/08/29 12:29:24 fetching corpus: 9550, signal 193921/198223 (executing program) 2025/08/29 12:29:24 fetching corpus: 9600, signal 194166/198230 (executing program) 2025/08/29 12:29:24 fetching corpus: 9650, signal 194376/198239 (executing program) 2025/08/29 12:29:24 fetching corpus: 9664, signal 194428/198239 (executing program) 2025/08/29 12:29:24 fetching corpus: 9664, signal 194428/198239 (executing program) 2025/08/29 12:29:26 starting 8 fuzzer processes 12:29:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rpc\x00') getdents64(r0, &(0x7f0000000f00)=""/4096, 0x18) 12:29:26 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_ACTIVATE(r0, 0x5608, 0x8) 12:29:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x22, &(0x7f0000002b00)={0x0, {{0x2, 0x0, @multicast1}}}, 0x90) 12:29:26 executing program 2: fsopen(0x0, 0x0) [ 73.424369] audit: type=1400 audit(1756470566.577:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:29:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x401}, 0x14}}, 0x0) 12:29:26 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_aout(r0, 0x0, 0x179) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf2, 0x0, 0x0, 0x4, 0x0, 0x6b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r2, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) readlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/176, 0xb0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000040)) 12:29:26 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f0000000100), 0x0, 0x4) 12:29:26 executing program 5: setfsuid(0xee00) setfsuid(0xee01) [ 74.584573] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.587043] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.592464] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.598596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.603354] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.654898] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.662983] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.664344] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.666753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.668932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.670523] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.677837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.680948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.682439] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.688560] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.721237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.735524] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.737886] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.751970] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.754905] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.791452] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.794029] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.794099] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 74.799867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.801094] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 74.805053] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 74.807273] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.810003] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.815002] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 74.845865] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 74.845979] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 74.848922] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 74.850837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.858901] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 74.863140] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 74.865790] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 74.867533] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 74.869055] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 74.872312] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 74.878206] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 76.682225] Bluetooth: hci0: command tx timeout [ 76.745700] Bluetooth: hci2: command tx timeout [ 76.745762] Bluetooth: hci1: command tx timeout [ 76.809687] Bluetooth: hci3: command tx timeout [ 76.873775] Bluetooth: hci4: command tx timeout [ 76.937816] Bluetooth: hci5: command tx timeout [ 77.000746] Bluetooth: hci7: command tx timeout [ 77.000802] Bluetooth: hci6: command tx timeout [ 78.730124] Bluetooth: hci0: command tx timeout [ 78.793326] Bluetooth: hci1: command tx timeout [ 78.793714] Bluetooth: hci2: command tx timeout [ 78.857657] Bluetooth: hci3: command tx timeout [ 78.920789] Bluetooth: hci4: command tx timeout [ 78.984856] Bluetooth: hci5: command tx timeout [ 79.048765] Bluetooth: hci7: command tx timeout [ 79.049198] Bluetooth: hci6: command tx timeout [ 80.776698] Bluetooth: hci0: command tx timeout [ 80.840746] Bluetooth: hci2: command tx timeout [ 80.841818] Bluetooth: hci1: command tx timeout [ 80.904720] Bluetooth: hci3: command tx timeout [ 80.968720] Bluetooth: hci4: command tx timeout [ 81.032777] Bluetooth: hci5: command tx timeout [ 81.096681] Bluetooth: hci6: command tx timeout [ 81.096807] Bluetooth: hci7: command tx timeout [ 82.825696] Bluetooth: hci0: command tx timeout [ 82.890696] Bluetooth: hci1: command tx timeout [ 82.891368] Bluetooth: hci2: command tx timeout [ 82.954672] Bluetooth: hci3: command tx timeout [ 83.017864] Bluetooth: hci4: command tx timeout [ 83.080763] Bluetooth: hci5: command tx timeout [ 83.144695] Bluetooth: hci7: command tx timeout [ 83.145800] Bluetooth: hci6: command tx timeout [ 113.107302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.108177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.289270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.290442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.846732] audit: type=1400 audit(1756470606.994:8): avc: denied { open } for pid=3742 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 113.852224] audit: type=1400 audit(1756470606.994:9): avc: denied { kernel } for pid=3742 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:30:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000180)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) 12:30:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000180)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) 12:30:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000180)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) [ 114.522712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.523947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:30:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000180)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) 12:30:07 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_script(r0, 0x0, 0x0) [ 114.825751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.826843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.920085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.920909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:30:08 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_script(r0, 0x0, 0x0) 12:30:08 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_script(r0, 0x0, 0x0) [ 115.137573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.138466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:30:08 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_script(r0, 0x0, 0x0) [ 115.623930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.624565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.710131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.710793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.818921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.819544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.923071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.923780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.999689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.000317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.122118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.122909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.202422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.203079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.330676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.331331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.394639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.395288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.405397] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 116.407120] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 116.408309] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 116.409388] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 116.410653] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 116.416777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.417827] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.419160] Buffer I/O error on dev sr0, logical block 0, async page read [ 116.424847] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.425371] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.426210] Buffer I/O error on dev sr0, logical block 1, async page read [ 116.427349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.427822] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.428478] Buffer I/O error on dev sr0, logical block 2, async page read [ 116.429225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.429789] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.430449] Buffer I/O error on dev sr0, logical block 3, async page read [ 116.431165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.431606] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.432279] Buffer I/O error on dev sr0, logical block 4, async page read [ 116.434095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.434565] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.435260] Buffer I/O error on dev sr0, logical block 5, async page read [ 116.441130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.441592] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.442418] Buffer I/O error on dev sr0, logical block 6, async page read [ 116.444979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.445448] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.446150] Buffer I/O error on dev sr0, logical block 7, async page read [ 116.447543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.448113] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.448835] Buffer I/O error on dev sr0, logical block 0, async page read [ 116.449816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.450277] Buffer I/O error on dev sr0, logical block 1, async page read [ 116.451229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.452232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.452873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.453489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.454179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.454827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.510454] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.511149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.511788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.512339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.512981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.513531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.514200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.514814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.515476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.516247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.517027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.517582] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.518193] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.518793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.519386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.520008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.520811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.521413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.522104] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.522800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.523571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.524190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.525017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.525574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 116.531992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.533522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:30:09 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADMODE1(r0, 0x31f, &(0x7f0000002380)) 12:30:09 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_script(r0, 0x0, 0x0) 12:30:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rpc\x00') getdents64(r0, &(0x7f0000000f00)=""/4096, 0x18) 12:30:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "0073d6b6d9aaf1058c4696bac200fc6ec421e61ec63bd1ddcc55d73d1742394b59fe3e6fcb34a939c482224b161d6877555b07bb3144bdfbf378e2304420b706b31f34abb7c74cd0f55f3880135ab6ec"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "9f1c08c88a942ac286134a23c38c41e7902f2e50faad6aa94c56df36a2f5bf18d3137f2380fcf5eed419590fa7bf07b981670936b20579abc3324f448013a5e9f6a421874216dbd88275bfc9d7e1b846"}, 0xd8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) 12:30:09 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:30:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x22, &(0x7f0000002b00)={0x0, {{0x2, 0x0, @multicast1}}}, 0x90) 12:30:09 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f0000000100), 0x0, 0x4) 12:30:09 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x103) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) 12:30:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x22, &(0x7f0000002b00)={0x0, {{0x2, 0x0, @multicast1}}}, 0x90) 12:30:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7eba, &(0x7f00000001c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000240), 0x0) 12:30:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "0073d6b6d9aaf1058c4696bac200fc6ec421e61ec63bd1ddcc55d73d1742394b59fe3e6fcb34a939c482224b161d6877555b07bb3144bdfbf378e2304420b706b31f34abb7c74cd0f55f3880135ab6ec"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "9f1c08c88a942ac286134a23c38c41e7902f2e50faad6aa94c56df36a2f5bf18d3137f2380fcf5eed419590fa7bf07b981670936b20579abc3324f448013a5e9f6a421874216dbd88275bfc9d7e1b846"}, 0xd8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) 12:30:10 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_script(r0, 0x0, 0x0) [ 116.948760] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 116.950261] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 116.951341] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 116.952553] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 12:30:10 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x103) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) [ 116.984495] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 116.986071] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 116.987229] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 116.988275] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 116.990425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 12:30:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rpc\x00') getdents64(r0, &(0x7f0000000f00)=""/4096, 0x18) [ 117.004851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.015274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.021110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.026820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.039366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.040490] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.049029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 12:30:10 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADMODE1(r0, 0x31f, &(0x7f0000002380)) 12:30:10 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x103) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) 12:30:10 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_script(r0, 0x0, 0x0) 12:30:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "0073d6b6d9aaf1058c4696bac200fc6ec421e61ec63bd1ddcc55d73d1742394b59fe3e6fcb34a939c482224b161d6877555b07bb3144bdfbf378e2304420b706b31f34abb7c74cd0f55f3880135ab6ec"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "9f1c08c88a942ac286134a23c38c41e7902f2e50faad6aa94c56df36a2f5bf18d3137f2380fcf5eed419590fa7bf07b981670936b20579abc3324f448013a5e9f6a421874216dbd88275bfc9d7e1b846"}, 0xd8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) 12:30:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x22, &(0x7f0000002b00)={0x0, {{0x2, 0x0, @multicast1}}}, 0x90) 12:30:10 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f0000000100), 0x0, 0x4) 12:30:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7eba, &(0x7f00000001c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000240), 0x0) 12:30:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rpc\x00') getdents64(r0, &(0x7f0000000f00)=""/4096, 0x18) [ 117.201234] BUG: unable to handle page fault for address: ffffed10212c98d6 [ 117.201825] #PF: supervisor read access in kernel mode [ 117.202238] #PF: error_code(0x0000) - not-present page [ 117.202649] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 [ 117.203096] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 117.203485] CPU: 0 UID: 0 PID: 3958 Comm: syz-executor.4 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 117.205889] Tainted: [W]=WARN [ 117.206575] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 117.208338] RIP: 0010:perf_tp_event+0x175/0xe70 [ 117.209817] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 117.213471] RSP: 0018:ffff888044997800 EFLAGS: 00010212 [ 117.213899] RAX: 1ffff110212c98d6 RBX: ffff88810964c4c0 RCX: ffffc9000842f000 [ 117.214465] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff88810964c6b0 [ 117.215023] RBP: ffff888044997a70 R08: ffff88806ce31340 R09: ffffe8ffffc15f08 [ 117.215576] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 117.216135] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 117.216694] FS: 00007f8f9d124700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 117.217334] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.217791] CR2: ffffed10212c98d6 CR3: 000000001e7e2000 CR4: 0000000000350ef0 [ 117.218349] Call Trace: [ 117.218561] [ 117.218742] ? perf_swevent_event+0x63/0x3f0 [ 117.219108] ? __pfx_perf_tp_event+0x10/0x10 [ 117.219468] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 117.219864] ? perf_swevent_event+0x63/0x3f0 [ 117.220224] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 117.220621] ? perf_swevent_event+0x63/0x3f0 [ 117.220987] ? perf_tp_event+0x807/0xe70 [ 117.221324] ? __pfx_perf_tp_event+0x10/0x10 [ 117.221682] ? __perf_install_in_context+0x503/0xb90 [ 117.222085] ? do_raw_spin_unlock+0x53/0x220 [ 117.222445] ? perf_trace_run_bpf_submit+0xef/0x180 [ 117.222843] perf_trace_run_bpf_submit+0xef/0x180 [ 117.223238] perf_trace_lock+0x337/0x5d0 [ 117.223567] ? __pfx_perf_trace_lock+0x10/0x10 [ 117.223935] ? lock_acquire+0x15e/0x2f0 [ 117.224258] ? futex_ref_get+0x48/0x300 [ 117.224578] ? futex_ref_get+0x114/0x300 [ 117.224912] ? futex_hash+0x15c/0x390 [ 117.225218] lock_release+0x1ab/0x290 [ 117.225528] ? futex_hash+0x15c/0x390 [ 117.225833] futex_ref_get+0x119/0x300 [ 117.226152] ? futex_hash+0x15c/0x390 [ 117.226454] futex_hash+0x70/0x390 [ 117.226745] futex_wake+0x143/0x540 [ 117.227041] ? __pfx_perf_trace_lock+0x10/0x10 [ 117.227412] ? __pfx_futex_wake+0x10/0x10 [ 117.227750] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 117.228156] ? lock_release+0xc8/0x290 [ 117.228471] do_futex+0x26d/0x370 [ 117.228756] ? __pfx_do_futex+0x10/0x10 [ 117.229083] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 117.229504] ? find_held_lock+0x2b/0x80 [ 117.229831] __x64_sys_futex+0x1c9/0x4d0 [ 117.230159] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 117.230628] ? __pfx___x64_sys_futex+0x10/0x10 [ 117.230999] do_syscall_64+0xbf/0x360 [ 117.231310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.231718] RIP: 0033:0x7f8f9fbaeb19 [ 117.232016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 117.233448] RSP: 002b:00007f8f9d124218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 117.234040] RAX: ffffffffffffffda RBX: 00007f8f9fcc1f68 RCX: 00007f8f9fbaeb19 [ 117.234599] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8f9fcc1f6c [ 117.235155] RBP: 00007f8f9fcc1f60 R08: 000000000000000e R09: 0000000000000000 [ 117.235710] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f8f9fcc1f6c [ 117.236266] R13: 00007fff54a6098f R14: 00007f8f9d124300 R15: 0000000000022000 [ 117.236837] [ 117.237028] Modules linked in: [ 117.237288] CR2: ffffed10212c98d6 [ 117.237565] ---[ end trace 0000000000000000 ]--- [ 117.237568] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 117.237933] RIP: 0010:perf_tp_event+0x175/0xe70 [ 117.239614] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 117.239974] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 117.241118] CPU: 1 UID: 0 PID: 3960 Comm: syz-executor.7 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 117.242510] RSP: 0018:ffff888044997800 EFLAGS: 00010212 [ 117.244290] Tainted: [D]=DIE, [W]=WARN [ 117.244699] RAX: 1ffff110212c98d6 RBX: ffff88810964c4c0 RCX: ffffc9000842f000 [ 117.245291] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 117.245843] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff88810964c6b0 [ 117.247067] RIP: 0010:perf_tp_event+0x175/0xe70 [ 117.247615] RBP: ffff888044997a70 R08: ffff88806ce31340 R09: ffffe8ffffc15f08 [ 117.248305] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 117.248863] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 117.251569] RSP: 0018:ffff888045d5f800 EFLAGS: 00010212 [ 117.252117] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 117.252122] [ 117.252133] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 117.252537] FS: 00007f8f9d124700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 117.253618] RDX: ffff888043f63700 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 117.253755] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.254813] RBP: ffff888045d5fa70 R08: ffff88806cf31340 R09: ffffe8ffffd15f08 [ 117.255441] CR2: ffffed10212c98d6 CR3: 000000001e7e2000 CR4: 0000000000350ef0 [ 117.256502] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 117.256959] note: syz-executor.4[3958] exited with irqs disabled [ 117.258019] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 117.261586] FS: 0000555592044400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 117.262801] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.263688] CR2: 0000555592045c18 CR3: 000000000d156000 CR4: 0000000000350ef0 [ 117.264756] Call Trace: [ 117.265161] [ 117.265526] ? arch_scale_cpu_capacity+0x17/0xa0 [ 117.266282] ? __pfx_perf_tp_event+0x10/0x10 [ 117.266970] ? __asan_memset+0x24/0x50 [ 117.267599] ? __pfx_perf_trace_lock+0x10/0x10 [ 117.268308] ? __pfx___mutex_lock+0x10/0x10 [ 117.268990] ? perf_trace_lock+0xb5/0x5d0 [ 117.269628] ? trace_sched_set_need_resched_tp+0xd4/0x110 [ 117.270473] ? __resched_curr+0x2a2/0x330 [ 117.271119] ? __pfx___resched_curr+0x10/0x10 [ 117.271819] ? perf_trace_run_bpf_submit+0xef/0x180 [ 117.272589] perf_trace_run_bpf_submit+0xef/0x180 [ 117.273352] perf_trace_lock+0x337/0x5d0 [ 117.273975] ? __pfx_perf_trace_lock+0x10/0x10 [ 117.274682] ? update_cfs_group+0x11d/0x260 [ 117.275351] ? __pfx_perf_trace_lock+0x10/0x10 [ 117.276050] ? perf_trace_lock+0xb5/0x5d0 [ 117.276696] ? get_futex_key+0x592/0x14a0 [ 117.277338] ? futex_ref_get+0x114/0x300 [ 117.277955] ? futex_hash+0x15c/0x390 [ 117.278544] lock_release+0x1ab/0x290 [ 117.279142] ? futex_hash+0x15c/0x390 [ 117.279732] futex_ref_get+0x119/0x300 [ 117.280345] ? futex_hash+0x15c/0x390 [ 117.280954] futex_hash+0x70/0x390 [ 117.281521] futex_wake+0x143/0x540 [ 117.282106] ? __pfx_perf_trace_lock+0x10/0x10 [ 117.282827] ? __pfx_futex_wake+0x10/0x10 [ 117.283485] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 117.284304] ? finish_task_switch.isra.0+0x294/0x840 [ 117.285123] do_futex+0x26d/0x370 [ 117.285677] ? __pfx_do_futex+0x10/0x10 [ 117.286305] ? __pfx___schedule+0x10/0x10 [ 117.286962] __x64_sys_futex+0x1c9/0x4d0 [ 117.287605] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 117.288527] ? __pfx___x64_sys_futex+0x10/0x10 [ 117.289269] do_syscall_64+0xbf/0x360 [ 117.289872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.290691] RIP: 0033:0x7f1cff2d4b19 [ 117.291275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 117.294074] RSP: 002b:00007ffcf3675a38 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 117.295238] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1cff2d4b19 [ 117.296329] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1cff3e7f68 [ 117.297431] RBP: 00007f1cff3e7f60 R08: 00007f1cfc84a700 R09: 0000000000000000 [ 117.298525] R10: 00007f1cfc84a700 R11: 0000000000000246 R12: 00007f1cff3eca68 [ 117.299624] R13: 00007ffcf3675b40 R14: 00007f1cff3e7f60 R15: 000000000001c968 [ 117.300731] [ 117.301112] Modules linked in: [ 117.301624] BUG: unable to handle page fault for address: ffffed10212c98d6 [ 117.302207] #PF: supervisor read access in kernel mode [ 117.302632] #PF: error_code(0x0000) - not-present page [ 117.303059] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 [ 117.303524] Oops: Oops: 0000 [#3] SMP KASAN NOPTI [ 117.303925] CPU: 0 UID: 0 PID: 3958 Comm: syz-executor.4 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 117.304908] Tainted: [D]=DIE, [W]=WARN [ 117.305219] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 117.305881] RIP: 0010:perf_tp_event+0x175/0xe70 [ 117.306274] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 117.307754] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012 [ 117.308187] RAX: 1ffff110212c98d6 RBX: ffff88810964c4c0 RCX: 0000000000000002 [ 117.308767] RDX: ffff888044ca3700 RSI: ffffffff818995b7 RDI: ffff88810964c6b0 [ 117.309353] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc15f08 [ 117.309938] R10: 0000000000000000 R11: ffff88806ce37018 R12: dffffc0000000000 [ 117.310518] R13: 0000000000000024 R14: ffff88806ce31490 R15: dffffc0000000000 [ 117.311095] FS: 00007f8f9d124700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 117.311750] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.312222] CR2: ffffed10212c98d6 CR3: 000000001e7e2000 CR4: 0000000000350ef0 [ 117.312819] Call Trace: [ 117.313034] [ 117.313221] ? __pfx_perf_tp_event+0x10/0x10 [ 117.313599] ? stack_depot_save_flags+0x2c/0xa20 [ 117.313996] ? stack_depot_save_flags+0x2c/0xa20 [ 117.314388] ? kasan_save_stack+0x34/0x50 [ 117.314729] ? kasan_save_stack+0x24/0x50 [ 117.315068] ? kasan_save_track+0x14/0x30 [ 117.315410] ? __kasan_save_free_info+0x3a/0x60 [ 117.315797] ? __kasan_slab_free+0x3f/0x50 [ 117.316147] ? kmem_cache_free+0x2a1/0x540 [ 117.316496] ? rcu_core+0x7c8/0x1800 [ 117.316812] ? handle_softirqs+0x1b1/0x770 [ 117.317165] ? __irq_exit_rcu+0xc4/0x100 [ 117.317504] ? irq_exit_rcu+0x9/0x20 [ 117.317811] ? sysvec_apic_timer_interrupt+0x70/0x80 [ 117.318220] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 117.318646] ? __sanitizer_cov_trace_pc+0x70/0x80 [ 117.319030] ? smp_call_function_many_cond+0xa36/0x1110 [ 117.319452] ? on_each_cpu_cond_mask+0x57/0xa0 [ 117.319819] ? smp_text_poke_batch_finish+0x36b/0xb50 [ 117.320233] ? __static_call_transform+0x337/0x740 [ 117.320619] ? arch_static_call_transform+0x6d/0xd0 [ 117.321024] ? __static_call_update+0x406/0x630 [ 117.321395] ? tracepoint_add_func+0xab9/0xec0 [ 117.321763] ? tracepoint_probe_register+0xa4/0xf0 [ 117.322154] ? kvm_sched_clock_read+0x16/0x30 [ 117.322516] ? sched_clock+0x37/0x60 [ 117.322820] ? sched_clock_cpu+0x6c/0x4e0 [ 117.323158] ? perf_trace_run_bpf_submit+0xef/0x180 [ 117.323557] perf_trace_run_bpf_submit+0xef/0x180 [ 117.323948] perf_trace_lock+0x337/0x5d0 [ 117.324275] ? place_entity+0x1c/0x410 [ 117.324592] ? kvm_sched_clock_read+0x16/0x30 [ 117.324967] ? __pfx_perf_trace_lock+0x10/0x10 [ 117.325338] ? check_preempt_wakeup_fair+0x6e/0x950 [ 117.325743] ? sched_ttwu_pending+0x2e0/0x4a0 [ 117.326109] lock_release+0x1ab/0x290 [ 117.326415] ? ttwu_do_activate+0x1a4/0x8a0 [ 117.326769] _raw_spin_unlock+0x16/0x40 [ 117.327094] sched_ttwu_pending+0x2e0/0x4a0 [ 117.327443] ? __pfx_try_to_wake_up+0x10/0x10 [ 117.327808] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 117.328200] __flush_smp_call_function_queue+0x434/0x740 [ 117.328636] __sysvec_call_function_single+0x6d/0x370 [ 117.329060] sysvec_call_function_single+0xa1/0xc0 [ 117.329458] [ 117.329640] [ 117.329823] asm_sysvec_call_function_single+0x1a/0x20 [ 117.330241] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 117.330617] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de [ 117.332046] RSP: 0018:ffff888044997f28 EFLAGS: 00000246 [ 117.332468] RAX: 0000000000000001 RBX: ffff888044ca3700 RCX: ffffffff817c2b86 [ 117.333042] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 117.333604] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 117.334160] R10: ffffffff8643ac57 R11: 3030303030302043 R12: ffff888044ca3700 [ 117.334718] R13: 0000000000000009 R14: ffff8880449977e0 R15: 0000000000000000 [ 117.335292] ? trace_irq_enable.constprop.0+0x26/0x100 [ 117.335709] ? make_task_dead+0x214/0x3b0 [ 117.336040] ? make_task_dead+0x214/0x3b0 [ 117.336370] ? do_syscall_64+0xbf/0x360 [ 117.336689] rewind_stack_and_make_dead+0x16/0x20 [ 117.337083] RIP: 0033:0x7f8f9fbaeb19 [ 117.337378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 117.338807] RSP: 002b:00007f8f9d124218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 117.339404] RAX: ffffffffffffffda RBX: 00007f8f9fcc1f68 RCX: 00007f8f9fbaeb19 [ 117.339964] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8f9fcc1f6c [ 117.340532] RBP: 00007f8f9fcc1f60 R08: 000000000000000e R09: 0000000000000000 [ 117.341105] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f8f9fcc1f6c [ 117.341671] R13: 00007fff54a6098f R14: 00007f8f9d124300 R15: 0000000000022000 [ 117.342243] [ 117.342436] Modules linked in: [ 117.342704] CR2: ffffed10212c98d6 [ 117.342980] ---[ end trace 0000000000000000 ]--- [ 117.342982] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#4] SMP KASAN NOPTI [ 117.343350] RIP: 0010:perf_tp_event+0x175/0xe70 [ 117.345007] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 117.345369] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 117.346497] CPU: 1 UID: 0 PID: 3960 Comm: syz-executor.7 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 117.347902] RSP: 0018:ffff888044997800 EFLAGS: 00010212 [ 117.349675] Tainted: [D]=DIE, [W]=WARN [ 117.350083] RAX: 1ffff110212c98d6 RBX: ffff88810964c4c0 RCX: ffffc9000842f000 [ 117.350666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 117.351220] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff88810964c6b0 [ 117.352460] RIP: 0010:perf_tp_event+0x175/0xe70 [ 117.353016] RBP: ffff888044997a70 R08: ffff88806ce31340 R09: ffffe8ffffc15f08 [ 117.353728] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 117.354279] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 117.357001] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012 [ 117.357556] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 117.357561] [ 117.357569] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 117.357973] FS: 00007f8f9d124700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 117.359037] RDX: ffff888043f63700 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 117.359173] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.360238] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd15f08 [ 117.360869] CR2: ffffed10212c98d6 CR3: 000000001e7e2000 CR4: 0000000000350ef0 [ 117.361940] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000 [ 117.362399] Kernel panic - not syncing: Fatal exception in interrupt [ 118.443018] Shutting down cpus with NMI [ 118.446729] Kernel Offset: disabled [ 118.447231] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 12:30:10 Registers: info registers vcpu 0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888044997008 R8 =0000000000000000 R9 =ffffed10015fd046 R10=0000000000000030 R11=30376578302f4952 R12=0000000000000030 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8f9d124700 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=ffffed10212c98d6 CR3=000000001e7e2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f8f9fc957c000007f8f9fc957c8 XMM02=00007f8f9fc957e000007f8f9fc957c0 XMM03=00007f8f9fc957c800007f8f9fc957c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffffff8165c150 RCX=ffffffff81522453 RDX=ffff888015feb700 RSI=ffffffff8161e0ab RDI=ffff88806cf28080 RBP=ffff88806cf289d8 RSP=ffff88806cf08e20 R8 =0000000000000000 R9 =ffffed100d9e5010 R10=ffff88806cf28083 R11=ffff88806cf08ff8 R12=ffff88806cf28080 R13=ffff88806cf28100 R14=ffff88806cf28080 R15=dffffc0000000000 RIP=ffffffff8173e790 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f93ffd258c0 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffcf3674ff8 CR3=000000000be1f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=000000000000307570632f302f716d2f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000563e5b7ebc500000563e5b7ebbf0 XMM06=0000000000000000ffffffff00000000 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000020000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000