Warning: Permanently added '[localhost]:1341' (ECDSA) to the list of known hosts. 2025/08/29 13:36:57 fuzzer started 2025/08/29 13:36:57 dialing manager at localhost:43077 syzkaller login: [ 50.780849] cgroup: Unknown subsys name 'net' [ 50.868283] cgroup: Unknown subsys name 'cpuset' [ 50.896516] cgroup: Unknown subsys name 'rlimit' 2025/08/29 13:37:08 syscalls: 2214 2025/08/29 13:37:08 code coverage: enabled 2025/08/29 13:37:08 comparison tracing: enabled 2025/08/29 13:37:08 extra coverage: enabled 2025/08/29 13:37:08 setuid sandbox: enabled 2025/08/29 13:37:08 namespace sandbox: enabled 2025/08/29 13:37:08 Android sandbox: enabled 2025/08/29 13:37:08 fault injection: enabled 2025/08/29 13:37:08 leak checking: enabled 2025/08/29 13:37:08 net packet injection: enabled 2025/08/29 13:37:08 net device setup: enabled 2025/08/29 13:37:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 13:37:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 13:37:08 USB emulation: enabled 2025/08/29 13:37:08 hci packet injection: enabled 2025/08/29 13:37:08 wifi device emulation: enabled 2025/08/29 13:37:08 802.15.4 emulation: enabled 2025/08/29 13:37:08 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 13:37:08 fetching corpus: 50, signal 20919/24504 (executing program) 2025/08/29 13:37:08 fetching corpus: 100, signal 29238/34383 (executing program) 2025/08/29 13:37:08 fetching corpus: 150, signal 41411/47770 (executing program) 2025/08/29 13:37:08 fetching corpus: 200, signal 47165/54878 (executing program) 2025/08/29 13:37:09 fetching corpus: 250, signal 53571/62464 (executing program) 2025/08/29 13:37:09 fetching corpus: 300, signal 57008/67153 (executing program) 2025/08/29 13:37:09 fetching corpus: 350, signal 60469/71763 (executing program) 2025/08/29 13:37:09 fetching corpus: 400, signal 63714/76103 (executing program) 2025/08/29 13:37:09 fetching corpus: 450, signal 66869/80319 (executing program) 2025/08/29 13:37:09 fetching corpus: 500, signal 69803/84265 (executing program) 2025/08/29 13:37:09 fetching corpus: 550, signal 72428/87864 (executing program) 2025/08/29 13:37:09 fetching corpus: 600, signal 76554/92785 (executing program) 2025/08/29 13:37:09 fetching corpus: 650, signal 79943/96894 (executing program) 2025/08/29 13:37:10 fetching corpus: 700, signal 82045/99925 (executing program) 2025/08/29 13:37:10 fetching corpus: 750, signal 84064/102811 (executing program) 2025/08/29 13:37:10 fetching corpus: 800, signal 86650/106122 (executing program) 2025/08/29 13:37:10 fetching corpus: 850, signal 89626/109698 (executing program) 2025/08/29 13:37:10 fetching corpus: 900, signal 90981/111895 (executing program) 2025/08/29 13:37:10 fetching corpus: 950, signal 93013/114703 (executing program) 2025/08/29 13:37:10 fetching corpus: 1000, signal 95230/117582 (executing program) 2025/08/29 13:37:10 fetching corpus: 1050, signal 96992/120063 (executing program) 2025/08/29 13:37:10 fetching corpus: 1100, signal 98818/122550 (executing program) 2025/08/29 13:37:10 fetching corpus: 1150, signal 99991/124465 (executing program) 2025/08/29 13:37:10 fetching corpus: 1200, signal 102336/127315 (executing program) 2025/08/29 13:37:11 fetching corpus: 1250, signal 103922/129502 (executing program) 2025/08/29 13:37:11 fetching corpus: 1300, signal 105536/131677 (executing program) 2025/08/29 13:37:11 fetching corpus: 1350, signal 107360/133944 (executing program) 2025/08/29 13:37:11 fetching corpus: 1400, signal 108464/135715 (executing program) 2025/08/29 13:37:11 fetching corpus: 1450, signal 110087/137785 (executing program) 2025/08/29 13:37:11 fetching corpus: 1500, signal 111197/139487 (executing program) 2025/08/29 13:37:11 fetching corpus: 1550, signal 112866/141544 (executing program) 2025/08/29 13:37:11 fetching corpus: 1600, signal 113975/143209 (executing program) 2025/08/29 13:37:11 fetching corpus: 1650, signal 115174/144919 (executing program) 2025/08/29 13:37:11 fetching corpus: 1700, signal 116429/146572 (executing program) 2025/08/29 13:37:12 fetching corpus: 1750, signal 117897/148384 (executing program) 2025/08/29 13:37:12 fetching corpus: 1800, signal 118882/149903 (executing program) 2025/08/29 13:37:12 fetching corpus: 1850, signal 120441/151717 (executing program) 2025/08/29 13:37:12 fetching corpus: 1900, signal 121077/152982 (executing program) 2025/08/29 13:37:12 fetching corpus: 1950, signal 121737/154191 (executing program) 2025/08/29 13:37:12 fetching corpus: 2000, signal 122554/155517 (executing program) 2025/08/29 13:37:12 fetching corpus: 2050, signal 123845/157076 (executing program) 2025/08/29 13:37:12 fetching corpus: 2100, signal 125115/158574 (executing program) 2025/08/29 13:37:12 fetching corpus: 2150, signal 126187/159927 (executing program) 2025/08/29 13:37:12 fetching corpus: 2200, signal 127621/161488 (executing program) 2025/08/29 13:37:13 fetching corpus: 2250, signal 131038/164040 (executing program) 2025/08/29 13:37:13 fetching corpus: 2300, signal 131763/165167 (executing program) 2025/08/29 13:37:13 fetching corpus: 2350, signal 132454/166213 (executing program) 2025/08/29 13:37:13 fetching corpus: 2400, signal 133485/167453 (executing program) 2025/08/29 13:37:13 fetching corpus: 2450, signal 134128/168462 (executing program) 2025/08/29 13:37:13 fetching corpus: 2500, signal 134937/169606 (executing program) 2025/08/29 13:37:13 fetching corpus: 2550, signal 135657/170693 (executing program) 2025/08/29 13:37:13 fetching corpus: 2600, signal 136457/171743 (executing program) 2025/08/29 13:37:13 fetching corpus: 2650, signal 137292/172837 (executing program) 2025/08/29 13:37:13 fetching corpus: 2700, signal 138211/173883 (executing program) 2025/08/29 13:37:14 fetching corpus: 2750, signal 139139/174980 (executing program) 2025/08/29 13:37:14 fetching corpus: 2800, signal 139782/175907 (executing program) 2025/08/29 13:37:14 fetching corpus: 2850, signal 140365/176821 (executing program) 2025/08/29 13:37:14 fetching corpus: 2900, signal 141227/177770 (executing program) 2025/08/29 13:37:14 fetching corpus: 2950, signal 142055/178697 (executing program) 2025/08/29 13:37:14 fetching corpus: 3000, signal 142687/179597 (executing program) 2025/08/29 13:37:14 fetching corpus: 3050, signal 143180/180383 (executing program) 2025/08/29 13:37:14 fetching corpus: 3100, signal 143931/181319 (executing program) 2025/08/29 13:37:14 fetching corpus: 3150, signal 144362/182090 (executing program) 2025/08/29 13:37:14 fetching corpus: 3200, signal 145036/182950 (executing program) 2025/08/29 13:37:14 fetching corpus: 3250, signal 145867/183945 (executing program) 2025/08/29 13:37:15 fetching corpus: 3300, signal 146507/184738 (executing program) 2025/08/29 13:37:15 fetching corpus: 3350, signal 147157/185528 (executing program) 2025/08/29 13:37:15 fetching corpus: 3400, signal 147766/186245 (executing program) 2025/08/29 13:37:15 fetching corpus: 3450, signal 148465/187048 (executing program) 2025/08/29 13:37:15 fetching corpus: 3500, signal 149063/187876 (executing program) 2025/08/29 13:37:15 fetching corpus: 3550, signal 149710/188610 (executing program) 2025/08/29 13:37:15 fetching corpus: 3600, signal 150559/189370 (executing program) 2025/08/29 13:37:15 fetching corpus: 3650, signal 151522/190158 (executing program) 2025/08/29 13:37:15 fetching corpus: 3700, signal 152125/190857 (executing program) 2025/08/29 13:37:16 fetching corpus: 3750, signal 152761/191549 (executing program) 2025/08/29 13:37:16 fetching corpus: 3800, signal 153176/192163 (executing program) 2025/08/29 13:37:16 fetching corpus: 3850, signal 153562/192744 (executing program) 2025/08/29 13:37:16 fetching corpus: 3900, signal 154076/193357 (executing program) 2025/08/29 13:37:16 fetching corpus: 3950, signal 154720/193978 (executing program) 2025/08/29 13:37:16 fetching corpus: 4000, signal 155224/194538 (executing program) 2025/08/29 13:37:16 fetching corpus: 4050, signal 155636/195131 (executing program) 2025/08/29 13:37:16 fetching corpus: 4100, signal 156048/195680 (executing program) 2025/08/29 13:37:16 fetching corpus: 4150, signal 156510/196218 (executing program) 2025/08/29 13:37:16 fetching corpus: 4200, signal 157123/196815 (executing program) 2025/08/29 13:37:16 fetching corpus: 4250, signal 157599/197338 (executing program) 2025/08/29 13:37:17 fetching corpus: 4300, signal 158225/197860 (executing program) 2025/08/29 13:37:17 fetching corpus: 4350, signal 158763/198451 (executing program) 2025/08/29 13:37:17 fetching corpus: 4400, signal 159336/198948 (executing program) 2025/08/29 13:37:17 fetching corpus: 4450, signal 159831/199416 (executing program) 2025/08/29 13:37:17 fetching corpus: 4500, signal 160215/199908 (executing program) 2025/08/29 13:37:17 fetching corpus: 4550, signal 160855/200395 (executing program) 2025/08/29 13:37:17 fetching corpus: 4600, signal 161227/200833 (executing program) 2025/08/29 13:37:17 fetching corpus: 4650, signal 161553/201300 (executing program) 2025/08/29 13:37:17 fetching corpus: 4700, signal 162039/201776 (executing program) 2025/08/29 13:37:17 fetching corpus: 4750, signal 162646/202214 (executing program) 2025/08/29 13:37:17 fetching corpus: 4800, signal 163115/202606 (executing program) 2025/08/29 13:37:17 fetching corpus: 4850, signal 163799/203056 (executing program) 2025/08/29 13:37:18 fetching corpus: 4900, signal 164137/203424 (executing program) 2025/08/29 13:37:18 fetching corpus: 4950, signal 164380/203570 (executing program) 2025/08/29 13:37:18 fetching corpus: 5000, signal 164916/203765 (executing program) 2025/08/29 13:37:18 fetching corpus: 5050, signal 165347/203772 (executing program) 2025/08/29 13:37:18 fetching corpus: 5100, signal 165770/203777 (executing program) 2025/08/29 13:37:18 fetching corpus: 5150, signal 166285/203822 (executing program) 2025/08/29 13:37:18 fetching corpus: 5200, signal 166577/203840 (executing program) 2025/08/29 13:37:18 fetching corpus: 5250, signal 167002/203845 (executing program) 2025/08/29 13:37:18 fetching corpus: 5300, signal 167483/203850 (executing program) 2025/08/29 13:37:18 fetching corpus: 5350, signal 167862/203875 (executing program) 2025/08/29 13:37:18 fetching corpus: 5400, signal 168115/203890 (executing program) 2025/08/29 13:37:18 fetching corpus: 5450, signal 168511/203893 (executing program) 2025/08/29 13:37:19 fetching corpus: 5500, signal 168996/203900 (executing program) 2025/08/29 13:37:19 fetching corpus: 5550, signal 169345/203926 (executing program) 2025/08/29 13:37:19 fetching corpus: 5600, signal 169728/203926 (executing program) 2025/08/29 13:37:19 fetching corpus: 5650, signal 169912/203934 (executing program) 2025/08/29 13:37:19 fetching corpus: 5700, signal 170205/203947 (executing program) 2025/08/29 13:37:19 fetching corpus: 5750, signal 170536/203950 (executing program) 2025/08/29 13:37:19 fetching corpus: 5800, signal 170916/203976 (executing program) 2025/08/29 13:37:19 fetching corpus: 5850, signal 171260/203977 (executing program) 2025/08/29 13:37:19 fetching corpus: 5900, signal 171699/203997 (executing program) 2025/08/29 13:37:19 fetching corpus: 5950, signal 172230/204108 (executing program) 2025/08/29 13:37:19 fetching corpus: 6000, signal 172622/204113 (executing program) 2025/08/29 13:37:19 fetching corpus: 6050, signal 172986/204117 (executing program) 2025/08/29 13:37:20 fetching corpus: 6100, signal 173247/204147 (executing program) 2025/08/29 13:37:20 fetching corpus: 6150, signal 173624/204163 (executing program) 2025/08/29 13:37:20 fetching corpus: 6200, signal 173838/204164 (executing program) 2025/08/29 13:37:20 fetching corpus: 6250, signal 174128/204165 (executing program) 2025/08/29 13:37:20 fetching corpus: 6300, signal 174466/204165 (executing program) 2025/08/29 13:37:20 fetching corpus: 6350, signal 175007/204169 (executing program) 2025/08/29 13:37:20 fetching corpus: 6400, signal 175374/204178 (executing program) 2025/08/29 13:37:20 fetching corpus: 6450, signal 175686/204202 (executing program) 2025/08/29 13:37:20 fetching corpus: 6500, signal 175958/204249 (executing program) 2025/08/29 13:37:20 fetching corpus: 6550, signal 176430/204271 (executing program) 2025/08/29 13:37:20 fetching corpus: 6600, signal 176768/204288 (executing program) 2025/08/29 13:37:21 fetching corpus: 6650, signal 177162/204318 (executing program) 2025/08/29 13:37:21 fetching corpus: 6700, signal 177480/204328 (executing program) 2025/08/29 13:37:21 fetching corpus: 6750, signal 177788/204330 (executing program) 2025/08/29 13:37:21 fetching corpus: 6800, signal 178153/204338 (executing program) 2025/08/29 13:37:21 fetching corpus: 6850, signal 178424/204347 (executing program) 2025/08/29 13:37:21 fetching corpus: 6900, signal 178657/204347 (executing program) 2025/08/29 13:37:21 fetching corpus: 6950, signal 179158/204374 (executing program) 2025/08/29 13:37:21 fetching corpus: 7000, signal 179424/204374 (executing program) 2025/08/29 13:37:21 fetching corpus: 7050, signal 179626/204384 (executing program) 2025/08/29 13:37:21 fetching corpus: 7100, signal 180101/204433 (executing program) 2025/08/29 13:37:21 fetching corpus: 7150, signal 180393/204445 (executing program) 2025/08/29 13:37:21 fetching corpus: 7200, signal 180604/204447 (executing program) 2025/08/29 13:37:22 fetching corpus: 7250, signal 180949/204447 (executing program) 2025/08/29 13:37:22 fetching corpus: 7300, signal 181260/204453 (executing program) 2025/08/29 13:37:22 fetching corpus: 7350, signal 181583/204453 (executing program) 2025/08/29 13:37:22 fetching corpus: 7400, signal 181806/204457 (executing program) 2025/08/29 13:37:22 fetching corpus: 7450, signal 182007/204472 (executing program) 2025/08/29 13:37:22 fetching corpus: 7500, signal 182401/204475 (executing program) 2025/08/29 13:37:22 fetching corpus: 7550, signal 182745/204479 (executing program) 2025/08/29 13:37:22 fetching corpus: 7600, signal 183081/204490 (executing program) 2025/08/29 13:37:22 fetching corpus: 7650, signal 183449/204493 (executing program) 2025/08/29 13:37:22 fetching corpus: 7700, signal 183884/204501 (executing program) 2025/08/29 13:37:22 fetching corpus: 7750, signal 184078/204504 (executing program) 2025/08/29 13:37:23 fetching corpus: 7800, signal 184383/204507 (executing program) 2025/08/29 13:37:23 fetching corpus: 7850, signal 184747/204523 (executing program) 2025/08/29 13:37:23 fetching corpus: 7900, signal 184917/204525 (executing program) 2025/08/29 13:37:23 fetching corpus: 7950, signal 185288/204529 (executing program) 2025/08/29 13:37:23 fetching corpus: 8000, signal 185561/204537 (executing program) 2025/08/29 13:37:23 fetching corpus: 8050, signal 185838/204537 (executing program) 2025/08/29 13:37:23 fetching corpus: 8100, signal 186096/204544 (executing program) 2025/08/29 13:37:23 fetching corpus: 8150, signal 186349/204547 (executing program) 2025/08/29 13:37:23 fetching corpus: 8200, signal 186599/204550 (executing program) 2025/08/29 13:37:23 fetching corpus: 8250, signal 186880/204568 (executing program) 2025/08/29 13:37:23 fetching corpus: 8300, signal 187204/204570 (executing program) 2025/08/29 13:37:23 fetching corpus: 8350, signal 187515/204593 (executing program) 2025/08/29 13:37:23 fetching corpus: 8400, signal 187701/204593 (executing program) 2025/08/29 13:37:24 fetching corpus: 8450, signal 187968/204598 (executing program) 2025/08/29 13:37:24 fetching corpus: 8500, signal 188359/204606 (executing program) 2025/08/29 13:37:24 fetching corpus: 8550, signal 188727/204611 (executing program) 2025/08/29 13:37:24 fetching corpus: 8600, signal 189048/204614 (executing program) 2025/08/29 13:37:24 fetching corpus: 8650, signal 189260/204634 (executing program) 2025/08/29 13:37:24 fetching corpus: 8700, signal 189725/204642 (executing program) 2025/08/29 13:37:24 fetching corpus: 8750, signal 189986/204647 (executing program) 2025/08/29 13:37:24 fetching corpus: 8800, signal 190171/204651 (executing program) 2025/08/29 13:37:24 fetching corpus: 8850, signal 190413/204678 (executing program) 2025/08/29 13:37:24 fetching corpus: 8900, signal 190615/204679 (executing program) 2025/08/29 13:37:24 fetching corpus: 8950, signal 190907/204681 (executing program) 2025/08/29 13:37:24 fetching corpus: 9000, signal 191089/204692 (executing program) 2025/08/29 13:37:25 fetching corpus: 9050, signal 191369/204701 (executing program) 2025/08/29 13:37:25 fetching corpus: 9100, signal 191655/204701 (executing program) 2025/08/29 13:37:25 fetching corpus: 9150, signal 191856/204704 (executing program) 2025/08/29 13:37:25 fetching corpus: 9200, signal 192106/204704 (executing program) 2025/08/29 13:37:25 fetching corpus: 9250, signal 192378/204709 (executing program) 2025/08/29 13:37:25 fetching corpus: 9300, signal 192562/204729 (executing program) 2025/08/29 13:37:25 fetching corpus: 9350, signal 192824/204731 (executing program) 2025/08/29 13:37:25 fetching corpus: 9400, signal 193011/204746 (executing program) 2025/08/29 13:37:25 fetching corpus: 9450, signal 193356/204750 (executing program) 2025/08/29 13:37:25 fetching corpus: 9500, signal 193573/204750 (executing program) 2025/08/29 13:37:25 fetching corpus: 9550, signal 193755/204772 (executing program) 2025/08/29 13:37:26 fetching corpus: 9600, signal 193948/204776 (executing program) 2025/08/29 13:37:26 fetching corpus: 9650, signal 194226/204817 (executing program) 2025/08/29 13:37:26 fetching corpus: 9700, signal 194450/204830 (executing program) 2025/08/29 13:37:26 fetching corpus: 9750, signal 194619/204843 (executing program) 2025/08/29 13:37:26 fetching corpus: 9800, signal 194831/204852 (executing program) 2025/08/29 13:37:26 fetching corpus: 9850, signal 195029/204855 (executing program) 2025/08/29 13:37:26 fetching corpus: 9900, signal 195175/204863 (executing program) 2025/08/29 13:37:26 fetching corpus: 9950, signal 195507/204882 (executing program) 2025/08/29 13:37:26 fetching corpus: 10000, signal 196194/204957 (executing program) 2025/08/29 13:37:26 fetching corpus: 10050, signal 196469/204964 (executing program) 2025/08/29 13:37:26 fetching corpus: 10100, signal 196661/204976 (executing program) 2025/08/29 13:37:26 fetching corpus: 10150, signal 196880/204981 (executing program) 2025/08/29 13:37:27 fetching corpus: 10200, signal 197516/204986 (executing program) 2025/08/29 13:37:27 fetching corpus: 10250, signal 197665/204992 (executing program) 2025/08/29 13:37:27 fetching corpus: 10300, signal 197971/204994 (executing program) 2025/08/29 13:37:27 fetching corpus: 10350, signal 198165/204995 (executing program) 2025/08/29 13:37:27 fetching corpus: 10400, signal 198368/204995 (executing program) 2025/08/29 13:37:27 fetching corpus: 10450, signal 198576/205002 (executing program) 2025/08/29 13:37:27 fetching corpus: 10500, signal 198821/205002 (executing program) 2025/08/29 13:37:27 fetching corpus: 10550, signal 199120/205002 (executing program) 2025/08/29 13:37:27 fetching corpus: 10600, signal 199419/205028 (executing program) 2025/08/29 13:37:27 fetching corpus: 10650, signal 199635/205031 (executing program) 2025/08/29 13:37:27 fetching corpus: 10700, signal 199821/205037 (executing program) 2025/08/29 13:37:28 fetching corpus: 10750, signal 200003/205042 (executing program) 2025/08/29 13:37:28 fetching corpus: 10800, signal 200248/205048 (executing program) 2025/08/29 13:37:28 fetching corpus: 10850, signal 200439/205058 (executing program) 2025/08/29 13:37:28 fetching corpus: 10900, signal 200651/205060 (executing program) 2025/08/29 13:37:28 fetching corpus: 10950, signal 200817/205061 (executing program) 2025/08/29 13:37:28 fetching corpus: 10978, signal 200985/205061 (executing program) 2025/08/29 13:37:28 fetching corpus: 10978, signal 200985/205061 (executing program) 2025/08/29 13:37:30 starting 8 fuzzer processes 13:37:30 executing program 0: syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@max_batch_time}]}) 13:37:30 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x28002, 0x0) fcntl$setstatus(r0, 0x407, 0x0) 13:37:30 executing program 2: msgrcv(0x0, &(0x7f0000001080)={0x0, ""/238}, 0xffffffffffffffe7, 0x0, 0x0) 13:37:30 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) inotify_rm_watch(0xffffffffffffffff, 0x0) 13:37:30 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000200)=@hsc={0x5, 0x0, "fcc4dde382d2c46e927d"}) [ 83.267951] audit: type=1400 audit(1756474650.409:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:37:30 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) 13:37:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 13:37:30 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000180)=0x7, 0x4) [ 84.419782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.421976] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.427128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.431104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.437267] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.491304] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.496164] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.499037] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.505131] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.511263] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.557180] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.562379] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.574275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.582252] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.584286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.586609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.593632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.595060] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.599014] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.603191] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.606466] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.609161] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.613232] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.615969] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.617109] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.623591] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.643475] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.645881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.647933] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.648123] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.649428] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.660140] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.661936] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.665401] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.673288] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.681550] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.683365] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.685969] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.691110] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.703381] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.456210] Bluetooth: hci0: command tx timeout [ 86.583840] Bluetooth: hci1: command tx timeout [ 86.647032] Bluetooth: hci2: command tx timeout [ 86.710768] Bluetooth: hci4: command tx timeout [ 86.711882] Bluetooth: hci3: command tx timeout [ 86.775927] Bluetooth: hci6: command tx timeout [ 86.776716] Bluetooth: hci5: command tx timeout [ 86.777269] Bluetooth: hci7: command tx timeout [ 88.503049] Bluetooth: hci0: command tx timeout [ 88.632026] Bluetooth: hci1: command tx timeout [ 88.696725] Bluetooth: hci2: command tx timeout [ 88.758783] Bluetooth: hci4: command tx timeout [ 88.759840] Bluetooth: hci3: command tx timeout [ 88.822760] Bluetooth: hci7: command tx timeout [ 88.825896] Bluetooth: hci5: command tx timeout [ 88.826619] Bluetooth: hci6: command tx timeout [ 90.550891] Bluetooth: hci0: command tx timeout [ 90.680737] Bluetooth: hci1: command tx timeout [ 90.742721] Bluetooth: hci2: command tx timeout [ 90.806755] Bluetooth: hci3: command tx timeout [ 90.807200] Bluetooth: hci4: command tx timeout [ 90.870736] Bluetooth: hci6: command tx timeout [ 90.871204] Bluetooth: hci5: command tx timeout [ 90.871610] Bluetooth: hci7: command tx timeout [ 92.600724] Bluetooth: hci0: command tx timeout [ 92.726797] Bluetooth: hci1: command tx timeout [ 92.790796] Bluetooth: hci2: command tx timeout [ 92.856741] Bluetooth: hci3: command tx timeout [ 92.856885] Bluetooth: hci4: command tx timeout [ 92.918782] Bluetooth: hci6: command tx timeout [ 92.918805] Bluetooth: hci7: command tx timeout [ 92.918834] Bluetooth: hci5: command tx timeout [ 125.815176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.816403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.064822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.065727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:38:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@flushpolicy={0x38, 0x12, 0xe01, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@multicast2, @in=@broadcast}}]}, 0x38}}, 0x0) [ 126.719935] audit: type=1400 audit(1756474693.861:8): avc: denied { open } for pid=3760 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.729534] audit: type=1400 audit(1756474693.861:9): avc: denied { kernel } for pid=3760 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 13:38:13 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) 13:38:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}, @nested={0x4}]}, 0x20}], 0x1}, 0x0) 13:38:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}, @nested={0x4}]}, 0x20}], 0x1}, 0x0) 13:38:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}, @nested={0x4}]}, 0x20}], 0x1}, 0x0) [ 127.101266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.101891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:38:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}, @nested={0x4}]}, 0x20}], 0x1}, 0x0) [ 127.196741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.197334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.276187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.277355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:38:14 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x8008700b, &(0x7f0000000040)) 13:38:14 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000400)) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 127.439181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.440152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.516061] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 127.517856] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 127.519219] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 127.520517] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 06 00 [ 127.521986] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 2 [ 127.530350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.531615] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.533205] Buffer I/O error on dev sr0, logical block 0, async page read [ 127.562458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.563430] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.564989] Buffer I/O error on dev sr0, logical block 1, async page read [ 127.573860] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.574330] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.575146] Buffer I/O error on dev sr0, logical block 2, async page read [ 127.583770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.584191] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.584954] Buffer I/O error on dev sr0, logical block 3, async page read [ 127.599767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.600188] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.601008] Buffer I/O error on dev sr0, logical block 4, async page read [ 127.613815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.614236] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.614971] Buffer I/O error on dev sr0, logical block 5, async page read [ 127.628349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.629300] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.630644] Buffer I/O error on dev sr0, logical block 6, async page read [ 127.647794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.649076] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.650843] Buffer I/O error on dev sr0, logical block 7, async page read [ 127.670029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.670557] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.671271] Buffer I/O error on dev sr0, logical block 0, async page read [ 127.674872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.675292] Buffer I/O error on dev sr0, logical block 1, async page read [ 127.684794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.685327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.689912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.690463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.692803] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.693364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.764822] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 127.766483] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 127.767568] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 127.768586] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 127.770777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.771385] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.771988] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.772527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.780756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.781363] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.784754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.788825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.789454] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.798987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.799527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.805062] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.806560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.810768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.811309] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.812038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 127.889523] No source specified [ 127.891243] No source specified [ 128.090760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.091386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.299461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.300064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.455856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.456495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.650195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.651247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.838119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.839143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.973070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.973699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.020600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.021788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.058905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.059503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.076540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.077143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.128571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.129238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:38:16 executing program 0: syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@max_batch_time}]}) 13:38:16 executing program 6: syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @dccp={{0xe, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @private=0xa010101, {[@rr={0x7, 0x2, 0x0, [@broadcast, @broadcast, @broadcast, @empty, @dev, @local, @private, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00W', 0x0, "944856"}}}}}}, 0x0) 13:38:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 13:38:16 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) inotify_rm_watch(0xffffffffffffffff, 0x0) 13:38:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800010000000000000000000af9"], 0x1c}], 0x1}, 0x0) 13:38:16 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty}, 0x20) 13:38:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 13:38:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000100), 0x4) 13:38:16 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty}, 0x20) [ 129.415391] No source specified 13:38:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 13:38:16 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x80}, 'port1\x00', 0x300}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0x80}, 'port0\x00'}) 13:38:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040001, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) 13:38:16 executing program 6: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) 13:38:16 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) inotify_rm_watch(0xffffffffffffffff, 0x0) 13:38:16 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x80}, 'port1\x00', 0x300}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0x80}, 'port0\x00'}) 13:38:16 executing program 0: syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@max_batch_time}]}) 13:38:16 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty}, 0x20) 13:38:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 13:38:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 13:38:16 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x80}, 'port1\x00', 0x300}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0x80}, 'port0\x00'}) 13:38:16 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) inotify_rm_watch(0xffffffffffffffff, 0x0) 13:38:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="d4120000050103"], 0x12d4}}, 0x0) 13:38:16 executing program 6: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) [ 129.610805] BUG: unable to handle page fault for address: ffffed10212c935e [ 129.611364] #PF: supervisor read access in kernel mode [ 129.611775] #PF: error_code(0x0000) - not-present page [ 129.612190] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 [ 129.612634] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 129.613299] CPU: 0 UID: 0 PID: 3956 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 129.615993] Tainted: [W]=WARN [ 129.616677] No source specified [ 129.616701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 129.619684] RIP: 0010:perf_tp_event+0x175/0xe70 [ 129.620728] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 129.622801] RSP: 0018:ffff8880481ff780 EFLAGS: 00010012 [ 129.623219] RAX: 1ffff110212c935e RBX: ffff888109649900 RCX: ffffc9000b8e6000 [ 129.623773] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff888109649af0 [ 129.624327] RBP: ffff8880481ff9f0 R08: ffff88806ce31340 R09: ffffe8ffffc09c00 [ 129.624879] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 129.625440] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000 [ 129.625995] FS: 00007efed65c8700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 129.626619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.627072] CR2: ffffed10212c935e CR3: 000000001f59a000 CR4: 0000000000350ef0 [ 129.627629] Call Trace: [ 129.627836] [ 129.628020] ? __pfx_perf_tp_event+0x10/0x10 [ 129.628376] ? __asan_memcpy+0x3d/0x60 [ 129.628689] ? visit_groups_merge.constprop.0.isra.0+0x6e7/0x1150 [ 129.629180] ? __pfx_visit_groups_merge.constprop.0.isra.0+0x10/0x10 [ 129.629682] ? lock_is_held_type+0x9e/0x120 [ 129.630029] ? ctx_sched_in+0x134/0x9b0 [ 129.630346] ? css_rstat_updated+0x1b8/0x4d0 [ 129.630700] ? __pfx_css_rstat_updated+0x10/0x10 [ 129.631079] ? lock_is_held_type+0x9e/0x120 [ 129.631423] ? perf_trace_run_bpf_submit+0xef/0x180 [ 129.631819] ? lock_is_held_type+0x9e/0x120 [ 129.632161] perf_trace_run_bpf_submit+0xef/0x180 [ 129.632546] perf_trace_preemptirq_template+0x259/0x430 [ 129.632979] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 129.633446] ? lock_is_held_type+0x9e/0x120 [ 129.633790] ? find_held_lock+0x2b/0x80 [ 129.634120] ? try_to_wake_up+0x8ae/0x11d0 [ 129.634459] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 129.634862] trace_irq_enable.constprop.0+0xa6/0x100 [ 129.635261] trace_hardirqs_on+0x26/0x40 [ 129.635582] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 129.635970] try_to_wake_up+0x8ae/0x11d0 [ 129.636311] ? __pfx_try_to_wake_up+0x10/0x10 [ 129.636674] ? plist_del+0x122/0x270 [ 129.636984] ? find_held_lock+0x2b/0x80 [ 129.637344] ? futex_wake+0x474/0x540 [ 129.637704] wake_up_q+0xa1/0x130 [ 129.638034] futex_wake+0x47e/0x540 [ 129.638375] ? __pfx_futex_wake+0x10/0x10 [ 129.638759] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 129.639222] ? lock_release+0xc8/0x290 [ 129.639583] do_futex+0x26d/0x370 [ 129.639905] ? __pfx_do_futex+0x10/0x10 [ 129.640275] __x64_sys_futex+0x1c9/0x4d0 [ 129.640646] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 129.641198] ? __pfx___x64_sys_futex+0x10/0x10 [ 129.641615] ? xfd_validate_state+0x55/0x180 [ 129.642030] do_syscall_64+0xbf/0x360 [ 129.642377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.642843] RIP: 0033:0x7efed9052b19 [ 129.643179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 129.644800] RSP: 002b:00007efed65c8218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 129.645492] RAX: ffffffffffffffda RBX: 00007efed9165f68 RCX: 00007efed9052b19 [ 129.646128] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efed9165f6c [ 129.646768] RBP: 00007efed9165f60 R08: 000000000000000e R09: 0000000000000000 [ 129.647411] R10: 0000000000000004 R11: 0000000000000246 R12: 00007efed9165f6c [ 129.648048] R13: 00007ffd71a11a3f R14: 00007efed65c8300 R15: 0000000000022000 [ 129.648686] [ 129.648912] Modules linked in: [ 129.649206] CR2: ffffed10212c935e [ 129.649519] ---[ end trace 0000000000000000 ]--- [ 129.649939] RIP: 0010:perf_tp_event+0x175/0xe70 [ 129.650371] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 129.651995] RSP: 0018:ffff8880481ff780 EFLAGS: 00010012 [ 129.652469] RAX: 1ffff110212c935e RBX: ffff888109649900 RCX: ffffc9000b8e6000 [ 129.653119] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff888109649af0 [ 129.653756] RBP: ffff8880481ff9f0 R08: ffff88806ce31340 R09: ffffe8ffffc09c00 [ 129.654392] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 129.655027] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000 [ 129.655662] FS: 00007efed65c8700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 129.656381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.656909] CR2: ffffed10212c935e CR3: 000000001f59a000 CR4: 0000000000350ef0 [ 129.657549] note: syz-executor.5[3956] exited with irqs disabled [ 129.658135] BUG: unable to handle page fault for address: ffffed10212c935e [ 129.658757] #PF: supervisor read access in kernel mode [ 129.659221] #PF: error_code(0x0000) - not-present page [ 129.659687] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 [ 129.660190] Oops: Oops: 0000 [#2] SMP KASAN NOPTI [ 129.660622] CPU: 0 UID: 0 PID: 3956 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 129.661688] Tainted: [D]=DIE, [W]=WARN [ 129.662030] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 129.662720] RIP: 0010:perf_tp_event+0x175/0xe70 [ 129.663148] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 129.664762] RSP: 0018:ffff88806ce08b80 EFLAGS: 00010012 [ 129.665247] RAX: 1ffff110212c935e RBX: ffff888109649900 RCX: 0000000000000002 [ 129.665886] RDX: ffff8880158c9b80 RSI: ffffffff818995b7 RDI: ffff888109649af0 [ 129.666532] RBP: ffff88806ce08df0 R08: ffff88806ce313e8 R09: ffffe8ffffc09c00 [ 129.667164] R10: 0000000000000000 R11: ffff8880177cdc98 R12: dffffc0000000000 [ 129.667799] R13: 0000000000000014 R14: ffff88806ce313e8 R15: dffffc0000000000 [ 129.668435] FS: 00007efed65c8700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 129.669113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.669541] CR2: ffffed10212c935e CR3: 000000001f59a000 CR4: 0000000000350ef0 [ 129.670061] Call Trace: [ 129.670255] [ 129.670423] ? __pfx_perf_tp_event+0x10/0x10 [ 129.670776] ? enqueue_task_fair+0xded/0x1e00 [ 129.671134] ? check_preempt_wakeup_fair+0x6e/0x950 [ 129.671533] ? wakeup_preempt+0x140/0x2a0 [ 129.671862] ? lock_release+0x1c7/0x290 [ 129.672181] ? lock_release+0x1c7/0x290 [ 129.672499] ? do_raw_spin_unlock+0x53/0x220 [ 129.672856] ? _raw_spin_unlock_irqrestore+0x22/0x50 [ 129.673277] ? try_to_wake_up+0x8ae/0x11d0 [ 129.673617] ? do_raw_spin_lock+0x123/0x260 [ 129.673959] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 129.674333] ? perf_trace_run_bpf_submit+0xef/0x180 [ 129.674732] perf_trace_run_bpf_submit+0xef/0x180 [ 129.675125] perf_trace_preemptirq_template+0x259/0x430 [ 129.675558] ? read_tsc+0x9/0x20 [ 129.675833] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 129.676302] ? clockevents_program_event+0x135/0x360 [ 129.676710] ? tick_program_event+0xac/0x140 [ 129.677065] ? handle_softirqs+0x16e/0x770 [ 129.677408] trace_irq_enable.constprop.0+0xa6/0x100 [ 129.677806] trace_hardirqs_on+0x26/0x40 [ 129.678127] handle_softirqs+0x16e/0x770 [ 129.678459] __irq_exit_rcu+0xc4/0x100 [ 129.678777] irq_exit_rcu+0x9/0x20 [ 129.679061] sysvec_apic_timer_interrupt+0x70/0x80 [ 129.679451] [ 129.679631] [ 129.679806] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 129.680194] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 129.680544] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de [ 129.681869] RSP: 0018:ffff8880481fff28 EFLAGS: 00000246 [ 129.682261] RAX: 0000000000000001 RBX: ffff8880158c9b80 RCX: ffffffff817c2b86 [ 129.682781] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 129.683301] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 129.683820] R10: ffffffff8643ac57 R11: 0000000000000001 R12: ffff8880158c9b80 [ 129.684341] R13: 0000000000000009 R14: ffff8880481ff760 R15: 0000000000000000 [ 129.684863] ? trace_irq_enable.constprop.0+0x26/0x100 [ 129.685254] ? make_task_dead+0x214/0x3b0 [ 129.685565] ? make_task_dead+0x214/0x3b0 [ 129.685874] ? do_syscall_64+0xbf/0x360 [ 129.686169] rewind_stack_and_make_dead+0x16/0x20 [ 129.686530] RIP: 0033:0x7efed9052b19 [ 129.686806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 129.688118] RSP: 002b:00007efed65c8218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 129.688670] RAX: ffffffffffffffda RBX: 00007efed9165f68 RCX: 00007efed9052b19 [ 129.689195] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efed9165f6c [ 129.689713] RBP: 00007efed9165f60 R08: 000000000000000e R09: 0000000000000000 [ 129.690232] R10: 0000000000000004 R11: 0000000000000246 R12: 00007efed9165f6c [ 129.690750] R13: 00007ffd71a11a3f R14: 00007efed65c8300 R15: 0000000000022000 [ 129.691271] [ 129.691448] Modules linked in: [ 129.691687] CR2: ffffed10212c935e [ 129.691943] ---[ end trace 0000000000000000 ]--- [ 129.691944] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#3] SMP KASAN NOPTI [ 129.692287] RIP: 0010:perf_tp_event+0x175/0xe70 [ 129.693155] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 129.693509] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 129.694100] CPU: 1 UID: 0 PID: 3963 Comm: syz-executor.0 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 129.695520] RSP: 0018:ffff8880481ff780 EFLAGS: 00010012 [ 129.696438] Tainted: [D]=DIE, [W]=WARN [ 129.696848] RAX: 1ffff110212c935e RBX: ffff888109649900 RCX: ffffc9000b8e6000 [ 129.697160] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 129.697706] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff888109649af0 [ 129.698340] RIP: 0010:perf_tp_event+0x175/0xe70 [ 129.698890] RBP: ffff8880481ff9f0 R08: ffff88806ce31340 R09: ffffe8ffffc09c00 [ 129.699248] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 129.699797] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 129.701174] RSP: 0018:ffff88801723f780 EFLAGS: 00010012 [ 129.701724] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000 [ 129.701726] [ 129.701736] FS: 00007efed65c8700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 129.702120] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc900044ac000 [ 129.702672] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.702801] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 129.703416] CR2: ffffed10212c935e CR3: 000000001f59a000 CR4: 0000000000350ef0 [ 129.703940] RBP: ffff88801723f9f0 R08: ffff88806cf31340 R09: ffffe8ffffd09c00 [ 129.704393] Kernel panic - not syncing: Fatal exception in interrupt [ 129.706755] Kernel Offset: disabled [ 129.707041] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 13:38:16 Registers: info registers vcpu 0 RAX=000000000000bddf RBX=1ffff1100903fe5f RCX=ffffc9000b8e6000 RDX=0000000000040000 RSI=ffffffff8154bead RDI=0000000000000001 RBP=0000000000000001 RSP=ffff8880481ff2f0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=000000000000004f R13=0000000000000000 R14=ffff8880165bd280 R15=ffff8880481ff3b0 RIP=ffffffff8154beaf RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007efed65c8700 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=ffffed10212c935e CR3=000000001f59a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007efed91397c000007efed91397c8 XMM02=00007efed91397e000007efed91397c0 XMM03=00007efed91397c800007efed91397c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce3de00 RCX=ffffffff816880fc RDX=ffff888017275280 RSI=ffffffff816880d6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff888015be6ec8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=1ffff1100d9e6bb1 R12=ffffed100d9c7bc1 R13=ffff88806ce3de08 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff816880d8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fcce45bf700 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcce4665a30 CR3=000000000de9f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ef63d2b7339aa72c0000000000152360 XMM05=d3fdd5f48436fbd700000000000aead0 XMM06=be5bebe0ea14e5d200000000000ae988 XMM07=a1fcdcf819d7e1e500000000000ae728 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00000000000000000020200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000