Warning: Permanently added '[localhost]:1569' (ECDSA) to the list of known hosts. 2025/08/29 08:04:07 fuzzer started 2025/08/29 08:04:08 dialing manager at localhost:43077 2025/08/29 08:04:08 checking machine... 2025/08/29 08:04:08 checking revisions... syzkaller login: [ 52.660130] kmemleak: Automatic memory scanning thread ended 2025/08/29 08:04:08 testing simple program... [ 52.759206] cgroup: Unknown subsys name 'net' [ 52.897092] cgroup: Unknown subsys name 'cpuset' [ 52.915838] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program [ 62.258248] audit: type=1400 audit(1756454658.207:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 63.317034] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.321588] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.323757] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.331327] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.334477] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 executing program [ 65.410306] Bluetooth: hci0: command tx timeout [ 67.457485] Bluetooth: hci0: command tx timeout executing program [ 69.505500] Bluetooth: hci0: command tx timeout executing program [ 71.553620] Bluetooth: hci0: command tx timeout executing program executing program [ 78.896277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.897504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.944084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.945199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/08/29 08:04:35 building call list... executing program executing program [ 82.681275] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.495359] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 2025/08/29 08:04:44 syscalls: 2214 2025/08/29 08:04:44 code coverage: enabled 2025/08/29 08:04:44 comparison tracing: enabled 2025/08/29 08:04:44 extra coverage: enabled 2025/08/29 08:04:44 setuid sandbox: enabled 2025/08/29 08:04:44 namespace sandbox: enabled 2025/08/29 08:04:44 Android sandbox: enabled 2025/08/29 08:04:44 fault injection: enabled 2025/08/29 08:04:44 leak checking: enabled 2025/08/29 08:04:44 net packet injection: enabled 2025/08/29 08:04:44 net device setup: enabled 2025/08/29 08:04:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 08:04:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 08:04:44 USB emulation: enabled 2025/08/29 08:04:44 hci packet injection: enabled 2025/08/29 08:04:44 wifi device emulation: enabled 2025/08/29 08:04:44 802.15.4 emulation: enabled 2025/08/29 08:04:44 fetching corpus: 0, signal 0/0 (executing program) 2025/08/29 08:04:44 fetching corpus: 0, signal 0/0 (executing program) 2025/08/29 08:04:46 starting 8 fuzzer processes 08:04:46 executing program 0: pipe2$9p(0x0, 0x4800) 08:04:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@FILEID_INO32_GEN={0x8, 0xfe, {0x8}}, 0x0) 08:04:46 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = getpid() clone3(&(0x7f00000004c0)={0x1180100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r0], 0x1}, 0x58) 08:04:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x16, 0xffffffffffffffff, 0x0, 0x0, "", [@generic="02"]}, 0x14}], 0x1}, 0x0) 08:04:46 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) fallocate(r0, 0x20, 0x0, 0x81) 08:04:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @private}, {0x2, 0x0, @broadcast}, 0x281}) 08:04:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}) 08:04:46 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000001a00f9"], 0x34}], 0x1}, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/220, 0xdc}], 0x1000000000000364) [ 91.667572] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.670153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.671819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.673937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.678799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.680129] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.682987] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.684571] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.693669] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.705119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.740799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.749637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.751859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.759949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.765881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.794949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.806703] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.815300] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.826670] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.829663] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.884977] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.892271] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.894234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.898884] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.908613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.910790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.922949] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.942837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.948491] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.951893] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.953842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.958117] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.961154] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.962701] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.971670] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.982854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.984313] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.001329] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.009561] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.026673] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.761479] Bluetooth: hci1: command tx timeout [ 93.762508] Bluetooth: hci0: command tx timeout [ 93.826574] Bluetooth: hci2: command tx timeout [ 93.953446] Bluetooth: hci3: command tx timeout [ 94.017984] Bluetooth: hci4: command tx timeout [ 94.082520] Bluetooth: hci6: command tx timeout [ 94.083164] Bluetooth: hci5: command tx timeout [ 94.145602] Bluetooth: hci7: command tx timeout [ 95.810449] Bluetooth: hci0: command tx timeout [ 95.810886] Bluetooth: hci1: command tx timeout [ 95.875453] Bluetooth: hci2: command tx timeout [ 96.002543] Bluetooth: hci3: command tx timeout [ 96.069393] Bluetooth: hci4: command tx timeout [ 96.129457] Bluetooth: hci5: command tx timeout [ 96.129893] Bluetooth: hci6: command tx timeout [ 96.194920] Bluetooth: hci7: command tx timeout [ 97.858439] Bluetooth: hci0: command tx timeout [ 97.858887] Bluetooth: hci1: command tx timeout [ 97.921475] Bluetooth: hci2: command tx timeout [ 98.050441] Bluetooth: hci3: command tx timeout [ 98.113972] Bluetooth: hci4: command tx timeout [ 98.178456] Bluetooth: hci6: command tx timeout [ 98.178850] Bluetooth: hci5: command tx timeout [ 98.242988] Bluetooth: hci7: command tx timeout [ 99.905455] Bluetooth: hci1: command tx timeout [ 99.905918] Bluetooth: hci0: command tx timeout [ 99.969531] Bluetooth: hci2: command tx timeout [ 100.098429] Bluetooth: hci3: command tx timeout [ 100.164594] Bluetooth: hci4: command tx timeout [ 100.225446] Bluetooth: hci5: command tx timeout [ 100.225847] Bluetooth: hci6: command tx timeout [ 100.289915] Bluetooth: hci7: command tx timeout [ 126.643558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.644184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.830464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.831107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.001868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.002800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.038537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.039151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.123089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.123736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.212274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.212987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.254292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.255027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.297675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.298300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.342426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.343040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.361583] audit: type=1400 audit(1756454723.308:8): avc: denied { open } for pid=4423 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 127.366006] audit: type=1400 audit(1756454723.308:9): avc: denied { kernel } for pid=4423 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 127.368197] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 127.376773] No source specified 08:05:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@FILEID_INO32_GEN={0x8, 0xfe, {0x8}}, 0x0) 08:05:23 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = getpid() clone3(&(0x7f00000004c0)={0x1180100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r0], 0x1}, 0x58) [ 127.397288] No source specified [ 127.415313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.416005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:05:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@FILEID_INO32_GEN={0x8, 0xfe, {0x8}}, 0x0) 08:05:23 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = getpid() clone3(&(0x7f00000004c0)={0x1180100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r0], 0x1}, 0x58) 08:05:23 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}) [ 127.496324] No source specified 08:05:23 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = getpid() clone3(&(0x7f00000004c0)={0x1180100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r0], 0x1}, 0x58) 08:05:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@FILEID_INO32_GEN={0x8, 0xfe, {0x8}}, 0x0) [ 127.570199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.570861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.576614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.577177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.646329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.647036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.696429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.697039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.747920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.748624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.780423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.781047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:05:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x16, 0xffffffffffffffff, 0x0, 0x0, "", [@generic="02"]}, 0x14}], 0x1}, 0x0) 08:05:23 executing program 1: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = getpid() clone3(&(0x7f00000004c0)={0x1180100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r0], 0x1}, 0x58) 08:05:23 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) fallocate(r0, 0x20, 0x0, 0x81) 08:05:23 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000001a00f9"], 0x34}], 0x1}, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/220, 0xdc}], 0x1000000000000364) 08:05:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @private}, {0x2, 0x0, @broadcast}, 0x281}) 08:05:23 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}) 08:05:23 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}) 08:05:23 executing program 0: pipe2$9p(0x0, 0x4800) [ 127.961815] No source specified [ 127.985134] No source specified 08:05:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @private}, {0x2, 0x0, @broadcast}, 0x281}) 08:05:23 executing program 0: pipe2$9p(0x0, 0x4800) 08:05:24 executing program 1: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = getpid() clone3(&(0x7f00000004c0)={0x1180100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r0], 0x1}, 0x58) 08:05:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x16, 0xffffffffffffffff, 0x0, 0x0, "", [@generic="02"]}, 0x14}], 0x1}, 0x0) 08:05:24 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000001a00f9"], 0x34}], 0x1}, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/220, 0xdc}], 0x1000000000000364) 08:05:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @private}, {0x2, 0x0, @broadcast}, 0x281}) 08:05:24 executing program 0: pipe2$9p(0x0, 0x4800) 08:05:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}) 08:05:24 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) fallocate(r0, 0x20, 0x0, 0x81) 08:05:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}) [ 128.128343] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI [ 128.129271] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 128.130064] CPU: 1 UID: 0 PID: 4480 Comm: syz-executor.7 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 128.132096] Tainted: [W]=WARN [ 128.132706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 128.134459] RIP: 0010:perf_tp_event+0x175/0xe70 [ 128.135971] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 128.139453] RSP: 0018:ffff8880406ff780 EFLAGS: 00010012 [ 128.139874] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 128.140429] RDX: ffff888016c43700 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 128.140980] RBP: ffff8880406ff9f0 R08: ffff88806cf31340 R09: ffffe8ffffd169c8 [ 128.141557] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 128.142110] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 128.142670] FS: 0000555570b0f400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 128.143299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.143758] CR2: 00007fce76d99000 CR3: 000000000e0dc000 CR4: 0000000000350ef0 [ 128.144318] Call Trace: [ 128.144525] [ 128.144707] ? __pfx_perf_tp_event+0x10/0x10 [ 128.145061] ? arch_scale_cpu_capacity+0x17/0xa0 [ 128.145466] ? cpu_util.constprop.0+0x17d/0x340 [ 128.145850] ? __asan_memset+0x24/0x50 [ 128.146161] ? sched_balance_find_dst_group+0xa9a/0x1c00 [ 128.146588] ? lock_release+0xc8/0x290 [ 128.146903] ? __pfx_sched_balance_find_dst_group+0x10/0x10 [ 128.147343] ? __lock_acquire+0x694/0x1b70 [ 128.147679] ? perf_trace_run_bpf_submit+0xef/0x180 [ 128.148075] perf_trace_run_bpf_submit+0xef/0x180 [ 128.148460] perf_trace_preemptirq_template+0x259/0x430 [ 128.148887] ? __pick_eevdf+0x326/0x570 [ 128.149200] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 128.149691] ? update_curr+0x39e/0x500 [ 128.150002] ? find_held_lock+0x2b/0x80 [ 128.150324] ? try_to_wake_up+0x8ae/0x11d0 [ 128.150663] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 128.151067] trace_irq_enable.constprop.0+0xa6/0x100 [ 128.151464] trace_hardirqs_on+0x26/0x40 [ 128.151785] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 128.152175] try_to_wake_up+0x8ae/0x11d0 [ 128.152502] ? __pfx_try_to_wake_up+0x10/0x10 [ 128.152861] ? plist_del+0x122/0x270 [ 128.153162] ? find_held_lock+0x2b/0x80 [ 128.153534] ? futex_wake+0x474/0x540 [ 128.153895] wake_up_q+0xa1/0x130 [ 128.154228] futex_wake+0x47e/0x540 [ 128.154574] ? __pfx_futex_wake+0x10/0x10 [ 128.154950] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 128.155429] ? finish_task_switch.isra.0+0x206/0x840 [ 128.155901] do_futex+0x26d/0x370 [ 128.156226] ? __pfx_do_futex+0x10/0x10 [ 128.156591] ? __pfx___schedule+0x10/0x10 [ 128.156971] __x64_sys_futex+0x1c9/0x4d0 [ 128.157349] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 128.157894] ? __pfx___x64_sys_futex+0x10/0x10 [ 128.158317] ? xfd_validate_state+0x55/0x180 [ 128.158732] do_syscall_64+0xbf/0x360 [ 128.159076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.159541] RIP: 0033:0x7f29d6bb0b19 [ 128.159875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.161493] RSP: 002b:00007ffee167aae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.162164] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f29d6bb0b19 [ 128.162803] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f29d6cc3f68 [ 128.163434] RBP: 00007f29d6cc3f60 R08: 00007f29d4126700 R09: 0000000000000000 [ 128.164067] R10: 00007f29d4126700 R11: 0000000000000246 R12: 00007f29d6cc8070 [ 128.164632] R13: 00007ffee167abf0 R14: 00007f29d6cc3f60 R15: 000000000001f404 [ 128.165194] [ 128.165397] Modules linked in: [ 128.165663] ---[ end trace 0000000000000000 ]--- [ 128.165667] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 128.166038] RIP: 0010:perf_tp_event+0x175/0xe70 [ 128.166933] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 128.167296] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 128.167890] CPU: 0 UID: 0 PID: 4483 Comm: syz-executor.6 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 128.169294] RSP: 0018:ffff8880406ff780 EFLAGS: 00010012 [ 128.170221] Tainted: [D]=DIE, [W]=WARN [ 128.170227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 128.170640] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 128.170940] RIP: 0010:perf_tp_event+0x175/0xe70 [ 128.171578] RDX: ffff888016c43700 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 128.172129] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 128.172491] RBP: ffff8880406ff9f0 R08: ffff88806cf31340 R09: ffffe8ffffd169c8 [ 128.173044] RSP: 0018:ffff888040757780 EFLAGS: 00010012 [ 128.174467] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 128.175021] [ 128.175026] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 128.175434] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 128.175982] RDX: ffff888016cd0000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 128.176125] FS: 0000555570b0f400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 128.176671] RBP: ffff8880407579f0 R08: ffff88806ce31340 R09: ffffe8ffffc169c8 [ 128.177227] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.177783] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 128.178409] CR2: 00007fce76d99000 CR3: 000000000e0dc000 CR4: 0000000000350ef0 [ 128.178962] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000 [ 128.179418] note: syz-executor.7[4480] exited with irqs disabled [ 128.179967] FS: 0000555583a6d400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 128.182157] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.182612] CR2: 0000555583a6ec18 CR3: 000000000e3a6000 CR4: 0000000000350ef0 [ 128.183171] Call Trace: [ 128.183380] [ 128.183561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.183983] ? __pfx_perf_tp_event+0x10/0x10 [ 128.184334] ? __mutex_trylock_common+0xf9/0x260 [ 128.184712] ? arch_scale_cpu_capacity+0x17/0xa0 [ 128.185096] ? cpu_util.constprop.0+0x17d/0x340 [ 128.185477] ? __asan_memset+0x24/0x50 [ 128.185793] ? sched_balance_find_dst_group+0xa9a/0x1c00 [ 128.186220] ? lock_release+0x1c7/0x290 [ 128.186544] ? __pfx___mutex_lock+0x10/0x10 [ 128.186894] ? __pfx_sched_balance_find_dst_group+0x10/0x10 [ 128.187338] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 128.187756] ? perf_trace_run_bpf_submit+0xef/0x180 [ 128.188151] ? sched_clock+0x37/0x60 [ 128.188452] ? sched_clock_cpu+0x6c/0x4e0 [ 128.188784] perf_trace_run_bpf_submit+0xef/0x180 [ 128.189172] perf_trace_preemptirq_template+0x259/0x430 [ 128.189603] ? __pick_eevdf+0x326/0x570 [ 128.189917] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 128.190383] ? update_curr+0x39e/0x500 [ 128.190694] ? check_preempt_wakeup_fair+0x406/0x950 [ 128.191095] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 128.191498] trace_irq_enable.constprop.0+0xa6/0x100 [ 128.191899] trace_hardirqs_on+0x26/0x40 [ 128.192217] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 128.192611] try_to_wake_up+0x8ae/0x11d0 [ 128.192939] ? __pfx_try_to_wake_up+0x10/0x10 [ 128.193300] ? plist_del+0x122/0x270 [ 128.193610] ? __futex_unqueue+0xda/0x1c0 [ 128.193941] wake_up_q+0xa1/0x130 [ 128.194228] futex_wake+0x47e/0x540 [ 128.194527] ? __pfx_futex_wake+0x10/0x10 [ 128.194855] ? xfd_validate_state+0x55/0x180 [ 128.195211] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 128.195623] ? finish_task_switch.isra.0+0x206/0x840 [ 128.196032] do_futex+0x26d/0x370 [ 128.196313] ? __pfx_do_futex+0x10/0x10 [ 128.196630] ? __pfx___schedule+0x10/0x10 [ 128.196960] __x64_sys_futex+0x1c9/0x4d0 [ 128.197283] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 128.197757] ? __pfx___x64_sys_futex+0x10/0x10 [ 128.198120] ? xfd_validate_state+0x55/0x180 [ 128.198480] do_syscall_64+0xbf/0x360 [ 128.198785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.199194] RIP: 0033:0x7f5ba4f9eb19 [ 128.199488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.200904] RSP: 002b:00007ffceee75fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.201502] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5ba4f9eb19 [ 128.202058] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5ba50b1f68 [ 128.202614] RBP: 00007f5ba50b1f60 R08: 00007f5ba2514700 R09: 0000000000000000 [ 128.203168] R10: 00007f5ba2514700 R11: 0000000000000246 R12: 00007f5ba50b6a68 [ 128.203721] R13: 00007ffceee760c0 R14: 00007f5ba50b1f60 R15: 000000000001f40d [ 128.204282] [ 128.204470] Modules linked in: [ 128.204731] ---[ end trace 0000000000000000 ]--- [ 128.204733] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#3] SMP KASAN NOPTI [ 128.205104] RIP: 0010:perf_tp_event+0x175/0xe70 [ 128.205985] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 128.206344] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 128.207015] CPU: 1 UID: 0 PID: 4480 Comm: syz-executor.7 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 128.208417] RSP: 0018:ffff8880406ff780 EFLAGS: 00010012 [ 128.209330] Tainted: [D]=DIE, [W]=WARN [ 128.209745] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 128.210053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 128.210605] RDX: ffff888016c43700 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 128.211248] RIP: 0010:perf_tp_event+0x175/0xe70 [ 128.211797] RBP: ffff8880406ff9f0 R08: ffff88806cf31340 R09: ffffe8ffffd169c8 [ 128.212159] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 128.212708] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 128.214137] RSP: 0018:ffff88806cf08b80 EFLAGS: 00010012 [ 128.214691] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 128.214694] [ 128.214703] FS: 0000555583a6d400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 128.215113] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 128.215664] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.215803] RDX: ffff888016c43700 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 128.216424] CR2: 0000555583a6ec18 CR3: 000000000e3a6000 CR4: 0000000000350ef0 [ 128.216975] RBP: ffff88806cf08df0 R08: ffff88806cf313e8 R09: ffffe8ffffd169c8 [ 128.217436] note: syz-executor.6[4483] exited with irqs disabled [ 128.217990] R10: 0000000000000000 R11: ffff88801d18c498 R12: dffffc0000000000 [ 128.220171] R13: 0000000000000014 R14: ffff88806cf313e8 R15: dffffc0000000000 [ 128.220738] FS: 0000555570b0f400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 128.221392] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.221941] CR2: 00007fce76d99000 CR3: 000000000e0dc000 CR4: 0000000000350ef0 [ 128.222594] Call Trace: [ 128.222836] [ 128.223047] ? __pfx_perf_tp_event+0x10/0x10 [ 128.223471] ? update_load_avg+0x17d/0x1ef0 [ 128.223869] ? __rb_insert_augmented+0x40e/0x8b0 [ 128.224314] ? check_preempt_wakeup_fair+0x6e/0x950 [ 128.224768] ? lock_release+0x1c7/0x290 [ 128.225137] ? lock_release+0x1c7/0x290 [ 128.225509] ? do_raw_spin_unlock+0x53/0x220 [ 128.225918] ? _raw_spin_unlock_irqrestore+0x22/0x50 [ 128.226383] ? try_to_wake_up+0x8ae/0x11d0 [ 128.226768] ? do_raw_spin_lock+0x123/0x260 [ 128.227163] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 128.227587] ? perf_trace_run_bpf_submit+0xef/0x180 [ 128.228043] perf_trace_run_bpf_submit+0xef/0x180 [ 128.228482] perf_trace_preemptirq_template+0x259/0x430 [ 128.228976] ? read_tsc+0x9/0x20 [ 128.229297] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 128.229840] ? clockevents_program_event+0x135/0x360 [ 128.230299] ? tick_program_event+0xac/0x140 [ 128.230702] ? handle_softirqs+0x16e/0x770 [ 128.231087] trace_irq_enable.constprop.0+0xa6/0x100 [ 128.231544] trace_hardirqs_on+0x26/0x40 [ 128.231908] handle_softirqs+0x16e/0x770 [ 128.232290] __irq_exit_rcu+0xc4/0x100 [ 128.232649] irq_exit_rcu+0x9/0x20 [ 128.232977] sysvec_apic_timer_interrupt+0x70/0x80 [ 128.233434] [ 128.233642] [ 128.233848] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 128.234323] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 128.234744] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de [ 128.236352] RSP: 0018:ffff8880406fff28 EFLAGS: 00000246 [ 128.236824] RAX: 0000000000000001 RBX: ffff888016c43700 RCX: ffffffff817c2b86 [ 128.237464] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 128.238094] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 128.238724] R10: ffffffff8643ac57 R11: 3030303030302043 R12: ffff888016c43700 [ 128.239351] R13: 0000000000000000 R14: dffffc0020000032 R15: 0000000000000000 [ 128.239989] ? trace_irq_enable.constprop.0+0x26/0x100 [ 128.240456] ? make_task_dead+0x214/0x3b0 [ 128.240839] ? make_task_dead+0x214/0x3b0 [ 128.241210] ? do_syscall_64+0xbf/0x360 [ 128.241581] rewind_stack_and_make_dead+0x16/0x20 [ 128.242018] RIP: 0033:0x7f29d6bb0b19 [ 128.242353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.243953] RSP: 002b:00007ffee167aae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.244629] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f29d6bb0b19 [ 128.245259] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f29d6cc3f68 [ 128.245900] RBP: 00007f29d6cc3f60 R08: 00007f29d4126700 R09: 0000000000000000 [ 128.246528] R10: 00007f29d4126700 R11: 0000000000000246 R12: 00007f29d6cc8070 [ 128.247159] R13: 00007ffee167abf0 R14: 00007f29d6cc3f60 R15: 000000000001f404 [ 128.247792] [ 128.248006] Modules linked in: [ 128.248301] ---[ end trace 0000000000000000 ]--- [ 128.248302] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#4] SMP KASAN NOPTI [ 128.248723] RIP: 0010:perf_tp_event+0x175/0xe70 [ 128.249610] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 128.250027] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 128.250631] CPU: 0 UID: 0 PID: 4483 Comm: syz-executor.6 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 128.252227] RSP: 0018:ffff8880406ff780 EFLAGS: 00010012 [ 128.253176] Tainted: [D]=DIE, [W]=WARN [ 128.253183] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 128.253669] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 128.253985] RIP: 0010:perf_tp_event+0x175/0xe70 [ 128.254721] RDX: ffff888016c43700 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 128.255286] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 128.255701] RBP: ffff8880406ff9f0 R08: ffff88806cf31340 R09: ffffe8ffffd169c8 [ 128.256266] RSP: 0018:ffff88806ce08b80 EFLAGS: 00010012 [ 128.257883] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 128.258453] [ 128.258458] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 128.258922] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 128.259487] RDX: ffff888016cd0000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 128.259652] FS: 0000555570b0f400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 128.260217] RBP: ffff88806ce08df0 R08: ffff88806ce313e8 R09: ffffe8ffffc169c8 [ 128.260856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.261426] R10: 0000000000000000 R11: ffff88803fe58898 R12: dffffc0000000000 [ 128.262139] CR2: 00007fce76d99000 CR3: 000000000e0dc000 CR4: 0000000000350ef0 [ 128.262710] R13: 0000000000000014 R14: ffff88806ce313e8 R15: dffffc0000000000 [ 128.263236] Kernel panic - not syncing: Fatal exception in interrupt [ 129.307476] Shutting down cpus with NMI [ 129.309991] Kernel Offset: disabled [ 129.310325] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 08:05:24 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84bdec0e RDX=fffffbfff0f0ec09 RSI=0000000000000004 RDI=ffffffff87876044 RBP=ffffffff87876044 RSP=ffff888040757530 R8 =0000000000000000 R9 =fffffbfff0f0ec08 R10=ffffffff87876047 R11=202c746c75616620 R12=1ffff110080eaea7 R13=0000000000000007 R14=fffffbfff0f0ec08 R15=ffff888040757568 RIP=ffffffff84bdeda0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555583a6d400 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555583a6ec18 CR3=000000000e3a6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f5ba50857c000007f5ba50857c8 XMM02=00007f5ba50857e000007f5ba50857c0 XMM03=00007f5ba50857c800007f5ba50857c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000003e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff8880406ff070 R8 =0000000000000000 R9 =ffffed10016d2046 R10=000000000000003e R11=0000000065646f43 R12=000000000000003e R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555570b0f400 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe3300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fce76d99000 CR3=000000000e0dc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f29d6c977c000007f29d6c977c8 XMM02=00007f29d6c977e000007f29d6c977c0 XMM03=00007f29d6c977c800007f29d6c977c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000