Warning: Permanently added '[localhost]:56373' (ECDSA) to the list of known hosts.
2025/09/01 08:43:54 fuzzer started
2025/09/01 08:43:55 dialing manager at localhost:35473
syzkaller login: [ 56.262792] cgroup: Unknown subsys name 'net'
[ 56.323150] cgroup: Unknown subsys name 'cpuset'
[ 56.347028] cgroup: Unknown subsys name 'rlimit'
2025/09/01 08:44:05 syscalls: 2214
2025/09/01 08:44:05 code coverage: enabled
2025/09/01 08:44:05 comparison tracing: enabled
2025/09/01 08:44:05 extra coverage: enabled
2025/09/01 08:44:05 setuid sandbox: enabled
2025/09/01 08:44:05 namespace sandbox: enabled
2025/09/01 08:44:05 Android sandbox: enabled
2025/09/01 08:44:05 fault injection: enabled
2025/09/01 08:44:05 leak checking: enabled
2025/09/01 08:44:05 net packet injection: enabled
2025/09/01 08:44:05 net device setup: enabled
2025/09/01 08:44:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/09/01 08:44:05 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/09/01 08:44:05 USB emulation: enabled
2025/09/01 08:44:05 hci packet injection: enabled
2025/09/01 08:44:05 wifi device emulation: enabled
2025/09/01 08:44:05 802.15.4 emulation: enabled
2025/09/01 08:44:05 fetching corpus: 0, signal 0/2000 (executing program)
2025/09/01 08:44:05 fetching corpus: 50, signal 26142/29375 (executing program)
2025/09/01 08:44:05 fetching corpus: 100, signal 37448/41795 (executing program)
2025/09/01 08:44:05 fetching corpus: 150, signal 45398/50716 (executing program)
2025/09/01 08:44:05 fetching corpus: 200, signal 51019/57212 (executing program)
2025/09/01 08:44:05 fetching corpus: 250, signal 58122/64940 (executing program)
2025/09/01 08:44:06 fetching corpus: 300, signal 62484/69985 (executing program)
2025/09/01 08:44:06 fetching corpus: 350, signal 67182/75170 (executing program)
2025/09/01 08:44:06 fetching corpus: 400, signal 69435/78118 (executing program)
2025/09/01 08:44:06 fetching corpus: 450, signal 72978/82072 (executing program)
2025/09/01 08:44:06 fetching corpus: 500, signal 76614/86000 (executing program)
2025/09/01 08:44:06 fetching corpus: 550, signal 78330/88281 (executing program)
2025/09/01 08:44:06 fetching corpus: 600, signal 80342/90744 (executing program)
2025/09/01 08:44:06 fetching corpus: 650, signal 82843/93559 (executing program)
2025/09/01 08:44:06 fetching corpus: 700, signal 86220/96979 (executing program)
2025/09/01 08:44:06 fetching corpus: 750, signal 88923/99731 (executing program)
2025/09/01 08:44:07 fetching corpus: 800, signal 90836/101841 (executing program)
2025/09/01 08:44:07 fetching corpus: 850, signal 92957/104055 (executing program)
2025/09/01 08:44:07 fetching corpus: 900, signal 94774/106007 (executing program)
2025/09/01 08:44:07 fetching corpus: 950, signal 96904/108171 (executing program)
2025/09/01 08:44:07 fetching corpus: 1000, signal 98216/109646 (executing program)
2025/09/01 08:44:07 fetching corpus: 1050, signal 100028/111426 (executing program)
2025/09/01 08:44:07 fetching corpus: 1100, signal 100937/112568 (executing program)
2025/09/01 08:44:07 fetching corpus: 1150, signal 103634/114752 (executing program)
2025/09/01 08:44:07 fetching corpus: 1200, signal 105569/116452 (executing program)
2025/09/01 08:44:08 fetching corpus: 1250, signal 107373/117988 (executing program)
2025/09/01 08:44:08 fetching corpus: 1300, signal 108493/119044 (executing program)
2025/09/01 08:44:08 fetching corpus: 1350, signal 109761/120176 (executing program)
2025/09/01 08:44:08 fetching corpus: 1400, signal 112351/121995 (executing program)
2025/09/01 08:44:08 fetching corpus: 1450, signal 114440/123472 (executing program)
2025/09/01 08:44:08 fetching corpus: 1500, signal 116006/124665 (executing program)
2025/09/01 08:44:08 fetching corpus: 1550, signal 117020/125488 (executing program)
2025/09/01 08:44:08 fetching corpus: 1600, signal 118107/126321 (executing program)
2025/09/01 08:44:09 fetching corpus: 1650, signal 118987/127074 (executing program)
2025/09/01 08:44:09 fetching corpus: 1700, signal 120995/128207 (executing program)
2025/09/01 08:44:09 fetching corpus: 1750, signal 122024/128854 (executing program)
2025/09/01 08:44:09 fetching corpus: 1800, signal 122766/129418 (executing program)
2025/09/01 08:44:09 fetching corpus: 1850, signal 124305/130227 (executing program)
2025/09/01 08:44:09 fetching corpus: 1900, signal 124960/130683 (executing program)
2025/09/01 08:44:09 fetching corpus: 1950, signal 125753/131171 (executing program)
2025/09/01 08:44:09 fetching corpus: 2000, signal 126747/131701 (executing program)
2025/09/01 08:44:09 fetching corpus: 2050, signal 127538/132128 (executing program)
2025/09/01 08:44:09 fetching corpus: 2100, signal 128553/132593 (executing program)
2025/09/01 08:44:10 fetching corpus: 2150, signal 129163/132894 (executing program)
2025/09/01 08:44:10 fetching corpus: 2200, signal 130822/133537 (executing program)
2025/09/01 08:44:10 fetching corpus: 2250, signal 131509/133783 (executing program)
2025/09/01 08:44:10 fetching corpus: 2300, signal 132556/134153 (executing program)
2025/09/01 08:44:10 fetching corpus: 2303, signal 132571/134188 (executing program)
2025/09/01 08:44:10 fetching corpus: 2303, signal 132571/134218 (executing program)
2025/09/01 08:44:10 fetching corpus: 2303, signal 132571/134253 (executing program)
2025/09/01 08:44:10 fetching corpus: 2303, signal 132571/134289 (executing program)
2025/09/01 08:44:10 fetching corpus: 2303, signal 132571/134319 (executing program)
2025/09/01 08:44:10 fetching corpus: 2303, signal 132571/134349 (executing program)
2025/09/01 08:44:10 fetching corpus: 2303, signal 132571/134395 (executing program)
2025/09/01 08:44:10 fetching corpus: 2303, signal 132571/134430 (executing program)
2025/09/01 08:44:10 fetching corpus: 2303, signal 132571/134466 (executing program)
2025/09/01 08:44:10 fetching corpus: 2303, signal 132571/134492 (executing program)
2025/09/01 08:44:10 fetching corpus: 2303, signal 132571/134521 (executing program)
2025/09/01 08:44:10 fetching corpus: 2303, signal 132571/134553 (executing program)
2025/09/01 08:44:10 fetching corpus: 2303, signal 132571/134589 (executing program)
2025/09/01 08:44:10 fetching corpus: 2303, signal 132571/134622 (executing program)
2025/09/01 08:44:10 fetching corpus: 2303, signal 132571/134652 (executing program)
2025/09/01 08:44:10 fetching corpus: 2303, signal 132571/134684 (executing program)
2025/09/01 08:44:10 fetching corpus: 2303, signal 132571/134723 (executing program)
2025/09/01 08:44:10 fetching corpus: 2303, signal 132571/134757 (executing program)
2025/09/01 08:44:10 fetching corpus: 2303, signal 132571/134792 (executing program)
2025/09/01 08:44:10 fetching corpus: 2303, signal 132571/134815 (executing program)
2025/09/01 08:44:10 fetching corpus: 2303, signal 132571/134815 (executing program)
2025/09/01 08:44:12 starting 8 fuzzer processes
08:44:12 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01ff07000000000000001f"], 0x1c}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0)
08:44:12 executing program 1:
pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4000)
08:44:12 executing program 6:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001d00))
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
writev(r0, &(0x7f0000001840)=[{&(0x7f0000000000)='-', 0x1}, {&(0x7f0000001780)="a8", 0x1}], 0x2)
08:44:12 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f8", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[])
08:44:13 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00')
pread64(r0, &(0x7f00000001c0)=""/4096, 0x1000, 0x0)
08:44:13 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001540), 0x8)
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000280)=@routing, 0x8)
08:44:13 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)='F', 0x1}], 0x1)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
[ 73.901539] audit: type=1400 audit(1756716253.073:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
08:44:13 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x1d}, {0x6}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
[ 75.070155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 75.072233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 75.074239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 75.078481] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 75.081926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 75.131247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 75.135578] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 75.144094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 75.148208] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 75.153433] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 75.214429] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 75.219989] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 75.221625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 75.226034] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 75.228925] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 75.254967] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 75.259080] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 75.261040] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 75.266478] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 75.271296] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 75.273607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 75.275907] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 75.277476] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 75.281383] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 75.283822] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 75.285462] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 75.289799] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 75.293366] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 75.298012] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 75.299316] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 75.303992] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 75.306190] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 75.307755] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 75.315362] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 75.321996] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 75.325855] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 75.338942] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 75.355962] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 75.358868] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 75.372260] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 77.099947] Bluetooth: hci0: command tx timeout
[ 77.227559] Bluetooth: hci1: command tx timeout
[ 77.355685] Bluetooth: hci4: command tx timeout
[ 77.356413] Bluetooth: hci7: command tx timeout
[ 77.356454] Bluetooth: hci2: command tx timeout
[ 77.421530] Bluetooth: hci3: command tx timeout
[ 77.421610] Bluetooth: hci6: command tx timeout
[ 77.484550] Bluetooth: hci5: command tx timeout
[ 79.147961] Bluetooth: hci0: command tx timeout
[ 79.275667] Bluetooth: hci1: command tx timeout
[ 79.403715] Bluetooth: hci4: command tx timeout
[ 79.403818] Bluetooth: hci2: command tx timeout
[ 79.404255] Bluetooth: hci7: command tx timeout
[ 79.469520] Bluetooth: hci3: command tx timeout
[ 79.469939] Bluetooth: hci6: command tx timeout
[ 79.532526] Bluetooth: hci5: command tx timeout
[ 81.196560] Bluetooth: hci0: command tx timeout
[ 81.323635] Bluetooth: hci1: command tx timeout
[ 81.451661] Bluetooth: hci2: command tx timeout
[ 81.455526] Bluetooth: hci7: command tx timeout
[ 81.455912] Bluetooth: hci4: command tx timeout
[ 81.515689] Bluetooth: hci6: command tx timeout
[ 81.516111] Bluetooth: hci3: command tx timeout
[ 81.579615] Bluetooth: hci5: command tx timeout
[ 83.243570] Bluetooth: hci0: command tx timeout
[ 83.372589] Bluetooth: hci1: command tx timeout
[ 83.500550] Bluetooth: hci4: command tx timeout
[ 83.500990] Bluetooth: hci7: command tx timeout
[ 83.501373] Bluetooth: hci2: command tx timeout
[ 83.563578] Bluetooth: hci3: command tx timeout
[ 83.564011] Bluetooth: hci6: command tx timeout
[ 83.627530] Bluetooth: hci5: command tx timeout
[ 111.797904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.798575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.002516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.003135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.152154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.152786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.303391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.304042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.361647] audit: type=1400 audit(1756716291.530:8): avc: denied { open } for pid=3857 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 112.366663] audit: type=1400 audit(1756716291.530:9): avc: denied { kernel } for pid=3857 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 112.427085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.427793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:44:51 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)='F', 0x1}], 0x1)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
[ 112.517922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.518544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.536754] loop7: detected capacity change from 0 to 6
[ 112.545821] FAT-fs (loop7): bogus number of FAT sectors
[ 112.546312] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 112.559312] loop7: detected capacity change from 0 to 6
08:44:51 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)='F', 0x1}], 0x1)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
[ 112.563530] FAT-fs (loop7): bogus number of FAT sectors
[ 112.563982] FAT-fs (loop7): Can't find a valid FAT filesystem
08:44:51 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f8", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[])
[ 112.609146] loop7: detected capacity change from 0 to 6
[ 112.611852] FAT-fs (loop7): bogus number of FAT sectors
[ 112.612287] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 112.615266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.615888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:44:51 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f8", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[])
[ 112.654264] loop7: detected capacity change from 0 to 6
08:44:51 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)='F', 0x1}], 0x1)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
[ 112.663186] FAT-fs (loop7): bogus number of FAT sectors
[ 112.663765] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 112.674768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.675335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:44:51 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f8", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[])
[ 112.718990] loop7: detected capacity change from 0 to 6
[ 112.722047] FAT-fs (loop7): bogus number of FAT sectors
[ 112.722579] FAT-fs (loop7): Can't find a valid FAT filesystem
08:44:51 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}]}, 0x1c}}, 0x0)
[ 112.751885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.752473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.812617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.813237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.858811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.859407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:44:52 executing program 7:
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000003)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg0\x00'})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, 0x0}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0)
migrate_pages(0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=0xffffffff, &(0x7f0000000d00)=0x10001)
sendmsg$IPVS_CMD_SET_CONFIG(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
[ 112.907814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.908420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.950554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.951156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.014996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.015674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.067041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.067681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.092118] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 113.170032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.171103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.312064] audit: type=1326 audit(1756716292.483:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3919 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc26aebb19 code=0x0
[ 114.146453] audit: type=1326 audit(1756716293.318:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3919 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc26aebb19 code=0x0
08:44:53 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00')
pread64(r0, &(0x7f00000001c0)=""/4096, 0x1000, 0x0)
08:44:53 executing program 7:
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000003)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg0\x00'})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, 0x0}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0)
migrate_pages(0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=0xffffffff, &(0x7f0000000d00)=0x10001)
sendmsg$IPVS_CMD_SET_CONFIG(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
08:44:53 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}]}, 0x1c}}, 0x0)
08:44:53 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001540), 0x8)
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000280)=@routing, 0x8)
08:44:53 executing program 1:
pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4000)
08:44:53 executing program 6:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001d00))
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
writev(r0, &(0x7f0000001840)=[{&(0x7f0000000000)='-', 0x1}, {&(0x7f0000001780)="a8", 0x1}], 0x2)
08:44:53 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01ff07000000000000001f"], 0x1c}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0)
08:44:53 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x1d}, {0x6}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
[ 114.262201] audit: type=1326 audit(1756716293.433:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3935 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc26aebb19 code=0x0
08:44:53 executing program 1:
pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4000)
08:44:53 executing program 6:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001d00))
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
writev(r0, &(0x7f0000001840)=[{&(0x7f0000000000)='-', 0x1}, {&(0x7f0000001780)="a8", 0x1}], 0x2)
08:44:53 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001540), 0x8)
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000280)=@routing, 0x8)
08:44:53 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01ff07000000000000001f"], 0x1c}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0)
08:44:53 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}]}, 0x1c}}, 0x0)
08:44:53 executing program 1:
pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4000)
08:44:54 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00')
pread64(r0, &(0x7f00000001c0)=""/4096, 0x1000, 0x0)
08:44:54 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x1d}, {0x6}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
08:44:54 executing program 6:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001d00))
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
writev(r0, &(0x7f0000001840)=[{&(0x7f0000000000)='-', 0x1}, {&(0x7f0000001780)="a8", 0x1}], 0x2)
08:44:54 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x1d}, {0x6}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
08:44:54 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001540), 0x8)
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000280)=@routing, 0x8)
08:44:54 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}]}, 0x1c}}, 0x0)
08:44:54 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01ff07000000000000001f"], 0x1c}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0)
08:44:54 executing program 7:
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000003)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg0\x00'})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, 0x0}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0)
migrate_pages(0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=0xffffffff, &(0x7f0000000d00)=0x10001)
sendmsg$IPVS_CMD_SET_CONFIG(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
08:44:54 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00')
pread64(r0, &(0x7f00000001c0)=""/4096, 0x1000, 0x0)
[ 115.190318] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI
[ 115.191229] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 115.191914] CPU: 0 UID: 0 PID: 3967 Comm: syz-executor.6 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
[ 115.193785] Tainted: [W]=WARN
[ 115.194565] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 115.196326] RIP: 0010:perf_tp_event+0x175/0xe70
[ 115.197764] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 115.201286] RSP: 0018:ffff888045897800 EFLAGS: 00010212
[ 115.201720] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 115.202277] RDX: ffff88800f3fb700 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[ 115.202837] RBP: ffff888045897a70 R08: ffff88806ce31340 R09: ffffe8ffffc15d30
[ 115.203395] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 115.203959] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[ 115.204522] FS: 000055555d6b4400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[ 115.205159] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 115.205618] CR2: 000055557c457c18 CR3: 000000000a097000 CR4: 0000000000350ef0
[ 115.206191] Call Trace:
[ 115.206401]
[ 115.206590] ? __pfx_perf_tp_event+0x10/0x10
[ 115.206955] ? __virt_addr_valid+0x2e8/0x5d0
[ 115.207318] ? lock_release+0xc8/0x290
[ 115.207638] ? mark_held_locks+0x49/0x80
[ 115.207967] ? kasan_quarantine_put+0x84/0x1e0
[ 115.208339] ? kmem_cache_free+0x2a1/0x540
[ 115.208675] ? jbd2_journal_stop+0x5d5/0xe20
[ 115.209039] ? __lock_acquire+0xc65/0x1b70
[ 115.209384] ? perf_trace_run_bpf_submit+0xef/0x180
[ 115.209792] perf_trace_run_bpf_submit+0xef/0x180
[ 115.210187] perf_trace_lock+0x337/0x5d0
[ 115.210518] ? __pfx_perf_trace_lock+0x10/0x10
[ 115.210890] ? lock_acquire+0x15e/0x2f0
[ 115.211209] ? futex_ref_get+0x48/0x300
[ 115.211530] ? futex_ref_get+0x114/0x300
[ 115.211853] ? futex_hash+0x15c/0x390
[ 115.212159] lock_release+0x1ab/0x290
[ 115.212469] ? futex_hash+0x15c/0x390
[ 115.212778] futex_ref_get+0x119/0x300
[ 115.213094] ? futex_hash+0x15c/0x390
[ 115.213398] futex_hash+0x70/0x390
[ 115.213690] futex_wake+0x143/0x540
[ 115.213994] ? fput+0x6a/0x100
[ 115.214262] ? fault_dirty_shared_page+0x17c/0x640
[ 115.214655] ? __pfx_futex_wake+0x10/0x10
[ 115.214987] ? __handle_mm_fault+0x753/0x3260
[ 115.215352] ? perf_trace_lock+0xb5/0x5d0
[ 115.215687] do_futex+0x26d/0x370
[ 115.215970] ? __pfx_do_futex+0x10/0x10
[ 115.216291] ? find_held_lock+0x2b/0x80
[ 115.216616] __x64_sys_futex+0x1c9/0x4d0
[ 115.216943] ? handle_mm_fault+0x302/0x9b0
[ 115.217284] ? __pfx___x64_sys_futex+0x10/0x10
[ 115.217651] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 115.218075] do_syscall_64+0xbf/0x360
[ 115.218382] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 115.218791] RIP: 0033:0x7f5aeff2bb19
[ 115.219085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 115.220495] RSP: 002b:00007ffdbbf3e008 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 115.221088] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5aeff2bb19
[ 115.221645] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5af003ef68
[ 115.222217] RBP: 00007f5af003ef60 R08: 00007f5af003b0a0 R09: 0000000000000000
[ 115.222771] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5af00432d8
[ 115.223329] R13: 00007ffdbbf3e110 R14: 00007f5af003ef60 R15: 000000000001c176
[ 115.223891]
[ 115.224081] Modules linked in:
[ 115.224377] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI
[ 115.225245] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 115.225843] CPU: 0 UID: 0 PID: 3967 Comm: syz-executor.6 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
[ 115.226771] Tainted: [D]=DIE, [W]=WARN
[ 115.227073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 115.227711] RIP: 0010:perf_tp_event+0x175/0xe70
[ 115.228086] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 115.229500] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012
[ 115.229929] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 115.230484] RDX: ffff88800f3fb700 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[ 115.231039] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc15d30
[ 115.231593] R10: 0000000000000000 R11: ffff88806ce37018 R12: dffffc0000000000
[ 115.232145] R13: 0000000000000024 R14: ffff88806ce31490 R15: dffffc0000000000
[ 115.232704] FS: 000055555d6b4400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[ 115.233324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 115.233785] CR2: 000055557c457c18 CR3: 000000000a097000 CR4: 0000000000350ef0
[ 115.234340] Call Trace:
[ 115.234544]
[ 115.234717] ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[ 115.235189] ? __pfx_perf_tp_event+0x10/0x10
[ 115.235549] ? napi_complete_done+0x40c/0x830
[ 115.235909] ? __pfx_napi_complete_done+0x10/0x10
[ 115.236291] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 115.236702] ? e1000_update_itr+0x9f/0x280
[ 115.237038] ? e1000_clean+0xe9d/0x2540
[ 115.237355] ? kvm_sched_clock_read+0x16/0x30
[ 115.237808] ? sched_clock+0x37/0x60
[ 115.238160] ? sched_clock_cpu+0x6c/0x4e0
[ 115.238553] ? perf_trace_run_bpf_submit+0xef/0x180
[ 115.239010] perf_trace_run_bpf_submit+0xef/0x180
[ 115.239456] perf_trace_lock+0x337/0x5d0
[ 115.239833] ? place_entity+0x300/0x410
[ 115.240201] ? kvm_sched_clock_read+0x16/0x30
[ 115.240620] ? __pfx_perf_trace_lock+0x10/0x10
[ 115.241042] ? check_preempt_wakeup_fair+0x6e/0x950
[ 115.241498] ? sched_ttwu_pending+0x2e0/0x4a0
[ 115.241929] lock_release+0x1ab/0x290
[ 115.242278] ? ttwu_do_activate+0x1a4/0x8a0
[ 115.242676] _raw_spin_unlock+0x16/0x40
[ 115.243042] sched_ttwu_pending+0x2e0/0x4a0
[ 115.243440] ? __pfx_sched_ttwu_pending+0x10/0x10
[ 115.243888] ? mark_held_locks+0x49/0x80
[ 115.244261] __flush_smp_call_function_queue+0x434/0x740
[ 115.244758] __sysvec_call_function_single+0x6d/0x370
[ 115.245231] sysvec_call_function_single+0xa1/0xc0
[ 115.245679]
[ 115.245898]
[ 115.246108] asm_sysvec_call_function_single+0x1a/0x20
[ 115.246579] RIP: 0010:oops_exit+0x0/0x50
[ 115.246955] Code: 00 3a 00 be ff ff ff ff 48 c7 c7 50 b4 43 86 e8 c6 0f f9 ff 5b e9 50 00 3a 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 36 00 3a 00 8b 1d c0 3d 4f 06 31 ff 89 de e8 57
[ 115.248565] RSP: 0018:ffff888045897690 EFLAGS: 00000202
[ 115.249044] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff8139f06f
[ 115.249678] RDX: ffff88800f3fb700 RSI: ffffffff812a3dca RDI: 0000000000000007
[ 115.250320] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f12690
[ 115.250960] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888045897758
[ 115.251589] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000
[ 115.252223] ? add_taint+0x5f/0xd0
[ 115.252551] ? oops_end+0x4a/0xe0
[ 115.252877] oops_end+0x65/0xe0
[ 115.253190] exc_general_protection+0x1a2/0x330
[ 115.253618] asm_exc_general_protection+0x26/0x30
[ 115.254063] RIP: 0010:perf_tp_event+0x175/0xe70
[ 115.254489] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 115.256102] RSP: 0018:ffff888045897800 EFLAGS: 00010212
[ 115.256575] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 115.257207] RDX: ffff88800f3fb700 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[ 115.257845] RBP: ffff888045897a70 R08: ffff88806ce31340 R09: ffffe8ffffc15d30
[ 115.258486] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 115.259118] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[ 115.259756] ? perf_tp_event+0x167/0xe70
[ 115.260138] ? __pfx_perf_tp_event+0x10/0x10
[ 115.260546] ? __virt_addr_valid+0x2e8/0x5d0
[ 115.260950] ? lock_release+0xc8/0x290
[ 115.261306] ? mark_held_locks+0x49/0x80
[ 115.261675] ? kasan_quarantine_put+0x84/0x1e0
[ 115.262102] ? kmem_cache_free+0x2a1/0x540
[ 115.262485] ? jbd2_journal_stop+0x5d5/0xe20
[ 115.262892] ? __lock_acquire+0xc65/0x1b70
[ 115.263278] ? perf_trace_run_bpf_submit+0xef/0x180
[ 115.263730] perf_trace_run_bpf_submit+0xef/0x180
[ 115.264175] perf_trace_lock+0x337/0x5d0
[ 115.264551] ? __pfx_perf_trace_lock+0x10/0x10
[ 115.264970] ? lock_acquire+0x15e/0x2f0
[ 115.265330] ? futex_ref_get+0x48/0x300
[ 115.265706] ? futex_ref_get+0x114/0x300
[ 115.266072] ? futex_hash+0x15c/0x390
[ 115.266417] lock_release+0x1ab/0x290
[ 115.266769] ? futex_hash+0x15c/0x390
[ 115.267079] futex_ref_get+0x119/0x300
[ 115.267394] ? futex_hash+0x15c/0x390
[ 115.267696] futex_hash+0x70/0x390
[ 115.267986] futex_wake+0x143/0x540
[ 115.268284] ? fput+0x6a/0x100
[ 115.268552] ? fault_dirty_shared_page+0x17c/0x640
[ 115.268944] ? __pfx_futex_wake+0x10/0x10
[ 115.269282] ? __handle_mm_fault+0x753/0x3260
[ 115.269647] ? perf_trace_lock+0xb5/0x5d0
[ 115.269998] do_futex+0x26d/0x370
[ 115.270285] ? __pfx_do_futex+0x10/0x10
[ 115.270607] ? find_held_lock+0x2b/0x80
[ 115.270931] __x64_sys_futex+0x1c9/0x4d0
[ 115.271260] ? handle_mm_fault+0x302/0x9b0
[ 115.271602] ? __pfx___x64_sys_futex+0x10/0x10
[ 115.271977] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 115.272396] do_syscall_64+0xbf/0x360
[ 115.272703] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 115.273111] RIP: 0033:0x7f5aeff2bb19
[ 115.273409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 115.274820] RSP: 002b:00007ffdbbf3e008 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 115.275411] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5aeff2bb19
[ 115.275962] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5af003ef68
[ 115.276513] RBP: 00007f5af003ef60 R08: 00007f5af003b0a0 R09: 0000000000000000
[ 115.277069] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5af00432d8
[ 115.277624] R13: 00007ffdbbf3e110 R14: 00007f5af003ef60 R15: 000000000001c176
[ 115.278193]
[ 115.278383] Modules linked in:
[ 115.278642] ---[ end trace 0000000000000000 ]---
[ 115.279012] RIP: 0010:perf_tp_event+0x175/0xe70
[ 115.279384] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 115.280779] RSP: 0018:ffff888045897800 EFLAGS: 00010212
[ 115.281198] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 115.281755] RDX: ffff88800f3fb700 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[ 115.282308] RBP: ffff888045897a70 R08: ffff88806ce31340 R09: ffffe8ffffc15d30
[ 115.282863] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 115.283416] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[ 115.283969] FS: 000055555d6b4400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[ 115.284590] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 115.285047] CR2: 000055557c457c18 CR3: 000000000a097000 CR4: 0000000000350ef0
[ 115.285606] Kernel panic - not syncing: Fatal exception in interrupt
[ 116.371502] Shutting down cpus with NMI
[ 116.372528] Kernel Offset: disabled
[ 116.373105] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---
VM DIAGNOSIS:
08:44:54 Registers:
info registers vcpu 0
RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff888045897158
R8 =0000000000000000 R9 =ffffed10016d4046 R10=0000000000000074 R11=30376578302f4952
R12=0000000000000074 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0
RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055555d6b4400 00000000 00000000
GS =0000 ffff8880e55d8000 00000000 00000000
LDT=0000 fffffe6300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=000055557c457c18 CR3=000000000a097000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff0000000000000000ff000000000000 XMM01=01000000000000000001000000000000
XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007f5af00127c800007f5af00127c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=1ffffffff0d8bcd1 RBX=0000000000000001 RCX=ffffffff86c5e68c RDX=0000000000000000
RSI=dffffc0000000000 RDI=ffffffff86c5e68e RBP=ffff888013f7f9f8 RSP=ffff888013f7f930
R8 =ffffffff86c5e690 R9 =ffff888013f7f9e0 R10=000000000003bea3 R11=00000000000c5f1c
R12=ffff888013f7fa00 R13=ffff888013f7f9e8 R14=ffff888013f7ff58 R15=ffff888013f7f9a0
RIP=ffffffff81359a29 RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f7d4bd7d8c0 00000000 00000000
GS =0000 ffff8880e56d8000 00000000 00000000
LDT=0000 fffffe4f00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=000055556ce99c18 CR3=000000000c04d000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2c2c2c2c2c2c2c2c2c2c2c2c2c2c2c2c XMM01=00000000ff0000000000000000000000
XMM02=00000000ff0000000000000000000000 XMM03=747269762f736563697665642f737973
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=3d5145534b534944006b7369643d4550
XMM06=3d454d414e56454400303d444955555f XMM07=00000000000000000000000000000000
XMM08=703e2d73004c414954494e495f544e45 XMM09=00000000000000000000000000000000
XMM10=00000000200000000000000020000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000