Warning: Permanently added '[localhost]:39157' (ECDSA) to the list of known hosts.
2025/09/01 10:06:54 fuzzer started
2025/09/01 10:06:55 dialing manager at localhost:35473
syzkaller login: [ 44.064758] cgroup: Unknown subsys name 'net'
[ 44.122617] cgroup: Unknown subsys name 'cpuset'
[ 44.134745] cgroup: Unknown subsys name 'rlimit'
2025/09/01 10:07:06 syscalls: 2214
2025/09/01 10:07:06 code coverage: enabled
2025/09/01 10:07:06 comparison tracing: enabled
2025/09/01 10:07:06 extra coverage: enabled
2025/09/01 10:07:06 setuid sandbox: enabled
2025/09/01 10:07:06 namespace sandbox: enabled
2025/09/01 10:07:06 Android sandbox: enabled
2025/09/01 10:07:06 fault injection: enabled
2025/09/01 10:07:06 leak checking: enabled
2025/09/01 10:07:06 net packet injection: enabled
2025/09/01 10:07:06 net device setup: enabled
2025/09/01 10:07:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/09/01 10:07:06 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/09/01 10:07:06 USB emulation: enabled
2025/09/01 10:07:06 hci packet injection: enabled
2025/09/01 10:07:06 wifi device emulation: enabled
2025/09/01 10:07:06 802.15.4 emulation: enabled
2025/09/01 10:07:06 fetching corpus: 0, signal 0/2000 (executing program)
2025/09/01 10:07:06 fetching corpus: 50, signal 22125/25595 (executing program)
2025/09/01 10:07:06 fetching corpus: 100, signal 37432/42096 (executing program)
2025/09/01 10:07:07 fetching corpus: 150, signal 43081/49061 (executing program)
2025/09/01 10:07:07 fetching corpus: 200, signal 46837/54089 (executing program)
2025/09/01 10:07:07 fetching corpus: 250, signal 51754/60092 (executing program)
2025/09/01 10:07:07 fetching corpus: 300, signal 56561/65852 (executing program)
2025/09/01 10:07:07 fetching corpus: 350, signal 59185/69578 (executing program)
2025/09/01 10:07:07 fetching corpus: 400, signal 61063/72507 (executing program)
2025/09/01 10:07:07 fetching corpus: 450, signal 64409/76703 (executing program)
2025/09/01 10:07:07 fetching corpus: 500, signal 66941/80139 (executing program)
2025/09/01 10:07:07 fetching corpus: 550, signal 70700/84554 (executing program)
2025/09/01 10:07:07 fetching corpus: 600, signal 74073/88521 (executing program)
2025/09/01 10:07:07 fetching corpus: 650, signal 77805/92775 (executing program)
2025/09/01 10:07:07 fetching corpus: 700, signal 79425/95227 (executing program)
2025/09/01 10:07:08 fetching corpus: 750, signal 81312/97780 (executing program)
2025/09/01 10:07:08 fetching corpus: 800, signal 83238/100380 (executing program)
2025/09/01 10:07:08 fetching corpus: 850, signal 85759/103341 (executing program)
2025/09/01 10:07:08 fetching corpus: 900, signal 88029/106073 (executing program)
2025/09/01 10:07:08 fetching corpus: 950, signal 89652/108269 (executing program)
2025/09/01 10:07:08 fetching corpus: 1000, signal 91182/110357 (executing program)
2025/09/01 10:07:08 fetching corpus: 1050, signal 92836/112462 (executing program)
2025/09/01 10:07:08 fetching corpus: 1100, signal 94209/114347 (executing program)
2025/09/01 10:07:09 fetching corpus: 1150, signal 95816/116383 (executing program)
2025/09/01 10:07:09 fetching corpus: 1200, signal 97425/118339 (executing program)
2025/09/01 10:07:09 fetching corpus: 1250, signal 101010/121676 (executing program)
2025/09/01 10:07:09 fetching corpus: 1300, signal 102403/123434 (executing program)
2025/09/01 10:07:09 fetching corpus: 1350, signal 103635/125042 (executing program)
2025/09/01 10:07:09 fetching corpus: 1400, signal 105273/126859 (executing program)
2025/09/01 10:07:09 fetching corpus: 1450, signal 106080/128139 (executing program)
2025/09/01 10:07:09 fetching corpus: 1500, signal 107106/129504 (executing program)
2025/09/01 10:07:09 fetching corpus: 1550, signal 108007/130783 (executing program)
2025/09/01 10:07:09 fetching corpus: 1600, signal 109043/132165 (executing program)
2025/09/01 10:07:09 fetching corpus: 1650, signal 111000/134048 (executing program)
2025/09/01 10:07:10 fetching corpus: 1700, signal 112290/135543 (executing program)
2025/09/01 10:07:10 fetching corpus: 1750, signal 113170/136765 (executing program)
2025/09/01 10:07:10 fetching corpus: 1800, signal 115459/138701 (executing program)
2025/09/01 10:07:10 fetching corpus: 1850, signal 116421/139862 (executing program)
2025/09/01 10:07:10 fetching corpus: 1900, signal 117886/141351 (executing program)
2025/09/01 10:07:10 fetching corpus: 1950, signal 119246/142681 (executing program)
2025/09/01 10:07:10 fetching corpus: 2000, signal 121198/144257 (executing program)
2025/09/01 10:07:10 fetching corpus: 2050, signal 122349/145402 (executing program)
2025/09/01 10:07:10 fetching corpus: 2100, signal 123322/146417 (executing program)
2025/09/01 10:07:11 fetching corpus: 2150, signal 124420/147440 (executing program)
2025/09/01 10:07:11 fetching corpus: 2200, signal 125382/148390 (executing program)
2025/09/01 10:07:11 fetching corpus: 2250, signal 126299/149336 (executing program)
2025/09/01 10:07:11 fetching corpus: 2300, signal 127156/150225 (executing program)
2025/09/01 10:07:11 fetching corpus: 2350, signal 128439/151234 (executing program)
2025/09/01 10:07:11 fetching corpus: 2400, signal 129327/152078 (executing program)
2025/09/01 10:07:11 fetching corpus: 2450, signal 130061/152863 (executing program)
2025/09/01 10:07:11 fetching corpus: 2500, signal 131160/153766 (executing program)
2025/09/01 10:07:11 fetching corpus: 2550, signal 131822/154480 (executing program)
2025/09/01 10:07:11 fetching corpus: 2600, signal 132563/155228 (executing program)
2025/09/01 10:07:11 fetching corpus: 2650, signal 133573/156138 (executing program)
2025/09/01 10:07:12 fetching corpus: 2700, signal 134519/156877 (executing program)
2025/09/01 10:07:12 fetching corpus: 2750, signal 135372/157517 (executing program)
2025/09/01 10:07:12 fetching corpus: 2800, signal 136048/158164 (executing program)
2025/09/01 10:07:12 fetching corpus: 2850, signal 137040/158917 (executing program)
2025/09/01 10:07:12 fetching corpus: 2900, signal 137806/159525 (executing program)
2025/09/01 10:07:12 fetching corpus: 2950, signal 138530/160091 (executing program)
2025/09/01 10:07:12 fetching corpus: 3000, signal 139101/160606 (executing program)
2025/09/01 10:07:12 fetching corpus: 3050, signal 139874/161176 (executing program)
2025/09/01 10:07:12 fetching corpus: 3100, signal 140528/161713 (executing program)
2025/09/01 10:07:12 fetching corpus: 3150, signal 141217/162228 (executing program)
2025/09/01 10:07:13 fetching corpus: 3200, signal 141841/162747 (executing program)
2025/09/01 10:07:13 fetching corpus: 3250, signal 142535/163189 (executing program)
2025/09/01 10:07:13 fetching corpus: 3300, signal 143445/163695 (executing program)
2025/09/01 10:07:13 fetching corpus: 3350, signal 143878/164074 (executing program)
2025/09/01 10:07:13 fetching corpus: 3400, signal 144470/164490 (executing program)
2025/09/01 10:07:13 fetching corpus: 3450, signal 145259/164980 (executing program)
2025/09/01 10:07:13 fetching corpus: 3500, signal 145677/165325 (executing program)
2025/09/01 10:07:13 fetching corpus: 3550, signal 146111/165636 (executing program)
2025/09/01 10:07:13 fetching corpus: 3600, signal 146627/165986 (executing program)
2025/09/01 10:07:13 fetching corpus: 3650, signal 147034/166261 (executing program)
2025/09/01 10:07:14 fetching corpus: 3700, signal 147350/166554 (executing program)
2025/09/01 10:07:14 fetching corpus: 3750, signal 147766/166950 (executing program)
2025/09/01 10:07:14 fetching corpus: 3800, signal 148415/167279 (executing program)
2025/09/01 10:07:14 fetching corpus: 3850, signal 148890/167558 (executing program)
2025/09/01 10:07:14 fetching corpus: 3900, signal 149364/167842 (executing program)
2025/09/01 10:07:14 fetching corpus: 3950, signal 149842/168137 (executing program)
2025/09/01 10:07:14 fetching corpus: 4000, signal 150370/168370 (executing program)
2025/09/01 10:07:14 fetching corpus: 4050, signal 150810/168685 (executing program)
2025/09/01 10:07:14 fetching corpus: 4100, signal 151115/168908 (executing program)
2025/09/01 10:07:14 fetching corpus: 4150, signal 151492/168952 (executing program)
2025/09/01 10:07:14 fetching corpus: 4200, signal 152396/168956 (executing program)
2025/09/01 10:07:15 fetching corpus: 4250, signal 152990/169006 (executing program)
2025/09/01 10:07:15 fetching corpus: 4300, signal 153585/169012 (executing program)
2025/09/01 10:07:15 fetching corpus: 4350, signal 154128/169017 (executing program)
2025/09/01 10:07:15 fetching corpus: 4400, signal 154622/169039 (executing program)
2025/09/01 10:07:15 fetching corpus: 4450, signal 155058/169039 (executing program)
2025/09/01 10:07:15 fetching corpus: 4500, signal 155342/169052 (executing program)
2025/09/01 10:07:15 fetching corpus: 4550, signal 155605/169052 (executing program)
2025/09/01 10:07:15 fetching corpus: 4600, signal 156216/169053 (executing program)
2025/09/01 10:07:16 fetching corpus: 4650, signal 156786/169053 (executing program)
2025/09/01 10:07:16 fetching corpus: 4700, signal 157551/169068 (executing program)
2025/09/01 10:07:16 fetching corpus: 4750, signal 158142/169073 (executing program)
2025/09/01 10:07:16 fetching corpus: 4800, signal 158612/169074 (executing program)
2025/09/01 10:07:16 fetching corpus: 4850, signal 159026/169084 (executing program)
2025/09/01 10:07:16 fetching corpus: 4900, signal 159371/169094 (executing program)
2025/09/01 10:07:16 fetching corpus: 4950, signal 159797/169115 (executing program)
2025/09/01 10:07:16 fetching corpus: 5000, signal 161486/169143 (executing program)
2025/09/01 10:07:16 fetching corpus: 5050, signal 161905/169144 (executing program)
2025/09/01 10:07:16 fetching corpus: 5100, signal 162397/169148 (executing program)
2025/09/01 10:07:16 fetching corpus: 5150, signal 162837/169149 (executing program)
2025/09/01 10:07:17 fetching corpus: 5200, signal 163434/169155 (executing program)
2025/09/01 10:07:17 fetching corpus: 5250, signal 163847/169161 (executing program)
2025/09/01 10:07:17 fetching corpus: 5300, signal 164156/169171 (executing program)
2025/09/01 10:07:17 fetching corpus: 5350, signal 164643/169202 (executing program)
2025/09/01 10:07:17 fetching corpus: 5400, signal 164906/169215 (executing program)
2025/09/01 10:07:17 fetching corpus: 5450, signal 165524/169215 (executing program)
2025/09/01 10:07:17 fetching corpus: 5500, signal 165892/169216 (executing program)
2025/09/01 10:07:17 fetching corpus: 5550, signal 166252/169222 (executing program)
2025/09/01 10:07:17 fetching corpus: 5581, signal 166490/169279 (executing program)
2025/09/01 10:07:17 fetching corpus: 5581, signal 166490/169279 (executing program)
2025/09/01 10:07:20 starting 8 fuzzer processes
10:07:20 executing program 0:
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000bc0)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c0000000000000000fd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172edcf090a5f0", 0xb0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)="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", 0x2bf)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgid(0x0)
r3 = getpgrp(0x0)
kcmp(r2, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r4 = getpgid(0x0)
r5 = getpgrp(0x0)
kcmp(r4, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f00000000c0)=0xfffffffe)
clone3(&(0x7f0000002080)={0x40200000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x38}, &(0x7f0000000180)=""/166, 0xa6, &(0x7f0000000240)=""/12, &(0x7f0000002040)=[0x0, 0x0, 0x0, 0x0, 0x0, r2, r5], 0x7, {r6}}, 0x58)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
sendfile(r0, r1, 0x0, 0xfdef)
10:07:20 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000001040)={0x0, 0x0, 0x11, &(0x7f0000000040)="5faa46e4cac8e8baba5f2b4acc4dfea54e"})
10:07:20 executing program 1:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendto(r0, &(0x7f0000000080)="8a2f8d8c1e7ef54ca70d4434e6d11cb22f5074fbcf1d27", 0x17, 0x0, 0x0, 0x0)
10:07:20 executing program 2:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x2840, 0x0)
ioctl$CDROMRESUME(r0, 0x1262)
10:07:20 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x14, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}, 0x10)
[ 69.173088] audit: type=1400 audit(1756721240.407:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
10:07:20 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4000020})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000280)={0x0, 0x6})
10:07:20 executing program 7:
r0 = epoll_create1(0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
10:07:20 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000001480)=""/4096, 0x1000)
[ 70.355437] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 70.359602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 70.364215] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 70.370570] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 70.373834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 70.479877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 70.483594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 70.488591] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 70.492226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 70.494826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 70.539484] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 70.545478] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 70.547380] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 70.557555] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 70.559843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 70.570614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 70.577805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 70.586417] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 70.589360] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 70.593168] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 70.621054] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 70.625185] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 70.630080] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 70.638299] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 70.639777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 70.641599] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 70.643389] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 70.645113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 70.652189] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 70.655794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 70.657521] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 70.660704] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 70.675892] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 70.680069] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 70.702273] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 70.707242] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 70.709613] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 70.711667] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 70.741768] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 70.757441] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 72.452414] Bluetooth: hci0: command tx timeout
[ 72.516022] Bluetooth: hci1: command tx timeout
[ 72.643440] Bluetooth: hci2: command tx timeout
[ 72.644013] Bluetooth: hci3: command tx timeout
[ 72.708103] Bluetooth: hci4: command tx timeout
[ 72.708279] Bluetooth: hci6: command tx timeout
[ 72.772212] Bluetooth: hci5: command tx timeout
[ 72.835188] Bluetooth: hci7: command tx timeout
[ 74.499031] Bluetooth: hci0: command tx timeout
[ 74.563290] Bluetooth: hci1: command tx timeout
[ 74.693007] Bluetooth: hci3: command tx timeout
[ 74.693049] Bluetooth: hci2: command tx timeout
[ 74.755589] Bluetooth: hci4: command tx timeout
[ 74.756814] Bluetooth: hci6: command tx timeout
[ 74.819035] Bluetooth: hci5: command tx timeout
[ 74.884975] Bluetooth: hci7: command tx timeout
[ 76.547020] Bluetooth: hci0: command tx timeout
[ 76.611059] Bluetooth: hci1: command tx timeout
[ 76.740968] Bluetooth: hci3: command tx timeout
[ 76.740989] Bluetooth: hci2: command tx timeout
[ 76.803018] Bluetooth: hci4: command tx timeout
[ 76.804011] Bluetooth: hci6: command tx timeout
[ 76.868987] Bluetooth: hci5: command tx timeout
[ 76.934990] Bluetooth: hci7: command tx timeout
[ 78.595052] Bluetooth: hci0: command tx timeout
[ 78.661044] Bluetooth: hci1: command tx timeout
[ 78.787127] Bluetooth: hci2: command tx timeout
[ 78.787155] Bluetooth: hci3: command tx timeout
[ 78.851090] Bluetooth: hci6: command tx timeout
[ 78.851543] Bluetooth: hci4: command tx timeout
[ 78.914997] Bluetooth: hci5: command tx timeout
[ 78.979038] Bluetooth: hci7: command tx timeout
[ 110.090364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 110.091012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 110.212028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 110.212586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 110.772341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 110.773195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:08:02 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000001040)={0x0, 0x0, 0x11, &(0x7f0000000040)="5faa46e4cac8e8baba5f2b4acc4dfea54e"})
10:08:02 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000001040)={0x0, 0x0, 0x11, &(0x7f0000000040)="5faa46e4cac8e8baba5f2b4acc4dfea54e"})
[ 111.007906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.008526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:08:02 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000001040)={0x0, 0x0, 0x11, &(0x7f0000000040)="5faa46e4cac8e8baba5f2b4acc4dfea54e"})
10:08:02 executing program 3:
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/216)
10:08:02 executing program 3:
r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[])
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
move_mount(r0, 0x0, r0, 0x0, 0x66)
[ 111.480022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.480615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:08:02 executing program 3:
r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[])
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
move_mount(r0, 0x0, r0, 0x0, 0x66)
10:08:02 executing program 3:
r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[])
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
move_mount(r0, 0x0, r0, 0x0, 0x66)
10:08:02 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4000020})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000280)={0x0, 0x6})
[ 111.604000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.604566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 111.752627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.753289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 111.855091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.855661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.070028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.070598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.132559] audit: type=1400 audit(1756721283.372:8): avc: denied { open } for pid=3870 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 112.134181] audit: type=1400 audit(1756721283.374:9): avc: denied { kernel } for pid=3870 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 112.228483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.229346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.343375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.344345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.493434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.494228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.619130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.619811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.731875] syz-executor.0 (3879) used greatest stack depth: 24128 bytes left
[ 112.758705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.759393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.928684] ieee802154 phy0 wpan0: encryption failed: -22
[ 112.981522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.982282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.008358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.009034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:08:04 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000001480)=""/4096, 0x1000)
10:08:04 executing program 1:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendto(r0, &(0x7f0000000080)="8a2f8d8c1e7ef54ca70d4434e6d11cb22f5074fbcf1d27", 0x17, 0x0, 0x0, 0x0)
10:08:04 executing program 7:
r0 = epoll_create1(0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
10:08:04 executing program 3:
r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[])
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
move_mount(r0, 0x0, r0, 0x0, 0x66)
10:08:04 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4000020})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000280)={0x0, 0x6})
10:08:04 executing program 2:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x2840, 0x0)
ioctl$CDROMRESUME(r0, 0x1262)
10:08:04 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x14, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}, 0x10)
10:08:04 executing program 0:
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000bc0)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c0000000000000000fd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172edcf090a5f0", 0xb0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601781c53677b642fa92a7b767d76e208d17a13940ff013466264e16a26d7f004dfb575a75317d1eded2d32cbd9c6789c474435873ebc769bfbf0a064e61b363a4c45bc4b5fc77b81c120bbd2ecf508e7485bfcf1facea6f5763bb13023aed4cd7ff200554cb5d3307dfc43e8fc49878f7ac27e2226a48d87471708d036d5448c20207731438839301058c114dce8bd59355705c1d94d99aa6a2a394a94ddd456c3b66ea43e84253bab73e0699ea6778861b1cf71ce86ffe512040a7c274b4e07", 0x2bf)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgid(0x0)
r3 = getpgrp(0x0)
kcmp(r2, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r4 = getpgid(0x0)
r5 = getpgrp(0x0)
kcmp(r4, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f00000000c0)=0xfffffffe)
clone3(&(0x7f0000002080)={0x40200000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x38}, &(0x7f0000000180)=""/166, 0xa6, &(0x7f0000000240)=""/12, &(0x7f0000002040)=[0x0, 0x0, 0x0, 0x0, 0x0, r2, r5], 0x7, {r6}}, 0x58)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
sendfile(r0, r1, 0x0, 0xfdef)
[ 113.179593] ieee802154 phy0 wpan0: encryption failed: -22
10:08:04 executing program 7:
r0 = epoll_create1(0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
10:08:04 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4000020})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000280)={0x0, 0x6})
10:08:04 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x14, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}, 0x10)
10:08:04 executing program 1:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendto(r0, &(0x7f0000000080)="8a2f8d8c1e7ef54ca70d4434e6d11cb22f5074fbcf1d27", 0x17, 0x0, 0x0, 0x0)
[ 113.303310] kmemleak: Found object by alias at 0x607f1a63ec2c
[ 113.303332] CPU: 1 UID: 0 PID: 3935 Comm: syz-executor.7 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
[ 113.303350] Tainted: [W]=WARN
[ 113.303354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 113.303362] Call Trace:
[ 113.303367]
[ 113.303372] dump_stack_lvl+0xca/0x120
[ 113.303404] __lookup_object+0x94/0xb0
[ 113.303422] delete_object_full+0x27/0x70
[ 113.303439] free_percpu+0x30/0x1160
[ 113.303456] ? arch_uprobe_clear_state+0x16/0x140
[ 113.303477] futex_hash_free+0x38/0xc0
[ 113.303492] mmput+0x2d3/0x390
[ 113.303512] do_exit+0x79d/0x2970
[ 113.303526] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 113.303541] ? zap_other_threads+0x2b9/0x3a0
[ 113.303558] ? __pfx_do_exit+0x10/0x10
[ 113.303572] ? do_group_exit+0x1c3/0x2a0
[ 113.303587] ? _raw_spin_unlock_irq+0x23/0x40
[ 113.303606] do_group_exit+0xd3/0x2a0
[ 113.303621] __x64_sys_exit_group+0x3e/0x50
[ 113.303636] x64_sys_call+0x18c5/0x18d0
[ 113.303652] do_syscall_64+0xbf/0x360
[ 113.303666] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.303678] RIP: 0033:0x7fc6f92c8b19
[ 113.303694] Code: Unable to access opcode bytes at 0x7fc6f92c8aef.
[ 113.303700] RSP: 002b:00007ffc7f011e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 113.303712] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fc6f92c8b19
[ 113.303719] RDX: 00007fc6f927b72b RSI: ffffffffffffffbc RDI: 0000000000000000
[ 113.303727] RBP: 0000000000000000 R08: 0000001b2d52547c R09: 0000000000000000
[ 113.303734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 113.303741] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc7f011f40
[ 113.303757]
[ 113.303761] kmemleak: Object (percpu) 0x607f1a63ec28 (size 8):
[ 113.303768] kmemleak: comm "syz-executor.0", pid 3931, jiffies 4294780038
[ 113.303775] kmemleak: min_count = 1
[ 113.303780] kmemleak: count = 0
[ 113.303784] kmemleak: flags = 0x21
[ 113.303788] kmemleak: checksum = 0
[ 113.303791] kmemleak: backtrace:
[ 113.303795] pcpu_alloc_noprof+0x87a/0x1170
[ 113.303811] xfrm_state_init+0x1a5/0x640
[ 113.303823] xfrm_net_init+0x1a3/0xb20
[ 113.303835] ops_init+0x1e1/0x650
[ 113.303846] setup_net+0x10d/0x320
[ 113.303854] copy_net_ns+0x2e3/0x650
[ 113.303864] create_new_namespaces+0x3f6/0xab0
[ 113.303882] copy_namespaces+0x45c/0x580
[ 113.303897] copy_process+0x2649/0x73c0
[ 113.303907] kernel_clone+0xea/0x7f0
[ 113.303918] __do_sys_clone3+0x1f5/0x280
[ 113.303928] do_syscall_64+0xbf/0x360
[ 113.303938] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.328022] ieee802154 phy0 wpan0: encryption failed: -22
10:08:04 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000001480)=""/4096, 0x1000)
10:08:04 executing program 3:
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000bc0)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c0000000000000000fd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172edcf090a5f0", 0xb0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601781c53677b642fa92a7b767d76e208d17a13940ff013466264e16a26d7f004dfb575a75317d1eded2d32cbd9c6789c474435873ebc769bfbf0a064e61b363a4c45bc4b5fc77b81c120bbd2ecf508e7485bfcf1facea6f5763bb13023aed4cd7ff200554cb5d3307dfc43e8fc49878f7ac27e2226a48d87471708d036d5448c20207731438839301058c114dce8bd59355705c1d94d99aa6a2a394a94ddd456c3b66ea43e84253bab73e0699ea6778861b1cf71ce86ffe512040a7c274b4e07", 0x2bf)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgid(0x0)
r3 = getpgrp(0x0)
kcmp(r2, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r4 = getpgid(0x0)
r5 = getpgrp(0x0)
kcmp(r4, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f00000000c0)=0xfffffffe)
clone3(&(0x7f0000002080)={0x40200000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x38}, &(0x7f0000000180)=""/166, 0xa6, &(0x7f0000000240)=""/12, &(0x7f0000002040)=[0x0, 0x0, 0x0, 0x0, 0x0, r2, r5], 0x7, {r6}}, 0x58)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
sendfile(r0, r1, 0x0, 0xfdef)
10:08:04 executing program 0:
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000bc0)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c0000000000000000fd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172edcf090a5f0", 0xb0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)="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", 0x2bf)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgid(0x0)
r3 = getpgrp(0x0)
kcmp(r2, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r4 = getpgid(0x0)
r5 = getpgrp(0x0)
kcmp(r4, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f00000000c0)=0xfffffffe)
clone3(&(0x7f0000002080)={0x40200000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x38}, &(0x7f0000000180)=""/166, 0xa6, &(0x7f0000000240)=""/12, &(0x7f0000002040)=[0x0, 0x0, 0x0, 0x0, 0x0, r2, r5], 0x7, {r6}}, 0x58)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
sendfile(r0, r1, 0x0, 0xfdef)
10:08:04 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x14, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}, 0x10)
10:08:04 executing program 2:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x2840, 0x0)
ioctl$CDROMRESUME(r0, 0x1262)
10:08:04 executing program 1:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendto(r0, &(0x7f0000000080)="8a2f8d8c1e7ef54ca70d4434e6d11cb22f5074fbcf1d27", 0x17, 0x0, 0x0, 0x0)
10:08:04 executing program 4:
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000bc0)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c0000000000000000fd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172edcf090a5f0", 0xb0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)="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", 0x2bf)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgid(0x0)
r3 = getpgrp(0x0)
kcmp(r2, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r4 = getpgid(0x0)
r5 = getpgrp(0x0)
kcmp(r4, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f00000000c0)=0xfffffffe)
clone3(&(0x7f0000002080)={0x40200000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x38}, &(0x7f0000000180)=""/166, 0xa6, &(0x7f0000000240)=""/12, &(0x7f0000002040)=[0x0, 0x0, 0x0, 0x0, 0x0, r2, r5], 0x7, {r6}}, 0x58)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
sendfile(r0, r1, 0x0, 0xfdef)
10:08:04 executing program 7:
r0 = epoll_create1(0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
[ 113.662579] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI
[ 113.663428] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[ 113.664119] CPU: 1 UID: 0 PID: 3944 Comm: syz-executor.7 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
[ 113.665454] Tainted: [W]=WARN
[ 113.665932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 113.667068] RIP: 0010:perf_tp_event+0x175/0xe70
[ 113.667865] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 113.670297] RSP: 0018:ffff88804600f780 EFLAGS: 00010012
[ 113.671064] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[ 113.672070] RDX: ffff88800f7b8000 RSI: ffffffff8189a4e7 RDI: 0000000100000190
[ 113.673067] RBP: ffff88804600f9f0 R08: ffff88806cf31340 R09: ffffe8ffffd16c28
[ 113.674076] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 113.675438] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000
[ 113.676486] FS: 000055558a76e400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[ 113.677578] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 113.678408] CR2: 0000555561f70c18 CR3: 00000000418b6000 CR4: 0000000000350ef0
[ 113.679455] Call Trace:
[ 113.679847]
[ 113.680192] ? __pfx_perf_tp_event+0x10/0x10
[ 113.680817] ? arch_scale_cpu_capacity+0x17/0xa0
[ 113.681548] ? cpu_util.constprop.0+0x17d/0x340
[ 113.681983] ? __asan_memset+0x24/0x50
[ 113.682337] ? sched_balance_find_dst_group+0xa9a/0x1c00
[ 113.682819] ? lock_release+0xc8/0x290
[ 113.683175] ? __pfx_sched_balance_find_dst_group+0x10/0x10
[ 113.683679] ? __lock_acquire+0x694/0x1b70
[ 113.684070] ? perf_trace_run_bpf_submit+0xef/0x180
[ 113.684519] ? sched_clock+0x37/0x60
[ 113.684864] ? sched_clock_cpu+0x6c/0x4e0
[ 113.685244] ? lock_is_held_type+0x9e/0x120
[ 113.685645] perf_trace_run_bpf_submit+0xef/0x180
[ 113.686084] perf_trace_preemptirq_template+0x259/0x430
[ 113.686562] ? lock_is_held_type+0x9e/0x120
[ 113.686953] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 113.687479] ? _raw_spin_lock_irqsave+0x53/0x60
[ 113.687918] trace_irq_disable.constprop.0+0xa6/0x100
[ 113.688382] _raw_spin_lock_irqsave+0x53/0x60
[ 113.688791] try_to_wake_up+0xa0/0x11d0
[ 113.689156] ? __pfx_try_to_wake_up+0x10/0x10
[ 113.689561] ? plist_del+0x122/0x270
[ 113.689906] ? find_held_lock+0x2b/0x80
[ 113.690270] ? futex_wake+0x474/0x540
[ 113.690617] wake_up_q+0xa1/0x130
[ 113.690939] futex_wake+0x47e/0x540
[ 113.691276] ? __pfx_futex_wake+0x10/0x10
[ 113.691654] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 113.692137] ? finish_task_switch.isra.0+0x206/0x840
[ 113.692596] do_futex+0x26d/0x370
[ 113.692916] ? __pfx_do_futex+0x10/0x10
[ 113.693275] ? __pfx___schedule+0x10/0x10
[ 113.693654] __x64_sys_futex+0x1c9/0x4d0
[ 113.694020] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 113.694539] ? __pfx___x64_sys_futex+0x10/0x10
[ 113.694952] ? xfd_validate_state+0x55/0x180
[ 113.695362] do_syscall_64+0xbf/0x360
[ 113.695711] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.696177] RIP: 0033:0x7fc6f92c8b19
[ 113.696507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 113.698098] RSP: 002b:00007ffc7f011ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 113.698764] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc6f92c8b19
[ 113.699320] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc6f93dbf68
[ 113.699885] RBP: 00007fc6f93dbf60 R08: 00007fc6f683e700 R09: 0000000000000000
[ 113.700438] R10: 00007fc6f683e700 R11: 0000000000000246 R12: 00007fc6f93e0030
[ 113.700994] R13: 00007ffc7f011db0 R14: 00007fc6f93dbf60 R15: 000000000001bb77
[ 113.701554]
[ 113.701743] Modules linked in:
[ 113.702011] ---[ end trace 0000000000000000 ]---
[ 113.702014] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI
[ 113.702378] RIP: 0010:perf_tp_event+0x175/0xe70
[ 113.703266] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 113.703625] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 113.704222] CPU: 0 UID: 0 PID: 3953 Comm: syz-executor.3 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
[ 113.705604] RSP: 0018:ffff88804600f780 EFLAGS: 00010012
[ 113.706525] Tainted: [D]=DIE, [W]=WARN
[ 113.706531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 113.706940] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[ 113.707243] RIP: 0010:perf_tp_event+0x175/0xe70
[ 113.707882] RDX: ffff88800f7b8000 RSI: ffffffff8189a4e7 RDI: 0000000100000190
[ 113.708438] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 113.708799] RBP: ffff88804600f9f0 R08: ffff88806cf31340 R09: ffffe8ffffd16c28
[ 113.709351] RSP: 0018:ffff8880460bf780 EFLAGS: 00010012
[ 113.710740] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 113.711293]
[ 113.711712] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000
[ 113.712264] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90007a1a000
[ 113.712404] FS: 000055558a76e400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[ 113.712953] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[ 113.713501] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 113.714119] RBP: ffff8880460bf9f0 R08: ffff88806ce31340 R09: ffffe8ffffc16c28
[ 113.714673] CR2: 0000555561f70c18 CR3: 00000000418b6000 CR4: 0000000000350ef0
[ 113.715124] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[ 113.715678] note: syz-executor.7[3944] exited with irqs disabled
[ 113.716234] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000
[ 113.717813] FS: 00007fd8d19fd700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[ 113.718449] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 113.718908] CR2: 0000000000000004 CR3: 000000001e2e9000 CR4: 0000000000350ef0
[ 113.719467] Call Trace:
[ 113.719678]
[ 113.719868] ? __pfx_perf_tp_event+0x10/0x10
[ 113.720224] ? trace_mm_page_alloc+0xfc/0x150
[ 113.720587] ? __alloc_frozen_pages_noprof+0x296/0x1f20
[ 113.721014] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 113.721425] ? mas_next_slot+0x13cc/0x1ac0
[ 113.721762] ? perf_trace_run_bpf_submit+0xef/0x180
[ 113.722162] ? cmp_ex_search+0x8b/0xb0
[ 113.722481] perf_trace_run_bpf_submit+0xef/0x180
[ 113.722869] perf_trace_preemptirq_template+0x259/0x430
[ 113.723290] ? __pfx_search_extable+0x10/0x10
[ 113.723654] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 113.724124] ? lock_acquire+0x18c/0x2f0
[ 113.724443] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 113.724852] ? fixup_exception+0x10d/0xc00
[ 113.725196] ? _raw_spin_lock_irqsave+0x53/0x60
[ 113.725571] trace_irq_disable.constprop.0+0xa6/0x100
[ 113.725979] _raw_spin_lock_irqsave+0x53/0x60
[ 113.726341] try_to_wake_up+0xa0/0x11d0
[ 113.726666] ? lock_acquire+0x18c/0x2f0
[ 113.726987] ? __pfx_try_to_wake_up+0x10/0x10
[ 113.727351] ? plist_del+0x122/0x270
[ 113.727655] ? __futex_unqueue+0xda/0x1c0
[ 113.727992] wake_up_q+0xa1/0x130
[ 113.728277] futex_wake+0x47e/0x540
[ 113.728576] ? __pfx_futex_wake+0x10/0x10
[ 113.728909] ? perf_copy_attr+0x39/0x920
[ 113.729233] ? perf_copy_attr+0x66b/0x920
[ 113.729561] do_futex+0x26d/0x370
[ 113.729842] ? __pfx_do_futex+0x10/0x10
[ 113.730163] ? __pfx___do_sys_perf_event_open+0x10/0x10
[ 113.730582] ? count_memcg_events+0x32b/0x420
[ 113.730945] __x64_sys_futex+0x1c9/0x4d0
[ 113.731270] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 113.731735] ? __pfx___x64_sys_futex+0x10/0x10
[ 113.732108] do_syscall_64+0xbf/0x360
[ 113.732411] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.732821] RIP: 0033:0x7fd8d4487b19
[ 113.733114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 113.734527] RSP: 002b:00007fd8d19fd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 113.735124] RAX: ffffffffffffffda RBX: 00007fd8d459af68 RCX: 00007fd8d4487b19
[ 113.735683] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd8d459af6c
[ 113.736249] RBP: 00007fd8d459af60 R08: 000000000000000e R09: 0000000000000000
[ 113.736803] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fd8d459af6c
[ 113.737357] R13: 00007ffdfaccbc7f R14: 00007fd8d19fd300 R15: 0000000000022000
[ 113.737922]
[ 113.738112] Modules linked in:
[ 113.738373] ---[ end trace 0000000000000000 ]---
[ 113.738375] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#3] SMP KASAN NOPTI
[ 113.738743] RIP: 0010:perf_tp_event+0x175/0xe70
[ 113.739600] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[ 113.739966] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 113.740641] CPU: 1 UID: 0 PID: 3944 Comm: syz-executor.7 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
[ 113.742038] RSP: 0018:ffff88804600f780 EFLAGS: 00010012
[ 113.742954] Tainted: [D]=DIE, [W]=WARN
[ 113.743359] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[ 113.743661] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 113.744220] RDX: ffff88800f7b8000 RSI: ffffffff8189a4e7 RDI: 0000000100000190
[ 113.744857] RIP: 0010:perf_tp_event+0x175/0xe70
[ 113.745406] RBP: ffff88804600f9f0 R08: ffff88806cf31340 R09: ffffe8ffffd16c28
[ 113.745766] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 113.746316] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 113.747717] RSP: 0018:ffff88806cf08b40 EFLAGS: 00010012
[ 113.748270] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000
[ 113.748273]
[ 113.748283] FS: 00007fd8d19fd700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[ 113.748687] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[ 113.749238] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 113.749378] RDX: ffff88800f7b8000 RSI: ffffffff8189a4e7 RDI: 0000000100000190
[ 113.749997] CR2: 0000000000000004 CR3: 000000001e2e9000 CR4: 0000000000350ef0
[ 113.750545] RBP: ffff88806cf08db0 R08: ffff88806cf313e8 R09: ffffe8ffffd16c28
[ 113.750996] note: syz-executor.3[3953] exited with irqs disabled
[ 113.751544] R10: 0000000000000000 R11: ffff88800ea0ac98 R12: dffffc0000000000
[ 113.753658] R13: 0000000000000014 R14: ffff88806cf313e8 R15: dffffc0000000000
[ 113.754217] FS: 000055558a76e400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[ 113.754843] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 113.755303] CR2: 0000555561f70c18 CR3: 00000000418b6000 CR4: 0000000000350ef0
[ 113.755868] Call Trace:
[ 113.756076]
[ 113.756258] ? __pfx_perf_tp_event+0x10/0x10
[ 113.756619] ? update_load_avg+0x17d/0x1ef0
[ 113.756964] ? update_cfs_group+0x11d/0x260
[ 113.757309] ? kvm_sched_clock_read+0x16/0x30
[ 113.757676] ? enqueue_task_fair+0xded/0x1e00
[ 113.758045] ? check_preempt_wakeup_fair+0x6e/0x950
[ 113.758447] ? wakeup_preempt+0x140/0x2a0
[ 113.758780] ? lock_release+0x1c7/0x290
[ 113.759101] ? lock_release+0x1c7/0x290
[ 113.759420] ? do_raw_spin_unlock+0x53/0x220
[ 113.759788] ? _raw_spin_unlock_irqrestore+0x22/0x50
[ 113.760196] ? try_to_wake_up+0x8ae/0x11d0
[ 113.760543] ? perf_trace_run_bpf_submit+0xef/0x180
[ 113.760943] ? lock_release+0x1c7/0x290
[ 113.761270] perf_trace_run_bpf_submit+0xef/0x180
[ 113.761666] perf_trace_preemptirq_template+0x259/0x430
[ 113.762089] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 113.762547] ? read_tsc+0x9/0x20
[ 113.762825] ? ktime_get+0x16d/0x270
[ 113.763131] ? __pfx_lapic_next_deadline+0x10/0x10
[ 113.763524] ? clockevents_program_event+0x135/0x360
[ 113.763939] ? _raw_spin_lock_irq+0x42/0x50
[ 113.764289] trace_irq_disable.constprop.0+0xa6/0x100
[ 113.764697] _raw_spin_lock_irq+0x42/0x50
[ 113.765031] run_timer_softirq+0x10f/0x210
[ 113.765374] handle_softirqs+0x1b1/0x770
[ 113.765713] __irq_exit_rcu+0xc4/0x100
[ 113.766030] irq_exit_rcu+0x9/0x20
[ 113.766314] sysvec_apic_timer_interrupt+0x70/0x80
[ 113.766708]
[ 113.766893]
[ 113.767078] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 113.767495] RIP: 0010:make_task_dead+0xa2/0x3b0
[ 113.767882] Code: 38 00 85 db 0f 84 21 01 00 00 e8 09 a6 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 57 a1 38 00 48 85 db 0f 84 17 01 00 00 e9 a5 38 00 31 ff 65 8b 1d 60 2f 49 06 81 e3 ff ff ff 7f 89 de
[ 113.769288] RSP: 0018:ffff88804600ff28 EFLAGS: 00000246
[ 113.769706] RAX: 0000000000000001 RBX: ffff88800f7b8000 RCX: ffffffff817c3ab6
[ 113.770270] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234
[ 113.770830] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000
[ 113.771386] R10: ffffffff8643b457 R11: 3030303030302052 R12: ffff88800f7b8000
[ 113.771953] R13: 0000000000000000 R14: dffffc0020000032 R15: 0000000000000000
[ 113.772509] ? trace_irq_enable.constprop.0+0x26/0x100
[ 113.772927] ? make_task_dead+0x214/0x3b0
[ 113.773264] ? make_task_dead+0x214/0x3b0
[ 113.773594] ? do_syscall_64+0xbf/0x360
[ 113.773913] rewind_stack_and_make_dead+0x16/0x20
[ 113.774310] RIP: 0033:0x7fc6f92c8b19
[ 113.774606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 113.776016] RSP: 002b:00007ffc7f011ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 113.776609] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc6f92c8b19
[ 113.777163] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc6f93dbf68
[ 113.777720] RBP: 00007fc6f93dbf60 R08: 00007fc6f683e700 R09: 0000000000000000
[ 113.778278] R10: 00007fc6f683e700 R11: 0000000000000246 R12: 00007fc6f93e0030
[ 113.778835] R13: 00007ffc7f011db0 R14: 00007fc6f93dbf60 R15: 000000000001bb77
[ 113.779398]
[ 113.779589] Modules linked in:
[ 113.779860] ---[ end trace 0000000000000000 ]---
[ 113.779861] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#4] SMP KASAN NOPTI
[ 113.780236] RIP: 0010:perf_tp_event+0x175/0xe70
[ 113.781093] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 113.781456] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 113.782043] CPU: 0 UID: 0 PID: 3953 Comm: syz-executor.3 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
[ 113.783434] RSP: 0018:ffff88804600f780 EFLAGS: 00010012
[ 113.784355] Tainted: [D]=DIE, [W]=WARN
[ 113.784362] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 113.784772] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[ 113.785077] RIP: 0010:perf_tp_event+0x175/0xe70
[ 113.785712] RDX: ffff88800f7b8000 RSI: ffffffff8189a4e7 RDI: 0000000100000190
[ 113.786263] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 113.786622] RBP: ffff88804600f9f0 R08: ffff88806cf31340 R09: ffffe8ffffd16c28
[ 113.787172] RSP: 0018:ffff88806ce08b40 EFLAGS: 00010012
[ 113.788591] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 113.789156]
[ 113.789162] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 113.789572] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000
[ 113.790136] RDX: ffff8880170bb700 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[ 113.790280] FS: 000055558a76e400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[ 113.790841] RBP: ffff88806ce08db0 R08: ffff88806ce313e8 R09: ffffe8ffffc16c28
[ 113.791400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 113.791964] R10: 0000000000000000 R11: ffff8880162f6498 R12: dffffc0000000000
[ 113.792607] CR2: 0000555561f70c18 CR3: 00000000418b6000 CR4: 0000000000350ef0
[ 113.793165] R13: 0000000000000014 R14: ffff88806ce313e8 R15: dffffc0000000000
[ 113.793633] Kernel panic - not syncing: Fatal exception in interrupt
[ 114.839949] Shutting down cpus with NMI
[ 114.842027] Kernel Offset: disabled
[ 114.842313] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---
VM DIAGNOSIS:
10:08:05 Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84be3c0e RDX=fffffbfff0f0f609
RSI=0000000000000004 RDI=ffffffff8787b044 RBP=ffffffff8787b044 RSP=ffff8880460bf530
R8 =0000000000000000 R9 =fffffbfff0f0f608 R10=ffffffff8787b047 R11=202c746c75616620
R12=1ffff11008c17ea7 R13=0000000000000007 R14=fffffbfff0f0f608 R15=ffff8880460bf568
RIP=ffffffff84be3da0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fd8d19fd700 00000000 00000000
GS =0000 ffff8880e55d8000 00000000 00000000
LDT=0000 fffffe5000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000004 CR3=000000001e2e9000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fd8d456e7c000007fd8d456e7c8
XMM02=00007fd8d456e7e000007fd8d456e7c0 XMM03=00007fd8d456e7c800007fd8d456e7c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=1ffff11008c01e75 RCX=ffffffff8154bcc9 RDX=ffff88800f7b8000
RSI=ffffffff8154bd83 RDI=ffffffff8154133e RBP=0000000000000000 RSP=ffff88804600f390
R8 =0000000000000000 R9 =fffffbfff0b5de84 R10=0000000000000000 R11=0000000000000001
R12=0000000000000024 R13=0000000000000000 R14=ffffffff857458b5 R15=ffff88804600f460
RIP=ffffffff815419c2 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055558a76e400 00000000 00000000
GS =0000 ffff8880e56d8000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000555561f70c18 CR3=00000000418b6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fc6f93af7c000007fc6f93af7c8
XMM02=00007fc6f93af7e000007fc6f93af7c0 XMM03=00007fc6f93af7c800007fc6f93af7c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000