Warning: Permanently added '[localhost]:60096' (ECDSA) to the list of known hosts. 2025/08/29 08:15:47 fuzzer started 2025/08/29 08:15:48 dialing manager at localhost:43077 syzkaller login: [ 50.793790] cgroup: Unknown subsys name 'net' [ 50.873275] cgroup: Unknown subsys name 'cpuset' [ 50.891862] cgroup: Unknown subsys name 'rlimit' 2025/08/29 08:15:59 syscalls: 2214 2025/08/29 08:15:59 code coverage: enabled 2025/08/29 08:15:59 comparison tracing: enabled 2025/08/29 08:15:59 extra coverage: enabled 2025/08/29 08:15:59 setuid sandbox: enabled 2025/08/29 08:15:59 namespace sandbox: enabled 2025/08/29 08:15:59 Android sandbox: enabled 2025/08/29 08:15:59 fault injection: enabled 2025/08/29 08:15:59 leak checking: enabled 2025/08/29 08:15:59 net packet injection: enabled 2025/08/29 08:15:59 net device setup: enabled 2025/08/29 08:15:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 08:15:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 08:15:59 USB emulation: enabled 2025/08/29 08:15:59 hci packet injection: enabled 2025/08/29 08:15:59 wifi device emulation: enabled 2025/08/29 08:15:59 802.15.4 emulation: enabled 2025/08/29 08:15:59 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 08:15:59 fetching corpus: 50, signal 25063/27927 (executing program) 2025/08/29 08:15:59 fetching corpus: 100, signal 34267/37921 (executing program) 2025/08/29 08:16:00 fetching corpus: 150, signal 44576/48518 (executing program) 2025/08/29 08:16:00 fetching corpus: 200, signal 51423/55558 (executing program) 2025/08/29 08:16:00 fetching corpus: 250, signal 57402/61537 (executing program) 2025/08/29 08:16:00 fetching corpus: 300, signal 60833/65020 (executing program) 2025/08/29 08:16:00 fetching corpus: 350, signal 63679/67916 (executing program) 2025/08/29 08:16:00 fetching corpus: 400, signal 67422/71436 (executing program) 2025/08/29 08:16:00 fetching corpus: 450, signal 72079/75518 (executing program) 2025/08/29 08:16:01 fetching corpus: 500, signal 75880/78880 (executing program) 2025/08/29 08:16:01 fetching corpus: 550, signal 77530/80344 (executing program) 2025/08/29 08:16:01 fetching corpus: 600, signal 79242/81789 (executing program) 2025/08/29 08:16:01 fetching corpus: 650, signal 81501/83555 (executing program) 2025/08/29 08:16:01 fetching corpus: 700, signal 83910/85276 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/85473 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/85558 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/85654 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/85728 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/85807 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/85897 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/85989 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/86110 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/86192 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/86285 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/86373 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/86467 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/86551 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/86637 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/86721 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/86807 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/86887 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/86981 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/87091 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/87165 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/87247 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/87338 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/87426 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/87510 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/87598 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/87668 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/87750 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/87807 (executing program) 2025/08/29 08:16:01 fetching corpus: 710, signal 84072/87807 (executing program) 2025/08/29 08:16:03 starting 8 fuzzer processes 08:16:03 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rpc\x00') getdents(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x0) 08:16:03 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x24, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x90) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="866369ed15bf241db3222862d749dac5bfd1325d", 0x14}, {&(0x7f00000001c0)="4150fbb84c8ccf532ef9cc28fdaf31f0dbee28b8", 0x14}], 0x2}, 0xfc) 08:16:03 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 08:16:03 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000008700)=[{{&(0x7f0000000000)={0x2, 0x4e64, @dev}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @multicast1}}}], 0x20}}], 0x2, 0x0) [ 65.890833] audit: type=1400 audit(1756455363.431:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:16:03 executing program 3: setresuid(0x0, 0xee01, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 08:16:03 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080), 0x0) 08:16:03 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') 08:16:03 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000000)=ANY=[@ANYBLOB="0401"]) [ 67.035985] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.038080] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.041538] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.045289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.047703] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.110509] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.115711] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.117783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.120010] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.123365] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.125683] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.126912] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.132595] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.139782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.152488] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.175870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.178917] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.185099] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.185303] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.191677] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.205067] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.214304] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.216451] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.226810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 67.233729] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.237646] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 67.243546] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 67.250364] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.252169] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 67.258583] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 67.266981] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 67.270646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 67.291612] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 67.296657] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 67.301841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 67.304528] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 67.312361] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 67.315634] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 67.319618] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 67.321694] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 69.131701] Bluetooth: hci0: command tx timeout [ 69.195388] Bluetooth: hci2: command tx timeout [ 69.196135] Bluetooth: hci1: command tx timeout [ 69.260297] Bluetooth: hci3: command tx timeout [ 69.323305] Bluetooth: hci4: command tx timeout [ 69.324021] Bluetooth: hci5: command tx timeout [ 69.388379] Bluetooth: hci7: command tx timeout [ 69.389040] Bluetooth: hci6: command tx timeout [ 71.179270] Bluetooth: hci0: command tx timeout [ 71.243320] Bluetooth: hci1: command tx timeout [ 71.243750] Bluetooth: hci2: command tx timeout [ 71.307675] Bluetooth: hci3: command tx timeout [ 71.372257] Bluetooth: hci5: command tx timeout [ 71.372703] Bluetooth: hci4: command tx timeout [ 71.436333] Bluetooth: hci6: command tx timeout [ 71.436756] Bluetooth: hci7: command tx timeout [ 73.228402] Bluetooth: hci0: command tx timeout [ 73.291343] Bluetooth: hci2: command tx timeout [ 73.291797] Bluetooth: hci1: command tx timeout [ 73.355355] Bluetooth: hci3: command tx timeout [ 73.419477] Bluetooth: hci5: command tx timeout [ 73.419909] Bluetooth: hci4: command tx timeout [ 73.483465] Bluetooth: hci6: command tx timeout [ 73.483900] Bluetooth: hci7: command tx timeout [ 75.275306] Bluetooth: hci0: command tx timeout [ 75.339290] Bluetooth: hci1: command tx timeout [ 75.339725] Bluetooth: hci2: command tx timeout [ 75.404328] Bluetooth: hci3: command tx timeout [ 75.467262] Bluetooth: hci4: command tx timeout [ 75.467685] Bluetooth: hci5: command tx timeout [ 75.532243] Bluetooth: hci6: command tx timeout [ 75.532657] Bluetooth: hci7: command tx timeout [ 104.657327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.657993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.822973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.823624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.173975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.175074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.266523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.267106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.311036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.311609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.347124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.347725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.502855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.503504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.579831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.580606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.665023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.666163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.694495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.695024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.715127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.715867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.757258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.757843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.803738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.804518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.901382] audit: type=1400 audit(1756455403.439:8): avc: denied { open } for pid=3877 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 105.912021] audit: type=1400 audit(1756455403.439:9): avc: denied { kernel } for pid=3877 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 105.918473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.919039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.926130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.926728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.967104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.967896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.010429] block device autoloading is deprecated and will be removed. 08:16:43 executing program 3: setresuid(0x0, 0xee01, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 08:16:43 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000000)=ANY=[@ANYBLOB="0401"]) 08:16:43 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080), 0x0) 08:16:43 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 08:16:43 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') 08:16:43 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x24, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x90) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="866369ed15bf241db3222862d749dac5bfd1325d", 0x14}, {&(0x7f00000001c0)="4150fbb84c8ccf532ef9cc28fdaf31f0dbee28b8", 0x14}], 0x2}, 0xfc) 08:16:43 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000008700)=[{{&(0x7f0000000000)={0x2, 0x4e64, @dev}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @multicast1}}}], 0x20}}], 0x2, 0x0) 08:16:43 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rpc\x00') getdents(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x0) 08:16:43 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x24, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x90) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="866369ed15bf241db3222862d749dac5bfd1325d", 0x14}, {&(0x7f00000001c0)="4150fbb84c8ccf532ef9cc28fdaf31f0dbee28b8", 0x14}], 0x2}, 0xfc) 08:16:43 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000000)=ANY=[@ANYBLOB="0401"]) 08:16:43 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080), 0x0) 08:16:43 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 08:16:43 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rpc\x00') getdents(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x0) 08:16:43 executing program 3: setresuid(0x0, 0xee01, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 08:16:43 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000008700)=[{{&(0x7f0000000000)={0x2, 0x4e64, @dev}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @multicast1}}}], 0x20}}], 0x2, 0x0) 08:16:43 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x24, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x90) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="866369ed15bf241db3222862d749dac5bfd1325d", 0x14}, {&(0x7f00000001c0)="4150fbb84c8ccf532ef9cc28fdaf31f0dbee28b8", 0x14}], 0x2}, 0xfc) 08:16:43 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080), 0x0) 08:16:43 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') 08:16:43 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000000)=ANY=[@ANYBLOB="0401"]) 08:16:43 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 08:16:43 executing program 3: setresuid(0x0, 0xee01, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 08:16:43 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000008700)=[{{&(0x7f0000000000)={0x2, 0x4e64, @dev}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @multicast1}}}], 0x20}}], 0x2, 0x0) 08:16:43 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rpc\x00') getdents(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x0) [ 106.399956] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI [ 106.400824] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 106.401517] CPU: 0 UID: 0 PID: 3931 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 106.402964] Tainted: [W]=WARN [ 106.403469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 106.404951] RIP: 0010:perf_tp_event+0x175/0xe70 [ 106.405874] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 106.409853] RSP: 0018:ffff888043a477c0 EFLAGS: 00010212 [ 106.410251] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc900029fc000 [ 106.410821] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 106.411389] RBP: ffff888043a47a30 R08: ffff88806ce31340 R09: ffffe8ffffc15f48 [ 106.411950] R10: 0000000000000000 R11: 000000000000002c R12: dffffc0000000000 [ 106.412513] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 106.413077] FS: 00007f398dc20700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 106.413716] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.414180] CR2: 00007f2d7aa0ed58 CR3: 000000003fb0f000 CR4: 0000000000350ef0 [ 106.414752] Call Trace: [ 106.414959] [ 106.415149] ? __pfx_perf_tp_event+0x10/0x10 [ 106.415512] ? lock_acquire+0x15e/0x2f0 [ 106.415839] ? __is_insn_slot_addr+0x2e/0x290 [ 106.416209] ? find_held_lock+0x2b/0x80 [ 106.416536] ? __is_insn_slot_addr+0x136/0x290 [ 106.416909] ? lock_release+0xc8/0x290 [ 106.417228] ? __is_insn_slot_addr+0x140/0x290 [ 106.417603] ? kernel_text_address+0x5b/0xc0 [ 106.417966] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 106.418408] ? __kernel_text_address+0xd/0x40 [ 106.418774] ? unwind_get_return_address+0x59/0xa0 [ 106.419177] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 106.419610] ? arch_stack_walk+0x9c/0xf0 [ 106.419945] ? perf_trace_run_bpf_submit+0xef/0x180 [ 106.420352] perf_trace_run_bpf_submit+0xef/0x180 [ 106.420745] perf_trace_lock_acquire+0x3c2/0x700 [ 106.421135] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 106.421559] ? lock_acquire+0x15e/0x2f0 [ 106.421880] lock_acquire+0xc5/0x2f0 [ 106.422185] ? futex_private_hash_put+0x4c/0x2d0 [ 106.422573] ? futex_hash+0x2d8/0x390 [ 106.422877] ? lock_release+0xc8/0x290 [ 106.423195] futex_private_hash_put+0x5d/0x2d0 [ 106.423562] ? futex_private_hash_put+0x4c/0x2d0 [ 106.423945] futex_hash_put+0x3f/0x50 [ 106.424258] futex_wake+0x1bb/0x540 [ 106.424560] ? __pfx_futex_wake+0x10/0x10 [ 106.424898] ? kmem_cache_free+0x2a1/0x540 [ 106.425273] ? fd_install+0x1d8/0x660 [ 106.425583] ? putname.part.0+0x11b/0x160 [ 106.425925] do_futex+0x26d/0x370 [ 106.426210] ? __pfx_do_futex+0x10/0x10 [ 106.426544] __x64_sys_futex+0x1c9/0x4d0 [ 106.426876] ? __x64_sys_openat+0x142/0x200 [ 106.427234] ? __pfx___x64_sys_futex+0x10/0x10 [ 106.427611] ? __secure_computing+0x18d/0x290 [ 106.427977] do_syscall_64+0xbf/0x360 [ 106.428287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.428702] RIP: 0033:0x7f39906aab19 [ 106.429000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 106.430438] RSP: 002b:00007f398dc20218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 106.431040] RAX: ffffffffffffffda RBX: 00007f39907bdf68 RCX: 00007f39906aab19 [ 106.431603] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f39907bdf6c [ 106.432162] RBP: 00007f39907bdf60 R08: 0000000000000015 R09: 0000000000000000 [ 106.432725] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f39907bdf6c [ 106.433287] R13: 00007ffef0e5571f R14: 00007f398dc20300 R15: 0000000000022000 [ 106.433859] [ 106.434048] Modules linked in: [ 106.434315] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 106.435240] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 106.435842] CPU: 1 UID: 0 PID: 3933 Comm: syz-executor.4 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 106.436790] Tainted: [D]=DIE, [W]=WARN [ 106.437098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 106.437747] RIP: 0010:perf_tp_event+0x175/0xe70 [ 106.438134] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 106.439577] RSP: 0018:ffff888043a5f7c0 EFLAGS: 00010212 [ 106.440002] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 106.440566] RDX: ffff88801b4ab700 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 106.441132] RBP: ffff888043a5fa30 R08: ffff88806cf31340 R09: ffffe8ffffd15f48 [ 106.441696] R10: 0000000000000000 R11: 000000000000002c R12: dffffc0000000000 [ 106.442265] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 106.442838] FS: 00005555708e4400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 106.443472] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.443934] CR2: 00007ff82cf08000 CR3: 000000001f82b000 CR4: 0000000000350ef0 [ 106.444503] Call Trace: [ 106.444714] [ 106.444897] ? __schedule+0xe91/0x3590 [ 106.445221] ? __pfx_perf_tp_event+0x10/0x10 [ 106.445579] ? cpu_util.constprop.0+0x17d/0x340 [ 106.445961] ? __asan_memset+0x24/0x50 [ 106.446280] ? sched_balance_find_dst_group+0xa9a/0x1c00 [ 106.446717] ? lock_release+0x1c7/0x290 [ 106.447043] ? __pfx_sched_balance_find_dst_group+0x10/0x10 [ 106.447496] ? perf_trace_run_bpf_submit+0xef/0x180 [ 106.447895] perf_trace_run_bpf_submit+0xef/0x180 [ 106.448285] perf_trace_lock_acquire+0x3c2/0x700 [ 106.448674] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 106.449097] lock_acquire+0xc5/0x2f0 [ 106.449403] ? futex_private_hash_put+0x4c/0x2d0 [ 106.449783] ? lock_release+0x1c7/0x290 [ 106.450107] futex_private_hash_put+0x5d/0x2d0 [ 106.450478] ? futex_private_hash_put+0x4c/0x2d0 [ 106.450856] futex_hash_put+0x3f/0x50 [ 106.451161] futex_wake+0x1bb/0x540 [ 106.451465] ? kernel_clone+0x204/0x7f0 [ 106.451785] ? __pfx_futex_wake+0x10/0x10 [ 106.452120] ? __pfx_kernel_clone+0x10/0x10 [ 106.452464] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 106.452879] ? __pfx___handle_mm_fault+0x10/0x10 [ 106.453265] do_futex+0x26d/0x370 [ 106.453549] ? __pfx_do_futex+0x10/0x10 [ 106.453868] ? __pfx___do_sys_clone+0x10/0x10 [ 106.454224] ? count_memcg_events+0x32b/0x420 [ 106.454601] __x64_sys_futex+0x1c9/0x4d0 [ 106.454929] ? __pfx___x64_sys_futex+0x10/0x10 [ 106.455294] ? xfd_validate_state+0x55/0x180 [ 106.455657] do_syscall_64+0xbf/0x360 [ 106.455965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.456370] RIP: 0033:0x7fd0ad158b19 [ 106.456667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 106.458093] RSP: 002b:00007ffdc1c36608 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 106.458696] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd0ad158b19 [ 106.459256] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd0ad26bf68 [ 106.459812] RBP: 00007fd0ad26bf60 R08: 00007fd0aa6ce700 R09: 0000000000000000 [ 106.460368] R10: 00007fd0aa6ce700 R11: 0000000000000246 R12: 00007fd0ad270a68 [ 106.460929] R13: 00007ffdc1c36710 R14: 00007fd0ad26bf60 R15: 0000000000019f25 [ 106.461501] [ 106.461692] Modules linked in: [ 106.461952] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#3] SMP KASAN NOPTI [ 106.462775] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 106.463408] CPU: 0 UID: 0 PID: 3931 Comm: syz-executor.0 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 106.464275] Tainted: [D]=DIE, [W]=WARN [ 106.464558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 106.465155] RIP: 0010:perf_tp_event+0x175/0xe70 [ 106.465505] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 106.466835] RSP: 0018:ffff88806ce08a40 EFLAGS: 00010012 [ 106.467225] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 106.467744] RDX: ffff888017671b80 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 106.468263] RBP: ffff88806ce08cb0 R08: ffff88806ce31490 R09: ffffe8ffffc15f48 [ 106.468787] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000 [ 106.469306] R13: 0000000000000024 R14: ffff88806ce31490 R15: dffffc0000000000 [ 106.469826] FS: 00007f398dc20700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 106.470423] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.470862] CR2: 00007f2d7aa0ed58 CR3: 000000003fb0f000 CR4: 0000000000350ef0 [ 106.471403] Call Trace: [ 106.471602] [ 106.471774] ? __kernel_text_address+0xd/0x40 [ 106.472124] ? __pfx_perf_tp_event+0x10/0x10 [ 106.472468] ? __lock_acquire+0x694/0x1b70 [ 106.472792] ? lock_is_held_type+0x9e/0x120 [ 106.473130] ? update_se+0x1ba/0x670 [ 106.473429] ? lock_is_held_type+0x9e/0x120 [ 106.473768] ? __pick_eevdf+0x326/0x570 [ 106.474077] ? update_curr+0x71/0x500 [ 106.474390] ? perf_trace_run_bpf_submit+0xef/0x180 [ 106.474771] perf_trace_run_bpf_submit+0xef/0x180 [ 106.475137] perf_trace_lock_acquire+0x3c2/0x700 [ 106.475497] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 106.475894] lock_acquire+0xc5/0x2f0 [ 106.476178] ? sched_ttwu_pending+0xa1/0x4a0 [ 106.476517] ? lock_release+0xc8/0x290 [ 106.476811] _raw_spin_lock_nested+0x29/0x40 [ 106.477144] ? sched_ttwu_pending+0xa1/0x4a0 [ 106.477478] sched_ttwu_pending+0xa1/0x4a0 [ 106.477796] ? __pfx_lapic_next_deadline+0x10/0x10 [ 106.478161] ? clockevents_program_event+0x135/0x360 [ 106.478549] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 106.478911] ? hrtimer_interrupt+0x652/0x830 [ 106.479240] __flush_smp_call_function_queue+0x434/0x740 [ 106.479646] __sysvec_call_function_single+0x6d/0x370 [ 106.480036] sysvec_call_function_single+0xa1/0xc0 [ 106.480403] [ 106.480574] [ 106.480745] asm_sysvec_call_function_single+0x1a/0x20 [ 106.481135] RIP: 0010:oops_exit+0x0/0x50 [ 106.481442] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27 [ 106.482760] RSP: 0018:ffff888043a47650 EFLAGS: 00000202 [ 106.483150] RAX: 000000000002c7dc RBX: 0000000000000212 RCX: ffffc900029fc000 [ 106.483669] RDX: 0000000000040000 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 106.484187] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90 [ 106.484705] R10: 0000000000000000 R11: 000000000000002c R12: ffff888043a47718 [ 106.485228] R13: 0000000000000000 R14: dffffc0020000032 R15: 0000000000000000 [ 106.485751] ? oops_end+0x4a/0xe0 [ 106.486023] oops_end+0x65/0xe0 [ 106.486277] exc_general_protection+0x1a2/0x330 [ 106.486638] asm_exc_general_protection+0x26/0x30 [ 106.486997] RIP: 0010:perf_tp_event+0x175/0xe70 [ 106.487347] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 106.488657] RSP: 0018:ffff888043a477c0 EFLAGS: 00010212 [ 106.489046] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc900029fc000 [ 106.489568] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 106.490086] RBP: ffff888043a47a30 R08: ffff88806ce31340 R09: ffffe8ffffc15f48 [ 106.490614] R10: 0000000000000000 R11: 000000000000002c R12: dffffc0000000000 [ 106.491132] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 106.491654] ? perf_tp_event+0x167/0xe70 [ 106.491965] ? __pfx_perf_tp_event+0x10/0x10 [ 106.492299] ? lock_acquire+0x15e/0x2f0 [ 106.492594] ? __is_insn_slot_addr+0x2e/0x290 [ 106.492934] ? find_held_lock+0x2b/0x80 [ 106.493234] ? __is_insn_slot_addr+0x136/0x290 [ 106.493578] ? lock_release+0xc8/0x290 [ 106.493874] ? __is_insn_slot_addr+0x140/0x290 [ 106.494218] ? kernel_text_address+0x5b/0xc0 [ 106.494550] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 106.494948] ? __kernel_text_address+0xd/0x40 [ 106.495286] ? unwind_get_return_address+0x59/0xa0 [ 106.495663] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 106.496060] ? arch_stack_walk+0x9c/0xf0 [ 106.496367] ? perf_trace_run_bpf_submit+0xef/0x180 [ 106.496740] perf_trace_run_bpf_submit+0xef/0x180 [ 106.497102] perf_trace_lock_acquire+0x3c2/0x700 [ 106.497459] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 106.497848] ? lock_acquire+0x15e/0x2f0 [ 106.498147] lock_acquire+0xc5/0x2f0 [ 106.498436] ? futex_private_hash_put+0x4c/0x2d0 [ 106.498788] ? futex_hash+0x2d8/0x390 [ 106.499071] ? lock_release+0xc8/0x290 [ 106.499364] futex_private_hash_put+0x5d/0x2d0 [ 106.499702] ? futex_private_hash_put+0x4c/0x2d0 [ 106.500052] futex_hash_put+0x3f/0x50 [ 106.500335] futex_wake+0x1bb/0x540 [ 106.500615] ? __pfx_futex_wake+0x10/0x10 [ 106.500926] ? kmem_cache_free+0x2a1/0x540 [ 106.501239] ? fd_install+0x1d8/0x660 [ 106.501520] ? putname.part.0+0x11b/0x160 [ 106.501832] do_futex+0x26d/0x370 [ 106.502095] ? __pfx_do_futex+0x10/0x10 [ 106.502401] __x64_sys_futex+0x1c9/0x4d0 [ 106.502704] ? __x64_sys_openat+0x142/0x200 [ 106.503026] ? __pfx___x64_sys_futex+0x10/0x10 [ 106.503370] ? __secure_computing+0x18d/0x290 [ 106.503707] do_syscall_64+0xbf/0x360 [ 106.503991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.504369] RIP: 0033:0x7f39906aab19 [ 106.504644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 106.505956] RSP: 002b:00007f398dc20218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 106.506517] RAX: ffffffffffffffda RBX: 00007f39907bdf68 RCX: 00007f39906aab19 [ 106.507034] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f39907bdf6c [ 106.507550] RBP: 00007f39907bdf60 R08: 0000000000000015 R09: 0000000000000000 [ 106.508067] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f39907bdf6c [ 106.508582] R13: 00007ffef0e5571f R14: 00007f398dc20300 R15: 0000000000022000 [ 106.509107] [ 106.509282] Modules linked in: [ 106.509524] ---[ end trace 0000000000000000 ]--- [ 106.509525] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#4] SMP KASAN NOPTI [ 106.509867] RIP: 0010:perf_tp_event+0x175/0xe70 [ 106.510726] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 106.511064] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 106.511651] CPU: 1 UID: 0 PID: 3933 Comm: syz-executor.4 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 106.512951] RSP: 0018:ffff888043a477c0 EFLAGS: 00010212 [ 106.513868] Tainted: [D]=DIE, [W]=WARN [ 106.514251] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc900029fc000 [ 106.514559] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 106.515072] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 106.515709] RIP: 0010:perf_tp_event+0x175/0xe70 [ 106.516225] RBP: ffff888043a47a30 R08: ffff88806ce31340 R09: ffffe8ffffc15f48 [ 106.516585] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 106.517097] R10: 0000000000000000 R11: 000000000000002c R12: dffffc0000000000 [ 106.518506] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012 [ 106.519022] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 106.519033] FS: 00007f398dc20700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 106.519434] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 106.519949] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.520574] RDX: ffff88801b4ab700 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 106.521091] CR2: 00007f2d7aa0ed58 CR3: 000000003fb0f000 CR4: 0000000000350ef0 [ 106.521540] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd15f48 [ 106.522058] Kernel panic - not syncing: Fatal exception in interrupt [ 107.565939] Shutting down cpus with NMI [ 107.577945] Kernel Offset: disabled [ 107.578221] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 08:16:44 Registers: info registers vcpu 0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888043a470b0 R8 =0000000000000000 R9 =ffffed1001768046 R10=0000000000000061 R11=000000000000002c R12=0000000000000061 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f398dc20700 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2d7aa0ed58 CR3=000000003fb0f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84bdec0e RDX=fffffbfff0f0ec09 RSI=0000000000000004 RDI=ffffffff87876044 RBP=ffffffff87876044 RSP=ffff888043a5f570 R8 =0000000000000000 R9 =fffffbfff0f0ec08 R10=ffffffff87876047 R11=202c746c75616620 R12=1ffff1100874beaf R13=0000000000000007 R14=fffffbfff0f0ec08 R15=ffff888043a5f5a8 RIP=ffffffff84bdeda0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555708e4400 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe3a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff82cf08000 CR3=000000001f82b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fd0ad23f7c000007fd0ad23f7c8 XMM02=00007fd0ad23f7e000007fd0ad23f7c0 XMM03=00007fd0ad23f7c800007fd0ad23f7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000