Warning: Permanently added '[localhost]:7257' (ECDSA) to the list of known hosts. 2025/09/01 11:42:58 fuzzer started 2025/09/01 11:42:58 dialing manager at localhost:35473 syzkaller login: [ 51.147971] cgroup: Unknown subsys name 'net' [ 51.206369] cgroup: Unknown subsys name 'cpuset' [ 51.218542] cgroup: Unknown subsys name 'rlimit' 2025/09/01 11:43:09 syscalls: 2214 2025/09/01 11:43:09 code coverage: enabled 2025/09/01 11:43:09 comparison tracing: enabled 2025/09/01 11:43:09 extra coverage: enabled 2025/09/01 11:43:09 setuid sandbox: enabled 2025/09/01 11:43:09 namespace sandbox: enabled 2025/09/01 11:43:09 Android sandbox: enabled 2025/09/01 11:43:09 fault injection: enabled 2025/09/01 11:43:09 leak checking: enabled 2025/09/01 11:43:09 net packet injection: enabled 2025/09/01 11:43:09 net device setup: enabled 2025/09/01 11:43:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 11:43:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 11:43:09 USB emulation: enabled 2025/09/01 11:43:09 hci packet injection: enabled 2025/09/01 11:43:09 wifi device emulation: enabled 2025/09/01 11:43:09 802.15.4 emulation: enabled 2025/09/01 11:43:09 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 11:43:09 fetching corpus: 50, signal 23145/26643 (executing program) 2025/09/01 11:43:09 fetching corpus: 100, signal 32964/37931 (executing program) 2025/09/01 11:43:09 fetching corpus: 150, signal 45311/51432 (executing program) 2025/09/01 11:43:09 fetching corpus: 200, signal 52104/59400 (executing program) 2025/09/01 11:43:09 fetching corpus: 250, signal 56444/64936 (executing program) 2025/09/01 11:43:09 fetching corpus: 300, signal 60712/70273 (executing program) 2025/09/01 11:43:09 fetching corpus: 350, signal 63657/74340 (executing program) 2025/09/01 11:43:10 fetching corpus: 400, signal 67663/79275 (executing program) 2025/09/01 11:43:10 fetching corpus: 450, signal 70703/83351 (executing program) 2025/09/01 11:43:10 fetching corpus: 500, signal 74474/87891 (executing program) 2025/09/01 11:43:10 fetching corpus: 550, signal 76987/91311 (executing program) 2025/09/01 11:43:10 fetching corpus: 600, signal 79069/94320 (executing program) 2025/09/01 11:43:10 fetching corpus: 650, signal 81876/97936 (executing program) 2025/09/01 11:43:10 fetching corpus: 700, signal 85224/101932 (executing program) 2025/09/01 11:43:10 fetching corpus: 750, signal 87237/104734 (executing program) 2025/09/01 11:43:10 fetching corpus: 800, signal 88709/107020 (executing program) 2025/09/01 11:43:10 fetching corpus: 850, signal 91073/110006 (executing program) 2025/09/01 11:43:10 fetching corpus: 900, signal 93004/112659 (executing program) 2025/09/01 11:43:11 fetching corpus: 950, signal 94489/114870 (executing program) 2025/09/01 11:43:11 fetching corpus: 1000, signal 95450/116640 (executing program) 2025/09/01 11:43:11 fetching corpus: 1050, signal 97419/119154 (executing program) 2025/09/01 11:43:11 fetching corpus: 1100, signal 99140/121443 (executing program) 2025/09/01 11:43:11 fetching corpus: 1150, signal 102143/124648 (executing program) 2025/09/01 11:43:11 fetching corpus: 1200, signal 103065/126276 (executing program) 2025/09/01 11:43:11 fetching corpus: 1250, signal 104696/128415 (executing program) 2025/09/01 11:43:11 fetching corpus: 1300, signal 106149/130413 (executing program) 2025/09/01 11:43:11 fetching corpus: 1350, signal 107307/132114 (executing program) 2025/09/01 11:43:11 fetching corpus: 1400, signal 108376/133744 (executing program) 2025/09/01 11:43:11 fetching corpus: 1450, signal 110274/135993 (executing program) 2025/09/01 11:43:12 fetching corpus: 1500, signal 111588/137792 (executing program) 2025/09/01 11:43:12 fetching corpus: 1550, signal 113261/139745 (executing program) 2025/09/01 11:43:12 fetching corpus: 1600, signal 114019/141101 (executing program) 2025/09/01 11:43:12 fetching corpus: 1650, signal 115247/142723 (executing program) 2025/09/01 11:43:12 fetching corpus: 1700, signal 116400/144292 (executing program) 2025/09/01 11:43:12 fetching corpus: 1750, signal 117554/145778 (executing program) 2025/09/01 11:43:12 fetching corpus: 1800, signal 118696/147333 (executing program) 2025/09/01 11:43:12 fetching corpus: 1850, signal 119559/148629 (executing program) 2025/09/01 11:43:12 fetching corpus: 1900, signal 120453/149952 (executing program) 2025/09/01 11:43:12 fetching corpus: 1950, signal 121240/151210 (executing program) 2025/09/01 11:43:12 fetching corpus: 2000, signal 121672/152230 (executing program) 2025/09/01 11:43:12 fetching corpus: 2050, signal 122484/153428 (executing program) 2025/09/01 11:43:13 fetching corpus: 2100, signal 123545/154738 (executing program) 2025/09/01 11:43:13 fetching corpus: 2150, signal 124513/156020 (executing program) 2025/09/01 11:43:13 fetching corpus: 2200, signal 125365/157221 (executing program) 2025/09/01 11:43:13 fetching corpus: 2250, signal 126133/158306 (executing program) 2025/09/01 11:43:13 fetching corpus: 2300, signal 127220/159567 (executing program) 2025/09/01 11:43:13 fetching corpus: 2350, signal 127999/160615 (executing program) 2025/09/01 11:43:13 fetching corpus: 2400, signal 128728/161648 (executing program) 2025/09/01 11:43:13 fetching corpus: 2450, signal 129932/162883 (executing program) 2025/09/01 11:43:13 fetching corpus: 2500, signal 130472/163807 (executing program) 2025/09/01 11:43:13 fetching corpus: 2550, signal 131412/164890 (executing program) 2025/09/01 11:43:13 fetching corpus: 2600, signal 132158/165864 (executing program) 2025/09/01 11:43:14 fetching corpus: 2650, signal 132838/166797 (executing program) 2025/09/01 11:43:14 fetching corpus: 2700, signal 133476/167696 (executing program) 2025/09/01 11:43:14 fetching corpus: 2750, signal 134225/168587 (executing program) 2025/09/01 11:43:14 fetching corpus: 2800, signal 135991/169917 (executing program) 2025/09/01 11:43:14 fetching corpus: 2850, signal 136785/170856 (executing program) 2025/09/01 11:43:14 fetching corpus: 2900, signal 137431/171715 (executing program) 2025/09/01 11:43:14 fetching corpus: 2950, signal 138373/172635 (executing program) 2025/09/01 11:43:14 fetching corpus: 3000, signal 139206/173508 (executing program) 2025/09/01 11:43:14 fetching corpus: 3050, signal 139797/174303 (executing program) 2025/09/01 11:43:14 fetching corpus: 3100, signal 140335/175048 (executing program) 2025/09/01 11:43:14 fetching corpus: 3150, signal 140891/175821 (executing program) 2025/09/01 11:43:14 fetching corpus: 3200, signal 141541/176611 (executing program) 2025/09/01 11:43:15 fetching corpus: 3250, signal 142275/177405 (executing program) 2025/09/01 11:43:15 fetching corpus: 3300, signal 142759/178092 (executing program) 2025/09/01 11:43:15 fetching corpus: 3350, signal 143210/178755 (executing program) 2025/09/01 11:43:15 fetching corpus: 3400, signal 143786/179470 (executing program) 2025/09/01 11:43:15 fetching corpus: 3450, signal 144258/180159 (executing program) 2025/09/01 11:43:15 fetching corpus: 3500, signal 145120/180933 (executing program) 2025/09/01 11:43:15 fetching corpus: 3550, signal 145896/181633 (executing program) 2025/09/01 11:43:15 fetching corpus: 3600, signal 146501/182297 (executing program) 2025/09/01 11:43:15 fetching corpus: 3650, signal 147036/182909 (executing program) 2025/09/01 11:43:15 fetching corpus: 3700, signal 148037/183672 (executing program) 2025/09/01 11:43:15 fetching corpus: 3750, signal 148626/184317 (executing program) 2025/09/01 11:43:15 fetching corpus: 3800, signal 149163/184912 (executing program) 2025/09/01 11:43:15 fetching corpus: 3850, signal 150270/185610 (executing program) 2025/09/01 11:43:16 fetching corpus: 3900, signal 150918/186147 (executing program) 2025/09/01 11:43:16 fetching corpus: 3950, signal 151398/186696 (executing program) 2025/09/01 11:43:16 fetching corpus: 4000, signal 152244/187311 (executing program) 2025/09/01 11:43:16 fetching corpus: 4050, signal 153058/187890 (executing program) 2025/09/01 11:43:16 fetching corpus: 4100, signal 153468/188390 (executing program) 2025/09/01 11:43:16 fetching corpus: 4150, signal 154026/188869 (executing program) 2025/09/01 11:43:16 fetching corpus: 4200, signal 154440/189318 (executing program) 2025/09/01 11:43:16 fetching corpus: 4250, signal 154832/189758 (executing program) 2025/09/01 11:43:16 fetching corpus: 4300, signal 155151/190193 (executing program) 2025/09/01 11:43:16 fetching corpus: 4350, signal 156186/190675 (executing program) 2025/09/01 11:43:16 fetching corpus: 4400, signal 156539/191133 (executing program) 2025/09/01 11:43:17 fetching corpus: 4450, signal 156992/191592 (executing program) 2025/09/01 11:43:17 fetching corpus: 4500, signal 157553/192049 (executing program) 2025/09/01 11:43:17 fetching corpus: 4550, signal 158062/192429 (executing program) 2025/09/01 11:43:17 fetching corpus: 4600, signal 158529/192807 (executing program) 2025/09/01 11:43:17 fetching corpus: 4650, signal 158995/193175 (executing program) 2025/09/01 11:43:17 fetching corpus: 4700, signal 159314/193528 (executing program) 2025/09/01 11:43:17 fetching corpus: 4750, signal 160073/193674 (executing program) 2025/09/01 11:43:17 fetching corpus: 4800, signal 160670/193674 (executing program) 2025/09/01 11:43:17 fetching corpus: 4850, signal 161114/193676 (executing program) 2025/09/01 11:43:17 fetching corpus: 4900, signal 161562/193708 (executing program) 2025/09/01 11:43:17 fetching corpus: 4950, signal 161977/193733 (executing program) 2025/09/01 11:43:18 fetching corpus: 5000, signal 162404/193735 (executing program) 2025/09/01 11:43:18 fetching corpus: 5050, signal 162756/193756 (executing program) 2025/09/01 11:43:18 fetching corpus: 5100, signal 163084/193757 (executing program) 2025/09/01 11:43:18 fetching corpus: 5150, signal 163497/193784 (executing program) 2025/09/01 11:43:18 fetching corpus: 5200, signal 164071/193785 (executing program) 2025/09/01 11:43:18 fetching corpus: 5250, signal 164382/193788 (executing program) 2025/09/01 11:43:18 fetching corpus: 5300, signal 164786/193790 (executing program) 2025/09/01 11:43:18 fetching corpus: 5350, signal 165277/193795 (executing program) 2025/09/01 11:43:18 fetching corpus: 5400, signal 165763/193845 (executing program) 2025/09/01 11:43:18 fetching corpus: 5450, signal 166287/193847 (executing program) 2025/09/01 11:43:18 fetching corpus: 5500, signal 166470/193856 (executing program) 2025/09/01 11:43:19 fetching corpus: 5550, signal 166767/193858 (executing program) 2025/09/01 11:43:19 fetching corpus: 5600, signal 167249/193862 (executing program) 2025/09/01 11:43:19 fetching corpus: 5650, signal 167620/193862 (executing program) 2025/09/01 11:43:19 fetching corpus: 5700, signal 168068/193865 (executing program) 2025/09/01 11:43:19 fetching corpus: 5750, signal 168392/193869 (executing program) 2025/09/01 11:43:19 fetching corpus: 5800, signal 168756/193871 (executing program) 2025/09/01 11:43:19 fetching corpus: 5850, signal 169320/193884 (executing program) 2025/09/01 11:43:19 fetching corpus: 5900, signal 169681/193885 (executing program) 2025/09/01 11:43:19 fetching corpus: 5950, signal 170037/193888 (executing program) 2025/09/01 11:43:19 fetching corpus: 6000, signal 170457/193922 (executing program) 2025/09/01 11:43:19 fetching corpus: 6050, signal 170815/193935 (executing program) 2025/09/01 11:43:19 fetching corpus: 6100, signal 171165/193987 (executing program) 2025/09/01 11:43:20 fetching corpus: 6150, signal 171877/194015 (executing program) 2025/09/01 11:43:20 fetching corpus: 6200, signal 172169/194022 (executing program) 2025/09/01 11:43:20 fetching corpus: 6250, signal 172646/194025 (executing program) 2025/09/01 11:43:20 fetching corpus: 6300, signal 172987/194039 (executing program) 2025/09/01 11:43:20 fetching corpus: 6350, signal 173401/194039 (executing program) 2025/09/01 11:43:20 fetching corpus: 6400, signal 173849/194054 (executing program) 2025/09/01 11:43:20 fetching corpus: 6450, signal 174197/194060 (executing program) 2025/09/01 11:43:20 fetching corpus: 6500, signal 174369/194067 (executing program) 2025/09/01 11:43:20 fetching corpus: 6550, signal 174703/194072 (executing program) 2025/09/01 11:43:20 fetching corpus: 6600, signal 174964/194079 (executing program) 2025/09/01 11:43:20 fetching corpus: 6650, signal 175258/194079 (executing program) 2025/09/01 11:43:20 fetching corpus: 6700, signal 175764/194079 (executing program) 2025/09/01 11:43:20 fetching corpus: 6750, signal 176097/194093 (executing program) 2025/09/01 11:43:20 fetching corpus: 6800, signal 176503/194096 (executing program) 2025/09/01 11:43:21 fetching corpus: 6850, signal 176733/194099 (executing program) 2025/09/01 11:43:21 fetching corpus: 6900, signal 176929/194100 (executing program) 2025/09/01 11:43:21 fetching corpus: 6950, signal 177268/194104 (executing program) 2025/09/01 11:43:21 fetching corpus: 7000, signal 179318/194106 (executing program) 2025/09/01 11:43:21 fetching corpus: 7050, signal 179691/194115 (executing program) 2025/09/01 11:43:21 fetching corpus: 7100, signal 180103/194116 (executing program) 2025/09/01 11:43:21 fetching corpus: 7150, signal 180703/194125 (executing program) 2025/09/01 11:43:21 fetching corpus: 7200, signal 181008/194130 (executing program) 2025/09/01 11:43:21 fetching corpus: 7250, signal 181240/194154 (executing program) 2025/09/01 11:43:21 fetching corpus: 7300, signal 181518/194157 (executing program) 2025/09/01 11:43:21 fetching corpus: 7350, signal 181891/194166 (executing program) 2025/09/01 11:43:21 fetching corpus: 7400, signal 182231/194183 (executing program) 2025/09/01 11:43:21 fetching corpus: 7450, signal 182600/194196 (executing program) 2025/09/01 11:43:21 fetching corpus: 7500, signal 182917/194211 (executing program) 2025/09/01 11:43:22 fetching corpus: 7550, signal 183233/194223 (executing program) 2025/09/01 11:43:22 fetching corpus: 7600, signal 183578/194255 (executing program) 2025/09/01 11:43:22 fetching corpus: 7650, signal 183845/194265 (executing program) 2025/09/01 11:43:22 fetching corpus: 7700, signal 184215/194270 (executing program) 2025/09/01 11:43:22 fetching corpus: 7750, signal 184564/194340 (executing program) 2025/09/01 11:43:22 fetching corpus: 7800, signal 184792/194347 (executing program) 2025/09/01 11:43:22 fetching corpus: 7850, signal 185060/194358 (executing program) 2025/09/01 11:43:22 fetching corpus: 7900, signal 185444/194364 (executing program) 2025/09/01 11:43:22 fetching corpus: 7950, signal 185677/194365 (executing program) 2025/09/01 11:43:22 fetching corpus: 8000, signal 185934/194371 (executing program) 2025/09/01 11:43:22 fetching corpus: 8050, signal 186158/194375 (executing program) 2025/09/01 11:43:22 fetching corpus: 8100, signal 186397/194409 (executing program) 2025/09/01 11:43:22 fetching corpus: 8150, signal 186610/194418 (executing program) 2025/09/01 11:43:23 fetching corpus: 8200, signal 186976/194436 (executing program) 2025/09/01 11:43:23 fetching corpus: 8250, signal 187163/194443 (executing program) 2025/09/01 11:43:23 fetching corpus: 8300, signal 187656/194443 (executing program) 2025/09/01 11:43:23 fetching corpus: 8350, signal 187853/194443 (executing program) 2025/09/01 11:43:23 fetching corpus: 8400, signal 188246/194446 (executing program) 2025/09/01 11:43:23 fetching corpus: 8450, signal 188447/194449 (executing program) 2025/09/01 11:43:23 fetching corpus: 8500, signal 188689/194450 (executing program) 2025/09/01 11:43:23 fetching corpus: 8550, signal 188910/194451 (executing program) 2025/09/01 11:43:23 fetching corpus: 8600, signal 189155/194458 (executing program) 2025/09/01 11:43:23 fetching corpus: 8650, signal 189456/194459 (executing program) 2025/09/01 11:43:23 fetching corpus: 8700, signal 189855/194460 (executing program) 2025/09/01 11:43:23 fetching corpus: 8750, signal 190095/194463 (executing program) 2025/09/01 11:43:24 fetching corpus: 8800, signal 190278/194475 (executing program) 2025/09/01 11:43:24 fetching corpus: 8850, signal 190504/194476 (executing program) 2025/09/01 11:43:24 fetching corpus: 8900, signal 190778/194476 (executing program) 2025/09/01 11:43:24 fetching corpus: 8950, signal 191141/194482 (executing program) 2025/09/01 11:43:24 fetching corpus: 9000, signal 191446/194487 (executing program) 2025/09/01 11:43:24 fetching corpus: 9050, signal 191589/194493 (executing program) 2025/09/01 11:43:24 fetching corpus: 9063, signal 191660/194493 (executing program) 2025/09/01 11:43:24 fetching corpus: 9063, signal 191660/194493 (executing program) 2025/09/01 11:43:25 starting 8 fuzzer processes 11:43:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0xed8cc6e437879ca9, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) 11:43:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x0, 0x8}) 11:43:25 executing program 5: syz_open_dev$usbmon(&(0x7f0000001400), 0x0, 0x0) [ 78.010872] audit: type=1400 audit(1756727005.975:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:43:25 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001740)={0x0, &(0x7f0000001700)}, 0x10) 11:43:26 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x28, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x28}], 0x1}, 0x0) 11:43:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001ac0)={0x28, r1, 0x5, 0x0, 0x0, {{0x15}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 11:43:26 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:43:26 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 79.161933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.164147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.166113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.172381] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.175469] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.294981] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.297112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.299883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.306714] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.312676] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.364652] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.383850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.390077] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.391253] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.393674] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.396705] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.401338] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.404555] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.406114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.409710] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.414705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.418717] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.428348] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.429670] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 79.432026] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.433717] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 79.442171] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.443564] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 79.450304] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 79.454039] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 79.462359] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 79.464594] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 79.466872] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 79.474921] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 79.476483] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 79.480911] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 79.490456] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 79.499054] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 79.500245] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 79.518617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 81.193897] Bluetooth: hci0: command tx timeout [ 81.385886] Bluetooth: hci1: command tx timeout [ 81.449546] Bluetooth: hci3: command tx timeout [ 81.513704] Bluetooth: hci5: command tx timeout [ 81.514394] Bluetooth: hci4: command tx timeout [ 81.514487] Bluetooth: hci2: command tx timeout [ 81.577551] Bluetooth: hci7: command tx timeout [ 81.579481] Bluetooth: hci6: command tx timeout [ 83.241971] Bluetooth: hci0: command tx timeout [ 83.433604] Bluetooth: hci1: command tx timeout [ 83.497588] Bluetooth: hci3: command tx timeout [ 83.562157] Bluetooth: hci4: command tx timeout [ 83.562810] Bluetooth: hci2: command tx timeout [ 83.562877] Bluetooth: hci5: command tx timeout [ 83.627462] Bluetooth: hci7: command tx timeout [ 83.627934] Bluetooth: hci6: command tx timeout [ 85.289532] Bluetooth: hci0: command tx timeout [ 85.481521] Bluetooth: hci1: command tx timeout [ 85.545488] Bluetooth: hci3: command tx timeout [ 85.609475] Bluetooth: hci4: command tx timeout [ 85.609562] Bluetooth: hci2: command tx timeout [ 85.609907] Bluetooth: hci5: command tx timeout [ 85.676446] Bluetooth: hci6: command tx timeout [ 85.676872] Bluetooth: hci7: command tx timeout [ 87.337658] Bluetooth: hci0: command tx timeout [ 87.529451] Bluetooth: hci1: command tx timeout [ 87.593619] Bluetooth: hci3: command tx timeout [ 87.657468] Bluetooth: hci4: command tx timeout [ 87.657907] Bluetooth: hci5: command tx timeout [ 87.659732] Bluetooth: hci2: command tx timeout [ 87.721495] Bluetooth: hci7: command tx timeout [ 87.721924] Bluetooth: hci6: command tx timeout [ 118.507149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.507843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.815252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.816066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.869833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.870388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.977174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.977881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.056587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.057160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.169301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.170934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.440598] audit: type=1400 audit(1756727048.401:8): avc: denied { open } for pid=3848 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 120.455604] audit: type=1400 audit(1756727048.401:9): avc: denied { kernel } for pid=3848 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 120.593483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.594091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.721068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.722028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.935693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.936264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.044496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.046495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.226250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.226864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.283830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.284484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.385724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.387127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.438218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.439307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.499753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.500294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.549139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.549728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:44:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}, 0x0) recvmsg$unix(r0, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)=[@cred={{0x1c}}], 0x20}, 0x0) 11:44:09 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:44:09 executing program 5: syz_open_dev$usbmon(&(0x7f0000001400), 0x0, 0x0) 11:44:09 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:44:09 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 11:44:09 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000280)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4000000000000000b0000000004000008000000d2c2000012039ba90fce5a2f9bb41cd69c982298d2cfeecb34d4072e51b1aedd37c39e87c776ee947d4c2ef678758b6ec3f1dd8c08788df0442db158c9d0661acb1fccb95e9dbd7abacc911f9118c572a03136c3afc6eeab55cc2e26a32c584b9e636a083cc5c28635029b892e39578a26401c5fe7f183fd2d0a2e37ded7d167837dda57829deb9694eff32384c7312b49673451259dfc692aab36bfbefc71c7decaf124325b22e9af21f3023299", 0x102, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000006c0)=ANY=[]) 11:44:09 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001740)={0x0, &(0x7f0000001700)}, 0x10) 11:44:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000080)=0x8, 0x4) r2 = dup3(r1, r0, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x9, 0x0, &(0x7f0000000240)) [ 121.827219] loop7: detected capacity change from 0 to 16 [ 121.843491] EXT4-fs (loop7): unsupported inode size: 786 [ 121.843950] EXT4-fs (loop7): blocksize: 4096 11:44:09 executing program 0: prctl$PR_SET_SECCOMP(0xe, 0x0, 0x0) [ 121.863293] loop7: detected capacity change from 0 to 16 11:44:09 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001740)={0x0, &(0x7f0000001700)}, 0x10) [ 121.877707] EXT4-fs (loop7): unsupported inode size: 786 [ 121.878139] EXT4-fs (loop7): blocksize: 4096 11:44:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=0x101, 0x4) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) 11:44:09 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5c000, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000400)) 11:44:09 executing program 5: syz_open_dev$usbmon(&(0x7f0000001400), 0x0, 0x0) [ 121.996154] loop7: detected capacity change from 0 to 736 [ 122.050740] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI [ 122.051591] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 122.052290] CPU: 0 UID: 0 PID: 3938 Comm: syz-executor.5 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 122.053771] Tainted: [W]=WARN [ 122.054234] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 122.055762] RIP: 0010:perf_tp_event+0x175/0xe70 [ 122.056621] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 122.059942] RSP: 0018:ffff88801632f600 EFLAGS: 00010212 [ 122.060944] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90003ca8000 [ 122.061877] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 122.062410] RBP: ffff88801632f870 R08: ffff88806ce31340 R09: ffffe8ffffc16bb0 [ 122.062964] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 122.063521] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 122.064082] FS: 00007f20a2f50700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 122.064703] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.065161] CR2: 000055558225fc18 CR3: 0000000045a98000 CR4: 0000000000350ef0 [ 122.065737] Call Trace: [ 122.065944] [ 122.066132] ? __pfx_perf_tp_event+0x10/0x10 [ 122.066508] ? perf_trace_run_bpf_submit+0xef/0x180 [ 122.066905] perf_trace_run_bpf_submit+0xef/0x180 [ 122.067293] perf_trace_lock+0x337/0x5d0 [ 122.067629] ? __pfx_perf_trace_lock+0x10/0x10 [ 122.067993] ? lock_acquire+0x15e/0x2f0 [ 122.068310] ? futex_ref_get+0x48/0x300 [ 122.068631] ? futex_ref_get+0x114/0x300 [ 122.068950] ? futex_hash+0x15c/0x390 [ 122.069252] lock_release+0x1ab/0x290 [ 122.069586] ? futex_hash+0x15c/0x390 [ 122.069892] futex_ref_get+0x119/0x300 [ 122.070205] ? futex_hash+0x15c/0x390 [ 122.070507] futex_hash+0x70/0x390 [ 122.070792] futex_wait_setup+0xae/0x550 [ 122.071122] __futex_wait+0x151/0x300 [ 122.071434] ? __pfx___futex_wait+0x10/0x10 [ 122.071781] ? __pfx_futex_wake_mark+0x10/0x10 [ 122.072153] futex_wait+0xde/0x380 [ 122.072447] ? __pfx_futex_wait+0x10/0x10 [ 122.072781] ? perf_trace_lock+0xb5/0x5d0 [ 122.073113] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 122.073541] do_futex+0x2ee/0x370 [ 122.073840] ? __pfx_do_futex+0x10/0x10 [ 122.074157] ? do_raw_spin_lock+0x123/0x260 [ 122.074510] __x64_sys_futex+0x1c9/0x4d0 [ 122.074828] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 122.075265] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 122.075657] ? __pfx___x64_sys_futex+0x10/0x10 [ 122.076007] ? kcov_ioctl+0x386/0x6c0 [ 122.076303] do_syscall_64+0xbf/0x360 [ 122.076595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.076981] RIP: 0033:0x7f20a59dab19 [ 122.077262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.078611] RSP: 002b:00007f20a2f50218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.079175] RAX: ffffffffffffffda RBX: 00007f20a5aedf68 RCX: 00007f20a59dab19 [ 122.079708] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f20a5aedf68 [ 122.080232] RBP: 00007f20a5aedf60 R08: 00007f20a2f50700 R09: 0000000000000000 [ 122.080758] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f20a5aedf6c [ 122.081288] R13: 00007fff8792751f R14: 00007f20a2f50300 R15: 0000000000022000 [ 122.081839] [ 122.082019] Modules linked in: [ 122.082288] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI [ 122.083103] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 122.083742] CPU: 0 UID: 0 PID: 3938 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 122.084608] Tainted: [D]=DIE, [W]=WARN [ 122.084903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 122.085518] RIP: 0010:perf_tp_event+0x175/0xe70 [ 122.085893] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 122.087212] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012 [ 122.087605] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 122.088126] RDX: ffff888015f3d280 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 122.088646] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc16bb0 [ 122.089168] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000 [ 122.089709] R13: 000000000000002c R14: ffff88806ce31490 R15: dffffc0000000000 [ 122.090236] FS: 00007f20a2f50700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 122.090824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.091250] CR2: 000055558225fc18 CR3: 0000000045a98000 CR4: 0000000000350ef0 [ 122.091780] Call Trace: [ 122.091976] [ 122.092146] ? __pfx_perf_tp_event+0x10/0x10 [ 122.092488] ? stack_depot_save_flags+0x2c/0xa20 [ 122.092850] ? kasan_save_stack+0x34/0x50 [ 122.093161] ? kasan_save_stack+0x24/0x50 [ 122.093514] ? kasan_save_track+0x14/0x30 [ 122.093850] ? __kasan_save_free_info+0x3a/0x60 [ 122.094230] ? __kasan_slab_free+0x3f/0x50 [ 122.094579] ? kmem_cache_free+0x2a1/0x540 [ 122.094922] ? rcu_core+0x7c8/0x1800 [ 122.095226] ? handle_softirqs+0x1b1/0x770 [ 122.095572] ? __irq_exit_rcu+0xc4/0x100 [ 122.095910] ? irq_exit_rcu+0x9/0x20 [ 122.096212] ? perf_trace_run_bpf_submit+0xef/0x180 [ 122.096615] ? __create_object+0x1d/0x80 [ 122.096949] ? kmem_cache_alloc_noprof+0x414/0x690 [ 122.097344] ? __proc_create+0x306/0x920 [ 122.097703] ? proc_create_reg+0xb6/0x180 [ 122.098049] ? proc_create_data+0x87/0x110 [ 122.098393] ? cache_register_net+0x1de/0x5e0 [ 122.098758] ? perf_trace_run_bpf_submit+0xef/0x180 [ 122.099166] ? lock_is_held_type+0x9e/0x120 [ 122.099517] ? lock_is_held_type+0x9e/0x120 [ 122.099866] ? perf_trace_run_bpf_submit+0xef/0x180 [ 122.100275] perf_trace_run_bpf_submit+0xef/0x180 [ 122.100676] perf_trace_lock+0x337/0x5d0 [ 122.101013] ? __pfx_perf_trace_lock+0x10/0x10 [ 122.101385] ? check_preempt_wakeup_fair+0x406/0x950 [ 122.101813] ? hrtimer_interrupt+0x114/0x830 [ 122.102171] lock_release+0x1ab/0x290 [ 122.102487] ktime_get_update_offsets_now+0xab/0x3c0 [ 122.102893] ? hrtimer_interrupt+0x114/0x830 [ 122.103258] hrtimer_interrupt+0x114/0x830 [ 122.103600] ? __pfx_flush_tlb_func+0x10/0x10 [ 122.103965] ? trace_csd_function_exit+0x134/0x190 [ 122.104368] ? __flush_smp_call_function_queue+0x28c/0x740 [ 122.104822] __sysvec_apic_timer_interrupt+0xbb/0x330 [ 122.105238] sysvec_apic_timer_interrupt+0x6b/0x80 [ 122.105644] [ 122.105824] [ 122.106005] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 122.106417] RIP: 0010:oops_exit+0x0/0x50 [ 122.106738] Code: 00 3a 00 be ff ff ff ff 48 c7 c7 50 b4 43 86 e8 c6 0f f9 ff 5b e9 50 00 3a 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 36 00 3a 00 8b 1d c0 3d 4f 06 31 ff 89 de e8 57 [ 122.108129] RSP: 0018:ffff88801632f490 EFLAGS: 00000202 [ 122.108547] RAX: 0000000000026ea3 RBX: 0000000000000212 RCX: ffffc90003ca8000 [ 122.109076] RDX: 0000000000040000 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 122.109607] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f12690 [ 122.110128] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801632f558 [ 122.110654] R13: 0000000000000000 R14: dffffc0020000032 R15: 0000000000000000 [ 122.111182] ? oops_end+0x4a/0xe0 [ 122.111454] oops_end+0x65/0xe0 [ 122.111720] exc_general_protection+0x1a2/0x330 [ 122.112074] asm_exc_general_protection+0x26/0x30 [ 122.112433] RIP: 0010:perf_tp_event+0x175/0xe70 [ 122.112791] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 122.114133] RSP: 0018:ffff88801632f600 EFLAGS: 00010212 [ 122.114525] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90003ca8000 [ 122.115052] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 122.115599] RBP: ffff88801632f870 R08: ffff88806ce31340 R09: ffffe8ffffc16bb0 [ 122.116149] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 122.116701] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 122.117258] ? perf_tp_event+0x167/0xe70 [ 122.117610] ? __pfx_perf_tp_event+0x10/0x10 [ 122.117990] ? perf_trace_run_bpf_submit+0xef/0x180 [ 122.118386] perf_trace_run_bpf_submit+0xef/0x180 [ 122.118772] perf_trace_lock+0x337/0x5d0 [ 122.119097] ? __pfx_perf_trace_lock+0x10/0x10 [ 122.119461] ? lock_acquire+0x15e/0x2f0 [ 122.119772] ? futex_ref_get+0x48/0x300 [ 122.120083] ? futex_ref_get+0x114/0x300 [ 122.120402] ? futex_hash+0x15c/0x390 [ 122.120709] lock_release+0x1ab/0x290 [ 122.121010] ? futex_hash+0x15c/0x390 [ 122.121313] futex_ref_get+0x119/0x300 [ 122.121636] ? futex_hash+0x15c/0x390 [ 122.121935] futex_hash+0x70/0x390 [ 122.122218] futex_wait_setup+0xae/0x550 [ 122.122549] __futex_wait+0x151/0x300 [ 122.122852] ? __pfx___futex_wait+0x10/0x10 [ 122.123195] ? __pfx_futex_wake_mark+0x10/0x10 [ 122.123576] futex_wait+0xde/0x380 [ 122.123864] ? __pfx_futex_wait+0x10/0x10 [ 122.124190] ? perf_trace_lock+0xb5/0x5d0 [ 122.124522] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 122.124928] do_futex+0x2ee/0x370 [ 122.125205] ? __pfx_do_futex+0x10/0x10 [ 122.125540] ? do_raw_spin_lock+0x123/0x260 [ 122.125893] __x64_sys_futex+0x1c9/0x4d0 [ 122.126212] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 122.126668] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 122.127075] ? __pfx___x64_sys_futex+0x10/0x10 [ 122.127434] ? kcov_ioctl+0x386/0x6c0 [ 122.127744] do_syscall_64+0xbf/0x360 [ 122.128044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.128442] RIP: 0033:0x7f20a59dab19 [ 122.128738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.130200] RSP: 002b:00007f20a2f50218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.130807] RAX: ffffffffffffffda RBX: 00007f20a5aedf68 RCX: 00007f20a59dab19 [ 122.131369] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f20a5aedf68 [ 122.131934] RBP: 00007f20a5aedf60 R08: 00007f20a2f50700 R09: 0000000000000000 [ 122.132495] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f20a5aedf6c [ 122.133060] R13: 00007fff8792751f R14: 00007f20a2f50300 R15: 0000000000022000 [ 122.133644] [ 122.133833] Modules linked in: [ 122.134099] ---[ end trace 0000000000000000 ]--- [ 122.134467] RIP: 0010:perf_tp_event+0x175/0xe70 [ 122.134843] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 122.136277] RSP: 0018:ffff88801632f600 EFLAGS: 00010212 [ 122.136703] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90003ca8000 [ 122.137268] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 122.137857] RBP: ffff88801632f870 R08: ffff88806ce31340 R09: ffffe8ffffc16bb0 [ 122.138420] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 122.138989] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 122.139556] FS: 00007f20a2f50700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 122.140197] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.140663] CR2: 000055558225fc18 CR3: 0000000045a98000 CR4: 0000000000350ef0 [ 122.141231] Kernel panic - not syncing: Fatal exception in interrupt [ 122.141869] Kernel Offset: disabled [ 122.142162] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 11:44:10 Registers: info registers vcpu 0 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff88801632eef0 R8 =0000000000000000 R9 =ffffed100134b046 R10=0000000000000033 R11=0000000065646f43 R12=0000000000000033 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0 RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f20a2f50700 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe5000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055558225fc18 CR3=0000000045a98000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f20a5ac17c000007f20a5ac17c8 XMM02=00007f20a5ac17e000007f20a5ac17c0 XMM03=00007f20a5ac17c800007f20a5ac17c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce3de20 RCX=ffffffff816880fc RDX=ffff888015d1d280 RSI=ffffffff816880d6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88801767f8d8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=1ffff1100d9e6bb1 R12=ffffed100d9c7bc5 R13=ffff88806ce3de28 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff816880d8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc571b1a8c0 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe0b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a98c91d330 CR3=000000000c576000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=ffffffffffffffff000055a98c909190 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=000055a98c9162900000000600000005 XMM07=00000000000000000000000000000000 XMM08=00000000000000310000000000000030 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000