Warning: Permanently added '[localhost]:64392' (ECDSA) to the list of known hosts.
2025/09/01 12:28:12 fuzzer started
2025/09/01 12:28:12 dialing manager at localhost:35473
syzkaller login: [   51.238258] cgroup: Unknown subsys name 'net'
[   51.292034] cgroup: Unknown subsys name 'cpuset'
[   51.307179] cgroup: Unknown subsys name 'rlimit'
2025/09/01 12:28:22 syscalls: 2214
2025/09/01 12:28:22 code coverage: enabled
2025/09/01 12:28:22 comparison tracing: enabled
2025/09/01 12:28:22 extra coverage: enabled
2025/09/01 12:28:22 setuid sandbox: enabled
2025/09/01 12:28:22 namespace sandbox: enabled
2025/09/01 12:28:22 Android sandbox: enabled
2025/09/01 12:28:22 fault injection: enabled
2025/09/01 12:28:22 leak checking: enabled
2025/09/01 12:28:22 net packet injection: enabled
2025/09/01 12:28:22 net device setup: enabled
2025/09/01 12:28:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/09/01 12:28:22 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/09/01 12:28:22 USB emulation: enabled
2025/09/01 12:28:22 hci packet injection: enabled
2025/09/01 12:28:22 wifi device emulation: enabled
2025/09/01 12:28:22 802.15.4 emulation: enabled
2025/09/01 12:28:22 fetching corpus: 0, signal 0/2000 (executing program)
2025/09/01 12:28:22 fetching corpus: 50, signal 21041/24565 (executing program)
2025/09/01 12:28:23 fetching corpus: 100, signal 31264/36286 (executing program)
2025/09/01 12:28:23 fetching corpus: 150, signal 41749/47989 (executing program)
2025/09/01 12:28:23 fetching corpus: 200, signal 47830/55315 (executing program)
2025/09/01 12:28:23 fetching corpus: 250, signal 52368/61078 (executing program)
2025/09/01 12:28:23 fetching corpus: 300, signal 55344/65321 (executing program)
2025/09/01 12:28:23 fetching corpus: 350, signal 59698/70774 (executing program)
2025/09/01 12:28:23 fetching corpus: 400, signal 63012/75165 (executing program)
2025/09/01 12:28:23 fetching corpus: 450, signal 66026/79207 (executing program)
2025/09/01 12:28:23 fetching corpus: 500, signal 73052/86819 (executing program)
2025/09/01 12:28:23 fetching corpus: 550, signal 75955/90645 (executing program)
2025/09/01 12:28:24 fetching corpus: 600, signal 78955/94489 (executing program)
2025/09/01 12:28:24 fetching corpus: 650, signal 80517/97007 (executing program)
2025/09/01 12:28:24 fetching corpus: 700, signal 82130/99586 (executing program)
2025/09/01 12:28:24 fetching corpus: 750, signal 84172/102448 (executing program)
2025/09/01 12:28:24 fetching corpus: 800, signal 86551/105562 (executing program)
2025/09/01 12:28:24 fetching corpus: 850, signal 89329/108990 (executing program)
2025/09/01 12:28:24 fetching corpus: 900, signal 90808/111259 (executing program)
2025/09/01 12:28:24 fetching corpus: 950, signal 92881/114012 (executing program)
2025/09/01 12:28:24 fetching corpus: 1000, signal 96818/118202 (executing program)
2025/09/01 12:28:24 fetching corpus: 1050, signal 98849/120771 (executing program)
2025/09/01 12:28:25 fetching corpus: 1100, signal 100914/123386 (executing program)
2025/09/01 12:28:25 fetching corpus: 1150, signal 102455/125512 (executing program)
2025/09/01 12:28:25 fetching corpus: 1200, signal 103939/127572 (executing program)
2025/09/01 12:28:25 fetching corpus: 1250, signal 106619/130463 (executing program)
2025/09/01 12:28:25 fetching corpus: 1300, signal 107560/132047 (executing program)
2025/09/01 12:28:25 fetching corpus: 1350, signal 109431/134301 (executing program)
2025/09/01 12:28:25 fetching corpus: 1400, signal 110653/136019 (executing program)
2025/09/01 12:28:25 fetching corpus: 1450, signal 112250/138015 (executing program)
2025/09/01 12:28:25 fetching corpus: 1500, signal 113374/139637 (executing program)
2025/09/01 12:28:25 fetching corpus: 1550, signal 114941/141581 (executing program)
2025/09/01 12:28:26 fetching corpus: 1600, signal 115790/142996 (executing program)
2025/09/01 12:28:26 fetching corpus: 1650, signal 116609/144373 (executing program)
2025/09/01 12:28:26 fetching corpus: 1700, signal 117690/145885 (executing program)
2025/09/01 12:28:26 fetching corpus: 1750, signal 118510/147184 (executing program)
2025/09/01 12:28:26 fetching corpus: 1800, signal 119488/148646 (executing program)
2025/09/01 12:28:26 fetching corpus: 1850, signal 121081/150422 (executing program)
2025/09/01 12:28:26 fetching corpus: 1900, signal 121997/151725 (executing program)
2025/09/01 12:28:26 fetching corpus: 1950, signal 122836/152986 (executing program)
2025/09/01 12:28:26 fetching corpus: 2000, signal 123900/154364 (executing program)
2025/09/01 12:28:26 fetching corpus: 2050, signal 124458/155384 (executing program)
2025/09/01 12:28:26 fetching corpus: 2100, signal 125750/156799 (executing program)
2025/09/01 12:28:27 fetching corpus: 2150, signal 127074/158339 (executing program)
2025/09/01 12:28:27 fetching corpus: 2200, signal 128059/159542 (executing program)
2025/09/01 12:28:27 fetching corpus: 2250, signal 128826/160657 (executing program)
2025/09/01 12:28:27 fetching corpus: 2300, signal 129553/161733 (executing program)
2025/09/01 12:28:27 fetching corpus: 2350, signal 130323/162797 (executing program)
2025/09/01 12:28:27 fetching corpus: 2400, signal 131222/163935 (executing program)
2025/09/01 12:28:27 fetching corpus: 2450, signal 132164/165057 (executing program)
2025/09/01 12:28:27 fetching corpus: 2500, signal 133082/166178 (executing program)
2025/09/01 12:28:27 fetching corpus: 2550, signal 134063/167298 (executing program)
2025/09/01 12:28:27 fetching corpus: 2600, signal 134970/168383 (executing program)
2025/09/01 12:28:27 fetching corpus: 2650, signal 136084/169544 (executing program)
2025/09/01 12:28:27 fetching corpus: 2700, signal 136885/170511 (executing program)
2025/09/01 12:28:28 fetching corpus: 2750, signal 137701/171513 (executing program)
2025/09/01 12:28:28 fetching corpus: 2800, signal 138788/172600 (executing program)
2025/09/01 12:28:28 fetching corpus: 2850, signal 139607/173499 (executing program)
2025/09/01 12:28:28 fetching corpus: 2900, signal 140383/174430 (executing program)
2025/09/01 12:28:28 fetching corpus: 2950, signal 140895/175221 (executing program)
2025/09/01 12:28:28 fetching corpus: 3000, signal 141688/176106 (executing program)
2025/09/01 12:28:28 fetching corpus: 3050, signal 142424/176952 (executing program)
2025/09/01 12:28:28 fetching corpus: 3100, signal 142948/177710 (executing program)
2025/09/01 12:28:28 fetching corpus: 3150, signal 143483/178492 (executing program)
2025/09/01 12:28:28 fetching corpus: 3200, signal 144826/179476 (executing program)
2025/09/01 12:28:29 fetching corpus: 3250, signal 145469/180201 (executing program)
2025/09/01 12:28:29 fetching corpus: 3300, signal 146248/181074 (executing program)
2025/09/01 12:28:29 fetching corpus: 3350, signal 146968/181817 (executing program)
2025/09/01 12:28:29 fetching corpus: 3400, signal 147909/182655 (executing program)
2025/09/01 12:28:29 fetching corpus: 3450, signal 148343/183309 (executing program)
2025/09/01 12:28:29 fetching corpus: 3500, signal 149091/184051 (executing program)
2025/09/01 12:28:29 fetching corpus: 3550, signal 149496/184680 (executing program)
2025/09/01 12:28:29 fetching corpus: 3600, signal 150341/185375 (executing program)
2025/09/01 12:28:29 fetching corpus: 3650, signal 151177/186036 (executing program)
2025/09/01 12:28:29 fetching corpus: 3700, signal 151870/186704 (executing program)
2025/09/01 12:28:29 fetching corpus: 3750, signal 152592/187298 (executing program)
2025/09/01 12:28:29 fetching corpus: 3800, signal 153065/187863 (executing program)
2025/09/01 12:28:30 fetching corpus: 3850, signal 153538/188440 (executing program)
2025/09/01 12:28:30 fetching corpus: 3900, signal 154144/189018 (executing program)
2025/09/01 12:28:30 fetching corpus: 3950, signal 154581/189558 (executing program)
2025/09/01 12:28:30 fetching corpus: 4000, signal 155039/190097 (executing program)
2025/09/01 12:28:30 fetching corpus: 4050, signal 155650/190656 (executing program)
2025/09/01 12:28:30 fetching corpus: 4100, signal 155979/191136 (executing program)
2025/09/01 12:28:30 fetching corpus: 4150, signal 156583/191645 (executing program)
2025/09/01 12:28:30 fetching corpus: 4200, signal 157100/192117 (executing program)
2025/09/01 12:28:30 fetching corpus: 4250, signal 157513/192602 (executing program)
2025/09/01 12:28:30 fetching corpus: 4300, signal 157777/193102 (executing program)
2025/09/01 12:28:31 fetching corpus: 4350, signal 158793/193671 (executing program)
2025/09/01 12:28:31 fetching corpus: 4400, signal 159231/194121 (executing program)
2025/09/01 12:28:31 fetching corpus: 4450, signal 159628/194548 (executing program)
2025/09/01 12:28:31 fetching corpus: 4500, signal 160241/194993 (executing program)
2025/09/01 12:28:31 fetching corpus: 4550, signal 160737/195380 (executing program)
2025/09/01 12:28:31 fetching corpus: 4600, signal 161320/195872 (executing program)
2025/09/01 12:28:31 fetching corpus: 4650, signal 161721/196279 (executing program)
2025/09/01 12:28:31 fetching corpus: 4700, signal 162150/196633 (executing program)
2025/09/01 12:28:31 fetching corpus: 4750, signal 162555/197044 (executing program)
2025/09/01 12:28:31 fetching corpus: 4800, signal 163207/197422 (executing program)
2025/09/01 12:28:31 fetching corpus: 4850, signal 163533/197571 (executing program)
2025/09/01 12:28:32 fetching corpus: 4900, signal 163811/197574 (executing program)
2025/09/01 12:28:32 fetching corpus: 4950, signal 164252/197582 (executing program)
2025/09/01 12:28:32 fetching corpus: 5000, signal 164831/197621 (executing program)
2025/09/01 12:28:32 fetching corpus: 5050, signal 165475/197621 (executing program)
2025/09/01 12:28:32 fetching corpus: 5100, signal 165911/197621 (executing program)
2025/09/01 12:28:32 fetching corpus: 5150, signal 166369/197623 (executing program)
2025/09/01 12:28:32 fetching corpus: 5200, signal 166613/197627 (executing program)
2025/09/01 12:28:32 fetching corpus: 5250, signal 167069/197627 (executing program)
2025/09/01 12:28:32 fetching corpus: 5300, signal 167348/197657 (executing program)
2025/09/01 12:28:32 fetching corpus: 5350, signal 167738/197665 (executing program)
2025/09/01 12:28:32 fetching corpus: 5400, signal 168020/197687 (executing program)
2025/09/01 12:28:32 fetching corpus: 5450, signal 168371/197691 (executing program)
2025/09/01 12:28:33 fetching corpus: 5500, signal 168720/197706 (executing program)
2025/09/01 12:28:33 fetching corpus: 5550, signal 169135/197710 (executing program)
2025/09/01 12:28:33 fetching corpus: 5600, signal 169608/197727 (executing program)
2025/09/01 12:28:33 fetching corpus: 5650, signal 169853/197744 (executing program)
2025/09/01 12:28:33 fetching corpus: 5700, signal 170211/197746 (executing program)
2025/09/01 12:28:33 fetching corpus: 5750, signal 170662/197759 (executing program)
2025/09/01 12:28:33 fetching corpus: 5800, signal 170857/197778 (executing program)
2025/09/01 12:28:33 fetching corpus: 5850, signal 171376/197792 (executing program)
2025/09/01 12:28:33 fetching corpus: 5900, signal 171833/197804 (executing program)
2025/09/01 12:28:33 fetching corpus: 5950, signal 172263/197805 (executing program)
2025/09/01 12:28:33 fetching corpus: 6000, signal 172590/197840 (executing program)
2025/09/01 12:28:34 fetching corpus: 6050, signal 173008/197869 (executing program)
2025/09/01 12:28:34 fetching corpus: 6100, signal 173292/197874 (executing program)
2025/09/01 12:28:34 fetching corpus: 6150, signal 173621/197875 (executing program)
2025/09/01 12:28:34 fetching corpus: 6200, signal 173875/197886 (executing program)
2025/09/01 12:28:34 fetching corpus: 6250, signal 174196/197892 (executing program)
2025/09/01 12:28:34 fetching corpus: 6300, signal 174524/197897 (executing program)
2025/09/01 12:28:34 fetching corpus: 6350, signal 174996/197898 (executing program)
2025/09/01 12:28:34 fetching corpus: 6400, signal 175379/197900 (executing program)
2025/09/01 12:28:34 fetching corpus: 6450, signal 175696/197906 (executing program)
2025/09/01 12:28:34 fetching corpus: 6500, signal 176026/197912 (executing program)
2025/09/01 12:28:34 fetching corpus: 6550, signal 176330/197920 (executing program)
2025/09/01 12:28:34 fetching corpus: 6600, signal 176756/197928 (executing program)
2025/09/01 12:28:35 fetching corpus: 6650, signal 177226/197956 (executing program)
2025/09/01 12:28:35 fetching corpus: 6700, signal 177476/197963 (executing program)
2025/09/01 12:28:35 fetching corpus: 6750, signal 178167/197965 (executing program)
2025/09/01 12:28:35 fetching corpus: 6800, signal 178616/197974 (executing program)
2025/09/01 12:28:35 fetching corpus: 6850, signal 178915/197993 (executing program)
2025/09/01 12:28:35 fetching corpus: 6900, signal 179189/197996 (executing program)
2025/09/01 12:28:35 fetching corpus: 6950, signal 179419/198000 (executing program)
2025/09/01 12:28:35 fetching corpus: 7000, signal 179821/198001 (executing program)
2025/09/01 12:28:35 fetching corpus: 7050, signal 179991/198010 (executing program)
2025/09/01 12:28:35 fetching corpus: 7100, signal 180325/198015 (executing program)
2025/09/01 12:28:35 fetching corpus: 7150, signal 180827/198040 (executing program)
2025/09/01 12:28:36 fetching corpus: 7200, signal 181071/198052 (executing program)
2025/09/01 12:28:36 fetching corpus: 7250, signal 181312/198055 (executing program)
2025/09/01 12:28:36 fetching corpus: 7300, signal 181577/198058 (executing program)
2025/09/01 12:28:36 fetching corpus: 7350, signal 181802/198060 (executing program)
2025/09/01 12:28:36 fetching corpus: 7400, signal 182091/198108 (executing program)
2025/09/01 12:28:36 fetching corpus: 7450, signal 182351/198108 (executing program)
2025/09/01 12:28:36 fetching corpus: 7500, signal 182649/198114 (executing program)
2025/09/01 12:28:36 fetching corpus: 7550, signal 182903/198118 (executing program)
2025/09/01 12:28:36 fetching corpus: 7600, signal 183145/198120 (executing program)
2025/09/01 12:28:36 fetching corpus: 7650, signal 183377/198120 (executing program)
2025/09/01 12:28:36 fetching corpus: 7700, signal 184042/198132 (executing program)
2025/09/01 12:28:37 fetching corpus: 7750, signal 184266/198143 (executing program)
2025/09/01 12:28:37 fetching corpus: 7800, signal 184512/198160 (executing program)
2025/09/01 12:28:37 fetching corpus: 7850, signal 184808/198160 (executing program)
2025/09/01 12:28:37 fetching corpus: 7900, signal 185129/198177 (executing program)
2025/09/01 12:28:37 fetching corpus: 7950, signal 185379/198178 (executing program)
2025/09/01 12:28:37 fetching corpus: 8000, signal 185635/198180 (executing program)
2025/09/01 12:28:37 fetching corpus: 8050, signal 185851/198181 (executing program)
2025/09/01 12:28:37 fetching corpus: 8100, signal 186343/198189 (executing program)
2025/09/01 12:28:37 fetching corpus: 8150, signal 186772/198262 (executing program)
2025/09/01 12:28:37 fetching corpus: 8200, signal 187025/198263 (executing program)
2025/09/01 12:28:37 fetching corpus: 8250, signal 187220/198266 (executing program)
2025/09/01 12:28:37 fetching corpus: 8300, signal 187459/198277 (executing program)
2025/09/01 12:28:38 fetching corpus: 8350, signal 187749/198316 (executing program)
2025/09/01 12:28:38 fetching corpus: 8400, signal 188029/198321 (executing program)
2025/09/01 12:28:38 fetching corpus: 8450, signal 188265/198352 (executing program)
2025/09/01 12:28:38 fetching corpus: 8500, signal 188535/198364 (executing program)
2025/09/01 12:28:38 fetching corpus: 8550, signal 188764/198369 (executing program)
2025/09/01 12:28:38 fetching corpus: 8600, signal 189167/198370 (executing program)
2025/09/01 12:28:38 fetching corpus: 8650, signal 189445/198379 (executing program)
2025/09/01 12:28:38 fetching corpus: 8700, signal 189751/198395 (executing program)
2025/09/01 12:28:38 fetching corpus: 8750, signal 190110/198398 (executing program)
2025/09/01 12:28:38 fetching corpus: 8800, signal 190414/198398 (executing program)
2025/09/01 12:28:38 fetching corpus: 8850, signal 190715/198401 (executing program)
2025/09/01 12:28:38 fetching corpus: 8900, signal 191134/198412 (executing program)
2025/09/01 12:28:38 fetching corpus: 8950, signal 191352/198415 (executing program)
2025/09/01 12:28:39 fetching corpus: 9000, signal 191613/198423 (executing program)
2025/09/01 12:28:39 fetching corpus: 9050, signal 191829/198427 (executing program)
2025/09/01 12:28:39 fetching corpus: 9100, signal 192157/198427 (executing program)
2025/09/01 12:28:39 fetching corpus: 9150, signal 192414/198428 (executing program)
2025/09/01 12:28:39 fetching corpus: 9200, signal 192607/198430 (executing program)
2025/09/01 12:28:39 fetching corpus: 9250, signal 192960/198436 (executing program)
2025/09/01 12:28:39 fetching corpus: 9300, signal 193246/198440 (executing program)
2025/09/01 12:28:39 fetching corpus: 9350, signal 193550/198456 (executing program)
2025/09/01 12:28:39 fetching corpus: 9400, signal 193780/198457 (executing program)
2025/09/01 12:28:39 fetching corpus: 9450, signal 194138/198470 (executing program)
2025/09/01 12:28:39 fetching corpus: 9500, signal 194505/198471 (executing program)
2025/09/01 12:28:39 fetching corpus: 9550, signal 194794/198471 (executing program)
2025/09/01 12:28:39 fetching corpus: 9600, signal 195058/198474 (executing program)
2025/09/01 12:28:39 fetching corpus: 9624, signal 195188/198474 (executing program)
2025/09/01 12:28:40 fetching corpus: 9624, signal 195188/198474 (executing program)
2025/09/01 12:28:41 starting 8 fuzzer processes
12:28:41 executing program 0:
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lsetxattr$trusted_overlay_opaque(0x0, &(0x7f0000000600), 0x0, 0x0, 0x4)
syz_mount_image$tmpfs(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0xfffffffffffff52f, 0x2, &(0x7f0000000ac0)=[{&(0x7f0000000840)="ab", 0x1}, {&(0x7f00000008c0)="1b", 0x1}], 0x8, &(0x7f0000000b40)={[{@size}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]})

12:28:41 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x40001)
r2 = dup2(r1, r0)
write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[], 0x2e)
ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0)

[   79.937997] audit: type=1400 audit(1756729721.496:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
12:28:41 executing program 3:
syz_io_uring_setup(0x242e, &(0x7f0000000400)={0x0, 0x0, 0x6, 0x3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

12:28:41 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000240)="06d5", 0x2}], 0x1, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}}, {{&(0x7f0000000040), 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@ip_retopts={{0x3e8}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4}]}}}], 0x28}}], 0x2, 0x0)

12:28:41 executing program 4:
set_mempolicy(0x5, &(0x7f0000000040)=0x40205, 0x6)
fork()

12:28:41 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
read(r0, &(0x7f0000000300)=""/102400, 0x19000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1010, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xee14, 0x0, @perf_config_ext={0x8}, 0xc808, 0x401, 0xfcc4, 0x0, 0x3, 0x401, 0x7, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x3, r0, 0x1)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
setxattr$security_selinux(&(0x7f0000019300)='./file0/../file0/file0\x00', &(0x7f0000019340), &(0x7f0000019380)='system_u:object_r:fsadm_log_t:s0\x00', 0x21, 0x0)
statfs(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000200)=""/220)

12:28:41 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_linger(r0, 0x1, 0x1e, 0x0, &(0x7f0000000040))

12:28:41 executing program 6:
syz_mount_image$iso9660(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

[   81.084133] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   81.089407] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   81.093513] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   81.097581] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   81.101022] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   81.209454] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   81.212907] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   81.218764] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   81.224188] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   81.232556] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   81.275850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   81.280883] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   81.282460] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   81.284477] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   81.287649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   81.289270] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   81.292474] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   81.293988] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   81.296599] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   81.298310] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   81.302563] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   81.303678] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   81.306336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   81.313595] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   81.314785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   81.335829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   81.337823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   81.339929] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   81.343451] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   81.344723] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   81.356259] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   81.361297] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   81.363196] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   81.377259] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   81.382738] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   81.394105] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   81.425265] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   81.428698] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   81.434314] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   81.447185] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   83.177720] Bluetooth: hci0: command tx timeout
[   83.305481] Bluetooth: hci1: command tx timeout
[   83.369211] Bluetooth: hci3: command tx timeout
[   83.369250] Bluetooth: hci2: command tx timeout
[   83.371477] Bluetooth: hci4: command tx timeout
[   83.433454] Bluetooth: hci6: command tx timeout
[   83.434620] Bluetooth: hci5: command tx timeout
[   83.497686] Bluetooth: hci7: command tx timeout
[   85.225130] Bluetooth: hci0: command tx timeout
[   85.353232] Bluetooth: hci1: command tx timeout
[   85.418096] Bluetooth: hci2: command tx timeout
[   85.418567] Bluetooth: hci3: command tx timeout
[   85.418631] Bluetooth: hci4: command tx timeout
[   85.481243] Bluetooth: hci6: command tx timeout
[   85.481688] Bluetooth: hci5: command tx timeout
[   85.545098] Bluetooth: hci7: command tx timeout
[   87.273457] Bluetooth: hci0: command tx timeout
[   87.402534] Bluetooth: hci1: command tx timeout
[   87.465105] Bluetooth: hci2: command tx timeout
[   87.465152] Bluetooth: hci4: command tx timeout
[   87.465510] Bluetooth: hci3: command tx timeout
[   87.531085] Bluetooth: hci5: command tx timeout
[   87.531510] Bluetooth: hci6: command tx timeout
[   87.593108] Bluetooth: hci7: command tx timeout
[   89.321145] Bluetooth: hci0: command tx timeout
[   89.450278] Bluetooth: hci1: command tx timeout
[   89.515255] Bluetooth: hci4: command tx timeout
[   89.515724] Bluetooth: hci2: command tx timeout
[   89.516982] Bluetooth: hci3: command tx timeout
[   89.578171] Bluetooth: hci6: command tx timeout
[   89.578328] Bluetooth: hci5: command tx timeout
[   89.643278] Bluetooth: hci7: command tx timeout
[  118.536625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.537383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.689081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.689712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.932392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.932960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.942826] loop0: detected capacity change from 0 to 264192
[  118.949333] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  119.074596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.075719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.080000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.081085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.131404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.131997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.226739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.227447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.256098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.256690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.302933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.303884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.352856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.353513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.395158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.395732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.398599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.399234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.487885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.488550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.621702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.622336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.640337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.640966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.710780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.711439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.736908] audit: type=1400 audit(1756729761.296:8): avc:  denied  { open } for  pid=3890 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  119.747193] audit: type=1400 audit(1756729761.296:9): avc:  denied  { kernel } for  pid=3890 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
12:29:21 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
read(r0, &(0x7f0000000300)=""/102400, 0x19000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1010, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xee14, 0x0, @perf_config_ext={0x8}, 0xc808, 0x401, 0xfcc4, 0x0, 0x3, 0x401, 0x7, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x3, r0, 0x1)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
setxattr$security_selinux(&(0x7f0000019300)='./file0/../file0/file0\x00', &(0x7f0000019340), &(0x7f0000019380)='system_u:object_r:fsadm_log_t:s0\x00', 0x21, 0x0)
statfs(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000200)=""/220)

12:29:21 executing program 4:
r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0)
r2 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r2)
keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x0)

12:29:21 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000240)="06d5", 0x2}], 0x1, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}}, {{&(0x7f0000000040), 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@ip_retopts={{0x3e8}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4}]}}}], 0x28}}], 0x2, 0x0)

12:29:21 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x40001)
r2 = dup2(r1, r0)
write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[], 0x2e)
ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0)

12:29:21 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
read(r0, &(0x7f0000000300)=""/102400, 0x19000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1010, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xee14, 0x0, @perf_config_ext={0x8}, 0xc808, 0x401, 0xfcc4, 0x0, 0x3, 0x401, 0x7, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x3, r0, 0x1)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
setxattr$security_selinux(&(0x7f0000019300)='./file0/../file0/file0\x00', &(0x7f0000019340), &(0x7f0000019380)='system_u:object_r:fsadm_log_t:s0\x00', 0x21, 0x0)
statfs(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000200)=""/220)

12:29:21 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc0505405, &(0x7f0000000040)={{0x1}})

12:29:21 executing program 6:
r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0)

12:29:21 executing program 3:
syz_io_uring_setup(0x242e, &(0x7f0000000400)={0x0, 0x0, 0x6, 0x3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

12:29:21 executing program 6:
r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0)

12:29:21 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000240)="06d5", 0x2}], 0x1, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}}, {{&(0x7f0000000040), 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@ip_retopts={{0x3e8}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4}]}}}], 0x28}}], 0x2, 0x0)

12:29:21 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
read(r0, &(0x7f0000000300)=""/102400, 0x19000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1010, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xee14, 0x0, @perf_config_ext={0x8}, 0xc808, 0x401, 0xfcc4, 0x0, 0x3, 0x401, 0x7, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x3, r0, 0x1)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
setxattr$security_selinux(&(0x7f0000019300)='./file0/../file0/file0\x00', &(0x7f0000019340), &(0x7f0000019380)='system_u:object_r:fsadm_log_t:s0\x00', 0x21, 0x0)
statfs(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000200)=""/220)

12:29:21 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000240)="06d5", 0x2}], 0x1, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}}, {{&(0x7f0000000040), 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@ip_retopts={{0x3e8}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4}]}}}], 0x28}}], 0x2, 0x0)

12:29:21 executing program 6:
r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0)

12:29:21 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
read(r0, &(0x7f0000000300)=""/102400, 0x19000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1010, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xee14, 0x0, @perf_config_ext={0x8}, 0xc808, 0x401, 0xfcc4, 0x0, 0x3, 0x401, 0x7, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x3, r0, 0x1)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
setxattr$security_selinux(&(0x7f0000019300)='./file0/../file0/file0\x00', &(0x7f0000019340), &(0x7f0000019380)='system_u:object_r:fsadm_log_t:s0\x00', 0x21, 0x0)
statfs(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000200)=""/220)

12:29:21 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc0505405, &(0x7f0000000040)={{0x1}})

12:29:21 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffffd})

12:29:21 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x40001)
r2 = dup2(r1, r0)
write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[], 0x2e)
ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0)

12:29:21 executing program 3:
syz_io_uring_setup(0x242e, &(0x7f0000000400)={0x0, 0x0, 0x6, 0x3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

12:29:21 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
read(r0, &(0x7f0000000300)=""/102400, 0x19000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1010, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xee14, 0x0, @perf_config_ext={0x8}, 0xc808, 0x401, 0xfcc4, 0x0, 0x3, 0x401, 0x7, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x3, r0, 0x1)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
setxattr$security_selinux(&(0x7f0000019300)='./file0/../file0/file0\x00', &(0x7f0000019340), &(0x7f0000019380)='system_u:object_r:fsadm_log_t:s0\x00', 0x21, 0x0)
statfs(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000200)=""/220)

12:29:21 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000031c0)={<r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000003480))

12:29:21 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x40001)
r2 = dup2(r1, r0)
write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[], 0x2e)
ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0)

12:29:21 executing program 3:
syz_io_uring_setup(0x242e, &(0x7f0000000400)={0x0, 0x0, 0x6, 0x3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

12:29:21 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x7000)

12:29:21 executing program 6:
r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0)

12:29:21 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc0505405, &(0x7f0000000040)={{0x1}})

12:29:21 executing program 7:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x33, 0x6})
request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\\:{:[(^{,@!\x00', 0xfffffffffffffffc)
io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, &(0x7f0000000180)="ecb038f47536dbc30c4705a930e158abd91b0369840d7c", 0x17, 0x0, 0x0, 0x1}, &(0x7f0000000200))
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x400001, 0x40)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000280)=r0, 0x1)
eventfd2(0x5c, 0x0)
io_setup(0x80000000, &(0x7f0000000400)=<r1=>0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x100000001)
io_submit(r1, 0x0, &(0x7f00000016c0))
syz_usb_connect(0x3, 0x36, &(0x7f0000001700)={{0x12, 0x1, 0x110, 0xfd, 0x25, 0x6e, 0x0, 0xaf0, 0xd057, 0x9941, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x5, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xb3, 0xa6, 0x8b, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x3ff}}, {}]}}]}}]}}, 0x0)
io_setup(0x0, 0x0)

12:29:21 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
read(r0, &(0x7f0000000300)=""/102400, 0x19000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1010, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xee14, 0x0, @perf_config_ext={0x8}, 0xc808, 0x401, 0xfcc4, 0x0, 0x3, 0x401, 0x7, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x3, r0, 0x1)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
setxattr$security_selinux(&(0x7f0000019300)='./file0/../file0/file0\x00', &(0x7f0000019340), &(0x7f0000019380)='system_u:object_r:fsadm_log_t:s0\x00', 0x21, 0x0)
statfs(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000200)=""/220)

12:29:21 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffffd})

12:29:21 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040))
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000)

[  120.451166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.460744] misc raw-gadget: fail, usb_gadget_register_driver returned -16
12:29:22 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffffd})

[  120.984573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.987512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
12:29:22 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc0505405, &(0x7f0000000040)={{0x1}})

12:29:22 executing program 2:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000)
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0)
shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x4000)
mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000)

12:29:22 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffffd})

12:29:22 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0)
close(r0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendfile(r0, r1, 0x0, 0x8001)

12:29:22 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401081300000d000000939aa206"], 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x801}, 0x14}}, 0x0)

12:29:22 executing program 7:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1c}}, 0x0)

12:29:22 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getgroups(0x326996345daeaac9, &(0x7f00000017c0))
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.stat\x00', 0x0, 0x0)

12:29:22 executing program 6:
keyctl$set_reqkey_keyring(0xe, 0x5)
request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000001e00)={'syz', 0x2}, &(0x7f0000000040)='k\\\xc5(&}\x00', 0x0)

[  121.112844] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI
[  121.114905] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[  121.116827] CPU: 1 UID: 0 PID: 3976 Comm: syz-executor.5 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  121.122129] Tainted: [W]=WARN
[  121.122620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  121.123899] RIP: 0010:perf_tp_event+0x175/0xe70
[  121.124635] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  121.127428] RSP: 0018:ffff888046c5f600 EFLAGS: 00010212
[  121.128279] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc9000aa32000
[  121.129391] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000100000190
[  121.130491] RBP: ffff888046c5f870 R08: ffff88806cf31340 R09: ffffe8ffffd16910
[  121.131615] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  121.132711] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[  121.133849] FS:  00007fcb8ee7b700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  121.135106] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  121.136002] CR2: 00007f4ba87c4018 CR3: 0000000017ecd000 CR4: 0000000000350ef0
[  121.137211] Call Trace:
[  121.137688]  <TASK>
[  121.138076]  ? __pfx_perf_tp_event+0x10/0x10
[  121.138860]  ? perf_trace_run_bpf_submit+0xef/0x180
[  121.139766]  perf_trace_run_bpf_submit+0xef/0x180
[  121.140557]  perf_trace_lock+0x337/0x5d0
[  121.141219]  ? __pfx_perf_trace_lock+0x10/0x10
[  121.141961]  ? lock_acquire+0x15e/0x2f0
[  121.142600]  ? futex_ref_get+0x48/0x300
[  121.143255]  ? futex_ref_get+0x114/0x300
[  121.143918]  ? futex_hash+0x15c/0x390
[  121.144623]  lock_release+0x1ab/0x290
[  121.145300]  ? futex_hash+0x15c/0x390
[  121.145906]  futex_ref_get+0x119/0x300
[  121.146532]  ? futex_hash+0x15c/0x390
[  121.147138]  futex_hash+0x70/0x390
[  121.147718]  futex_wait_setup+0xae/0x550
[  121.148381]  __futex_wait+0x151/0x300
[  121.149004]  ? __pfx___futex_wait+0x10/0x10
[  121.149711]  ? __pfx_futex_wake_mark+0x10/0x10
[  121.150473]  futex_wait+0xde/0x380
[  121.151067]  ? __pfx_futex_wait+0x10/0x10
[  121.151745]  ? perf_trace_lock+0xb5/0x5d0
[  121.152439]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  121.153300]  do_futex+0x2ee/0x370
[  121.153876]  ? __pfx_do_futex+0x10/0x10
[  121.154523]  ? do_raw_spin_lock+0x123/0x260
[  121.155236]  __x64_sys_futex+0x1c9/0x4d0
[  121.155887]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  121.156714]  ? __pfx___x64_sys_futex+0x10/0x10
[  121.157441]  ? kcov_ioctl+0x386/0x6c0
[  121.158059]  ? fput+0x6a/0x100
[  121.158605]  do_syscall_64+0xbf/0x360
[  121.159234]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.160059] RIP: 0033:0x7fcb91905b19
[  121.160649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  121.163552] RSP: 002b:00007fcb8ee7b218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  121.164725] RAX: ffffffffffffffda RBX: 00007fcb91a18f68 RCX: 00007fcb91905b19
[  121.165825] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcb91a18f68
[  121.166950] RBP: 00007fcb91a18f60 R08: 00007fcb8ee7b700 R09: 0000000000000000
[  121.168097] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcb91a18f6c
[  121.169254] R13: 00007ffc0a098e4f R14: 00007fcb8ee7b300 R15: 0000000000022000
[  121.170562]  </TASK>
[  121.170966] Modules linked in:
[  121.173577] ---[ end trace 0000000000000000 ]---
[  121.176306] RIP: 0010:perf_tp_event+0x175/0xe70
[  121.177147] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  121.180064] RSP: 0018:ffff888046c5f600 EFLAGS: 00010212
[  121.180933] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc9000aa32000
[  121.182093] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000100000190
[  121.183288] RBP: ffff888046c5f870 R08: ffff88806cf31340 R09: ffffe8ffffd16910
[  121.184498] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  121.185633] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[  121.186824] FS:  00007fcb8ee7b700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  121.188197] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  121.189180] CR2: 00007f4ba87c4018 CR3: 0000000017ecd000 CR4: 0000000000350ef0
[  121.190364] note: syz-executor.5[3976] exited with preempt_count 1
[  121.191418] BUG: sleeping function called from invalid context at ./include/linux/percpu-rwsem.h:51
[  121.192856] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 3976, name: syz-executor.5
[  121.194243] preempt_count: 0, expected: 0
[  121.194915] RCU nest depth: 2, expected: 0
[  121.195621] INFO: lockdep is turned off.
[  121.196299] CPU: 1 UID: 0 PID: 3976 Comm: syz-executor.5 Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  121.196337] Tainted: [D]=DIE, [W]=WARN
[  121.196345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  121.196358] Call Trace:
[  121.196365]  <TASK>
[  121.196374]  dump_stack_lvl+0xfa/0x120
[  121.196415]  __might_resched+0x2f3/0x510
[  121.196449]  exit_signals+0x25/0x940
[  121.196485]  do_exit+0x2db/0x2970
[  121.196512]  ? _printk+0xbe/0xf0
[  121.196537]  ? __pfx__printk+0x10/0x10
[  121.196561]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  121.196587]  ? __pfx_do_exit+0x10/0x10
[  121.196612]  ? kcov_ioctl+0x386/0x6c0
[  121.196641]  make_task_dead+0x174/0x3b0
[  121.196667]  ? do_syscall_64+0xbf/0x360
[  121.196690]  rewind_stack_and_make_dead+0x16/0x20
[  121.196722] RIP: 0033:0x7fcb91905b19
[  121.196739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  121.196761] RSP: 002b:00007fcb8ee7b218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  121.196783] RAX: ffffffffffffffda RBX: 00007fcb91a18f68 RCX: 00007fcb91905b19
[  121.196798] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcb91a18f68
[  121.196812] RBP: 00007fcb91a18f60 R08: 00007fcb8ee7b700 R09: 0000000000000000
[  121.196826] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcb91a18f6c
[  121.196840] R13: 00007ffc0a098e4f R14: 00007fcb8ee7b300 R15: 0000000000022000
[  121.196862]  </TASK>
12:29:22 executing program 7:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1c}}, 0x0)

12:29:22 executing program 2:
syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0xb, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @loopback, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0x6, "3f70cd62"}, {0x0, 0xd, "20126d234d2862265a340c"}]}]}}}}}}}, 0x0)

12:29:22 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401081300000d000000939aa206"], 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x801}, 0x14}}, 0x0)

12:29:22 executing program 2:
syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0xb, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @loopback, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0x6, "3f70cd62"}, {0x0, 0xd, "20126d234d2862265a340c"}]}]}}}}}}}, 0x0)

12:29:22 executing program 4:
ioperm(0x0, 0x7, 0x1)
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000001300)=[{0x0}], 0x0, 0x0)

12:29:22 executing program 2:
syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0xb, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @loopback, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0x6, "3f70cd62"}, {0x0, 0xd, "20126d234d2862265a340c"}]}]}}}}}}}, 0x0)

12:29:22 executing program 6:
keyctl$set_reqkey_keyring(0xe, 0x5)
request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000001e00)={'syz', 0x2}, &(0x7f0000000040)='k\\\xc5(&}\x00', 0x0)

12:29:22 executing program 7:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1c}}, 0x0)

12:29:22 executing program 0:
keyctl$set_reqkey_keyring(0xe, 0x5)
request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000001e00)={'syz', 0x2}, &(0x7f0000000040)='k\\\xc5(&}\x00', 0x0)

12:29:22 executing program 4:
ioperm(0x0, 0x7, 0x1)
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000001300)=[{0x0}], 0x0, 0x0)

12:29:23 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401081300000d000000939aa206"], 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x801}, 0x14}}, 0x0)

12:29:23 executing program 2:
syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0xb, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @loopback, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0x6, "3f70cd62"}, {0x0, 0xd, "20126d234d2862265a340c"}]}]}}}}}}}, 0x0)

12:29:23 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0)
close(r0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendfile(r0, r1, 0x0, 0x8001)

12:29:23 executing program 0:
keyctl$set_reqkey_keyring(0xe, 0x5)
request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000001e00)={'syz', 0x2}, &(0x7f0000000040)='k\\\xc5(&}\x00', 0x0)

12:29:23 executing program 7:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1c}}, 0x0)

12:29:23 executing program 6:
keyctl$set_reqkey_keyring(0xe, 0x5)
request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000001e00)={'syz', 0x2}, &(0x7f0000000040)='k\\\xc5(&}\x00', 0x0)

12:29:23 executing program 4:
ioperm(0x0, 0x7, 0x1)
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000001300)=[{0x0}], 0x0, 0x0)

12:29:23 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getgroups(0x326996345daeaac9, &(0x7f00000017c0))
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.stat\x00', 0x0, 0x0)

[  122.028011] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI
[  122.029054] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  122.029775] CPU: 1 UID: 0 PID: 4011 Comm: syz-executor.6 Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  122.030839] Tainted: [D]=DIE, [W]=WARN
[  122.031209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  122.031984] RIP: 0010:perf_tp_event+0x175/0xe70
[  122.032410] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  122.034057] RSP: 0018:ffff888016467800 EFLAGS: 00010212
[  122.034562] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  122.035217] RDX: ffff8880460ad280 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  122.035820] RBP: ffff888016467a70 R08: ffff88806cf31340 R09: ffffe8ffffd16910
[  122.036410] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[  122.036997] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[  122.037589] FS:  000055556951f400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  122.038250] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  122.038738] CR2: 0000555569520c18 CR3: 0000000045dcd000 CR4: 0000000000350ef0
[  122.039337] Call Trace:
[  122.039559]  <TASK>
[  122.039758]  ? arch_scale_cpu_capacity+0x17/0xa0
[  122.040165]  ? __pfx_perf_tp_event+0x10/0x10
[  122.040540]  ? __asan_memset+0x24/0x50
[  122.040890]  ? __pfx_perf_trace_lock+0x10/0x10
[  122.041276]  ? __pfx___mutex_lock+0x10/0x10
[  122.041651]  ? perf_trace_lock+0xb5/0x5d0
[  122.042004]  ? kvm_sched_clock_read+0x16/0x30
[  122.042388]  ? sched_clock+0x37/0x60
[  122.042713]  ? sched_clock_cpu+0x6c/0x4e0
[  122.043080]  ? perf_trace_run_bpf_submit+0xef/0x180
[  122.043504]  perf_trace_run_bpf_submit+0xef/0x180
[  122.043918]  perf_trace_lock+0x337/0x5d0
[  122.044265]  ? __pfx_perf_trace_lock+0x10/0x10
[  122.044652]  ? __pfx_perf_trace_lock+0x10/0x10
[  122.045043]  ? get_futex_key+0x592/0x14a0
[  122.045393]  ? futex_ref_get+0x114/0x300
[  122.045734]  ? futex_hash+0x15c/0x390
[  122.046058]  lock_release+0x1ab/0x290
[  122.046387]  ? futex_hash+0x15c/0x390
[  122.046716]  futex_ref_get+0x119/0x300
[  122.047059]  ? futex_hash+0x15c/0x390
[  122.047382]  futex_hash+0x70/0x390
[  122.047687]  futex_wake+0x143/0x540
[  122.048003]  ? put_pid+0x1f/0x30
[  122.048299]  ? kernel_clone+0x204/0x7f0
[  122.048637]  ? __pfx_futex_wake+0x10/0x10
[  122.048994]  ? __pfx_kernel_clone+0x10/0x10
[  122.049361]  ? perf_trace_lock+0xb5/0x5d0
[  122.049709]  ? __pfx___handle_mm_fault+0x10/0x10
[  122.050118]  do_futex+0x26d/0x370
[  122.050419]  ? __pfx_do_futex+0x10/0x10
[  122.050756]  ? __pfx___do_sys_clone+0x10/0x10
[  122.051138]  ? handle_mm_fault+0x590/0x9b0
[  122.051499]  __x64_sys_futex+0x1c9/0x4d0
[  122.051850]  ? __pfx___x64_sys_futex+0x10/0x10
[  122.052248]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  122.052688]  do_syscall_64+0xbf/0x360
[  122.053009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.053435] RIP: 0033:0x7f5d2c05db19
[  122.053747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  122.055228] RSP: 002b:00007ffc2864cad8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  122.055846] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5d2c05db19
[  122.056432] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5d2c170f68
[  122.057020] RBP: 00007f5d2c170f60 R08: 00007f5d295d3700 R09: 0000000000000000
[  122.057604] R10: 00007f5d295d3700 R11: 0000000000000246 R12: 00007f5d2c175048
[  122.058196] R13: 00007ffc2864cbe0 R14: 00007f5d2c170f60 R15: 000000000001dc42
[  122.058806]  </TASK>
[  122.059005] Modules linked in:
[  122.059305] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#3] SMP KASAN NOPTI
[  122.060203] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  122.060820] CPU: 1 UID: 0 PID: 4011 Comm: syz-executor.6 Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  122.061784] Tainted: [D]=DIE, [W]=WARN
[  122.062102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  122.062778] RIP: 0010:perf_tp_event+0x175/0xe70
[  122.063174] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  122.064634] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012
[  122.065070] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  122.065647] RDX: ffff8880460ad280 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  122.066226] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd16910
[  122.066812] R10: 0000000000000000 R11: ffff88806cf37018 R12: dffffc0000000000
[  122.067393] R13: 0000000000000024 R14: ffff88806cf31490 R15: dffffc0000000000
[  122.067975] FS:  000055556951f400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  122.068627] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  122.069104] CR2: 0000555569520c18 CR3: 0000000045dcd000 CR4: 0000000000350ef0
[  122.069682] Call Trace:
[  122.069898]  <IRQ>
[  122.070085]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  122.070598]  ? arch_stack_walk+0x9c/0xf0
[  122.071003]  ? __pfx_perf_tp_event+0x10/0x10
[  122.071405]  ? sched_clock_cpu+0x6c/0x4e0
[  122.071797]  ? trace_sched_set_need_resched_tp+0xd4/0x110
[  122.072308]  ? __resched_curr+0x2a2/0x330
[  122.072654]  ? __pfx___resched_curr+0x10/0x10
[  122.073031]  ? perf_trace_lock+0xb5/0x5d0
[  122.073378]  ? perf_trace_lock+0xb5/0x5d0
[  122.073763]  ? __pfx_perf_trace_lock+0x10/0x10
[  122.074183]  ? __pfx_perf_trace_lock+0x10/0x10
[  122.074577]  ? check_preempt_wakeup_fair+0x406/0x950
[  122.075015]  ? perf_trace_run_bpf_submit+0xef/0x180
[  122.075450]  perf_trace_run_bpf_submit+0xef/0x180
[  122.075872]  perf_trace_lock+0x337/0x5d0
[  122.076252]  ? place_entity+0x1c/0x410
[  122.076601]  ? kvm_sched_clock_read+0x16/0x30
[  122.077004]  ? __pfx_perf_trace_lock+0x10/0x10
[  122.077391]  ? check_preempt_wakeup_fair+0x6e/0x950
[  122.077810]  ? sched_ttwu_pending+0x2e0/0x4a0
[  122.078191]  lock_release+0x1ab/0x290
[  122.078512]  ? ttwu_do_activate+0x1a4/0x8a0
[  122.078883]  _raw_spin_unlock+0x16/0x40
[  122.079222]  sched_ttwu_pending+0x2e0/0x4a0
[  122.079585]  ? __pfx_sched_ttwu_pending+0x10/0x10
[  122.079988]  ? flush_tlb_func+0x3eb/0x560
[  122.080332]  __flush_smp_call_function_queue+0x434/0x740
[  122.080789]  __sysvec_call_function_single+0x6d/0x370
[  122.081227]  sysvec_call_function_single+0xa1/0xc0
[  122.081632]  </IRQ>
[  122.081820]  <TASK>
[  122.082011]  asm_sysvec_call_function_single+0x1a/0x20
[  122.082438] RIP: 0010:oops_exit+0x0/0x50
[  122.082780] Code: 00 3a 00 be ff ff ff ff 48 c7 c7 50 b4 43 86 e8 c6 0f f9 ff 5b e9 50 00 3a 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 36 00 3a 00 8b 1d c0 3d 4f 06 31 ff 89 de e8 57
[  122.084252] RSP: 0018:ffff888016467690 EFLAGS: 00000202
[  122.084687] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff8139f06f
[  122.085266] RDX: ffff8880460ad280 RSI: ffffffff812a3dca RDI: 0000000000000007
[  122.085848] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f12690
[  122.086426] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888016467758
[  122.087010] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000
[  122.087599]  ? add_taint+0x5f/0xd0
[  122.087903]  ? oops_end+0x4a/0xe0
[  122.088205]  oops_end+0x65/0xe0
[  122.088488]  exc_general_protection+0x1a2/0x330
[  122.088877]  asm_exc_general_protection+0x26/0x30
[  122.089317] RIP: 0010:perf_tp_event+0x175/0xe70
[  122.089746] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  122.091344] RSP: 0018:ffff888016467800 EFLAGS: 00010212
[  122.091837] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  122.092467] RDX: ffff8880460ad280 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  122.093137] RBP: ffff888016467a70 R08: ffff88806cf31340 R09: ffffe8ffffd16910
[  122.093712] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[  122.094352] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[  122.095020]  ? perf_tp_event+0x167/0xe70
[  122.095392]  ? arch_scale_cpu_capacity+0x17/0xa0
[  122.095827]  ? __pfx_perf_tp_event+0x10/0x10
[  122.096239]  ? __asan_memset+0x24/0x50
[  122.096606]  ? __pfx_perf_trace_lock+0x10/0x10
[  122.097028]  ? __pfx___mutex_lock+0x10/0x10
[  122.097407]  ? perf_trace_lock+0xb5/0x5d0
[  122.097798]  ? kvm_sched_clock_read+0x16/0x30
[  122.098209]  ? sched_clock+0x37/0x60
[  122.098557]  ? sched_clock_cpu+0x6c/0x4e0
[  122.098957]  ? perf_trace_run_bpf_submit+0xef/0x180
[  122.099416]  perf_trace_run_bpf_submit+0xef/0x180
[  122.099863]  perf_trace_lock+0x337/0x5d0
[  122.100242]  ? __pfx_perf_trace_lock+0x10/0x10
[  122.100665]  ? __pfx_perf_trace_lock+0x10/0x10
[  122.101086]  ? get_futex_key+0x592/0x14a0
[  122.101465]  ? futex_ref_get+0x114/0x300
[  122.101809]  ? futex_hash+0x15c/0x390
[  122.102160]  lock_release+0x1ab/0x290
[  122.102519]  ? futex_hash+0x15c/0x390
[  122.102871]  futex_ref_get+0x119/0x300
[  122.103190]  ? futex_hash+0x15c/0x390
[  122.103496]  futex_hash+0x70/0x390
[  122.103786]  futex_wake+0x143/0x540
[  122.104094]  ? put_pid+0x1f/0x30
[  122.104409]  ? kernel_clone+0x204/0x7f0
[  122.104767]  ? __pfx_futex_wake+0x10/0x10
[  122.105143]  ? __pfx_kernel_clone+0x10/0x10
[  122.105517]  ? perf_trace_lock+0xb5/0x5d0
[  122.105880]  ? __pfx___handle_mm_fault+0x10/0x10
[  122.106290]  do_futex+0x26d/0x370
[  122.106619]  ? __pfx_do_futex+0x10/0x10
[  122.106973]  ? __pfx___do_sys_clone+0x10/0x10
[  122.107358]  ? handle_mm_fault+0x590/0x9b0
[  122.107752]  __x64_sys_futex+0x1c9/0x4d0
[  122.108128]  ? __pfx___x64_sys_futex+0x10/0x10
[  122.108547]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  122.109017]  do_syscall_64+0xbf/0x360
[  122.109363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.109780] RIP: 0033:0x7f5d2c05db19
[  122.110083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  122.111640] RSP: 002b:00007ffc2864cad8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  122.112235] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5d2c05db19
[  122.112790] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5d2c170f68
[  122.113350] RBP: 00007f5d2c170f60 R08: 00007f5d295d3700 R09: 0000000000000000
[  122.113903] R10: 00007f5d295d3700 R11: 0000000000000246 R12: 00007f5d2c175048
[  122.114457] R13: 00007ffc2864cbe0 R14: 00007f5d2c170f60 R15: 000000000001dc42
[  122.115032]  </TASK>
[  122.115221] Modules linked in:
[  122.115479] ---[ end trace 0000000000000000 ]---
[  122.115845] RIP: 0010:perf_tp_event+0x175/0xe70
[  122.116219] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  122.117629] RSP: 0018:ffff888046c5f600 EFLAGS: 00010212
[  122.118071] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc9000aa32000
[  122.118694] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000100000190
[  122.119310] RBP: ffff888046c5f870 R08: ffff88806cf31340 R09: ffffe8ffffd16910
[  122.119898] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  122.120497] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[  122.121112] FS:  000055556951f400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  122.121832] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  122.122316] CR2: 0000555569520c18 CR3: 0000000045dcd000 CR4: 0000000000350ef0
[  122.122921] Kernel panic - not syncing: Fatal exception in interrupt
[  123.165348] Shutting down cpus with NMI
[  123.165922] Kernel Offset: disabled
[  123.166210] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---

VM DIAGNOSIS:
12:29:22  Registers:
info registers vcpu 0
RAX=ffff88804758ff58 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88804758fe01
RSI=ffff88804758fee0 RDI=ffff88804758fee0 RBP=ffff88804758f500 RSP=ffff88804758f438
R8 =0000000000000001 R9 =ffff88804758f4e8 R10=000000000003bea3 R11=0000000000002da7
R12=ffff88804758f508 R13=ffff88804758f4f0 R14=ffff88804758fee0 R15=ffff88804758f4a8
RIP=ffffffff81359a98 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e55d8000 00000000 00000000
LDT=0000 fffffe6d00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2d223000 CR3=000000003edb6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000055 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff888046c5ef60
R8 =0000000000000000 R9 =ffffed1001308046 R10=0000000000000055 R11=552031203a555043
R12=0000000000000055 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0
RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fcb8ee7b700 00000000 00000000
GS =0000 ffff8880e56d8000 00000000 00000000
LDT=0000 fffffe6a00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4ba87c4018 CR3=0000000017ecd000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fcb919ec7c000007fcb919ec7c8
XMM02=00007fcb919ec7e000007fcb919ec7c0 XMM03=00007fcb919ec7c800007fcb919ec7c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000