Warning: Permanently added '[localhost]:61574' (ECDSA) to the list of known hosts.
2025/08/29 10:02:56 fuzzer started
2025/08/29 10:02:56 dialing manager at localhost:43077
syzkaller login: [ 56.256538] cgroup: Unknown subsys name 'net'
[ 56.314656] cgroup: Unknown subsys name 'cpuset'
[ 56.324990] cgroup: Unknown subsys name 'rlimit'
2025/08/29 10:03:06 syscalls: 2214
2025/08/29 10:03:06 code coverage: enabled
2025/08/29 10:03:06 comparison tracing: enabled
2025/08/29 10:03:06 extra coverage: enabled
2025/08/29 10:03:06 setuid sandbox: enabled
2025/08/29 10:03:06 namespace sandbox: enabled
2025/08/29 10:03:06 Android sandbox: enabled
2025/08/29 10:03:06 fault injection: enabled
2025/08/29 10:03:06 leak checking: enabled
2025/08/29 10:03:06 net packet injection: enabled
2025/08/29 10:03:06 net device setup: enabled
2025/08/29 10:03:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/29 10:03:06 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/29 10:03:06 USB emulation: enabled
2025/08/29 10:03:06 hci packet injection: enabled
2025/08/29 10:03:06 wifi device emulation: enabled
2025/08/29 10:03:06 802.15.4 emulation: enabled
2025/08/29 10:03:06 fetching corpus: 0, signal 0/2000 (executing program)
2025/08/29 10:03:06 fetching corpus: 50, signal 19807/23329 (executing program)
2025/08/29 10:03:06 fetching corpus: 100, signal 35059/39822 (executing program)
2025/08/29 10:03:06 fetching corpus: 150, signal 46932/52703 (executing program)
2025/08/29 10:03:06 fetching corpus: 200, signal 50118/57157 (executing program)
2025/08/29 10:03:06 fetching corpus: 250, signal 53669/61867 (executing program)
2025/08/29 10:03:06 fetching corpus: 300, signal 57470/66723 (executing program)
2025/08/29 10:03:06 fetching corpus: 350, signal 61350/71497 (executing program)
2025/08/29 10:03:06 fetching corpus: 400, signal 66004/76956 (executing program)
2025/08/29 10:03:07 fetching corpus: 450, signal 68940/80804 (executing program)
2025/08/29 10:03:07 fetching corpus: 500, signal 70978/83801 (executing program)
2025/08/29 10:03:07 fetching corpus: 550, signal 73720/87318 (executing program)
2025/08/29 10:03:07 fetching corpus: 600, signal 76538/90853 (executing program)
2025/08/29 10:03:07 fetching corpus: 650, signal 78369/93515 (executing program)
2025/08/29 10:03:07 fetching corpus: 700, signal 81537/97197 (executing program)
2025/08/29 10:03:07 fetching corpus: 750, signal 84593/100648 (executing program)
2025/08/29 10:03:07 fetching corpus: 800, signal 86766/103417 (executing program)
2025/08/29 10:03:07 fetching corpus: 850, signal 89160/106340 (executing program)
2025/08/29 10:03:07 fetching corpus: 900, signal 91573/109164 (executing program)
2025/08/29 10:03:08 fetching corpus: 950, signal 92947/111071 (executing program)
2025/08/29 10:03:08 fetching corpus: 1000, signal 94433/113105 (executing program)
2025/08/29 10:03:08 fetching corpus: 1050, signal 95619/114865 (executing program)
2025/08/29 10:03:08 fetching corpus: 1100, signal 97895/117544 (executing program)
2025/08/29 10:03:08 fetching corpus: 1150, signal 99977/119896 (executing program)
2025/08/29 10:03:08 fetching corpus: 1200, signal 101620/121887 (executing program)
2025/08/29 10:03:08 fetching corpus: 1250, signal 102978/123633 (executing program)
2025/08/29 10:03:08 fetching corpus: 1300, signal 104476/125462 (executing program)
2025/08/29 10:03:08 fetching corpus: 1350, signal 106339/127515 (executing program)
2025/08/29 10:03:08 fetching corpus: 1400, signal 107722/129168 (executing program)
2025/08/29 10:03:09 fetching corpus: 1450, signal 109873/131264 (executing program)
2025/08/29 10:03:09 fetching corpus: 1500, signal 111274/132848 (executing program)
2025/08/29 10:03:09 fetching corpus: 1550, signal 111836/133843 (executing program)
2025/08/29 10:03:09 fetching corpus: 1600, signal 113551/135600 (executing program)
2025/08/29 10:03:09 fetching corpus: 1650, signal 114331/136761 (executing program)
2025/08/29 10:03:09 fetching corpus: 1700, signal 116052/138412 (executing program)
2025/08/29 10:03:09 fetching corpus: 1750, signal 117160/139685 (executing program)
2025/08/29 10:03:09 fetching corpus: 1800, signal 118221/140911 (executing program)
2025/08/29 10:03:09 fetching corpus: 1850, signal 119237/142088 (executing program)
2025/08/29 10:03:09 fetching corpus: 1900, signal 120134/143202 (executing program)
2025/08/29 10:03:10 fetching corpus: 1950, signal 120911/144236 (executing program)
2025/08/29 10:03:10 fetching corpus: 2000, signal 122079/145392 (executing program)
2025/08/29 10:03:10 fetching corpus: 2050, signal 123828/146801 (executing program)
2025/08/29 10:03:10 fetching corpus: 2100, signal 125218/148060 (executing program)
2025/08/29 10:03:10 fetching corpus: 2150, signal 125795/148912 (executing program)
2025/08/29 10:03:10 fetching corpus: 2200, signal 126420/149716 (executing program)
2025/08/29 10:03:10 fetching corpus: 2250, signal 127051/150554 (executing program)
2025/08/29 10:03:10 fetching corpus: 2300, signal 128177/151517 (executing program)
2025/08/29 10:03:10 fetching corpus: 2350, signal 128712/152282 (executing program)
2025/08/29 10:03:10 fetching corpus: 2400, signal 129671/153197 (executing program)
2025/08/29 10:03:10 fetching corpus: 2450, signal 130345/153995 (executing program)
2025/08/29 10:03:11 fetching corpus: 2500, signal 131389/154989 (executing program)
2025/08/29 10:03:11 fetching corpus: 2550, signal 131788/155648 (executing program)
2025/08/29 10:03:11 fetching corpus: 2600, signal 133103/156596 (executing program)
2025/08/29 10:03:11 fetching corpus: 2650, signal 133784/157327 (executing program)
2025/08/29 10:03:11 fetching corpus: 2700, signal 134298/157913 (executing program)
2025/08/29 10:03:11 fetching corpus: 2750, signal 135195/158634 (executing program)
2025/08/29 10:03:11 fetching corpus: 2800, signal 135879/159293 (executing program)
2025/08/29 10:03:11 fetching corpus: 2850, signal 136595/159916 (executing program)
2025/08/29 10:03:11 fetching corpus: 2900, signal 137570/160690 (executing program)
2025/08/29 10:03:11 fetching corpus: 2950, signal 138108/161211 (executing program)
2025/08/29 10:03:12 fetching corpus: 3000, signal 139091/161861 (executing program)
2025/08/29 10:03:12 fetching corpus: 3050, signal 139717/162412 (executing program)
2025/08/29 10:03:12 fetching corpus: 3100, signal 140970/163081 (executing program)
2025/08/29 10:03:12 fetching corpus: 3150, signal 141521/163582 (executing program)
2025/08/29 10:03:12 fetching corpus: 3200, signal 142115/164061 (executing program)
2025/08/29 10:03:12 fetching corpus: 3250, signal 142596/164510 (executing program)
2025/08/29 10:03:12 fetching corpus: 3300, signal 143133/164921 (executing program)
2025/08/29 10:03:12 fetching corpus: 3350, signal 143465/165336 (executing program)
2025/08/29 10:03:12 fetching corpus: 3400, signal 144376/165777 (executing program)
2025/08/29 10:03:12 fetching corpus: 3450, signal 145100/166227 (executing program)
2025/08/29 10:03:12 fetching corpus: 3500, signal 146441/166700 (executing program)
2025/08/29 10:03:13 fetching corpus: 3550, signal 147131/167107 (executing program)
2025/08/29 10:03:13 fetching corpus: 3600, signal 148213/167642 (executing program)
2025/08/29 10:03:13 fetching corpus: 3650, signal 148647/167966 (executing program)
2025/08/29 10:03:13 fetching corpus: 3700, signal 149193/168299 (executing program)
2025/08/29 10:03:13 fetching corpus: 3750, signal 149812/168676 (executing program)
2025/08/29 10:03:13 fetching corpus: 3800, signal 150734/168994 (executing program)
2025/08/29 10:03:13 fetching corpus: 3850, signal 151262/169277 (executing program)
2025/08/29 10:03:13 fetching corpus: 3900, signal 151789/169532 (executing program)
2025/08/29 10:03:13 fetching corpus: 3950, signal 152133/169783 (executing program)
2025/08/29 10:03:13 fetching corpus: 4000, signal 152797/170017 (executing program)
2025/08/29 10:03:13 fetching corpus: 4050, signal 153807/170274 (executing program)
2025/08/29 10:03:14 fetching corpus: 4100, signal 154391/170418 (executing program)
2025/08/29 10:03:14 fetching corpus: 4150, signal 154854/170424 (executing program)
2025/08/29 10:03:14 fetching corpus: 4200, signal 155219/170454 (executing program)
2025/08/29 10:03:14 fetching corpus: 4250, signal 155637/170484 (executing program)
2025/08/29 10:03:14 fetching corpus: 4300, signal 156098/170500 (executing program)
2025/08/29 10:03:14 fetching corpus: 4350, signal 156734/170521 (executing program)
2025/08/29 10:03:14 fetching corpus: 4400, signal 157277/170537 (executing program)
2025/08/29 10:03:14 fetching corpus: 4450, signal 157831/170539 (executing program)
2025/08/29 10:03:14 fetching corpus: 4500, signal 158306/170571 (executing program)
2025/08/29 10:03:14 fetching corpus: 4550, signal 158782/170575 (executing program)
2025/08/29 10:03:14 fetching corpus: 4600, signal 159175/170604 (executing program)
2025/08/29 10:03:15 fetching corpus: 4650, signal 159629/170656 (executing program)
2025/08/29 10:03:15 fetching corpus: 4700, signal 160090/170659 (executing program)
2025/08/29 10:03:15 fetching corpus: 4750, signal 160511/170686 (executing program)
2025/08/29 10:03:15 fetching corpus: 4800, signal 161038/170698 (executing program)
2025/08/29 10:03:15 fetching corpus: 4850, signal 161542/170706 (executing program)
2025/08/29 10:03:15 fetching corpus: 4900, signal 161890/170718 (executing program)
2025/08/29 10:03:15 fetching corpus: 4950, signal 162505/170718 (executing program)
2025/08/29 10:03:15 fetching corpus: 5000, signal 162830/170729 (executing program)
2025/08/29 10:03:15 fetching corpus: 5050, signal 163418/170737 (executing program)
2025/08/29 10:03:15 fetching corpus: 5100, signal 163987/170737 (executing program)
2025/08/29 10:03:15 fetching corpus: 5150, signal 164454/170737 (executing program)
2025/08/29 10:03:16 fetching corpus: 5200, signal 164706/170757 (executing program)
2025/08/29 10:03:16 fetching corpus: 5250, signal 165038/170763 (executing program)
2025/08/29 10:03:16 fetching corpus: 5300, signal 165474/170805 (executing program)
2025/08/29 10:03:16 fetching corpus: 5350, signal 165992/170817 (executing program)
2025/08/29 10:03:16 fetching corpus: 5400, signal 166334/170821 (executing program)
2025/08/29 10:03:16 fetching corpus: 5450, signal 166836/170822 (executing program)
2025/08/29 10:03:16 fetching corpus: 5500, signal 167217/170830 (executing program)
2025/08/29 10:03:16 fetching corpus: 5550, signal 167764/170850 (executing program)
2025/08/29 10:03:16 fetching corpus: 5600, signal 168136/170867 (executing program)
2025/08/29 10:03:16 fetching corpus: 5650, signal 168441/170868 (executing program)
2025/08/29 10:03:16 fetching corpus: 5660, signal 168540/170868 (executing program)
2025/08/29 10:03:16 fetching corpus: 5660, signal 168540/170868 (executing program)
2025/08/29 10:03:19 starting 8 fuzzer processes
10:03:19 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x3704})
10:03:19 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x1, 0x0}, 0x20004000)
10:03:19 executing program 6:
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2090}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
[ 79.040878] audit: type=1400 audit(1756461799.390:7): avc: denied { execmem } for pid=270 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
10:03:19 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r0, 0x0)
listen(r0, 0x0)
10:03:19 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000000)={0x0, 0x200})
10:03:19 executing program 4:
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xeb)
ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/reserved_size', 0xc0081, 0x0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000900)="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", 0x1ba)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r0, r2, 0x0, 0xfdef)
10:03:19 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$9p_tcp(0x0, 0x0, 0x0, 0x0, 0x0)
10:03:19 executing program 7:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
[ 80.201549] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 80.204590] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 80.206887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 80.210648] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 80.215292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 80.274724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 80.279411] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 80.284585] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 80.290397] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 80.295586] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 80.400692] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 80.407386] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 80.414459] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 80.435373] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 80.440041] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 80.478793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 80.493604] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 80.507549] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 80.509930] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 80.519165] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 80.520324] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 80.522534] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 80.523364] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 80.533721] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 80.537221] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 80.541220] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 80.543375] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 80.550436] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 80.562347] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 80.572404] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 80.575739] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 80.581343] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 80.582840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 80.586450] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 80.587540] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 80.591282] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 80.593587] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 80.607195] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 80.608467] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 80.613302] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 82.297520] Bluetooth: hci0: command tx timeout
[ 82.361549] Bluetooth: hci1: command tx timeout
[ 82.553244] Bluetooth: hci2: command tx timeout
[ 82.617628] Bluetooth: hci6: command tx timeout
[ 82.618637] Bluetooth: hci3: command tx timeout
[ 82.681197] Bluetooth: hci4: command tx timeout
[ 82.681747] Bluetooth: hci7: command tx timeout
[ 82.745138] Bluetooth: hci5: command tx timeout
[ 84.346680] Bluetooth: hci0: command tx timeout
[ 84.409132] Bluetooth: hci1: command tx timeout
[ 84.601412] Bluetooth: hci2: command tx timeout
[ 84.665541] Bluetooth: hci3: command tx timeout
[ 84.666418] Bluetooth: hci6: command tx timeout
[ 84.729259] Bluetooth: hci4: command tx timeout
[ 84.730612] Bluetooth: hci7: command tx timeout
[ 84.793420] Bluetooth: hci5: command tx timeout
[ 86.393579] Bluetooth: hci0: command tx timeout
[ 86.457220] Bluetooth: hci1: command tx timeout
[ 86.649152] Bluetooth: hci2: command tx timeout
[ 86.713201] Bluetooth: hci6: command tx timeout
[ 86.713723] Bluetooth: hci3: command tx timeout
[ 86.777290] Bluetooth: hci7: command tx timeout
[ 86.777773] Bluetooth: hci4: command tx timeout
[ 86.841276] Bluetooth: hci5: command tx timeout
[ 88.441238] Bluetooth: hci0: command tx timeout
[ 88.505149] Bluetooth: hci1: command tx timeout
[ 88.697140] Bluetooth: hci2: command tx timeout
[ 88.763161] Bluetooth: hci6: command tx timeout
[ 88.763632] Bluetooth: hci3: command tx timeout
[ 88.825275] Bluetooth: hci4: command tx timeout
[ 88.825741] Bluetooth: hci7: command tx timeout
[ 88.889541] Bluetooth: hci5: command tx timeout
[ 118.558330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 118.558956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 118.818306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 118.818915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.063387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.064463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.340591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.341703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:03:59 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x1, 0x0}, 0x20004000)
10:03:59 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x1, 0x0}, 0x20004000)
10:04:00 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x1, 0x0}, 0x20004000)
10:04:00 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)={0x28, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='(n\x00'}, @typed={0xd, 0x0, 0x0, 0x0, @str=',\'.),[)/\x00'}]}, 0x28}], 0x1}, 0x0)
[ 119.943308] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
10:04:00 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)={0x28, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='(n\x00'}, @typed={0xd, 0x0, 0x0, 0x0, @str=',\'.),[)/\x00'}]}, 0x28}], 0x1}, 0x0)
[ 120.106835] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
10:04:00 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)={0x28, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='(n\x00'}, @typed={0xd, 0x0, 0x0, 0x0, @str=',\'.),[)/\x00'}]}, 0x28}], 0x1}, 0x0)
[ 120.234944] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
10:04:00 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r0, 0x0)
listen(r0, 0x0)
10:04:00 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)={0x28, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='(n\x00'}, @typed={0xd, 0x0, 0x0, 0x0, @str=',\'.),[)/\x00'}]}, 0x28}], 0x1}, 0x0)
[ 120.428196] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 120.601537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 120.602516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 120.732917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 120.734053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 120.833872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 120.834529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 120.913564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 120.914392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 120.987360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 120.987975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.097170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.097838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.142271] audit: type=1400 audit(1756461841.491:8): avc: denied { open } for pid=3860 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 121.145917] audit: type=1400 audit(1756461841.492:9): avc: denied { kernel } for pid=3860 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 121.150196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.150854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.222763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.223661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.314045] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 121.706957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.707601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.734433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.735095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.781178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.781764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.791912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.792690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:04:02 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x3704})
10:04:02 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents(r0, &(0x7f00000000c0)=""/109, 0x6d)
getdents64(r0, &(0x7f0000000040)=""/34, 0x22)
10:04:02 executing program 6:
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2090}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
10:04:02 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$9p_tcp(0x0, 0x0, 0x0, 0x0, 0x0)
10:04:02 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r0, 0x0)
listen(r0, 0x0)
10:04:02 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000000)={0x0, 0x200})
10:04:02 executing program 7:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
10:04:02 executing program 4:
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xeb)
ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/reserved_size', 0xc0081, 0x0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000900)="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", 0x1ba)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r0, r2, 0x0, 0xfdef)
[ 122.370758] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO
10:04:02 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x3704})
10:04:02 executing program 7:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
[ 122.508476] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO
10:04:03 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents(r0, &(0x7f00000000c0)=""/109, 0x6d)
getdents64(r0, &(0x7f0000000040)=""/34, 0x22)
10:04:03 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$9p_tcp(0x0, 0x0, 0x0, 0x0, 0x0)
10:04:03 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r0, 0x0)
listen(r0, 0x0)
10:04:03 executing program 6:
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2090}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
10:04:03 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x3704})
10:04:03 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000000)={0x0, 0x200})
10:04:03 executing program 4:
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xeb)
ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/reserved_size', 0xc0081, 0x0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000900)="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", 0x1ba)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendfile(r0, r2, 0x0, 0xfdef)
10:04:03 executing program 7:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
[ 122.913791] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO
10:04:03 executing program 6:
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2090}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
[ 122.929631] kmemleak: Found object by alias at 0x607f1a638efc
[ 122.929649] CPU: 0 UID: 0 PID: 3931 Comm: syz-executor.7 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 122.929667] Tainted: [W]=WARN
[ 122.929671] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 122.929679] Call Trace:
[ 122.929684]
[ 122.929689] dump_stack_lvl+0xca/0x120
[ 122.929714] __lookup_object+0x94/0xb0
[ 122.929731] delete_object_full+0x27/0x70
[ 122.929748] free_percpu+0x30/0x1160
[ 122.929764] ? arch_uprobe_clear_state+0x16/0x140
[ 122.929784] futex_hash_free+0x38/0xc0
[ 122.929798] mmput+0x2d3/0x390
[ 122.929818] do_exit+0x79d/0x2970
[ 122.929831] ? signal_wake_up_state+0x85/0x120
[ 122.929847] ? zap_other_threads+0x2b9/0x3a0
[ 122.929863] ? __pfx_do_exit+0x10/0x10
[ 122.929875] ? do_group_exit+0x1c3/0x2a0
[ 122.929888] ? lock_release+0xc8/0x290
[ 122.929905] do_group_exit+0xd3/0x2a0
[ 122.929920] __x64_sys_exit_group+0x3e/0x50
[ 122.929933] x64_sys_call+0x18c5/0x18d0
[ 122.929949] do_syscall_64+0xbf/0x360
[ 122.929960] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.929972] RIP: 0033:0x7f91bd654b19
[ 122.929981] Code: Unable to access opcode bytes at 0x7f91bd654aef.
[ 122.929986] RSP: 002b:00007fff9b37cb28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 122.929997] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f91bd654b19
[ 122.930005] RDX: 00007f91bd60772b RSI: ffffffffffffffbc RDI: 0000000000000000
[ 122.930012] RBP: 0000000000000000 R08: 0000001b2d123a80 R09: 0000000000000000
[ 122.930019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 122.930026] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff9b37cc10
[ 122.930042]
[ 122.930045] kmemleak: Object (percpu) 0x607f1a638ef8 (size 8):
[ 122.930052] kmemleak: comm "syz-executor.3", pid 3939, jiffies 4294789812
[ 122.930063] kmemleak: min_count = 1
[ 122.930067] kmemleak: count = 0
[ 122.930071] kmemleak: flags = 0x21
[ 122.930074] kmemleak: checksum = 0
[ 122.930078] kmemleak: backtrace:
[ 122.930082] pcpu_alloc_noprof+0x87a/0x1170
[ 122.930097] perf_trace_event_init+0x366/0xa10
[ 122.930111] perf_trace_init+0x1a4/0x2f0
[ 122.930122] perf_tp_event_init+0xa6/0x120
[ 122.930138] perf_try_init_event+0x140/0x9f0
[ 122.930151] perf_event_alloc.part.0+0x118e/0x45f0
[ 122.930167] __do_sys_perf_event_open+0x719/0x2c20
[ 122.930180] do_syscall_64+0xbf/0x360
[ 122.930188] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.962538] Oops: general protection fault, probably for non-canonical address 0xfefffc0000000032: 0000 [#1] SMP KASAN NOPTI
[ 122.963455] KASAN: maybe wild-memory-access in range [0xf800000000000190-0xf800000000000197]
[ 122.964120] CPU: 0 UID: 0 PID: 3939 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 122.966371] Tainted: [W]=WARN
[ 122.966970] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 122.968664] RIP: 0010:perf_tp_event+0x175/0xe70
[ 122.970083] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 122.973463] RSP: 0018:ffff888045307800 EFLAGS: 00010212
[ 122.973900] RAX: 1f00000000000032 RBX: f7ffffffffffffa0 RCX: ffffc90009ad7000
[ 122.974478] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: f800000000000190
[ 122.975062] RBP: ffff888045307a70 R08: ffff88806ce31340 R09: ffffe8ffffc15ef8
[ 122.975642] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 122.976221] R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000
[ 122.976818] FS: 00007f131cddc700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 122.977472] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 122.977947] CR2: 000055f4ca95b064 CR3: 00000000440a0000 CR4: 0000000000350ef0
[ 122.978527] Call Trace:
[ 122.978743]
[ 122.978930] ? perf_swevent_event+0x63/0x3f0
[ 122.979306] ? __pfx_perf_tp_event+0x10/0x10
[ 122.979674] ? tracing_gen_ctx_irq_test+0x167/0x1f0
[ 122.980090] ? tracing_gen_ctx_irq_test+0x167/0x1f0
[ 122.980502] ? perf_swevent_event+0x63/0x3f0
[ 122.980872] ? perf_tp_event+0x807/0xe70
[ 122.981200] ? __lock_acquire+0xc65/0x1b70
[ 122.981545] ? __pfx_perf_tp_event+0x10/0x10
[ 122.981903] ? lock_acquire+0x15e/0x2f0
[ 122.982227] ? find_held_lock+0x2b/0x80
[ 122.982556] ? perf_trace_run_bpf_submit+0xef/0x180
[ 122.982964] perf_trace_run_bpf_submit+0xef/0x180
[ 122.983357] perf_trace_lock+0x337/0x5d0
[ 122.983689] ? __pfx_perf_trace_lock+0x10/0x10
[ 122.984062] ? lock_acquire+0x15e/0x2f0
[ 122.984382] ? futex_ref_get+0x48/0x300
[ 122.984712] ? futex_ref_get+0x114/0x300
[ 122.985035] ? futex_hash+0x15c/0x390
[ 122.985344] lock_release+0x1ab/0x290
[ 122.985656] ? futex_hash+0x15c/0x390
[ 122.985964] futex_ref_get+0x119/0x300
[ 122.986277] ? futex_hash+0x15c/0x390
[ 122.986581] futex_hash+0x70/0x390
[ 122.986871] futex_wake+0x143/0x540
[ 122.987169] ? __pfx_perf_trace_lock+0x10/0x10
[ 122.987540] ? __pfx_futex_wake+0x10/0x10
[ 122.987878] ? __do_sys_perf_event_open+0x44d/0x2c20
[ 122.988285] ? lock_release+0xc8/0x290
[ 122.988612] do_futex+0x26d/0x370
[ 122.988895] ? __pfx_do_futex+0x10/0x10
[ 122.989216] ? __pfx___do_sys_perf_event_open+0x10/0x10
[ 122.989643] ? __fput+0x67b/0xb50
[ 122.989933] __x64_sys_futex+0x1c9/0x4d0
[ 122.990263] ? __pfx___x64_sys_futex+0x10/0x10
[ 122.990629] ? __pfx_fput_close_sync+0x10/0x10
[ 122.990999] ? dnotify_flush+0x79/0x4c0
[ 122.991320] ? xfd_validate_state+0x55/0x180
[ 122.991686] do_syscall_64+0xbf/0x360
[ 122.991994] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.992408] RIP: 0033:0x7f131f866b19
[ 122.992712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 122.994146] RSP: 002b:00007f131cddc218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 122.994743] RAX: ffffffffffffffda RBX: 00007f131f979f68 RCX: 00007f131f866b19
[ 122.995305] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f131f979f6c
[ 122.995864] RBP: 00007f131f979f60 R08: 000000000000000e R09: 0000000000000000
[ 122.996424] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f131f979f6c
[ 122.996993] R13: 00007fff0ae65fbf R14: 00007f131cddc300 R15: 0000000000022000
[ 122.997561]
[ 122.997749] Modules linked in:
[ 122.998013] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI
[ 122.999591] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 123.000678] CPU: 1 UID: 0 PID: 3935 Comm: syz-executor.3 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 123.002337] Tainted: [D]=DIE, [W]=WARN
[ 123.002894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 123.004044] RIP: 0010:perf_tp_event+0x175/0xe70
[ 123.004721] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 123.007226] RSP: 0018:ffff8880193af800 EFLAGS: 00010212
[ 123.007991] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 123.008994] RDX: ffff888046525280 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 123.009981] RBP: ffff8880193afa70 R08: ffff88806cf31340 R09: ffffe8ffffd15ef8
[ 123.010982] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[ 123.012027] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[ 123.013165] FS: 00005555890e5400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[ 123.014437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 123.015373] CR2: 0000001b2d027000 CR3: 00000000440a0000 CR4: 0000000000350ef0
[ 123.016506] Call Trace:
[ 123.016941]
[ 123.017323] ? __pfx_perf_tp_event+0x10/0x10
[ 123.018053] ? lock_release+0x1c7/0x290
[ 123.018701] ? perf_trace_lock+0xb5/0x5d0
[ 123.019375] ? __virt_addr_valid+0x100/0x5d0
[ 123.020105] ? perf_trace_lock+0xb5/0x5d0
[ 123.020795] ? perf_trace_lock+0xb5/0x5d0
[ 123.021464] ? __pfx_perf_trace_lock+0x10/0x10
[ 123.022214] ? __pfx_perf_trace_lock+0x10/0x10
[ 123.022958] ? page_ref_add_unless.constprop.0+0x118/0x390
[ 123.023860] ? filemap_get_entry+0x1b1/0x3b0
[ 123.024579] ? perf_trace_lock+0xb5/0x5d0
[ 123.025252] ? current_time+0x70/0x190
[ 123.025901] ? perf_trace_run_bpf_submit+0xef/0x180
[ 123.026705] perf_trace_run_bpf_submit+0xef/0x180
[ 123.027502] perf_trace_lock+0x337/0x5d0
[ 123.028178] ? __pfx_perf_trace_lock+0x10/0x10
[ 123.028940] ? get_futex_key+0x592/0x14a0
[ 123.029603] ? futex_ref_get+0x114/0x300
[ 123.030248] ? futex_hash+0x15c/0x390
[ 123.030858] lock_release+0x1ab/0x290
[ 123.031479] ? futex_hash+0x15c/0x390
[ 123.032089] futex_ref_get+0x119/0x300
[ 123.032717] ? futex_hash+0x15c/0x390
[ 123.033330] futex_hash+0x70/0x390
[ 123.033900] futex_wake+0x143/0x540
[ 123.034498] ? fput+0x6a/0x100
[ 123.035032] ? fault_dirty_shared_page+0x17c/0x640
[ 123.035817] ? __pfx_futex_wake+0x10/0x10
[ 123.036481] ? __handle_mm_fault+0x753/0x3260
[ 123.037219] ? perf_trace_lock+0xb5/0x5d0
[ 123.037879] ? __pfx___handle_mm_fault+0x10/0x10
[ 123.038647] do_futex+0x26d/0x370
[ 123.039220] ? __pfx_do_futex+0x10/0x10
[ 123.039864] ? handle_mm_fault+0x590/0x9b0
[ 123.040561] __x64_sys_futex+0x1c9/0x4d0
[ 123.041213] ? handle_mm_fault+0x302/0x9b0
[ 123.041890] ? __pfx___x64_sys_futex+0x10/0x10
[ 123.042632] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 123.043473] do_syscall_64+0xbf/0x360
[ 123.044084] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 123.044913] RIP: 0033:0x7f131f866b19
[ 123.045509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 123.048332] RSP: 002b:00007fff0ae66038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 123.049526] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f131f866b19
[ 123.050638] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f131f979f68
[ 123.051755] RBP: 00007f131f979f60 R08: 00007f131f9760a0 R09: 0000000000000000
[ 123.052880] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f131f97ec08
[ 123.053983] R13: 00007fff0ae66140 R14: 00007f131f979f60 R15: 000000000001dfad
[ 123.055105]
[ 123.055476] Modules linked in:
[ 123.055995] Oops: general protection fault, probably for non-canonical address 0xfefffc0000000032: 0000 [#3] SMP KASAN NOPTI
[ 123.056877] KASAN: maybe wild-memory-access in range [0xf800000000000190-0xf800000000000197]
[ 123.057558] CPU: 0 UID: 0 PID: 3939 Comm: syz-executor.3 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 123.058532] Tainted: [D]=DIE, [W]=WARN
[ 123.058847] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 123.059514] RIP: 0010:perf_tp_event+0x175/0xe70
[ 123.059910] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 123.061393] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012
[ 123.061834] RAX: 1f00000000000032 RBX: f7ffffffffffffa0 RCX: ffffffff81898973
[ 123.062411] RDX: ffff888046523700 RSI: ffffffff818995b7 RDI: f800000000000190
[ 123.062983] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc15ef8
[ 123.063559] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000
[ 123.064144] R13: 0000000000000000 R14: ffff88806ce31490 R15: dffffc0000000000
[ 123.064730] FS: 00007f131cddc700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 123.065388] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 123.065861] CR2: 000055f4ca95b064 CR3: 00000000440a0000 CR4: 0000000000350ef0
[ 123.066441] Call Trace:
[ 123.066655]
[ 123.066844] ? kfree_skbmem+0x18a/0x1f0
[ 123.067181] ? __pfx_perf_tp_event+0x10/0x10
[ 123.067552] ? handle_softirqs+0x1b1/0x770
[ 123.067904] ? __ip6_finish_output+0x5d5/0xd10
[ 123.068291] ? ip6_output+0x1c2/0x3e0
[ 123.068622] ? mld_sendpack+0x95f/0x11b0
[ 123.068958] ? mld_send_initial_cr+0x21b/0x320
[ 123.069334] ? kthread+0x3c8/0x740
[ 123.069631] ? ret_from_fork+0x34b/0x430
[ 123.069982] ? ret_from_fork_asm+0x1a/0x30
[ 123.070336] ? lock_acquire+0x15e/0x2f0
[ 123.070668] ? __virt_addr_valid+0x1c6/0x5d0
[ 123.071042] ? find_held_lock+0x2b/0x80
[ 123.071374] ? __virt_addr_valid+0x2e8/0x5d0
[ 123.071744] ? lock_release+0xc8/0x290
[ 123.072070] ? mark_held_locks+0x49/0x80
[ 123.072409] ? perf_trace_run_bpf_submit+0xef/0x180
[ 123.072836] perf_trace_run_bpf_submit+0xef/0x180
[ 123.073240] perf_trace_lock+0x337/0x5d0
[ 123.073582] ? __pfx_perf_trace_lock+0x10/0x10
[ 123.073970] ? do_raw_spin_lock+0x123/0x260
[ 123.074328] ? hrtimer_interrupt+0x114/0x830
[ 123.074694] lock_release+0x1ab/0x290
[ 123.075013] ktime_get_update_offsets_now+0xab/0x3c0
[ 123.075436] ? hrtimer_interrupt+0x114/0x830
[ 123.075806] hrtimer_interrupt+0x114/0x830
[ 123.076156] ? workqueue_softirq_action+0x1a/0x170
[ 123.076575] ? __local_bh_enable+0x7b/0x90
[ 123.076935] __sysvec_apic_timer_interrupt+0xbb/0x330
[ 123.077365] sysvec_apic_timer_interrupt+0x6b/0x80
[ 123.077779]
[ 123.077965]
[ 123.078162] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 123.078591] RIP: 0010:oops_exit+0x0/0x50
[ 123.078928] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27
[ 123.080422] RSP: 0018:ffff888045307690 EFLAGS: 00000202
[ 123.080860] RAX: 000000000002d682 RBX: 0000000000000212 RCX: ffffc90009ad7000
[ 123.081441] RDX: 0000000000040000 RSI: ffffffff812a3dca RDI: 0000000000000007
[ 123.082021] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90
[ 123.082600] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888045307758
[ 123.083183] R13: 0000000000000000 R14: fefffc0000000032 R15: 0000000000000000
[ 123.083776] ? oops_end+0x4a/0xe0
[ 123.084079] oops_end+0x65/0xe0
[ 123.084365] exc_general_protection+0x1a2/0x330
[ 123.084771] asm_exc_general_protection+0x26/0x30
[ 123.085171] RIP: 0010:perf_tp_event+0x175/0xe70
[ 123.085556] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 123.087027] RSP: 0018:ffff888045307800 EFLAGS: 00010212
[ 123.087466] RAX: 1f00000000000032 RBX: f7ffffffffffffa0 RCX: ffffc90009ad7000
[ 123.088036] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: f800000000000190
[ 123.088621] RBP: ffff888045307a70 R08: ffff88806ce31340 R09: ffffe8ffffc15ef8
[ 123.089202] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 123.089780] R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000
[ 123.090365] ? perf_tp_event+0x167/0xe70
[ 123.090708] ? perf_swevent_event+0x63/0x3f0
[ 123.091082] ? __pfx_perf_tp_event+0x10/0x10
[ 123.091450] ? tracing_gen_ctx_irq_test+0x167/0x1f0
[ 123.091861] ? tracing_gen_ctx_irq_test+0x167/0x1f0
[ 123.092272] ? perf_swevent_event+0x63/0x3f0
[ 123.092647] ? perf_tp_event+0x807/0xe70
[ 123.092984] ? __lock_acquire+0xc65/0x1b70
[ 123.093335] ? __pfx_perf_tp_event+0x10/0x10
[ 123.093702] ? lock_acquire+0x15e/0x2f0
[ 123.094032] ? find_held_lock+0x2b/0x80
[ 123.094376] ? perf_trace_run_bpf_submit+0xef/0x180
[ 123.094791] perf_trace_run_bpf_submit+0xef/0x180
[ 123.095193] perf_trace_lock+0x337/0x5d0
[ 123.095531] ? __pfx_perf_trace_lock+0x10/0x10
[ 123.095914] ? lock_acquire+0x15e/0x2f0
[ 123.096243] ? futex_ref_get+0x48/0x300
[ 123.096575] ? futex_ref_get+0x114/0x300
[ 123.096903] ? futex_hash+0x15c/0x390
[ 123.097218] lock_release+0x1ab/0x290
[ 123.097539] ? futex_hash+0x15c/0x390
[ 123.097853] futex_ref_get+0x119/0x300
[ 123.098176] ? futex_hash+0x15c/0x390
[ 123.098490] futex_hash+0x70/0x390
[ 123.098794] futex_wake+0x143/0x540
[ 123.099096] ? __pfx_perf_trace_lock+0x10/0x10
[ 123.099475] ? __pfx_futex_wake+0x10/0x10
[ 123.099823] ? __do_sys_perf_event_open+0x44d/0x2c20
[ 123.100238] ? lock_release+0xc8/0x290
[ 123.100572] do_futex+0x26d/0x370
[ 123.100861] ? __pfx_do_futex+0x10/0x10
[ 123.101191] ? __pfx___do_sys_perf_event_open+0x10/0x10
[ 123.101628] ? __fput+0x67b/0xb50
[ 123.101919] __x64_sys_futex+0x1c9/0x4d0
[ 123.102261] ? __pfx___x64_sys_futex+0x10/0x10
[ 123.102636] ? __pfx_fput_close_sync+0x10/0x10
[ 123.103017] ? dnotify_flush+0x79/0x4c0
[ 123.103341] ? xfd_validate_state+0x55/0x180
[ 123.103712] do_syscall_64+0xbf/0x360
[ 123.104025] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 123.104446] RIP: 0033:0x7f131f866b19
[ 123.104765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 123.106187] RSP: 002b:00007f131cddc218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 123.106800] RAX: ffffffffffffffda RBX: 00007f131f979f68 RCX: 00007f131f866b19
[ 123.107372] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f131f979f6c
[ 123.107949] RBP: 00007f131f979f60 R08: 000000000000000e R09: 0000000000000000
[ 123.108523] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f131f979f6c
[ 123.109100] R13: 00007fff0ae65fbf R14: 00007f131cddc300 R15: 0000000000022000
[ 123.109682]
[ 123.109877] Modules linked in:
[ 123.110146] ---[ end trace 0000000000000000 ]---
[ 123.110149] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#4] SMP KASAN NOPTI
[ 123.110531] RIP: 0010:perf_tp_event+0x175/0xe70
[ 123.112304] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 123.112679] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 123.113892] CPU: 1 UID: 0 PID: 3935 Comm: syz-executor.3 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 123.115351] RSP: 0018:ffff888045307800 EFLAGS: 00010212
[ 123.117270] Tainted: [D]=DIE, [W]=WARN
[ 123.117684] RAX: 1f00000000000032 RBX: f7ffffffffffffa0 RCX: ffffc90009ad7000
[ 123.118312] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 123.118876] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: f800000000000190
[ 123.120202] RIP: 0010:perf_tp_event+0x175/0xe70
[ 123.120777] RBP: ffff888045307a70 R08: ffff88806ce31340 R09: ffffe8ffffc15ef8
[ 123.121539] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 123.122108] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 123.125037] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012
[ 123.125605] R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000
[ 123.125610]
[ 123.125621] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 123.126044] FS: 00007f131cddc700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 123.127183] RDX: ffff888046525280 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 123.127326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 123.128462] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd15ef8
[ 123.129116] CR2: 000055f4ca95b064 CR3: 00000000440a0000 CR4: 0000000000350ef0
[ 123.130260] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000
[ 123.130724] Kernel panic - not syncing: Fatal exception in interrupt
[ 124.174604] Shutting down cpus with NMI
[ 124.176846] Kernel Offset: disabled
[ 124.177141] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---
VM DIAGNOSIS:
10:04:03 Registers:
info registers vcpu 0
RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888045307158
R8 =0000000000000000 R9 =ffffed1001759046 R10=000000000000005d R11=30376578302f4952
R12=000000000000005d R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0
RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f131cddc700 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe5300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=000055f4ca95b064 CR3=00000000440a0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f131f94d7c000007f131f94d7c8
XMM02=00007f131f94d7e000007f131f94d7c0 XMM03=00007f131f94d7c800007f131f94d7c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84bdec0e RDX=fffffbfff0f0ec09
RSI=0000000000000004 RDI=ffffffff87876044 RBP=ffffffff87876044 RSP=ffff8880193af5b0
R8 =0000000000000000 R9 =fffffbfff0f0ec08 R10=ffffffff87876047 R11=202c746c75616620
R12=1ffff11003275eb7 R13=0000000000000007 R14=fffffbfff0f0ec08 R15=ffff8880193af5e8
RIP=ffffffff84bdeda0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00005555890e5400 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2d027000 CR3=00000000440a0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007f131f94d7c800007f131f94d7c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000