Warning: Permanently added '[localhost]:6816' (ECDSA) to the list of known hosts.
2025/08/29 10:26:37 fuzzer started
2025/08/29 10:26:37 dialing manager at localhost:43077
syzkaller login: [   51.519645] cgroup: Unknown subsys name 'net'
[   51.570159] cgroup: Unknown subsys name 'cpuset'
[   51.583853] cgroup: Unknown subsys name 'rlimit'
2025/08/29 10:26:48 syscalls: 2214
2025/08/29 10:26:48 code coverage: enabled
2025/08/29 10:26:48 comparison tracing: enabled
2025/08/29 10:26:48 extra coverage: enabled
2025/08/29 10:26:48 setuid sandbox: enabled
2025/08/29 10:26:48 namespace sandbox: enabled
2025/08/29 10:26:48 Android sandbox: enabled
2025/08/29 10:26:48 fault injection: enabled
2025/08/29 10:26:48 leak checking: enabled
2025/08/29 10:26:48 net packet injection: enabled
2025/08/29 10:26:48 net device setup: enabled
2025/08/29 10:26:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/29 10:26:48 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/29 10:26:48 USB emulation: enabled
2025/08/29 10:26:48 hci packet injection: enabled
2025/08/29 10:26:48 wifi device emulation: enabled
2025/08/29 10:26:48 802.15.4 emulation: enabled
2025/08/29 10:26:48 fetching corpus: 0, signal 0/2000 (executing program)
2025/08/29 10:26:48 fetching corpus: 50, signal 19898/23442 (executing program)
2025/08/29 10:26:49 fetching corpus: 100, signal 35244/40046 (executing program)
2025/08/29 10:26:49 fetching corpus: 150, signal 45050/50977 (executing program)
2025/08/29 10:26:49 fetching corpus: 200, signal 50433/57583 (executing program)
2025/08/29 10:26:49 fetching corpus: 250, signal 54938/63186 (executing program)
2025/08/29 10:26:49 fetching corpus: 300, signal 59203/68481 (executing program)
2025/08/29 10:26:49 fetching corpus: 350, signal 65382/75463 (executing program)
2025/08/29 10:26:49 fetching corpus: 400, signal 67781/78869 (executing program)
2025/08/29 10:26:49 fetching corpus: 450, signal 71616/83528 (executing program)
2025/08/29 10:26:49 fetching corpus: 500, signal 74544/87265 (executing program)
2025/08/29 10:26:49 fetching corpus: 550, signal 77388/90912 (executing program)
2025/08/29 10:26:50 fetching corpus: 600, signal 80240/94464 (executing program)
2025/08/29 10:26:50 fetching corpus: 650, signal 82705/97650 (executing program)
2025/08/29 10:26:50 fetching corpus: 700, signal 85092/100691 (executing program)
2025/08/29 10:26:50 fetching corpus: 750, signal 87590/103783 (executing program)
2025/08/29 10:26:50 fetching corpus: 800, signal 89663/106452 (executing program)
2025/08/29 10:26:50 fetching corpus: 850, signal 91040/108584 (executing program)
2025/08/29 10:26:50 fetching corpus: 900, signal 93207/111286 (executing program)
2025/08/29 10:26:50 fetching corpus: 950, signal 95183/113782 (executing program)
2025/08/29 10:26:50 fetching corpus: 1000, signal 97615/116574 (executing program)
2025/08/29 10:26:50 fetching corpus: 1050, signal 98815/118384 (executing program)
2025/08/29 10:26:50 fetching corpus: 1100, signal 101042/120953 (executing program)
2025/08/29 10:26:51 fetching corpus: 1150, signal 101965/122487 (executing program)
2025/08/29 10:26:51 fetching corpus: 1200, signal 102947/124070 (executing program)
2025/08/29 10:26:51 fetching corpus: 1250, signal 103865/125523 (executing program)
2025/08/29 10:26:51 fetching corpus: 1300, signal 105262/127286 (executing program)
2025/08/29 10:26:51 fetching corpus: 1350, signal 106851/129196 (executing program)
2025/08/29 10:26:51 fetching corpus: 1400, signal 108985/131436 (executing program)
2025/08/29 10:26:51 fetching corpus: 1450, signal 110520/133181 (executing program)
2025/08/29 10:26:51 fetching corpus: 1500, signal 111918/134866 (executing program)
2025/08/29 10:26:51 fetching corpus: 1550, signal 112935/136248 (executing program)
2025/08/29 10:26:51 fetching corpus: 1600, signal 113734/137481 (executing program)
2025/08/29 10:26:52 fetching corpus: 1650, signal 115399/139157 (executing program)
2025/08/29 10:26:52 fetching corpus: 1700, signal 116662/140621 (executing program)
2025/08/29 10:26:52 fetching corpus: 1750, signal 117413/141729 (executing program)
2025/08/29 10:26:52 fetching corpus: 1800, signal 118067/142752 (executing program)
2025/08/29 10:26:52 fetching corpus: 1850, signal 119304/144128 (executing program)
2025/08/29 10:26:52 fetching corpus: 1900, signal 120441/145457 (executing program)
2025/08/29 10:26:52 fetching corpus: 1950, signal 121508/146666 (executing program)
2025/08/29 10:26:52 fetching corpus: 2000, signal 123309/148286 (executing program)
2025/08/29 10:26:52 fetching corpus: 2050, signal 124078/149333 (executing program)
2025/08/29 10:26:52 fetching corpus: 2100, signal 124887/150389 (executing program)
2025/08/29 10:26:52 fetching corpus: 2150, signal 125777/151441 (executing program)
2025/08/29 10:26:52 fetching corpus: 2200, signal 126573/152459 (executing program)
2025/08/29 10:26:52 fetching corpus: 2250, signal 127268/153338 (executing program)
2025/08/29 10:26:53 fetching corpus: 2300, signal 127971/154210 (executing program)
2025/08/29 10:26:53 fetching corpus: 2350, signal 129033/155289 (executing program)
2025/08/29 10:26:53 fetching corpus: 2400, signal 129849/156208 (executing program)
2025/08/29 10:26:53 fetching corpus: 2450, signal 130836/157148 (executing program)
2025/08/29 10:26:53 fetching corpus: 2500, signal 131749/158045 (executing program)
2025/08/29 10:26:53 fetching corpus: 2550, signal 132396/158858 (executing program)
2025/08/29 10:26:53 fetching corpus: 2600, signal 133400/159783 (executing program)
2025/08/29 10:26:53 fetching corpus: 2650, signal 134003/160569 (executing program)
2025/08/29 10:26:53 fetching corpus: 2700, signal 134518/161276 (executing program)
2025/08/29 10:26:53 fetching corpus: 2750, signal 135175/162119 (executing program)
2025/08/29 10:26:54 fetching corpus: 2800, signal 136658/163070 (executing program)
2025/08/29 10:26:54 fetching corpus: 2850, signal 137550/163819 (executing program)
2025/08/29 10:26:54 fetching corpus: 2900, signal 138276/164533 (executing program)
2025/08/29 10:26:54 fetching corpus: 2950, signal 138916/165215 (executing program)
2025/08/29 10:26:54 fetching corpus: 3000, signal 139530/165795 (executing program)
2025/08/29 10:26:54 fetching corpus: 3050, signal 140152/166392 (executing program)
2025/08/29 10:26:54 fetching corpus: 3100, signal 140870/166993 (executing program)
2025/08/29 10:26:54 fetching corpus: 3150, signal 141889/167663 (executing program)
2025/08/29 10:26:54 fetching corpus: 3200, signal 142258/168161 (executing program)
2025/08/29 10:26:54 fetching corpus: 3250, signal 143257/168844 (executing program)
2025/08/29 10:26:54 fetching corpus: 3300, signal 143742/169379 (executing program)
2025/08/29 10:26:55 fetching corpus: 3350, signal 144612/169950 (executing program)
2025/08/29 10:26:55 fetching corpus: 3400, signal 144953/170415 (executing program)
2025/08/29 10:26:55 fetching corpus: 3450, signal 145423/170868 (executing program)
2025/08/29 10:26:55 fetching corpus: 3500, signal 146028/171330 (executing program)
2025/08/29 10:26:55 fetching corpus: 3550, signal 146586/171789 (executing program)
2025/08/29 10:26:55 fetching corpus: 3600, signal 147291/172248 (executing program)
2025/08/29 10:26:55 fetching corpus: 3650, signal 147902/172718 (executing program)
2025/08/29 10:26:55 fetching corpus: 3700, signal 148460/173158 (executing program)
2025/08/29 10:26:55 fetching corpus: 3750, signal 148996/173556 (executing program)
2025/08/29 10:26:55 fetching corpus: 3800, signal 149352/173957 (executing program)
2025/08/29 10:26:55 fetching corpus: 3850, signal 149913/174395 (executing program)
2025/08/29 10:26:56 fetching corpus: 3900, signal 150379/174762 (executing program)
2025/08/29 10:26:56 fetching corpus: 3950, signal 150893/175129 (executing program)
2025/08/29 10:26:56 fetching corpus: 4000, signal 151391/175479 (executing program)
2025/08/29 10:26:56 fetching corpus: 4050, signal 151868/175799 (executing program)
2025/08/29 10:26:56 fetching corpus: 4100, signal 152327/176115 (executing program)
2025/08/29 10:26:56 fetching corpus: 4150, signal 152849/176425 (executing program)
2025/08/29 10:26:56 fetching corpus: 4200, signal 153514/176706 (executing program)
2025/08/29 10:26:56 fetching corpus: 4250, signal 154084/177014 (executing program)
2025/08/29 10:26:56 fetching corpus: 4300, signal 154483/177032 (executing program)
2025/08/29 10:26:56 fetching corpus: 4350, signal 154892/177050 (executing program)
2025/08/29 10:26:56 fetching corpus: 4400, signal 155423/177063 (executing program)
2025/08/29 10:26:57 fetching corpus: 4450, signal 156053/177069 (executing program)
2025/08/29 10:26:57 fetching corpus: 4500, signal 156352/177085 (executing program)
2025/08/29 10:26:57 fetching corpus: 4550, signal 156875/177092 (executing program)
2025/08/29 10:26:57 fetching corpus: 4600, signal 157416/177107 (executing program)
2025/08/29 10:26:57 fetching corpus: 4650, signal 157978/177116 (executing program)
2025/08/29 10:26:57 fetching corpus: 4700, signal 158395/177158 (executing program)
2025/08/29 10:26:57 fetching corpus: 4750, signal 158967/177214 (executing program)
2025/08/29 10:26:57 fetching corpus: 4800, signal 159498/177214 (executing program)
2025/08/29 10:26:57 fetching corpus: 4850, signal 160284/177217 (executing program)
2025/08/29 10:26:57 fetching corpus: 4900, signal 160716/177228 (executing program)
2025/08/29 10:26:57 fetching corpus: 4950, signal 161269/177230 (executing program)
2025/08/29 10:26:58 fetching corpus: 5000, signal 161744/177240 (executing program)
2025/08/29 10:26:58 fetching corpus: 5050, signal 162031/177244 (executing program)
2025/08/29 10:26:58 fetching corpus: 5100, signal 162572/177244 (executing program)
2025/08/29 10:26:58 fetching corpus: 5150, signal 163245/177246 (executing program)
2025/08/29 10:26:58 fetching corpus: 5200, signal 163726/177258 (executing program)
2025/08/29 10:26:58 fetching corpus: 5250, signal 164018/177272 (executing program)
2025/08/29 10:26:58 fetching corpus: 5300, signal 164379/177286 (executing program)
2025/08/29 10:26:58 fetching corpus: 5350, signal 165242/177322 (executing program)
2025/08/29 10:26:58 fetching corpus: 5400, signal 165676/177336 (executing program)
2025/08/29 10:26:58 fetching corpus: 5450, signal 166065/177336 (executing program)
2025/08/29 10:26:59 fetching corpus: 5500, signal 166323/177340 (executing program)
2025/08/29 10:26:59 fetching corpus: 5550, signal 166961/177358 (executing program)
2025/08/29 10:26:59 fetching corpus: 5600, signal 167410/177362 (executing program)
2025/08/29 10:26:59 fetching corpus: 5650, signal 167836/177368 (executing program)
2025/08/29 10:26:59 fetching corpus: 5700, signal 168092/177375 (executing program)
2025/08/29 10:26:59 fetching corpus: 5750, signal 168389/177386 (executing program)
2025/08/29 10:26:59 fetching corpus: 5800, signal 168732/177386 (executing program)
2025/08/29 10:26:59 fetching corpus: 5850, signal 169140/177388 (executing program)
2025/08/29 10:26:59 fetching corpus: 5900, signal 169604/177397 (executing program)
2025/08/29 10:26:59 fetching corpus: 5950, signal 169897/177432 (executing program)
2025/08/29 10:26:59 fetching corpus: 6000, signal 170201/177445 (executing program)
2025/08/29 10:27:00 fetching corpus: 6050, signal 170531/177454 (executing program)
2025/08/29 10:27:00 fetching corpus: 6100, signal 170856/177471 (executing program)
2025/08/29 10:27:00 fetching corpus: 6150, signal 172336/177477 (executing program)
2025/08/29 10:27:00 fetching corpus: 6200, signal 172623/177520 (executing program)
2025/08/29 10:27:00 fetching corpus: 6250, signal 173001/177522 (executing program)
2025/08/29 10:27:00 fetching corpus: 6300, signal 173264/177522 (executing program)
2025/08/29 10:27:00 fetching corpus: 6350, signal 173527/177538 (executing program)
2025/08/29 10:27:00 fetching corpus: 6400, signal 174141/177588 (executing program)
2025/08/29 10:27:00 fetching corpus: 6450, signal 174518/177602 (executing program)
2025/08/29 10:27:00 fetching corpus: 6500, signal 174827/177622 (executing program)
2025/08/29 10:27:00 fetching corpus: 6550, signal 175100/177629 (executing program)
2025/08/29 10:27:01 fetching corpus: 6590, signal 175362/177631 (executing program)
2025/08/29 10:27:01 fetching corpus: 6590, signal 175362/177631 (executing program)
2025/08/29 10:27:03 starting 8 fuzzer processes
10:27:03 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)={0x24, 0x66, 0x101, 0x0, 0x0, "", [@generic="4ce41fcf604d7c6825107d23e2bdb36fba"]}, 0x24}], 0x1}, 0x0)

10:27:03 executing program 1:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffc, r0, 0x0)

10:27:03 executing program 7:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6800)
preadv2(r0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/70, 0x46}], 0x1, 0x0, 0x0, 0x1a)

10:27:03 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000240), &(0x7f0000000280)={'enc=', 'raw', ' hash=', {'sha256-ssse3\x00'}}, 0x0, 0x0)

10:27:03 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
fcntl$setstatus(r0, 0x4, 0x2800)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r0, r1, 0x0, 0xf5)

[   76.960490] audit: type=1400 audit(1756463223.589:7): avc:  denied  { execmem } for  pid=270 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
10:27:03 executing program 3:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x5392, &(0x7f0000000180)={"0367f93ed59ada90d094df2f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10:27:03 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)

10:27:03 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r1, 0x501, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[   78.128932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.130939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.132992] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.137399] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.140467] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.253161] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   78.255795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   78.261494] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.263381] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   78.266601] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   78.270244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   78.273977] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   78.277479] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.279896] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.285302] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   78.289394] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   78.300390] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.304210] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.308074] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   78.316788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   78.325336] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   78.337873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   78.343676] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   78.345822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   78.347315] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   78.351666] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   78.355895] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   78.357637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   78.360788] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   78.362028] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   78.364464] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   78.365703] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   78.370416] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   78.375292] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   78.382830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   78.388773] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   78.411297] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   78.417431] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   78.427304] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   78.432453] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   80.157136] Bluetooth: hci0: command tx timeout
[   80.346446] Bluetooth: hci3: command tx timeout
[   80.346945] Bluetooth: hci1: command tx timeout
[   80.347398] Bluetooth: hci2: command tx timeout
[   80.410097] Bluetooth: hci4: command tx timeout
[   80.474082] Bluetooth: hci6: command tx timeout
[   80.474787] Bluetooth: hci5: command tx timeout
[   80.475387] Bluetooth: hci7: command tx timeout
[   82.202885] Bluetooth: hci0: command tx timeout
[   82.394065] Bluetooth: hci2: command tx timeout
[   82.394126] Bluetooth: hci1: command tx timeout
[   82.394630] Bluetooth: hci3: command tx timeout
[   82.458217] Bluetooth: hci4: command tx timeout
[   82.522101] Bluetooth: hci7: command tx timeout
[   82.522274] Bluetooth: hci5: command tx timeout
[   82.522593] Bluetooth: hci6: command tx timeout
[   84.251051] Bluetooth: hci0: command tx timeout
[   84.442273] Bluetooth: hci1: command tx timeout
[   84.442716] Bluetooth: hci2: command tx timeout
[   84.443202] Bluetooth: hci3: command tx timeout
[   84.506117] Bluetooth: hci4: command tx timeout
[   84.570054] Bluetooth: hci5: command tx timeout
[   84.570535] Bluetooth: hci6: command tx timeout
[   84.571227] Bluetooth: hci7: command tx timeout
[   86.298083] Bluetooth: hci0: command tx timeout
[   86.490185] Bluetooth: hci3: command tx timeout
[   86.490606] Bluetooth: hci2: command tx timeout
[   86.490987] Bluetooth: hci1: command tx timeout
[   86.554060] Bluetooth: hci4: command tx timeout
[   86.618454] Bluetooth: hci7: command tx timeout
[   86.618875] Bluetooth: hci6: command tx timeout
[   86.619811] Bluetooth: hci5: command tx timeout
[  114.699329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.699990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.876253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.876890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.301747] audit: type=1400 audit(1756463261.929:8): avc:  denied  { open } for  pid=3679 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  115.308494] audit: type=1400 audit(1756463261.929:9): avc:  denied  { kernel } for  pid=3679 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
10:27:42 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
getpgrp(0xffffffffffffffff)
sendmmsg$unix(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003640)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)

10:27:42 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
getpgrp(0xffffffffffffffff)
sendmmsg$unix(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003640)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)

10:27:42 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
getpgrp(0xffffffffffffffff)
sendmmsg$unix(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003640)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)

10:27:42 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
getpgrp(0xffffffffffffffff)
sendmmsg$unix(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003640)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)

10:27:42 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x4c, 0x0, &(0x7f00000018c0))

10:27:42 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x4c, 0x0, &(0x7f00000018c0))

10:27:42 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x4c, 0x0, &(0x7f00000018c0))

[  116.188038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.188645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:27:42 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x4c, 0x0, &(0x7f00000018c0))

[  116.348558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.349529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.652054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.652692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.761965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.762738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.091880] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  117.242813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.243458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.321651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.322255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.394779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.395381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.469936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.470624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.519089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.519708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.602453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.603051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.671402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.672037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.723893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.724504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.113811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.114532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.144160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.144741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:27:44 executing program 7:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6800)
preadv2(r0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/70, 0x46}], 0x1, 0x0, 0x0, 0x1a)

10:27:44 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000240), &(0x7f0000000280)={'enc=', 'raw', ' hash=', {'sha256-ssse3\x00'}}, 0x0, 0x0)

10:27:44 executing program 1:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffc, r0, 0x0)

10:27:44 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
fcntl$setstatus(r0, 0x4, 0x2800)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r0, r1, 0x0, 0xf5)

10:27:44 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r1, 0x501, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

10:27:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="130000007600", @ANYRES32], 0x18}], 0x1}, 0x0)

10:27:44 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)={0x24, 0x66, 0x101, 0x0, 0x0, "", [@generic="4ce41fcf604d7c6825107d23e2bdb36fba"]}, 0x24}], 0x1}, 0x0)

10:27:44 executing program 3:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x5392, &(0x7f0000000180)={"0367f93ed59ada90d094df2f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10:27:45 executing program 7:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6800)
preadv2(r0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/70, 0x46}], 0x1, 0x0, 0x0, 0x1a)

10:27:45 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="130000007600", @ANYRES32], 0x18}], 0x1}, 0x0)

10:27:45 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)={0x24, 0x66, 0x101, 0x0, 0x0, "", [@generic="4ce41fcf604d7c6825107d23e2bdb36fba"]}, 0x24}], 0x1}, 0x0)

10:27:45 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
fcntl$setstatus(r0, 0x4, 0x2800)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r0, r1, 0x0, 0xf5)

10:27:45 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000240), &(0x7f0000000280)={'enc=', 'raw', ' hash=', {'sha256-ssse3\x00'}}, 0x0, 0x0)

10:27:45 executing program 1:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffc, r0, 0x0)

10:27:45 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r1, 0x501, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

10:27:45 executing program 3:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x5392, &(0x7f0000000180)={"0367f93ed59ada90d094df2f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  118.462285] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI
[  118.463506] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  118.464243] CPU: 1 UID: 0 PID: 3933 Comm: syz-executor.0 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  118.465952] Tainted: [W]=WARN
[  118.466505] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  118.468007] RIP: 0010:perf_tp_event+0x175/0xe70
[  118.468812] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  118.471446] RSP: 0018:ffff888046bdf800 EFLAGS: 00010212
[  118.472240] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  118.473343] RDX: ffff88801adc1b80 RSI: ffffffff818995b7 RDI: 0000000000000191
[  118.474901] RBP: ffff888046bdfa70 R08: ffff88806cf31340 R09: ffffe8ffffd15bf8
[  118.475970] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  118.477090] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[  118.478185] FS:  000055558e5ae400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  118.479346] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  118.480298] CR2: 0000555577d44c18 CR3: 000000001e2ac000 CR4: 0000000000350ef0
[  118.481315] Call Trace:
[  118.482066]  <TASK>
[  118.482300]  ? arch_scale_cpu_capacity+0x17/0xa0
[  118.482775]  ? __pfx_perf_tp_event+0x10/0x10
[  118.483210]  ? __asan_memset+0x24/0x50
[  118.483618]  ? perf_trace_lock+0xb5/0x5d0
[  118.484031]  ? kvm_sched_clock_read+0x16/0x30
[  118.484485]  ? sched_clock+0x37/0x60
[  118.484863]  ? sched_clock_cpu+0x6c/0x4e0
[  118.485275]  ? lock_is_held_type+0x9e/0x120
[  118.485703]  ? perf_trace_run_bpf_submit+0xef/0x180
[  118.486197]  perf_trace_run_bpf_submit+0xef/0x180
[  118.486685]  perf_trace_lock+0x337/0x5d0
[  118.487094]  ? __pfx_perf_trace_lock+0x10/0x10
[  118.487553]  ? lock_acquire+0x15e/0x2f0
[  118.487952]  ? futex_ref_get+0x48/0x300
[  118.488360]  ? futex_ref_get+0x114/0x300
[  118.488760]  ? futex_hash+0x15c/0x390
[  118.489139]  lock_release+0x1ab/0x290
[  118.489522]  ? futex_hash+0x15c/0x390
[  118.489895]  futex_ref_get+0x119/0x300
[  118.490276]  ? futex_hash+0x15c/0x390
[  118.490648]  futex_hash+0x70/0x390
[  118.491003]  futex_wake+0x143/0x540
[  118.491368]  ? put_pid+0x1f/0x30
[  118.491702]  ? kernel_clone+0x204/0x7f0
[  118.492093]  ? __pfx_futex_wake+0x10/0x10
[  118.492509]  ? __pfx_kernel_clone+0x10/0x10
[  118.492932]  ? __lock_acquire+0x694/0x1b70
[  118.493350]  do_futex+0x26d/0x370
[  118.493697]  ? __pfx_do_futex+0x10/0x10
[  118.494090]  ? __pfx___do_sys_clone+0x10/0x10
[  118.494527]  ? find_held_lock+0x2b/0x80
[  118.494927]  __x64_sys_futex+0x1c9/0x4d0
[  118.495329]  ? __pfx___x64_sys_futex+0x10/0x10
[  118.495780]  ? xfd_validate_state+0x55/0x180
[  118.496227]  do_syscall_64+0xbf/0x360
[  118.496610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.497112] RIP: 0033:0x7f822d6cfb19
[  118.497475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  118.499196] RSP: 002b:00007ffd012a1488 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  118.499917] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f822d6cfb19
[  118.500607] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f822d7e2f68
[  118.501289] RBP: 00007f822d7e2f60 R08: 00007f822ac45700 R09: 0000000000000000
[  118.501971] R10: 00007f822ac45700 R11: 0000000000000246 R12: 00007f822d7e7060
[  118.502648] R13: 00007ffd012a1590 R14: 00007f822d7e2f60 R15: 000000000001ce27
[  118.503340]  </TASK>
[  118.503575] Modules linked in:
[  118.504250] ---[ end trace 0000000000000000 ]---
[  118.504725] RIP: 0010:perf_tp_event+0x175/0xe70
[  118.505309] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  118.507168] RSP: 0018:ffff888046bdf800 EFLAGS: 00010212
[  118.507695] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  118.508475] RDX: ffff88801adc1b80 RSI: ffffffff818995b7 RDI: 0000000000000191
[  118.509197] RBP: ffff888046bdfa70 R08: ffff88806cf31340 R09: ffffe8ffffd15bf8
[  118.509897] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  118.510608] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[  118.511313] FS:  000055558e5ae400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  118.512103] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  118.512675] CR2: 0000555577d44c18 CR3: 000000001e2ac000 CR4: 0000000000350ef0
[  118.513383] note: syz-executor.0[3933] exited with preempt_count 1
[  118.513990] BUG: sleeping function called from invalid context at ./include/linux/percpu-rwsem.h:51
[  118.514863] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 3933, name: syz-executor.0
[  118.515696] preempt_count: 0, expected: 0
[  118.516113] RCU nest depth: 2, expected: 0
[  118.516530] INFO: lockdep is turned off.
[  118.516923] CPU: 1 UID: 0 PID: 3933 Comm: syz-executor.0 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  118.516946] Tainted: [D]=DIE, [W]=WARN
[  118.516951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  118.516958] Call Trace:
[  118.516963]  <TASK>
[  118.516968]  dump_stack_lvl+0xfa/0x120
[  118.516997]  __might_resched+0x2f3/0x510
[  118.517015]  exit_signals+0x25/0x940
[  118.517040]  do_exit+0x2db/0x2970
[  118.517056]  ? _printk+0xbe/0xf0
[  118.517072]  ? __pfx__printk+0x10/0x10
[  118.517088]  ? __pfx_do_exit+0x10/0x10
[  118.517106]  make_task_dead+0x174/0x3b0
[  118.517122]  ? do_syscall_64+0xbf/0x360
[  118.517134]  rewind_stack_and_make_dead+0x16/0x20
[  118.517153] RIP: 0033:0x7f822d6cfb19
[  118.517162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  118.517175] RSP: 002b:00007ffd012a1488 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  118.517188] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f822d6cfb19
[  118.517197] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f822d7e2f68
[  118.517206] RBP: 00007f822d7e2f60 R08: 00007f822ac45700 R09: 0000000000000000
[  118.517215] R10: 00007f822ac45700 R11: 0000000000000246 R12: 00007f822d7e7060
[  118.517224] R13: 00007ffd012a1590 R14: 00007f822d7e2f60 R15: 000000000001ce27
[  118.517237]  </TASK>
10:27:45 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
fcntl$setstatus(r0, 0x4, 0x2800)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r0, r1, 0x0, 0xf5)

10:27:45 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="130000007600", @ANYRES32], 0x18}], 0x1}, 0x0)

10:27:45 executing program 1:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffc, r0, 0x0)

10:27:45 executing program 7:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6800)
preadv2(r0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/70, 0x46}], 0x1, 0x0, 0x0, 0x1a)

10:27:48 executing program 7:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000000)={"0359f93ed59ada90d094df2f", &(0x7f0000000040)='C', 0x80000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0})

10:27:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="130000007600", @ANYRES32], 0x18}], 0x1}, 0x0)

10:27:48 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r1, 0x501, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

10:27:48 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
read(r0, 0x0, 0x0)

10:27:48 executing program 3:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x5392, &(0x7f0000000180)={"0367f93ed59ada90d094df2f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10:27:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)={0x24, 0x66, 0x101, 0x0, 0x0, "", [@generic="4ce41fcf604d7c6825107d23e2bdb36fba"]}, 0x24}], 0x1}, 0x0)

10:27:48 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000240), &(0x7f0000000280)={'enc=', 'raw', ' hash=', {'sha256-ssse3\x00'}}, 0x0, 0x0)

[  121.516756] BUG: unable to handle page fault for address: ffffed10212c94ee
[  121.517894] #PF: supervisor read access in kernel mode
[  121.518701] #PF: error_code(0x0000) - not-present page
[  121.519512] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 
[  121.520393] Oops: Oops: 0000 [#2] SMP KASAN NOPTI
[  121.521143] CPU: 0 UID: 0 PID: 3967 Comm: syz-executor.1 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  121.522977] Tainted: [D]=DIE, [W]=WARN
[  121.523568] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  121.524828] RIP: 0010:perf_tp_event+0x175/0xe70
[  121.525574] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  121.528360] RSP: 0018:ffff888043c6f780 EFLAGS: 00010016
[  121.529181] RAX: 1ffff110212c94ee RBX: ffff88810964a580 RCX: ffffc90001bff000
[  121.530272] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff88810964a770
[  121.531354] RBP: ffff888043c6f9f0 R08: ffff88806ce31340 R09: ffffe8ffffc15bf8
[  121.532448] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[  121.533535] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000
[  121.534645] FS:  00007efc2b60b700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  121.535877] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  121.536785] CR2: ffffed10212c94ee CR3: 000000001e2ac000 CR4: 0000000000350ef0
[  121.537874] Call Trace:
[  121.538278]  <TASK>
[  121.538643]  ? merge_sched_in+0xcb/0x1810
[  121.539293]  ? __pfx_perf_tp_event+0x10/0x10
[  121.539992]  ? __asan_memcpy+0x3d/0x60
[  121.540612]  ? visit_groups_merge.constprop.0.isra.0+0x6e7/0x1150
[  121.541570]  ? __pfx_visit_groups_merge.constprop.0.isra.0+0x10/0x10
[  121.542557]  ? kvm_sched_clock_read+0x16/0x30
[  121.543270]  ? local_clock_noinstr+0xf/0xc0
[  121.543952]  ? ctx_sched_in+0x134/0x9b0
[  121.544578]  ? tracing_gen_ctx_irq_test+0x167/0x1f0
[  121.545357]  ? perf_swevent_event+0x63/0x3f0
[  121.546060]  ? perf_tp_event+0x807/0xe70
[  121.546707]  ? perf_trace_run_bpf_submit+0xef/0x180
[  121.547492]  perf_trace_run_bpf_submit+0xef/0x180
[  121.548254]  perf_trace_preemptirq_template+0x259/0x430
[  121.549116]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  121.550041]  ? __pfx_remote_function+0x10/0x10
[  121.550780]  ? tracing_gen_ctx_irq_test+0x167/0x1f0
[  121.551560]  ? perf_swevent_event+0x63/0x3f0
[  121.552263]  ? _raw_spin_lock_irqsave+0x53/0x60
[  121.553016]  trace_irq_disable.constprop.0+0xa6/0x100
[  121.553813]  _raw_spin_lock_irqsave+0x53/0x60
[  121.554522]  try_to_wake_up+0xa0/0x11d0
[  121.555161]  ? lock_acquire+0x18c/0x2f0
[  121.555798]  ? __pfx_try_to_wake_up+0x10/0x10
[  121.556527]  ? plist_del+0x122/0x270
[  121.557131]  ? __futex_unqueue+0xda/0x1c0
[  121.557801]  wake_up_q+0xa1/0x130
[  121.558370]  futex_wake+0x47e/0x540
[  121.558969]  ? __pfx_futex_wake+0x10/0x10
[  121.559627]  ? lock_release+0x1c7/0x290
[  121.560262]  ? lock_release+0x1c7/0x290
[  121.560903]  ? fd_install+0x1f0/0x660
[  121.561515]  do_futex+0x26d/0x370
[  121.562077]  ? __pfx_do_futex+0x10/0x10
[  121.562708]  ? perf_trace_run_bpf_submit+0xef/0x180
[  121.563502]  __x64_sys_futex+0x1c9/0x4d0
[  121.564147]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  121.565086]  ? __pfx___x64_sys_futex+0x10/0x10
[  121.565824]  do_syscall_64+0xbf/0x360
[  121.566435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.567248] RIP: 0033:0x7efc2e095b19
[  121.567842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  121.570696] RSP: 002b:00007efc2b60b218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  121.571889] RAX: ffffffffffffffda RBX: 00007efc2e1a8f68 RCX: 00007efc2e095b19
[  121.573019] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efc2e1a8f6c
[  121.574125] RBP: 00007efc2e1a8f60 R08: 000000000000000e R09: 0000000000000000
[  121.575241] R10: 0000000000000003 R11: 0000000000000246 R12: 00007efc2e1a8f6c
[  121.576362] R13: 00007ffd541acd0f R14: 00007efc2b60b300 R15: 0000000000022000
[  121.577479]  </TASK>
[  121.577873] Modules linked in:
[  121.578391] CR2: ffffed10212c94ee
[  121.578946] ---[ end trace 0000000000000000 ]---
[  121.578952] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#3] SMP KASAN NOPTI
[  121.579688] RIP: 0010:perf_tp_event+0x175/0xe70
[  121.581455] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  121.582173] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  121.583337] CPU: 1 UID: 0 PID: 3971 Comm: syz-executor.0 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  121.586148] RSP: 0018:ffff888046bdf800 EFLAGS: 00010212
[  121.587979] Tainted: [D]=DIE, [W]=WARN
[  121.588814] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  121.589419] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  121.590537] RDX: ffff88801adc1b80 RSI: ffffffff818995b7 RDI: 0000000000000191
[  121.591813] RIP: 0010:perf_tp_event+0x175/0xe70
[  121.592947] RBP: ffff888046bdfa70 R08: ffff88806cf31340 R09: ffffe8ffffd15bf8
[  121.593685] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  121.594807] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  121.597639] RSP: 0018:ffff888046f9f780 EFLAGS: 00010012
[  121.598765] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[  121.598787] FS:  00007efc2b60b700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  121.599608] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc900017fd000
[  121.600740] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  121.601972] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191
[  121.603104] CR2: ffffed10212c94ee CR3: 000000001e2ac000 CR4: 0000000000350ef0
[  121.603999] RBP: ffff888046f9f9f0 R08: ffff88806cf31340 R09: ffffe8ffffd15bf8
[  121.605128] note: syz-executor.1[3967] exited with irqs disabled
[  121.606226] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[  121.609397] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000
[  121.610539] FS:  00007f822ac45700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  121.611794] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  121.612741] CR2: 0000001b2d122000 CR3: 000000000e04e000 CR4: 0000000000350ef0
[  121.613855] Call Trace:
[  121.614266]  <TASK>
[  121.614641]  ? lock_release+0x1c7/0x290
[  121.615280]  ? __pfx_perf_tp_event+0x10/0x10
[  121.615994]  ? unwind_get_return_address+0x59/0xa0
[  121.616878]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  121.617772]  ? arch_stack_walk+0x9c/0xf0
[  121.618417]  ? stack_trace_save+0x8e/0xc0
[  121.619101]  ? stack_depot_save_flags+0x2c/0xa20
[  121.619864]  ? lock_acquire+0x18c/0x2f0
[  121.620532]  ? lock_release+0x1c7/0x290
[  121.621167]  ? lock_acquire+0x18c/0x2f0
[  121.621810]  ? lock_acquire+0x18c/0x2f0
[  121.622445]  ? perf_trace_run_bpf_submit+0xef/0x180
[  121.623241]  ? __is_insn_slot_addr+0x140/0x290
[  121.623992]  perf_trace_run_bpf_submit+0xef/0x180
[  121.624788]  perf_trace_preemptirq_template+0x259/0x430
[  121.625656]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  121.626589]  ? stack_trace_save+0x8e/0xc0
[  121.627241]  ? _raw_spin_lock_irqsave+0x53/0x60
[  121.627985]  trace_irq_disable.constprop.0+0xa6/0x100
[  121.628825]  _raw_spin_lock_irqsave+0x53/0x60
[  121.629563]  try_to_wake_up+0xa0/0x11d0
[  121.630199]  ? lock_acquire+0x18c/0x2f0
[  121.630838]  ? __pfx_try_to_wake_up+0x10/0x10
[  121.631576]  ? plist_del+0x122/0x270
[  121.632171]  ? __futex_unqueue+0xda/0x1c0
[  121.632866]  wake_up_q+0xa1/0x130
[  121.633429]  futex_wake+0x47e/0x540
[  121.634041]  ? __pfx_futex_wake+0x10/0x10
[  121.634721]  ? errseq_sample+0x5a/0x70
[  121.635342]  ? file_init_path+0x506/0x770
[  121.636017]  do_futex+0x26d/0x370
[  121.636618]  ? __pfx_do_futex+0x10/0x10
[  121.637252]  ? lock_release+0x1c7/0x290
[  121.637908]  __x64_sys_futex+0x1c9/0x4d0
[  121.638570]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  121.639503]  ? __pfx___x64_sys_futex+0x10/0x10
[  121.640219]  ? xfd_validate_state+0x55/0x180
[  121.640967]  do_syscall_64+0xbf/0x360
[  121.641590]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.642388] RIP: 0033:0x7f822d6cfb19
[  121.642983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  121.645837] RSP: 002b:00007f822ac45218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  121.647016] RAX: ffffffffffffffda RBX: 00007f822d7e2f68 RCX: 00007f822d6cfb19
[  121.648137] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f822d7e2f6c
[  121.649268] RBP: 00007f822d7e2f60 R08: 000000000000000e R09: 0000000000000000
[  121.650370] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f822d7e2f6c
[  121.651485] R13: 00007ffd012a140f R14: 00007f822ac45300 R15: 0000000000022000
[  121.652639]  </TASK>
[  121.653012] Modules linked in:
[  121.653533] ---[ end trace 0000000000000000 ]---
[  121.653535] BUG: unable to handle page fault for address: ffffed10212c94ee
[  121.654258] RIP: 0010:perf_tp_event+0x175/0xe70
[  121.655238] #PF: supervisor read access in kernel mode
[  121.655953] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  121.656705] #PF: error_code(0x0000) - not-present page
[  121.659534] RSP: 0018:ffff888046bdf800 EFLAGS: 00010212
[  121.660284] PGD 7ffd4067 
[  121.660287] 
[  121.660310] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  121.661060] P4D 7ffd4067 
[  121.661512] RDX: ffff88801adc1b80 RSI: ffffffff818995b7 RDI: 0000000000000191
[  121.661767] PUD 7ffd3067 
[  121.662871] RBP: ffff888046bdfa70 R08: ffff88806cf31340 R09: ffffe8ffffd15bf8
[  121.663280] PMD 0 
[  121.664397] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  121.664803] 
[  121.664811] Oops: Oops: 0000 [#4] SMP KASAN NOPTI
[  121.665916] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[  121.666253] CPU: 0 UID: 0 PID: 3967 Comm: syz-executor.1 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  121.667352] FS:  00007f822ac45700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  121.667613] Tainted: [D]=DIE, [W]=WARN
[  121.668361] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  121.669410] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  121.671260] CR2: 0000001b2d122000 CR3: 000000000e04e000 CR4: 0000000000350ef0
[  121.672427] RIP: 0010:perf_tp_event+0x175/0xe70
[  121.673056] note: syz-executor.0[3971] exited with irqs disabled
[  121.673908] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  121.680516] RSP: 0018:ffff88806ce08ac0 EFLAGS: 00010016
[  121.681311] RAX: 1ffff110212c94ee RBX: ffff88810964a580 RCX: 0000000000000002
[  121.682389] RDX: ffff8880455bd280 RSI: ffffffff818995b7 RDI: ffff88810964a770
[  121.683463] RBP: ffff88806ce08d30 R08: ffff88806ce313e8 R09: ffffe8ffffc15bf8
[  121.684544] R10: 0000000000000000 R11: ffff8880161b2498 R12: dffffc0000000000
[  121.685624] R13: 0000000000000014 R14: ffff88806ce313e8 R15: dffffc0000000000
[  121.686702] FS:  00007efc2b60b700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  121.687916] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  121.688801] CR2: ffffed10212c94ee CR3: 000000001e2ac000 CR4: 0000000000350ef0
[  121.689890] Call Trace:
[  121.690289]  <IRQ>
[  121.690635]  ? enqueue_task_fair+0xded/0x1e00
[  121.691340]  ? __pfx_perf_tp_event+0x10/0x10
[  121.692038]  ? trace_pelt_se_tp+0xdf/0x130
[  121.692704]  ? __update_load_avg_se+0x428/0xa40
[  121.693437]  ? __cgroup_account_cputime+0x30/0xc0
[  121.694196]  ? update_load_avg+0x17d/0x1ef0
[  121.694863]  ? update_cfs_group+0x11d/0x260
[  121.695535]  ? kvm_sched_clock_read+0x16/0x30
[  121.696238]  ? enqueue_task_fair+0xded/0x1e00
[  121.696953]  ? check_preempt_wakeup_fair+0x6e/0x950
[  121.697735]  ? wakeup_preempt+0x140/0x2a0
[  121.698396]  ? lock_release+0x1c7/0x290
[  121.699033]  ? lock_release+0x1c7/0x290
[  121.699660]  ? perf_trace_run_bpf_submit+0xef/0x180
[  121.700449]  perf_trace_run_bpf_submit+0xef/0x180
[  121.701222]  perf_trace_preemptirq_template+0x259/0x430
[  121.702076]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  121.703002]  ? lock_acquire+0x18c/0x2f0
[  121.703629]  ? sched_balance_update_blocked_averages+0xff6/0x18f0
[  121.704582]  trace_irq_disable.constprop.0+0xa6/0x100
[  121.705379]  sched_balance_update_blocked_averages+0xff6/0x18f0
[  121.706308]  ? ktime_get+0x16d/0x270
[  121.706900]  ? __pfx_lapic_next_deadline+0x10/0x10
[  121.707671]  ? clockevents_program_event+0x135/0x360
[  121.708489]  ? tick_program_event+0xac/0x140
[  121.709192]  sched_balance_softirq+0xc6/0x150
[  121.709921]  handle_softirqs+0x1b1/0x770
[  121.710586]  __irq_exit_rcu+0xc4/0x100
[  121.711218]  irq_exit_rcu+0x9/0x20
[  121.711783]  sysvec_apic_timer_interrupt+0x70/0x80
[  121.712576]  </IRQ>
[  121.712938]  <TASK>
[  121.713298]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  121.714124] RIP: 0010:make_task_dead+0xa2/0x3b0
[  121.714870] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 <e8> b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de
[  121.717679] RSP: 0018:ffff888043c6ff28 EFLAGS: 00000246
[  121.718514] RAX: 0000000000000001 RBX: ffff8880455bd280 RCX: ffffffff817c2b86
[  121.719629] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234
[  121.720751] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000
[  121.721867] R10: ffffffff8643ac57 R11: 3838666666662052 R12: ffff8880455bd280
[  121.722985] R13: 0000000000000009 R14: ffff888043c6f760 R15: 0000000000000000
[  121.724103]  ? trace_irq_enable.constprop.0+0x26/0x100
[  121.724939]  ? make_task_dead+0x214/0x3b0
[  121.725603]  ? make_task_dead+0x214/0x3b0
[  121.726272]  ? do_syscall_64+0xbf/0x360
[  121.726910]  rewind_stack_and_make_dead+0x16/0x20
[  121.727688] RIP: 0033:0x7efc2e095b19
[  121.728280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  121.731135] RSP: 002b:00007efc2b60b218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  121.732341] RAX: ffffffffffffffda RBX: 00007efc2e1a8f68 RCX: 00007efc2e095b19
[  121.733463] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efc2e1a8f6c
[  121.734583] RBP: 00007efc2e1a8f60 R08: 000000000000000e R09: 0000000000000000
[  121.735711] R10: 0000000000000003 R11: 0000000000000246 R12: 00007efc2e1a8f6c
[  121.736843] R13: 00007ffd541acd0f R14: 00007efc2b60b300 R15: 0000000000022000
[  121.737979]  </TASK>
[  121.738363] Modules linked in:
[  121.738887] CR2: ffffed10212c94ee
[  121.739447] ---[ end trace 0000000000000000 ]---
[  121.739455] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#5] SMP KASAN NOPTI
[  121.740197] RIP: 0010:perf_tp_event+0x175/0xe70
[  121.741988] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  121.742712] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  121.743890] CPU: 1 UID: 0 PID: 3971 Comm: syz-executor.0 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  121.746760] RSP: 0018:ffff888046bdf800 EFLAGS: 00010212
[  121.748629] Tainted: [D]=DIE, [W]=WARN
[  121.749463] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  121.750071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  121.751194] RDX: ffff88801adc1b80 RSI: ffffffff818995b7 RDI: 0000000000000191
[  121.752505] RIP: 0010:perf_tp_event+0x175/0xe70
[  121.753644] RBP: ffff888046bdfa70 R08: ffff88806cf31340 R09: ffffe8ffffd15bf8
[  121.754359] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  121.755494] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  121.758324] RSP: 0018:ffff88806cf08b40 EFLAGS: 00010012
[  121.759458] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[  121.759465] 
[  121.759483] FS:  00007efc2b60b700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  121.760288] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  121.761449] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  121.761739] RDX: ffff8880171a8000 RSI: ffffffff818995b7 RDI: 0000000000000191
[  121.763027] CR2: ffffed10212c94ee CR3: 000000001e2ac000 CR4: 0000000000350ef0
[  121.764129] RBP: ffff88806cf08db0 R08: ffff88806cf313e8 R09: ffffe8ffffd15bf8
[  121.765075] Kernel panic - not syncing: Fatal exception in interrupt
[  122.857404] Shutting down cpus with NMI
[  122.861305] Kernel Offset: disabled
[  122.861898] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---

VM DIAGNOSIS:
10:27:45  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff88806cf3c300 RCX=ffffffff816880fc RDX=ffff88804547d280
RSI=ffffffff816880d6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff888046b0f988
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=1ffff1100d9c6bb1
R12=ffffed100d9e7861 R13=ffff88806cf3c308 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff816880d8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555585121400 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe7c00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2ce23000 CR3=000000000df32000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=7463656a6e695f31313230385f7a7973 XMM03=00000000000000000000000000000000
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=0000000033657373732d363532616873
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888046bdf0f8
R8 =0000000000000000 R9 =ffffed100162a046 R10=0000000000000061 R11=617254206c6c6143
R12=0000000000000061 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0
RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055558e5ae400 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe5e00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555577d44c18 CR3=000000001e2ac000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f822d7b67c000007f822d7b67c8
XMM02=00007f822d7b67e000007f822d7b67c0 XMM03=00007f822d7b67c800007f822d7b67c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000