Warning: Permanently added '[localhost]:58213' (ECDSA) to the list of known hosts.
2025/08/29 08:21:54 fuzzer started
2025/08/29 08:21:54 dialing manager at localhost:43077
syzkaller login: [ 58.969297] cgroup: Unknown subsys name 'net'
[ 59.048437] cgroup: Unknown subsys name 'cpuset'
[ 59.077509] cgroup: Unknown subsys name 'rlimit'
2025/08/29 08:22:05 syscalls: 2214
2025/08/29 08:22:05 code coverage: enabled
2025/08/29 08:22:05 comparison tracing: enabled
2025/08/29 08:22:05 extra coverage: enabled
2025/08/29 08:22:05 setuid sandbox: enabled
2025/08/29 08:22:05 namespace sandbox: enabled
2025/08/29 08:22:05 Android sandbox: enabled
2025/08/29 08:22:05 fault injection: enabled
2025/08/29 08:22:05 leak checking: enabled
2025/08/29 08:22:05 net packet injection: enabled
2025/08/29 08:22:05 net device setup: enabled
2025/08/29 08:22:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/29 08:22:05 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/29 08:22:05 USB emulation: enabled
2025/08/29 08:22:05 hci packet injection: enabled
2025/08/29 08:22:05 wifi device emulation: enabled
2025/08/29 08:22:05 802.15.4 emulation: enabled
2025/08/29 08:22:05 fetching corpus: 0, signal 0/2000 (executing program)
2025/08/29 08:22:05 fetching corpus: 50, signal 23397/26337 (executing program)
2025/08/29 08:22:05 fetching corpus: 100, signal 33515/37230 (executing program)
2025/08/29 08:22:05 fetching corpus: 150, signal 38762/43244 (executing program)
2025/08/29 08:22:05 fetching corpus: 200, signal 44832/49781 (executing program)
2025/08/29 08:22:05 fetching corpus: 250, signal 53202/57946 (executing program)
2025/08/29 08:22:06 fetching corpus: 300, signal 56763/61760 (executing program)
2025/08/29 08:22:06 fetching corpus: 350, signal 62111/66866 (executing program)
2025/08/29 08:22:06 fetching corpus: 400, signal 66031/70525 (executing program)
2025/08/29 08:22:06 fetching corpus: 450, signal 69747/73941 (executing program)
2025/08/29 08:22:06 fetching corpus: 500, signal 72849/76731 (executing program)
2025/08/29 08:22:06 fetching corpus: 550, signal 75816/79201 (executing program)
2025/08/29 08:22:06 fetching corpus: 600, signal 78678/81549 (executing program)
2025/08/29 08:22:07 fetching corpus: 650, signal 81550/84013 (executing program)
2025/08/29 08:22:07 fetching corpus: 700, signal 83709/85609 (executing program)
2025/08/29 08:22:07 fetching corpus: 750, signal 85200/86667 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/86966 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/87053 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/87133 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/87226 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/87316 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/87395 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/87495 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/87566 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/87670 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/87751 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/87836 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/87926 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/88018 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/88092 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/88192 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/88280 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/88369 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/88454 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/88532 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/88625 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/88723 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/88815 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/88906 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/88996 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/89090 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/89169 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/89259 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/89285 (executing program)
2025/08/29 08:22:07 fetching corpus: 760, signal 85471/89285 (executing program)
2025/08/29 08:22:10 starting 8 fuzzer processes
08:22:10 executing program 0:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000180)={"0367f93ed59ada90d094df2f", 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0})
08:22:10 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000240)=0xfffffeff, 0x4)
08:22:10 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000001680)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe)
08:22:10 executing program 1:
move_pages(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
08:22:10 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)=0xc)
08:22:10 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x1c, 0x1, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x11, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0)
08:22:10 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0xc46f, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
08:22:10 executing program 4:
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), 0xffffffffffffffff)
[ 74.110609] audit: type=1400 audit(1756455730.261:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[ 75.364222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 75.367219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 75.369059] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 75.376160] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 75.379424] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 75.434339] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 75.450876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 75.457152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 75.459015] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 75.462696] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 75.467709] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 75.469052] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 75.470722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 75.479537] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 75.485046] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 75.491784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 75.493275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 75.495458] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 75.496699] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 75.503273] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 75.504729] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 75.506568] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 75.515857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 75.520709] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 75.531127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 75.532437] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 75.539547] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 75.547214] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 75.550159] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 75.550262] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 75.556329] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 75.558310] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 75.567426] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 75.567981] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 75.579209] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 75.594384] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 75.600107] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 75.606964] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 75.609989] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 75.622192] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 77.397969] Bluetooth: hci0: command tx timeout
[ 77.588010] Bluetooth: hci1: command tx timeout
[ 77.651962] Bluetooth: hci2: command tx timeout
[ 77.652501] Bluetooth: hci3: command tx timeout
[ 77.652985] Bluetooth: hci7: command tx timeout
[ 77.653407] Bluetooth: hci4: command tx timeout
[ 77.653869] Bluetooth: hci5: command tx timeout
[ 77.715973] Bluetooth: hci6: command tx timeout
[ 79.444372] Bluetooth: hci0: command tx timeout
[ 79.635886] Bluetooth: hci1: command tx timeout
[ 79.701195] Bluetooth: hci4: command tx timeout
[ 79.701684] Bluetooth: hci2: command tx timeout
[ 79.702106] Bluetooth: hci5: command tx timeout
[ 79.702496] Bluetooth: hci7: command tx timeout
[ 79.702878] Bluetooth: hci3: command tx timeout
[ 79.764937] Bluetooth: hci6: command tx timeout
[ 81.492895] Bluetooth: hci0: command tx timeout
[ 81.683898] Bluetooth: hci1: command tx timeout
[ 81.747974] Bluetooth: hci3: command tx timeout
[ 81.748009] Bluetooth: hci5: command tx timeout
[ 81.748441] Bluetooth: hci2: command tx timeout
[ 81.749324] Bluetooth: hci4: command tx timeout
[ 81.749393] Bluetooth: hci7: command tx timeout
[ 81.812942] Bluetooth: hci6: command tx timeout
[ 83.539951] Bluetooth: hci0: command tx timeout
[ 83.731915] Bluetooth: hci1: command tx timeout
[ 83.796001] Bluetooth: hci2: command tx timeout
[ 83.796458] Bluetooth: hci5: command tx timeout
[ 83.797739] Bluetooth: hci4: command tx timeout
[ 83.798215] Bluetooth: hci7: command tx timeout
[ 83.798659] Bluetooth: hci3: command tx timeout
[ 83.860803] Bluetooth: hci6: command tx timeout
[ 111.043530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.044281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 111.203892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.204475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:22:47 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000000))
08:22:47 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000000))
08:22:48 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000000))
08:22:48 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000000))
08:22:48 executing program 4:
syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x2c, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}})
08:22:48 executing program 4:
syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x2c, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}})
[ 112.348271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.348908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:22:48 executing program 4:
syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x2c, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}})
[ 112.485369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.486340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:22:48 executing program 4:
syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x2c, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}})
[ 112.722459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.723190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.811468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.812227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.861402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.862013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.909124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.909674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.929507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.930288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.052463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.053419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.156674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.157534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.167897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.168504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.254143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.254737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.322389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.323023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.381559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.382241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.435681] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 113.469979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.470571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:22:49 executing program 0:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000180)={"0367f93ed59ada90d094df2f", 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0})
08:22:49 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9208)
08:22:49 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000001680)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe)
08:22:49 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x1c, 0x1, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x11, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0)
08:22:49 executing program 1:
move_pages(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
08:22:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0xc46f, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
08:22:49 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)=0xc)
08:22:49 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000240)=0xfffffeff, 0x4)
08:22:49 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x1c, 0x1, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x11, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0)
08:22:49 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000240)=0xfffffeff, 0x4)
08:22:49 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000001680)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe)
08:22:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0xc46f, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
08:22:49 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)=0xc)
08:22:49 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9208)
08:22:49 executing program 1:
move_pages(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
08:22:49 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)=0xc)
08:22:49 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000240)=0xfffffeff, 0x4)
08:22:49 executing program 0:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000180)={"0367f93ed59ada90d094df2f", 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0})
08:22:49 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000001680)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe)
08:22:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0xc46f, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
08:22:49 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9208)
08:22:49 executing program 1:
move_pages(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
08:22:49 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x1c, 0x1, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x11, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0)
08:22:50 executing program 0:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000180)={"0367f93ed59ada90d094df2f", 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0})
08:22:50 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9208)
08:22:50 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000180)={"0367f93ed59ada90d094df2f", 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0})
08:22:50 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)=0xc)
08:22:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0xc46f, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
08:22:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0xc46f, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
08:22:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x20, 0x0, 0x4, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0)
08:22:50 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x14)
08:22:50 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$EVIOCSREP(r0, 0x80084523, 0x0)
08:22:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0xc46f, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
08:22:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0xc46f, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
08:22:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x20, 0x0, 0x4, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0)
08:22:50 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x14)
08:22:50 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)=0xc)
08:22:50 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x20, 0x0, 0x4, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0)
08:22:50 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000180)={"0367f93ed59ada90d094df2f", 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0})
08:22:50 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$EVIOCSREP(r0, 0x80084523, 0x0)
08:22:50 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x14)
08:22:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0xc46f, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
08:22:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x20, 0x0, 0x4, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0)
08:22:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0xc46f, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
08:22:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x20, 0x0, 0x4, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0)
08:22:50 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x20, 0x0, 0x4, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0)
08:22:50 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)=0xc)
08:22:50 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000180)={"0367f93ed59ada90d094df2f", 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0})
08:22:50 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$EVIOCSREP(r0, 0x80084523, 0x0)
08:22:50 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x14)
08:22:50 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)="ae98d7aa", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr_2292={{0x18}}], 0x18}}], 0x2, 0x0)
08:22:50 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)="ae98d7aa", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr_2292={{0x18}}], 0x18}}], 0x2, 0x0)
08:22:50 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x20, 0x0, 0x4, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0)
08:22:50 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$EVIOCSREP(r0, 0x80084523, 0x0)
08:22:50 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x23, &(0x7f0000000080)={@private0}, 0x20)
08:22:50 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)="ae98d7aa", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr_2292={{0x18}}], 0x18}}], 0x2, 0x0)
08:22:50 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r1)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0)
08:22:50 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)="ae98d7aa", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr_2292={{0x18}}], 0x18}}], 0x2, 0x0)
08:22:50 executing program 6:
futex(&(0x7f0000000000), 0x8b, 0x0, &(0x7f0000000040), 0x0, 0x0)
08:22:50 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x5, 0x0)
semctl$GETZCNT(r0, 0x0, 0xf, 0x0)
08:22:50 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0)
[ 114.414604] audit: type=1400 audit(1756455770.567:8): avc: denied { open } for pid=4025 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 114.417014] audit: type=1400 audit(1756455770.567:9): avc: denied { kernel } for pid=4025 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
08:22:50 executing program 6:
futex(&(0x7f0000000000), 0x8b, 0x0, &(0x7f0000000040), 0x0, 0x0)
08:22:50 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0)
[ 114.474067] kmemleak: Found object by alias at 0x607f1a63917c
[ 114.474086] CPU: 1 UID: 0 PID: 4034 Comm: syz-executor.4 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 114.474104] Tainted: [W]=WARN
[ 114.474108] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 114.474115] Call Trace:
[ 114.474119]
[ 114.474124] dump_stack_lvl+0xca/0x120
[ 114.474152] __lookup_object+0x94/0xb0
[ 114.474170] delete_object_full+0x27/0x70
[ 114.474186] free_percpu+0x30/0x1160
[ 114.474202] ? arch_uprobe_clear_state+0x16/0x140
[ 114.474222] futex_hash_free+0x38/0xc0
[ 114.474236] mmput+0x2d3/0x390
[ 114.474255] do_exit+0x79d/0x2970
[ 114.474269] ? signal_wake_up_state+0x85/0x120
[ 114.474286] ? zap_other_threads+0x2b9/0x3a0
[ 114.474302] ? __pfx_do_exit+0x10/0x10
[ 114.474315] ? do_group_exit+0x1c3/0x2a0
[ 114.474328] ? lock_release+0xc8/0x290
[ 114.474346] do_group_exit+0xd3/0x2a0
[ 114.474360] __x64_sys_exit_group+0x3e/0x50
[ 114.474374] x64_sys_call+0x18c5/0x18d0
[ 114.474389] do_syscall_64+0xbf/0x360
[ 114.474401] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.474413] RIP: 0033:0x7fa36ad47b19
[ 114.474421] Code: Unable to access opcode bytes at 0x7fa36ad47aef.
[ 114.474426] RSP: 002b:00007ffd87102cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 114.474437] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fa36ad47b19
[ 114.474445] RDX: 00007fa36acfa72b RSI: ffffffffffffffbc RDI: 0000000000000000
[ 114.474453] RBP: 0000000000000000 R08: 0000001b2d121cf0 R09: 0000000000000000
[ 114.474460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 114.474466] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd87102de0
[ 114.474482]
[ 114.474486] kmemleak: Object (percpu) 0x607f1a639178 (size 8):
[ 114.474492] kmemleak: comm "syz-executor.2", pid 4037, jiffies 4294781388
[ 114.474499] kmemleak: min_count = 1
[ 114.474503] kmemleak: count = 0
[ 114.474506] kmemleak: flags = 0x21
[ 114.474510] kmemleak: checksum = 0
[ 114.474514] kmemleak: backtrace:
[ 114.474517] pcpu_alloc_noprof+0x87a/0x1170
[ 114.474532] perf_trace_event_init+0x366/0xa10
[ 114.474546] perf_trace_init+0x1a4/0x2f0
[ 114.474557] perf_tp_event_init+0xa6/0x120
[ 114.474573] perf_try_init_event+0x140/0x9f0
[ 114.474590] perf_event_alloc.part.0+0x118e/0x45f0
[ 114.474606] __do_sys_perf_event_open+0x719/0x2c20
[ 114.474618] do_syscall_64+0xbf/0x360
[ 114.474627] entry_SYSCALL_64_after_hwframe+0x77/0x7f
08:22:50 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)="ae98d7aa", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr_2292={{0x18}}], 0x18}}], 0x2, 0x0)
08:22:50 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x5, 0x0)
semctl$GETZCNT(r0, 0x0, 0xf, 0x0)
08:22:50 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r1)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0)
08:22:50 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)="ae98d7aa", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr_2292={{0x18}}], 0x18}}], 0x2, 0x0)
08:22:50 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x23, &(0x7f0000000080)={@private0}, 0x20)
08:22:50 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r1)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0)
08:22:50 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)="ae98d7aa", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr_2292={{0x18}}], 0x18}}], 0x2, 0x0)
08:22:50 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0)
[ 114.626237] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI
[ 114.627137] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[ 114.627777] CPU: 0 UID: 0 PID: 4057 Comm: syz-executor.4 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 114.629096] Tainted: [W]=WARN
[ 114.629834] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 114.631947] RIP: 0010:perf_tp_event+0x175/0xe70
[ 114.633108] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 114.634749] RSP: 0018:ffff88800982f800 EFLAGS: 00010212
[ 114.635147] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90003aa7000
[ 114.635694] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190
[ 114.636248] RBP: ffff88800982fa70 R08: ffff88806ce31340 R09: ffffe8ffffc16178
[ 114.636798] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 114.637344] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[ 114.637891] FS: 00007fa3682bd700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 114.638503] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 114.638954] CR2: 00007fa3682bc108 CR3: 000000000e5c0000 CR4: 0000000000350ef0
[ 114.639495] Call Trace:
[ 114.639696]
[ 114.639881] ? stack_trace_save+0x8e/0xc0
[ 114.640211] ? __pfx_perf_tp_event+0x10/0x10
[ 114.640569] ? kasan_save_stack+0x34/0x50
[ 114.640893] ? kasan_save_stack+0x24/0x50
[ 114.641215] ? kasan_save_track+0x14/0x30
[ 114.641537] ? __kasan_save_free_info+0x3a/0x60
[ 114.641905] ? __kasan_slab_free+0x3f/0x50
[ 114.642238] ? kmem_cache_free+0x2a1/0x540
[ 114.642565] ? kfree_skbmem+0x18a/0x1f0
[ 114.642875] ? consume_skb+0xdd/0x160
[ 114.643172] ? netlink_recvmsg+0x532/0x9e0
[ 114.643505] ? sock_recvmsg+0x1e1/0x240
[ 114.643815] ? __sys_recvfrom+0x1f9/0x310
[ 114.644139] ? __x64_sys_recvfrom+0xe1/0x1c0
[ 114.644485] ? do_syscall_64+0xbf/0x360
[ 114.644797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.645209] ? perf_trace_lock+0xb5/0x5d0
[ 114.645538] ? __pfx_perf_trace_lock+0x10/0x10
[ 114.645905] ? lock_acquire+0x15e/0x2f0
[ 114.646219] ? __virt_addr_valid+0x1c6/0x5d0
[ 114.646569] ? find_held_lock+0x2b/0x80
[ 114.646894] ? perf_trace_run_bpf_submit+0xef/0x180
[ 114.647280] perf_trace_run_bpf_submit+0xef/0x180
[ 114.647661] perf_trace_lock+0x337/0x5d0
[ 114.647981] ? __pfx_perf_trace_lock+0x10/0x10
[ 114.648341] ? lock_acquire+0x15e/0x2f0
[ 114.648651] ? futex_ref_get+0x48/0x300
[ 114.648961] ? futex_ref_get+0x114/0x300
[ 114.649283] ? futex_hash+0x15c/0x390
[ 114.649580] lock_release+0x1ab/0x290
[ 114.649887] ? futex_hash+0x15c/0x390
[ 114.650185] futex_ref_get+0x119/0x300
[ 114.650486] ? futex_hash+0x15c/0x390
[ 114.650781] futex_hash+0x70/0x390
[ 114.651066] futex_wake+0x143/0x540
[ 114.651358] ? __pfx_futex_wake+0x10/0x10
[ 114.651684] ? __sys_recvfrom+0x266/0x310
[ 114.652012] ? __pfx___sys_recvfrom+0x10/0x10
[ 114.652369] do_futex+0x26d/0x370
[ 114.652644] ? __pfx_do_futex+0x10/0x10
[ 114.652957] ? __pfx_perf_trace_lock+0x10/0x10
[ 114.653313] ? find_held_lock+0x2b/0x80
[ 114.653631] __x64_sys_futex+0x1c9/0x4d0
[ 114.653959] ? exc_page_fault+0xb0/0x180
[ 114.654283] ? __pfx___x64_sys_futex+0x10/0x10
[ 114.654648] do_syscall_64+0xbf/0x360
[ 114.654945] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.655341] RIP: 0033:0x7fa36ad47b19
[ 114.655630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 114.657012] RSP: 002b:00007fa3682bd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 114.657600] RAX: ffffffffffffffda RBX: 00007fa36ae5af68 RCX: 00007fa36ad47b19
[ 114.658147] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa36ae5af6c
[ 114.658689] RBP: 00007fa36ae5af60 R08: 000000000000000e R09: 0000000000000000
[ 114.659228] R10: 000000000000001a R11: 0000000000000246 R12: 00007fa36ae5af6c
[ 114.659768] R13: 00007ffd87102acf R14: 00007fa3682bd300 R15: 0000000000022000
[ 114.660319]
[ 114.660501] Modules linked in:
[ 114.660927] ---[ end trace 0000000000000000 ]---
[ 114.661294] RIP: 0010:perf_tp_event+0x175/0xe70
[ 114.661658] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 114.663081] RSP: 0018:ffff88800982f800 EFLAGS: 00010212
[ 114.663491] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90003aa7000
[ 114.664061] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190
[ 114.664608] RBP: ffff88800982fa70 R08: ffff88806ce31340 R09: ffffe8ffffc16178
[ 114.665183] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 114.665729] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[ 114.666295] FS: 00007fa3682bd700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 114.666929] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 114.667376] CR2: 00007fa3682bc108 CR3: 000000000e5c0000 CR4: 0000000000350ef0
[ 114.667939] note: syz-executor.4[4057] exited with preempt_count 1
[ 114.668414] BUG: sleeping function called from invalid context at ./include/linux/percpu-rwsem.h:51
[ 114.669113] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 4057, name: syz-executor.4
[ 114.669752] preempt_count: 0, expected: 0
[ 114.670090] RCU nest depth: 2, expected: 0
[ 114.670410] INFO: lockdep is turned off.
[ 114.670716] CPU: 0 UID: 0 PID: 4057 Comm: syz-executor.4 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 114.670735] Tainted: [D]=DIE, [W]=WARN
[ 114.670739] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 114.670745] Call Trace:
[ 114.670748]
[ 114.670753] dump_stack_lvl+0xfa/0x120
[ 114.670776] __might_resched+0x2f3/0x510
[ 114.670790] exit_signals+0x25/0x940
[ 114.670808] do_exit+0x2db/0x2970
[ 114.670826] ? _printk+0xbe/0xf0
[ 114.670838] ? __pfx__printk+0x10/0x10
[ 114.670851] ? __pfx_do_exit+0x10/0x10
[ 114.670867] make_task_dead+0x174/0x3b0
[ 114.670880] ? do_syscall_64+0xbf/0x360
[ 114.670891] rewind_stack_and_make_dead+0x16/0x20
[ 114.670907] RIP: 0033:0x7fa36ad47b19
[ 114.670916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 114.670927] RSP: 002b:00007fa3682bd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 114.670938] RAX: ffffffffffffffda RBX: 00007fa36ae5af68 RCX: 00007fa36ad47b19
08:22:50 executing program 6:
futex(&(0x7f0000000000), 0x8b, 0x0, &(0x7f0000000040), 0x0, 0x0)
08:22:50 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r1)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0)
[ 114.670946] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa36ae5af6c
[ 114.670954] RBP: 00007fa36ae5af60 R08: 000000000000000e R09: 0000000000000000
[ 114.670962] R10: 000000000000001a R11: 0000000000000246 R12: 00007fa36ae5af6c
[ 114.670970] R13: 00007ffd87102acf R14: 00007fa3682bd300 R15: 0000000000022000
[ 114.670981]
08:22:51 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x5, 0x0)
semctl$GETZCNT(r0, 0x0, 0xf, 0x0)
08:22:51 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x5, 0x0)
semctl$GETZCNT(r0, 0x0, 0xf, 0x0)
08:22:51 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "a9932d802e8bc4c1cf325373e55e5aee331672119bb07e4dda5dc2ee82072d2f14648a0d8bb496066c082a3a134bb3ee82d68a9bcd1fed73dc4e2e3b2a8f072a"}, 0x48, 0xfffffffffffffffb)
08:22:51 executing program 6:
futex(&(0x7f0000000000), 0x8b, 0x0, &(0x7f0000000040), 0x0, 0x0)
08:22:51 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r1)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0)
08:22:51 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0)
08:22:51 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r1)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0)
08:22:51 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x23, &(0x7f0000000080)={@private0}, 0x20)
[ 115.489147] Oops: general protection fault, probably for non-canonical address 0xeefffc0000000032: 0000 [#2] SMP KASAN NOPTI
[ 115.490729] KASAN: maybe wild-memory-access in range [0x7800000000000190-0x7800000000000197]
[ 115.491894] CPU: 0 UID: 0 PID: 4076 Comm: syz-executor.3 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 115.493522] Tainted: [D]=DIE, [W]=WARN
[ 115.494064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 115.495200] RIP: 0010:perf_tp_event+0x175/0xe70
[ 115.495866] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 115.498363] RSP: 0018:ffff8880181cf800 EFLAGS: 00010212
[ 115.499102] RAX: 0f00000000000032 RBX: 77ffffffffffffa0 RCX: ffffc90001695000
[ 115.500087] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 7800000000000190
[ 115.501073] RBP: ffff8880181cfa70 R08: ffff88806ce31340 R09: ffffe8ffffc16178
[ 115.502072] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[ 115.503062] R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000
[ 115.504053] FS: 00007f054b188700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 115.505157] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 115.505968] CR2: 00007f99e41a3018 CR3: 000000000eae9000 CR4: 0000000000350ef0
[ 115.506951] Call Trace:
[ 115.507317]
[ 115.507645] ? perf_swevent_event+0x63/0x3f0
[ 115.508278] ? __pfx_perf_tp_event+0x10/0x10
[ 115.508908] ? tracing_gen_ctx_irq_test+0x167/0x1f0
[ 115.509608] ? tracing_gen_ctx_irq_test+0x167/0x1f0
[ 115.510312] ? perf_swevent_event+0x63/0x3f0
[ 115.510941] ? perf_tp_event+0x807/0xe70
[ 115.511523] ? __pfx_perf_tp_event+0x10/0x10
[ 115.512151] ? perf_ctx_unlock+0x73/0x160
[ 115.512734] ? __perf_install_in_context+0x503/0xb90
[ 115.513446] ? do_raw_spin_unlock+0x53/0x220
[ 115.514089] ? perf_trace_run_bpf_submit+0xef/0x180
[ 115.514789] perf_trace_run_bpf_submit+0xef/0x180
[ 115.515476] perf_trace_lock+0x337/0x5d0
[ 115.516063] ? __pfx_perf_trace_lock+0x10/0x10
[ 115.516712] ? get_futex_key+0x592/0x14a0
[ 115.517293] ? futex_ref_get+0x114/0x300
[ 115.517865] ? futex_hash+0x15c/0x390
[ 115.518403] lock_release+0x1ab/0x290
[ 115.518946] ? futex_hash+0x15c/0x390
[ 115.519485] futex_ref_get+0x119/0x300
[ 115.520031] ? futex_hash+0x15c/0x390
[ 115.520566] futex_hash+0x70/0x390
[ 115.521079] futex_wake+0x143/0x540
[ 115.521604] ? __pfx_perf_trace_lock+0x10/0x10
[ 115.522254] ? __pfx___mutex_lock+0x10/0x10
[ 115.522868] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 115.523604] ? __pfx_futex_wake+0x10/0x10
[ 115.524200] ? lock_release+0x1c7/0x290
[ 115.524765] ? fd_install+0x1f0/0x660
[ 115.525306] do_futex+0x26d/0x370
[ 115.525804] ? __pfx_do_futex+0x10/0x10
[ 115.526377] ? __pfx___do_sys_perf_event_open+0x10/0x10
[ 115.527117] ? count_memcg_events+0x32b/0x420
[ 115.527763] __x64_sys_futex+0x1c9/0x4d0
[ 115.528339] ? __pfx___x64_sys_futex+0x10/0x10
[ 115.528982] ? xfd_validate_state+0x55/0x180
[ 115.529622] do_syscall_64+0xbf/0x360
[ 115.530167] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 115.530882] RIP: 0033:0x7f054dc12b19
[ 115.531402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 115.533928] RSP: 002b:00007f054b188218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 115.535018] RAX: ffffffffffffffda RBX: 00007f054dd25f68 RCX: 00007f054dc12b19
[ 115.536031] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f054dd25f6c
[ 115.537050] RBP: 00007f054dd25f60 R08: 000000000000000e R09: 0000000000000000
[ 115.538083] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f054dd25f6c
[ 115.539094] R13: 00007fff902448df R14: 00007f054b188300 R15: 0000000000022000
[ 115.540135]
[ 115.540490] Modules linked in:
[ 115.540998] Oops: general protection fault, probably for non-canonical address 0xeefffc0000000032: 0000 [#3] SMP KASAN NOPTI
[ 115.542558] KASAN: maybe wild-memory-access in range [0x7800000000000190-0x7800000000000197]
[ 115.543731] CPU: 0 UID: 0 PID: 4076 Comm: syz-executor.3 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 115.545391] Tainted: [D]=DIE, [W]=WARN
[ 115.545938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 115.547093] RIP: 0010:perf_tp_event+0x175/0xe70
[ 115.547763] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 115.550315] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012
[ 115.551064] RAX: 0f00000000000032 RBX: 77ffffffffffffa0 RCX: ffffffff81898973
[ 115.552064] RDX: ffff88804358d280 RSI: ffffffff818995b7 RDI: 7800000000000190
[ 115.553081] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc16178
[ 115.554090] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000
[ 115.555107] R13: 0000000000000000 R14: ffff88806ce31490 R15: dffffc0000000000
[ 115.556104] FS: 00007f054b188700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 115.557236] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 115.558059] CR2: 00007f99e41a3018 CR3: 000000000eae9000 CR4: 0000000000350ef0
[ 115.559070] Call Trace:
[ 115.559445]
[ 115.559779] ? __pfx_perf_tp_event+0x10/0x10
[ 115.560435] ? kasan_save_stack+0x34/0x50
[ 115.561035] ? kasan_save_stack+0x24/0x50
[ 115.561626] ? kasan_save_track+0x14/0x30
[ 115.562230] ? __kasan_save_free_info+0x3a/0x60
[ 115.562891] ? __kasan_slab_free+0x3f/0x50
[ 115.563494] ? kmem_cache_free+0x2a1/0x540
[ 115.564105] ? rcu_core+0x7c8/0x1800
[ 115.564653] ? handle_softirqs+0x1b1/0x770
[ 115.565260] ? __irq_exit_rcu+0xc4/0x100
[ 115.565834] ? irq_exit_rcu+0x9/0x20
[ 115.566384] ? sysvec_apic_timer_interrupt+0x70/0x80
[ 115.567116] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 115.567882] ? lock_release+0x179/0x290
[ 115.568449] ? unwind_next_frame+0x3b7/0x2540
[ 115.569113] ? arch_stack_walk+0x86/0xf0
[ 115.569698] ? stack_trace_save+0x8e/0xc0
[ 115.570286] ? set_track_prepare+0x35/0x70
[ 115.570876] ? __alloc_object+0xf0/0x2c0
[ 115.571451] ? __create_object+0x1d/0x80
[ 115.572031] ? kmem_cache_alloc_noprof+0x414/0x690
[ 115.572739] ? ptlock_alloc+0x21/0x70
[ 115.573280] ? pte_alloc_one+0x86/0x360
[ 115.573838] ? __pte_alloc+0x6c/0x360
[ 115.574384] ? __handle_mm_fault+0x2606/0x3260
[ 115.575033] ? handle_mm_fault+0x2c3/0x9b0
[ 115.575637] ? do_user_addr_fault+0x4fa/0xeb0
[ 115.576271] ? exc_page_fault+0xb0/0x180
[ 115.576845] ? asm_exc_page_fault+0x26/0x30
[ 115.577454] ? perf_trace_run_bpf_submit+0xef/0x180
[ 115.578158] perf_trace_run_bpf_submit+0xef/0x180
[ 115.578850] perf_trace_lock+0x337/0x5d0
[ 115.579436] ? do_raw_spin_lock+0x123/0x260
[ 115.580070] ? __pfx_perf_trace_lock+0x10/0x10
[ 115.580732] ? clockevents_program_event+0x14f/0x360
[ 115.581462] ? hrtimer_interrupt+0x114/0x830
[ 115.582108] lock_release+0x1ab/0x290
[ 115.582660] ktime_get_update_offsets_now+0xab/0x3c0
[ 115.583401] ? hrtimer_interrupt+0x114/0x830
[ 115.584039] ? __pfx_lapic_next_deadline+0x10/0x10
[ 115.584757] hrtimer_interrupt+0x114/0x830
[ 115.585360] ? __pfx_do_sync_core+0x10/0x10
[ 115.585974] ? trace_csd_function_exit+0x134/0x190
[ 115.586669] ? __flush_smp_call_function_queue+0x28c/0x740
[ 115.587454] __sysvec_apic_timer_interrupt+0xbb/0x330
[ 115.588176] sysvec_apic_timer_interrupt+0x6b/0x80
[ 115.588858]
[ 115.589182]
[ 115.589505] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 115.590232] RIP: 0010:oops_exit+0x0/0x50
[ 115.590801] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27
[ 115.593325] RSP: 0018:ffff8880181cf690 EFLAGS: 00000202
[ 115.594092] RAX: 000000000002d471 RBX: 0000000000000212 RCX: ffffc90001695000
[ 115.595091] RDX: 0000000000040000 RSI: ffffffff812a3dca RDI: 0000000000000007
[ 115.596088] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90
[ 115.597091] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880181cf758
[ 115.598099] R13: 0000000000000000 R14: eefffc0000000032 R15: 0000000000000000
[ 115.599120] ? oops_end+0x4a/0xe0
[ 115.599647] oops_end+0x65/0xe0
[ 115.600144] exc_general_protection+0x1a2/0x330
[ 115.600809] asm_exc_general_protection+0x26/0x30
[ 115.601489] RIP: 0010:perf_tp_event+0x175/0xe70
[ 115.602148] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 115.604675] RSP: 0018:ffff8880181cf800 EFLAGS: 00010212
[ 115.605408] RAX: 0f00000000000032 RBX: 77ffffffffffffa0 RCX: ffffc90001695000
[ 115.606423] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 7800000000000190
[ 115.607415] RBP: ffff8880181cfa70 R08: ffff88806ce31340 R09: ffffe8ffffc16178
[ 115.608415] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[ 115.609386] R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000
[ 115.610393] ? perf_tp_event+0x167/0xe70
[ 115.610983] ? perf_swevent_event+0x63/0x3f0
[ 115.611624] ? __pfx_perf_tp_event+0x10/0x10
[ 115.612265] ? tracing_gen_ctx_irq_test+0x167/0x1f0
[ 115.612980] ? tracing_gen_ctx_irq_test+0x167/0x1f0
[ 115.613684] ? perf_swevent_event+0x63/0x3f0
[ 115.614327] ? perf_tp_event+0x807/0xe70
[ 115.614920] ? __pfx_perf_tp_event+0x10/0x10
[ 115.615552] ? perf_ctx_unlock+0x73/0x160
[ 115.616144] ? __perf_install_in_context+0x503/0xb90
[ 115.616872] ? do_raw_spin_unlock+0x53/0x220
[ 115.617509] ? perf_trace_run_bpf_submit+0xef/0x180
[ 115.618226] perf_trace_run_bpf_submit+0xef/0x180
[ 115.618920] perf_trace_lock+0x337/0x5d0
[ 115.619505] ? __pfx_perf_trace_lock+0x10/0x10
[ 115.620164] ? get_futex_key+0x592/0x14a0
[ 115.620752] ? futex_ref_get+0x114/0x300
[ 115.621333] ? futex_hash+0x15c/0x390
[ 115.621887] lock_release+0x1ab/0x290
[ 115.622436] ? futex_hash+0x15c/0x390
[ 115.622978] futex_ref_get+0x119/0x300
[ 115.623532] ? futex_hash+0x15c/0x390
[ 115.624073] futex_hash+0x70/0x390
[ 115.624587] futex_wake+0x143/0x540
[ 115.625115] ? __pfx_perf_trace_lock+0x10/0x10
[ 115.625766] ? __pfx___mutex_lock+0x10/0x10
[ 115.626396] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 115.627134] ? __pfx_futex_wake+0x10/0x10
[ 115.627719] ? lock_release+0x1c7/0x290
[ 115.628278] ? fd_install+0x1f0/0x660
[ 115.628811] do_futex+0x26d/0x370
[ 115.629309] ? __pfx_do_futex+0x10/0x10
[ 115.629877] ? __pfx___do_sys_perf_event_open+0x10/0x10
[ 115.630612] ? count_memcg_events+0x32b/0x420
[ 115.631244] __x64_sys_futex+0x1c9/0x4d0
[ 115.631816] ? __pfx___x64_sys_futex+0x10/0x10
[ 115.632453] ? xfd_validate_state+0x55/0x180
[ 115.633082] do_syscall_64+0xbf/0x360
[ 115.633616] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 115.634334] RIP: 0033:0x7f054dc12b19
[ 115.634853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 115.637307] RSP: 002b:00007f054b188218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 115.638357] RAX: ffffffffffffffda RBX: 00007f054dd25f68 RCX: 00007f054dc12b19
[ 115.639356] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f054dd25f6c
[ 115.640341] RBP: 00007f054dd25f60 R08: 000000000000000e R09: 0000000000000000
[ 115.641348] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f054dd25f6c
[ 115.642322] R13: 00007fff902448df R14: 00007f054b188300 R15: 0000000000022000
[ 115.643310]
[ 115.643642] Modules linked in:
[ 115.644101] ---[ end trace 0000000000000000 ]---
[ 115.644752] RIP: 0010:perf_tp_event+0x175/0xe70
[ 115.645405] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 115.647887] RSP: 0018:ffff88800982f800 EFLAGS: 00010212
[ 115.648616] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90003aa7000
[ 115.649585] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190
[ 115.650566] RBP: ffff88800982fa70 R08: ffff88806ce31340 R09: ffffe8ffffc16178
[ 115.651536] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 115.652504] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[ 115.653491] FS: 00007f054b188700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 115.654622] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 115.655465] CR2: 00007f99e41a3018 CR3: 000000000eae9000 CR4: 0000000000350ef0
[ 115.656482] Kernel panic - not syncing: Fatal exception in interrupt
[ 115.657487] Kernel Offset: disabled
[ 115.658014] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---
VM DIAGNOSIS:
08:22:50 Registers:
info registers vcpu 0
RAX=0000000000000042 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff88800982f198
R8 =0000000000000000 R9 =ffffed10016d3046 R10=0000000000000042 R11=6572617764726148
R12=0000000000000042 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0
RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fa3682bd700 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe3300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa3682bc108 CR3=000000000e5c0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff
XMM02=ffffffffffffffffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff88806ce3de00 RCX=ffffffff816880fc RDX=ffff88804562d280
RSI=ffffffff816880d6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88801a3cf988
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=1ffff1100d9e6bb1
R12=ffffed100d9c7bc1 R13=ffff88806ce3de08 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff816880d8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055555ebef400 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe2800000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2d324000 CR3=000000000bcab000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff812095ecffffffff812095ec XMM01=ffffffff81209610ffffffff81209610
XMM02=ffffffff812c825fffffffff81209610 XMM03=ffffffff81209610ffffffff812095ec
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000