Warning: Permanently added '[localhost]:9327' (ECDSA) to the list of known hosts. 2025/08/29 12:33:53 fuzzer started 2025/08/29 12:33:53 dialing manager at localhost:43077 syzkaller login: [ 44.277040] cgroup: Unknown subsys name 'net' [ 44.325407] cgroup: Unknown subsys name 'cpuset' [ 44.349672] cgroup: Unknown subsys name 'rlimit' 2025/08/29 12:34:04 syscalls: 2214 2025/08/29 12:34:04 code coverage: enabled 2025/08/29 12:34:04 comparison tracing: enabled 2025/08/29 12:34:04 extra coverage: enabled 2025/08/29 12:34:04 setuid sandbox: enabled 2025/08/29 12:34:04 namespace sandbox: enabled 2025/08/29 12:34:04 Android sandbox: enabled 2025/08/29 12:34:04 fault injection: enabled 2025/08/29 12:34:04 leak checking: enabled 2025/08/29 12:34:04 net packet injection: enabled 2025/08/29 12:34:04 net device setup: enabled 2025/08/29 12:34:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 12:34:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 12:34:04 USB emulation: enabled 2025/08/29 12:34:04 hci packet injection: enabled 2025/08/29 12:34:04 wifi device emulation: enabled 2025/08/29 12:34:04 802.15.4 emulation: enabled 2025/08/29 12:34:04 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 12:34:04 fetching corpus: 50, signal 24258/27738 (executing program) 2025/08/29 12:34:04 fetching corpus: 100, signal 34852/39756 (executing program) 2025/08/29 12:34:04 fetching corpus: 150, signal 42735/48930 (executing program) 2025/08/29 12:34:04 fetching corpus: 200, signal 47141/54646 (executing program) 2025/08/29 12:34:04 fetching corpus: 250, signal 53125/61813 (executing program) 2025/08/29 12:34:04 fetching corpus: 300, signal 59534/69270 (executing program) 2025/08/29 12:34:05 fetching corpus: 350, signal 64943/75619 (executing program) 2025/08/29 12:34:05 fetching corpus: 400, signal 68372/80052 (executing program) 2025/08/29 12:34:05 fetching corpus: 450, signal 72353/84902 (executing program) 2025/08/29 12:34:05 fetching corpus: 500, signal 75557/89051 (executing program) 2025/08/29 12:34:05 fetching corpus: 550, signal 80249/94417 (executing program) 2025/08/29 12:34:05 fetching corpus: 600, signal 81746/96875 (executing program) 2025/08/29 12:34:05 fetching corpus: 650, signal 85496/101259 (executing program) 2025/08/29 12:34:05 fetching corpus: 700, signal 87006/103641 (executing program) 2025/08/29 12:34:05 fetching corpus: 750, signal 88842/106287 (executing program) 2025/08/29 12:34:05 fetching corpus: 800, signal 90320/108644 (executing program) 2025/08/29 12:34:06 fetching corpus: 850, signal 92632/111590 (executing program) 2025/08/29 12:34:06 fetching corpus: 900, signal 94320/114031 (executing program) 2025/08/29 12:34:06 fetching corpus: 950, signal 96117/116465 (executing program) 2025/08/29 12:34:06 fetching corpus: 1000, signal 97569/118579 (executing program) 2025/08/29 12:34:06 fetching corpus: 1050, signal 99428/121066 (executing program) 2025/08/29 12:34:06 fetching corpus: 1100, signal 103031/124797 (executing program) 2025/08/29 12:34:06 fetching corpus: 1150, signal 104708/126978 (executing program) 2025/08/29 12:34:06 fetching corpus: 1200, signal 105626/128606 (executing program) 2025/08/29 12:34:06 fetching corpus: 1250, signal 106540/130213 (executing program) 2025/08/29 12:34:06 fetching corpus: 1300, signal 107779/131972 (executing program) 2025/08/29 12:34:06 fetching corpus: 1350, signal 109923/134423 (executing program) 2025/08/29 12:34:07 fetching corpus: 1400, signal 111723/136649 (executing program) 2025/08/29 12:34:07 fetching corpus: 1450, signal 112676/138173 (executing program) 2025/08/29 12:34:07 fetching corpus: 1500, signal 114104/139988 (executing program) 2025/08/29 12:34:07 fetching corpus: 1550, signal 115282/141659 (executing program) 2025/08/29 12:34:07 fetching corpus: 1600, signal 116116/143048 (executing program) 2025/08/29 12:34:07 fetching corpus: 1650, signal 117302/144595 (executing program) 2025/08/29 12:34:07 fetching corpus: 1700, signal 118376/146091 (executing program) 2025/08/29 12:34:07 fetching corpus: 1750, signal 120014/147946 (executing program) 2025/08/29 12:34:07 fetching corpus: 1800, signal 121311/149560 (executing program) 2025/08/29 12:34:07 fetching corpus: 1850, signal 122269/150911 (executing program) 2025/08/29 12:34:08 fetching corpus: 1900, signal 123647/152535 (executing program) 2025/08/29 12:34:08 fetching corpus: 1950, signal 124651/153875 (executing program) 2025/08/29 12:34:08 fetching corpus: 2000, signal 125568/155097 (executing program) 2025/08/29 12:34:08 fetching corpus: 2050, signal 126692/156460 (executing program) 2025/08/29 12:34:08 fetching corpus: 2100, signal 127913/157863 (executing program) 2025/08/29 12:34:08 fetching corpus: 2150, signal 128626/158954 (executing program) 2025/08/29 12:34:08 fetching corpus: 2200, signal 129626/160201 (executing program) 2025/08/29 12:34:08 fetching corpus: 2250, signal 130312/161306 (executing program) 2025/08/29 12:34:08 fetching corpus: 2300, signal 131067/162371 (executing program) 2025/08/29 12:34:08 fetching corpus: 2350, signal 131997/163619 (executing program) 2025/08/29 12:34:09 fetching corpus: 2400, signal 132936/164747 (executing program) 2025/08/29 12:34:09 fetching corpus: 2450, signal 133575/165731 (executing program) 2025/08/29 12:34:09 fetching corpus: 2500, signal 134748/167086 (executing program) 2025/08/29 12:34:09 fetching corpus: 2550, signal 135739/168344 (executing program) 2025/08/29 12:34:09 fetching corpus: 2600, signal 136321/169254 (executing program) 2025/08/29 12:34:09 fetching corpus: 2650, signal 137111/170280 (executing program) 2025/08/29 12:34:09 fetching corpus: 2700, signal 138276/171370 (executing program) 2025/08/29 12:34:09 fetching corpus: 2750, signal 139144/172312 (executing program) 2025/08/29 12:34:09 fetching corpus: 2800, signal 139590/173076 (executing program) 2025/08/29 12:34:09 fetching corpus: 2850, signal 140233/173948 (executing program) 2025/08/29 12:34:10 fetching corpus: 2900, signal 140983/174836 (executing program) 2025/08/29 12:34:10 fetching corpus: 2950, signal 141495/175611 (executing program) 2025/08/29 12:34:10 fetching corpus: 3000, signal 142880/176679 (executing program) 2025/08/29 12:34:10 fetching corpus: 3050, signal 143468/177490 (executing program) 2025/08/29 12:34:10 fetching corpus: 3100, signal 144092/178218 (executing program) 2025/08/29 12:34:10 fetching corpus: 3150, signal 144755/178971 (executing program) 2025/08/29 12:34:10 fetching corpus: 3200, signal 145621/179780 (executing program) 2025/08/29 12:34:10 fetching corpus: 3250, signal 146045/180427 (executing program) 2025/08/29 12:34:10 fetching corpus: 3300, signal 146685/181216 (executing program) 2025/08/29 12:34:11 fetching corpus: 3350, signal 147283/181893 (executing program) 2025/08/29 12:34:11 fetching corpus: 3400, signal 147981/182605 (executing program) 2025/08/29 12:34:11 fetching corpus: 3450, signal 148632/183264 (executing program) 2025/08/29 12:34:11 fetching corpus: 3500, signal 149454/183982 (executing program) 2025/08/29 12:34:11 fetching corpus: 3550, signal 149897/184641 (executing program) 2025/08/29 12:34:11 fetching corpus: 3600, signal 150419/185251 (executing program) 2025/08/29 12:34:11 fetching corpus: 3650, signal 150983/185912 (executing program) 2025/08/29 12:34:11 fetching corpus: 3700, signal 151541/186488 (executing program) 2025/08/29 12:34:11 fetching corpus: 3750, signal 152092/187073 (executing program) 2025/08/29 12:34:11 fetching corpus: 3800, signal 152500/187656 (executing program) 2025/08/29 12:34:11 fetching corpus: 3850, signal 153026/188212 (executing program) 2025/08/29 12:34:12 fetching corpus: 3900, signal 153392/188731 (executing program) 2025/08/29 12:34:12 fetching corpus: 3950, signal 153961/189287 (executing program) 2025/08/29 12:34:12 fetching corpus: 4000, signal 154402/189859 (executing program) 2025/08/29 12:34:12 fetching corpus: 4050, signal 155085/190408 (executing program) 2025/08/29 12:34:12 fetching corpus: 4100, signal 155700/191023 (executing program) 2025/08/29 12:34:12 fetching corpus: 4150, signal 156141/191656 (executing program) 2025/08/29 12:34:12 fetching corpus: 4200, signal 156778/192173 (executing program) 2025/08/29 12:34:12 fetching corpus: 4250, signal 157175/192626 (executing program) 2025/08/29 12:34:12 fetching corpus: 4300, signal 157576/193071 (executing program) 2025/08/29 12:34:12 fetching corpus: 4350, signal 158016/193513 (executing program) 2025/08/29 12:34:12 fetching corpus: 4400, signal 158420/193960 (executing program) 2025/08/29 12:34:13 fetching corpus: 4450, signal 158745/194418 (executing program) 2025/08/29 12:34:13 fetching corpus: 4500, signal 159389/194921 (executing program) 2025/08/29 12:34:13 fetching corpus: 4550, signal 160055/195430 (executing program) 2025/08/29 12:34:13 fetching corpus: 4600, signal 160517/195851 (executing program) 2025/08/29 12:34:13 fetching corpus: 4650, signal 160953/196350 (executing program) 2025/08/29 12:34:13 fetching corpus: 4700, signal 161465/196704 (executing program) 2025/08/29 12:34:13 fetching corpus: 4750, signal 161810/197127 (executing program) 2025/08/29 12:34:13 fetching corpus: 4800, signal 162451/197134 (executing program) 2025/08/29 12:34:13 fetching corpus: 4850, signal 163089/197161 (executing program) 2025/08/29 12:34:13 fetching corpus: 4900, signal 163393/197206 (executing program) 2025/08/29 12:34:14 fetching corpus: 4950, signal 163871/197224 (executing program) 2025/08/29 12:34:14 fetching corpus: 5000, signal 164200/197232 (executing program) 2025/08/29 12:34:14 fetching corpus: 5050, signal 164947/197247 (executing program) 2025/08/29 12:34:14 fetching corpus: 5100, signal 165386/197254 (executing program) 2025/08/29 12:34:14 fetching corpus: 5150, signal 165715/197266 (executing program) 2025/08/29 12:34:14 fetching corpus: 5200, signal 166095/197287 (executing program) 2025/08/29 12:34:14 fetching corpus: 5250, signal 166884/197325 (executing program) 2025/08/29 12:34:14 fetching corpus: 5300, signal 167155/197338 (executing program) 2025/08/29 12:34:14 fetching corpus: 5350, signal 167487/197375 (executing program) 2025/08/29 12:34:14 fetching corpus: 5400, signal 167948/197388 (executing program) 2025/08/29 12:34:14 fetching corpus: 5450, signal 168358/197397 (executing program) 2025/08/29 12:34:14 fetching corpus: 5500, signal 168842/197405 (executing program) 2025/08/29 12:34:14 fetching corpus: 5550, signal 169295/197405 (executing program) 2025/08/29 12:34:15 fetching corpus: 5600, signal 169735/197414 (executing program) 2025/08/29 12:34:15 fetching corpus: 5650, signal 170117/197414 (executing program) 2025/08/29 12:34:15 fetching corpus: 5700, signal 170528/197423 (executing program) 2025/08/29 12:34:15 fetching corpus: 5750, signal 171210/197537 (executing program) 2025/08/29 12:34:15 fetching corpus: 5800, signal 171576/197549 (executing program) 2025/08/29 12:34:15 fetching corpus: 5850, signal 171914/197557 (executing program) 2025/08/29 12:34:15 fetching corpus: 5900, signal 172243/197567 (executing program) 2025/08/29 12:34:15 fetching corpus: 5950, signal 172640/197570 (executing program) 2025/08/29 12:34:15 fetching corpus: 6000, signal 173013/197617 (executing program) 2025/08/29 12:34:15 fetching corpus: 6050, signal 173791/197620 (executing program) 2025/08/29 12:34:15 fetching corpus: 6100, signal 174128/197621 (executing program) 2025/08/29 12:34:16 fetching corpus: 6150, signal 174463/197665 (executing program) 2025/08/29 12:34:16 fetching corpus: 6200, signal 174794/197667 (executing program) 2025/08/29 12:34:16 fetching corpus: 6250, signal 175132/197669 (executing program) 2025/08/29 12:34:16 fetching corpus: 6300, signal 175522/197670 (executing program) 2025/08/29 12:34:16 fetching corpus: 6350, signal 175809/197670 (executing program) 2025/08/29 12:34:16 fetching corpus: 6400, signal 176252/197672 (executing program) 2025/08/29 12:34:16 fetching corpus: 6450, signal 176569/197676 (executing program) 2025/08/29 12:34:17 fetching corpus: 6500, signal 176859/197724 (executing program) 2025/08/29 12:34:17 fetching corpus: 6550, signal 177127/197724 (executing program) 2025/08/29 12:34:17 fetching corpus: 6600, signal 177497/197761 (executing program) 2025/08/29 12:34:17 fetching corpus: 6650, signal 177891/197766 (executing program) 2025/08/29 12:34:17 fetching corpus: 6700, signal 178274/197773 (executing program) 2025/08/29 12:34:17 fetching corpus: 6750, signal 178571/197776 (executing program) 2025/08/29 12:34:17 fetching corpus: 6800, signal 179003/197793 (executing program) 2025/08/29 12:34:17 fetching corpus: 6850, signal 179481/197805 (executing program) 2025/08/29 12:34:17 fetching corpus: 6900, signal 179801/197813 (executing program) 2025/08/29 12:34:17 fetching corpus: 6950, signal 180063/197823 (executing program) 2025/08/29 12:34:17 fetching corpus: 7000, signal 180394/197825 (executing program) 2025/08/29 12:34:18 fetching corpus: 7050, signal 180715/197825 (executing program) 2025/08/29 12:34:18 fetching corpus: 7100, signal 181093/197829 (executing program) 2025/08/29 12:34:18 fetching corpus: 7150, signal 181344/197860 (executing program) 2025/08/29 12:34:18 fetching corpus: 7200, signal 181653/197866 (executing program) 2025/08/29 12:34:18 fetching corpus: 7250, signal 181865/197871 (executing program) 2025/08/29 12:34:18 fetching corpus: 7300, signal 182093/197886 (executing program) 2025/08/29 12:34:18 fetching corpus: 7350, signal 182358/197890 (executing program) 2025/08/29 12:34:18 fetching corpus: 7400, signal 182609/197892 (executing program) 2025/08/29 12:34:18 fetching corpus: 7450, signal 182820/197903 (executing program) 2025/08/29 12:34:18 fetching corpus: 7500, signal 183040/197910 (executing program) 2025/08/29 12:34:18 fetching corpus: 7550, signal 183373/197917 (executing program) 2025/08/29 12:34:18 fetching corpus: 7600, signal 183627/197920 (executing program) 2025/08/29 12:34:18 fetching corpus: 7650, signal 184056/197929 (executing program) 2025/08/29 12:34:18 fetching corpus: 7700, signal 184285/197932 (executing program) 2025/08/29 12:34:19 fetching corpus: 7750, signal 184516/197934 (executing program) 2025/08/29 12:34:19 fetching corpus: 7800, signal 184835/197937 (executing program) 2025/08/29 12:34:19 fetching corpus: 7850, signal 185131/197946 (executing program) 2025/08/29 12:34:19 fetching corpus: 7900, signal 185469/197960 (executing program) 2025/08/29 12:34:19 fetching corpus: 7950, signal 185790/197966 (executing program) 2025/08/29 12:34:19 fetching corpus: 8000, signal 186067/197990 (executing program) 2025/08/29 12:34:19 fetching corpus: 8050, signal 186412/197991 (executing program) 2025/08/29 12:34:19 fetching corpus: 8100, signal 186674/197996 (executing program) 2025/08/29 12:34:19 fetching corpus: 8150, signal 186964/198059 (executing program) 2025/08/29 12:34:19 fetching corpus: 8200, signal 187150/198066 (executing program) 2025/08/29 12:34:19 fetching corpus: 8250, signal 187468/198143 (executing program) 2025/08/29 12:34:19 fetching corpus: 8300, signal 187724/198150 (executing program) 2025/08/29 12:34:19 fetching corpus: 8350, signal 187919/198155 (executing program) 2025/08/29 12:34:20 fetching corpus: 8400, signal 188242/198157 (executing program) 2025/08/29 12:34:20 fetching corpus: 8450, signal 188513/198171 (executing program) 2025/08/29 12:34:20 fetching corpus: 8500, signal 188711/198172 (executing program) 2025/08/29 12:34:20 fetching corpus: 8550, signal 188995/198174 (executing program) 2025/08/29 12:34:20 fetching corpus: 8600, signal 189280/198176 (executing program) 2025/08/29 12:34:20 fetching corpus: 8650, signal 189621/198200 (executing program) 2025/08/29 12:34:20 fetching corpus: 8700, signal 189831/198232 (executing program) 2025/08/29 12:34:20 fetching corpus: 8750, signal 190111/198234 (executing program) 2025/08/29 12:34:20 fetching corpus: 8800, signal 190356/198234 (executing program) 2025/08/29 12:34:20 fetching corpus: 8850, signal 190563/198242 (executing program) 2025/08/29 12:34:20 fetching corpus: 8900, signal 190853/198245 (executing program) 2025/08/29 12:34:20 fetching corpus: 8950, signal 191103/198250 (executing program) 2025/08/29 12:34:21 fetching corpus: 9000, signal 191348/198255 (executing program) 2025/08/29 12:34:21 fetching corpus: 9050, signal 191501/198259 (executing program) 2025/08/29 12:34:21 fetching corpus: 9100, signal 191721/198275 (executing program) 2025/08/29 12:34:21 fetching corpus: 9150, signal 192008/198299 (executing program) 2025/08/29 12:34:21 fetching corpus: 9200, signal 192311/198308 (executing program) 2025/08/29 12:34:21 fetching corpus: 9250, signal 192555/198339 (executing program) 2025/08/29 12:34:21 fetching corpus: 9300, signal 192804/198349 (executing program) 2025/08/29 12:34:21 fetching corpus: 9350, signal 192969/198357 (executing program) 2025/08/29 12:34:21 fetching corpus: 9400, signal 193157/198386 (executing program) 2025/08/29 12:34:21 fetching corpus: 9450, signal 193375/198386 (executing program) 2025/08/29 12:34:21 fetching corpus: 9500, signal 193599/198399 (executing program) 2025/08/29 12:34:22 fetching corpus: 9550, signal 193943/198409 (executing program) 2025/08/29 12:34:22 fetching corpus: 9600, signal 194188/198413 (executing program) 2025/08/29 12:34:22 fetching corpus: 9650, signal 194432/198415 (executing program) 2025/08/29 12:34:22 fetching corpus: 9686, signal 194563/198416 (executing program) 2025/08/29 12:34:22 fetching corpus: 9686, signal 194563/198416 (executing program) 2025/08/29 12:34:23 starting 8 fuzzer processes 12:34:23 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000000680)=ANY=[], 0x4, 0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0}]) 12:34:23 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0x0) 12:34:23 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x2c}}) 12:34:23 executing program 2: clone(0x100500, &(0x7f0000000140)='X', &(0x7f0000000600), 0x0, 0x0) 12:34:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x1001, @fixed}, 0xe) 12:34:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x21, 0x0, &(0x7f0000000140)) [ 74.307376] audit: type=1400 audit(1756470863.903:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:34:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001800)=[{&(0x7f0000000280)="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", 0x15c}], 0x1) 12:34:23 executing program 6: setresuid(0x0, 0xee01, 0x0) r0 = syz_io_uring_setup(0x3a2d, &(0x7f0000000480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/56, 0x38}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) [ 75.517307] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.521311] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.523485] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.525376] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.527380] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.531258] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.536265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.538757] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.543581] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.545191] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.591474] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.597483] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.602613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.603730] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.608936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.613355] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.617135] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.619230] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 75.620582] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.626934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.630080] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.633891] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.635285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.637421] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.646444] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 75.652308] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.658897] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 75.661409] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.667401] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 75.669506] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 75.682683] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 75.686139] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 75.690757] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 75.710458] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 75.712053] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 75.734092] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 75.738665] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 75.744454] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 75.747170] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 75.755209] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 77.609844] Bluetooth: hci0: command tx timeout [ 77.610397] Bluetooth: hci1: command tx timeout [ 77.735845] Bluetooth: hci3: command tx timeout [ 77.736444] Bluetooth: hci5: command tx timeout [ 77.736944] Bluetooth: hci4: command tx timeout [ 77.800911] Bluetooth: hci7: command tx timeout [ 77.801439] Bluetooth: hci2: command tx timeout [ 77.865599] Bluetooth: hci6: command tx timeout [ 79.655839] Bluetooth: hci1: command tx timeout [ 79.656297] Bluetooth: hci0: command tx timeout [ 79.783901] Bluetooth: hci4: command tx timeout [ 79.784354] Bluetooth: hci5: command tx timeout [ 79.784730] Bluetooth: hci3: command tx timeout [ 79.848801] Bluetooth: hci2: command tx timeout [ 79.849237] Bluetooth: hci7: command tx timeout [ 79.911855] Bluetooth: hci6: command tx timeout [ 81.703960] Bluetooth: hci1: command tx timeout [ 81.704415] Bluetooth: hci0: command tx timeout [ 81.832835] Bluetooth: hci3: command tx timeout [ 81.833302] Bluetooth: hci5: command tx timeout [ 81.833687] Bluetooth: hci4: command tx timeout [ 81.895866] Bluetooth: hci7: command tx timeout [ 81.896329] Bluetooth: hci2: command tx timeout [ 81.959844] Bluetooth: hci6: command tx timeout [ 83.751856] Bluetooth: hci0: command tx timeout [ 83.752315] Bluetooth: hci1: command tx timeout [ 83.880008] Bluetooth: hci4: command tx timeout [ 83.880465] Bluetooth: hci5: command tx timeout [ 83.881411] Bluetooth: hci3: command tx timeout [ 83.944810] Bluetooth: hci2: command tx timeout [ 83.945246] Bluetooth: hci7: command tx timeout [ 84.007848] Bluetooth: hci6: command tx timeout [ 114.489517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.490197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.680030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.680664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.065149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.065754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:35:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001800)=[{&(0x7f0000000280)="fe76fa9aba4a05825b8b1b3ae39357552d3b71956941c2d79c54cf2129132d7dbde1879526b6ef9f08c44a0d30a601d6d9781a03a0a14a9343f7e314a914905943a9d7c55e3b3e2a192e8aa1e6247900f071fcb253381ed51000040000000000006e4a70aa216406000dcb71ff857fb064e37843d659b16b8d8f104f285aec980d72b68f7461f623b480770cfbf4fe78f82d8a4e2e0cc243211a83422bd1bf700300000000000000c51c8ff49a470a7441e98d851013d0343f6665060f0f143ea18bd307c45a95a7a14d66fac27e44e260c1032769c77377c8c2f8bd74a9a1f13a1e8dece9d547c3121cd4882d2a2063a88877e9fd05f3043b86000000000000f27a1cab3386e9dab190ef1a34a645ce874fe357218a37ce1099fb2aa275d3b6c4534be5c0c7b03e4c982820f73bc1b1af14d01dc99d15c1e838e61d26bf647d6a2cb0ddd7b5b3eb5c011986349e8d74f0c3f2d70c8dc22cf0b996ad", 0x15c}], 0x1) [ 115.183618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.184209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:35:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001800)=[{&(0x7f0000000280)="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", 0x15c}], 0x1) 12:35:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001800)=[{&(0x7f0000000280)="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", 0x15c}], 0x1) 12:35:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x0, @tick=0x4d7}) 12:35:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) [ 115.612025] audit: type=1400 audit(1756470905.202:8): avc: denied { open } for pid=3810 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 115.622904] audit: type=1400 audit(1756470905.202:9): avc: denied { kernel } for pid=3810 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:35:05 executing program 3: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) 12:35:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x0, @tick=0x4d7}) 12:35:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x0, @tick=0x4d7}) [ 116.152426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.153209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.307105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.307717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.350520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.351302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.436564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.437301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.498052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.498748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.574704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.576066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.627631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.628262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.682108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.682825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.733627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.734303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.792607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.793376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.846325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.846995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.908499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.909411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:35:06 executing program 1: setresuid(0x0, 0xee01, 0x0) r0 = syz_io_uring_setup(0x3a2d, &(0x7f0000000480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/56, 0x38}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 12:35:06 executing program 2: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x48f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 12:35:06 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000000)="56fcc478", 0x4) 12:35:06 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x0, @tick=0x4d7}) 12:35:06 executing program 6: setresuid(0x0, 0xee01, 0x0) r0 = syz_io_uring_setup(0x3a2d, &(0x7f0000000480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/56, 0x38}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 12:35:06 executing program 3: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) 12:35:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x21, 0x0, &(0x7f0000000140)) 12:35:06 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000000680)=ANY=[], 0x4, 0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0}]) [ 117.155246] audit: type=1400 audit(1756470906.750:10): avc: denied { tracepoint } for pid=3922 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:35:06 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$addseals(r0, 0xa, 0x4808fad37bc57d73) 12:35:07 executing program 1: setresuid(0x0, 0xee01, 0x0) r0 = syz_io_uring_setup(0x3a2d, &(0x7f0000000480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/56, 0x38}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 12:35:07 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r0, &(0x7f0000000040)='./mnt\x00', r1, &(0x7f0000000080)='./mnt\x00') 12:35:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x21, 0x0, &(0x7f0000000140)) 12:35:07 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) 12:35:07 executing program 6: setresuid(0x0, 0xee01, 0x0) r0 = syz_io_uring_setup(0x3a2d, &(0x7f0000000480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/56, 0x38}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 12:35:07 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000000680)=ANY=[], 0x4, 0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0}]) 12:35:07 executing program 2: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x48f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 12:35:07 executing program 3: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) [ 117.456685] Oops: general protection fault, probably for non-canonical address 0xe01ffc00000000b0: 0000 [#1] SMP KASAN NOPTI [ 117.457640] KASAN: maybe wild-memory-access in range [0x0100000000000580-0x0100000000000587] [ 117.458313] CPU: 1 UID: 0 PID: 3939 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 117.460931] Tainted: [W]=WARN [ 117.461682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 117.463936] RIP: 0010:perf_tp_event+0x26b/0xe70 [ 117.465110] Code: 3c 20 00 0f 85 3d 0b 00 00 4c 8b ab 00 03 00 00 4d 85 ed 4c 0f 44 eb e8 d3 50 ea ff 49 8d bd 80 05 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 fd 0a 00 00 4d 8b ad 80 05 00 00 4d 85 ed 0f [ 117.467324] RSP: 0018:ffff888047b17780 EFLAGS: 00010012 [ 117.467762] RAX: 00200000000000b0 RBX: ffff888047d412c1 RCX: ffffc900013fb000 [ 117.468367] RDX: 0000000000040000 RSI: ffffffff818996ad RDI: 0100000000000580 [ 117.468946] RBP: ffff888047b179f0 R08: ffff88806cf31340 R09: ffffe8ffffd16128 [ 117.469527] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 117.470106] R13: 0100000000000000 R14: ffff88806cf31340 R15: dffffc0000000000 [ 117.470689] FS: 00007fed03e49700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 117.471343] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.471818] CR2: 00007ff7053c9018 CR3: 000000000c16a000 CR4: 0000000000350ef0 [ 117.472419] Call Trace: [ 117.472629] [ 117.472812] ? __pfx_perf_tp_event+0x10/0x10 [ 117.473173] ? __asan_memcpy+0x3d/0x60 [ 117.473488] ? visit_groups_merge.constprop.0.isra.0+0x6e7/0x1150 [ 117.473981] ? __pfx_visit_groups_merge.constprop.0.isra.0+0x10/0x10 [ 117.474487] ? lock_is_held_type+0x9e/0x120 [ 117.474840] ? trace_sched_set_need_resched_tp+0xd4/0x110 [ 117.475279] ? __resched_curr+0x2a2/0x330 [ 117.475612] ? __pfx___resched_curr+0x10/0x10 [ 117.475986] ? perf_trace_run_bpf_submit+0xef/0x180 [ 117.476410] ? place_entity+0x300/0x410 [ 117.476730] perf_trace_run_bpf_submit+0xef/0x180 [ 117.477119] perf_trace_preemptirq_template+0x259/0x430 [ 117.477548] ? enqueue_task_fair+0xded/0x1e00 [ 117.477908] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 117.478376] ? lock_is_held_type+0x9e/0x120 [ 117.478721] ? find_held_lock+0x2b/0x80 [ 117.479043] ? try_to_wake_up+0x8ae/0x11d0 [ 117.479383] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 117.479791] trace_irq_enable.constprop.0+0xa6/0x100 [ 117.480211] trace_hardirqs_on+0x26/0x40 [ 117.480535] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 117.480927] try_to_wake_up+0x8ae/0x11d0 [ 117.481255] ? __pfx_try_to_wake_up+0x10/0x10 [ 117.481618] ? plist_del+0x122/0x270 [ 117.481927] ? find_held_lock+0x2b/0x80 [ 117.482251] ? futex_wake+0x474/0x540 [ 117.482559] wake_up_q+0xa1/0x130 [ 117.482845] futex_wake+0x47e/0x540 [ 117.483143] ? __pfx_futex_wake+0x10/0x10 [ 117.483475] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 117.483875] ? lock_release+0xc8/0x290 [ 117.484208] do_futex+0x26d/0x370 [ 117.484490] ? __pfx_do_futex+0x10/0x10 [ 117.484809] __x64_sys_futex+0x1c9/0x4d0 [ 117.485134] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 117.485600] ? __pfx___x64_sys_futex+0x10/0x10 [ 117.485964] ? xfd_validate_state+0x55/0x180 [ 117.486322] do_syscall_64+0xbf/0x360 [ 117.486626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.487035] RIP: 0033:0x7fed068d3b19 [ 117.487331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 117.488772] RSP: 002b:00007fed03e49218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 117.489375] RAX: ffffffffffffffda RBX: 00007fed069e6f68 RCX: 00007fed068d3b19 [ 117.489932] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fed069e6f6c [ 117.490492] RBP: 00007fed069e6f60 R08: 000000000000000e R09: 0000000000000000 [ 117.491050] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fed069e6f6c [ 117.491607] R13: 00007fffd21f26cf R14: 00007fed03e49300 R15: 0000000000022000 [ 117.492194] [ 117.492385] Modules linked in: [ 117.492648] ---[ end trace 0000000000000000 ]--- [ 117.492652] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI [ 117.493017] RIP: 0010:perf_tp_event+0x26b/0xe70 [ 117.493901] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 117.494262] Code: 3c 20 00 0f 85 3d 0b 00 00 4c 8b ab 00 03 00 00 4d 85 ed 4c 0f 44 eb e8 d3 50 ea ff 49 8d bd 80 05 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 fd 0a 00 00 4d 8b ad 80 05 00 00 4d 85 ed 0f [ 117.494951] CPU: 0 UID: 60929 PID: 3945 Comm: syz-executor.6 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 117.496365] RSP: 0018:ffff888047b17780 EFLAGS: 00010012 [ 117.497322] Tainted: [D]=DIE, [W]=WARN [ 117.497725] RAX: 00200000000000b0 RBX: ffff888047d412c1 RCX: ffffc900013fb000 [ 117.498031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 117.498578] RDX: 0000000000040000 RSI: ffffffff818996ad RDI: 0100000000000580 [ 117.499227] RIP: 0010:perf_tp_event+0x175/0xe70 [ 117.499773] RBP: ffff888047b179f0 R08: ffff88806cf31340 R09: ffffe8ffffd16128 [ 117.500154] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 117.500704] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 117.502116] RSP: 0018:ffff888047b4f780 EFLAGS: 00010012 [ 117.502663] R13: 0100000000000000 R14: ffff88806cf31340 R15: dffffc0000000000 [ 117.502667] [ 117.502677] FS: 00007fed03e49700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 117.503081] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90009c3f000 [ 117.503629] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.503769] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 117.504409] CR2: 00007ff7053c9018 CR3: 000000000c16a000 CR4: 0000000000350ef0 [ 117.504966] RBP: ffff888047b4f9f0 R08: ffff88806ce31340 R09: ffffe8ffffc16128 [ 117.505415] note: syz-executor.2[3939] exited with irqs disabled [ 117.505969] R10: 0000000000000000 R11: ffff88801bcc1498 R12: dffffc0000000000 [ 117.508109] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000 [ 117.508673] FS: 00007fce4b795700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 117.509310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.509772] CR2: 00007fce4e333018 CR3: 000000001f50d000 CR4: 0000000000350ef0 [ 117.510338] Call Trace: [ 117.510551] [ 117.510741] ? __pfx_perf_tp_event+0x10/0x10 [ 117.511108] ? lock_acquire+0x18c/0x2f0 [ 117.511432] ? trace_mm_page_alloc+0xfc/0x150 [ 117.511798] ? lock_release+0x1c7/0x290 [ 117.512140] ? lock_acquire+0x18c/0x2f0 [ 117.512466] ? lock_acquire+0x18c/0x2f0 [ 117.512791] ? lock_release+0x1c7/0x290 [ 117.513115] ? lock_acquire+0x18c/0x2f0 [ 117.513443] ? lock_release+0x1c7/0x290 [ 117.513765] ? lock_acquire+0x18c/0x2f0 [ 117.514087] ? lock_acquire+0x18c/0x2f0 [ 117.514410] ? lock_release+0x1c7/0x290 [ 117.514732] ? perf_trace_run_bpf_submit+0xef/0x180 [ 117.515137] ? kernel_text_address+0x5b/0xc0 [ 117.515497] perf_trace_run_bpf_submit+0xef/0x180 [ 117.515890] perf_trace_preemptirq_template+0x259/0x430 [ 117.516339] ? trace_sched_set_need_resched_tp+0xd4/0x110 [ 117.516783] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 117.517259] ? __pfx___resched_curr+0x10/0x10 [ 117.517631] ? check_preempt_wakeup_fair+0x406/0x950 [ 117.518045] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 117.518459] trace_irq_enable.constprop.0+0xa6/0x100 [ 117.518865] trace_hardirqs_on+0x26/0x40 [ 117.519194] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 117.519589] try_to_wake_up+0x8ae/0x11d0 [ 117.519920] ? __pfx_try_to_wake_up+0x10/0x10 [ 117.520290] ? plist_del+0x122/0x270 [ 117.520597] ? __futex_unqueue+0xda/0x1c0 [ 117.520933] wake_up_q+0xa1/0x130 [ 117.521222] futex_wake+0x47e/0x540 [ 117.521524] ? __pfx_futex_wake+0x10/0x10 [ 117.521861] ? lock_release+0x1c7/0x290 [ 117.522185] do_futex+0x26d/0x370 [ 117.522473] ? __pfx_do_futex+0x10/0x10 [ 117.522792] ? __kmalloc_noprof+0x29d/0x6e0 [ 117.523141] ? __create_object+0x59/0x80 [ 117.523477] __x64_sys_futex+0x1c9/0x4d0 [ 117.523806] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 117.524286] ? __pfx___x64_sys_futex+0x10/0x10 [ 117.524654] ? set_cred_ucounts+0x110/0x210 [ 117.525006] do_syscall_64+0xbf/0x360 [ 117.525318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.525728] RIP: 0033:0x7fce4e21fb19 [ 117.526029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 117.527440] RSP: 002b:00007fce4b795218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 117.528046] RAX: ffffffffffffffda RBX: 00007fce4e332f68 RCX: 00007fce4e21fb19 [ 117.528605] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fce4e332f6c [ 117.529169] RBP: 00007fce4e332f60 R08: 000000000000000e R09: 0000000000000000 [ 117.529726] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fce4e332f6c [ 117.530283] R13: 00007ffc90a2d31f R14: 00007fce4b795300 R15: 0000000000022000 [ 117.530847] [ 117.531038] Modules linked in: [ 117.531302] ---[ end trace 0000000000000000 ]--- [ 117.531303] Oops: general protection fault, probably for non-canonical address 0xe01ffc00000000b0: 0000 [#3] SMP KASAN NOPTI [ 117.531673] RIP: 0010:perf_tp_event+0x26b/0xe70 [ 117.532538] KASAN: maybe wild-memory-access in range [0x0100000000000580-0x0100000000000587] [ 117.532901] Code: 3c 20 00 0f 85 3d 0b 00 00 4c 8b ab 00 03 00 00 4d 85 ed 4c 0f 44 eb e8 d3 50 ea ff 49 8d bd 80 05 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 fd 0a 00 00 4d 8b ad 80 05 00 00 4d 85 ed 0f [ 117.533547] CPU: 1 UID: 0 PID: 3939 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 117.534944] RSP: 0018:ffff888047b17780 EFLAGS: 00010012 [ 117.535856] Tainted: [D]=DIE, [W]=WARN [ 117.535862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 117.536279] RAX: 00200000000000b0 RBX: ffff888047d412c1 RCX: ffffc900013fb000 [ 117.536579] RIP: 0010:perf_tp_event+0x26b/0xe70 [ 117.537216] RDX: 0000000000040000 RSI: ffffffff818996ad RDI: 0100000000000580 [ 117.537763] Code: 3c 20 00 0f 85 3d 0b 00 00 4c 8b ab 00 03 00 00 4d 85 ed 4c 0f 44 eb e8 d3 50 ea ff 49 8d bd 80 05 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 fd 0a 00 00 4d 8b ad 80 05 00 00 4d 85 ed 0f [ 117.538128] RBP: ffff888047b179f0 R08: ffff88806cf31340 R09: ffffe8ffffd16128 [ 117.538676] RSP: 0018:ffff88806cf08b80 EFLAGS: 00010012 [ 117.540082] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 117.540633] [ 117.541044] R13: 0100000000000000 R14: ffff88806cf31340 R15: dffffc0000000000 [ 117.541592] RAX: 00200000000000b0 RBX: ffff888047d412c1 RCX: ffffffff8189962c [ 117.541732] FS: 00007fce4b795700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 117.542282] RDX: ffff8880159eb700 RSI: ffffffff818996ad RDI: 0100000000000580 [ 117.542834] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.543449] RBP: ffff88806cf08df0 R08: ffff88806cf313e8 R09: ffffe8ffffd16128 [ 117.544016] CR2: 00007fce4e333018 CR3: 000000001f50d000 CR4: 0000000000350ef0 [ 117.544476] R10: 0000000000000000 R11: ffff88806cf37018 R12: dffffc0000000000 [ 117.545030] note: syz-executor.6[3945] exited with irqs disabled [ 117.545583] R13: 0100000000000000 R14: ffff88806cf313e8 R15: dffffc0000000000 [ 117.547144] FS: 00007fed03e49700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 117.547767] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.548248] CR2: 00007ff7053c9018 CR3: 000000000c16a000 CR4: 0000000000350ef0 [ 117.548805] Call Trace: [ 117.549009] [ 117.549186] ? __pfx_perf_tp_event+0x10/0x10 [ 117.549543] ? trace_pelt_se_tp+0xdf/0x130 [ 117.549881] ? do_raw_spin_lock+0x123/0x260 [ 117.550227] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 117.550600] ? lock_acquire+0x18c/0x2f0 [ 117.550919] ? update_cfs_group+0x11d/0x260 [ 117.551260] ? lock_release+0x1c7/0x290 [ 117.551576] ? do_raw_spin_unlock+0x53/0x220 [ 117.551931] ? _raw_spin_unlock_irqrestore+0x22/0x50 [ 117.552351] ? try_to_wake_up+0x128/0x11d0 [ 117.552692] ? do_raw_spin_lock+0x123/0x260 [ 117.553035] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 117.553406] ? perf_trace_run_bpf_submit+0xef/0x180 [ 117.553801] perf_trace_run_bpf_submit+0xef/0x180 [ 117.554188] perf_trace_preemptirq_template+0x259/0x430 [ 117.554616] ? read_tsc+0x9/0x20 [ 117.554892] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 117.555360] ? clockevents_program_event+0x135/0x360 [ 117.555765] ? tick_program_event+0xac/0x140 [ 117.556137] ? handle_softirqs+0x16e/0x770 [ 117.556481] trace_irq_enable.constprop.0+0xa6/0x100 [ 117.556879] trace_hardirqs_on+0x26/0x40 [ 117.557201] handle_softirqs+0x16e/0x770 [ 117.557532] __irq_exit_rcu+0xc4/0x100 [ 117.557849] irq_exit_rcu+0x9/0x20 [ 117.558132] sysvec_apic_timer_interrupt+0x70/0x80 [ 117.558526] [ 117.558707] [ 117.558890] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 117.559304] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 117.559677] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de [ 117.561111] RSP: 0018:ffff888047b17f28 EFLAGS: 00000246 [ 117.561538] RAX: 0000000000000001 RBX: ffff8880159eb700 RCX: ffffffff817c2b86 [ 117.562112] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 117.562680] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 117.563248] R10: ffffffff8643ac57 R11: 3030303030302043 R12: ffff8880159eb700 [ 117.563819] R13: 0000000000000000 R14: e01ffc00000000b0 R15: 0000000000000000 [ 117.564403] ? trace_irq_enable.constprop.0+0x26/0x100 [ 117.564828] ? make_task_dead+0x214/0x3b0 [ 117.565169] ? make_task_dead+0x214/0x3b0 [ 117.565512] ? do_syscall_64+0xbf/0x360 [ 117.565834] rewind_stack_and_make_dead+0x16/0x20 [ 117.566230] RIP: 0033:0x7fed068d3b19 [ 117.566529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 117.567965] RSP: 002b:00007fed03e49218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 117.568583] RAX: ffffffffffffffda RBX: 00007fed069e6f68 RCX: 00007fed068d3b19 [ 117.569152] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fed069e6f6c [ 117.569721] RBP: 00007fed069e6f60 R08: 000000000000000e R09: 0000000000000000 [ 117.570292] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fed069e6f6c [ 117.570856] R13: 00007fffd21f26cf R14: 00007fed03e49300 R15: 0000000000022000 [ 117.571432] [ 117.571623] Modules linked in: [ 117.571884] ---[ end trace 0000000000000000 ]--- [ 117.571886] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#4] SMP KASAN NOPTI [ 117.572277] RIP: 0010:perf_tp_event+0x26b/0xe70 [ 117.573145] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 117.573507] Code: 3c 20 00 0f 85 3d 0b 00 00 4c 8b ab 00 03 00 00 4d 85 ed 4c 0f 44 eb e8 d3 50 ea ff 49 8d bd 80 05 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 fd 0a 00 00 4d 8b ad 80 05 00 00 4d 85 ed 0f [ 117.574191] CPU: 0 UID: 60929 PID: 3945 Comm: syz-executor.6 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 117.575610] RSP: 0018:ffff888047b17780 EFLAGS: 00010012 [ 117.576569] Tainted: [D]=DIE, [W]=WARN [ 117.576988] RAX: 00200000000000b0 RBX: ffff888047d412c1 RCX: ffffc900013fb000 [ 117.577296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 117.577855] RDX: 0000000000040000 RSI: ffffffff818996ad RDI: 0100000000000580 [ 117.578499] RIP: 0010:perf_tp_event+0x175/0xe70 [ 117.579057] RBP: ffff888047b179f0 R08: ffff88806cf31340 R09: ffffe8ffffd16128 [ 117.579423] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 117.579983] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 117.581408] RSP: 0018:ffff88806ce08b80 EFLAGS: 00010012 [ 117.581967] R13: 0100000000000000 R14: ffff88806cf31340 R15: dffffc0000000000 [ 117.581970] [ 117.581981] FS: 00007fed03e49700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 117.582393] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 117.582946] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.583104] RDX: ffff88801a928000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 117.583743] CR2: 00007ff7053c9018 CR3: 000000000c16a000 CR4: 0000000000350ef0 [ 117.584386] RBP: ffff88806ce08df0 R08: ffff88806ce313e8 R09: ffffe8ffffc16128 [ 117.584859] Kernel panic - not syncing: Fatal exception in interrupt [ 118.632109] Shutting down cpus with NMI [ 118.634260] Kernel Offset: disabled [ 118.634545] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 12:35:07 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84bdec0e RDX=fffffbfff0f0ec09 RSI=0000000000000004 RDI=ffffffff87876044 RBP=ffffffff87876044 RSP=ffff888047b4f530 R8 =0000000000000000 R9 =fffffbfff0f0ec08 R10=ffffffff87876047 R11=202c746c75616620 R12=1ffff11008f69ea7 R13=0000000000000007 R14=fffffbfff0f0ec08 R15=ffff888047b4f568 RIP=ffffffff84bdeda0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fce4b795700 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe3300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fce4e333018 CR3=000000001f50d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fce4e3067c000007fce4e3067c8 XMM02=00007fce4e3067e000007fce4e3067c0 XMM03=00007fce4e3067c800007fce4e3067c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888047b17070 R8 =0000000000000000 R9 =ffffed10016cd046 R10=0000000000000020 R11=0000000065646f43 R12=0000000000000020 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fed03e49700 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe0e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff7053c9018 CR3=000000000c16a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fed069ba7c000007fed069ba7c8 XMM02=00007fed069ba7e000007fed069ba7c0 XMM03=00007fed069ba7c800007fed069ba7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000