Warning: Permanently added '[localhost]:27267' (ECDSA) to the list of known hosts.
2025/08/29 12:36:00 fuzzer started
2025/08/29 12:36:01 dialing manager at localhost:43077
syzkaller login: [ 56.291948] cgroup: Unknown subsys name 'net'
[ 56.338771] cgroup: Unknown subsys name 'cpuset'
[ 56.353981] cgroup: Unknown subsys name 'rlimit'
2025/08/29 12:36:12 syscalls: 2214
2025/08/29 12:36:12 code coverage: enabled
2025/08/29 12:36:12 comparison tracing: enabled
2025/08/29 12:36:12 extra coverage: enabled
2025/08/29 12:36:12 setuid sandbox: enabled
2025/08/29 12:36:12 namespace sandbox: enabled
2025/08/29 12:36:12 Android sandbox: enabled
2025/08/29 12:36:12 fault injection: enabled
2025/08/29 12:36:12 leak checking: enabled
2025/08/29 12:36:12 net packet injection: enabled
2025/08/29 12:36:12 net device setup: enabled
2025/08/29 12:36:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/29 12:36:12 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/29 12:36:12 USB emulation: enabled
2025/08/29 12:36:12 hci packet injection: enabled
2025/08/29 12:36:12 wifi device emulation: enabled
2025/08/29 12:36:12 802.15.4 emulation: enabled
2025/08/29 12:36:12 fetching corpus: 0, signal 0/2000 (executing program)
2025/08/29 12:36:12 fetching corpus: 50, signal 22060/25608 (executing program)
2025/08/29 12:36:12 fetching corpus: 100, signal 36326/41165 (executing program)
2025/08/29 12:36:12 fetching corpus: 150, signal 44182/50328 (executing program)
2025/08/29 12:36:13 fetching corpus: 200, signal 49172/56627 (executing program)
2025/08/29 12:36:13 fetching corpus: 250, signal 53444/62111 (executing program)
2025/08/29 12:36:13 fetching corpus: 300, signal 57225/67064 (executing program)
2025/08/29 12:36:13 fetching corpus: 350, signal 59902/70905 (executing program)
2025/08/29 12:36:13 fetching corpus: 400, signal 64220/76198 (executing program)
2025/08/29 12:36:13 fetching corpus: 450, signal 68358/81281 (executing program)
2025/08/29 12:36:13 fetching corpus: 500, signal 72046/85822 (executing program)
2025/08/29 12:36:13 fetching corpus: 550, signal 74693/89375 (executing program)
2025/08/29 12:36:13 fetching corpus: 600, signal 76700/92340 (executing program)
2025/08/29 12:36:13 fetching corpus: 650, signal 79242/95848 (executing program)
2025/08/29 12:36:13 fetching corpus: 700, signal 81569/99034 (executing program)
2025/08/29 12:36:13 fetching corpus: 750, signal 83888/102162 (executing program)
2025/08/29 12:36:14 fetching corpus: 800, signal 85238/104416 (executing program)
2025/08/29 12:36:14 fetching corpus: 850, signal 87560/107462 (executing program)
2025/08/29 12:36:14 fetching corpus: 900, signal 90177/110701 (executing program)
2025/08/29 12:36:14 fetching corpus: 950, signal 91835/113111 (executing program)
2025/08/29 12:36:14 fetching corpus: 1000, signal 94172/116054 (executing program)
2025/08/29 12:36:14 fetching corpus: 1050, signal 95640/118237 (executing program)
2025/08/29 12:36:14 fetching corpus: 1100, signal 97558/120739 (executing program)
2025/08/29 12:36:14 fetching corpus: 1150, signal 98830/122753 (executing program)
2025/08/29 12:36:14 fetching corpus: 1200, signal 100070/124680 (executing program)
2025/08/29 12:36:14 fetching corpus: 1250, signal 102135/127195 (executing program)
2025/08/29 12:36:15 fetching corpus: 1300, signal 103520/129145 (executing program)
2025/08/29 12:36:15 fetching corpus: 1350, signal 105003/131242 (executing program)
2025/08/29 12:36:15 fetching corpus: 1400, signal 108260/134520 (executing program)
2025/08/29 12:36:15 fetching corpus: 1450, signal 109184/136056 (executing program)
2025/08/29 12:36:15 fetching corpus: 1500, signal 110249/137674 (executing program)
2025/08/29 12:36:15 fetching corpus: 1550, signal 111133/139097 (executing program)
2025/08/29 12:36:15 fetching corpus: 1600, signal 113102/141324 (executing program)
2025/08/29 12:36:15 fetching corpus: 1650, signal 114427/143099 (executing program)
2025/08/29 12:36:15 fetching corpus: 1700, signal 116109/145037 (executing program)
2025/08/29 12:36:15 fetching corpus: 1750, signal 117204/146524 (executing program)
2025/08/29 12:36:16 fetching corpus: 1800, signal 118040/147827 (executing program)
2025/08/29 12:36:16 fetching corpus: 1850, signal 119355/149511 (executing program)
2025/08/29 12:36:16 fetching corpus: 1900, signal 120293/150875 (executing program)
2025/08/29 12:36:16 fetching corpus: 1950, signal 121631/152450 (executing program)
2025/08/29 12:36:16 fetching corpus: 2000, signal 122749/153852 (executing program)
2025/08/29 12:36:16 fetching corpus: 2050, signal 124509/155612 (executing program)
2025/08/29 12:36:16 fetching corpus: 2100, signal 125362/156823 (executing program)
2025/08/29 12:36:16 fetching corpus: 2150, signal 126611/158208 (executing program)
2025/08/29 12:36:16 fetching corpus: 2200, signal 127788/159573 (executing program)
2025/08/29 12:36:16 fetching corpus: 2250, signal 128770/160779 (executing program)
2025/08/29 12:36:16 fetching corpus: 2300, signal 130161/162196 (executing program)
2025/08/29 12:36:17 fetching corpus: 2350, signal 131568/163650 (executing program)
2025/08/29 12:36:17 fetching corpus: 2400, signal 132193/164660 (executing program)
2025/08/29 12:36:17 fetching corpus: 2450, signal 133030/165764 (executing program)
2025/08/29 12:36:17 fetching corpus: 2500, signal 133557/166705 (executing program)
2025/08/29 12:36:17 fetching corpus: 2550, signal 134329/167717 (executing program)
2025/08/29 12:36:17 fetching corpus: 2600, signal 134990/168686 (executing program)
2025/08/29 12:36:17 fetching corpus: 2650, signal 135530/169569 (executing program)
2025/08/29 12:36:17 fetching corpus: 2700, signal 136412/170578 (executing program)
2025/08/29 12:36:17 fetching corpus: 2750, signal 137311/171588 (executing program)
2025/08/29 12:36:17 fetching corpus: 2800, signal 137861/172475 (executing program)
2025/08/29 12:36:17 fetching corpus: 2850, signal 138426/173306 (executing program)
2025/08/29 12:36:18 fetching corpus: 2900, signal 139314/174285 (executing program)
2025/08/29 12:36:18 fetching corpus: 2950, signal 139917/175128 (executing program)
2025/08/29 12:36:18 fetching corpus: 3000, signal 140806/176072 (executing program)
2025/08/29 12:36:18 fetching corpus: 3050, signal 141320/176845 (executing program)
2025/08/29 12:36:18 fetching corpus: 3100, signal 142367/177806 (executing program)
2025/08/29 12:36:18 fetching corpus: 3150, signal 143050/178604 (executing program)
2025/08/29 12:36:18 fetching corpus: 3200, signal 143758/179405 (executing program)
2025/08/29 12:36:18 fetching corpus: 3250, signal 144372/180158 (executing program)
2025/08/29 12:36:18 fetching corpus: 3300, signal 144887/180898 (executing program)
2025/08/29 12:36:18 fetching corpus: 3350, signal 145552/181702 (executing program)
2025/08/29 12:36:18 fetching corpus: 3400, signal 146123/182385 (executing program)
2025/08/29 12:36:18 fetching corpus: 3450, signal 146877/183133 (executing program)
2025/08/29 12:36:18 fetching corpus: 3500, signal 147402/183834 (executing program)
2025/08/29 12:36:19 fetching corpus: 3550, signal 147772/184457 (executing program)
2025/08/29 12:36:19 fetching corpus: 3600, signal 148442/185199 (executing program)
2025/08/29 12:36:19 fetching corpus: 3650, signal 148936/185811 (executing program)
2025/08/29 12:36:19 fetching corpus: 3700, signal 149347/186427 (executing program)
2025/08/29 12:36:19 fetching corpus: 3750, signal 150012/187060 (executing program)
2025/08/29 12:36:19 fetching corpus: 3800, signal 150654/187724 (executing program)
2025/08/29 12:36:19 fetching corpus: 3850, signal 151063/188334 (executing program)
2025/08/29 12:36:19 fetching corpus: 3900, signal 151613/188901 (executing program)
2025/08/29 12:36:19 fetching corpus: 3950, signal 152265/189479 (executing program)
2025/08/29 12:36:19 fetching corpus: 4000, signal 152782/190084 (executing program)
2025/08/29 12:36:19 fetching corpus: 4050, signal 153190/190617 (executing program)
2025/08/29 12:36:19 fetching corpus: 4100, signal 153703/191191 (executing program)
2025/08/29 12:36:20 fetching corpus: 4150, signal 154280/191708 (executing program)
2025/08/29 12:36:20 fetching corpus: 4200, signal 154702/192195 (executing program)
2025/08/29 12:36:20 fetching corpus: 4250, signal 155170/192642 (executing program)
2025/08/29 12:36:20 fetching corpus: 4300, signal 155583/193131 (executing program)
2025/08/29 12:36:20 fetching corpus: 4350, signal 156008/193633 (executing program)
2025/08/29 12:36:20 fetching corpus: 4400, signal 156440/194095 (executing program)
2025/08/29 12:36:20 fetching corpus: 4450, signal 156839/194546 (executing program)
2025/08/29 12:36:20 fetching corpus: 4500, signal 157490/195013 (executing program)
2025/08/29 12:36:20 fetching corpus: 4550, signal 158092/195443 (executing program)
2025/08/29 12:36:20 fetching corpus: 4600, signal 158491/195890 (executing program)
2025/08/29 12:36:20 fetching corpus: 4650, signal 159006/196326 (executing program)
2025/08/29 12:36:20 fetching corpus: 4700, signal 159493/196753 (executing program)
2025/08/29 12:36:21 fetching corpus: 4750, signal 159878/197143 (executing program)
2025/08/29 12:36:21 fetching corpus: 4800, signal 160429/197171 (executing program)
2025/08/29 12:36:21 fetching corpus: 4850, signal 160831/197193 (executing program)
2025/08/29 12:36:21 fetching corpus: 4900, signal 161674/197260 (executing program)
2025/08/29 12:36:21 fetching corpus: 4950, signal 162227/197273 (executing program)
2025/08/29 12:36:21 fetching corpus: 5000, signal 162853/197275 (executing program)
2025/08/29 12:36:21 fetching corpus: 5050, signal 163162/197288 (executing program)
2025/08/29 12:36:21 fetching corpus: 5100, signal 163793/197295 (executing program)
2025/08/29 12:36:21 fetching corpus: 5150, signal 164371/197299 (executing program)
2025/08/29 12:36:21 fetching corpus: 5200, signal 164770/197302 (executing program)
2025/08/29 12:36:21 fetching corpus: 5250, signal 164983/197309 (executing program)
2025/08/29 12:36:22 fetching corpus: 5300, signal 165577/197336 (executing program)
2025/08/29 12:36:22 fetching corpus: 5350, signal 166124/197344 (executing program)
2025/08/29 12:36:22 fetching corpus: 5400, signal 166712/197361 (executing program)
2025/08/29 12:36:22 fetching corpus: 5450, signal 167136/197370 (executing program)
2025/08/29 12:36:22 fetching corpus: 5500, signal 167964/197370 (executing program)
2025/08/29 12:36:22 fetching corpus: 5550, signal 168454/197459 (executing program)
2025/08/29 12:36:22 fetching corpus: 5600, signal 168998/197467 (executing program)
2025/08/29 12:36:22 fetching corpus: 5650, signal 169447/197481 (executing program)
2025/08/29 12:36:22 fetching corpus: 5700, signal 169916/197543 (executing program)
2025/08/29 12:36:22 fetching corpus: 5750, signal 170226/197545 (executing program)
2025/08/29 12:36:23 fetching corpus: 5800, signal 170454/197547 (executing program)
2025/08/29 12:36:23 fetching corpus: 5850, signal 170879/197637 (executing program)
2025/08/29 12:36:23 fetching corpus: 5900, signal 171190/197638 (executing program)
2025/08/29 12:36:23 fetching corpus: 5950, signal 171637/197758 (executing program)
2025/08/29 12:36:23 fetching corpus: 6000, signal 171971/197771 (executing program)
2025/08/29 12:36:23 fetching corpus: 6050, signal 172420/197779 (executing program)
2025/08/29 12:36:23 fetching corpus: 6100, signal 173048/197788 (executing program)
2025/08/29 12:36:23 fetching corpus: 6150, signal 174202/197802 (executing program)
2025/08/29 12:36:23 fetching corpus: 6200, signal 174497/197832 (executing program)
2025/08/29 12:36:23 fetching corpus: 6250, signal 174779/197834 (executing program)
2025/08/29 12:36:23 fetching corpus: 6300, signal 175133/197838 (executing program)
2025/08/29 12:36:23 fetching corpus: 6350, signal 175502/197849 (executing program)
2025/08/29 12:36:23 fetching corpus: 6400, signal 175840/197864 (executing program)
2025/08/29 12:36:24 fetching corpus: 6450, signal 176104/197892 (executing program)
2025/08/29 12:36:24 fetching corpus: 6500, signal 176483/197913 (executing program)
2025/08/29 12:36:24 fetching corpus: 6550, signal 176807/197914 (executing program)
2025/08/29 12:36:24 fetching corpus: 6600, signal 177235/197919 (executing program)
2025/08/29 12:36:24 fetching corpus: 6650, signal 177512/197942 (executing program)
2025/08/29 12:36:24 fetching corpus: 6700, signal 177985/197946 (executing program)
2025/08/29 12:36:24 fetching corpus: 6750, signal 178379/197961 (executing program)
2025/08/29 12:36:24 fetching corpus: 6800, signal 178655/197970 (executing program)
2025/08/29 12:36:24 fetching corpus: 6850, signal 178970/197971 (executing program)
2025/08/29 12:36:25 fetching corpus: 6900, signal 179413/197989 (executing program)
2025/08/29 12:36:25 fetching corpus: 6950, signal 179850/197998 (executing program)
2025/08/29 12:36:25 fetching corpus: 7000, signal 180246/198005 (executing program)
2025/08/29 12:36:25 fetching corpus: 7050, signal 180579/198009 (executing program)
2025/08/29 12:36:25 fetching corpus: 7100, signal 180933/198010 (executing program)
2025/08/29 12:36:25 fetching corpus: 7150, signal 181237/198010 (executing program)
2025/08/29 12:36:25 fetching corpus: 7200, signal 181516/198010 (executing program)
2025/08/29 12:36:25 fetching corpus: 7250, signal 181818/198013 (executing program)
2025/08/29 12:36:25 fetching corpus: 7300, signal 182175/198034 (executing program)
2025/08/29 12:36:25 fetching corpus: 7350, signal 182478/198046 (executing program)
2025/08/29 12:36:25 fetching corpus: 7400, signal 182701/198062 (executing program)
2025/08/29 12:36:25 fetching corpus: 7450, signal 183295/198064 (executing program)
2025/08/29 12:36:26 fetching corpus: 7500, signal 183508/198066 (executing program)
2025/08/29 12:36:26 fetching corpus: 7550, signal 183743/198072 (executing program)
2025/08/29 12:36:26 fetching corpus: 7600, signal 183982/198108 (executing program)
2025/08/29 12:36:26 fetching corpus: 7650, signal 184255/198109 (executing program)
2025/08/29 12:36:26 fetching corpus: 7700, signal 184533/198110 (executing program)
2025/08/29 12:36:26 fetching corpus: 7750, signal 184792/198119 (executing program)
2025/08/29 12:36:26 fetching corpus: 7800, signal 185233/198132 (executing program)
2025/08/29 12:36:26 fetching corpus: 7850, signal 185477/198133 (executing program)
2025/08/29 12:36:26 fetching corpus: 7900, signal 185663/198140 (executing program)
2025/08/29 12:36:26 fetching corpus: 7950, signal 185972/198142 (executing program)
2025/08/29 12:36:26 fetching corpus: 8000, signal 186125/198151 (executing program)
2025/08/29 12:36:27 fetching corpus: 8050, signal 186539/198160 (executing program)
2025/08/29 12:36:27 fetching corpus: 8100, signal 186794/198176 (executing program)
2025/08/29 12:36:27 fetching corpus: 8150, signal 187086/198177 (executing program)
2025/08/29 12:36:27 fetching corpus: 8200, signal 187388/198180 (executing program)
2025/08/29 12:36:27 fetching corpus: 8250, signal 187595/198185 (executing program)
2025/08/29 12:36:27 fetching corpus: 8300, signal 187808/198191 (executing program)
2025/08/29 12:36:27 fetching corpus: 8350, signal 188021/198200 (executing program)
2025/08/29 12:36:27 fetching corpus: 8400, signal 188267/198202 (executing program)
2025/08/29 12:36:27 fetching corpus: 8450, signal 188648/198202 (executing program)
2025/08/29 12:36:28 fetching corpus: 8500, signal 188893/198203 (executing program)
2025/08/29 12:36:28 fetching corpus: 8550, signal 189190/198232 (executing program)
2025/08/29 12:36:28 fetching corpus: 8600, signal 189384/198237 (executing program)
2025/08/29 12:36:28 fetching corpus: 8650, signal 189687/198259 (executing program)
2025/08/29 12:36:28 fetching corpus: 8700, signal 189969/198270 (executing program)
2025/08/29 12:36:28 fetching corpus: 8750, signal 190180/198272 (executing program)
2025/08/29 12:36:28 fetching corpus: 8800, signal 190466/198297 (executing program)
2025/08/29 12:36:28 fetching corpus: 8850, signal 190751/198304 (executing program)
2025/08/29 12:36:28 fetching corpus: 8900, signal 190999/198308 (executing program)
2025/08/29 12:36:28 fetching corpus: 8950, signal 191215/198314 (executing program)
2025/08/29 12:36:28 fetching corpus: 9000, signal 191378/198323 (executing program)
2025/08/29 12:36:29 fetching corpus: 9050, signal 191601/198327 (executing program)
2025/08/29 12:36:29 fetching corpus: 9100, signal 191870/198327 (executing program)
2025/08/29 12:36:29 fetching corpus: 9150, signal 192153/198342 (executing program)
2025/08/29 12:36:29 fetching corpus: 9200, signal 192354/198346 (executing program)
2025/08/29 12:36:29 fetching corpus: 9250, signal 192586/198360 (executing program)
2025/08/29 12:36:29 fetching corpus: 9300, signal 192805/198371 (executing program)
2025/08/29 12:36:29 fetching corpus: 9350, signal 192959/198386 (executing program)
2025/08/29 12:36:29 fetching corpus: 9400, signal 193173/198389 (executing program)
2025/08/29 12:36:29 fetching corpus: 9450, signal 193383/198389 (executing program)
2025/08/29 12:36:29 fetching corpus: 9500, signal 193547/198400 (executing program)
2025/08/29 12:36:29 fetching corpus: 9550, signal 193832/198447 (executing program)
2025/08/29 12:36:29 fetching corpus: 9600, signal 194130/198452 (executing program)
2025/08/29 12:36:30 fetching corpus: 9650, signal 194330/198459 (executing program)
2025/08/29 12:36:30 fetching corpus: 9694, signal 194587/198459 (executing program)
2025/08/29 12:36:30 fetching corpus: 9694, signal 194587/198459 (executing program)
2025/08/29 12:36:32 starting 8 fuzzer processes
12:36:32 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCOUTQ(r0, 0x5411, 0xfffffffffffffffe)
12:36:32 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x50, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x50}}, 0x0)
12:36:32 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448cb, 0x0)
12:36:32 executing program 2:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000680)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="5b0509000000", 0x0, 0x9, 0x0, 0x0, 0x0})
12:36:32 executing program 3:
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='.\x00')
12:36:32 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x2)
ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/131)
12:36:32 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
read(r0, &(0x7f0000000480)=""/4096, 0x1000)
[ 87.275144] audit: type=1400 audit(1756470992.608:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
12:36:32 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSSOFTCAR(r0, 0x80111500, &(0x7f0000000140))
[ 88.450282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 88.454463] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 88.456414] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 88.459446] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 88.461390] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 88.463666] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 88.467664] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 88.472988] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 88.473431] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 88.482015] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 88.526165] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 88.528100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 88.533115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 88.535604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 88.536005] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 88.538998] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 88.539446] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 88.542530] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 88.544539] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 88.544751] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 88.548612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 88.553828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 88.558664] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 88.560033] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 88.563004] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 88.589570] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 88.590963] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 88.601756] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 88.611533] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 88.612732] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 88.614545] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 88.617136] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 88.618749] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 88.623162] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 88.627102] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 88.631541] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 88.633457] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 88.637680] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 88.639465] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 88.670453] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 90.540853] Bluetooth: hci1: command tx timeout
[ 90.540859] Bluetooth: hci0: command tx timeout
[ 90.604317] Bluetooth: hci2: command tx timeout
[ 90.604889] Bluetooth: hci3: command tx timeout
[ 90.668616] Bluetooth: hci4: command tx timeout
[ 90.732355] Bluetooth: hci7: command tx timeout
[ 90.732497] Bluetooth: hci5: command tx timeout
[ 90.733060] Bluetooth: hci6: command tx timeout
[ 92.588279] Bluetooth: hci1: command tx timeout
[ 92.588729] Bluetooth: hci0: command tx timeout
[ 92.652386] Bluetooth: hci2: command tx timeout
[ 92.652773] Bluetooth: hci3: command tx timeout
[ 92.716260] Bluetooth: hci4: command tx timeout
[ 92.780263] Bluetooth: hci6: command tx timeout
[ 92.780684] Bluetooth: hci5: command tx timeout
[ 92.780705] Bluetooth: hci7: command tx timeout
[ 94.637333] Bluetooth: hci1: command tx timeout
[ 94.638285] Bluetooth: hci0: command tx timeout
[ 94.701360] Bluetooth: hci3: command tx timeout
[ 94.701776] Bluetooth: hci2: command tx timeout
[ 94.765566] Bluetooth: hci4: command tx timeout
[ 94.828468] Bluetooth: hci7: command tx timeout
[ 94.829340] Bluetooth: hci6: command tx timeout
[ 94.829380] Bluetooth: hci5: command tx timeout
[ 96.684411] Bluetooth: hci1: command tx timeout
[ 96.685239] Bluetooth: hci0: command tx timeout
[ 96.749311] Bluetooth: hci2: command tx timeout
[ 96.749447] Bluetooth: hci3: command tx timeout
[ 96.812339] Bluetooth: hci4: command tx timeout
[ 96.876369] Bluetooth: hci5: command tx timeout
[ 96.877342] Bluetooth: hci6: command tx timeout
[ 96.877710] Bluetooth: hci7: command tx timeout
[ 125.810609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.812204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 125.930372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.931001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 126.152174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 126.152889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 126.189962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 126.190750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 126.310548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 126.311833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 126.468221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 126.468864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 126.551745] audit: type=1400 audit(1756471031.881:8): avc: denied { open } for pid=3808 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 126.567632] audit: type=1400 audit(1756471031.882:9): avc: denied { kernel } for pid=3808 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 127.106413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.107060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.186698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.187330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.457829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.458974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.537065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.537729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.708858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.710062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.736715] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 127.768583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.769165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.818926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.819625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.894454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.895052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.918710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.919448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 128.027885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 128.029301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 128.041377] netlink: 'syz-executor.7': attribute type 1 has an invalid length.
[ 128.042848] netlink: 'syz-executor.7': attribute type 1 has an invalid length.
[ 128.230291] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 128.231883] sr 1:0:0:0: [sr0] tag#0 CDB: Close track/session 5b 05 09 00 00 00
12:37:13 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x50, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x50}}, 0x0)
12:37:13 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0))
io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000040)=[r0, 0xffffffffffffffff], 0x2)
12:37:13 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448cb, 0x0)
12:37:13 executing program 5:
clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
clone3(&(0x7f0000000900)={0x4022500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0x0], 0x1}, 0x58)
12:37:13 executing program 3:
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='.\x00')
12:37:13 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00')
lseek(r0, 0xffffffff00000001, 0x0)
12:37:13 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
read(r0, &(0x7f0000000800)=""/4096, 0x1000)
12:37:13 executing program 2:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000680)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="5b0509000000", 0x0, 0x9, 0x0, 0x0, 0x0})
[ 128.367089] netlink: 'syz-executor.7': attribute type 1 has an invalid length.
[ 128.379372] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 128.380235] sr 1:0:0:0: [sr0] tag#0 CDB: Close track/session 5b 05 09 00 00 00
12:37:13 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
pread64(r0, &(0x7f0000000000)=""/64, 0x40, 0x6)
12:37:13 executing program 3:
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='.\x00')
12:37:13 executing program 6:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
12:37:13 executing program 2:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000680)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="5b0509000000", 0x0, 0x9, 0x0, 0x0, 0x0})
12:37:13 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x50, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x50}}, 0x0)
[ 128.532347] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 128.533171] sr 1:0:0:0: [sr0] tag#0 CDB: Close track/session 5b 05 09 00 00 00
[ 128.568738] netlink: 'syz-executor.7': attribute type 1 has an invalid length.
[ 129.189795] Bluetooth: hci0: Opcode 0x0c03 failed: -4
12:37:14 executing program 3:
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='.\x00')
12:37:14 executing program 4:
clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
clone3(&(0x7f0000000900)={0x4022500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0x0], 0x1}, 0x58)
12:37:14 executing program 2:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000680)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="5b0509000000", 0x0, 0x9, 0x0, 0x0, 0x0})
12:37:14 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
pread64(r0, &(0x7f0000000000)=""/64, 0x40, 0x6)
12:37:14 executing program 5:
clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
clone3(&(0x7f0000000900)={0x4022500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0x0], 0x1}, 0x58)
12:37:14 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448cb, 0x0)
12:37:14 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x50, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x50}}, 0x0)
12:37:14 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000040)=0x5, 0x5db)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{}]})
[ 129.349369] netlink: 'syz-executor.7': attribute type 1 has an invalid length.
[ 129.382654] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 129.384278] sr 1:0:0:0: [sr0] tag#0 CDB: Close track/session 5b 05 09 00 00 00
12:37:14 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x4c, &(0x7f00000002c0)={0x0, 0x0}, 0x10)
12:37:14 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
pread64(r0, &(0x7f0000000000)=""/64, 0x40, 0x6)
12:37:14 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000040)=0x5, 0x5db)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{}]})
12:37:14 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000040)=0x5, 0x5db)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{}]})
12:37:14 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x18, 0x0, 0x1, 0x105, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x802}, 0x0)
12:37:14 executing program 5:
clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
clone3(&(0x7f0000000900)={0x4022500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0x0], 0x1}, 0x58)
12:37:14 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x4c, &(0x7f00000002c0)={0x0, 0x0}, 0x10)
[ 129.593659] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI
[ 129.594531] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 129.595107] CPU: 0 UID: 0 PID: 3956 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 129.596542] Tainted: [W]=WARN
[ 129.597167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 129.599995] RIP: 0010:perf_tp_event+0x175/0xe70
[ 129.601369] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 129.603554] RSP: 0018:ffff888048237800 EFLAGS: 00010212
[ 129.603980] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 129.604541] RDX: ffff888019d19b80 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 129.605104] RBP: ffff888048237a70 R08: ffff88806ce31340 R09: ffffe8ffffc11b80
[ 129.605682] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 129.606238] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[ 129.606806] FS: 000055558ae9a400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 129.607434] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 129.607887] CR2: 000055558ae9bc18 CR3: 0000000044e0b000 CR4: 0000000000350ef0
[ 129.608444] Call Trace:
[ 129.608649]
[ 129.608841] ? arch_scale_cpu_capacity+0x17/0xa0
[ 129.609228] ? __pfx_perf_tp_event+0x10/0x10
[ 129.609593] ? __asan_memset+0x24/0x50
[ 129.609918] ? perf_trace_lock+0xb5/0x5d0
[ 129.610253] ? kvm_sched_clock_read+0x16/0x30
[ 129.610616] ? sched_clock+0x37/0x60
[ 129.610917] ? sched_clock_cpu+0x6c/0x4e0
[ 129.611250] ? lock_is_held_type+0x9e/0x120
[ 129.611606] ? perf_trace_run_bpf_submit+0xef/0x180
[ 129.611999] perf_trace_run_bpf_submit+0xef/0x180
[ 129.612391] perf_trace_lock+0x337/0x5d0
[ 129.612726] ? __pfx_perf_trace_lock+0x10/0x10
[ 129.613098] ? lock_acquire+0x15e/0x2f0
[ 129.613418] ? futex_ref_get+0x48/0x300
[ 129.613742] ? futex_ref_get+0x114/0x300
[ 129.614062] ? futex_hash+0x15c/0x390
[ 129.614365] lock_release+0x1ab/0x290
[ 129.614671] ? futex_hash+0x15c/0x390
[ 129.614980] futex_ref_get+0x119/0x300
[ 129.615290] ? futex_hash+0x15c/0x390
[ 129.615588] futex_hash+0x70/0x390
[ 129.615873] futex_wake+0x143/0x540
[ 129.616168] ? put_pid+0x1f/0x30
[ 129.616441] ? kernel_clone+0x204/0x7f0
[ 129.616757] ? __pfx_futex_wake+0x10/0x10
[ 129.617089] ? __pfx_kernel_clone+0x10/0x10
[ 129.617442] ? perf_trace_lock+0xb5/0x5d0
[ 129.617788] do_futex+0x26d/0x370
[ 129.618079] ? __pfx_do_futex+0x10/0x10
[ 129.618401] ? __pfx___do_sys_clone+0x10/0x10
[ 129.618761] ? find_held_lock+0x2b/0x80
[ 129.619081] __x64_sys_futex+0x1c9/0x4d0
[ 129.619409] ? __pfx___x64_sys_futex+0x10/0x10
[ 129.619779] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 129.620195] do_syscall_64+0xbf/0x360
[ 129.620498] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 129.620907] RIP: 0033:0x7f056f624b19
[ 129.621203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 129.622644] RSP: 002b:00007ffe852b7b68 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 129.623244] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f056f624b19
[ 129.623804] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f056f737f68
[ 129.624365] RBP: 00007f056f737f60 R08: 00007f056cb9a700 R09: 0000000000000000
[ 129.624932] R10: 00007f056cb9a700 R11: 0000000000000246 R12: 00007f056f73c200
[ 129.625495] R13: 00007ffe852b7c70 R14: 00007f056f737f60 R15: 000000000001f9c7
[ 129.626070]
[ 129.626262] Modules linked in:
[ 129.626591] ---[ end trace 0000000000000000 ]---
[ 129.626968] RIP: 0010:perf_tp_event+0x175/0xe70
[ 129.627439] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 129.628881] RSP: 0018:ffff888048237800 EFLAGS: 00010212
[ 129.629315] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 129.629878] RDX: ffff888019d19b80 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 129.630456] RBP: ffff888048237a70 R08: ffff88806ce31340 R09: ffffe8ffffc11b80
[ 129.631015] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 129.631593] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[ 129.632150] FS: 000055558ae9a400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 129.632792] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 129.633261] CR2: 000055558ae9bc18 CR3: 0000000044e0b000 CR4: 0000000000350ef0
[ 129.633834] note: syz-executor.5[3956] exited with preempt_count 1
[ 129.634346] BUG: sleeping function called from invalid context at ./include/linux/percpu-rwsem.h:51
[ 129.635050] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 3956, name: syz-executor.5
[ 129.635724] preempt_count: 0, expected: 0
[ 129.636054] RCU nest depth: 2, expected: 0
[ 129.636407] INFO: lockdep is turned off.
[ 129.636725] CPU: 0 UID: 0 PID: 3956 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 129.636742] Tainted: [D]=DIE, [W]=WARN
[ 129.636746] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 129.636752] Call Trace:
[ 129.636756]
[ 129.636760] dump_stack_lvl+0xfa/0x120
[ 129.636778] __might_resched+0x2f3/0x510
[ 129.636792] exit_signals+0x25/0x940
[ 129.636810] do_exit+0x2db/0x2970
[ 129.636824] ? _printk+0xbe/0xf0
[ 129.636836] ? __pfx__printk+0x10/0x10
[ 129.636850] ? __pfx_do_exit+0x10/0x10
[ 129.636867] make_task_dead+0x174/0x3b0
[ 129.636881] ? do_syscall_64+0xbf/0x360
[ 129.636893] rewind_stack_and_make_dead+0x16/0x20
[ 129.636908] RIP: 0033:0x7f056f624b19
[ 129.636916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 129.636926] RSP: 002b:00007ffe852b7b68 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 129.636937] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f056f624b19
[ 129.636944] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f056f737f68
[ 129.636951] RBP: 00007f056f737f60 R08: 00007f056cb9a700 R09: 0000000000000000
[ 129.636957] R10: 00007f056cb9a700 R11: 0000000000000246 R12: 00007f056f73c200
[ 129.636964] R13: 00007ffe852b7c70 R14: 00007f056f737f60 R15: 000000000001f9c7
[ 129.636977]
12:37:14 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
pread64(r0, &(0x7f0000000000)=""/64, 0x40, 0x6)
[ 129.691875] kmemleak: Found object by alias at 0x607f1a634b84
[ 129.691902] CPU: 1 UID: 0 PID: 3938 Comm: syz-executor.4 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 129.691942] Tainted: [D]=DIE, [W]=WARN
[ 129.691949] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 129.691961] Call Trace:
[ 129.691967]
[ 129.691975] dump_stack_lvl+0xca/0x120
[ 129.692014] __lookup_object+0x94/0xb0
[ 129.692040] delete_object_full+0x27/0x70
[ 129.692066] free_percpu+0x30/0x1160
[ 129.692093] ? arch_uprobe_clear_state+0x16/0x140
[ 129.692122] futex_hash_free+0x38/0xc0
[ 129.692144] mmput+0x2d3/0x390
[ 129.692174] do_exit+0x79d/0x2970
[ 129.692196] ? signal_wake_up_state+0x85/0x120
[ 129.692221] ? zap_other_threads+0x2b9/0x3a0
[ 129.692246] ? __pfx_do_exit+0x10/0x10
[ 129.692268] ? lock_release+0x1c7/0x290
[ 129.692293] do_group_exit+0xd3/0x2a0
[ 129.692316] __x64_sys_exit_group+0x3e/0x50
[ 129.692339] x64_sys_call+0x18c5/0x18d0
[ 129.692364] do_syscall_64+0xbf/0x360
[ 129.692382] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 129.692401] RIP: 0033:0x7fb600712b19
[ 129.692415] Code: Unable to access opcode bytes at 0x7fb600712aef.
[ 129.692424] RSP: 002b:00007ffe6b24f708 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 129.692442] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fb600712b19
[ 129.692455] RDX: 00007fb6006c572b RSI: ffffffffffffffbc RDI: 0000000000000000
[ 129.692467] RBP: 0000000000000000 R08: 0000001b2cf22de0 R09: 0000000000000000
[ 129.692479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 129.692490] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe6b24f7f0
[ 129.692508]
[ 129.692514] kmemleak: Object (percpu) 0x607f1a634b80 (size 8):
[ 129.692525] kmemleak: comm "syz-executor.2", pid 3957, jiffies 4294796429
[ 129.692537] kmemleak: min_count = 1
[ 129.692543] kmemleak: count = 0
[ 129.692550] kmemleak: flags = 0x21
[ 129.692556] kmemleak: checksum = 0
[ 129.692562] kmemleak: backtrace:
[ 129.692567] pcpu_alloc_noprof+0x87a/0x1170
[ 129.692593] perf_trace_event_init+0x366/0xa10
[ 129.692616] perf_trace_init+0x1a4/0x2f0
[ 129.692635] perf_tp_event_init+0xa6/0x120
[ 129.692661] perf_try_init_event+0x140/0x9f0
[ 129.692684] perf_event_alloc.part.0+0x118e/0x45f0
[ 129.692711] __do_sys_perf_event_open+0x719/0x2c20
[ 129.692732] do_syscall_64+0xbf/0x360
[ 129.692747] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.170308] Bluetooth: hci0: Opcode 0x0c03 failed: -4
12:37:17 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000040)=0x5, 0x5db)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{}]})
12:37:17 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCFLSH(r0, 0x5605, 0x0)
12:37:17 executing program 4:
clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
clone3(&(0x7f0000000900)={0x4022500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0x0], 0x1}, 0x58)
12:37:17 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000040)=0x5, 0x5db)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{}]})
12:37:17 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x4c, &(0x7f00000002c0)={0x0, 0x0}, 0x10)
12:37:17 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x18, 0x0, 0x1, 0x105, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x802}, 0x0)
12:37:17 executing program 5:
clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
clone3(&(0x7f0000000900)={0x4022500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0x0], 0x1}, 0x58)
12:37:17 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448cb, 0x0)
12:37:17 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x18, 0x0, 0x1, 0x105, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x802}, 0x0)
[ 132.653850] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI
[ 132.655487] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 132.656557] CPU: 1 UID: 0 PID: 3981 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 132.658269] Tainted: [D]=DIE, [W]=WARN
[ 132.658814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 132.659975] RIP: 0010:perf_tp_event+0x175/0xe70
[ 132.660662] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 132.663235] RSP: 0018:ffff8880462bf780 EFLAGS: 00010012
[ 132.663990] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 132.665003] RDX: ffff888046629b80 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 132.666036] RBP: ffff8880462bf9f0 R08: ffff88806cf31340 R09: ffffe8ffffd11b80
[ 132.667038] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[ 132.668048] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000
[ 132.669057] FS: 000055558ae9a400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[ 132.670213] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 132.671035] CR2: 000055558ae9bc18 CR3: 0000000044ddf000 CR4: 0000000000350ef0
[ 132.672037] Call Trace:
[ 132.672409]
[ 132.672744] ? __pfx_perf_tp_event+0x10/0x10
[ 132.673385] ? __mutex_trylock_common+0xf9/0x260
[ 132.674116] ? arch_scale_cpu_capacity+0x17/0xa0
[ 132.674813] ? cpu_util.constprop.0+0x17d/0x340
[ 132.675495] ? __asan_memset+0x24/0x50
[ 132.676065] ? sched_balance_find_dst_group+0xa9a/0x1c00
[ 132.676838] ? lock_release+0x1c7/0x290
[ 132.677412] ? __pfx___mutex_lock+0x10/0x10
[ 132.678071] ? __pfx_sched_balance_find_dst_group+0x10/0x10
[ 132.678872] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 132.679633] ? perf_trace_run_bpf_submit+0xef/0x180
[ 132.680352] ? sched_clock+0x37/0x60
[ 132.680905] ? sched_clock_cpu+0x6c/0x4e0
[ 132.681503] perf_trace_run_bpf_submit+0xef/0x180
[ 132.682234] perf_trace_preemptirq_template+0x259/0x430
[ 132.683008] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 132.683847] ? update_load_avg+0x17d/0x1ef0
[ 132.684472] ? check_preempt_wakeup_fair+0x6e/0x950
[ 132.685186] ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 132.685950] trace_irq_enable.constprop.0+0xa6/0x100
[ 132.686677] trace_hardirqs_on+0x26/0x40
[ 132.687256] _raw_spin_unlock_irqrestore+0x2c/0x50
[ 132.687961] try_to_wake_up+0x8ae/0x11d0
[ 132.688556] ? __pfx_try_to_wake_up+0x10/0x10
[ 132.689212] ? plist_del+0x122/0x270
[ 132.689782] ? __futex_unqueue+0xda/0x1c0
[ 132.690385] wake_up_q+0xa1/0x130
[ 132.690894] futex_wake+0x47e/0x540
[ 132.691426] ? __pfx_futex_wake+0x10/0x10
[ 132.692022] ? xfd_validate_state+0x55/0x180
[ 132.692667] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 132.693405] ? finish_task_switch.isra.0+0x206/0x840
[ 132.694171] do_futex+0x26d/0x370
[ 132.694681] ? __pfx_do_futex+0x10/0x10
[ 132.695259] ? __pfx___schedule+0x10/0x10
[ 132.695862] __x64_sys_futex+0x1c9/0x4d0
[ 132.696450] ? __pfx___x64_sys_futex+0x10/0x10
[ 132.697107] ? trace_irq_enable.constprop.0+0x26/0x100
[ 132.697894] do_syscall_64+0xbf/0x360
[ 132.698445] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 132.699189] RIP: 0033:0x7f056f624b19
[ 132.699726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 132.702298] RSP: 002b:00007ffe852b7b68 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 132.703359] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f056f624b19
[ 132.704364] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f056f737f68
[ 132.705361] RBP: 00007f056f737f60 R08: 00007f056cb9a700 R09: 0000000000000000
[ 132.706389] R10: 00007f056cb9a700 R11: 0000000000000246 R12: 00007f056f73c200
[ 132.707390] R13: 00007ffe852b7c70 R14: 00007f056f737f60 R15: 00000000000205bd
[ 132.708401]
[ 132.708740] Modules linked in:
[ 132.709207] ---[ end trace 0000000000000000 ]---
[ 132.709910] RIP: 0010:perf_tp_event+0x175/0xe70
[ 132.710587] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 132.713111] RSP: 0018:ffff888048237800 EFLAGS: 00010212
[ 132.713888] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 132.714897] RDX: ffff888019d19b80 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 132.715934] RBP: ffff888048237a70 R08: ffff88806ce31340 R09: ffffe8ffffc11b80
[ 132.716943] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 132.717996] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[ 132.719020] FS: 000055558ae9a400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[ 132.720157] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 132.720989] CR2: 000055558ae9bc18 CR3: 0000000044ddf000 CR4: 0000000000350ef0
[ 132.722050] note: syz-executor.5[3981] exited with irqs disabled
[ 132.723069] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#3] SMP KASAN NOPTI
[ 132.724686] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 132.725803] CPU: 1 UID: 0 PID: 3981 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 132.727498] Tainted: [D]=DIE, [W]=WARN
[ 132.728054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 132.729224] RIP: 0010:perf_tp_event+0x175/0xe70
[ 132.729945] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 132.732530] RSP: 0018:ffff88806cf08b80 EFLAGS: 00010012
[ 132.733291] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 132.734341] RDX: ffff888046629b80 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 132.735362] RBP: ffff88806cf08df0 R08: ffff88806cf313e8 R09: ffffe8ffffd11b80
[ 132.736375] R10: 0000000000000000 R11: 0000000000155cc0 R12: dffffc0000000000
[ 132.737381] R13: 0000000000000014 R14: ffff88806cf313e8 R15: dffffc0000000000
[ 132.738439] FS: 000055558ae9a400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[ 132.739581] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 132.740421] CR2: 000055558ae9bc18 CR3: 0000000044ddf000 CR4: 0000000000350ef0
[ 132.741437] Call Trace:
[ 132.741853]
[ 132.742182] ? __pfx_perf_tp_event+0x10/0x10
[ 132.742833] ? enqueue_task_fair+0xded/0x1e00
[ 132.743494] ? check_preempt_wakeup_fair+0x6e/0x950
[ 132.744217] ? wakeup_preempt+0x140/0x2a0
[ 132.744815] ? lock_release+0x1c7/0x290
[ 132.745391] ? lock_release+0x1c7/0x290
[ 132.746005] ? do_raw_spin_unlock+0x53/0x220
[ 132.746654] ? _raw_spin_unlock_irqrestore+0x22/0x50
[ 132.747391] ? try_to_wake_up+0x8ae/0x11d0
[ 132.748013] ? do_raw_spin_lock+0x123/0x260
[ 132.748641] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 132.749323] ? perf_trace_run_bpf_submit+0xef/0x180
[ 132.750085] perf_trace_run_bpf_submit+0xef/0x180
[ 132.750794] perf_trace_preemptirq_template+0x259/0x430
[ 132.751571] ? read_tsc+0x9/0x20
[ 132.752086] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 132.752951] ? clockevents_program_event+0x135/0x360
[ 132.753714] ? tick_program_event+0xac/0x140
[ 132.754356] ? handle_softirqs+0x16e/0x770
[ 132.754979] trace_irq_enable.constprop.0+0xa6/0x100
[ 132.755714] trace_hardirqs_on+0x26/0x40
[ 132.756305] handle_softirqs+0x16e/0x770
[ 132.756912] __irq_exit_rcu+0xc4/0x100
[ 132.757489] irq_exit_rcu+0x9/0x20
[ 132.758048] sysvec_apic_timer_interrupt+0x70/0x80
[ 132.758765]
[ 132.759094]
[ 132.759426] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 132.760183] RIP: 0010:make_task_dead+0xa2/0x3b0
[ 132.760858] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de
[ 132.763456] RSP: 0018:ffff8880462bff28 EFLAGS: 00000246
[ 132.764216] RAX: 0000000000000001 RBX: ffff888046629b80 RCX: ffffffff817c2b86
[ 132.765222] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234
[ 132.766258] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000
[ 132.767269] R10: ffffffff8643ac57 R11: 0000000000000001 R12: ffff888046629b80
[ 132.768280] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000
[ 132.769296] ? trace_irq_enable.constprop.0+0x26/0x100
[ 132.770074] ? make_task_dead+0x214/0x3b0
[ 132.770678] ? make_task_dead+0x214/0x3b0
[ 132.771280] ? do_syscall_64+0xbf/0x360
[ 132.771860] rewind_stack_and_make_dead+0x16/0x20
[ 132.772566] RIP: 0033:0x7f056f624b19
[ 132.773105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 132.775720] RSP: 002b:00007ffe852b7b68 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 132.776808] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f056f624b19
[ 132.777844] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f056f737f68
[ 132.778857] RBP: 00007f056f737f60 R08: 00007f056cb9a700 R09: 0000000000000000
[ 132.779874] R10: 00007f056cb9a700 R11: 0000000000000246 R12: 00007f056f73c200
[ 132.780882] R13: 00007ffe852b7c70 R14: 00007f056f737f60 R15: 00000000000205bd
[ 132.781922]
[ 132.782266] Modules linked in:
[ 132.782734] ---[ end trace 0000000000000000 ]---
[ 132.783398] RIP: 0010:perf_tp_event+0x175/0xe70
[ 132.784076] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 132.786670] RSP: 0018:ffff888048237800 EFLAGS: 00010212
[ 132.787431] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 132.788443] RDX: ffff888019d19b80 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 132.789470] RBP: ffff888048237a70 R08: ffff88806ce31340 R09: ffffe8ffffc11b80
[ 132.790517] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 132.791528] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[ 132.792544] FS: 000055558ae9a400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[ 132.793712] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 132.794554] CR2: 000055558ae9bc18 CR3: 0000000044ddf000 CR4: 0000000000350ef0
[ 132.795595] Kernel panic - not syncing: Fatal exception in interrupt
[ 132.796653] Kernel Offset: disabled
[ 132.797178] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---
VM DIAGNOSIS:
12:37:15 Registers:
info registers vcpu 0
RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888048237198
R8 =0000000000000000 R9 =ffffed100151a046 R10=000000000000002e R11=6572617764726148
R12=000000000000002e R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0
RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055558ae9a400 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe5300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=000055558ae9bc18 CR3=0000000044e0b000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f056f70b7c000007f056f70b7c8
XMM02=00007f056f70b7e000007f056f70b7c0 XMM03=00007f056f70b7c800007f056f70b7c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=000000000000f320 RBX=ffff88806ce3de00 RCX=ffffc900029fc000 RDX=0000000000040000
RSI=ffffffff816880d6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff888013f7f5a8
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=1ffff1100d9e6bb1
R12=ffffed100d9c7bc1 R13=ffff88806ce3de08 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff816880d8 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fa7f5448700 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2d421000 CR3=000000001fdf3000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000