Warning: Permanently added '[localhost]:21617' (ECDSA) to the list of known hosts. 2025/08/29 13:20:14 fuzzer started 2025/08/29 13:20:14 dialing manager at localhost:43077 syzkaller login: [ 50.713441] cgroup: Unknown subsys name 'net' [ 50.923372] cgroup: Unknown subsys name 'cpuset' [ 50.990217] cgroup: Unknown subsys name 'rlimit' 2025/08/29 13:20:25 syscalls: 2214 2025/08/29 13:20:25 code coverage: enabled 2025/08/29 13:20:25 comparison tracing: enabled 2025/08/29 13:20:25 extra coverage: enabled 2025/08/29 13:20:25 setuid sandbox: enabled 2025/08/29 13:20:25 namespace sandbox: enabled 2025/08/29 13:20:25 Android sandbox: enabled 2025/08/29 13:20:25 fault injection: enabled 2025/08/29 13:20:25 leak checking: enabled 2025/08/29 13:20:25 net packet injection: enabled 2025/08/29 13:20:25 net device setup: enabled 2025/08/29 13:20:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 13:20:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 13:20:25 USB emulation: enabled 2025/08/29 13:20:25 hci packet injection: enabled 2025/08/29 13:20:25 wifi device emulation: enabled 2025/08/29 13:20:25 802.15.4 emulation: enabled 2025/08/29 13:20:25 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 13:20:25 fetching corpus: 50, signal 24748/28241 (executing program) 2025/08/29 13:20:25 fetching corpus: 100, signal 36846/41720 (executing program) 2025/08/29 13:20:25 fetching corpus: 150, signal 47437/53538 (executing program) 2025/08/29 13:20:25 fetching corpus: 200, signal 52388/59776 (executing program) 2025/08/29 13:20:25 fetching corpus: 250, signal 56511/65114 (executing program) 2025/08/29 13:20:25 fetching corpus: 300, signal 62336/72008 (executing program) 2025/08/29 13:20:25 fetching corpus: 350, signal 65937/76701 (executing program) 2025/08/29 13:20:26 fetching corpus: 400, signal 69090/80896 (executing program) 2025/08/29 13:20:26 fetching corpus: 450, signal 73573/86286 (executing program) 2025/08/29 13:20:26 fetching corpus: 500, signal 76051/89780 (executing program) 2025/08/29 13:20:26 fetching corpus: 550, signal 78964/93565 (executing program) 2025/08/29 13:20:26 fetching corpus: 600, signal 80835/96393 (executing program) 2025/08/29 13:20:26 fetching corpus: 650, signal 83545/99908 (executing program) 2025/08/29 13:20:26 fetching corpus: 700, signal 85906/103126 (executing program) 2025/08/29 13:20:26 fetching corpus: 750, signal 88217/106254 (executing program) 2025/08/29 13:20:27 fetching corpus: 800, signal 90524/109341 (executing program) 2025/08/29 13:20:27 fetching corpus: 850, signal 92362/111963 (executing program) 2025/08/29 13:20:27 fetching corpus: 900, signal 94407/114698 (executing program) 2025/08/29 13:20:27 fetching corpus: 950, signal 96283/117251 (executing program) 2025/08/29 13:20:27 fetching corpus: 1000, signal 98053/119706 (executing program) 2025/08/29 13:20:27 fetching corpus: 1050, signal 99340/121702 (executing program) 2025/08/29 13:20:27 fetching corpus: 1100, signal 101346/124233 (executing program) 2025/08/29 13:20:27 fetching corpus: 1150, signal 103487/126886 (executing program) 2025/08/29 13:20:27 fetching corpus: 1200, signal 105195/129140 (executing program) 2025/08/29 13:20:27 fetching corpus: 1250, signal 106634/131206 (executing program) 2025/08/29 13:20:27 fetching corpus: 1300, signal 107746/132956 (executing program) 2025/08/29 13:20:28 fetching corpus: 1350, signal 108617/134524 (executing program) 2025/08/29 13:20:28 fetching corpus: 1400, signal 110239/136633 (executing program) 2025/08/29 13:20:28 fetching corpus: 1450, signal 111496/138402 (executing program) 2025/08/29 13:20:28 fetching corpus: 1500, signal 112549/139993 (executing program) 2025/08/29 13:20:28 fetching corpus: 1550, signal 113739/141706 (executing program) 2025/08/29 13:20:28 fetching corpus: 1600, signal 114779/143317 (executing program) 2025/08/29 13:20:28 fetching corpus: 1650, signal 115876/144916 (executing program) 2025/08/29 13:20:28 fetching corpus: 1700, signal 117537/146779 (executing program) 2025/08/29 13:20:28 fetching corpus: 1750, signal 118795/148432 (executing program) 2025/08/29 13:20:28 fetching corpus: 1800, signal 119668/149787 (executing program) 2025/08/29 13:20:28 fetching corpus: 1850, signal 120757/151266 (executing program) 2025/08/29 13:20:29 fetching corpus: 1900, signal 121643/152655 (executing program) 2025/08/29 13:20:29 fetching corpus: 1950, signal 122536/154007 (executing program) 2025/08/29 13:20:29 fetching corpus: 2000, signal 123268/155207 (executing program) 2025/08/29 13:20:29 fetching corpus: 2050, signal 123968/156381 (executing program) 2025/08/29 13:20:29 fetching corpus: 2100, signal 125611/158086 (executing program) 2025/08/29 13:20:29 fetching corpus: 2150, signal 126541/159325 (executing program) 2025/08/29 13:20:29 fetching corpus: 2200, signal 127800/160759 (executing program) 2025/08/29 13:20:29 fetching corpus: 2250, signal 128536/161853 (executing program) 2025/08/29 13:20:29 fetching corpus: 2300, signal 129392/163103 (executing program) 2025/08/29 13:20:29 fetching corpus: 2350, signal 130663/164601 (executing program) 2025/08/29 13:20:30 fetching corpus: 2400, signal 131833/165881 (executing program) 2025/08/29 13:20:30 fetching corpus: 2450, signal 133145/167234 (executing program) 2025/08/29 13:20:30 fetching corpus: 2500, signal 133898/168313 (executing program) 2025/08/29 13:20:30 fetching corpus: 2550, signal 134923/169499 (executing program) 2025/08/29 13:20:30 fetching corpus: 2600, signal 135600/170490 (executing program) 2025/08/29 13:20:30 fetching corpus: 2650, signal 136413/171517 (executing program) 2025/08/29 13:20:30 fetching corpus: 2700, signal 137542/172657 (executing program) 2025/08/29 13:20:30 fetching corpus: 2750, signal 138063/173508 (executing program) 2025/08/29 13:20:30 fetching corpus: 2800, signal 140875/175299 (executing program) 2025/08/29 13:20:30 fetching corpus: 2850, signal 141480/176159 (executing program) 2025/08/29 13:20:30 fetching corpus: 2900, signal 141942/176968 (executing program) 2025/08/29 13:20:31 fetching corpus: 2950, signal 142641/177812 (executing program) 2025/08/29 13:20:31 fetching corpus: 3000, signal 143654/178731 (executing program) 2025/08/29 13:20:31 fetching corpus: 3050, signal 144426/179585 (executing program) 2025/08/29 13:20:31 fetching corpus: 3100, signal 145046/180361 (executing program) 2025/08/29 13:20:31 fetching corpus: 3150, signal 145846/181307 (executing program) 2025/08/29 13:20:31 fetching corpus: 3200, signal 146417/182068 (executing program) 2025/08/29 13:20:31 fetching corpus: 3250, signal 146806/182768 (executing program) 2025/08/29 13:20:31 fetching corpus: 3300, signal 147587/183676 (executing program) 2025/08/29 13:20:31 fetching corpus: 3350, signal 148386/184489 (executing program) 2025/08/29 13:20:31 fetching corpus: 3400, signal 148772/185112 (executing program) 2025/08/29 13:20:31 fetching corpus: 3450, signal 149237/185778 (executing program) 2025/08/29 13:20:32 fetching corpus: 3500, signal 149571/186400 (executing program) 2025/08/29 13:20:32 fetching corpus: 3550, signal 150321/187131 (executing program) 2025/08/29 13:20:32 fetching corpus: 3600, signal 150859/187782 (executing program) 2025/08/29 13:20:32 fetching corpus: 3650, signal 151575/188491 (executing program) 2025/08/29 13:20:32 fetching corpus: 3700, signal 152144/189126 (executing program) 2025/08/29 13:20:32 fetching corpus: 3750, signal 152743/189771 (executing program) 2025/08/29 13:20:32 fetching corpus: 3800, signal 153293/190380 (executing program) 2025/08/29 13:20:32 fetching corpus: 3850, signal 154141/191065 (executing program) 2025/08/29 13:20:32 fetching corpus: 3900, signal 154499/191616 (executing program) 2025/08/29 13:20:32 fetching corpus: 3950, signal 155167/192256 (executing program) 2025/08/29 13:20:33 fetching corpus: 4000, signal 155638/192804 (executing program) 2025/08/29 13:20:33 fetching corpus: 4050, signal 156191/193378 (executing program) 2025/08/29 13:20:33 fetching corpus: 4100, signal 156653/193902 (executing program) 2025/08/29 13:20:33 fetching corpus: 4150, signal 157137/194432 (executing program) 2025/08/29 13:20:33 fetching corpus: 4200, signal 157511/194923 (executing program) 2025/08/29 13:20:33 fetching corpus: 4250, signal 157914/195389 (executing program) 2025/08/29 13:20:33 fetching corpus: 4300, signal 158417/195866 (executing program) 2025/08/29 13:20:33 fetching corpus: 4350, signal 158886/196332 (executing program) 2025/08/29 13:20:33 fetching corpus: 4400, signal 159171/196793 (executing program) 2025/08/29 13:20:33 fetching corpus: 4450, signal 159665/197315 (executing program) 2025/08/29 13:20:33 fetching corpus: 4500, signal 159968/197738 (executing program) 2025/08/29 13:20:33 fetching corpus: 4550, signal 160535/198162 (executing program) 2025/08/29 13:20:33 fetching corpus: 4600, signal 160783/198611 (executing program) 2025/08/29 13:20:34 fetching corpus: 4650, signal 161173/199113 (executing program) 2025/08/29 13:20:34 fetching corpus: 4700, signal 161684/199533 (executing program) 2025/08/29 13:20:34 fetching corpus: 4750, signal 161987/199935 (executing program) 2025/08/29 13:20:34 fetching corpus: 4800, signal 162494/200364 (executing program) 2025/08/29 13:20:34 fetching corpus: 4850, signal 162905/200665 (executing program) 2025/08/29 13:20:34 fetching corpus: 4900, signal 163281/200668 (executing program) 2025/08/29 13:20:34 fetching corpus: 4950, signal 163825/200674 (executing program) 2025/08/29 13:20:34 fetching corpus: 5000, signal 164344/200680 (executing program) 2025/08/29 13:20:34 fetching corpus: 5050, signal 164885/200698 (executing program) 2025/08/29 13:20:34 fetching corpus: 5100, signal 165480/200702 (executing program) 2025/08/29 13:20:35 fetching corpus: 5150, signal 165796/200704 (executing program) 2025/08/29 13:20:35 fetching corpus: 5200, signal 166517/200707 (executing program) 2025/08/29 13:20:35 fetching corpus: 5250, signal 166851/200723 (executing program) 2025/08/29 13:20:35 fetching corpus: 5300, signal 167367/200726 (executing program) 2025/08/29 13:20:35 fetching corpus: 5350, signal 167740/200730 (executing program) 2025/08/29 13:20:35 fetching corpus: 5400, signal 168122/200751 (executing program) 2025/08/29 13:20:35 fetching corpus: 5450, signal 168391/200769 (executing program) 2025/08/29 13:20:35 fetching corpus: 5500, signal 168748/200780 (executing program) 2025/08/29 13:20:35 fetching corpus: 5550, signal 169131/200798 (executing program) 2025/08/29 13:20:35 fetching corpus: 5600, signal 169584/200826 (executing program) 2025/08/29 13:20:35 fetching corpus: 5650, signal 169867/200842 (executing program) 2025/08/29 13:20:35 fetching corpus: 5700, signal 170210/200855 (executing program) 2025/08/29 13:20:36 fetching corpus: 5750, signal 170598/200864 (executing program) 2025/08/29 13:20:36 fetching corpus: 5800, signal 170814/200877 (executing program) 2025/08/29 13:20:36 fetching corpus: 5850, signal 171052/200887 (executing program) 2025/08/29 13:20:36 fetching corpus: 5900, signal 171852/200953 (executing program) 2025/08/29 13:20:36 fetching corpus: 5950, signal 172167/200990 (executing program) 2025/08/29 13:20:36 fetching corpus: 6000, signal 172514/200992 (executing program) 2025/08/29 13:20:36 fetching corpus: 6050, signal 172732/200998 (executing program) 2025/08/29 13:20:36 fetching corpus: 6100, signal 173155/201007 (executing program) 2025/08/29 13:20:36 fetching corpus: 6150, signal 173556/201027 (executing program) 2025/08/29 13:20:36 fetching corpus: 6200, signal 173955/201029 (executing program) 2025/08/29 13:20:37 fetching corpus: 6250, signal 174324/201030 (executing program) 2025/08/29 13:20:37 fetching corpus: 6300, signal 174782/201072 (executing program) 2025/08/29 13:20:37 fetching corpus: 6350, signal 175144/201085 (executing program) 2025/08/29 13:20:37 fetching corpus: 6400, signal 175544/201086 (executing program) 2025/08/29 13:20:37 fetching corpus: 6450, signal 175783/201090 (executing program) 2025/08/29 13:20:37 fetching corpus: 6500, signal 176200/201091 (executing program) 2025/08/29 13:20:37 fetching corpus: 6550, signal 176493/201096 (executing program) 2025/08/29 13:20:37 fetching corpus: 6600, signal 177026/201124 (executing program) 2025/08/29 13:20:37 fetching corpus: 6650, signal 177445/201211 (executing program) 2025/08/29 13:20:37 fetching corpus: 6700, signal 177706/201216 (executing program) 2025/08/29 13:20:38 fetching corpus: 6750, signal 177996/201217 (executing program) 2025/08/29 13:20:38 fetching corpus: 6800, signal 178374/201224 (executing program) 2025/08/29 13:20:38 fetching corpus: 6850, signal 178615/201239 (executing program) 2025/08/29 13:20:38 fetching corpus: 6900, signal 178885/201247 (executing program) 2025/08/29 13:20:38 fetching corpus: 6950, signal 179261/201253 (executing program) 2025/08/29 13:20:38 fetching corpus: 7000, signal 179715/201253 (executing program) 2025/08/29 13:20:38 fetching corpus: 7050, signal 180056/201257 (executing program) 2025/08/29 13:20:38 fetching corpus: 7100, signal 180345/201257 (executing program) 2025/08/29 13:20:38 fetching corpus: 7150, signal 180699/201263 (executing program) 2025/08/29 13:20:38 fetching corpus: 7200, signal 180994/201266 (executing program) 2025/08/29 13:20:38 fetching corpus: 7250, signal 181243/201271 (executing program) 2025/08/29 13:20:38 fetching corpus: 7300, signal 181503/201281 (executing program) 2025/08/29 13:20:39 fetching corpus: 7350, signal 181772/201283 (executing program) 2025/08/29 13:20:39 fetching corpus: 7400, signal 182040/201286 (executing program) 2025/08/29 13:20:39 fetching corpus: 7450, signal 182370/201300 (executing program) 2025/08/29 13:20:39 fetching corpus: 7500, signal 182638/201303 (executing program) 2025/08/29 13:20:39 fetching corpus: 7550, signal 182900/201324 (executing program) 2025/08/29 13:20:39 fetching corpus: 7600, signal 183071/201337 (executing program) 2025/08/29 13:20:39 fetching corpus: 7650, signal 183357/201354 (executing program) 2025/08/29 13:20:39 fetching corpus: 7700, signal 183530/201369 (executing program) 2025/08/29 13:20:39 fetching corpus: 7750, signal 183908/201412 (executing program) 2025/08/29 13:20:39 fetching corpus: 7800, signal 184339/201442 (executing program) 2025/08/29 13:20:39 fetching corpus: 7850, signal 184628/201443 (executing program) 2025/08/29 13:20:39 fetching corpus: 7900, signal 185023/201443 (executing program) 2025/08/29 13:20:40 fetching corpus: 7950, signal 185285/201444 (executing program) 2025/08/29 13:20:40 fetching corpus: 8000, signal 185612/201449 (executing program) 2025/08/29 13:20:40 fetching corpus: 8050, signal 185911/201451 (executing program) 2025/08/29 13:20:40 fetching corpus: 8100, signal 186125/201458 (executing program) 2025/08/29 13:20:40 fetching corpus: 8150, signal 186376/201465 (executing program) 2025/08/29 13:20:40 fetching corpus: 8200, signal 186772/201465 (executing program) 2025/08/29 13:20:40 fetching corpus: 8250, signal 187087/201472 (executing program) 2025/08/29 13:20:40 fetching corpus: 8300, signal 187338/201472 (executing program) 2025/08/29 13:20:40 fetching corpus: 8350, signal 187598/201472 (executing program) 2025/08/29 13:20:40 fetching corpus: 8400, signal 187853/201490 (executing program) 2025/08/29 13:20:40 fetching corpus: 8450, signal 188139/201508 (executing program) 2025/08/29 13:20:40 fetching corpus: 8500, signal 188408/201512 (executing program) 2025/08/29 13:20:41 fetching corpus: 8550, signal 188624/201520 (executing program) 2025/08/29 13:20:41 fetching corpus: 8600, signal 188863/201601 (executing program) 2025/08/29 13:20:41 fetching corpus: 8650, signal 189041/201605 (executing program) 2025/08/29 13:20:41 fetching corpus: 8700, signal 189311/201612 (executing program) 2025/08/29 13:20:41 fetching corpus: 8750, signal 189633/201617 (executing program) 2025/08/29 13:20:41 fetching corpus: 8800, signal 189966/201655 (executing program) 2025/08/29 13:20:41 fetching corpus: 8850, signal 190224/201660 (executing program) 2025/08/29 13:20:41 fetching corpus: 8900, signal 190589/201660 (executing program) 2025/08/29 13:20:41 fetching corpus: 8950, signal 190907/201664 (executing program) 2025/08/29 13:20:41 fetching corpus: 9000, signal 191229/201682 (executing program) 2025/08/29 13:20:41 fetching corpus: 9050, signal 191509/201684 (executing program) 2025/08/29 13:20:41 fetching corpus: 9100, signal 191793/201692 (executing program) 2025/08/29 13:20:41 fetching corpus: 9150, signal 192067/201699 (executing program) 2025/08/29 13:20:42 fetching corpus: 9200, signal 192277/201699 (executing program) 2025/08/29 13:20:42 fetching corpus: 9250, signal 192440/201707 (executing program) 2025/08/29 13:20:42 fetching corpus: 9300, signal 192646/201714 (executing program) 2025/08/29 13:20:42 fetching corpus: 9350, signal 192851/201721 (executing program) 2025/08/29 13:20:42 fetching corpus: 9400, signal 193083/201749 (executing program) 2025/08/29 13:20:42 fetching corpus: 9450, signal 193350/201781 (executing program) 2025/08/29 13:20:42 fetching corpus: 9500, signal 193551/201783 (executing program) 2025/08/29 13:20:42 fetching corpus: 9550, signal 193757/201789 (executing program) 2025/08/29 13:20:42 fetching corpus: 9600, signal 193978/201793 (executing program) 2025/08/29 13:20:42 fetching corpus: 9650, signal 194232/201814 (executing program) 2025/08/29 13:20:42 fetching corpus: 9700, signal 194431/201817 (executing program) 2025/08/29 13:20:42 fetching corpus: 9750, signal 194598/201819 (executing program) 2025/08/29 13:20:42 fetching corpus: 9800, signal 194819/201836 (executing program) 2025/08/29 13:20:42 fetching corpus: 9850, signal 195041/201850 (executing program) 2025/08/29 13:20:43 fetching corpus: 9900, signal 195780/201863 (executing program) 2025/08/29 13:20:43 fetching corpus: 9950, signal 195992/201865 (executing program) 2025/08/29 13:20:43 fetching corpus: 10000, signal 196199/201866 (executing program) 2025/08/29 13:20:43 fetching corpus: 10050, signal 196429/201872 (executing program) 2025/08/29 13:20:43 fetching corpus: 10100, signal 196657/201880 (executing program) 2025/08/29 13:20:43 fetching corpus: 10150, signal 196923/201883 (executing program) 2025/08/29 13:20:43 fetching corpus: 10200, signal 197128/201883 (executing program) 2025/08/29 13:20:43 fetching corpus: 10250, signal 197351/201898 (executing program) 2025/08/29 13:20:43 fetching corpus: 10300, signal 197674/201898 (executing program) 2025/08/29 13:20:43 fetching corpus: 10317, signal 197751/201899 (executing program) 2025/08/29 13:20:43 fetching corpus: 10317, signal 197751/201899 (executing program) 2025/08/29 13:20:46 starting 8 fuzzer processes 13:20:46 executing program 0: r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x8, 0x0, 0x0, 0x0) 13:20:46 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000200)) 13:20:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:20:46 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x28181, 0x0) write$tcp_congestion(r0, &(0x7f0000000140)='cubic\x00', 0x6) 13:20:46 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') pread64(r0, &(0x7f0000000080)=""/187, 0xbb, 0xe0000000) 13:20:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/intel_agp', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 13:20:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed}, 0xe) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f00000000c0)={0x3, 0x0, 0xa}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="30000000000000000000000000000000705a1f0d9a466d8b3ac43101f5efd4ac8f4a65b78a3122e0e137d0773c6408cea487f9840400000073c8eccd357f488021b30f7eb9feff15399207c5ee0e155fcb46ebd2f52b7309d71820fec0"]) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r6, r7, 0x0, 0xa0103) r8 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x0) getpeername(r9, 0x0, &(0x7f0000000080)=0xffffffffffffffcb) 13:20:46 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8932, &(0x7f0000000240)={'wlan1\x00', &(0x7f0000000200)=@ethtool_perm_addr}) [ 82.048360] audit: type=1400 audit(1756473646.470:7): avc: denied { execmem } for pid=274 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 83.334796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.339556] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.341223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.345155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.348323] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.352756] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.357181] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.361325] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.364529] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.366094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.415583] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.417841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.422855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.428015] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.429431] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.431546] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.444542] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.446912] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.448396] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.448431] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.450501] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.450851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.454237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.455954] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.459174] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 83.459793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.464396] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.475220] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.478936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.479807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.482911] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.486235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.488554] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.490434] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.505265] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.507865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.515291] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.524854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.527035] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.540130] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 85.426277] Bluetooth: hci0: command tx timeout [ 85.427166] Bluetooth: hci1: command tx timeout [ 85.490709] Bluetooth: hci7: command tx timeout [ 85.553794] Bluetooth: hci2: command tx timeout [ 85.617778] Bluetooth: hci6: command tx timeout [ 85.618582] Bluetooth: hci5: command tx timeout [ 85.619083] Bluetooth: hci3: command tx timeout [ 85.619554] Bluetooth: hci4: command tx timeout [ 87.473922] Bluetooth: hci0: command tx timeout [ 87.474789] Bluetooth: hci1: command tx timeout [ 87.537952] Bluetooth: hci7: command tx timeout [ 87.601798] Bluetooth: hci2: command tx timeout [ 87.665806] Bluetooth: hci4: command tx timeout [ 87.666563] Bluetooth: hci3: command tx timeout [ 87.667355] Bluetooth: hci5: command tx timeout [ 87.668120] Bluetooth: hci6: command tx timeout [ 89.523709] Bluetooth: hci1: command tx timeout [ 89.524174] Bluetooth: hci0: command tx timeout [ 89.585699] Bluetooth: hci7: command tx timeout [ 89.649699] Bluetooth: hci2: command tx timeout [ 89.713833] Bluetooth: hci6: command tx timeout [ 89.714265] Bluetooth: hci3: command tx timeout [ 89.715390] Bluetooth: hci4: command tx timeout [ 89.715789] Bluetooth: hci5: command tx timeout [ 91.570781] Bluetooth: hci0: command tx timeout [ 91.571245] Bluetooth: hci1: command tx timeout [ 91.633713] Bluetooth: hci7: command tx timeout [ 91.697931] Bluetooth: hci2: command tx timeout [ 91.763105] Bluetooth: hci4: command tx timeout [ 91.763543] Bluetooth: hci6: command tx timeout [ 91.764079] Bluetooth: hci5: command tx timeout [ 91.764474] Bluetooth: hci3: command tx timeout [ 120.867919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.868589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.055509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.056170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.182779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.183399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.315111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.316163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.584021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.585068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:21:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x10000, 0x0, &(0x7f0000000200), 0x1008800, &(0x7f0000010d00)) [ 122.665336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.666548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.668602] audit: type=1400 audit(1756473687.090:8): avc: denied { open } for pid=3850 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 122.683029] audit: type=1400 audit(1756473687.090:9): avc: denied { kernel } for pid=3850 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 122.704858] loop3: detected capacity change from 0 to 128 [ 122.746145] loop3: detected capacity change from 0 to 128 13:21:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/intel_agp', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 13:21:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x10000, 0x0, &(0x7f0000000200), 0x1008800, &(0x7f0000010d00)) [ 122.886552] loop3: detected capacity change from 0 to 128 13:21:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/intel_agp', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 13:21:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x10000, 0x0, &(0x7f0000000200), 0x1008800, &(0x7f0000010d00)) [ 122.969080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.969928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.982497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.983729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.009892] loop3: detected capacity change from 0 to 128 13:21:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x10000, 0x0, &(0x7f0000000200), 0x1008800, &(0x7f0000010d00)) 13:21:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/intel_agp', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 123.090970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.091573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.116456] loop3: detected capacity change from 0 to 128 13:21:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000200)) [ 123.245390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.245421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.300677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.301429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.356527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.357372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.392831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.393458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.470188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.471335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.621576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.622364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.656814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.657452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:21:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x2}, 0x0, 0x0, 0x401, 0xfff, 0x0, 0xffffffffffffffff, 0x1f}) 13:21:28 executing program 0: r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x8, 0x0, 0x0, 0x0) 13:21:28 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000200)) 13:21:28 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsmount(r0, 0x0, 0x7e) r1 = fork() ptrace(0x10, r1) wait4(r1, 0x0, 0x2, &(0x7f0000000440)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7f, 0x7f, 0x9, 0x3f, 0x0, 0x7, 0x2000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xe95, 0x4}, 0x42a0, 0x667c0f9f, 0x8, 0x5, 0x7ff, 0x8, 0x9, 0x0, 0x5}, r1, 0x10, 0xffffffffffffffff, 0xa) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 13:21:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, 0xffffffffffffffff) 13:21:28 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6516, &(0x7f0000000480)={0x0, 0x0, 0x2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000500), &(0x7f0000000540)) 13:21:28 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@dev, @empty, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80500002}) 13:21:28 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCOUTQ(r0, 0x4b30, 0x0) 13:21:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, 0xffffffffffffffff) 13:21:28 executing program 0: r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x8, 0x0, 0x0, 0x0) 13:21:28 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000200)) 13:21:28 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6516, &(0x7f0000000480)={0x0, 0x0, 0x2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000500), &(0x7f0000000540)) 13:21:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x2}, 0x0, 0x0, 0x401, 0xfff, 0x0, 0xffffffffffffffff, 0x1f}) 13:21:28 executing program 0: r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x8, 0x0, 0x0, 0x0) 13:21:28 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@dev, @empty, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80500002}) 13:21:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, 0xffffffffffffffff) 13:21:28 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000200)) 13:21:28 executing program 7: r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x8, 0x0, 0x0, 0x0) 13:21:28 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6516, &(0x7f0000000480)={0x0, 0x0, 0x2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000500), &(0x7f0000000540)) 13:21:28 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsmount(r0, 0x0, 0x7e) r1 = fork() ptrace(0x10, r1) wait4(r1, 0x0, 0x2, &(0x7f0000000440)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7f, 0x7f, 0x9, 0x3f, 0x0, 0x7, 0x2000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xe95, 0x4}, 0x42a0, 0x667c0f9f, 0x8, 0x5, 0x7ff, 0x8, 0x9, 0x0, 0x5}, r1, 0x10, 0xffffffffffffffff, 0xa) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) [ 124.086602] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 124.087524] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 124.088158] CPU: 0 UID: 0 PID: 3952 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 124.089779] Tainted: [W]=WARN [ 124.090577] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 124.092219] RIP: 0010:perf_tp_event+0x175/0xe70 [ 124.093697] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 124.097403] RSP: 0018:ffff8880486d7800 EFLAGS: 00010212 [ 124.097837] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc9000602b000 [ 124.098422] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 124.099002] RBP: ffff8880486d7a70 R08: ffff88806ce31340 R09: ffffe8ffffc16550 [ 124.099579] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 124.100168] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 124.100747] FS: 00007fca53e20700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 124.101404] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.101880] CR2: 00007fca569be018 CR3: 000000001ea97000 CR4: 0000000000350ef0 [ 124.102457] Call Trace: [ 124.102676] [ 124.102912] ? __pfx_perf_tp_event+0x10/0x10 [ 124.103292] ? lock_is_held_type+0x9e/0x120 [ 124.103663] ? perf_trace_lock+0xb5/0x5d0 [ 124.104019] ? perf_trace_lock+0xb5/0x5d0 [ 124.104360] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 124.104772] ? perf_swevent_event+0x63/0x3f0 [ 124.105141] ? perf_tp_event+0x807/0xe70 [ 124.105483] ? perf_trace_run_bpf_submit+0xef/0x180 [ 124.105902] ? __pfx_perf_tp_event+0x10/0x10 [ 124.106274] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 124.106765] ? do_raw_spin_unlock+0x53/0x220 [ 124.107141] ? perf_trace_run_bpf_submit+0xef/0x180 [ 124.107552] perf_trace_run_bpf_submit+0xef/0x180 [ 124.107968] perf_trace_lock+0x337/0x5d0 [ 124.108310] ? __pfx_perf_trace_lock+0x10/0x10 [ 124.108694] ? lock_acquire+0x15e/0x2f0 [ 124.109027] ? futex_ref_get+0x48/0x300 [ 124.109358] ? futex_ref_get+0x114/0x300 [ 124.109694] ? futex_hash+0x15c/0x390 [ 124.110010] lock_release+0x1ab/0x290 [ 124.110330] ? futex_hash+0x15c/0x390 [ 124.110645] futex_ref_get+0x119/0x300 [ 124.110968] ? futex_hash+0x15c/0x390 [ 124.111284] futex_hash+0x70/0x390 [ 124.111584] futex_wake+0x143/0x540 [ 124.111899] ? __pfx_perf_trace_lock+0x10/0x10 [ 124.112283] ? __pfx_futex_wake+0x10/0x10 [ 124.112629] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 124.113047] ? lock_release+0xc8/0x290 [ 124.113376] do_futex+0x26d/0x370 [ 124.113672] ? __pfx_do_futex+0x10/0x10 [ 124.114007] __x64_sys_futex+0x1c9/0x4d0 [ 124.114351] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 124.114839] ? __pfx___x64_sys_futex+0x10/0x10 [ 124.115222] do_syscall_64+0xbf/0x360 [ 124.115538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.115966] RIP: 0033:0x7fca568aab19 [ 124.116277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 124.117742] RSP: 002b:00007fca53e20218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.118353] RAX: ffffffffffffffda RBX: 00007fca569bdf68 RCX: 00007fca568aab19 [ 124.118934] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fca569bdf6c [ 124.119512] RBP: 00007fca569bdf60 R08: 000000000000000e R09: 0000000000000000 [ 124.120098] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fca569bdf6c [ 124.120677] R13: 00007ffec47d7adf R14: 00007fca53e20300 R15: 0000000000022000 [ 124.121265] [ 124.121458] Modules linked in: [ 124.121730] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI [ 124.122679] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 124.123387] CPU: 1 UID: 0 PID: 3955 Comm: syz-executor.7 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 124.124387] Tainted: [D]=DIE, [W]=WARN [ 124.124698] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 124.125385] RIP: 0010:perf_tp_event+0x175/0xe70 [ 124.125787] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 124.127267] RSP: 0018:ffff8880486a7600 EFLAGS: 00010212 [ 124.127690] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90005224000 [ 124.128275] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 124.128841] RBP: ffff8880486a7870 R08: ffff88806cf31340 R09: ffffe8ffffd16550 [ 124.129403] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 124.129966] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 124.130525] FS: 00007f72adb2e700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 124.131161] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.131626] CR2: 0000555571470c18 CR3: 000000001f213000 CR4: 0000000000350ef0 [ 124.132207] Call Trace: [ 124.132420] [ 124.132612] ? __pfx_perf_tp_event+0x10/0x10 [ 124.132997] ? perf_trace_run_bpf_submit+0xef/0x180 [ 124.133404] perf_trace_run_bpf_submit+0xef/0x180 [ 124.133797] perf_trace_lock+0x337/0x5d0 [ 124.134132] ? __pfx_perf_trace_lock+0x10/0x10 [ 124.134506] ? get_futex_key+0x592/0x14a0 [ 124.134846] ? futex_ref_get+0x114/0x300 [ 124.135171] ? futex_hash+0x15c/0x390 [ 124.135478] lock_release+0x1ab/0x290 [ 124.135815] ? futex_hash+0x15c/0x390 [ 124.136125] futex_ref_get+0x119/0x300 [ 124.136439] ? futex_hash+0x15c/0x390 [ 124.136745] futex_hash+0x70/0x390 [ 124.137036] futex_wait_setup+0xae/0x550 [ 124.137373] __futex_wait+0x151/0x300 [ 124.137686] ? __pfx___futex_wait+0x10/0x10 [ 124.138036] ? __pfx_futex_wake_mark+0x10/0x10 [ 124.138417] futex_wait+0xde/0x380 [ 124.138712] ? __pfx_futex_wait+0x10/0x10 [ 124.139049] ? perf_trace_lock+0xb5/0x5d0 [ 124.139386] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 124.139876] ? do_vfs_ioctl+0x125/0x1470 [ 124.140227] do_futex+0x2ee/0x370 [ 124.140526] ? __pfx_do_futex+0x10/0x10 [ 124.140860] ? do_raw_spin_lock+0x123/0x260 [ 124.141214] __x64_sys_futex+0x1c9/0x4d0 [ 124.141543] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 124.142017] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 124.142435] ? __pfx___x64_sys_futex+0x10/0x10 [ 124.142806] ? kcov_ioctl+0x386/0x6c0 [ 124.143120] do_syscall_64+0xbf/0x360 [ 124.143433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.143865] RIP: 0033:0x7f72b05b8b19 [ 124.144165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 124.145592] RSP: 002b:00007f72adb2e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.146191] RAX: ffffffffffffffda RBX: 00007f72b06cbf68 RCX: 00007f72b05b8b19 [ 124.146755] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f72b06cbf68 [ 124.147317] RBP: 00007f72b06cbf60 R08: 00007f72adb2e700 R09: 0000000000000000 [ 124.147899] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f72b06cbf6c [ 124.148463] R13: 00007fff7915c86f R14: 00007f72adb2e300 R15: 0000000000022000 [ 124.149031] [ 124.149222] Modules linked in: [ 124.149485] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#3] SMP KASAN NOPTI [ 124.150356] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 124.150953] CPU: 0 UID: 0 PID: 3952 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 124.151891] Tainted: [D]=DIE, [W]=WARN [ 124.152191] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 124.152828] RIP: 0010:perf_tp_event+0x175/0xe70 [ 124.153203] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 124.154609] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012 [ 124.155025] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 124.155578] RDX: ffff888009f39b80 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 124.156142] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc16550 [ 124.156695] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000 [ 124.157250] R13: 000000000000002c R14: ffff88806ce31490 R15: dffffc0000000000 [ 124.157805] FS: 00007fca53e20700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 124.158431] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.158881] CR2: 00007fca569be018 CR3: 000000001ea97000 CR4: 0000000000350ef0 [ 124.159438] Call Trace: [ 124.159644] [ 124.159832] ? __pfx_perf_tp_event+0x10/0x10 [ 124.160186] ? select_task_rq_fair+0x48c/0x38b0 [ 124.160559] ? trace_sched_set_need_resched_tp+0xd4/0x110 [ 124.161002] ? __resched_curr+0x2a2/0x330 [ 124.161336] ? __pfx___resched_curr+0x10/0x10 [ 124.161697] ? perf_trace_lock+0xb5/0x5d0 [ 124.162027] ? __pfx_perf_trace_lock+0x10/0x10 [ 124.162388] ? do_raw_spin_unlock+0x53/0x220 [ 124.162738] ? try_to_wake_up+0x8ae/0x11d0 [ 124.163075] ? lock_release+0x172/0x290 [ 124.163391] ? perf_trace_run_bpf_submit+0xef/0x180 [ 124.163793] perf_trace_run_bpf_submit+0xef/0x180 [ 124.164180] perf_trace_lock+0x337/0x5d0 [ 124.164507] ? __pfx_perf_trace_lock+0x10/0x10 [ 124.164869] ? clockevents_program_event+0x14f/0x360 [ 124.165274] ? find_held_lock+0x2b/0x80 [ 124.165593] ? hrtimer_interrupt+0x114/0x830 [ 124.165943] lock_release+0x1ab/0x290 [ 124.166246] ktime_get_update_offsets_now+0xab/0x3c0 [ 124.166649] ? hrtimer_interrupt+0x114/0x830 [ 124.166996] ? __pfx_lapic_next_deadline+0x10/0x10 [ 124.167388] hrtimer_interrupt+0x114/0x830 [ 124.167738] __sysvec_apic_timer_interrupt+0xbb/0x330 [ 124.168153] sysvec_apic_timer_interrupt+0x6b/0x80 [ 124.168542] [ 124.168725] [ 124.168910] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 124.169322] RIP: 0010:oops_exit+0x0/0x50 [ 124.169648] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27 [ 124.171058] RSP: 0018:ffff8880486d7690 EFLAGS: 00000202 [ 124.171477] RAX: 0000000000029da4 RBX: 0000000000000212 RCX: ffffc9000602b000 [ 124.172051] RDX: 0000000000040000 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 124.172604] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90 [ 124.173159] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880486d7758 [ 124.173713] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000 [ 124.174271] ? oops_end+0x4a/0xe0 [ 124.174561] oops_end+0x65/0xe0 [ 124.174831] exc_general_protection+0x1a2/0x330 [ 124.175210] asm_exc_general_protection+0x26/0x30 [ 124.175591] RIP: 0010:perf_tp_event+0x175/0xe70 [ 124.175974] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 124.177384] RSP: 0018:ffff8880486d7800 EFLAGS: 00010212 [ 124.177801] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc9000602b000 [ 124.178352] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 124.178908] RBP: ffff8880486d7a70 R08: ffff88806ce31340 R09: ffffe8ffffc16550 [ 124.179468] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 124.180033] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 124.180587] ? perf_tp_event+0x167/0xe70 [ 124.180917] ? __pfx_perf_tp_event+0x10/0x10 [ 124.181271] ? lock_is_held_type+0x9e/0x120 [ 124.181614] ? perf_trace_lock+0xb5/0x5d0 [ 124.181942] ? perf_trace_lock+0xb5/0x5d0 [ 124.182270] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 124.182664] ? perf_swevent_event+0x63/0x3f0 [ 124.183019] ? perf_tp_event+0x807/0xe70 [ 124.183343] ? perf_trace_run_bpf_submit+0xef/0x180 [ 124.183750] ? __pfx_perf_tp_event+0x10/0x10 [ 124.184101] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 124.184565] ? do_raw_spin_unlock+0x53/0x220 [ 124.184921] ? perf_trace_run_bpf_submit+0xef/0x180 [ 124.185314] perf_trace_run_bpf_submit+0xef/0x180 [ 124.185699] perf_trace_lock+0x337/0x5d0 [ 124.186022] ? __pfx_perf_trace_lock+0x10/0x10 [ 124.186388] ? lock_acquire+0x15e/0x2f0 [ 124.186706] ? futex_ref_get+0x48/0x300 [ 124.187021] ? futex_ref_get+0x114/0x300 [ 124.187343] ? futex_hash+0x15c/0x390 [ 124.187646] lock_release+0x1ab/0x290 [ 124.187960] ? futex_hash+0x15c/0x390 [ 124.188260] futex_ref_get+0x119/0x300 [ 124.188568] ? futex_hash+0x15c/0x390 [ 124.188869] futex_hash+0x70/0x390 [ 124.189154] futex_wake+0x143/0x540 [ 124.189448] ? __pfx_perf_trace_lock+0x10/0x10 [ 124.189812] ? __pfx_futex_wake+0x10/0x10 [ 124.190146] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 124.190546] ? lock_release+0xc8/0x290 [ 124.190858] do_futex+0x26d/0x370 [ 124.191146] ? __pfx_do_futex+0x10/0x10 [ 124.191464] __x64_sys_futex+0x1c9/0x4d0 [ 124.191794] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 124.192258] ? __pfx___x64_sys_futex+0x10/0x10 [ 124.192626] do_syscall_64+0xbf/0x360 [ 124.192928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.193334] RIP: 0033:0x7fca568aab19 [ 124.193629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 124.195046] RSP: 002b:00007fca53e20218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.195637] RAX: ffffffffffffffda RBX: 00007fca569bdf68 RCX: 00007fca568aab19 [ 124.196199] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fca569bdf6c [ 124.196752] RBP: 00007fca569bdf60 R08: 000000000000000e R09: 0000000000000000 [ 124.197305] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fca569bdf6c [ 124.197860] R13: 00007ffec47d7adf R14: 00007fca53e20300 R15: 0000000000022000 [ 124.198421] [ 124.198609] Modules linked in: [ 124.198866] ---[ end trace 0000000000000000 ]--- [ 124.198867] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#4] SMP KASAN NOPTI [ 124.199235] RIP: 0010:perf_tp_event+0x175/0xe70 [ 124.200117] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 124.200480] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 124.201148] CPU: 1 UID: 0 PID: 3955 Comm: syz-executor.7 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 124.202544] RSP: 0018:ffff8880486d7800 EFLAGS: 00010212 [ 124.203461] Tainted: [D]=DIE, [W]=WARN [ 124.203879] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc9000602b000 [ 124.204182] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 124.204734] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 124.205370] RIP: 0010:perf_tp_event+0x175/0xe70 [ 124.205918] RBP: ffff8880486d7a70 R08: ffff88806ce31340 R09: ffffe8ffffc16550 [ 124.206280] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 124.206828] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 124.208269] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012 [ 124.208819] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 124.208830] FS: 00007fca53e20700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 124.209235] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 124.209789] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.210408] RDX: ffff8880462bd280 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 124.210959] CR2: 00007fca569be018 CR3: 000000001ea97000 CR4: 0000000000350ef0 [ 124.211418] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd16550 [ 124.211977] Kernel panic - not syncing: Fatal exception in interrupt [ 125.255995] Shutting down cpus with NMI [ 125.257572] Kernel Offset: disabled [ 125.257862] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 13:21:28 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff828e3230 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff8880486d7100 R8 =0000000000000000 R9 =ffffed10016d5046 R10=00000000000fe503 R11=30376578302f4952 R12=0000000000000823 R13=0000000000000020 R14=fffffbfff10e4882 R15=dffffc0000000000 RIP=ffffffff828e3285 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fca53e20700 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fca569be018 CR3=000000001ea97000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fca569917c000007fca569917c8 XMM02=00007fca569917e000007fca569917c0 XMM03=00007fca569917c800007fca569917c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84bdec0e RDX=fffffbfff0f0ec09 RSI=0000000000000004 RDI=ffffffff87876044 RBP=ffffffff87876044 RSP=ffff8880486a73b0 R8 =0000000000000000 R9 =fffffbfff0f0ec08 R10=ffffffff87876047 R11=202c746c75616620 R12=1ffff110090d4e77 R13=0000000000000007 R14=fffffbfff0f0ec08 R15=ffff8880486a73e8 RIP=ffffffff84bdeda0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f72adb2e700 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555571470c18 CR3=000000001f213000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f72b069f7c000007f72b069f7c8 XMM02=00007f72b069f7e000007f72b069f7c0 XMM03=00007f72b069f7c800007f72b069f7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000