Warning: Permanently added '[localhost]:41790' (ECDSA) to the list of known hosts. 2025/08/29 13:32:21 fuzzer started 2025/08/29 13:32:22 dialing manager at localhost:43077 syzkaller login: [ 58.573507] cgroup: Unknown subsys name 'net' [ 58.634928] cgroup: Unknown subsys name 'cpuset' [ 58.652321] cgroup: Unknown subsys name 'rlimit' 2025/08/29 13:32:32 syscalls: 2214 2025/08/29 13:32:32 code coverage: enabled 2025/08/29 13:32:32 comparison tracing: enabled 2025/08/29 13:32:32 extra coverage: enabled 2025/08/29 13:32:32 setuid sandbox: enabled 2025/08/29 13:32:32 namespace sandbox: enabled 2025/08/29 13:32:32 Android sandbox: enabled 2025/08/29 13:32:32 fault injection: enabled 2025/08/29 13:32:32 leak checking: enabled 2025/08/29 13:32:32 net packet injection: enabled 2025/08/29 13:32:32 net device setup: enabled 2025/08/29 13:32:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 13:32:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 13:32:32 USB emulation: enabled 2025/08/29 13:32:32 hci packet injection: enabled 2025/08/29 13:32:32 wifi device emulation: enabled 2025/08/29 13:32:32 802.15.4 emulation: enabled 2025/08/29 13:32:32 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 13:32:32 fetching corpus: 50, signal 26910/30370 (executing program) 2025/08/29 13:32:32 fetching corpus: 100, signal 38553/43355 (executing program) 2025/08/29 13:32:32 fetching corpus: 150, signal 42707/48965 (executing program) 2025/08/29 13:32:33 fetching corpus: 200, signal 47904/55446 (executing program) 2025/08/29 13:32:33 fetching corpus: 250, signal 51386/60238 (executing program) 2025/08/29 13:32:33 fetching corpus: 300, signal 57679/67551 (executing program) 2025/08/29 13:32:33 fetching corpus: 350, signal 62148/73097 (executing program) 2025/08/29 13:32:33 fetching corpus: 400, signal 65696/77731 (executing program) 2025/08/29 13:32:33 fetching corpus: 450, signal 73908/86502 (executing program) 2025/08/29 13:32:33 fetching corpus: 500, signal 76236/89812 (executing program) 2025/08/29 13:32:33 fetching corpus: 550, signal 79403/93861 (executing program) 2025/08/29 13:32:33 fetching corpus: 600, signal 81749/97080 (executing program) 2025/08/29 13:32:33 fetching corpus: 650, signal 83284/99559 (executing program) 2025/08/29 13:32:33 fetching corpus: 700, signal 84776/102012 (executing program) 2025/08/29 13:32:33 fetching corpus: 750, signal 87137/105210 (executing program) 2025/08/29 13:32:34 fetching corpus: 800, signal 88941/107874 (executing program) 2025/08/29 13:32:34 fetching corpus: 850, signal 91111/110825 (executing program) 2025/08/29 13:32:34 fetching corpus: 900, signal 94530/114695 (executing program) 2025/08/29 13:32:34 fetching corpus: 950, signal 96055/117000 (executing program) 2025/08/29 13:32:34 fetching corpus: 1000, signal 98028/119630 (executing program) 2025/08/29 13:32:34 fetching corpus: 1050, signal 99535/121865 (executing program) 2025/08/29 13:32:34 fetching corpus: 1100, signal 101067/124052 (executing program) 2025/08/29 13:32:34 fetching corpus: 1150, signal 102783/126378 (executing program) 2025/08/29 13:32:34 fetching corpus: 1200, signal 104603/128765 (executing program) 2025/08/29 13:32:34 fetching corpus: 1250, signal 105749/130592 (executing program) 2025/08/29 13:32:34 fetching corpus: 1300, signal 107161/132557 (executing program) 2025/08/29 13:32:35 fetching corpus: 1350, signal 108635/134664 (executing program) 2025/08/29 13:32:35 fetching corpus: 1400, signal 109616/136332 (executing program) 2025/08/29 13:32:35 fetching corpus: 1450, signal 111368/138516 (executing program) 2025/08/29 13:32:35 fetching corpus: 1500, signal 112541/140249 (executing program) 2025/08/29 13:32:35 fetching corpus: 1550, signal 113740/141999 (executing program) 2025/08/29 13:32:35 fetching corpus: 1600, signal 114859/143624 (executing program) 2025/08/29 13:32:35 fetching corpus: 1650, signal 116161/145350 (executing program) 2025/08/29 13:32:35 fetching corpus: 1700, signal 117250/146990 (executing program) 2025/08/29 13:32:35 fetching corpus: 1750, signal 118012/148345 (executing program) 2025/08/29 13:32:35 fetching corpus: 1800, signal 119734/150286 (executing program) 2025/08/29 13:32:35 fetching corpus: 1850, signal 121455/152143 (executing program) 2025/08/29 13:32:36 fetching corpus: 1900, signal 122951/153850 (executing program) 2025/08/29 13:32:36 fetching corpus: 1950, signal 123843/155187 (executing program) 2025/08/29 13:32:36 fetching corpus: 2000, signal 124582/156426 (executing program) 2025/08/29 13:32:36 fetching corpus: 2050, signal 125061/157497 (executing program) 2025/08/29 13:32:36 fetching corpus: 2100, signal 125950/158796 (executing program) 2025/08/29 13:32:36 fetching corpus: 2150, signal 127071/160167 (executing program) 2025/08/29 13:32:36 fetching corpus: 2200, signal 128436/161673 (executing program) 2025/08/29 13:32:36 fetching corpus: 2250, signal 129337/162904 (executing program) 2025/08/29 13:32:36 fetching corpus: 2300, signal 129987/163965 (executing program) 2025/08/29 13:32:36 fetching corpus: 2350, signal 130680/165090 (executing program) 2025/08/29 13:32:36 fetching corpus: 2400, signal 132242/166617 (executing program) 2025/08/29 13:32:37 fetching corpus: 2450, signal 133076/167729 (executing program) 2025/08/29 13:32:37 fetching corpus: 2500, signal 134056/168929 (executing program) 2025/08/29 13:32:37 fetching corpus: 2550, signal 134715/169944 (executing program) 2025/08/29 13:32:37 fetching corpus: 2600, signal 136000/171216 (executing program) 2025/08/29 13:32:37 fetching corpus: 2650, signal 136712/172193 (executing program) 2025/08/29 13:32:37 fetching corpus: 2700, signal 137516/173218 (executing program) 2025/08/29 13:32:37 fetching corpus: 2750, signal 138427/174255 (executing program) 2025/08/29 13:32:37 fetching corpus: 2800, signal 139120/175195 (executing program) 2025/08/29 13:32:37 fetching corpus: 2850, signal 139889/176140 (executing program) 2025/08/29 13:32:37 fetching corpus: 2900, signal 140626/177061 (executing program) 2025/08/29 13:32:37 fetching corpus: 2950, signal 141413/177982 (executing program) 2025/08/29 13:32:38 fetching corpus: 3000, signal 142049/178809 (executing program) 2025/08/29 13:32:38 fetching corpus: 3050, signal 142960/179805 (executing program) 2025/08/29 13:32:38 fetching corpus: 3100, signal 143522/180574 (executing program) 2025/08/29 13:32:38 fetching corpus: 3150, signal 143898/181311 (executing program) 2025/08/29 13:32:38 fetching corpus: 3200, signal 144838/182362 (executing program) 2025/08/29 13:32:38 fetching corpus: 3250, signal 145438/183184 (executing program) 2025/08/29 13:32:38 fetching corpus: 3300, signal 146281/184034 (executing program) 2025/08/29 13:32:38 fetching corpus: 3350, signal 146831/184828 (executing program) 2025/08/29 13:32:38 fetching corpus: 3400, signal 147271/185605 (executing program) 2025/08/29 13:32:38 fetching corpus: 3450, signal 147857/186313 (executing program) 2025/08/29 13:32:38 fetching corpus: 3500, signal 148444/187057 (executing program) 2025/08/29 13:32:39 fetching corpus: 3550, signal 148931/187758 (executing program) 2025/08/29 13:32:39 fetching corpus: 3600, signal 149441/188481 (executing program) 2025/08/29 13:32:39 fetching corpus: 3650, signal 150100/189227 (executing program) 2025/08/29 13:32:39 fetching corpus: 3700, signal 150699/189945 (executing program) 2025/08/29 13:32:39 fetching corpus: 3750, signal 151214/190574 (executing program) 2025/08/29 13:32:39 fetching corpus: 3800, signal 151667/191188 (executing program) 2025/08/29 13:32:39 fetching corpus: 3850, signal 152056/191877 (executing program) 2025/08/29 13:32:39 fetching corpus: 3900, signal 152434/192467 (executing program) 2025/08/29 13:32:39 fetching corpus: 3950, signal 153062/193095 (executing program) 2025/08/29 13:32:39 fetching corpus: 4000, signal 153495/193643 (executing program) 2025/08/29 13:32:39 fetching corpus: 4050, signal 153908/194265 (executing program) 2025/08/29 13:32:39 fetching corpus: 4100, signal 154431/194876 (executing program) 2025/08/29 13:32:40 fetching corpus: 4150, signal 155134/195597 (executing program) 2025/08/29 13:32:40 fetching corpus: 4200, signal 155681/196180 (executing program) 2025/08/29 13:32:40 fetching corpus: 4250, signal 156078/196717 (executing program) 2025/08/29 13:32:40 fetching corpus: 4300, signal 156494/197289 (executing program) 2025/08/29 13:32:40 fetching corpus: 4350, signal 156988/197821 (executing program) 2025/08/29 13:32:40 fetching corpus: 4400, signal 157388/198340 (executing program) 2025/08/29 13:32:40 fetching corpus: 4450, signal 157809/198837 (executing program) 2025/08/29 13:32:40 fetching corpus: 4500, signal 158724/199389 (executing program) 2025/08/29 13:32:40 fetching corpus: 4550, signal 159458/199902 (executing program) 2025/08/29 13:32:40 fetching corpus: 4600, signal 159940/200483 (executing program) 2025/08/29 13:32:40 fetching corpus: 4650, signal 160512/201099 (executing program) 2025/08/29 13:32:40 fetching corpus: 4700, signal 161029/201595 (executing program) 2025/08/29 13:32:41 fetching corpus: 4750, signal 161430/202056 (executing program) 2025/08/29 13:32:41 fetching corpus: 4800, signal 161875/202496 (executing program) 2025/08/29 13:32:41 fetching corpus: 4850, signal 162363/202963 (executing program) 2025/08/29 13:32:41 fetching corpus: 4900, signal 162804/203361 (executing program) 2025/08/29 13:32:41 fetching corpus: 4950, signal 163321/203383 (executing program) 2025/08/29 13:32:41 fetching corpus: 5000, signal 163688/203392 (executing program) 2025/08/29 13:32:41 fetching corpus: 5050, signal 164023/203400 (executing program) 2025/08/29 13:32:41 fetching corpus: 5100, signal 164447/203403 (executing program) 2025/08/29 13:32:41 fetching corpus: 5150, signal 165003/203427 (executing program) 2025/08/29 13:32:41 fetching corpus: 5200, signal 165244/203437 (executing program) 2025/08/29 13:32:41 fetching corpus: 5250, signal 165746/203440 (executing program) 2025/08/29 13:32:41 fetching corpus: 5300, signal 166098/203486 (executing program) 2025/08/29 13:32:42 fetching corpus: 5350, signal 166480/203498 (executing program) 2025/08/29 13:32:42 fetching corpus: 5400, signal 166804/203500 (executing program) 2025/08/29 13:32:42 fetching corpus: 5450, signal 167327/203505 (executing program) 2025/08/29 13:32:42 fetching corpus: 5500, signal 167678/203537 (executing program) 2025/08/29 13:32:42 fetching corpus: 5550, signal 168028/203540 (executing program) 2025/08/29 13:32:42 fetching corpus: 5600, signal 168320/203556 (executing program) 2025/08/29 13:32:42 fetching corpus: 5650, signal 168726/203557 (executing program) 2025/08/29 13:32:42 fetching corpus: 5700, signal 169241/203560 (executing program) 2025/08/29 13:32:42 fetching corpus: 5750, signal 169611/203575 (executing program) 2025/08/29 13:32:42 fetching corpus: 5800, signal 170009/203575 (executing program) 2025/08/29 13:32:42 fetching corpus: 5850, signal 170722/203601 (executing program) 2025/08/29 13:32:42 fetching corpus: 5900, signal 171026/203610 (executing program) 2025/08/29 13:32:43 fetching corpus: 5950, signal 171270/203617 (executing program) 2025/08/29 13:32:43 fetching corpus: 6000, signal 171747/203633 (executing program) 2025/08/29 13:32:43 fetching corpus: 6050, signal 171996/203635 (executing program) 2025/08/29 13:32:43 fetching corpus: 6100, signal 172437/203640 (executing program) 2025/08/29 13:32:43 fetching corpus: 6150, signal 172791/203642 (executing program) 2025/08/29 13:32:43 fetching corpus: 6200, signal 173195/203652 (executing program) 2025/08/29 13:32:43 fetching corpus: 6250, signal 173475/203659 (executing program) 2025/08/29 13:32:43 fetching corpus: 6300, signal 173799/203662 (executing program) 2025/08/29 13:32:43 fetching corpus: 6350, signal 174178/203663 (executing program) 2025/08/29 13:32:43 fetching corpus: 6400, signal 174713/203686 (executing program) 2025/08/29 13:32:43 fetching corpus: 6450, signal 175125/203691 (executing program) 2025/08/29 13:32:43 fetching corpus: 6500, signal 175483/203714 (executing program) 2025/08/29 13:32:43 fetching corpus: 6550, signal 175673/203714 (executing program) 2025/08/29 13:32:43 fetching corpus: 6600, signal 175961/203720 (executing program) 2025/08/29 13:32:44 fetching corpus: 6650, signal 176510/203727 (executing program) 2025/08/29 13:32:44 fetching corpus: 6700, signal 176992/203741 (executing program) 2025/08/29 13:32:44 fetching corpus: 6750, signal 177368/203744 (executing program) 2025/08/29 13:32:44 fetching corpus: 6800, signal 177778/203744 (executing program) 2025/08/29 13:32:44 fetching corpus: 6850, signal 178355/203772 (executing program) 2025/08/29 13:32:44 fetching corpus: 6900, signal 178678/203778 (executing program) 2025/08/29 13:32:44 fetching corpus: 6950, signal 178952/203783 (executing program) 2025/08/29 13:32:44 fetching corpus: 7000, signal 179244/203810 (executing program) 2025/08/29 13:32:44 fetching corpus: 7050, signal 179475/203811 (executing program) 2025/08/29 13:32:44 fetching corpus: 7100, signal 179921/203813 (executing program) 2025/08/29 13:32:44 fetching corpus: 7150, signal 180127/203826 (executing program) 2025/08/29 13:32:44 fetching corpus: 7200, signal 180440/203835 (executing program) 2025/08/29 13:32:45 fetching corpus: 7250, signal 180781/203835 (executing program) 2025/08/29 13:32:45 fetching corpus: 7300, signal 181024/203838 (executing program) 2025/08/29 13:32:45 fetching corpus: 7350, signal 181316/203839 (executing program) 2025/08/29 13:32:45 fetching corpus: 7400, signal 181629/203843 (executing program) 2025/08/29 13:32:45 fetching corpus: 7450, signal 181926/203863 (executing program) 2025/08/29 13:32:45 fetching corpus: 7500, signal 182213/203865 (executing program) 2025/08/29 13:32:45 fetching corpus: 7550, signal 182460/203884 (executing program) 2025/08/29 13:32:45 fetching corpus: 7600, signal 182818/203888 (executing program) 2025/08/29 13:32:45 fetching corpus: 7650, signal 183066/203888 (executing program) 2025/08/29 13:32:45 fetching corpus: 7700, signal 183309/203910 (executing program) 2025/08/29 13:32:45 fetching corpus: 7750, signal 183594/203914 (executing program) 2025/08/29 13:32:45 fetching corpus: 7800, signal 183899/203956 (executing program) 2025/08/29 13:32:46 fetching corpus: 7850, signal 184176/203975 (executing program) 2025/08/29 13:32:46 fetching corpus: 7900, signal 184345/203981 (executing program) 2025/08/29 13:32:46 fetching corpus: 7950, signal 184581/203990 (executing program) 2025/08/29 13:32:46 fetching corpus: 8000, signal 184794/203995 (executing program) 2025/08/29 13:32:46 fetching corpus: 8050, signal 185032/204020 (executing program) 2025/08/29 13:32:46 fetching corpus: 8100, signal 185420/204022 (executing program) 2025/08/29 13:32:46 fetching corpus: 8150, signal 186058/204104 (executing program) 2025/08/29 13:32:46 fetching corpus: 8200, signal 186434/204104 (executing program) 2025/08/29 13:32:46 fetching corpus: 8250, signal 186721/204117 (executing program) 2025/08/29 13:32:46 fetching corpus: 8300, signal 186992/204122 (executing program) 2025/08/29 13:32:46 fetching corpus: 8350, signal 187506/204129 (executing program) 2025/08/29 13:32:47 fetching corpus: 8400, signal 187861/204133 (executing program) 2025/08/29 13:32:47 fetching corpus: 8450, signal 188052/204136 (executing program) 2025/08/29 13:32:47 fetching corpus: 8500, signal 188335/204137 (executing program) 2025/08/29 13:32:47 fetching corpus: 8550, signal 188547/204137 (executing program) 2025/08/29 13:32:47 fetching corpus: 8600, signal 188842/204148 (executing program) 2025/08/29 13:32:47 fetching corpus: 8650, signal 189146/204148 (executing program) 2025/08/29 13:32:47 fetching corpus: 8700, signal 189400/204151 (executing program) 2025/08/29 13:32:47 fetching corpus: 8750, signal 189698/204187 (executing program) 2025/08/29 13:32:47 fetching corpus: 8800, signal 189939/204191 (executing program) 2025/08/29 13:32:47 fetching corpus: 8850, signal 190198/204196 (executing program) 2025/08/29 13:32:47 fetching corpus: 8900, signal 190429/204204 (executing program) 2025/08/29 13:32:47 fetching corpus: 8950, signal 190698/204215 (executing program) 2025/08/29 13:32:48 fetching corpus: 9000, signal 190918/204219 (executing program) 2025/08/29 13:32:48 fetching corpus: 9050, signal 191136/204220 (executing program) 2025/08/29 13:32:48 fetching corpus: 9100, signal 191350/204222 (executing program) 2025/08/29 13:32:48 fetching corpus: 9150, signal 191726/204228 (executing program) 2025/08/29 13:32:48 fetching corpus: 9200, signal 192004/204239 (executing program) 2025/08/29 13:32:48 fetching corpus: 9250, signal 192288/204258 (executing program) 2025/08/29 13:32:48 fetching corpus: 9300, signal 192497/204265 (executing program) 2025/08/29 13:32:48 fetching corpus: 9350, signal 192690/204279 (executing program) 2025/08/29 13:32:48 fetching corpus: 9400, signal 192903/204280 (executing program) 2025/08/29 13:32:48 fetching corpus: 9450, signal 193150/204281 (executing program) 2025/08/29 13:32:48 fetching corpus: 9500, signal 193339/204286 (executing program) 2025/08/29 13:32:48 fetching corpus: 9550, signal 193659/204289 (executing program) 2025/08/29 13:32:48 fetching corpus: 9600, signal 193884/204306 (executing program) 2025/08/29 13:32:48 fetching corpus: 9650, signal 194267/204315 (executing program) 2025/08/29 13:32:49 fetching corpus: 9700, signal 194570/204316 (executing program) 2025/08/29 13:32:49 fetching corpus: 9750, signal 194791/204326 (executing program) 2025/08/29 13:32:49 fetching corpus: 9800, signal 195033/204330 (executing program) 2025/08/29 13:32:49 fetching corpus: 9850, signal 195409/204330 (executing program) 2025/08/29 13:32:49 fetching corpus: 9900, signal 195621/204346 (executing program) 2025/08/29 13:32:49 fetching corpus: 9950, signal 195867/204352 (executing program) 2025/08/29 13:32:49 fetching corpus: 10000, signal 196106/204354 (executing program) 2025/08/29 13:32:49 fetching corpus: 10050, signal 196298/204361 (executing program) 2025/08/29 13:32:49 fetching corpus: 10100, signal 196520/204372 (executing program) 2025/08/29 13:32:49 fetching corpus: 10150, signal 196773/204375 (executing program) 2025/08/29 13:32:49 fetching corpus: 10200, signal 197023/204381 (executing program) 2025/08/29 13:32:49 fetching corpus: 10250, signal 197219/204387 (executing program) 2025/08/29 13:32:49 fetching corpus: 10300, signal 197446/204419 (executing program) 2025/08/29 13:32:50 fetching corpus: 10350, signal 197665/204419 (executing program) 2025/08/29 13:32:50 fetching corpus: 10400, signal 197902/204429 (executing program) 2025/08/29 13:32:50 fetching corpus: 10450, signal 198163/204435 (executing program) 2025/08/29 13:32:50 fetching corpus: 10500, signal 198340/204441 (executing program) 2025/08/29 13:32:50 fetching corpus: 10550, signal 198690/204448 (executing program) 2025/08/29 13:32:50 fetching corpus: 10600, signal 199124/204449 (executing program) 2025/08/29 13:32:50 fetching corpus: 10650, signal 199350/204453 (executing program) 2025/08/29 13:32:50 fetching corpus: 10700, signal 199582/204462 (executing program) 2025/08/29 13:32:50 fetching corpus: 10750, signal 199827/204466 (executing program) 2025/08/29 13:32:50 fetching corpus: 10800, signal 200082/204468 (executing program) 2025/08/29 13:32:50 fetching corpus: 10850, signal 200284/204474 (executing program) 2025/08/29 13:32:50 fetching corpus: 10863, signal 200336/204481 (executing program) 2025/08/29 13:32:50 fetching corpus: 10863, signal 200336/204481 (executing program) 2025/08/29 13:32:53 starting 8 fuzzer processes 13:32:53 executing program 0: getgid() 13:32:53 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 13:32:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan3\x00'}) 13:32:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000018000100000000000079f4000a000000776c6e654b17"], 0x1c}], 0x1}, 0x0) 13:32:53 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') write$binfmt_script(r0, 0x0, 0x0) 13:32:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5385, &(0x7f00000010c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x9, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:32:53 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x5, &(0x7f0000000340)) [ 89.557320] audit: type=1400 audit(1756474373.150:7): avc: denied { execmem } for pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:32:53 executing program 6: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) [ 90.776677] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.777767] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.779552] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.781016] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.784340] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.785707] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.788927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.791200] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.799023] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.810337] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.812466] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.813186] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.815413] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.816003] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.822697] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.829458] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.830517] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.832115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.845961] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.856295] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.873634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.874485] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.889147] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.889231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.893324] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.901555] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.905114] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.910642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.912418] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.914461] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.936313] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.943303] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.944082] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.952271] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.953293] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.956012] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.975888] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.989116] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.022817] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.055508] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.846627] Bluetooth: hci1: command tx timeout [ 92.847221] Bluetooth: hci0: command tx timeout [ 92.910350] Bluetooth: hci2: command tx timeout [ 92.910463] Bluetooth: hci3: command tx timeout [ 92.974336] Bluetooth: hci6: command tx timeout [ 92.974664] Bluetooth: hci5: command tx timeout [ 92.975099] Bluetooth: hci4: command tx timeout [ 93.102509] Bluetooth: hci7: command tx timeout [ 94.894430] Bluetooth: hci0: command tx timeout [ 94.894554] Bluetooth: hci1: command tx timeout [ 94.958388] Bluetooth: hci3: command tx timeout [ 94.958528] Bluetooth: hci2: command tx timeout [ 95.022853] Bluetooth: hci6: command tx timeout [ 95.023104] Bluetooth: hci4: command tx timeout [ 95.023795] Bluetooth: hci5: command tx timeout [ 95.151229] Bluetooth: hci7: command tx timeout [ 96.942248] Bluetooth: hci0: command tx timeout [ 96.942710] Bluetooth: hci1: command tx timeout [ 97.006239] Bluetooth: hci3: command tx timeout [ 97.008285] Bluetooth: hci2: command tx timeout [ 97.070363] Bluetooth: hci5: command tx timeout [ 97.070812] Bluetooth: hci6: command tx timeout [ 97.072135] Bluetooth: hci4: command tx timeout [ 97.198461] Bluetooth: hci7: command tx timeout [ 98.990234] Bluetooth: hci0: command tx timeout [ 98.990706] Bluetooth: hci1: command tx timeout [ 99.054331] Bluetooth: hci2: command tx timeout [ 99.054758] Bluetooth: hci3: command tx timeout [ 99.118242] Bluetooth: hci4: command tx timeout [ 99.118681] Bluetooth: hci6: command tx timeout [ 99.118714] Bluetooth: hci5: command tx timeout [ 99.246351] Bluetooth: hci7: command tx timeout [ 135.486315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.486972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.690440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.691029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:33:40 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f00000000c0)=[{0x2, 0x1000}], 0x1) semop(r0, &(0x7f0000000080)=[{0x2, 0x7941}], 0x1) 13:33:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0) [ 136.668408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.669017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.740332] audit: type=1400 audit(1756474420.334:8): avc: denied { open } for pid=3786 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 136.747310] audit: type=1400 audit(1756474420.334:9): avc: denied { kernel } for pid=3786 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 13:33:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0) 13:33:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0) [ 137.095610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.096876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:33:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0) 13:33:41 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0xee00, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f00000001c0)) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000400)=@secondary) add_key(0x0, &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000440)="46e90feb1e6594191f975ce286aabe925155b0b0c762b9605288e5f89f3205cd7af099b26aa29a581d8085123bca2f9fa20884bfbe9fdb591b3a3a8f41f3c5f2e563dcae4163a28628d373ec4555e5e9da0e6af4449042e1a869c2769cfd48e65878d87fe0675dff8206f1a03215f508295c592909ec15121003f2253f08915616b161732a28e463c4613cd36b617b5e6ac2432fc901a721bb8f2bc3bec552f997288d63f9fbc72af264893144fd5d8f96a635e527d2beb82297b08689969cea0a71", 0xc2, r0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) 13:33:41 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0}]) io_submit(0x0, 0x0, 0x0) 13:33:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5385, &(0x7f00000010c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x9, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 137.918198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.918815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.020499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.021124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.157055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.157763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.256488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.257407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.379366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.379997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.474295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.474925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.535875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.536805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.608385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.609023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.650033] audit: type=1400 audit(1756474422.244:10): avc: denied { read } for pid=3901 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 138.653631] audit: type=1400 audit(1756474422.247:11): avc: denied { write } for pid=3901 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 138.674515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.675092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.689691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.690468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.746543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.747199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.767942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.768536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:33:42 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:33:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5385, &(0x7f00000010c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x9, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:33:42 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x5, &(0x7f0000000340)) 13:33:42 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0}]) io_submit(0x0, 0x0, 0x0) 13:33:42 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0}]) io_submit(0x0, 0x0, 0x0) 13:33:42 executing program 7: perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:33:42 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 13:33:42 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000100)={0x53, 0x0, 0x6, 0xe5, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000080)="a873d6abd06f", 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0}) 13:33:42 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') getdents(r0, 0x0, 0x0) 13:33:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5385, &(0x7f00000010c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x9, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:33:42 executing program 7: perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:33:42 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x5, &(0x7f0000000340)) 13:33:42 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0}]) io_submit(0x0, 0x0, 0x0) 13:33:42 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) flistxattr(r0, &(0x7f0000001280)=""/4, 0x4) 13:33:42 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 13:33:42 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:33:42 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x5, &(0x7f0000000340)) 13:33:42 executing program 4: io_uring_setup(0x2b5d, &(0x7f0000000180)={0x0, 0x0, 0x40000}) 13:33:42 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0}]) io_submit(0x0, 0x0, 0x0) 13:33:42 executing program 7: perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 139.169463] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 139.170386] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 139.170995] CPU: 0 UID: 0 PID: 3946 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 139.172260] Tainted: [W]=WARN [ 139.173013] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 139.175107] RIP: 0010:perf_tp_event+0x175/0xe70 [ 139.176481] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 139.180067] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012 [ 139.180493] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 139.181055] RDX: ffff8880165d0000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 139.181584] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc06f20 [ 139.182103] R10: 0000000000000000 R11: 000000000000002c R12: dffffc0000000000 [ 139.182623] R13: 000000000000002c R14: ffff88806ce31490 R15: dffffc0000000000 [ 139.183152] FS: 0000555569e84400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 139.183740] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.184198] CR2: 0000555569e85c18 CR3: 000000001778b000 CR4: 0000000000350ef0 [ 139.184729] Call Trace: [ 139.184935] [ 139.185109] ? arch_stack_walk+0x86/0xf0 [ 139.185417] ? __pfx_perf_tp_event+0x10/0x10 [ 139.185749] ? __lock_acquire+0x694/0x1b70 [ 139.186068] ? trace_softirq_raise+0xbe/0x100 [ 139.186410] ? lock_acquire+0x15e/0x2f0 [ 139.186707] ? select_task_rq_fair+0x2b6/0x38b0 [ 139.187062] ? find_held_lock+0x2b/0x80 [ 139.187363] ? select_task_rq_fair+0x48c/0x38b0 [ 139.187707] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 139.188134] ? trace_ipi_send_cpu.constprop.0+0x158/0x1c0 [ 139.188542] ? __smp_call_single_queue+0x15b/0x2f0 [ 139.188909] ? __pfx___smp_call_single_queue+0x10/0x10 [ 139.189301] ? perf_trace_run_bpf_submit+0xef/0x180 [ 139.189673] ? lock_release+0xc8/0x290 [ 139.189963] perf_trace_run_bpf_submit+0xef/0x180 [ 139.190326] perf_trace_lock_acquire+0x3c2/0x700 [ 139.190679] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 139.191037] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 139.191423] ? mark_held_locks+0x49/0x80 [ 139.191727] ? trace_rcu_utilization+0x26/0x190 [ 139.192080] lock_acquire+0xc5/0x2f0 [ 139.192359] ? hrtimer_interrupt+0xd6/0x830 [ 139.192678] ? __pfx_rcu_core+0x10/0x10 [ 139.192978] _raw_spin_lock_irqsave+0x3a/0x60 [ 139.193315] ? hrtimer_interrupt+0xd6/0x830 [ 139.193632] hrtimer_interrupt+0xd6/0x830 [ 139.193940] ? __local_bh_enable+0x7b/0x90 [ 139.194256] ? handle_softirqs+0x50c/0x770 [ 139.194577] __sysvec_apic_timer_interrupt+0xbb/0x330 [ 139.194966] sysvec_apic_timer_interrupt+0x6b/0x80 [ 139.195331] [ 139.195502] [ 139.195673] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 139.196057] RIP: 0010:oops_enter+0x41/0x70 [ 139.196373] Code: 13 01 8b 1d 31 ee 4e 06 31 ff 89 de e8 98 ec 39 00 85 db 74 0a e8 5f f1 39 00 e8 7a ed ff ff e8 55 f1 39 00 8b 1d f3 b5 09 05 <31> ff 89 de e8 76 ec 39 00 85 db 75 06 5b e9 3c f1 39 00 e8 37 f1 [ 139.197681] RSP: 0018:ffff88801ff57620 EFLAGS: 00000293 [ 139.198071] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8139f618 [ 139.198588] RDX: ffff8880165d0000 RSI: ffffffff8139f62b RDI: 0000000000000005 [ 139.199111] RBP: ffff88801ff57718 R08: 0000000000000001 R09: fffffbfff0c87706 [ 139.199629] R10: 0000000000000000 R11: 202c746c75616620 R12: ffff88801ff57684 [ 139.200146] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000 [ 139.200666] ? oops_enter+0x28/0x70 [ 139.200941] ? oops_enter+0x3b/0x70 [ 139.201218] oops_begin+0xc/0x80 [ 139.201479] die_addr+0x1e/0xa0 [ 139.201728] exc_general_protection+0x1a2/0x330 [ 139.202080] asm_exc_general_protection+0x26/0x30 [ 139.202436] RIP: 0010:perf_tp_event+0x175/0xe70 [ 139.202783] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 139.204097] RSP: 0018:ffff88801ff577c0 EFLAGS: 00010212 [ 139.204486] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 139.205002] RDX: ffff8880165d0000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 139.205518] RBP: ffff88801ff57a30 R08: ffff88806ce31340 R09: ffffe8ffffc06f20 [ 139.206034] R10: 0000000000000000 R11: 000000000000002c R12: dffffc0000000000 [ 139.206551] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 139.207079] ? perf_tp_event+0x167/0xe70 [ 139.207391] ? __pfx_perf_tp_event+0x10/0x10 [ 139.207722] ? cpu_util.constprop.0+0x17d/0x340 [ 139.208071] ? __asan_memset+0x24/0x50 [ 139.208362] ? sched_balance_find_dst_group+0xa9a/0x1c00 [ 139.208762] ? lock_release+0xc8/0x290 [ 139.209057] ? __pfx_sched_balance_find_dst_group+0x10/0x10 [ 139.209469] ? __lock_acquire+0x694/0x1b70 [ 139.209787] ? perf_trace_run_bpf_submit+0xef/0x180 [ 139.210157] perf_trace_run_bpf_submit+0xef/0x180 [ 139.210520] perf_trace_lock_acquire+0x3c2/0x700 [ 139.210881] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 139.211271] ? lock_acquire+0x15e/0x2f0 [ 139.211569] lock_acquire+0xc5/0x2f0 [ 139.211848] ? futex_private_hash_put+0x4c/0x2d0 [ 139.212198] ? futex_hash+0x2d8/0x390 [ 139.212481] ? lock_release+0xc8/0x290 [ 139.212773] futex_private_hash_put+0x5d/0x2d0 [ 139.213111] ? futex_private_hash_put+0x4c/0x2d0 [ 139.213461] futex_hash_put+0x3f/0x50 [ 139.213745] futex_wake+0x1bb/0x540 [ 139.214021] ? kernel_clone+0x204/0x7f0 [ 139.214316] ? __pfx_futex_wake+0x10/0x10 [ 139.214625] ? __pfx_kernel_clone+0x10/0x10 [ 139.214951] ? __lock_acquire+0x694/0x1b70 [ 139.215267] do_futex+0x26d/0x370 [ 139.215530] ? __pfx_do_futex+0x10/0x10 [ 139.215827] ? __pfx___do_sys_clone+0x10/0x10 [ 139.216158] ? find_held_lock+0x2b/0x80 [ 139.216460] __x64_sys_futex+0x1c9/0x4d0 [ 139.216764] ? __pfx___x64_sys_futex+0x10/0x10 [ 139.217107] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 139.217493] do_syscall_64+0xbf/0x360 [ 139.217777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.218155] RIP: 0033:0x7fc800307b19 [ 139.218430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 139.219747] RSP: 002b:00007ffdce201fa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 139.220298] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc800307b19 [ 139.220816] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc80041af68 [ 139.221333] RBP: 00007fc80041af60 R08: 00007fc7fd87d700 R09: 0000000000000000 [ 139.221850] R10: 00007fc7fd87d700 R11: 0000000000000246 R12: 00007fc80041fa68 [ 139.222368] R13: 00007ffdce2020b0 R14: 00007fc80041af60 R15: 0000000000021f2f [ 139.222898] [ 139.223074] Modules linked in: [ 139.223317] ---[ end trace 0000000000000000 ]--- [ 139.223320] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI [ 139.223660] RIP: 0010:perf_tp_event+0x175/0xe70 [ 139.224532] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 139.224869] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 139.225528] CPU: 1 UID: 0 PID: 3953 Comm: syz-executor.3 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 139.226825] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012 [ 139.227733] Tainted: [D]=DIE, [W]=WARN [ 139.228116] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 139.228412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 139.228928] RDX: ffff8880165d0000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 139.229553] RIP: 0010:perf_tp_event+0x175/0xe70 [ 139.230068] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc06f20 [ 139.230422] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 139.230943] R10: 0000000000000000 R11: 000000000000002c R12: dffffc0000000000 [ 139.232320] RSP: 0018:ffff88801b9ef600 EFLAGS: 00010212 [ 139.232836] R13: 000000000000002c R14: ffff88806ce31490 R15: dffffc0000000000 [ 139.232838] [ 139.232848] FS: 0000555569e84400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 139.233243] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90001634000 [ 139.233759] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.233892] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 139.234470] CR2: 0000555569e85c18 CR3: 000000001778b000 CR4: 0000000000350ef0 [ 139.235017] RBP: ffff88801b9ef870 R08: ffff88806cf31340 R09: ffffe8ffffd06f20 [ 139.235440] Kernel panic - not syncing: Fatal exception in interrupt [ 139.237774] Kernel Offset: disabled [ 139.238041] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 13:33:42 Registers: info registers vcpu 0 RAX=000000000000002b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff88806ce083d8 R8 =0000000000000000 R9 =ffffed1001482046 R10=000000000000002b R11=000000000000002c R12=000000000000002b R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555569e84400 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555569e85c18 CR3=000000001778b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fc8003ee7c000007fc8003ee7c8 XMM02=00007fc8003ee7e000007fc8003ee7c0 XMM03=00007fc8003ee7c800007fc8003ee7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84bdec0e RDX=fffffbfff0f0ec09 RSI=0000000000000004 RDI=ffffffff87876044 RBP=ffffffff87876044 RSP=ffff88801b9ef3b0 R8 =0000000000000000 R9 =fffffbfff0f0ec08 R10=ffffffff87876047 R11=202c746c75616620 R12=1ffff1100373de77 R13=0000000000000007 R14=fffffbfff0f0ec08 R15=ffff88801b9ef3e8 RIP=ffffffff84bdeda0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007efd6d6e3700 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb3bb0c8d58 CR3=000000000dbb8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007efd702547c000007efd702547c8 XMM02=00007efd702547e000007efd702547c0 XMM03=00007efd702547c800007efd702547c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000