Warning: Permanently added '[localhost]:63225' (ECDSA) to the list of known hosts. 2025/08/29 13:35:27 fuzzer started 2025/08/29 13:35:28 dialing manager at localhost:43077 syzkaller login: [ 51.086785] cgroup: Unknown subsys name 'net' [ 51.155776] cgroup: Unknown subsys name 'cpuset' [ 51.176464] cgroup: Unknown subsys name 'rlimit' 2025/08/29 13:35:38 syscalls: 2214 2025/08/29 13:35:38 code coverage: enabled 2025/08/29 13:35:38 comparison tracing: enabled 2025/08/29 13:35:38 extra coverage: enabled 2025/08/29 13:35:38 setuid sandbox: enabled 2025/08/29 13:35:38 namespace sandbox: enabled 2025/08/29 13:35:38 Android sandbox: enabled 2025/08/29 13:35:38 fault injection: enabled 2025/08/29 13:35:38 leak checking: enabled 2025/08/29 13:35:38 net packet injection: enabled 2025/08/29 13:35:38 net device setup: enabled 2025/08/29 13:35:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 13:35:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 13:35:38 USB emulation: enabled 2025/08/29 13:35:38 hci packet injection: enabled 2025/08/29 13:35:38 wifi device emulation: enabled 2025/08/29 13:35:38 802.15.4 emulation: enabled 2025/08/29 13:35:38 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 13:35:38 fetching corpus: 50, signal 18650/22293 (executing program) 2025/08/29 13:35:38 fetching corpus: 100, signal 32449/37496 (executing program) 2025/08/29 13:35:39 fetching corpus: 150, signal 39297/45733 (executing program) 2025/08/29 13:35:39 fetching corpus: 200, signal 49487/57035 (executing program) 2025/08/29 13:35:39 fetching corpus: 250, signal 53802/62637 (executing program) 2025/08/29 13:35:39 fetching corpus: 300, signal 58893/68834 (executing program) 2025/08/29 13:35:39 fetching corpus: 350, signal 63755/74793 (executing program) 2025/08/29 13:35:39 fetching corpus: 400, signal 66517/78664 (executing program) 2025/08/29 13:35:39 fetching corpus: 450, signal 69278/82525 (executing program) 2025/08/29 13:35:39 fetching corpus: 500, signal 73649/87711 (executing program) 2025/08/29 13:35:39 fetching corpus: 550, signal 75331/90495 (executing program) 2025/08/29 13:35:39 fetching corpus: 600, signal 77404/93553 (executing program) 2025/08/29 13:35:39 fetching corpus: 650, signal 80175/97179 (executing program) 2025/08/29 13:35:39 fetching corpus: 700, signal 82545/100444 (executing program) 2025/08/29 13:35:40 fetching corpus: 750, signal 84662/103419 (executing program) 2025/08/29 13:35:40 fetching corpus: 800, signal 86639/106232 (executing program) 2025/08/29 13:35:40 fetching corpus: 850, signal 88045/108579 (executing program) 2025/08/29 13:35:40 fetching corpus: 900, signal 90387/111638 (executing program) 2025/08/29 13:35:40 fetching corpus: 950, signal 91571/113678 (executing program) 2025/08/29 13:35:40 fetching corpus: 1000, signal 93358/116173 (executing program) 2025/08/29 13:35:40 fetching corpus: 1050, signal 95560/118959 (executing program) 2025/08/29 13:35:40 fetching corpus: 1100, signal 97425/121458 (executing program) 2025/08/29 13:35:40 fetching corpus: 1150, signal 99697/124242 (executing program) 2025/08/29 13:35:40 fetching corpus: 1200, signal 101326/126498 (executing program) 2025/08/29 13:35:41 fetching corpus: 1250, signal 102684/128526 (executing program) 2025/08/29 13:35:41 fetching corpus: 1300, signal 104225/130618 (executing program) 2025/08/29 13:35:41 fetching corpus: 1350, signal 105752/132730 (executing program) 2025/08/29 13:35:41 fetching corpus: 1400, signal 107157/134695 (executing program) 2025/08/29 13:35:41 fetching corpus: 1450, signal 108402/136492 (executing program) 2025/08/29 13:35:41 fetching corpus: 1500, signal 109502/138146 (executing program) 2025/08/29 13:35:41 fetching corpus: 1550, signal 111109/140256 (executing program) 2025/08/29 13:35:41 fetching corpus: 1600, signal 112494/142155 (executing program) 2025/08/29 13:35:41 fetching corpus: 1650, signal 113688/143835 (executing program) 2025/08/29 13:35:41 fetching corpus: 1700, signal 114853/145490 (executing program) 2025/08/29 13:35:41 fetching corpus: 1750, signal 115834/147002 (executing program) 2025/08/29 13:35:41 fetching corpus: 1800, signal 116895/148542 (executing program) 2025/08/29 13:35:42 fetching corpus: 1850, signal 118054/150152 (executing program) 2025/08/29 13:35:42 fetching corpus: 1900, signal 119437/151906 (executing program) 2025/08/29 13:35:42 fetching corpus: 1950, signal 120554/153412 (executing program) 2025/08/29 13:35:42 fetching corpus: 2000, signal 121703/154880 (executing program) 2025/08/29 13:35:42 fetching corpus: 2050, signal 122887/156399 (executing program) 2025/08/29 13:35:42 fetching corpus: 2100, signal 123690/157667 (executing program) 2025/08/29 13:35:42 fetching corpus: 2150, signal 125158/159309 (executing program) 2025/08/29 13:35:42 fetching corpus: 2200, signal 125859/160479 (executing program) 2025/08/29 13:35:42 fetching corpus: 2250, signal 127107/161897 (executing program) 2025/08/29 13:35:42 fetching corpus: 2300, signal 127875/163059 (executing program) 2025/08/29 13:35:42 fetching corpus: 2350, signal 129065/164421 (executing program) 2025/08/29 13:35:43 fetching corpus: 2400, signal 130074/165670 (executing program) 2025/08/29 13:35:43 fetching corpus: 2450, signal 131134/166908 (executing program) 2025/08/29 13:35:43 fetching corpus: 2500, signal 131636/167892 (executing program) 2025/08/29 13:35:43 fetching corpus: 2550, signal 132289/168923 (executing program) 2025/08/29 13:35:43 fetching corpus: 2600, signal 133054/169970 (executing program) 2025/08/29 13:35:43 fetching corpus: 2650, signal 134066/171170 (executing program) 2025/08/29 13:35:43 fetching corpus: 2700, signal 135235/172346 (executing program) 2025/08/29 13:35:43 fetching corpus: 2750, signal 136319/173530 (executing program) 2025/08/29 13:35:43 fetching corpus: 2800, signal 139804/175703 (executing program) 2025/08/29 13:35:43 fetching corpus: 2850, signal 140411/176502 (executing program) 2025/08/29 13:35:43 fetching corpus: 2900, signal 141082/177412 (executing program) 2025/08/29 13:35:44 fetching corpus: 2950, signal 141947/178348 (executing program) 2025/08/29 13:35:44 fetching corpus: 3000, signal 142579/179240 (executing program) 2025/08/29 13:35:44 fetching corpus: 3050, signal 143186/180085 (executing program) 2025/08/29 13:35:44 fetching corpus: 3100, signal 143829/180956 (executing program) 2025/08/29 13:35:44 fetching corpus: 3150, signal 144544/181876 (executing program) 2025/08/29 13:35:44 fetching corpus: 3200, signal 145183/182731 (executing program) 2025/08/29 13:35:44 fetching corpus: 3250, signal 146057/183556 (executing program) 2025/08/29 13:35:44 fetching corpus: 3300, signal 146914/184370 (executing program) 2025/08/29 13:35:44 fetching corpus: 3350, signal 147485/185113 (executing program) 2025/08/29 13:35:45 fetching corpus: 3400, signal 148016/185868 (executing program) 2025/08/29 13:35:45 fetching corpus: 3450, signal 148704/186658 (executing program) 2025/08/29 13:35:45 fetching corpus: 3500, signal 149112/187331 (executing program) 2025/08/29 13:35:45 fetching corpus: 3550, signal 149916/188088 (executing program) 2025/08/29 13:35:45 fetching corpus: 3600, signal 150358/188742 (executing program) 2025/08/29 13:35:45 fetching corpus: 3650, signal 151020/189483 (executing program) 2025/08/29 13:35:45 fetching corpus: 3700, signal 151401/190124 (executing program) 2025/08/29 13:35:45 fetching corpus: 3750, signal 151793/190743 (executing program) 2025/08/29 13:35:45 fetching corpus: 3800, signal 152536/191448 (executing program) 2025/08/29 13:35:45 fetching corpus: 3850, signal 153193/192213 (executing program) 2025/08/29 13:35:45 fetching corpus: 3900, signal 153730/192885 (executing program) 2025/08/29 13:35:46 fetching corpus: 3950, signal 154430/193539 (executing program) 2025/08/29 13:35:46 fetching corpus: 4000, signal 154993/194185 (executing program) 2025/08/29 13:35:46 fetching corpus: 4050, signal 155723/194965 (executing program) 2025/08/29 13:35:46 fetching corpus: 4100, signal 156230/195563 (executing program) 2025/08/29 13:35:46 fetching corpus: 4150, signal 156849/196146 (executing program) 2025/08/29 13:35:46 fetching corpus: 4200, signal 157532/196686 (executing program) 2025/08/29 13:35:46 fetching corpus: 4250, signal 158138/197265 (executing program) 2025/08/29 13:35:46 fetching corpus: 4300, signal 158567/197791 (executing program) 2025/08/29 13:35:46 fetching corpus: 4350, signal 159067/198322 (executing program) 2025/08/29 13:35:46 fetching corpus: 4400, signal 159444/198823 (executing program) 2025/08/29 13:35:46 fetching corpus: 4450, signal 159889/199332 (executing program) 2025/08/29 13:35:47 fetching corpus: 4500, signal 160500/199841 (executing program) 2025/08/29 13:35:47 fetching corpus: 4550, signal 161037/200305 (executing program) 2025/08/29 13:35:47 fetching corpus: 4600, signal 161341/200767 (executing program) 2025/08/29 13:35:47 fetching corpus: 4650, signal 161783/201244 (executing program) 2025/08/29 13:35:47 fetching corpus: 4700, signal 162103/201701 (executing program) 2025/08/29 13:35:47 fetching corpus: 4750, signal 162573/202149 (executing program) 2025/08/29 13:35:47 fetching corpus: 4800, signal 163076/202575 (executing program) 2025/08/29 13:35:47 fetching corpus: 4850, signal 163608/202969 (executing program) 2025/08/29 13:35:47 fetching corpus: 4900, signal 164080/203398 (executing program) 2025/08/29 13:35:47 fetching corpus: 4950, signal 164715/203485 (executing program) 2025/08/29 13:35:48 fetching corpus: 5000, signal 165066/203514 (executing program) 2025/08/29 13:35:48 fetching corpus: 5050, signal 165501/203514 (executing program) 2025/08/29 13:35:48 fetching corpus: 5100, signal 166159/203527 (executing program) 2025/08/29 13:35:48 fetching corpus: 5150, signal 166539/203535 (executing program) 2025/08/29 13:35:48 fetching corpus: 5200, signal 166803/203547 (executing program) 2025/08/29 13:35:48 fetching corpus: 5250, signal 167178/203558 (executing program) 2025/08/29 13:35:48 fetching corpus: 5300, signal 167655/203574 (executing program) 2025/08/29 13:35:48 fetching corpus: 5350, signal 168045/203587 (executing program) 2025/08/29 13:35:48 fetching corpus: 5400, signal 168606/203596 (executing program) 2025/08/29 13:35:48 fetching corpus: 5450, signal 169057/203661 (executing program) 2025/08/29 13:35:48 fetching corpus: 5500, signal 169331/203679 (executing program) 2025/08/29 13:35:48 fetching corpus: 5550, signal 169813/203881 (executing program) 2025/08/29 13:35:49 fetching corpus: 5600, signal 170176/203886 (executing program) 2025/08/29 13:35:49 fetching corpus: 5650, signal 170553/203893 (executing program) 2025/08/29 13:35:49 fetching corpus: 5700, signal 170981/203894 (executing program) 2025/08/29 13:35:49 fetching corpus: 5750, signal 171351/203955 (executing program) 2025/08/29 13:35:49 fetching corpus: 5800, signal 171683/203960 (executing program) 2025/08/29 13:35:49 fetching corpus: 5850, signal 172054/203961 (executing program) 2025/08/29 13:35:49 fetching corpus: 5900, signal 172392/203967 (executing program) 2025/08/29 13:35:49 fetching corpus: 5950, signal 172768/203984 (executing program) 2025/08/29 13:35:49 fetching corpus: 6000, signal 173097/203988 (executing program) 2025/08/29 13:35:49 fetching corpus: 6050, signal 173442/203994 (executing program) 2025/08/29 13:35:49 fetching corpus: 6100, signal 173875/203998 (executing program) 2025/08/29 13:35:49 fetching corpus: 6150, signal 174184/204018 (executing program) 2025/08/29 13:35:49 fetching corpus: 6200, signal 174424/204024 (executing program) 2025/08/29 13:35:50 fetching corpus: 6250, signal 174697/204038 (executing program) 2025/08/29 13:35:50 fetching corpus: 6300, signal 175011/204039 (executing program) 2025/08/29 13:35:50 fetching corpus: 6350, signal 175348/204049 (executing program) 2025/08/29 13:35:50 fetching corpus: 6400, signal 175610/204068 (executing program) 2025/08/29 13:35:50 fetching corpus: 6450, signal 175996/204083 (executing program) 2025/08/29 13:35:50 fetching corpus: 6500, signal 176510/204192 (executing program) 2025/08/29 13:35:50 fetching corpus: 6550, signal 176937/204203 (executing program) 2025/08/29 13:35:50 fetching corpus: 6600, signal 177259/204208 (executing program) 2025/08/29 13:35:50 fetching corpus: 6650, signal 177464/204220 (executing program) 2025/08/29 13:35:50 fetching corpus: 6700, signal 177814/204241 (executing program) 2025/08/29 13:35:50 fetching corpus: 6750, signal 178027/204248 (executing program) 2025/08/29 13:35:51 fetching corpus: 6800, signal 178275/204249 (executing program) 2025/08/29 13:35:51 fetching corpus: 6850, signal 178615/204249 (executing program) 2025/08/29 13:35:51 fetching corpus: 6900, signal 178931/204252 (executing program) 2025/08/29 13:35:51 fetching corpus: 6950, signal 179429/204255 (executing program) 2025/08/29 13:35:51 fetching corpus: 7000, signal 179690/204275 (executing program) 2025/08/29 13:35:51 fetching corpus: 7050, signal 179973/204325 (executing program) 2025/08/29 13:35:51 fetching corpus: 7100, signal 180317/204333 (executing program) 2025/08/29 13:35:51 fetching corpus: 7150, signal 180682/204358 (executing program) 2025/08/29 13:35:51 fetching corpus: 7200, signal 180990/204358 (executing program) 2025/08/29 13:35:51 fetching corpus: 7250, signal 181306/204397 (executing program) 2025/08/29 13:35:51 fetching corpus: 7300, signal 181626/204397 (executing program) 2025/08/29 13:35:52 fetching corpus: 7349, signal 181914/204400 (executing program) 2025/08/29 13:35:52 fetching corpus: 7399, signal 182208/204417 (executing program) 2025/08/29 13:35:52 fetching corpus: 7449, signal 182431/204417 (executing program) 2025/08/29 13:35:52 fetching corpus: 7499, signal 182749/204420 (executing program) 2025/08/29 13:35:52 fetching corpus: 7549, signal 183087/204444 (executing program) 2025/08/29 13:35:52 fetching corpus: 7599, signal 183286/204454 (executing program) 2025/08/29 13:35:52 fetching corpus: 7649, signal 183765/204500 (executing program) 2025/08/29 13:35:52 fetching corpus: 7699, signal 184007/204500 (executing program) 2025/08/29 13:35:52 fetching corpus: 7749, signal 184274/204514 (executing program) 2025/08/29 13:35:52 fetching corpus: 7799, signal 184543/204514 (executing program) 2025/08/29 13:35:52 fetching corpus: 7849, signal 184882/204517 (executing program) 2025/08/29 13:35:52 fetching corpus: 7899, signal 185161/204520 (executing program) 2025/08/29 13:35:53 fetching corpus: 7949, signal 185430/204523 (executing program) 2025/08/29 13:35:53 fetching corpus: 7999, signal 185613/204539 (executing program) 2025/08/29 13:35:53 fetching corpus: 8049, signal 185938/204539 (executing program) 2025/08/29 13:35:53 fetching corpus: 8099, signal 186293/204540 (executing program) 2025/08/29 13:35:53 fetching corpus: 8149, signal 186597/204555 (executing program) 2025/08/29 13:35:53 fetching corpus: 8199, signal 186883/204555 (executing program) 2025/08/29 13:35:53 fetching corpus: 8249, signal 187326/204568 (executing program) 2025/08/29 13:35:53 fetching corpus: 8299, signal 187552/204576 (executing program) 2025/08/29 13:35:53 fetching corpus: 8349, signal 187720/204581 (executing program) 2025/08/29 13:35:53 fetching corpus: 8399, signal 188082/204583 (executing program) 2025/08/29 13:35:53 fetching corpus: 8449, signal 188357/204598 (executing program) 2025/08/29 13:35:53 fetching corpus: 8499, signal 188674/204602 (executing program) 2025/08/29 13:35:53 fetching corpus: 8549, signal 188872/204603 (executing program) 2025/08/29 13:35:54 fetching corpus: 8599, signal 189182/204611 (executing program) 2025/08/29 13:35:54 fetching corpus: 8649, signal 189405/204618 (executing program) 2025/08/29 13:35:54 fetching corpus: 8699, signal 189655/204621 (executing program) 2025/08/29 13:35:54 fetching corpus: 8749, signal 189857/204622 (executing program) 2025/08/29 13:35:54 fetching corpus: 8799, signal 190177/204640 (executing program) 2025/08/29 13:35:54 fetching corpus: 8849, signal 190422/204644 (executing program) 2025/08/29 13:35:54 fetching corpus: 8899, signal 190671/204665 (executing program) 2025/08/29 13:35:54 fetching corpus: 8949, signal 190840/204667 (executing program) 2025/08/29 13:35:54 fetching corpus: 8999, signal 191064/204672 (executing program) 2025/08/29 13:35:54 fetching corpus: 9049, signal 191389/204679 (executing program) 2025/08/29 13:35:54 fetching corpus: 9099, signal 191689/204685 (executing program) 2025/08/29 13:35:54 fetching corpus: 9149, signal 191927/204688 (executing program) 2025/08/29 13:35:54 fetching corpus: 9199, signal 192164/204688 (executing program) 2025/08/29 13:35:55 fetching corpus: 9249, signal 192613/204716 (executing program) 2025/08/29 13:35:55 fetching corpus: 9299, signal 192852/204718 (executing program) 2025/08/29 13:35:55 fetching corpus: 9349, signal 193055/204721 (executing program) 2025/08/29 13:35:55 fetching corpus: 9399, signal 193257/204730 (executing program) 2025/08/29 13:35:55 fetching corpus: 9449, signal 193458/204750 (executing program) 2025/08/29 13:35:55 fetching corpus: 9499, signal 193662/204751 (executing program) 2025/08/29 13:35:55 fetching corpus: 9549, signal 193900/204761 (executing program) 2025/08/29 13:35:55 fetching corpus: 9599, signal 194172/204765 (executing program) 2025/08/29 13:35:55 fetching corpus: 9649, signal 194353/204767 (executing program) 2025/08/29 13:35:55 fetching corpus: 9699, signal 194627/204770 (executing program) 2025/08/29 13:35:55 fetching corpus: 9749, signal 194860/204770 (executing program) 2025/08/29 13:35:55 fetching corpus: 9799, signal 195127/204771 (executing program) 2025/08/29 13:35:55 fetching corpus: 9849, signal 195303/204790 (executing program) 2025/08/29 13:35:56 fetching corpus: 9899, signal 195551/204790 (executing program) 2025/08/29 13:35:56 fetching corpus: 9949, signal 195755/204804 (executing program) 2025/08/29 13:35:56 fetching corpus: 9999, signal 196031/204811 (executing program) 2025/08/29 13:35:56 fetching corpus: 10049, signal 196262/204811 (executing program) 2025/08/29 13:35:56 fetching corpus: 10099, signal 196448/204826 (executing program) 2025/08/29 13:35:56 fetching corpus: 10149, signal 196640/204831 (executing program) 2025/08/29 13:35:56 fetching corpus: 10199, signal 196809/204835 (executing program) 2025/08/29 13:35:56 fetching corpus: 10249, signal 197113/204878 (executing program) 2025/08/29 13:35:56 fetching corpus: 10299, signal 197270/204898 (executing program) 2025/08/29 13:35:56 fetching corpus: 10349, signal 197497/204907 (executing program) 2025/08/29 13:35:56 fetching corpus: 10399, signal 197657/204908 (executing program) 2025/08/29 13:35:56 fetching corpus: 10449, signal 197814/204918 (executing program) 2025/08/29 13:35:56 fetching corpus: 10499, signal 198050/204925 (executing program) 2025/08/29 13:35:56 fetching corpus: 10549, signal 198753/205000 (executing program) 2025/08/29 13:35:57 fetching corpus: 10599, signal 199040/205007 (executing program) 2025/08/29 13:35:57 fetching corpus: 10649, signal 199230/205009 (executing program) 2025/08/29 13:35:57 fetching corpus: 10699, signal 199439/205023 (executing program) 2025/08/29 13:35:57 fetching corpus: 10749, signal 199989/205027 (executing program) 2025/08/29 13:35:57 fetching corpus: 10799, signal 200234/205030 (executing program) 2025/08/29 13:35:57 fetching corpus: 10849, signal 200469/205033 (executing program) 2025/08/29 13:35:57 fetching corpus: 10899, signal 200644/205036 (executing program) 2025/08/29 13:35:57 fetching corpus: 10949, signal 200853/205036 (executing program) 2025/08/29 13:35:57 fetching corpus: 10975, signal 200966/205036 (executing program) 2025/08/29 13:35:57 fetching corpus: 10975, signal 200966/205036 (executing program) 2025/08/29 13:35:59 starting 8 fuzzer processes 13:35:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x46, 0x0, &(0x7f00000018c0)) 13:35:59 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x3a, 0x0, &(0x7f0000001180)) 13:35:59 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000000)=""/137, 0x89, 0x3f) 13:35:59 executing program 2: r0 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 13:35:59 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4c, &(0x7f0000000000)) 13:35:59 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0) 13:35:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1, 0x2, 0x0) [ 82.476976] audit: type=1400 audit(1756474559.594:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:35:59 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e2b947400028001000272000004f8", 0x16}], 0x0, &(0x7f0000010d00)=ANY=[]) [ 83.719673] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.722203] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.724414] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.729018] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.730659] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.732540] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.734146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.735958] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.739735] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.741540] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.745280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.754177] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.755637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.758090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.760308] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.763197] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.765784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.774878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.779602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.783328] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.792071] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.793607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.803543] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.807019] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.812064] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.814096] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.814617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.817101] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.818615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.824925] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.828669] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.842093] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.844187] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.848327] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.852502] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.853186] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.856990] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.859956] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.887185] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.904176] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.808776] Bluetooth: hci0: command tx timeout [ 85.872617] Bluetooth: hci2: command tx timeout [ 85.873246] Bluetooth: hci1: command tx timeout [ 85.873887] Bluetooth: hci3: command tx timeout [ 85.937489] Bluetooth: hci5: command tx timeout [ 85.938294] Bluetooth: hci6: command tx timeout [ 85.938887] Bluetooth: hci4: command tx timeout [ 86.002542] Bluetooth: hci7: command tx timeout [ 87.857097] Bluetooth: hci0: command tx timeout [ 87.920457] Bluetooth: hci1: command tx timeout [ 87.920863] Bluetooth: hci3: command tx timeout [ 87.921298] Bluetooth: hci2: command tx timeout [ 87.984430] Bluetooth: hci5: command tx timeout [ 87.984832] Bluetooth: hci4: command tx timeout [ 87.985268] Bluetooth: hci6: command tx timeout [ 88.048388] Bluetooth: hci7: command tx timeout [ 89.905592] Bluetooth: hci0: command tx timeout [ 89.970925] Bluetooth: hci2: command tx timeout [ 89.972447] Bluetooth: hci3: command tx timeout [ 89.973080] Bluetooth: hci1: command tx timeout [ 90.033031] Bluetooth: hci6: command tx timeout [ 90.033710] Bluetooth: hci4: command tx timeout [ 90.034323] Bluetooth: hci5: command tx timeout [ 90.096735] Bluetooth: hci7: command tx timeout [ 91.952481] Bluetooth: hci0: command tx timeout [ 92.016545] Bluetooth: hci1: command tx timeout [ 92.016974] Bluetooth: hci3: command tx timeout [ 92.018043] Bluetooth: hci2: command tx timeout [ 92.081397] Bluetooth: hci5: command tx timeout [ 92.081419] Bluetooth: hci4: command tx timeout [ 92.081862] Bluetooth: hci6: command tx timeout [ 92.144409] Bluetooth: hci7: command tx timeout [ 121.612127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.613053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.791744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.792350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:36:39 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ext4\x00', 0x0, 0x0) [ 122.383137] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 122.408977] EXT4-fs (loop4): unable to read superblock 13:36:39 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ext4\x00', 0x0, 0x0) [ 122.577750] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 122.578608] EXT4-fs (loop4): unable to read superblock [ 122.613690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.614294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:36:39 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ext4\x00', 0x0, 0x0) [ 122.703953] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 122.704798] EXT4-fs (loop4): unable to read superblock [ 122.754129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.754773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:36:39 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ext4\x00', 0x0, 0x0) [ 122.827942] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 122.840476] EXT4-fs (loop4): unable to read superblock [ 122.889375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.889953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.965479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.966078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:36:40 executing program 4: pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4000) 13:36:40 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/29, 0x1d, 0x0) [ 123.079495] audit: type=1400 audit(1756474600.194:8): avc: denied { open } for pid=3796 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 123.084722] audit: type=1400 audit(1756474600.196:9): avc: denied { kernel } for pid=3796 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 123.108906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.109649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:36:40 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) pkey_free(0xffffffffffffffff) [ 123.217054] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 13:36:40 executing program 7: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) utime(&(0x7f00000000c0)='./file0\x00', 0x0) [ 123.263198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.263930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.016130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.017084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.132405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.133028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.207038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.207682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.227401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.228043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.268389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.268982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.316019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.316750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.487388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.488004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.512864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.513478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.604528] FAT-fs (loop6): bogus number of directory entries (114) [ 124.605155] FAT-fs (loop6): Can't find a valid FAT filesystem [ 124.613727] FAT-fs (loop6): bogus number of directory entries (114) [ 124.614238] FAT-fs (loop6): Can't find a valid FAT filesystem 13:36:41 executing program 0: rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 13:36:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1, 0x2, 0x0) 13:36:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0x9}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) 13:36:41 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0xc9eb, 0x4) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@nfc={0x27, 0x2}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e5", 0x1}], 0x1}}], 0x1, 0x0) 13:36:41 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1261, 0x0) 13:36:41 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time\x00') 13:36:41 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x572, &(0x7f0000000140)=0x0) r1 = epoll_create(0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) 13:36:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0x10, 0x0, 0x0, @mcast1}}}, 0x108) 13:36:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x43, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 13:36:41 executing program 7: syz_mount_image$nfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{'fscontext'}]}) 13:36:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x4, 0x8}) 13:36:41 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, 0xfffffffffffffffe) 13:36:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0x9}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) 13:36:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1, 0x2, 0x0) 13:36:41 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x572, &(0x7f0000000140)=0x0) r1 = epoll_create(0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) 13:36:41 executing program 1: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setuid(r0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) [ 124.879666] nfs: Bad value for 'fscontext' 13:36:42 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADMODE1(r0, 0x5390, &(0x7f0000002380)) [ 124.887847] nfs: Bad value for 'fscontext' 03:33:20 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1, 0x2, 0x0) 03:33:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0x9}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) 03:33:20 executing program 1: set_mempolicy(0x6, &(0x7f0000000040)=0x7, 0x5db) syz_open_dev$tty20(0xc, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0xca8, &(0x7f00000000c0)=[{}]}) 03:33:20 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x125e, &(0x7f0000002040)) 03:33:20 executing program 7: syz_mount_image$nfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{'fscontext'}]}) 03:33:20 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x10, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_ra}}}}}, 0x0) [ 125.003431] nfs: Bad value for 'fscontext' 03:33:20 executing program 7: syz_mount_image$nfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{'fscontext'}]}) 03:33:20 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x572, &(0x7f0000000140)=0x0) r1 = epoll_create(0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) 03:33:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup2(r0, r1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x13, r2, 0x0) syz_io_uring_submit(r3, 0x0, 0xfffffffffffffffe, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) [ 125.097913] nfs: Bad value for 'fscontext' 03:33:20 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADMODE1(r0, 0x5390, &(0x7f0000002380)) 03:33:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0x9}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) 03:33:20 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000000)) 03:33:20 executing program 7: syz_mount_image$nfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{'fscontext'}]}) 03:33:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01ff07000000000000001f"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) 03:33:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup2(r0, r1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x13, r2, 0x0) syz_io_uring_submit(r3, 0x0, 0xfffffffffffffffe, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) 03:33:20 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x3, 0x2}, 0x10) 03:33:20 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x572, &(0x7f0000000140)=0x0) r1 = epoll_create(0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) [ 125.250126] nfs: Bad value for 'fscontext' 03:33:20 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADMODE1(r0, 0x5390, &(0x7f0000002380)) 03:33:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01ff07000000000000001f"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) 03:33:20 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000000)) 03:33:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup2(r0, r1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x13, r2, 0x0) syz_io_uring_submit(r3, 0x0, 0xfffffffffffffffe, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) [ 125.385979] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 125.386953] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 125.387557] CPU: 0 UID: 0 PID: 252 Comm: syz-fuzzer Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 125.389173] Tainted: [W]=WARN [ 125.389706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 125.391063] RIP: 0010:perf_tp_event+0x175/0xe70 [ 125.391796] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 125.394526] RSP: 0018:ffff88800ec7f600 EFLAGS: 00010212 [ 125.395862] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 125.397021] RDX: ffff88801bb2d280 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 125.398171] RBP: ffff88800ec7f870 R08: ffff88806ce31340 R09: ffffe8ffffc0eb18 [ 125.399343] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 125.400874] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 125.401443] FS: 000000c000030090(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 125.402067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.402521] CR2: 00007f0728114260 CR3: 000000000e547000 CR4: 0000000000350ef0 [ 125.403079] Call Trace: [ 125.403288] [ 125.403476] ? __pfx_perf_tp_event+0x10/0x10 [ 125.403844] ? __lock_acquire+0x694/0x1b70 [ 125.404194] ? lock_acquire+0x15e/0x2f0 [ 125.404514] ? __is_insn_slot_addr+0x2e/0x290 [ 125.404881] ? find_held_lock+0x2b/0x80 [ 125.405205] ? __is_insn_slot_addr+0x136/0x290 [ 125.405576] ? lock_release+0xc8/0x290 [ 125.405887] ? __is_insn_slot_addr+0x140/0x290 [ 125.406259] ? perf_trace_run_bpf_submit+0xef/0x180 [ 125.406657] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 125.407088] ? arch_stack_walk+0x9c/0xf0 [ 125.407411] perf_trace_run_bpf_submit+0xef/0x180 [ 125.407806] perf_trace_lock+0x337/0x5d0 [ 125.408136] ? __pfx_perf_trace_lock+0x10/0x10 [ 125.408505] ? lock_acquire+0x15e/0x2f0 [ 125.408822] ? futex_ref_get+0x48/0x300 [ 125.409140] ? futex_ref_get+0x114/0x300 [ 125.409464] ? futex_hash+0x15c/0x390 [ 125.409767] lock_release+0x1ab/0x290 [ 125.410073] ? futex_hash+0x15c/0x390 [ 125.410377] futex_ref_get+0x119/0x300 [ 125.410688] ? futex_hash+0x15c/0x390 [ 125.410990] futex_hash+0x70/0x390 [ 125.411279] futex_wait_setup+0xae/0x550 [ 125.411610] __futex_wait+0x151/0x300 [ 125.411928] ? __pfx___futex_wait+0x10/0x10 [ 125.412271] ? __schedule+0xe91/0x3590 [ 125.412590] ? __pfx_futex_wake_mark+0x10/0x10 [ 125.412963] ? __hrtimer_setup+0x1a4/0x2c0 [ 125.413313] ? ktime_add_safe+0x5f/0x70 [ 125.413634] futex_wait+0xde/0x380 [ 125.413926] ? __pfx_futex_wait+0x10/0x10 [ 125.414262] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 125.414625] ? __pfx_perf_trace_lock+0x10/0x10 [ 125.414997] do_futex+0x2ee/0x370 [ 125.415280] ? __pfx_do_futex+0x10/0x10 [ 125.415597] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 125.416022] ? read_tsc+0x9/0x20 [ 125.416302] __x64_sys_futex+0x1c9/0x4d0 [ 125.416631] ? __pfx___x64_sys_futex+0x10/0x10 [ 125.416999] ? __x64_sys_nanosleep+0x223/0x2a0 [ 125.417358] ? xfd_validate_state+0x55/0x180 [ 125.417711] ? __pfx___x64_sys_nanosleep+0x10/0x10 [ 125.418114] do_syscall_64+0xbf/0x360 [ 125.418426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.418834] RIP: 0033:0x466533 [ 125.419092] Code: 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 4c 8b 54 24 18 4c 8b 44 24 20 44 8b 4c 24 28 b8 ca 00 00 00 0f 05 <89> 44 24 30 c3 cc cc cc cc cc cc cc cc 8b 7c 24 08 48 8b 74 24 10 [ 125.420519] RSP: 002b:000000c00003fe80 EFLAGS: 00000206 ORIG_RAX: 00000000000000ca [ 125.421113] RAX: ffffffffffffffda RBX: 000000000f21384e RCX: 0000000000466533 [ 125.421670] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001f20e78 [ 125.422230] RBP: 000000c00003fec8 R08: 0000000000000000 R09: 0000000000000000 [ 125.422785] R10: 000000c00003feb8 R11: 0000000000000206 R12: 0000000000438880 [ 125.423345] R13: 0000000000000000 R14: 0000000000e5de2c R15: 0000000000000000 [ 125.423915] [ 125.424105] Modules linked in: [ 125.424368] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 125.425209] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 125.425765] CPU: 1 UID: 0 PID: 253 Comm: syz-fuzzer Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 125.426603] Tainted: [D]=DIE, [W]=WARN [ 125.426887] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 125.427486] RIP: 0010:perf_tp_event+0x175/0xe70 [ 125.427851] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 125.429166] RSP: 0018:ffff888015c07800 EFLAGS: 00010212 [ 125.429557] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 125.430078] RDX: ffff88801b078000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 125.430598] RBP: ffff888015c07a70 R08: ffff88806cf31340 R09: ffffe8ffffd0eb18 [ 125.431116] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 125.431635] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 125.432162] FS: 000000c000030410(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 125.432747] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.433172] CR2: 0000001b2cd26000 CR3: 000000000e547000 CR4: 0000000000350ef0 [ 125.433693] Call Trace: [ 125.433887] [ 125.434065] ? __pfx_perf_tp_event+0x10/0x10 [ 125.434401] ? _copy_from_iter+0x24b/0x1660 [ 125.434727] ? find_held_lock+0x2b/0x80 [ 125.435032] ? __pfx__copy_from_iter+0x10/0x10 [ 125.435381] ? __tcp_push_pending_frames+0xb9/0x330 [ 125.435759] ? tcp_push+0x227/0x700 [ 125.436044] ? tcp_sendmsg_locked+0x38e/0x38f0 [ 125.436392] ? perf_trace_run_bpf_submit+0xef/0x180 [ 125.436765] perf_trace_run_bpf_submit+0xef/0x180 [ 125.437130] perf_trace_lock+0x337/0x5d0 [ 125.437440] ? __pfx_perf_trace_lock+0x10/0x10 [ 125.437782] ? perf_trace_lock+0xb5/0x5d0 [ 125.438095] ? get_futex_key+0x592/0x14a0 [ 125.438411] ? futex_ref_get+0x114/0x300 [ 125.438712] ? futex_hash+0x15c/0x390 [ 125.438998] lock_release+0x1ab/0x290 [ 125.439287] ? futex_hash+0x15c/0x390 [ 125.439573] futex_ref_get+0x119/0x300 [ 125.439877] ? futex_hash+0x15c/0x390 [ 125.440161] futex_hash+0x70/0x390 [ 125.440432] futex_wake+0x143/0x540 [ 125.440712] ? lock_is_held_type+0x9e/0x120 [ 125.441039] ? __pfx_futex_wake+0x10/0x10 [ 125.441353] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 125.441742] ? finish_task_switch.isra.0+0x294/0x840 [ 125.442129] do_futex+0x26d/0x370 [ 125.442394] ? __pfx_do_futex+0x10/0x10 [ 125.442695] ? __pfx___schedule+0x10/0x10 [ 125.443009] __x64_sys_futex+0x1c9/0x4d0 [ 125.443315] ? fput+0xe7/0x100 [ 125.443565] ? __pfx___x64_sys_futex+0x10/0x10 [ 125.443917] ? ksys_write+0x1a3/0x240 [ 125.444204] ? xfd_validate_state+0x55/0x180 [ 125.444544] do_syscall_64+0xbf/0x360 [ 125.444837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.445218] RIP: 0033:0x466533 [ 125.445460] Code: 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 4c 8b 54 24 18 4c 8b 44 24 20 44 8b 4c 24 28 b8 ca 00 00 00 0f 05 <89> 44 24 30 c3 cc cc cc cc cc cc cc cc 8b 7c 24 08 48 8b 74 24 10 [ 125.446780] RSP: 002b:000000c000041ef8 EFLAGS: 00000206 ORIG_RAX: 00000000000000ca [ 125.447340] RAX: ffffffffffffffda RBX: 000000c000041fd0 RCX: 0000000000466533 [ 125.447870] RDX: 0000000000000001 RSI: 0000000000000081 RDI: 0000000001f20e78 [ 125.448391] RBP: 000000c000041f48 R08: 0000000000000000 R09: 0000000000000000 [ 125.448910] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 125.449430] R13: 0000000000000414 R14: 000000000000007f R15: ffffffffffffffff [ 125.449956] [ 125.450133] Modules linked in: [ 125.450378] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#3] SMP KASAN NOPTI [ 125.451244] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 125.451841] CPU: 0 UID: 0 PID: 252 Comm: syz-fuzzer Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 125.452741] Tainted: [D]=DIE, [W]=WARN [ 125.453043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 125.453682] RIP: 0010:perf_tp_event+0x175/0xe70 [ 125.454059] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 125.455467] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012 [ 125.455896] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 125.456453] RDX: ffff88801bb2d280 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 125.457007] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc0eb18 [ 125.457564] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000 [ 125.458122] R13: 000000000000002c R14: ffff88806ce31490 R15: dffffc0000000000 [ 125.458682] FS: 000000c000030090(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 125.459309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.459766] CR2: 00007f0728114260 CR3: 000000000e547000 CR4: 0000000000350ef0 [ 125.460330] Call Trace: [ 125.460537] [ 125.460714] ? arch_stack_walk+0x86/0xf0 [ 125.461036] ? e1000_alloc_rx_buffers+0x7e5/0xe10 [ 125.461423] ? __pfx_perf_tp_event+0x10/0x10 [ 125.461781] ? lock_is_held_type+0x9e/0x120 [ 125.462128] ? update_se+0x1ba/0x670 [ 125.462428] ? lock_is_held_type+0x9e/0x120 [ 125.462774] ? perf_trace_lock+0xb5/0x5d0 [ 125.463104] ? perf_trace_lock+0xb5/0x5d0 [ 125.463433] ? __resched_curr+0x2a2/0x330 [ 125.463770] ? __pfx_perf_trace_lock+0x10/0x10 [ 125.464140] ? __pfx_perf_trace_lock+0x10/0x10 [ 125.464507] ? lock_is_held_type+0x9e/0x120 [ 125.464853] ? perf_trace_run_bpf_submit+0xef/0x180 [ 125.465249] perf_trace_run_bpf_submit+0xef/0x180 [ 125.465639] perf_trace_lock+0x337/0x5d0 [ 125.465964] ? __pfx_perf_trace_lock+0x10/0x10 [ 125.466333] ? find_held_lock+0x2b/0x80 [ 125.466655] ? hrtimer_interrupt+0x114/0x830 [ 125.467003] lock_release+0x1ab/0x290 [ 125.467314] ktime_get_update_offsets_now+0xab/0x3c0 [ 125.467717] ? hrtimer_interrupt+0x114/0x830 [ 125.468070] ? __pfx_lapic_next_deadline+0x10/0x10 [ 125.468462] hrtimer_interrupt+0x114/0x830 [ 125.468804] __sysvec_apic_timer_interrupt+0xbb/0x330 [ 125.469212] sysvec_apic_timer_interrupt+0x6b/0x80 [ 125.469600] [ 125.469781] [ 125.469965] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 125.470377] RIP: 0010:oops_exit+0x0/0x50 [ 125.470704] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27 [ 125.472124] RSP: 0018:ffff88800ec7f490 EFLAGS: 00000202 [ 125.472545] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff8139f06f [ 125.473105] RDX: ffff88801bb2d280 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 125.473665] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90 [ 125.474220] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800ec7f558 [ 125.474782] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000 [ 125.475341] ? add_taint+0x5f/0xd0 [ 125.475628] ? oops_end+0x4a/0xe0 [ 125.475921] oops_end+0x65/0xe0 [ 125.476191] exc_general_protection+0x1a2/0x330 [ 125.476571] asm_exc_general_protection+0x26/0x30 [ 125.476953] RIP: 0010:perf_tp_event+0x175/0xe70 [ 125.477326] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 125.478731] RSP: 0018:ffff88800ec7f600 EFLAGS: 00010212 [ 125.479147] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 125.479702] RDX: ffff88801bb2d280 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 125.480267] RBP: ffff88800ec7f870 R08: ffff88806ce31340 R09: ffffe8ffffc0eb18 [ 125.480824] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 125.481380] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 125.481937] ? perf_tp_event+0x167/0xe70 [ 125.482269] ? __pfx_perf_tp_event+0x10/0x10 [ 125.482628] ? __lock_acquire+0x694/0x1b70 [ 125.482968] ? lock_acquire+0x15e/0x2f0 [ 125.483287] ? __is_insn_slot_addr+0x2e/0x290 [ 125.483650] ? find_held_lock+0x2b/0x80 [ 125.483974] ? __is_insn_slot_addr+0x136/0x290 [ 125.484343] ? lock_release+0xc8/0x290 [ 125.484655] ? __is_insn_slot_addr+0x140/0x290 [ 125.485024] ? perf_trace_run_bpf_submit+0xef/0x180 [ 125.485422] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 125.485852] ? arch_stack_walk+0x9c/0xf0 [ 125.486175] perf_trace_run_bpf_submit+0xef/0x180 [ 125.486562] perf_trace_lock+0x337/0x5d0 [ 125.486890] ? __pfx_perf_trace_lock+0x10/0x10 [ 125.487258] ? lock_acquire+0x15e/0x2f0 [ 125.487576] ? futex_ref_get+0x48/0x300 [ 125.487901] ? futex_ref_get+0x114/0x300 [ 125.488221] ? futex_hash+0x15c/0x390 [ 125.488525] lock_release+0x1ab/0x290 [ 125.488829] ? futex_hash+0x15c/0x390 [ 125.489133] futex_ref_get+0x119/0x300 [ 125.489442] ? futex_hash+0x15c/0x390 [ 125.489747] futex_hash+0x70/0x390 [ 125.490034] futex_wait_setup+0xae/0x550 [ 125.490361] __futex_wait+0x151/0x300 [ 125.490669] ? __pfx___futex_wait+0x10/0x10 [ 125.491013] ? __schedule+0xe91/0x3590 [ 125.491327] ? __pfx_futex_wake_mark+0x10/0x10 [ 125.491695] ? __hrtimer_setup+0x1a4/0x2c0 [ 125.492042] ? ktime_add_safe+0x5f/0x70 [ 125.492364] futex_wait+0xde/0x380 [ 125.492652] ? __pfx_futex_wait+0x10/0x10 [ 125.492985] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 125.493347] ? __pfx_perf_trace_lock+0x10/0x10 [ 125.493716] do_futex+0x2ee/0x370 [ 125.493997] ? __pfx_do_futex+0x10/0x10 [ 125.494313] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 125.494725] ? read_tsc+0x9/0x20 [ 125.495001] __x64_sys_futex+0x1c9/0x4d0 [ 125.495332] ? __pfx___x64_sys_futex+0x10/0x10 [ 125.495696] ? __x64_sys_nanosleep+0x223/0x2a0 [ 125.496065] ? xfd_validate_state+0x55/0x180 [ 125.496421] ? __pfx___x64_sys_nanosleep+0x10/0x10 [ 125.496811] do_syscall_64+0xbf/0x360 [ 125.497116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.497521] RIP: 0033:0x466533 [ 125.497775] Code: 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 4c 8b 54 24 18 4c 8b 44 24 20 44 8b 4c 24 28 b8 ca 00 00 00 0f 05 <89> 44 24 30 c3 cc cc cc cc cc cc cc cc 8b 7c 24 08 48 8b 74 24 10 [ 125.499182] RSP: 002b:000000c00003fe80 EFLAGS: 00000206 ORIG_RAX: 00000000000000ca [ 125.499769] RAX: ffffffffffffffda RBX: 000000000f21384e RCX: 0000000000466533 [ 125.500328] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001f20e78 [ 125.500882] RBP: 000000c00003fec8 R08: 0000000000000000 R09: 0000000000000000 [ 125.501440] R10: 000000c00003feb8 R11: 0000000000000206 R12: 0000000000438880 [ 125.501993] R13: 0000000000000000 R14: 0000000000e5de2c R15: 0000000000000000 [ 125.502560] [ 125.502750] Modules linked in: [ 125.503009] ---[ end trace 0000000000000000 ]--- [ 125.503010] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#4] SMP KASAN NOPTI [ 125.503374] RIP: 0010:perf_tp_event+0x175/0xe70 [ 125.504179] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 125.504538] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 125.505085] CPU: 1 UID: 0 PID: 253 Comm: syz-fuzzer Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 125.506478] RSP: 0018:ffff88800ec7f600 EFLAGS: 00010212 [ 125.507306] Tainted: [D]=DIE, [W]=WARN [ 125.507711] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 125.508001] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 125.508550] RDX: ffff88801bb2d280 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 125.509144] RIP: 0010:perf_tp_event+0x175/0xe70 [ 125.509693] RBP: ffff88800ec7f870 R08: ffff88806ce31340 R09: ffffe8ffffc0eb18 [ 125.510032] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 125.510579] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 125.511890] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012 [ 125.512440] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 125.512442] [ 125.512453] FS: 000000c000030090(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 125.512831] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 125.513382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.513511] RDX: ffff88801b078000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 125.514126] CR2: 00007f0728114260 CR3: 000000000e547000 CR4: 0000000000350ef0 [ 125.514643] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd0eb18 [ 125.515098] Kernel panic - not syncing: Fatal exception in interrupt [ 126.559079] Shutting down cpus with NMI [ 126.561192] Kernel Offset: disabled [ 126.561480] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 13:36:42 Registers: info registers vcpu 0 RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff88800ec7ef70 R8 =0000000000000000 R9 =ffffed1001530046 R10=000000000000003a R11=313030203a505352 R12=000000000000003a R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000000c000030090 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0728114260 CR3=000000000e547000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000bfe62e42fefa39ef XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84bdec0e RDX=fffffbfff0f0ec09 RSI=0000000000000004 RDI=ffffffff87876044 RBP=ffffffff87876044 RSP=ffff888015c075b0 R8 =0000000000000000 R9 =fffffbfff0f0ec08 R10=ffffffff87876047 R11=202c746c75616620 R12=1ffff11002b80eb7 R13=0000000000000007 R14=fffffbfff0f0ec08 R15=ffff888015c075e8 RIP=ffffffff84bdeda0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000000c000030410 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe4c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2cd26000 CR3=000000000e547000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000f0000000e0000000e0000000c XMM02=00000011000000110000000c0000000a XMM03=00000014000000130000001200000011 XMM04=fcd3e3ffcbfc79c0761ffcb62d28c5fc XMM05=c21ab984fc46b05e82fc45665481fc81 XMM06=fc0811b984fc17bac681fc7789c081fc XMM07=81fc65df2582fc36c52582fc88b0c081 XMM08=9581fc80f28b81fc90745481fc393d36 XMM09=b78f82fcabb58f82fc79b24f82fc0cb7 XMM10=e2525581fce2ff5381fc5a7b2c81fcb6 XMM11=fc7fe0bb84fc0017b984fcf52d2682fc XMM12=0000a39bbf81fcb4575481fc084e3681 XMM13=3778302826202c307830202c30783020 XMM14=7b5b7b3d293063333030303030303066 XMM15=0a297d5d7d27747865746e6f63736627