Warning: Permanently added '[localhost]:17905' (ECDSA) to the list of known hosts.
2025/08/29 08:45:45 fuzzer started
2025/08/29 08:45:45 dialing manager at localhost:43077
syzkaller login: [ 50.794292] cgroup: Unknown subsys name 'net'
[ 50.862746] cgroup: Unknown subsys name 'cpuset'
[ 50.883511] cgroup: Unknown subsys name 'rlimit'
2025/08/29 08:45:56 syscalls: 2214
2025/08/29 08:45:56 code coverage: enabled
2025/08/29 08:45:56 comparison tracing: enabled
2025/08/29 08:45:56 extra coverage: enabled
2025/08/29 08:45:56 setuid sandbox: enabled
2025/08/29 08:45:56 namespace sandbox: enabled
2025/08/29 08:45:56 Android sandbox: enabled
2025/08/29 08:45:56 fault injection: enabled
2025/08/29 08:45:56 leak checking: enabled
2025/08/29 08:45:56 net packet injection: enabled
2025/08/29 08:45:56 net device setup: enabled
2025/08/29 08:45:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/29 08:45:56 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/29 08:45:56 USB emulation: enabled
2025/08/29 08:45:56 hci packet injection: enabled
2025/08/29 08:45:56 wifi device emulation: enabled
2025/08/29 08:45:56 802.15.4 emulation: enabled
2025/08/29 08:45:56 fetching corpus: 0, signal 0/2000 (executing program)
2025/08/29 08:45:57 fetching corpus: 50, signal 25861/29009 (executing program)
2025/08/29 08:45:57 fetching corpus: 100, signal 35016/39247 (executing program)
2025/08/29 08:45:57 fetching corpus: 150, signal 42195/47351 (executing program)
2025/08/29 08:45:57 fetching corpus: 200, signal 49547/55322 (executing program)
2025/08/29 08:45:57 fetching corpus: 250, signal 56146/62410 (executing program)
2025/08/29 08:45:57 fetching corpus: 300, signal 62136/68771 (executing program)
2025/08/29 08:45:57 fetching corpus: 350, signal 65895/72962 (executing program)
2025/08/29 08:45:57 fetching corpus: 400, signal 69575/76896 (executing program)
2025/08/29 08:45:58 fetching corpus: 450, signal 73813/81199 (executing program)
2025/08/29 08:45:58 fetching corpus: 500, signal 76156/83850 (executing program)
2025/08/29 08:45:58 fetching corpus: 550, signal 77791/85871 (executing program)
2025/08/29 08:45:58 fetching corpus: 600, signal 80986/89152 (executing program)
2025/08/29 08:45:58 fetching corpus: 650, signal 83599/91769 (executing program)
2025/08/29 08:45:58 fetching corpus: 700, signal 85939/94134 (executing program)
2025/08/29 08:45:58 fetching corpus: 750, signal 88119/96186 (executing program)
2025/08/29 08:45:58 fetching corpus: 800, signal 89515/97744 (executing program)
2025/08/29 08:45:59 fetching corpus: 850, signal 90897/99203 (executing program)
2025/08/29 08:45:59 fetching corpus: 900, signal 92135/100535 (executing program)
2025/08/29 08:45:59 fetching corpus: 950, signal 93905/102141 (executing program)
2025/08/29 08:45:59 fetching corpus: 1000, signal 96380/104108 (executing program)
2025/08/29 08:45:59 fetching corpus: 1050, signal 98708/105966 (executing program)
2025/08/29 08:45:59 fetching corpus: 1100, signal 100485/107350 (executing program)
2025/08/29 08:46:00 fetching corpus: 1150, signal 102127/108651 (executing program)
2025/08/29 08:46:00 fetching corpus: 1200, signal 103966/109982 (executing program)
2025/08/29 08:46:00 fetching corpus: 1250, signal 105449/111100 (executing program)
2025/08/29 08:46:00 fetching corpus: 1300, signal 107087/112194 (executing program)
2025/08/29 08:46:00 fetching corpus: 1350, signal 108913/113447 (executing program)
2025/08/29 08:46:00 fetching corpus: 1400, signal 110011/114139 (executing program)
2025/08/29 08:46:00 fetching corpus: 1450, signal 111672/115118 (executing program)
2025/08/29 08:46:01 fetching corpus: 1500, signal 112859/115820 (executing program)
2025/08/29 08:46:01 fetching corpus: 1550, signal 114112/116586 (executing program)
2025/08/29 08:46:01 fetching corpus: 1600, signal 114925/116998 (executing program)
2025/08/29 08:46:01 fetching corpus: 1650, signal 116462/117961 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/118172 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/118212 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/118248 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/118284 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/118320 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/118355 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/118403 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/118439 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/118475 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/118515 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/118566 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/118608 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/118646 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/118689 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/118723 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/118749 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/118794 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/118844 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/118882 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/118920 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/118948 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/118991 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/119030 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/119058 (executing program)
2025/08/29 08:46:01 fetching corpus: 1677, signal 116818/119058 (executing program)
2025/08/29 08:46:04 starting 8 fuzzer processes
08:46:04 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x300, 0x0)
08:46:04 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x21, 0x0, 0x0)
08:46:04 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
08:46:04 executing program 4:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000010c0)="bca8f4cc94eaca", 0x7}], 0x1)
08:46:04 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce={0x4a}})
08:46:04 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x24a03730}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[])
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
fcntl$getflags(r1, 0x408)
symlinkat(&(0x7f0000000040)='./file0/file0\x00', r0, &(0x7f0000000200)='./file0\x00')
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x602903, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x602903, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @in_args={0x4}}, './file0/file0\x00'})
linkat(r0, &(0x7f00000005c0)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x8, 0x0)
08:46:04 executing program 3:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x3, 0x4, 0x31, 0x81, 0x0, 0x4, 0xbaad28f44804f852, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffff87c, 0x0, @perf_config_ext={0x33b7e1f6, 0x5}, 0x48a66, 0x1ff, 0x7, 0x7, 0x6, 0x7, 0xfffd, 0x0, 0x0, 0x0, 0xffffffffffff0000})
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNAPSHOT_S2RAM(r1, 0x40043311)
pread64(r1, &(0x7f0000000080)=""/18, 0x12, 0x2)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf2, 0x0, 0x0, 0x4, 0x0, 0x6b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r2, 0x0)
08:46:04 executing program 6:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
[ 69.492649] audit: type=1400 audit(1756457164.343:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[ 70.764003] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 70.766247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 70.768155] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 70.769786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 70.771591] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 70.772879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 70.783383] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 70.785073] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 70.787943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 70.789271] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 70.790314] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 70.793132] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 70.794772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 70.804216] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 70.808252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 70.841008] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 70.845541] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 70.850084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 70.862556] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 70.868138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 70.868333] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 70.871648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 70.875360] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 70.891748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 70.896069] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 70.905956] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 70.911883] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 70.928770] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 70.933378] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 70.934797] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 70.936485] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 70.938645] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 70.944033] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 70.952986] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 70.954762] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 70.955844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 70.958636] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 70.969034] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 70.974496] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 70.978544] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 72.858752] Bluetooth: hci0: command tx timeout
[ 72.859308] Bluetooth: hci2: command tx timeout
[ 72.860254] Bluetooth: hci1: command tx timeout
[ 72.922471] Bluetooth: hci3: command tx timeout
[ 72.986458] Bluetooth: hci4: command tx timeout
[ 73.050792] Bluetooth: hci7: command tx timeout
[ 73.051320] Bluetooth: hci5: command tx timeout
[ 73.051903] Bluetooth: hci6: command tx timeout
[ 74.906544] Bluetooth: hci1: command tx timeout
[ 74.906579] Bluetooth: hci2: command tx timeout
[ 74.907003] Bluetooth: hci0: command tx timeout
[ 74.970462] Bluetooth: hci3: command tx timeout
[ 75.034579] Bluetooth: hci4: command tx timeout
[ 75.098687] Bluetooth: hci7: command tx timeout
[ 75.099145] Bluetooth: hci6: command tx timeout
[ 75.099573] Bluetooth: hci5: command tx timeout
[ 76.956427] Bluetooth: hci0: command tx timeout
[ 76.956453] Bluetooth: hci2: command tx timeout
[ 76.956861] Bluetooth: hci1: command tx timeout
[ 77.018586] Bluetooth: hci3: command tx timeout
[ 77.082471] Bluetooth: hci4: command tx timeout
[ 77.146758] Bluetooth: hci6: command tx timeout
[ 77.146784] Bluetooth: hci7: command tx timeout
[ 77.147445] Bluetooth: hci5: command tx timeout
[ 79.002531] Bluetooth: hci1: command tx timeout
[ 79.003797] Bluetooth: hci2: command tx timeout
[ 79.003842] Bluetooth: hci0: command tx timeout
[ 79.066685] Bluetooth: hci3: command tx timeout
[ 79.130473] Bluetooth: hci4: command tx timeout
[ 79.194601] Bluetooth: hci5: command tx timeout
[ 79.195477] Bluetooth: hci6: command tx timeout
[ 79.196205] Bluetooth: hci7: command tx timeout
[ 106.276524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.277203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.412248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.412939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:46:41 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x21, 0x0, 0x0)
08:46:41 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x21, 0x0, 0x0)
08:46:41 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x21, 0x0, 0x0)
[ 107.146269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.146921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:46:42 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0x6)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000001c0))
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000))
[ 107.230586] audit: type=1400 audit(1756457202.085:8): avc: denied { open } for pid=3813 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 107.232935] audit: type=1400 audit(1756457202.086:9): avc: denied { kernel } for pid=3813 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 107.306449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.307066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:46:42 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0x6)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000001c0))
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000))
[ 107.423027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.423647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:46:42 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0x6)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000001c0))
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000))
[ 107.580094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.581140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:46:42 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0x6)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000001c0))
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000))
[ 107.661291] audit: type=1400 audit(1756457202.512:10): avc: denied { write } for pid=3847 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 107.666699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.667351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:46:42 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0x6)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000001c0))
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000))
[ 107.867856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.869210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.004909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.006122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.185703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.186360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.296120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.297173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.479647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.481046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.509891] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 108.511780] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 108.535744] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 108.547692] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 108.565205] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 108.575646] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 108.588236] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 108.596665] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 108.603783] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 108.613330] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 108.620491] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 108.638083] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 108.649806] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 108.665136] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 108.671160] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 108.679920] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 108.682229] Bluetooth: hci6: Opcode 0x0406 failed: -4
[ 108.690130] Bluetooth: hci6: Opcode 0x0406 failed: -4
[ 108.693805] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 108.697621] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 108.701625] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 108.705670] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 108.709654] Bluetooth: hci7: Opcode 0x0406 failed: -4
[ 108.712101] Bluetooth: hci7: Opcode 0x0406 failed: -4
[ 108.776318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.776979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.834436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.835070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.847471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.848047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.872716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.873298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 109.006535] tmpfs: Unknown parameter './file0/file0'
08:46:43 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0x6)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000001c0))
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000))
08:46:43 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0x6)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000001c0))
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000))
08:46:43 executing program 4:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000010c0)="bca8f4cc94eaca", 0x7}], 0x1)
08:46:43 executing program 3:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x3, 0x4, 0x31, 0x81, 0x0, 0x4, 0xbaad28f44804f852, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffff87c, 0x0, @perf_config_ext={0x33b7e1f6, 0x5}, 0x48a66, 0x1ff, 0x7, 0x7, 0x6, 0x7, 0xfffd, 0x0, 0x0, 0x0, 0xffffffffffff0000})
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNAPSHOT_S2RAM(r1, 0x40043311)
pread64(r1, &(0x7f0000000080)=""/18, 0x12, 0x2)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf2, 0x0, 0x0, 0x4, 0x0, 0x6b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r2, 0x0)
08:46:43 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce={0x4a}})
08:46:43 executing program 6:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
08:46:43 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x300, 0x0)
08:46:43 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x24a03730}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[])
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
fcntl$getflags(r1, 0x408)
symlinkat(&(0x7f0000000040)='./file0/file0\x00', r0, &(0x7f0000000200)='./file0\x00')
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x602903, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x602903, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @in_args={0x4}}, './file0/file0\x00'})
linkat(r0, &(0x7f00000005c0)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x8, 0x0)
08:46:43 executing program 4:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000010c0)="bca8f4cc94eaca", 0x7}], 0x1)
08:46:43 executing program 6:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
[ 109.127529] kmemleak: Found object by alias at 0x607f1a639ad4
[ 109.127553] CPU: 1 UID: 0 PID: 3913 Comm: syz-executor.7 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 109.127577] Tainted: [W]=WARN
[ 109.127582] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 109.127590] Call Trace:
[ 109.127596]
[ 109.127602] dump_stack_lvl+0xca/0x120
[ 109.127633] __lookup_object+0x94/0xb0
[ 109.127654] delete_object_full+0x27/0x70
[ 109.127675] free_percpu+0x30/0x1160
[ 109.127696] ? arch_uprobe_clear_state+0x16/0x140
[ 109.127723] futex_hash_free+0x38/0xc0
[ 109.127742] mmput+0x2d3/0x390
[ 109.127766] do_exit+0x79d/0x2970
[ 109.127784] ? signal_wake_up_state+0x85/0x120
[ 109.127805] ? zap_other_threads+0x2b9/0x3a0
[ 109.127826] ? __pfx_do_exit+0x10/0x10
[ 109.127841] ? do_group_exit+0x1c3/0x2a0
[ 109.127859] ? lock_release+0xc8/0x290
[ 109.127882] do_group_exit+0xd3/0x2a0
[ 109.127902] __x64_sys_exit_group+0x3e/0x50
[ 109.127919] x64_sys_call+0x18c5/0x18d0
[ 109.127939] do_syscall_64+0xbf/0x360
[ 109.127955] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.127969] RIP: 0033:0x7f0ecba64b19
[ 109.127980] Code: Unable to access opcode bytes at 0x7f0ecba64aef.
[ 109.127986] RSP: 002b:00007ffeb4f3f0a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 109.128000] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f0ecba64b19
[ 109.128010] RDX: 00007f0ecba1772b RSI: ffffffffffffffbc RDI: 0000000000000000
[ 109.128019] RBP: 0000000000000000 R08: 0000001b2d4212e4 R09: 0000000000000000
[ 109.128028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 109.128036] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffeb4f3f190
[ 109.128061]
[ 109.128065] kmemleak: Object (percpu) 0x607f1a639ad0 (size 8):
[ 109.128074] kmemleak: comm "syz-executor.5", pid 3924, jiffies 4294775972
[ 109.128082] kmemleak: min_count = 1
[ 109.128087] kmemleak: count = 0
[ 109.128092] kmemleak: flags = 0x21
[ 109.128096] kmemleak: checksum = 0
[ 109.128101] kmemleak: backtrace:
[ 109.128105] pcpu_alloc_noprof+0x87a/0x1170
[ 109.128124] perf_trace_event_init+0x366/0xa10
[ 109.128141] perf_trace_init+0x1a4/0x2f0
[ 109.128155] perf_tp_event_init+0xa6/0x120
[ 109.128175] perf_try_init_event+0x140/0x9f0
[ 109.128191] perf_event_alloc.part.0+0x118e/0x45f0
[ 109.128212] __do_sys_perf_event_open+0x719/0x2c20
[ 109.128227] do_syscall_64+0xbf/0x360
[ 109.128238] entry_SYSCALL_64_after_hwframe+0x77/0x7f
08:46:44 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0x6)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000001c0))
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000))
08:46:44 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce={0x4a}})
08:46:44 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x24a03730}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[])
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
fcntl$getflags(r1, 0x408)
symlinkat(&(0x7f0000000040)='./file0/file0\x00', r0, &(0x7f0000000200)='./file0\x00')
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x602903, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x602903, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @in_args={0x4}}, './file0/file0\x00'})
linkat(r0, &(0x7f00000005c0)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x8, 0x0)
[ 109.950774] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 109.951707] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 109.952304] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 109.952938] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 109.953571] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 109.954174] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 109.954926] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 109.955654] Bluetooth: hci7: Opcode 0x0c1a failed: -4
08:46:44 executing program 6:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
08:46:44 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0x6)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000001c0))
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000))
08:46:44 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce={0x4a}})
08:46:44 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x24a03730}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[])
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
fcntl$getflags(r1, 0x408)
symlinkat(&(0x7f0000000040)='./file0/file0\x00', r0, &(0x7f0000000200)='./file0\x00')
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x602903, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x602903, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @in_args={0x4}}, './file0/file0\x00'})
linkat(r0, &(0x7f00000005c0)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x8, 0x0)
08:46:44 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x300, 0x0)
08:46:44 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0x6)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000001c0))
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000))
08:46:44 executing program 4:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000010c0)="bca8f4cc94eaca", 0x7}], 0x1)
08:46:44 executing program 3:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x3, 0x4, 0x31, 0x81, 0x0, 0x4, 0xbaad28f44804f852, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffff87c, 0x0, @perf_config_ext={0x33b7e1f6, 0x5}, 0x48a66, 0x1ff, 0x7, 0x7, 0x6, 0x7, 0xfffd, 0x0, 0x0, 0x0, 0xffffffffffff0000})
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNAPSHOT_S2RAM(r1, 0x40043311)
pread64(r1, &(0x7f0000000080)=""/18, 0x12, 0x2)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf2, 0x0, 0x0, 0x4, 0x0, 0x6b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r2, 0x0)
[ 110.007091] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI
[ 110.008026] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 110.008667] CPU: 1 UID: 0 PID: 3948 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 110.009971] Tainted: [W]=WARN
[ 110.010747] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 110.012765] RIP: 0010:perf_tp_event+0x175/0xe70
[ 110.013808] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 110.018008] RSP: 0018:ffff888044b6f800 EFLAGS: 00010212
[ 110.018871] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc900054b4000
[ 110.019459] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 110.020046] RBP: ffff888044b6fa70 R08: ffff88806cf31340 R09: ffffe8ffffd16370
[ 110.020634] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 110.021218] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[ 110.021813] FS: 00007fe5cedc7700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[ 110.022486] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 110.022975] CR2: 00007fe5d1965018 CR3: 00000000422e9000 CR4: 0000000000350ef0
[ 110.023569] Call Trace:
[ 110.023791]
[ 110.023989] ? __pfx_perf_tp_event+0x10/0x10
[ 110.024366] ? lock_is_held_type+0x9e/0x120
[ 110.024737] ? lock_is_held_type+0x9e/0x120
[ 110.025102] ? perf_trace_lock+0xb5/0x5d0
[ 110.025453] ? perf_trace_lock+0xb5/0x5d0
[ 110.025804] ? __pfx_perf_trace_lock+0x10/0x10
[ 110.026197] ? __pfx_perf_trace_lock+0x10/0x10
[ 110.026580] ? find_held_lock+0x2b/0x80
[ 110.026917] ? find_held_lock+0x2b/0x80
[ 110.027259] ? __perf_install_in_context+0x503/0xb90
[ 110.027681] ? lock_release+0xc8/0x290
[ 110.028009] ? do_raw_spin_unlock+0x53/0x220
[ 110.028383] ? perf_trace_run_bpf_submit+0xef/0x180
[ 110.028799] perf_trace_run_bpf_submit+0xef/0x180
[ 110.029213] perf_trace_lock+0x337/0x5d0
[ 110.029558] ? __pfx_perf_trace_lock+0x10/0x10
[ 110.029948] ? lock_acquire+0x15e/0x2f0
[ 110.030291] ? futex_ref_get+0x48/0x300
[ 110.030625] ? futex_ref_get+0x114/0x300
[ 110.030966] ? futex_hash+0x15c/0x390
[ 110.031288] lock_release+0x1ab/0x290
[ 110.031609] ? futex_hash+0x15c/0x390
[ 110.031928] futex_ref_get+0x119/0x300
[ 110.032254] ? futex_hash+0x15c/0x390
[ 110.032574] futex_hash+0x70/0x390
[ 110.032877] futex_wake+0x143/0x540
[ 110.033187] ? __pfx_perf_trace_lock+0x10/0x10
[ 110.033576] ? __pfx_futex_wake+0x10/0x10
[ 110.033923] ? __do_sys_perf_event_open+0x44d/0x2c20
[ 110.034357] ? lock_release+0xc8/0x290
[ 110.034687] do_futex+0x26d/0x370
[ 110.034987] ? __pfx_do_futex+0x10/0x10
[ 110.035321] ? __pfx___do_sys_perf_event_open+0x10/0x10
[ 110.035759] ? find_held_lock+0x2b/0x80
[ 110.036099] __x64_sys_futex+0x1c9/0x4d0
[ 110.036444] ? __pfx___x64_sys_futex+0x10/0x10
[ 110.036833] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 110.037269] do_syscall_64+0xbf/0x360
[ 110.037590] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.038025] RIP: 0033:0x7fe5d1851b19
[ 110.038341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 110.039838] RSP: 002b:00007fe5cedc7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 110.040465] RAX: ffffffffffffffda RBX: 00007fe5d1964f68 RCX: 00007fe5d1851b19
[ 110.041052] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe5d1964f6c
[ 110.041639] RBP: 00007fe5d1964f60 R08: 000000000000000e R09: 0000000000000000
[ 110.042228] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fe5d1964f6c
[ 110.042813] R13: 00007ffc8bdc19ef R14: 00007fe5cedc7300 R15: 0000000000022000
[ 110.043403]
[ 110.043603] Modules linked in:
[ 110.043880] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI
[ 110.044824] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[ 110.045509] CPU: 0 UID: 0 PID: 3950 Comm: syz-executor.6 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 110.046459] Tainted: [D]=DIE, [W]=WARN
[ 110.046766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 110.047416] RIP: 0010:perf_tp_event+0x175/0xe70
[ 110.047804] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 110.049234] RSP: 0018:ffff888044b4f800 EFLAGS: 00010212
[ 110.049654] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[ 110.050223] RDX: ffff888017829b80 RSI: ffffffff818995b7 RDI: 0000000100000190
[ 110.050786] RBP: ffff888044b4fa70 R08: ffff88806ce31340 R09: ffffe8ffffc16370
[ 110.051348] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[ 110.051911] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[ 110.052478] FS: 00005555673b8400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 110.053112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 110.053579] CR2: 00005555673b9c18 CR3: 0000000043113000 CR4: 0000000000350ef0
[ 110.054148] Call Trace:
[ 110.054357]
[ 110.054546] ? arch_scale_cpu_capacity+0x17/0xa0
[ 110.054940] ? __pfx_perf_tp_event+0x10/0x10
[ 110.055298] ? __asan_memset+0x24/0x50
[ 110.055623] ? __pfx_perf_trace_lock+0x10/0x10
[ 110.055997] ? __pfx___mutex_lock+0x10/0x10
[ 110.056352] ? perf_trace_lock+0xb5/0x5d0
[ 110.056688] ? kvm_sched_clock_read+0x16/0x30
[ 110.057055] ? sched_clock+0x37/0x60
[ 110.057369] ? sched_clock_cpu+0x6c/0x4e0
[ 110.057707] ? perf_trace_run_bpf_submit+0xef/0x180
[ 110.058108] perf_trace_run_bpf_submit+0xef/0x180
[ 110.058507] perf_trace_lock+0x337/0x5d0
[ 110.058839] ? __pfx_perf_trace_lock+0x10/0x10
[ 110.059207] ? __pfx_perf_trace_lock+0x10/0x10
[ 110.059579] ? get_futex_key+0x592/0x14a0
[ 110.059916] ? futex_ref_get+0x114/0x300
[ 110.060243] ? futex_hash+0x15c/0x390
[ 110.060549] lock_release+0x1ab/0x290
[ 110.060860] ? futex_hash+0x15c/0x390
[ 110.061164] futex_ref_get+0x119/0x300
[ 110.061480] ? futex_hash+0x15c/0x390
[ 110.061787] futex_hash+0x70/0x390
[ 110.062092] futex_wake+0x143/0x540
[ 110.062394] ? put_pid+0x1f/0x30
[ 110.062672] ? kernel_clone+0x204/0x7f0
[ 110.062993] ? __pfx_futex_wake+0x10/0x10
[ 110.063330] ? __pfx_kernel_clone+0x10/0x10
[ 110.063675] ? perf_trace_lock+0xb5/0x5d0
[ 110.064010] ? __pfx___handle_mm_fault+0x10/0x10
[ 110.064396] do_futex+0x26d/0x370
[ 110.064685] ? __pfx_do_futex+0x10/0x10
[ 110.065011] ? __pfx___do_sys_clone+0x10/0x10
[ 110.065372] ? handle_mm_fault+0x590/0x9b0
[ 110.065717] __x64_sys_futex+0x1c9/0x4d0
[ 110.066052] ? __pfx___x64_sys_futex+0x10/0x10
[ 110.066424] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 110.066838] do_syscall_64+0xbf/0x360
[ 110.067147] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.067559] RIP: 0033:0x7fe13c68ab19
[ 110.067858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 110.069280] RSP: 002b:00007ffe4df00648 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 110.069877] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe13c68ab19
[ 110.070447] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe13c79df68
[ 110.071011] RBP: 00007fe13c79df60 R08: 00007fe139c00700 R09: 0000000000000000
[ 110.071567] R10: 00007fe139c00700 R11: 0000000000000246 R12: 00007fe13c7a2060
[ 110.072130] R13: 00007ffe4df00750 R14: 00007fe13c79df60 R15: 000000000001ad4d
[ 110.072704]
[ 110.072893] Modules linked in:
[ 110.073159] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#3] SMP KASAN NOPTI
[ 110.074084] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 110.074699] CPU: 1 UID: 0 PID: 3948 Comm: syz-executor.1 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 110.075695] Tainted: [D]=DIE, [W]=WARN
[ 110.076013] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 110.076674] RIP: 0010:perf_tp_event+0x175/0xe70
[ 110.077066] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 110.078536] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012
[ 110.078982] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 110.079554] RDX: ffff8880429e5280 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 110.080125] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd16370
[ 110.080702] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000
[ 110.081289] R13: 000000000000002c R14: ffff88806cf31490 R15: dffffc0000000000
[ 110.081861] FS: 00007fe5cedc7700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[ 110.082515] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 110.082984] CR2: 00007fe5d1965018 CR3: 00000000422e9000 CR4: 0000000000350ef0
[ 110.083569] Call Trace:
[ 110.083783]
[ 110.083973] ? __pfx_perf_tp_event+0x10/0x10
[ 110.084342] ? __pfx_css_rstat_updated+0x10/0x10
[ 110.084736] ? lock_is_held_type+0x9e/0x120
[ 110.085088] ? trace_pelt_se_tp+0xdf/0x130
[ 110.085435] ? __update_load_avg_se+0x428/0xa40
[ 110.085827] ? lock_is_held_type+0x9e/0x120
[ 110.086190] ? trace_sched_set_need_resched_tp+0xd4/0x110
[ 110.086647] ? __resched_curr+0x2a2/0x330
[ 110.086990] ? __pfx___resched_curr+0x10/0x10
[ 110.087367] ? lock_is_held_type+0x9e/0x120
[ 110.087723] ? perf_trace_run_bpf_submit+0xef/0x180
[ 110.088137] perf_trace_run_bpf_submit+0xef/0x180
[ 110.088541] perf_trace_lock+0x337/0x5d0
[ 110.088880] ? __pfx_perf_trace_lock+0x10/0x10
[ 110.089266] ? find_held_lock+0x2b/0x80
[ 110.089599] ? hrtimer_interrupt+0x114/0x830
[ 110.089964] lock_release+0x1ab/0x290
[ 110.090298] ktime_get_update_offsets_now+0xab/0x3c0
[ 110.090721] ? hrtimer_interrupt+0x114/0x830
[ 110.091086] ? __pfx_lapic_next_deadline+0x10/0x10
[ 110.091502] hrtimer_interrupt+0x114/0x830
[ 110.091852] __sysvec_apic_timer_interrupt+0xbb/0x330
[ 110.092274] sysvec_apic_timer_interrupt+0x6b/0x80
[ 110.092682]
[ 110.092874]
[ 110.093065] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 110.093492] RIP: 0010:oops_exit+0x0/0x50
[ 110.093836] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27
[ 110.095320] RSP: 0018:ffff888044b6f690 EFLAGS: 00000202
[ 110.095752] RAX: 000000000002d6f6 RBX: 0000000000000212 RCX: ffffc900054b4000
[ 110.096331] RDX: 0000000000040000 RSI: ffffffff812a3dca RDI: 0000000000000007
[ 110.096909] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90
[ 110.097492] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888044b6f758
[ 110.098068] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000
[ 110.098652] ? oops_end+0x4a/0xe0
[ 110.098962] oops_end+0x65/0xe0
[ 110.099245] exc_general_protection+0x1a2/0x330
[ 110.099639] asm_exc_general_protection+0x26/0x30
[ 110.100040] RIP: 0010:perf_tp_event+0x175/0xe70
[ 110.100429] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 110.101890] RSP: 0018:ffff888044b6f800 EFLAGS: 00010212
[ 110.102330] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc900054b4000
[ 110.102904] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 110.103485] RBP: ffff888044b6fa70 R08: ffff88806cf31340 R09: ffffe8ffffd16370
[ 110.104063] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 110.104649] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[ 110.105240] ? perf_tp_event+0x167/0xe70
[ 110.105591] ? __pfx_perf_tp_event+0x10/0x10
[ 110.105963] ? lock_is_held_type+0x9e/0x120
[ 110.106336] ? lock_is_held_type+0x9e/0x120
[ 110.106698] ? perf_trace_lock+0xb5/0x5d0
[ 110.107044] ? perf_trace_lock+0xb5/0x5d0
[ 110.107389] ? __pfx_perf_trace_lock+0x10/0x10
[ 110.107767] ? __pfx_perf_trace_lock+0x10/0x10
[ 110.108153] ? find_held_lock+0x2b/0x80
[ 110.108492] ? find_held_lock+0x2b/0x80
[ 110.108826] ? __perf_install_in_context+0x503/0xb90
[ 110.109244] ? lock_release+0xc8/0x290
[ 110.109569] ? do_raw_spin_unlock+0x53/0x220
[ 110.109940] ? perf_trace_run_bpf_submit+0xef/0x180
[ 110.110364] perf_trace_run_bpf_submit+0xef/0x180
[ 110.110769] perf_trace_lock+0x337/0x5d0
[ 110.111112] ? __pfx_perf_trace_lock+0x10/0x10
[ 110.111496] ? lock_acquire+0x15e/0x2f0
[ 110.111828] ? futex_ref_get+0x48/0x300
[ 110.112160] ? futex_ref_get+0x114/0x300
[ 110.112495] ? futex_hash+0x15c/0x390
[ 110.112814] lock_release+0x1ab/0x290
[ 110.113137] ? futex_hash+0x15c/0x390
[ 110.113454] futex_ref_get+0x119/0x300
[ 110.113779] ? futex_hash+0x15c/0x390
[ 110.114102] futex_hash+0x70/0x390
[ 110.114404] futex_wake+0x143/0x540
[ 110.114711] ? __pfx_perf_trace_lock+0x10/0x10
[ 110.115090] ? __pfx_futex_wake+0x10/0x10
[ 110.115436] ? __do_sys_perf_event_open+0x44d/0x2c20
[ 110.115854] ? lock_release+0xc8/0x290
[ 110.116183] do_futex+0x26d/0x370
[ 110.116479] ? __pfx_do_futex+0x10/0x10
[ 110.116811] ? __pfx___do_sys_perf_event_open+0x10/0x10
[ 110.117251] ? find_held_lock+0x2b/0x80
[ 110.117589] __x64_sys_futex+0x1c9/0x4d0
[ 110.117930] ? __pfx___x64_sys_futex+0x10/0x10
[ 110.118325] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 110.118757] do_syscall_64+0xbf/0x360
[ 110.119076] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.119509] RIP: 0033:0x7fe5d1851b19
[ 110.119817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 110.121276] RSP: 002b:00007fe5cedc7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 110.121898] RAX: ffffffffffffffda RBX: 00007fe5d1964f68 RCX: 00007fe5d1851b19
[ 110.122485] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe5d1964f6c
[ 110.123058] RBP: 00007fe5d1964f60 R08: 000000000000000e R09: 0000000000000000
[ 110.123637] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fe5d1964f6c
[ 110.124212] R13: 00007ffc8bdc19ef R14: 00007fe5cedc7300 R15: 0000000000022000
[ 110.124792]
[ 110.125000] Modules linked in:
[ 110.125271] ---[ end trace 0000000000000000 ]---
[ 110.125273] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#4] SMP KASAN NOPTI
[ 110.125656] RIP: 0010:perf_tp_event+0x175/0xe70
[ 110.126516] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[ 110.126533] CPU: 0 UID: 0 PID: 3950 Comm: syz-executor.6 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 110.127252] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 110.127919] Tainted: [D]=DIE, [W]=WARN
[ 110.129679] RSP: 0018:ffff888044b6f800 EFLAGS: 00010212
[ 110.131084] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 110.131094] RIP: 0010:perf_tp_event+0x175/0xe70
[ 110.131709]
[ 110.132116] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 110.133500] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc900054b4000
[ 110.133858] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012
[ 110.134164] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 110.135567]
[ 110.135573] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[ 110.136747] RBP: ffff888044b6fa70 R08: ffff88806cf31340 R09: ffffe8ffffd16370
[ 110.137171] RDX: ffff888017829b80 RSI: ffffffff818995b7 RDI: 0000000100000190
[ 110.138364] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 110.138504] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc16370
[ 110.139678] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[ 110.140250] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000
[ 110.141439] FS: 00007fe5cedc7700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[ 110.142014] R13: 000000000000002c R14: ffff88806ce31490 R15: dffffc0000000000
[ 110.143204] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 110.143777] FS: 00005555673b8400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 110.144955] CR2: 00007fe5d1965018 CR3: 00000000422e9000 CR4: 0000000000350ef0
[ 110.145598] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 110.146802] Kernel panic - not syncing: Fatal exception in interrupt
[ 111.250597] Shutting down cpus with NMI
[ 111.255101] Kernel Offset: disabled
[ 111.255607] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---
VM DIAGNOSIS:
08:46:45 Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84bdec0e RDX=fffffbfff0f0ec09
RSI=0000000000000004 RDI=ffffffff87876044 RBP=ffffffff87876044 RSP=ffff888044b4f5b0
R8 =0000000000000000 R9 =fffffbfff0f0ec08 R10=ffffffff87876047 R11=202c746c75616620
R12=1ffff11008969eb7 R13=0000000000000007 R14=fffffbfff0f0ec08 R15=ffff888044b4f5e8
RIP=ffffffff84bdeda0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00005555673b8400 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00005555673b9c18 CR3=0000000043113000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fe13c7717c000007fe13c7717c8
XMM02=00007fe13c7717e000007fe13c7717c0 XMM03=00007fe13c7717c800007fe13c7717c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=ffffffff828e3230 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888044b6f178
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=313030203a505352
R12=000000000000003b R13=ffffffff88724190 R14=ffffffff88724140 R15=ffffffff88724400
RIP=ffffffff828e3285 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fe5cedc7700 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe5800000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe5d1965018 CR3=00000000422e9000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fe5d19387c000007fe5d19387c8
XMM02=00007fe5d19387e000007fe5d19387c0 XMM03=00007fe5d19387c800007fe5d19387c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000