Warning: Permanently added '[localhost]:41766' (ECDSA) to the list of known hosts. 2025/08/29 09:31:05 fuzzer started 2025/08/29 09:31:05 dialing manager at localhost:43077 syzkaller login: [ 58.695479] cgroup: Unknown subsys name 'net' [ 58.772993] cgroup: Unknown subsys name 'cpuset' [ 58.787501] cgroup: Unknown subsys name 'rlimit' 2025/08/29 09:31:16 syscalls: 2214 2025/08/29 09:31:16 code coverage: enabled 2025/08/29 09:31:16 comparison tracing: enabled 2025/08/29 09:31:16 extra coverage: enabled 2025/08/29 09:31:16 setuid sandbox: enabled 2025/08/29 09:31:16 namespace sandbox: enabled 2025/08/29 09:31:16 Android sandbox: enabled 2025/08/29 09:31:16 fault injection: enabled 2025/08/29 09:31:16 leak checking: enabled 2025/08/29 09:31:16 net packet injection: enabled 2025/08/29 09:31:16 net device setup: enabled 2025/08/29 09:31:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 09:31:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 09:31:16 USB emulation: enabled 2025/08/29 09:31:16 hci packet injection: enabled 2025/08/29 09:31:16 wifi device emulation: enabled 2025/08/29 09:31:16 802.15.4 emulation: enabled 2025/08/29 09:31:16 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 09:31:16 fetching corpus: 50, signal 22877/26229 (executing program) 2025/08/29 09:31:16 fetching corpus: 100, signal 36962/41502 (executing program) 2025/08/29 09:31:17 fetching corpus: 150, signal 44838/50494 (executing program) 2025/08/29 09:31:17 fetching corpus: 200, signal 54154/60685 (executing program) 2025/08/29 09:31:17 fetching corpus: 250, signal 59286/66714 (executing program) 2025/08/29 09:31:17 fetching corpus: 300, signal 62943/71273 (executing program) 2025/08/29 09:31:17 fetching corpus: 350, signal 66186/75303 (executing program) 2025/08/29 09:31:17 fetching corpus: 400, signal 70457/80213 (executing program) 2025/08/29 09:31:17 fetching corpus: 450, signal 72659/83207 (executing program) 2025/08/29 09:31:17 fetching corpus: 500, signal 76478/87554 (executing program) 2025/08/29 09:31:17 fetching corpus: 550, signal 79398/91000 (executing program) 2025/08/29 09:31:18 fetching corpus: 600, signal 82261/94327 (executing program) 2025/08/29 09:31:18 fetching corpus: 650, signal 85248/97680 (executing program) 2025/08/29 09:31:18 fetching corpus: 700, signal 87420/100277 (executing program) 2025/08/29 09:31:18 fetching corpus: 750, signal 88813/102276 (executing program) 2025/08/29 09:31:18 fetching corpus: 800, signal 90064/104067 (executing program) 2025/08/29 09:31:18 fetching corpus: 850, signal 92387/106647 (executing program) 2025/08/29 09:31:18 fetching corpus: 900, signal 94493/109002 (executing program) 2025/08/29 09:31:18 fetching corpus: 950, signal 95794/110678 (executing program) 2025/08/29 09:31:18 fetching corpus: 1000, signal 96898/112175 (executing program) 2025/08/29 09:31:19 fetching corpus: 1050, signal 98862/114275 (executing program) 2025/08/29 09:31:19 fetching corpus: 1100, signal 100559/116207 (executing program) 2025/08/29 09:31:19 fetching corpus: 1150, signal 102018/117927 (executing program) 2025/08/29 09:31:19 fetching corpus: 1200, signal 103424/119433 (executing program) 2025/08/29 09:31:19 fetching corpus: 1250, signal 105101/121199 (executing program) 2025/08/29 09:31:19 fetching corpus: 1300, signal 106343/122637 (executing program) 2025/08/29 09:31:19 fetching corpus: 1350, signal 108106/124409 (executing program) 2025/08/29 09:31:19 fetching corpus: 1400, signal 109134/125666 (executing program) 2025/08/29 09:31:19 fetching corpus: 1450, signal 110226/126870 (executing program) 2025/08/29 09:31:20 fetching corpus: 1500, signal 111895/128406 (executing program) 2025/08/29 09:31:20 fetching corpus: 1550, signal 113200/129707 (executing program) 2025/08/29 09:31:20 fetching corpus: 1600, signal 114140/130781 (executing program) 2025/08/29 09:31:20 fetching corpus: 1650, signal 115025/131796 (executing program) 2025/08/29 09:31:20 fetching corpus: 1700, signal 116604/133211 (executing program) 2025/08/29 09:31:20 fetching corpus: 1750, signal 117420/134123 (executing program) 2025/08/29 09:31:20 fetching corpus: 1800, signal 118793/135312 (executing program) 2025/08/29 09:31:20 fetching corpus: 1850, signal 119714/136229 (executing program) 2025/08/29 09:31:20 fetching corpus: 1900, signal 121167/137713 (executing program) 2025/08/29 09:31:20 fetching corpus: 1950, signal 122182/138695 (executing program) 2025/08/29 09:31:21 fetching corpus: 2000, signal 123128/139493 (executing program) 2025/08/29 09:31:21 fetching corpus: 2050, signal 124289/140385 (executing program) 2025/08/29 09:31:21 fetching corpus: 2100, signal 125366/141179 (executing program) 2025/08/29 09:31:21 fetching corpus: 2150, signal 126199/141933 (executing program) 2025/08/29 09:31:21 fetching corpus: 2200, signal 127071/142623 (executing program) 2025/08/29 09:31:21 fetching corpus: 2250, signal 127910/143376 (executing program) 2025/08/29 09:31:21 fetching corpus: 2300, signal 128978/144098 (executing program) 2025/08/29 09:31:21 fetching corpus: 2350, signal 129979/144808 (executing program) 2025/08/29 09:31:21 fetching corpus: 2400, signal 130389/145264 (executing program) 2025/08/29 09:31:21 fetching corpus: 2450, signal 131279/145850 (executing program) 2025/08/29 09:31:22 fetching corpus: 2500, signal 132070/146386 (executing program) 2025/08/29 09:31:22 fetching corpus: 2550, signal 133092/146966 (executing program) 2025/08/29 09:31:22 fetching corpus: 2600, signal 133689/147416 (executing program) 2025/08/29 09:31:22 fetching corpus: 2650, signal 134278/147866 (executing program) 2025/08/29 09:31:22 fetching corpus: 2700, signal 134883/148287 (executing program) 2025/08/29 09:31:22 fetching corpus: 2750, signal 135861/148898 (executing program) 2025/08/29 09:31:22 fetching corpus: 2800, signal 136409/149262 (executing program) 2025/08/29 09:31:22 fetching corpus: 2850, signal 137307/149759 (executing program) 2025/08/29 09:31:22 fetching corpus: 2900, signal 138031/150153 (executing program) 2025/08/29 09:31:22 fetching corpus: 2950, signal 138551/150473 (executing program) 2025/08/29 09:31:22 fetching corpus: 3000, signal 139083/150802 (executing program) 2025/08/29 09:31:23 fetching corpus: 3050, signal 139876/151154 (executing program) 2025/08/29 09:31:23 fetching corpus: 3100, signal 140438/151427 (executing program) 2025/08/29 09:31:23 fetching corpus: 3150, signal 141227/151698 (executing program) 2025/08/29 09:31:23 fetching corpus: 3200, signal 141734/151967 (executing program) 2025/08/29 09:31:23 fetching corpus: 3250, signal 142576/152245 (executing program) 2025/08/29 09:31:23 fetching corpus: 3300, signal 143418/152543 (executing program) 2025/08/29 09:31:23 fetching corpus: 3350, signal 144157/152802 (executing program) 2025/08/29 09:31:23 fetching corpus: 3400, signal 145002/152996 (executing program) 2025/08/29 09:31:23 fetching corpus: 3450, signal 145505/153155 (executing program) 2025/08/29 09:31:23 fetching corpus: 3500, signal 146355/153317 (executing program) 2025/08/29 09:31:24 fetching corpus: 3550, signal 146761/153423 (executing program) 2025/08/29 09:31:24 fetching corpus: 3600, signal 147373/153554 (executing program) 2025/08/29 09:31:24 fetching corpus: 3650, signal 147910/153652 (executing program) 2025/08/29 09:31:24 fetching corpus: 3700, signal 148344/153682 (executing program) 2025/08/29 09:31:24 fetching corpus: 3750, signal 149236/153683 (executing program) 2025/08/29 09:31:24 fetching corpus: 3800, signal 149732/153693 (executing program) 2025/08/29 09:31:24 fetching corpus: 3850, signal 150222/153708 (executing program) 2025/08/29 09:31:24 fetching corpus: 3900, signal 150756/153731 (executing program) 2025/08/29 09:31:24 fetching corpus: 3950, signal 151291/153739 (executing program) 2025/08/29 09:31:24 fetching corpus: 3993, signal 151636/153756 (executing program) 2025/08/29 09:31:24 fetching corpus: 3993, signal 151636/153756 (executing program) 2025/08/29 09:31:27 starting 8 fuzzer processes 09:31:27 executing program 0: prctl$PR_SET_MM_MAP(0x4c, 0xe, &(0x7f0000000380)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, 0x0}, 0x68) 09:31:27 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000001dc0), 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000080)) 09:31:27 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r0, 0x0, 0x0) 09:31:27 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') pread64(r0, 0x0, 0x0, 0x0) 09:31:27 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 09:31:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000640), 0x0) [ 80.185527] audit: type=1400 audit(1756459887.262:7): avc: denied { execmem } for pid=275 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:31:27 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @dev}}}}}, 0x0) 09:31:27 executing program 6: r0 = io_uring_setup(0x44a, &(0x7f0000000100)={0x0, 0x0, 0x1}) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) [ 81.403095] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.405961] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.408363] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.415161] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.419086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.421627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.423290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.425489] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.436058] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.438781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.463638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.465702] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.467648] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.472508] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.477498] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.490491] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.495111] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.502115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.504011] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.507251] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.518578] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.527082] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.530315] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 81.531900] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.534163] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.536158] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.537588] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 81.539790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.541114] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 81.545384] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.547150] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 81.549431] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.557489] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 81.560201] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 81.563746] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.565563] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 81.568187] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 81.569886] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.595043] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 81.600205] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 83.481934] Bluetooth: hci0: command tx timeout [ 83.544162] Bluetooth: hci3: command tx timeout [ 83.544790] Bluetooth: hci1: command tx timeout [ 83.607894] Bluetooth: hci2: command tx timeout [ 83.608458] Bluetooth: hci5: command tx timeout [ 83.673972] Bluetooth: hci7: command tx timeout [ 83.674548] Bluetooth: hci4: command tx timeout [ 83.675992] Bluetooth: hci6: command tx timeout [ 85.528047] Bluetooth: hci0: command tx timeout [ 85.592856] Bluetooth: hci3: command tx timeout [ 85.593303] Bluetooth: hci1: command tx timeout [ 85.655916] Bluetooth: hci2: command tx timeout [ 85.656358] Bluetooth: hci5: command tx timeout [ 85.719887] Bluetooth: hci6: command tx timeout [ 85.720332] Bluetooth: hci4: command tx timeout [ 85.720712] Bluetooth: hci7: command tx timeout [ 87.575914] Bluetooth: hci0: command tx timeout [ 87.639974] Bluetooth: hci1: command tx timeout [ 87.640437] Bluetooth: hci3: command tx timeout [ 87.704858] Bluetooth: hci5: command tx timeout [ 87.705326] Bluetooth: hci2: command tx timeout [ 87.768632] Bluetooth: hci7: command tx timeout [ 87.769131] Bluetooth: hci4: command tx timeout [ 87.769522] Bluetooth: hci6: command tx timeout [ 89.623935] Bluetooth: hci0: command tx timeout [ 89.687899] Bluetooth: hci3: command tx timeout [ 89.688356] Bluetooth: hci1: command tx timeout [ 89.751872] Bluetooth: hci5: command tx timeout [ 89.752330] Bluetooth: hci2: command tx timeout [ 89.815901] Bluetooth: hci6: command tx timeout [ 89.816355] Bluetooth: hci4: command tx timeout [ 89.816732] Bluetooth: hci7: command tx timeout [ 118.786183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.787025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.937279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.938029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.125405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.126113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.208322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.209041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.594805] audit: type=1400 audit(1756459926.671:8): avc: denied { open } for pid=3795 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.604901] audit: type=1400 audit(1756459926.671:9): avc: denied { kernel } for pid=3795 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.610975] process 'syz-executor.4' launched './file1' with NULL argv: empty string added 09:32:06 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @dev}}}}}, 0x0) 09:32:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000640), 0x0) 09:32:06 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @dev}}}}}, 0x0) [ 119.744041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.744661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:32:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000640), 0x0) 09:32:06 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @dev}}}}}, 0x0) [ 119.875653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.876463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:32:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000640), 0x0) 09:32:07 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/schedstat\x00', 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, 0x0, 0x0) 09:32:07 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) chown(&(0x7f00000009c0)='./file0\x00', r0, 0x0) chown(&(0x7f00000009c0)='./file0\x00', 0x0, 0x0) [ 120.073169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.073755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.141284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.141846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.368028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.368634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.453771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.454417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.763346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.764163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.815530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.816222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.886655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.887248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.030606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.031644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.096398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.097118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.122788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.123505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:32:08 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000001dc0), 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000080)) 09:32:08 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 09:32:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x4b45, 0x4) 09:32:08 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) chown(&(0x7f00000009c0)='./file0\x00', r0, 0x0) chown(&(0x7f00000009c0)='./file0\x00', 0x0, 0x0) 09:32:08 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r0, 0x0, 0x0) 09:32:08 executing program 6: r0 = io_uring_setup(0x44a, &(0x7f0000000100)={0x0, 0x0, 0x1}) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) 09:32:08 executing program 0: prctl$PR_SET_MM_MAP(0x4c, 0xe, &(0x7f0000000380)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, 0x0}, 0x68) 09:32:08 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') pread64(r0, 0x0, 0x0, 0x0) 09:32:08 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000001dc0), 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000080)) 09:32:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x4b45, 0x4) 09:32:08 executing program 6: r0 = io_uring_setup(0x44a, &(0x7f0000000100)={0x0, 0x0, 0x1}) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) 09:32:08 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 09:32:08 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) chown(&(0x7f00000009c0)='./file0\x00', r0, 0x0) chown(&(0x7f00000009c0)='./file0\x00', 0x0, 0x0) 09:32:08 executing program 0: prctl$PR_SET_MM_MAP(0x4c, 0xe, &(0x7f0000000380)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, 0x0}, 0x68) 09:32:08 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r0, 0x0, 0x0) 09:32:08 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') pread64(r0, 0x0, 0x0, 0x0) [ 121.475137] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI [ 121.476052] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 121.476734] CPU: 0 UID: 0 PID: 3949 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 121.477676] Tainted: [W]=WARN [ 121.478385] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 121.480154] RIP: 0010:perf_tp_event+0x175/0xe70 09:32:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x4b45, 0x4) [ 121.481098] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 121.485052] RSP: 0018:ffff8880456a7780 EFLAGS: 00010012 [ 121.486089] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc9000c674000 [ 121.486643] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 121.487197] RBP: ffff8880456a79f0 R08: ffff88806ce31340 R09: ffffe8ffffc169a0 [ 121.487750] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 121.488315] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000 [ 121.488875] FS: 00007f08548fd700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 121.489504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.489958] CR2: 00007fba2b6bc000 CR3: 00000000438f7000 CR4: 0000000000350ef0 [ 121.490514] Call Trace: [ 121.490719] [ 121.490902] ? __pfx_perf_tp_event+0x10/0x10 [ 121.491254] ? mark_held_locks+0x49/0x80 [ 121.491579] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 09:32:08 executing program 0: prctl$PR_SET_MM_MAP(0x4c, 0xe, &(0x7f0000000380)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, 0x0}, 0x68) [ 121.492083] ? do_raw_spin_lock+0x123/0x260 [ 121.492436] ? mark_held_locks+0x49/0x80 [ 121.492759] ? css_rstat_updated+0x1b8/0x4d0 [ 121.493115] ? lock_is_held_type+0x9e/0x120 [ 121.493463] ? perf_trace_run_bpf_submit+0xef/0x180 [ 121.493859] ? lock_is_held_type+0x9e/0x120 [ 121.494202] perf_trace_run_bpf_submit+0xef/0x180 [ 121.494590] perf_trace_preemptirq_template+0x259/0x430 [ 121.495014] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 121.495477] ? lock_is_held_type+0x9e/0x120 [ 121.495821] ? find_held_lock+0x2b/0x80 [ 121.496154] ? try_to_wake_up+0x8ae/0x11d0 [ 121.496513] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 121.496929] trace_irq_enable.constprop.0+0xa6/0x100 [ 121.497328] trace_hardirqs_on+0x26/0x40 [ 121.497647] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 121.498035] try_to_wake_up+0x8ae/0x11d0 [ 121.498363] ? __pfx_try_to_wake_up+0x10/0x10 [ 121.498722] ? plist_del+0x122/0x270 [ 121.499022] ? find_held_lock+0x2b/0x80 [ 121.499341] ? futex_wake+0x474/0x540 [ 121.499649] wake_up_q+0xa1/0x130 [ 121.499934] futex_wake+0x47e/0x540 [ 121.500236] ? __pfx_futex_wake+0x10/0x10 [ 121.500566] ? io_uring_setup+0x16e0/0x2000 [ 121.500909] do_futex+0x26d/0x370 [ 121.501189] ? __pfx_do_futex+0x10/0x10 [ 121.501505] __x64_sys_futex+0x1c9/0x4d0 [ 121.501827] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 121.502299] ? __pfx___x64_sys_futex+0x10/0x10 [ 121.502662] ? xfd_validate_state+0x55/0x180 [ 121.503019] do_syscall_64+0xbf/0x360 [ 121.503322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.503726] RIP: 0033:0x7f0857387b19 [ 121.504027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.505439] RSP: 002b:00007f08548fd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.506027] RAX: ffffffffffffffda RBX: 00007f085749af68 RCX: 00007f0857387b19 [ 121.506580] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f085749af6c [ 121.507133] RBP: 00007f085749af60 R08: 000000000000000e R09: 0000000000000000 [ 121.507684] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f085749af6c [ 121.508242] R13: 00007ffe90ee1f2f R14: 00007f08548fd300 R15: 0000000000022000 [ 121.508796] [ 121.508982] Modules linked in: [ 121.509240] ---[ end trace 0000000000000000 ]--- [ 121.509604] RIP: 0010:perf_tp_event+0x175/0xe70 [ 121.509974] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 121.511371] RSP: 0018:ffff8880456a7780 EFLAGS: 00010012 [ 121.511785] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc9000c674000 [ 121.512344] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 121.512894] RBP: ffff8880456a79f0 R08: ffff88806ce31340 R09: ffffe8ffffc169a0 [ 121.513444] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 121.513995] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000 [ 121.514545] FS: 00007f08548fd700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 121.515168] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.515621] CR2: 00007fba2b6bc000 CR3: 00000000438f7000 CR4: 0000000000350ef0 [ 121.516183] note: syz-executor.6[3949] exited with irqs disabled [ 121.516706] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI [ 121.517564] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 121.518229] CPU: 0 UID: 0 PID: 3949 Comm: syz-executor.6 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 121.519149] Tainted: [D]=DIE, [W]=WARN [ 121.519447] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 121.520088] RIP: 0010:perf_tp_event+0x175/0xe70 [ 121.520458] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 121.521853] RSP: 0018:ffff88806ce08b80 EFLAGS: 00010012 [ 121.522267] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 121.522819] RDX: ffff88801648b700 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 121.523369] RBP: ffff88806ce08df0 R08: ffff88806ce313e8 R09: ffffe8ffffc169a0 [ 121.523921] R10: 0000000000000000 R11: ffff88802010dc98 R12: dffffc0000000000 [ 121.524480] R13: 0000000000000014 R14: ffff88806ce313e8 R15: dffffc0000000000 [ 121.525031] FS: 00007f08548fd700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 121.525649] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.526101] CR2: 00007fba2b6bc000 CR3: 00000000438f7000 CR4: 0000000000350ef0 [ 121.526651] Call Trace: [ 121.526856] [ 121.527033] ? __pfx_perf_tp_event+0x10/0x10 [ 121.527385] ? trace_pelt_se_tp+0xdf/0x130 [ 121.527718] ? place_entity+0x300/0x410 [ 121.528035] ? lock_acquire+0x18c/0x2f0 [ 121.528354] ? update_cfs_group+0x11d/0x260 [ 121.528694] ? lock_release+0x1c7/0x290 [ 121.529008] ? trace_softirq_raise+0xbe/0x100 [ 121.529370] ? run_posix_cpu_timers+0x160/0x7d0 [ 121.529737] ? __raise_softirq_irqoff+0x5f/0x90 [ 121.530107] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 121.530497] ? sched_balance_trigger+0x1ac/0xcb0 [ 121.530875] ? sched_tick+0x27c/0x6c0 [ 121.531180] ? do_raw_spin_lock+0x123/0x260 [ 121.531521] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 121.531892] ? perf_trace_run_bpf_submit+0xef/0x180 [ 121.532296] perf_trace_run_bpf_submit+0xef/0x180 [ 121.532679] perf_trace_preemptirq_template+0x259/0x430 [ 121.533109] ? read_tsc+0x9/0x20 [ 121.533385] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 121.533847] ? clockevents_program_event+0x135/0x360 [ 121.534245] ? tick_program_event+0xac/0x140 [ 121.534593] ? handle_softirqs+0x16e/0x770 [ 121.534931] trace_irq_enable.constprop.0+0xa6/0x100 [ 121.535326] trace_hardirqs_on+0x26/0x40 [ 121.535649] handle_softirqs+0x16e/0x770 [ 121.535981] __irq_exit_rcu+0xc4/0x100 [ 121.536303] irq_exit_rcu+0x9/0x20 [ 121.536585] sysvec_apic_timer_interrupt+0x70/0x80 [ 121.536975] [ 121.537157] [ 121.537335] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 121.537745] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 121.538116] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de [ 121.539507] RSP: 0018:ffff8880456a7f28 EFLAGS: 00000246 [ 121.539920] RAX: 0000000000000001 RBX: ffff88801648b700 RCX: ffffffff817c2b86 [ 121.540475] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 121.541025] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 121.541574] R10: ffffffff8643ac57 R11: 0000000000000001 R12: ffff88801648b700 [ 121.542123] R13: 0000000000000000 R14: dffffc0020000032 R15: 0000000000000000 [ 121.542675] ? trace_irq_enable.constprop.0+0x26/0x100 [ 121.543089] ? make_task_dead+0x214/0x3b0 [ 121.543418] ? make_task_dead+0x214/0x3b0 [ 121.543744] ? do_syscall_64+0xbf/0x360 [ 121.544055] rewind_stack_and_make_dead+0x16/0x20 [ 121.544448] RIP: 0033:0x7f0857387b19 [ 121.544741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.546138] RSP: 002b:00007f08548fd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.546722] RAX: ffffffffffffffda RBX: 00007f085749af68 RCX: 00007f0857387b19 [ 121.547268] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f085749af6c [ 121.547821] RBP: 00007f085749af60 R08: 000000000000000e R09: 0000000000000000 [ 121.548377] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f085749af6c [ 121.548926] R13: 00007ffe90ee1f2f R14: 00007f08548fd300 R15: 0000000000022000 [ 121.549478] [ 121.549663] Modules linked in: [ 121.549917] ---[ end trace 0000000000000000 ]--- [ 121.550282] RIP: 0010:perf_tp_event+0x175/0xe70 [ 121.550655] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 121.552057] RSP: 0018:ffff8880456a7780 EFLAGS: 00010012 [ 121.552475] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc9000c674000 [ 121.553025] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 121.553573] RBP: ffff8880456a79f0 R08: ffff88806ce31340 R09: ffffe8ffffc169a0 [ 121.554125] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 121.554670] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000 [ 121.555221] FS: 00007f08548fd700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 121.555836] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.556295] CR2: 00007fba2b6bc000 CR3: 00000000438f7000 CR4: 0000000000350ef0 [ 121.556847] Kernel panic - not syncing: Fatal exception in interrupt [ 121.557428] Kernel Offset: disabled [ 121.557711] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 09:32:08 Registers: info registers vcpu 0 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff8880456a7070 R8 =0000000000000000 R9 =ffffed1001eba046 R10=0000000000000034 R11=0000000065646f43 R12=0000000000000034 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f08548fd700 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe0600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fba2b6bc000 CR3=00000000438f7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f085746e7c000007f085746e7c8 XMM02=00007f085746e7e000007f085746e7c0 XMM03=00007f085746e7c800007f085746e7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffea0000ddcac0 RCX=ffffffff819cecf3 RDX=ffff88800fe59b80 RSI=ffffffff819cfa5c RDI=0000000000000001 RBP=0000000000000000 RSP=ffff88804563f878 R8 =0000000000000000 R9 =fffff940001bb958 R10=0000000000000000 R11=1ffff1100d9e6f7b R12=0000000000000000 R13=00007f78bb7b6000 R14=ffff88804563fce0 R15=800000003772b007 RIP=ffffffff8173e788 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe4c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055557ca02c58 CR3=00000000407f4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000