Warning: Permanently added '[localhost]:34376' (ECDSA) to the list of known hosts. 2025/08/29 13:33:13 fuzzer started 2025/08/29 13:33:13 dialing manager at localhost:43077 syzkaller login: [ 50.964807] cgroup: Unknown subsys name 'net' [ 51.008614] cgroup: Unknown subsys name 'cpuset' [ 51.021030] cgroup: Unknown subsys name 'rlimit' 2025/08/29 13:33:24 syscalls: 2214 2025/08/29 13:33:24 code coverage: enabled 2025/08/29 13:33:24 comparison tracing: enabled 2025/08/29 13:33:24 extra coverage: enabled 2025/08/29 13:33:24 setuid sandbox: enabled 2025/08/29 13:33:24 namespace sandbox: enabled 2025/08/29 13:33:24 Android sandbox: enabled 2025/08/29 13:33:24 fault injection: enabled 2025/08/29 13:33:24 leak checking: enabled 2025/08/29 13:33:24 net packet injection: enabled 2025/08/29 13:33:24 net device setup: enabled 2025/08/29 13:33:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 13:33:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 13:33:24 USB emulation: enabled 2025/08/29 13:33:24 hci packet injection: enabled 2025/08/29 13:33:24 wifi device emulation: enabled 2025/08/29 13:33:24 802.15.4 emulation: enabled 2025/08/29 13:33:24 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 13:33:24 fetching corpus: 50, signal 18007/21693 (executing program) 2025/08/29 13:33:24 fetching corpus: 100, signal 29096/34268 (executing program) 2025/08/29 13:33:24 fetching corpus: 150, signal 40715/47161 (executing program) 2025/08/29 13:33:24 fetching corpus: 200, signal 51295/58784 (executing program) 2025/08/29 13:33:24 fetching corpus: 250, signal 54653/63384 (executing program) 2025/08/29 13:33:24 fetching corpus: 300, signal 59562/69359 (executing program) 2025/08/29 13:33:25 fetching corpus: 350, signal 64788/75599 (executing program) 2025/08/29 13:33:25 fetching corpus: 400, signal 67877/79775 (executing program) 2025/08/29 13:33:25 fetching corpus: 450, signal 70477/83430 (executing program) 2025/08/29 13:33:25 fetching corpus: 500, signal 73922/87927 (executing program) 2025/08/29 13:33:25 fetching corpus: 550, signal 76890/91853 (executing program) 2025/08/29 13:33:25 fetching corpus: 600, signal 79530/95380 (executing program) 2025/08/29 13:33:25 fetching corpus: 650, signal 81465/98301 (executing program) 2025/08/29 13:33:25 fetching corpus: 700, signal 83698/101421 (executing program) 2025/08/29 13:33:25 fetching corpus: 750, signal 85541/104177 (executing program) 2025/08/29 13:33:25 fetching corpus: 800, signal 86979/106513 (executing program) 2025/08/29 13:33:25 fetching corpus: 850, signal 89673/109890 (executing program) 2025/08/29 13:33:25 fetching corpus: 900, signal 91114/112186 (executing program) 2025/08/29 13:33:26 fetching corpus: 950, signal 93502/115230 (executing program) 2025/08/29 13:33:26 fetching corpus: 1000, signal 95139/117658 (executing program) 2025/08/29 13:33:26 fetching corpus: 1050, signal 96263/119634 (executing program) 2025/08/29 13:33:26 fetching corpus: 1099, signal 97589/121739 (executing program) 2025/08/29 13:33:26 fetching corpus: 1149, signal 99335/124130 (executing program) 2025/08/29 13:33:26 fetching corpus: 1199, signal 100629/126119 (executing program) 2025/08/29 13:33:26 fetching corpus: 1249, signal 101733/127931 (executing program) 2025/08/29 13:33:26 fetching corpus: 1299, signal 103749/130396 (executing program) 2025/08/29 13:33:26 fetching corpus: 1349, signal 105246/132475 (executing program) 2025/08/29 13:33:26 fetching corpus: 1399, signal 106611/134463 (executing program) 2025/08/29 13:33:26 fetching corpus: 1449, signal 107372/135975 (executing program) 2025/08/29 13:33:27 fetching corpus: 1499, signal 108595/137787 (executing program) 2025/08/29 13:33:27 fetching corpus: 1549, signal 110420/139947 (executing program) 2025/08/29 13:33:27 fetching corpus: 1599, signal 112066/141991 (executing program) 2025/08/29 13:33:27 fetching corpus: 1649, signal 113409/143806 (executing program) 2025/08/29 13:33:27 fetching corpus: 1699, signal 114971/145762 (executing program) 2025/08/29 13:33:27 fetching corpus: 1749, signal 116264/147473 (executing program) 2025/08/29 13:33:27 fetching corpus: 1799, signal 117264/148984 (executing program) 2025/08/29 13:33:27 fetching corpus: 1849, signal 117880/150302 (executing program) 2025/08/29 13:33:27 fetching corpus: 1899, signal 118842/151736 (executing program) 2025/08/29 13:33:27 fetching corpus: 1949, signal 119597/153039 (executing program) 2025/08/29 13:33:27 fetching corpus: 1999, signal 120653/154522 (executing program) 2025/08/29 13:33:27 fetching corpus: 2049, signal 121929/156099 (executing program) 2025/08/29 13:33:28 fetching corpus: 2099, signal 122656/157320 (executing program) 2025/08/29 13:33:28 fetching corpus: 2149, signal 123290/158504 (executing program) 2025/08/29 13:33:28 fetching corpus: 2199, signal 124322/159850 (executing program) 2025/08/29 13:33:28 fetching corpus: 2249, signal 125363/161178 (executing program) 2025/08/29 13:33:28 fetching corpus: 2299, signal 126179/162431 (executing program) 2025/08/29 13:33:28 fetching corpus: 2349, signal 126765/163527 (executing program) 2025/08/29 13:33:28 fetching corpus: 2399, signal 127464/164649 (executing program) 2025/08/29 13:33:28 fetching corpus: 2449, signal 128088/165696 (executing program) 2025/08/29 13:33:28 fetching corpus: 2499, signal 129315/166988 (executing program) 2025/08/29 13:33:28 fetching corpus: 2549, signal 130133/168135 (executing program) 2025/08/29 13:33:28 fetching corpus: 2599, signal 131496/169462 (executing program) 2025/08/29 13:33:29 fetching corpus: 2649, signal 132321/170536 (executing program) 2025/08/29 13:33:29 fetching corpus: 2699, signal 133748/171836 (executing program) 2025/08/29 13:33:29 fetching corpus: 2749, signal 134611/172895 (executing program) 2025/08/29 13:33:29 fetching corpus: 2799, signal 135249/173835 (executing program) 2025/08/29 13:33:29 fetching corpus: 2849, signal 135957/174810 (executing program) 2025/08/29 13:33:29 fetching corpus: 2899, signal 136495/175741 (executing program) 2025/08/29 13:33:29 fetching corpus: 2949, signal 137103/176597 (executing program) 2025/08/29 13:33:29 fetching corpus: 2999, signal 137811/177558 (executing program) 2025/08/29 13:33:29 fetching corpus: 3049, signal 138835/178623 (executing program) 2025/08/29 13:33:30 fetching corpus: 3099, signal 139713/179569 (executing program) 2025/08/29 13:33:30 fetching corpus: 3149, signal 140652/180573 (executing program) 2025/08/29 13:33:30 fetching corpus: 3199, signal 141337/181429 (executing program) 2025/08/29 13:33:30 fetching corpus: 3249, signal 142108/182275 (executing program) 2025/08/29 13:33:30 fetching corpus: 3299, signal 142944/183214 (executing program) 2025/08/29 13:33:30 fetching corpus: 3348, signal 143753/184119 (executing program) 2025/08/29 13:33:30 fetching corpus: 3398, signal 144207/184844 (executing program) 2025/08/29 13:33:30 fetching corpus: 3448, signal 144893/185697 (executing program) 2025/08/29 13:33:30 fetching corpus: 3498, signal 145649/186490 (executing program) 2025/08/29 13:33:30 fetching corpus: 3548, signal 146209/187242 (executing program) 2025/08/29 13:33:30 fetching corpus: 3598, signal 146842/187984 (executing program) 2025/08/29 13:33:31 fetching corpus: 3648, signal 147343/188651 (executing program) 2025/08/29 13:33:31 fetching corpus: 3698, signal 147892/189377 (executing program) 2025/08/29 13:33:31 fetching corpus: 3748, signal 148741/190252 (executing program) 2025/08/29 13:33:31 fetching corpus: 3798, signal 149176/190888 (executing program) 2025/08/29 13:33:31 fetching corpus: 3848, signal 149602/191550 (executing program) 2025/08/29 13:33:31 fetching corpus: 3898, signal 150014/192146 (executing program) 2025/08/29 13:33:31 fetching corpus: 3948, signal 150534/192794 (executing program) 2025/08/29 13:33:31 fetching corpus: 3998, signal 152582/193753 (executing program) 2025/08/29 13:33:31 fetching corpus: 4048, signal 153251/194386 (executing program) 2025/08/29 13:33:31 fetching corpus: 4098, signal 154238/195046 (executing program) 2025/08/29 13:33:31 fetching corpus: 4148, signal 154741/195606 (executing program) 2025/08/29 13:33:32 fetching corpus: 4198, signal 155498/196194 (executing program) 2025/08/29 13:33:32 fetching corpus: 4248, signal 156073/196768 (executing program) 2025/08/29 13:33:32 fetching corpus: 4298, signal 156584/197314 (executing program) 2025/08/29 13:33:32 fetching corpus: 4348, signal 156942/197840 (executing program) 2025/08/29 13:33:32 fetching corpus: 4398, signal 157570/198395 (executing program) 2025/08/29 13:33:32 fetching corpus: 4448, signal 158127/199005 (executing program) 2025/08/29 13:33:32 fetching corpus: 4498, signal 158854/199487 (executing program) 2025/08/29 13:33:32 fetching corpus: 4548, signal 159396/199958 (executing program) 2025/08/29 13:33:32 fetching corpus: 4598, signal 159855/200466 (executing program) 2025/08/29 13:33:32 fetching corpus: 4648, signal 160375/200945 (executing program) 2025/08/29 13:33:33 fetching corpus: 4698, signal 160773/201415 (executing program) 2025/08/29 13:33:33 fetching corpus: 4748, signal 161118/201866 (executing program) 2025/08/29 13:33:33 fetching corpus: 4798, signal 161746/202296 (executing program) 2025/08/29 13:33:33 fetching corpus: 4848, signal 162098/202722 (executing program) 2025/08/29 13:33:33 fetching corpus: 4898, signal 162444/203138 (executing program) 2025/08/29 13:33:33 fetching corpus: 4948, signal 162718/203140 (executing program) 2025/08/29 13:33:33 fetching corpus: 4998, signal 163153/203142 (executing program) 2025/08/29 13:33:33 fetching corpus: 5048, signal 163640/203150 (executing program) 2025/08/29 13:33:33 fetching corpus: 5098, signal 164254/203207 (executing program) 2025/08/29 13:33:33 fetching corpus: 5148, signal 164515/203245 (executing program) 2025/08/29 13:33:33 fetching corpus: 5198, signal 165013/203274 (executing program) 2025/08/29 13:33:33 fetching corpus: 5248, signal 165305/203275 (executing program) 2025/08/29 13:33:33 fetching corpus: 5298, signal 165625/203277 (executing program) 2025/08/29 13:33:34 fetching corpus: 5348, signal 166060/203296 (executing program) 2025/08/29 13:33:34 fetching corpus: 5398, signal 166534/203301 (executing program) 2025/08/29 13:33:34 fetching corpus: 5448, signal 166897/203322 (executing program) 2025/08/29 13:33:34 fetching corpus: 5498, signal 167234/203324 (executing program) 2025/08/29 13:33:34 fetching corpus: 5548, signal 167939/203349 (executing program) 2025/08/29 13:33:34 fetching corpus: 5598, signal 168306/203358 (executing program) 2025/08/29 13:33:34 fetching corpus: 5648, signal 168609/203370 (executing program) 2025/08/29 13:33:34 fetching corpus: 5698, signal 169098/203371 (executing program) 2025/08/29 13:33:34 fetching corpus: 5748, signal 169613/203422 (executing program) 2025/08/29 13:33:34 fetching corpus: 5798, signal 169913/203462 (executing program) 2025/08/29 13:33:34 fetching corpus: 5848, signal 170317/203470 (executing program) 2025/08/29 13:33:34 fetching corpus: 5898, signal 170608/203480 (executing program) 2025/08/29 13:33:35 fetching corpus: 5948, signal 170981/203487 (executing program) 2025/08/29 13:33:35 fetching corpus: 5998, signal 171397/203496 (executing program) 2025/08/29 13:33:35 fetching corpus: 6048, signal 171841/203499 (executing program) 2025/08/29 13:33:35 fetching corpus: 6098, signal 172131/203512 (executing program) 2025/08/29 13:33:35 fetching corpus: 6148, signal 172462/203545 (executing program) 2025/08/29 13:33:35 fetching corpus: 6198, signal 172850/203570 (executing program) 2025/08/29 13:33:35 fetching corpus: 6248, signal 173150/203579 (executing program) 2025/08/29 13:33:35 fetching corpus: 6298, signal 173602/203590 (executing program) 2025/08/29 13:33:35 fetching corpus: 6348, signal 173867/203605 (executing program) 2025/08/29 13:33:35 fetching corpus: 6398, signal 174367/203611 (executing program) 2025/08/29 13:33:35 fetching corpus: 6448, signal 174929/203619 (executing program) 2025/08/29 13:33:35 fetching corpus: 6498, signal 175282/203623 (executing program) 2025/08/29 13:33:35 fetching corpus: 6548, signal 175676/203623 (executing program) 2025/08/29 13:33:36 fetching corpus: 6598, signal 176044/203636 (executing program) 2025/08/29 13:33:36 fetching corpus: 6648, signal 176648/203650 (executing program) 2025/08/29 13:33:36 fetching corpus: 6698, signal 176972/203658 (executing program) 2025/08/29 13:33:36 fetching corpus: 6748, signal 177307/203668 (executing program) 2025/08/29 13:33:36 fetching corpus: 6798, signal 177650/203669 (executing program) 2025/08/29 13:33:36 fetching corpus: 6848, signal 177846/203680 (executing program) 2025/08/29 13:33:36 fetching corpus: 6898, signal 178069/203694 (executing program) 2025/08/29 13:33:36 fetching corpus: 6948, signal 178351/203711 (executing program) 2025/08/29 13:33:36 fetching corpus: 6998, signal 178768/203724 (executing program) 2025/08/29 13:33:36 fetching corpus: 7048, signal 179220/203726 (executing program) 2025/08/29 13:33:36 fetching corpus: 7098, signal 179549/203728 (executing program) 2025/08/29 13:33:36 fetching corpus: 7148, signal 179945/203728 (executing program) 2025/08/29 13:33:37 fetching corpus: 7198, signal 181030/203733 (executing program) 2025/08/29 13:33:37 fetching corpus: 7248, signal 181341/203738 (executing program) 2025/08/29 13:33:37 fetching corpus: 7298, signal 181605/203754 (executing program) 2025/08/29 13:33:37 fetching corpus: 7348, signal 181942/203790 (executing program) 2025/08/29 13:33:37 fetching corpus: 7398, signal 182208/203791 (executing program) 2025/08/29 13:33:37 fetching corpus: 7448, signal 182447/203804 (executing program) 2025/08/29 13:33:37 fetching corpus: 7498, signal 182767/203867 (executing program) 2025/08/29 13:33:37 fetching corpus: 7548, signal 183116/203871 (executing program) 2025/08/29 13:33:37 fetching corpus: 7598, signal 183575/203889 (executing program) 2025/08/29 13:33:37 fetching corpus: 7648, signal 183873/203893 (executing program) 2025/08/29 13:33:38 fetching corpus: 7698, signal 184234/203902 (executing program) 2025/08/29 13:33:38 fetching corpus: 7748, signal 184620/203908 (executing program) 2025/08/29 13:33:38 fetching corpus: 7798, signal 184809/203921 (executing program) 2025/08/29 13:33:38 fetching corpus: 7848, signal 185077/203928 (executing program) 2025/08/29 13:33:38 fetching corpus: 7898, signal 185445/203930 (executing program) 2025/08/29 13:33:38 fetching corpus: 7948, signal 185763/203951 (executing program) 2025/08/29 13:33:38 fetching corpus: 7998, signal 186051/203984 (executing program) 2025/08/29 13:33:38 fetching corpus: 8048, signal 186367/203992 (executing program) 2025/08/29 13:33:38 fetching corpus: 8098, signal 186636/203994 (executing program) 2025/08/29 13:33:39 fetching corpus: 8148, signal 187002/203996 (executing program) 2025/08/29 13:33:39 fetching corpus: 8198, signal 187325/203998 (executing program) 2025/08/29 13:33:39 fetching corpus: 8248, signal 187542/203998 (executing program) 2025/08/29 13:33:39 fetching corpus: 8298, signal 187905/204001 (executing program) 2025/08/29 13:33:39 fetching corpus: 8348, signal 188205/204003 (executing program) 2025/08/29 13:33:39 fetching corpus: 8398, signal 188468/204010 (executing program) 2025/08/29 13:33:39 fetching corpus: 8448, signal 188848/204074 (executing program) 2025/08/29 13:33:39 fetching corpus: 8498, signal 189103/204081 (executing program) 2025/08/29 13:33:39 fetching corpus: 8548, signal 189356/204083 (executing program) 2025/08/29 13:33:39 fetching corpus: 8598, signal 189690/204093 (executing program) 2025/08/29 13:33:39 fetching corpus: 8648, signal 189955/204098 (executing program) 2025/08/29 13:33:40 fetching corpus: 8698, signal 190233/204103 (executing program) 2025/08/29 13:33:40 fetching corpus: 8748, signal 190484/204119 (executing program) 2025/08/29 13:33:40 fetching corpus: 8798, signal 190682/204119 (executing program) 2025/08/29 13:33:40 fetching corpus: 8848, signal 191074/204119 (executing program) 2025/08/29 13:33:40 fetching corpus: 8898, signal 191257/204130 (executing program) 2025/08/29 13:33:40 fetching corpus: 8948, signal 191578/204130 (executing program) 2025/08/29 13:33:40 fetching corpus: 8998, signal 191794/204145 (executing program) 2025/08/29 13:33:40 fetching corpus: 9048, signal 192038/204162 (executing program) 2025/08/29 13:33:40 fetching corpus: 9098, signal 192348/204165 (executing program) 2025/08/29 13:33:40 fetching corpus: 9148, signal 192590/204171 (executing program) 2025/08/29 13:33:40 fetching corpus: 9198, signal 192847/204171 (executing program) 2025/08/29 13:33:40 fetching corpus: 9248, signal 192993/204178 (executing program) 2025/08/29 13:33:41 fetching corpus: 9298, signal 193280/204205 (executing program) 2025/08/29 13:33:41 fetching corpus: 9348, signal 193574/204226 (executing program) 2025/08/29 13:33:41 fetching corpus: 9398, signal 193884/204229 (executing program) 2025/08/29 13:33:41 fetching corpus: 9448, signal 194117/204232 (executing program) 2025/08/29 13:33:41 fetching corpus: 9498, signal 194332/204239 (executing program) 2025/08/29 13:33:41 fetching corpus: 9548, signal 194630/204249 (executing program) 2025/08/29 13:33:41 fetching corpus: 9598, signal 194802/204259 (executing program) 2025/08/29 13:33:41 fetching corpus: 9648, signal 195050/204274 (executing program) 2025/08/29 13:33:41 fetching corpus: 9698, signal 195437/204284 (executing program) 2025/08/29 13:33:41 fetching corpus: 9748, signal 195654/204288 (executing program) 2025/08/29 13:33:41 fetching corpus: 9798, signal 195881/204294 (executing program) 2025/08/29 13:33:42 fetching corpus: 9848, signal 196063/204311 (executing program) 2025/08/29 13:33:42 fetching corpus: 9898, signal 196214/204314 (executing program) 2025/08/29 13:33:42 fetching corpus: 9948, signal 196406/204330 (executing program) 2025/08/29 13:33:42 fetching corpus: 9998, signal 196659/204335 (executing program) 2025/08/29 13:33:42 fetching corpus: 10048, signal 196843/204336 (executing program) 2025/08/29 13:33:42 fetching corpus: 10098, signal 197065/204385 (executing program) 2025/08/29 13:33:42 fetching corpus: 10148, signal 197343/204400 (executing program) 2025/08/29 13:33:42 fetching corpus: 10198, signal 197566/204402 (executing program) 2025/08/29 13:33:42 fetching corpus: 10248, signal 197767/204426 (executing program) 2025/08/29 13:33:42 fetching corpus: 10298, signal 197966/204438 (executing program) 2025/08/29 13:33:42 fetching corpus: 10348, signal 198171/204439 (executing program) 2025/08/29 13:33:42 fetching corpus: 10398, signal 198460/204448 (executing program) 2025/08/29 13:33:43 fetching corpus: 10448, signal 198655/204452 (executing program) 2025/08/29 13:33:43 fetching corpus: 10498, signal 198882/204472 (executing program) 2025/08/29 13:33:43 fetching corpus: 10548, signal 199063/204477 (executing program) 2025/08/29 13:33:43 fetching corpus: 10598, signal 199236/204491 (executing program) 2025/08/29 13:33:43 fetching corpus: 10648, signal 199397/204493 (executing program) 2025/08/29 13:33:43 fetching corpus: 10698, signal 199643/204500 (executing program) 2025/08/29 13:33:43 fetching corpus: 10748, signal 199824/204520 (executing program) 2025/08/29 13:33:43 fetching corpus: 10798, signal 200015/204530 (executing program) 2025/08/29 13:33:43 fetching corpus: 10848, signal 200234/204537 (executing program) 2025/08/29 13:33:43 fetching corpus: 10865, signal 200346/204541 (executing program) 2025/08/29 13:33:43 fetching corpus: 10865, signal 200346/204541 (executing program) 2025/08/29 13:33:45 starting 8 fuzzer processes 13:33:45 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@target={'target ', {'PCI:', '0', ':', '10', ':', 'b', '.', '12'}}, 0x15) 13:33:45 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x6612, 0x0) 13:33:45 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x2, &(0x7f0000000680)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r0, 0x2, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) 13:33:45 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) connect(r0, &(0x7f0000000600)=@qipcrtr, 0x80) 13:33:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) add_key$keyring(&(0x7f0000000500), 0x0, 0x0, 0x0, 0xffffffffffffffff) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1) 13:33:45 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 13:33:45 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x28, 0x11, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x28}], 0x1}, 0x0) 13:33:46 executing program 6: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @redirect={0x5, 0x0, 0x0, @rand_addr, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1=0xe0000010, @broadcast=0x20020000, {[@generic={0x0, 0x9, "71b59d6f7e66dc"}]}}}}}}}, 0x0) [ 82.981842] audit: type=1400 audit(1756474426.031:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 84.163725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.168658] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.172575] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.177822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.183778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.242128] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.247628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.249207] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.251221] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.268754] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.271573] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.277784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.283525] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.285436] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.290045] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.291928] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.293663] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.294618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.294912] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.297527] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.302545] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.307038] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.308936] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.311004] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.312500] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.314739] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.321579] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.328542] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.331122] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.335571] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.339854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.342702] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.344716] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.346612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.351387] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.352514] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.356154] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.358141] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.374758] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.381180] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.256911] Bluetooth: hci0: command tx timeout [ 86.384403] Bluetooth: hci4: command tx timeout [ 86.385156] Bluetooth: hci6: command tx timeout [ 86.386397] Bluetooth: hci7: command tx timeout [ 86.386844] Bluetooth: hci2: command tx timeout [ 86.387540] Bluetooth: hci1: command tx timeout [ 86.448808] Bluetooth: hci5: command tx timeout [ 86.449616] Bluetooth: hci3: command tx timeout [ 88.306453] Bluetooth: hci0: command tx timeout [ 88.432322] Bluetooth: hci6: command tx timeout [ 88.432804] Bluetooth: hci2: command tx timeout [ 88.433378] Bluetooth: hci1: command tx timeout [ 88.433821] Bluetooth: hci7: command tx timeout [ 88.434208] Bluetooth: hci4: command tx timeout [ 88.497341] Bluetooth: hci3: command tx timeout [ 88.497738] Bluetooth: hci5: command tx timeout [ 90.353282] Bluetooth: hci0: command tx timeout [ 90.480346] Bluetooth: hci2: command tx timeout [ 90.481383] Bluetooth: hci4: command tx timeout [ 90.481770] Bluetooth: hci7: command tx timeout [ 90.482155] Bluetooth: hci1: command tx timeout [ 90.483282] Bluetooth: hci6: command tx timeout [ 90.545439] Bluetooth: hci5: command tx timeout [ 90.545865] Bluetooth: hci3: command tx timeout [ 92.400293] Bluetooth: hci0: command tx timeout [ 92.528458] Bluetooth: hci6: command tx timeout [ 92.528876] Bluetooth: hci1: command tx timeout [ 92.529862] Bluetooth: hci7: command tx timeout [ 92.530282] Bluetooth: hci4: command tx timeout [ 92.530305] Bluetooth: hci2: command tx timeout [ 92.593339] Bluetooth: hci3: command tx timeout [ 92.593730] Bluetooth: hci5: command tx timeout [ 119.668505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.669172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.844276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.844898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.942315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.942945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.039741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.040418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.103985] audit: type=1400 audit(1756474463.153:8): avc: denied { open } for pid=3864 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 120.104026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.105826] audit: type=1400 audit(1756474463.153:9): avc: denied { kernel } for pid=3864 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 120.106189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:34:23 executing program 5: r0 = inotify_init() ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0) [ 120.152556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.153128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:34:23 executing program 5: unlink(&(0x7f00000005c0)='.\x00') [ 120.211853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.212548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:34:23 executing program 5: unlink(&(0x7f00000005c0)='.\x00') 13:34:23 executing program 5: unlink(&(0x7f00000005c0)='.\x00') [ 120.279656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.280281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:34:23 executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/packet\x00') pread64(r0, &(0x7f0000000200)=""/193, 0xc1, 0x3) 13:34:23 executing program 5: unlink(&(0x7f00000005c0)='.\x00') 13:34:23 executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/packet\x00') pread64(r0, &(0x7f0000000200)=""/193, 0xc1, 0x3) 13:34:23 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$VT_ACTIVATE(r0, 0x2282, 0x4000000000000) [ 120.362304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.362879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.371010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.371598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.432778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.433417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.463973] sit: Dst spoofed 172.30.0.7/4800::e000:10 -> 172.20.20.0/2002:0:9:71b5:9d6f:7e66:dc00:0 [ 120.465262] sit: Dst spoofed 172.30.0.7/4800::e000:10 -> 172.20.20.0/2002:0:9:71b5:9d6f:7e66:dc00:0 [ 120.525789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.526852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.558568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.559168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.585394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.585962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.600667] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.610150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.610762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.627461] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.709864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.710526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.832093] sg_read: process 3 (syz-executor.3) changed security contexts after opening file descriptor, this is not allowed. 13:34:23 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f00000018c0)=[{{&(0x7f0000000100)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000001540)=[{0x10, 0x1, 0x51}], 0x10}}], 0x1, 0x0) 13:34:23 executing program 6: r0 = memfd_secret(0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0) 13:34:23 executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/packet\x00') pread64(r0, &(0x7f0000000200)=""/193, 0xc1, 0x3) 13:34:23 executing program 5: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "8ae1e07eb76f2a4da3e75bf14b03c334e02c72f4549360af", "6f8eca71677ef9e39481f43f50c1116c85d32e0e1b6d5de204b161f6c28a531b"}}}}}}, 0x0) 13:34:23 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 13:34:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="280000002500010000000000000000000c00000002"], 0x28}], 0x1}, 0x0) 13:34:23 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}) fcntl$lock(r0, 0x25, &(0x7f0000000240)={0x1, 0x0, 0x9}) 13:34:23 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x6612, 0x0) [ 120.935783] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.941393] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.957967] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.979401] Oops: general protection fault, probably for non-canonical address 0xe3fffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 120.980320] KASAN: maybe wild-memory-access in range [0x2000000000000190-0x2000000000000197] [ 120.980752] kmemleak: Found object by alias at 0x607f1a639124 [ 120.980774] CPU: 1 UID: 0 PID: 3916 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 120.980797] Tainted: [W]=WARN [ 120.980803] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 120.980813] Call Trace: [ 120.980819] [ 120.980825] dump_stack_lvl+0xca/0x120 [ 120.980857] __lookup_object+0x94/0xb0 [ 120.980874] delete_object_full+0x27/0x70 [ 120.980889] free_percpu+0x30/0x1160 [ 120.980906] ? arch_uprobe_clear_state+0x16/0x140 [ 120.980924] futex_hash_free+0x38/0xc0 [ 120.980938] mmput+0x2d3/0x390 [ 120.980955] do_exit+0x79d/0x2970 [ 120.980968] ? lock_release+0xc8/0x290 [ 120.980984] ? __pfx_do_exit+0x10/0x10 [ 120.980997] ? find_held_lock+0x2b/0x80 [ 120.981014] ? get_signal+0x835/0x2340 [ 120.981039] do_group_exit+0xd3/0x2a0 [ 120.981053] get_signal+0x2315/0x2340 [ 120.981075] ? __pfx_get_signal+0x10/0x10 [ 120.981093] ? do_futex+0x135/0x370 [ 120.981107] ? __pfx_do_futex+0x10/0x10 [ 120.981120] arch_do_signal_or_restart+0x80/0x790 [ 120.981137] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 120.981153] ? __x64_sys_futex+0x1c9/0x4d0 [ 120.981165] ? __x64_sys_futex+0x1d2/0x4d0 [ 120.981177] ? __sys_socket+0x9f/0x260 [ 120.981191] ? __pfx___x64_sys_futex+0x10/0x10 [ 120.981204] ? xfd_validate_state+0x55/0x180 [ 120.981223] exit_to_user_mode_loop+0x8b/0x110 [ 120.981235] do_syscall_64+0x2f7/0x360 [ 120.981247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.981259] RIP: 0033:0x7f946355bb19 [ 120.981268] Code: Unable to access opcode bytes at 0x7f946355baef. [ 120.981273] RSP: 002b:00007f9460ad1218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.981285] RAX: fffffffffffffe00 RBX: 00007f946366ef68 RCX: 00007f946355bb19 [ 120.981292] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f946366ef68 [ 120.981300] RBP: 00007f946366ef60 R08: 0000000000000000 R09: 0000000000000000 [ 120.981307] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f946366ef6c [ 120.981313] R13: 00007ffffc6b069f R14: 00007f9460ad1300 R15: 0000000000022000 [ 120.981326] [ 120.981330] kmemleak: Object (percpu) 0x607f1a639120 (size 8): [ 120.981336] kmemleak: comm "syz-executor.1", pid 3927, jiffies 4294787551 [ 120.981343] kmemleak: min_count = 1 [ 120.981347] kmemleak: count = 0 [ 120.981351] kmemleak: flags = 0x21 [ 120.981355] kmemleak: checksum = 0 [ 120.981358] kmemleak: backtrace: [ 120.981362] pcpu_alloc_noprof+0x87a/0x1170 [ 120.981376] perf_trace_event_init+0x366/0xa10 [ 120.981390] perf_trace_init+0x1a4/0x2f0 [ 120.981401] perf_tp_event_init+0xa6/0x120 [ 120.981416] perf_try_init_event+0x140/0x9f0 [ 120.981429] perf_event_alloc.part.0+0x118e/0x45f0 [ 120.981445] __do_sys_perf_event_open+0x719/0x2c20 [ 120.981458] do_syscall_64+0xbf/0x360 [ 120.981466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.007538] CPU: 0 UID: 0 PID: 3927 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 121.008475] Tainted: [W]=WARN [ 121.008728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 121.009381] RIP: 0010:perf_tp_event+0x175/0xe70 [ 121.009768] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 121.011217] RSP: 0018:ffff88800f74f800 EFLAGS: 00010212 [ 121.011641] RAX: 0400000000000032 RBX: 1fffffffffffffa0 RCX: ffffc90001bf7000 [ 121.012203] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 2000000000000190 [ 121.012770] RBP: ffff88800f74fa70 R08: ffff88806ce31340 R09: ffffe8ffffc16120 [ 121.013337] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 121.013900] R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 [ 121.014469] FS: 00007f2115c7c700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 121.015104] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.015566] CR2: 00007f211881a018 CR3: 000000000de72000 CR4: 0000000000350ef0 [ 121.016135] Call Trace: [ 121.016352] [ 121.016535] ? perf_swevent_event+0x63/0x3f0 [ 121.016899] ? __pfx_perf_tp_event+0x10/0x10 [ 121.017263] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 121.017666] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 121.018064] ? perf_swevent_event+0x63/0x3f0 [ 121.018432] ? perf_tp_event+0x807/0xe70 [ 121.018765] ? __pfx_perf_tp_event+0x10/0x10 [ 121.019127] ? __perf_install_in_context+0x503/0xb90 [ 121.019536] ? do_raw_spin_unlock+0x53/0x220 [ 121.019900] ? perf_trace_run_bpf_submit+0xef/0x180 [ 121.020307] perf_trace_run_bpf_submit+0xef/0x180 [ 121.020697] perf_trace_lock+0x337/0x5d0 [ 121.021032] ? __pfx_perf_trace_lock+0x10/0x10 [ 121.021405] ? lock_acquire+0x15e/0x2f0 [ 121.021726] ? futex_ref_get+0x48/0x300 [ 121.022044] ? futex_ref_get+0x114/0x300 [ 121.022379] ? futex_hash+0x15c/0x390 [ 121.022686] lock_release+0x1ab/0x290 [ 121.022995] ? futex_hash+0x15c/0x390 [ 121.023310] futex_ref_get+0x119/0x300 [ 121.023623] ? futex_hash+0x15c/0x390 [ 121.023928] futex_hash+0x70/0x390 [ 121.024219] futex_wake+0x143/0x540 [ 121.024521] ? __pfx_perf_trace_lock+0x10/0x10 [ 121.024892] ? __pfx_futex_wake+0x10/0x10 [ 121.025234] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 121.025641] ? lock_release+0xc8/0x290 [ 121.025957] do_futex+0x26d/0x370 [ 121.026248] ? __pfx_do_futex+0x10/0x10 [ 121.026579] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 121.027004] ? find_held_lock+0x2b/0x80 [ 121.027337] __x64_sys_futex+0x1c9/0x4d0 [ 121.027667] ? __pfx___x64_sys_futex+0x10/0x10 [ 121.028037] ? xfd_validate_state+0x55/0x180 [ 121.028406] do_syscall_64+0xbf/0x360 [ 121.028716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.029128] RIP: 0033:0x7f2118706b19 [ 121.029429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.030862] RSP: 002b:00007f2115c7c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.031469] RAX: ffffffffffffffda RBX: 00007f2118819f68 RCX: 00007f2118706b19 [ 121.032032] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2118819f6c [ 121.032595] RBP: 00007f2118819f60 R08: 000000000000000e R09: 0000000000000000 [ 121.033159] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f2118819f6c [ 121.033721] R13: 00007ffd2204efdf R14: 00007f2115c7c300 R15: 0000000000022000 [ 121.034299] [ 121.034488] Modules linked in: [ 121.034789] Oops: general protection fault, probably for non-canonical address 0xe3fffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 121.035683] KASAN: maybe wild-memory-access in range [0x2000000000000190-0x2000000000000197] [ 121.036361] CPU: 0 UID: 0 PID: 3927 Comm: syz-executor.1 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 121.037312] Tainted: [D]=DIE, [W]=WARN [ 121.037621] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 121.038286] RIP: 0010:perf_tp_event+0x175/0xe70 [ 121.038670] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 121.040112] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012 [ 121.040540] RAX: 0400000000000032 RBX: 1fffffffffffffa0 RCX: ffffffff81898973 [ 121.041109] RDX: ffff888045c0d280 RSI: ffffffff818995b7 RDI: 2000000000000190 [ 121.041685] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc16120 [ 121.042268] R10: 0000000000000000 R11: ffff88806ce37018 R12: dffffc0000000000 [ 121.042840] R13: 0000000000000000 R14: ffff88806ce31490 R15: dffffc0000000000 [ 121.043410] FS: 00007f2115c7c700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 121.044048] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.044519] CR2: 00007f211881a018 CR3: 000000000de72000 CR4: 0000000000350ef0 [ 121.045095] Call Trace: [ 121.045306] [ 121.045486] ? kasan_record_aux_stack+0x89/0xa0 [ 121.045865] ? task_work_add+0x23f/0x340 [ 121.046200] ? sched_tick+0x21b/0x6c0 [ 121.046537] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 121.046974] ? __pfx_perf_tp_event+0x10/0x10 [ 121.047339] ? __x64_sys_openat+0x142/0x200 [ 121.047692] ? perf_trace_lock+0xb5/0x5d0 [ 121.048033] ? trace_softirq_raise+0xbe/0x100 [ 121.048416] ? perf_trace_lock+0xb5/0x5d0 [ 121.048754] ? __pfx_perf_trace_lock+0x10/0x10 [ 121.049132] ? kvm_sched_clock_read+0x16/0x30 [ 121.049503] ? sched_clock+0x37/0x60 [ 121.049816] ? __pfx___resched_curr+0x10/0x10 [ 121.050194] ? perf_trace_run_bpf_submit+0xef/0x180 [ 121.050610] perf_trace_run_bpf_submit+0xef/0x180 [ 121.051009] perf_trace_lock+0x337/0x5d0 [ 121.051344] ? update_cfs_group+0x11d/0x260 [ 121.051698] ? __pfx_perf_trace_lock+0x10/0x10 [ 121.052069] ? check_preempt_wakeup_fair+0x6e/0x950 [ 121.052480] ? sched_ttwu_pending+0x2e0/0x4a0 [ 121.052853] lock_release+0x1ab/0x290 [ 121.053167] ? ttwu_do_activate+0x1a4/0x8a0 [ 121.053537] _raw_spin_unlock+0x16/0x40 [ 121.053865] sched_ttwu_pending+0x2e0/0x4a0 [ 121.054226] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 121.054627] ? flush_tlb_func+0x24d/0x560 [ 121.054972] __flush_smp_call_function_queue+0x434/0x740 [ 121.055419] __sysvec_call_function_single+0x6d/0x370 [ 121.055845] sysvec_call_function_single+0xa1/0xc0 [ 121.056249] [ 121.056433] [ 121.056618] asm_sysvec_call_function_single+0x1a/0x20 [ 121.057047] RIP: 0010:oops_exit+0x0/0x50 [ 121.057388] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27 [ 121.058883] RSP: 0018:ffff88800f74f690 EFLAGS: 00000202 [ 121.059317] RAX: 0000000000035021 RBX: 0000000000000212 RCX: ffffc90001bf7000 [ 121.059886] RDX: 0000000000040000 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 121.060456] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90 [ 121.061027] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f74f758 [ 121.061599] R13: 0000000000000000 R14: e3fffc0000000032 R15: 0000000000000000 [ 121.062173] ? oops_end+0x4a/0xe0 [ 121.062476] oops_end+0x65/0xe0 [ 121.062751] exc_general_protection+0x1a2/0x330 [ 121.063136] asm_exc_general_protection+0x26/0x30 [ 121.063528] RIP: 0010:perf_tp_event+0x175/0xe70 [ 121.063905] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 121.065348] RSP: 0018:ffff88800f74f800 EFLAGS: 00010212 [ 121.065777] RAX: 0400000000000032 RBX: 1fffffffffffffa0 RCX: ffffc90001bf7000 [ 121.066356] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 2000000000000190 [ 121.066929] RBP: ffff88800f74fa70 R08: ffff88806ce31340 R09: ffffe8ffffc16120 [ 121.067499] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 121.068072] R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 [ 121.068648] ? perf_tp_event+0x167/0xe70 [ 121.068983] ? perf_swevent_event+0x63/0x3f0 [ 121.069351] ? __pfx_perf_tp_event+0x10/0x10 [ 121.069718] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 121.070124] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 121.070542] ? perf_swevent_event+0x63/0x3f0 [ 121.070906] ? perf_tp_event+0x807/0xe70 [ 121.071241] ? __pfx_perf_tp_event+0x10/0x10 [ 121.071601] ? __perf_install_in_context+0x503/0xb90 [ 121.072013] ? do_raw_spin_unlock+0x53/0x220 [ 121.072379] ? perf_trace_run_bpf_submit+0xef/0x180 [ 121.072784] perf_trace_run_bpf_submit+0xef/0x180 [ 121.073185] perf_trace_lock+0x337/0x5d0 [ 121.073521] ? __pfx_perf_trace_lock+0x10/0x10 [ 121.073898] ? lock_acquire+0x15e/0x2f0 [ 121.074220] ? futex_ref_get+0x48/0x300 [ 121.074552] ? futex_ref_get+0x114/0x300 [ 121.074880] ? futex_hash+0x15c/0x390 [ 121.075190] lock_release+0x1ab/0x290 [ 121.075502] ? futex_hash+0x15c/0x390 [ 121.075807] futex_ref_get+0x119/0x300 [ 121.076123] ? futex_hash+0x15c/0x390 [ 121.076437] futex_hash+0x70/0x390 [ 121.076730] futex_wake+0x143/0x540 [ 121.077031] ? __pfx_perf_trace_lock+0x10/0x10 [ 121.077407] ? __pfx_futex_wake+0x10/0x10 [ 121.077750] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 121.078160] ? lock_release+0xc8/0x290 [ 121.078493] do_futex+0x26d/0x370 [ 121.078780] ? __pfx_do_futex+0x10/0x10 [ 121.079102] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 121.079531] ? find_held_lock+0x2b/0x80 [ 121.079866] __x64_sys_futex+0x1c9/0x4d0 [ 121.080200] ? __pfx___x64_sys_futex+0x10/0x10 [ 121.080575] ? xfd_validate_state+0x55/0x180 [ 121.080942] do_syscall_64+0xbf/0x360 [ 121.081252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.081671] RIP: 0033:0x7f2118706b19 [ 121.081974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.083428] RSP: 002b:00007f2115c7c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.084042] RAX: ffffffffffffffda RBX: 00007f2118819f68 RCX: 00007f2118706b19 [ 121.084612] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2118819f6c [ 121.085183] RBP: 00007f2118819f60 R08: 000000000000000e R09: 0000000000000000 [ 121.085750] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f2118819f6c [ 121.086333] R13: 00007ffd2204efdf R14: 00007f2115c7c300 R15: 0000000000022000 [ 121.086914] [ 121.087108] Modules linked in: [ 121.087372] ---[ end trace 0000000000000000 ]--- [ 121.087750] RIP: 0010:perf_tp_event+0x175/0xe70 [ 121.088133] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 121.089594] RSP: 0018:ffff88800f74f800 EFLAGS: 00010212 [ 121.090017] RAX: 0400000000000032 RBX: 1fffffffffffffa0 RCX: ffffc90001bf7000 [ 121.090600] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 2000000000000190 [ 121.091176] RBP: ffff88800f74fa70 R08: ffff88806ce31340 R09: ffffe8ffffc16120 [ 121.091744] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 121.092311] R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 [ 121.092874] FS: 00007f2115c7c700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 121.093517] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.093987] CR2: 00007f211881a018 CR3: 000000000de72000 CR4: 0000000000350ef0 [ 121.094568] Kernel panic - not syncing: Fatal exception in interrupt [ 122.137081] Shutting down cpus with NMI [ 122.137670] Kernel Offset: disabled [ 122.137961] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 13:34:24 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff88800f74f1f0 R8 =0000000000000000 R9 =ffffed1001653046 R10=0000000000000020 R11=6572617764726148 R12=0000000000000020 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2115c7c700 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f211881a018 CR3=000000000de72000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f21187ed7c000007f21187ed7c8 XMM02=00007f21187ed7e000007f21187ed7c0 XMM03=00007f21187ed7c800007f21187ed7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000000000fd RBX=ffff88806ce201b4 RCX=0000000000000830 RDX=0000000000000000 RSI=00000000000000fd RDI=ffffffff85851c60 RBP=0000000000000000 RSP=ffff88806cf08a78 R8 =0000000000000000 R9 =fffffbfff0c8758a R10=ffffffff8643ac57 R11=0000000000000000 R12=1ffff1100d9e1153 R13=ffff88806cf08ab8 R14=0000000000000003 R15=0000000000000008 RIP=ffffffff8133a2bd RFL=00000056 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555ef52400 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe0e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffffc6aeff8 CR3=0000000039699000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000ff000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000