Warning: Permanently added '[localhost]:11410' (ECDSA) to the list of known hosts. 2025/09/01 10:25:06 fuzzer started 2025/09/01 10:25:07 dialing manager at localhost:35473 syzkaller login: [ 51.605607] cgroup: Unknown subsys name 'net' [ 51.812988] cgroup: Unknown subsys name 'cpuset' [ 51.840126] cgroup: Unknown subsys name 'rlimit' 2025/09/01 10:25:17 syscalls: 2214 2025/09/01 10:25:17 code coverage: enabled 2025/09/01 10:25:17 comparison tracing: enabled 2025/09/01 10:25:17 extra coverage: enabled 2025/09/01 10:25:17 setuid sandbox: enabled 2025/09/01 10:25:17 namespace sandbox: enabled 2025/09/01 10:25:17 Android sandbox: enabled 2025/09/01 10:25:17 fault injection: enabled 2025/09/01 10:25:17 leak checking: enabled 2025/09/01 10:25:17 net packet injection: enabled 2025/09/01 10:25:17 net device setup: enabled 2025/09/01 10:25:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 10:25:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 10:25:17 USB emulation: enabled 2025/09/01 10:25:17 hci packet injection: enabled 2025/09/01 10:25:17 wifi device emulation: enabled 2025/09/01 10:25:17 802.15.4 emulation: enabled 2025/09/01 10:25:17 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 10:25:17 fetching corpus: 50, signal 25393/28823 (executing program) 2025/09/01 10:25:17 fetching corpus: 100, signal 34137/38963 (executing program) 2025/09/01 10:25:17 fetching corpus: 150, signal 41627/47739 (executing program) 2025/09/01 10:25:17 fetching corpus: 200, signal 47251/54573 (executing program) 2025/09/01 10:25:18 fetching corpus: 250, signal 52449/60853 (executing program) 2025/09/01 10:25:18 fetching corpus: 300, signal 57310/66691 (executing program) 2025/09/01 10:25:18 fetching corpus: 350, signal 61240/71557 (executing program) 2025/09/01 10:25:18 fetching corpus: 400, signal 64323/75637 (executing program) 2025/09/01 10:25:18 fetching corpus: 450, signal 69263/81291 (executing program) 2025/09/01 10:25:18 fetching corpus: 500, signal 72560/85414 (executing program) 2025/09/01 10:25:18 fetching corpus: 550, signal 76108/89621 (executing program) 2025/09/01 10:25:18 fetching corpus: 600, signal 78497/92764 (executing program) 2025/09/01 10:25:18 fetching corpus: 650, signal 81038/95988 (executing program) 2025/09/01 10:25:18 fetching corpus: 700, signal 83303/98958 (executing program) 2025/09/01 10:25:19 fetching corpus: 750, signal 85172/101557 (executing program) 2025/09/01 10:25:19 fetching corpus: 800, signal 87600/104500 (executing program) 2025/09/01 10:25:19 fetching corpus: 850, signal 89385/106877 (executing program) 2025/09/01 10:25:19 fetching corpus: 900, signal 91425/109482 (executing program) 2025/09/01 10:25:19 fetching corpus: 950, signal 94740/112962 (executing program) 2025/09/01 10:25:19 fetching corpus: 1000, signal 95876/114768 (executing program) 2025/09/01 10:25:19 fetching corpus: 1050, signal 98439/117593 (executing program) 2025/09/01 10:25:19 fetching corpus: 1100, signal 100022/119644 (executing program) 2025/09/01 10:25:19 fetching corpus: 1150, signal 102689/122411 (executing program) 2025/09/01 10:25:19 fetching corpus: 1200, signal 104251/124376 (executing program) 2025/09/01 10:25:20 fetching corpus: 1250, signal 106192/126521 (executing program) 2025/09/01 10:25:20 fetching corpus: 1300, signal 107916/128572 (executing program) 2025/09/01 10:25:20 fetching corpus: 1350, signal 109592/130455 (executing program) 2025/09/01 10:25:20 fetching corpus: 1400, signal 110883/132084 (executing program) 2025/09/01 10:25:20 fetching corpus: 1450, signal 111858/133475 (executing program) 2025/09/01 10:25:20 fetching corpus: 1500, signal 112910/134867 (executing program) 2025/09/01 10:25:20 fetching corpus: 1550, signal 114432/136535 (executing program) 2025/09/01 10:25:20 fetching corpus: 1600, signal 115183/137696 (executing program) 2025/09/01 10:25:20 fetching corpus: 1650, signal 116358/139086 (executing program) 2025/09/01 10:25:21 fetching corpus: 1700, signal 117743/140585 (executing program) 2025/09/01 10:25:21 fetching corpus: 1750, signal 118711/141853 (executing program) 2025/09/01 10:25:21 fetching corpus: 1800, signal 119420/142908 (executing program) 2025/09/01 10:25:21 fetching corpus: 1850, signal 120071/143918 (executing program) 2025/09/01 10:25:21 fetching corpus: 1900, signal 121105/145096 (executing program) 2025/09/01 10:25:21 fetching corpus: 1950, signal 121999/146202 (executing program) 2025/09/01 10:25:21 fetching corpus: 2000, signal 123050/147362 (executing program) 2025/09/01 10:25:21 fetching corpus: 2050, signal 123981/148405 (executing program) 2025/09/01 10:25:21 fetching corpus: 2100, signal 124568/149270 (executing program) 2025/09/01 10:25:21 fetching corpus: 2150, signal 125460/150254 (executing program) 2025/09/01 10:25:21 fetching corpus: 2200, signal 126590/151394 (executing program) 2025/09/01 10:25:22 fetching corpus: 2250, signal 127038/152158 (executing program) 2025/09/01 10:25:22 fetching corpus: 2300, signal 127799/153091 (executing program) 2025/09/01 10:25:22 fetching corpus: 2350, signal 128515/153946 (executing program) 2025/09/01 10:25:22 fetching corpus: 2400, signal 129199/154783 (executing program) 2025/09/01 10:25:22 fetching corpus: 2450, signal 129861/155595 (executing program) 2025/09/01 10:25:22 fetching corpus: 2500, signal 130835/156518 (executing program) 2025/09/01 10:25:22 fetching corpus: 2550, signal 131775/157419 (executing program) 2025/09/01 10:25:22 fetching corpus: 2600, signal 132898/158337 (executing program) 2025/09/01 10:25:22 fetching corpus: 2650, signal 133587/159059 (executing program) 2025/09/01 10:25:22 fetching corpus: 2700, signal 134573/159924 (executing program) 2025/09/01 10:25:23 fetching corpus: 2750, signal 135204/160611 (executing program) 2025/09/01 10:25:23 fetching corpus: 2800, signal 137368/161831 (executing program) 2025/09/01 10:25:23 fetching corpus: 2850, signal 138674/162784 (executing program) 2025/09/01 10:25:24 fetching corpus: 2900, signal 139404/163419 (executing program) 2025/09/01 10:25:24 fetching corpus: 2950, signal 140332/164169 (executing program) 2025/09/01 10:25:24 fetching corpus: 3000, signal 140942/164741 (executing program) 2025/09/01 10:25:24 fetching corpus: 3050, signal 141718/165359 (executing program) 2025/09/01 10:25:24 fetching corpus: 3100, signal 142721/166049 (executing program) 2025/09/01 10:25:24 fetching corpus: 3150, signal 143284/166558 (executing program) 2025/09/01 10:25:24 fetching corpus: 3200, signal 143829/167053 (executing program) 2025/09/01 10:25:24 fetching corpus: 3250, signal 144481/167570 (executing program) 2025/09/01 10:25:24 fetching corpus: 3300, signal 144852/167988 (executing program) 2025/09/01 10:25:24 fetching corpus: 3350, signal 145508/168537 (executing program) 2025/09/01 10:25:24 fetching corpus: 3400, signal 146160/169010 (executing program) 2025/09/01 10:25:25 fetching corpus: 3450, signal 146682/169446 (executing program) 2025/09/01 10:25:25 fetching corpus: 3500, signal 147282/169854 (executing program) 2025/09/01 10:25:25 fetching corpus: 3550, signal 147995/170309 (executing program) 2025/09/01 10:25:25 fetching corpus: 3600, signal 148454/170694 (executing program) 2025/09/01 10:25:25 fetching corpus: 3650, signal 148798/171101 (executing program) 2025/09/01 10:25:25 fetching corpus: 3700, signal 149232/171468 (executing program) 2025/09/01 10:25:25 fetching corpus: 3750, signal 149699/171856 (executing program) 2025/09/01 10:25:25 fetching corpus: 3800, signal 150255/172216 (executing program) 2025/09/01 10:25:25 fetching corpus: 3850, signal 150808/172562 (executing program) 2025/09/01 10:25:25 fetching corpus: 3900, signal 151085/172898 (executing program) 2025/09/01 10:25:26 fetching corpus: 3950, signal 151755/173221 (executing program) 2025/09/01 10:25:26 fetching corpus: 4000, signal 152405/173551 (executing program) 2025/09/01 10:25:26 fetching corpus: 4050, signal 152884/173855 (executing program) 2025/09/01 10:25:26 fetching corpus: 4100, signal 153490/174192 (executing program) 2025/09/01 10:25:26 fetching corpus: 4150, signal 153781/174434 (executing program) 2025/09/01 10:25:26 fetching corpus: 4200, signal 154550/174715 (executing program) 2025/09/01 10:25:26 fetching corpus: 4250, signal 155052/174978 (executing program) 2025/09/01 10:25:26 fetching corpus: 4300, signal 155474/174996 (executing program) 2025/09/01 10:25:26 fetching corpus: 4350, signal 155830/175007 (executing program) 2025/09/01 10:25:26 fetching corpus: 4400, signal 156105/175035 (executing program) 2025/09/01 10:25:27 fetching corpus: 4450, signal 156566/175040 (executing program) 2025/09/01 10:25:27 fetching corpus: 4500, signal 157300/175044 (executing program) 2025/09/01 10:25:27 fetching corpus: 4550, signal 157832/175052 (executing program) 2025/09/01 10:25:27 fetching corpus: 4600, signal 158243/175084 (executing program) 2025/09/01 10:25:27 fetching corpus: 4650, signal 159081/175092 (executing program) 2025/09/01 10:25:27 fetching corpus: 4700, signal 159649/175105 (executing program) 2025/09/01 10:25:27 fetching corpus: 4750, signal 159922/175118 (executing program) 2025/09/01 10:25:27 fetching corpus: 4800, signal 160390/175125 (executing program) 2025/09/01 10:25:27 fetching corpus: 4850, signal 160733/175129 (executing program) 2025/09/01 10:25:27 fetching corpus: 4900, signal 161152/175135 (executing program) 2025/09/01 10:25:27 fetching corpus: 4950, signal 161553/175144 (executing program) 2025/09/01 10:25:28 fetching corpus: 5000, signal 162274/175167 (executing program) 2025/09/01 10:25:28 fetching corpus: 5050, signal 162692/175217 (executing program) 2025/09/01 10:25:28 fetching corpus: 5100, signal 163193/175300 (executing program) 2025/09/01 10:25:28 fetching corpus: 5150, signal 163565/175304 (executing program) 2025/09/01 10:25:28 fetching corpus: 5200, signal 164006/175305 (executing program) 2025/09/01 10:25:28 fetching corpus: 5250, signal 164402/175307 (executing program) 2025/09/01 10:25:28 fetching corpus: 5300, signal 164761/175332 (executing program) 2025/09/01 10:25:28 fetching corpus: 5350, signal 165185/175340 (executing program) 2025/09/01 10:25:28 fetching corpus: 5400, signal 165491/175343 (executing program) 2025/09/01 10:25:28 fetching corpus: 5450, signal 165899/175347 (executing program) 2025/09/01 10:25:28 fetching corpus: 5500, signal 166438/175351 (executing program) 2025/09/01 10:25:29 fetching corpus: 5550, signal 166758/175362 (executing program) 2025/09/01 10:25:29 fetching corpus: 5600, signal 167052/175390 (executing program) 2025/09/01 10:25:29 fetching corpus: 5650, signal 167435/175427 (executing program) 2025/09/01 10:25:29 fetching corpus: 5700, signal 167632/175438 (executing program) 2025/09/01 10:25:29 fetching corpus: 5750, signal 168133/175443 (executing program) 2025/09/01 10:25:29 fetching corpus: 5800, signal 168410/175446 (executing program) 2025/09/01 10:25:29 fetching corpus: 5850, signal 168934/175452 (executing program) 2025/09/01 10:25:29 fetching corpus: 5900, signal 169321/175476 (executing program) 2025/09/01 10:25:29 fetching corpus: 5950, signal 169755/175521 (executing program) 2025/09/01 10:25:29 fetching corpus: 6000, signal 170105/175524 (executing program) 2025/09/01 10:25:29 fetching corpus: 6050, signal 170404/175530 (executing program) 2025/09/01 10:25:30 fetching corpus: 6100, signal 170734/175620 (executing program) 2025/09/01 10:25:30 fetching corpus: 6150, signal 170986/175631 (executing program) 2025/09/01 10:25:30 fetching corpus: 6200, signal 171508/175680 (executing program) 2025/09/01 10:25:30 fetching corpus: 6250, signal 171859/175689 (executing program) 2025/09/01 10:25:30 fetching corpus: 6300, signal 172190/175690 (executing program) 2025/09/01 10:25:30 fetching corpus: 6350, signal 172521/175693 (executing program) 2025/09/01 10:25:30 fetching corpus: 6394, signal 172783/175705 (executing program) 2025/09/01 10:25:30 fetching corpus: 6394, signal 172783/175705 (executing program) 2025/09/01 10:25:32 starting 8 fuzzer processes 10:25:32 executing program 0: setitimer(0x0, 0x0, 0xfffffffffffffffe) 10:25:32 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADAUDIO(r0, 0x5396, &(0x7f0000000180)={@lba, 0x0, 0x0, 0x0}) 10:25:32 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r1, 0x0) keyctl$revoke(0x3, r1) 10:25:33 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000040)) [ 77.063473] audit: type=1400 audit(1756722333.085:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:25:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0xc9eb, 0x4) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@nfc={0x27, 0x2}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e5", 0x1}], 0x1}}], 0x1, 0x0) 10:25:33 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(&(0x7f0000002980), &(0x7f00000029c0)={'fscrypt:', @desc2}, &(0x7f0000002a00)={0x0, "b2cc144d103542ba6d542373ff1435970ee5d830eb735a252e47dbfbfd3609bbe534e11d59415c046713be902185207bca37fd0abff17c9834fc55c44e1420b2"}, 0x48, 0xfffffffffffffffd) getpgid(0xffffffffffffffff) 10:25:33 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/192) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f00000000c0)) 10:25:33 executing program 6: set_mempolicy(0x6, &(0x7f0000000040)=0x7, 0x5db) syz_open_dev$tty20(0xc, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}) [ 78.264384] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.267057] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.269040] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.272767] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.275488] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.381667] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.391364] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.396107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.415809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.420023] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.431303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.444961] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.454320] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.467697] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.477388] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.560945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.563078] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.567098] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.569747] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.581484] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.584185] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.586199] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.591521] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.593626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.599156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.602933] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 78.614955] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 78.617226] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 78.636974] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 78.638654] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 78.650740] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 78.663138] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 78.671873] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 78.673436] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 78.683262] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 78.695476] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 78.697410] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 78.718180] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 78.718384] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 78.729215] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 80.296018] Bluetooth: hci0: command tx timeout [ 80.551783] Bluetooth: hci2: command tx timeout [ 80.553023] Bluetooth: hci1: command tx timeout [ 80.679747] Bluetooth: hci3: command tx timeout [ 80.743648] Bluetooth: hci5: command tx timeout [ 80.744802] Bluetooth: hci4: command tx timeout [ 80.807589] Bluetooth: hci6: command tx timeout [ 80.871096] Bluetooth: hci7: command tx timeout [ 82.342777] Bluetooth: hci0: command tx timeout [ 82.598799] Bluetooth: hci1: command tx timeout [ 82.599301] Bluetooth: hci2: command tx timeout [ 82.727567] Bluetooth: hci3: command tx timeout [ 82.790640] Bluetooth: hci5: command tx timeout [ 82.791249] Bluetooth: hci4: command tx timeout [ 82.854639] Bluetooth: hci6: command tx timeout [ 82.919575] Bluetooth: hci7: command tx timeout [ 84.390637] Bluetooth: hci0: command tx timeout [ 84.646923] Bluetooth: hci2: command tx timeout [ 84.648178] Bluetooth: hci1: command tx timeout [ 84.774631] Bluetooth: hci3: command tx timeout [ 84.839225] Bluetooth: hci5: command tx timeout [ 84.840390] Bluetooth: hci4: command tx timeout [ 84.902932] Bluetooth: hci6: command tx timeout [ 84.966957] Bluetooth: hci7: command tx timeout [ 86.438626] Bluetooth: hci0: command tx timeout [ 86.695971] Bluetooth: hci1: command tx timeout [ 86.696820] Bluetooth: hci2: command tx timeout [ 86.822729] Bluetooth: hci3: command tx timeout [ 86.887949] Bluetooth: hci4: command tx timeout [ 86.888516] Bluetooth: hci5: command tx timeout [ 86.950600] Bluetooth: hci6: command tx timeout [ 87.014727] Bluetooth: hci7: command tx timeout [ 118.778661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.779342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.943789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.944399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.084383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.085001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.246259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.247470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.354856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.355469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:26:15 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADAUDIO(r0, 0x5396, &(0x7f0000000180)={@lba, 0x0, 0x0, 0x0}) [ 119.583753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.584345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:26:15 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADAUDIO(r0, 0x5396, &(0x7f0000000180)={@lba, 0x0, 0x0, 0x0}) 10:26:15 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADAUDIO(r0, 0x5396, &(0x7f0000000180)={@lba, 0x0, 0x0, 0x0}) [ 119.706774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.707380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.768090] audit: type=1326 audit(1756722375.790:8): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3855 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30762bbb19 code=0x0 [ 119.827281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.827912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.871560] audit: type=1326 audit(1756722375.893:9): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3855 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30762bbb19 code=0x0 10:26:15 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17) [ 119.904169] audit: type=1400 audit(1756722375.926:10): avc: denied { open } for pid=3871 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.908563] audit: type=1400 audit(1756722375.926:11): avc: denied { kernel } for pid=3871 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.920619] audit: type=1400 audit(1756722375.940:12): avc: denied { read } for pid=3871 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 10:26:15 executing program 6: set_mempolicy(0x6, &(0x7f0000000040)=0x7, 0x5db) syz_open_dev$tty20(0xc, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}) [ 119.977762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.978412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:26:16 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17) [ 119.996201] audit: type=1326 audit(1756722376.018:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3880 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30762bbb19 code=0x0 10:26:16 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r1, 0x0) keyctl$revoke(0x3, r1) [ 120.072390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.073164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:26:16 executing program 6: set_mempolicy(0x6, &(0x7f0000000040)=0x7, 0x5db) syz_open_dev$tty20(0xc, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}) [ 120.099715] audit: type=1326 audit(1756722376.121:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3891 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30762bbb19 code=0x0 [ 120.190790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.191392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.217711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.218305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.256753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.257392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.293454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.294200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.317002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.317641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.354126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.354916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.457714] syz-executor.0 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 120.465400] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 10:26:16 executing program 0: setitimer(0x0, 0x0, 0xfffffffffffffffe) 10:26:16 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17) 10:26:16 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0xc9eb, 0x4) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@nfc={0x27, 0x2}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e5", 0x1}], 0x1}}], 0x1, 0x0) 10:26:16 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000040)) 10:26:16 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/192) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f00000000c0)) 10:26:16 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r1, 0x0) keyctl$revoke(0x3, r1) 10:26:16 executing program 6: set_mempolicy(0x6, &(0x7f0000000040)=0x7, 0x5db) syz_open_dev$tty20(0xc, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}) 10:26:16 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/192) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f00000000c0)) [ 120.588160] audit: type=1326 audit(1756722376.610:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3917 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30762bbb19 code=0x0 10:26:16 executing program 0: setitimer(0x0, 0x0, 0xfffffffffffffffe) 10:26:16 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0xc9eb, 0x4) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@nfc={0x27, 0x2}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e5", 0x1}], 0x1}}], 0x1, 0x0) 10:26:16 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17) 10:26:16 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/192) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f00000000c0)) 10:26:16 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000040)) 10:26:16 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r1, 0x0) keyctl$revoke(0x3, r1) 10:26:16 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/192) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f00000000c0)) 10:26:16 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r1, 0x0) keyctl$revoke(0x3, r1) [ 120.675698] BUG: unable to handle page fault for address: ffffed1022b89746 [ 120.676336] #PF: supervisor read access in kernel mode [ 120.676747] #PF: error_code(0x0000) - not-present page [ 120.677157] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 [ 120.678798] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 120.679808] CPU: 1 UID: 0 PID: 3930 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 120.682936] Tainted: [W]=WARN [ 120.683687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 120.685636] RIP: 0010:perf_tp_event+0x175/0xe70 [ 120.686607] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 120.688039] RSP: 0018:ffff888045227800 EFLAGS: 00010212 [ 120.688463] RAX: 1ffff11022b89746 RBX: ffff888115c4b840 RCX: ffffc9000a04d000 [ 120.689034] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: ffff888115c4ba30 [ 120.689043] RBP: ffff888045227a70 R08: ffff88806cf31340 R09: ffffe8ffffd16868 [ 120.689051] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 120.689059] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 120.689070] FS: 00007fe5e6808700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 120.689082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.689090] CR2: ffffed1022b89746 CR3: 00000000417a3000 CR4: 0000000000350ef0 [ 120.689098] Call Trace: [ 120.689103] [ 120.689107] ? perf_swevent_event+0x63/0x3f0 [ 120.689129] ? __pfx_perf_tp_event+0x10/0x10 [ 120.689147] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 120.689162] ? perf_swevent_event+0x63/0x3f0 [ 120.689179] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 120.689192] ? perf_swevent_event+0x63/0x3f0 [ 120.689210] ? perf_tp_event+0x807/0xe70 [ 120.689230] ? __pfx_perf_tp_event+0x10/0x10 [ 120.689248] ? __perf_install_in_context+0x503/0xb90 [ 120.689263] ? do_raw_spin_unlock+0x53/0x220 [ 120.689284] ? perf_trace_run_bpf_submit+0xef/0x180 [ 120.689300] perf_trace_run_bpf_submit+0xef/0x180 [ 120.689320] perf_trace_lock+0x337/0x5d0 [ 120.689339] ? __pfx_perf_trace_lock+0x10/0x10 [ 120.689355] ? lock_acquire+0x15e/0x2f0 [ 120.689369] ? futex_ref_get+0x48/0x300 [ 120.689382] ? futex_ref_get+0x114/0x300 [ 120.689393] ? futex_hash+0x15c/0x390 [ 120.689407] lock_release+0x1ab/0x290 [ 120.689424] ? futex_hash+0x15c/0x390 [ 120.689436] futex_ref_get+0x119/0x300 [ 120.689448] ? futex_hash+0x15c/0x390 [ 120.689459] futex_hash+0x70/0x390 [ 120.689473] futex_wake+0x143/0x540 [ 120.689488] ? __pfx_perf_trace_lock+0x10/0x10 [ 120.689504] ? __pfx_futex_wake+0x10/0x10 [ 120.689523] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 120.702766] ? lock_release+0xc8/0x290 [ 120.703106] do_futex+0x26d/0x370 [ 120.703403] ? __pfx_do_futex+0x10/0x10 [ 120.703739] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 120.704178] ? find_held_lock+0x2b/0x80 [ 120.704511] __x64_sys_futex+0x1c9/0x4d0 [ 120.704851] ? __pfx___x64_sys_futex+0x10/0x10 [ 120.705229] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 120.705665] do_syscall_64+0xbf/0x360 [ 120.705984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.706406] RIP: 0033:0x7fe5e9292b19 [ 120.706711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 120.708186] RSP: 002b:00007fe5e6808218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.708796] RAX: ffffffffffffffda RBX: 00007fe5e93a5f68 RCX: 00007fe5e9292b19 [ 120.709373] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe5e93a5f6c [ 120.709958] RBP: 00007fe5e93a5f60 R08: 000000000000000e R09: 0000000000000000 [ 120.710536] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fe5e93a5f6c [ 120.711118] R13: 00007fffed9c49df R14: 00007fe5e6808300 R15: 0000000000022000 [ 120.711708] [ 120.711908] Modules linked in: [ 120.712178] CR2: ffffed1022b89746 [ 120.712462] ---[ end trace 0000000000000000 ]--- [ 120.712845] RIP: 0010:perf_tp_event+0x175/0xe70 [ 120.713234] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 120.714696] RSP: 0018:ffff888045227800 EFLAGS: 00010212 [ 120.715131] RAX: 1ffff11022b89746 RBX: ffff888115c4b840 RCX: ffffc9000a04d000 [ 120.715712] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: ffff888115c4ba30 [ 120.716288] RBP: ffff888045227a70 R08: ffff88806cf31340 R09: ffffe8ffffd16868 [ 120.716865] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 120.717443] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 120.718020] FS: 00007fe5e6808700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 120.718679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.719151] CR2: ffffed1022b89746 CR3: 00000000417a3000 CR4: 0000000000350ef0 [ 120.719733] note: syz-executor.3[3930] exited with irqs disabled [ 120.720244] BUG: unable to handle page fault for address: ffffed1022b89746 [ 120.720802] #PF: supervisor read access in kernel mode [ 120.721222] #PF: error_code(0x0000) - not-present page [ 120.721646] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 [ 120.722102] Oops: Oops: 0000 [#2] SMP KASAN NOPTI [ 120.722496] CPU: 1 UID: 0 PID: 3930 Comm: syz-executor.3 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 120.723451] Tainted: [D]=DIE, [W]=WARN [ 120.723769] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 120.724428] RIP: 0010:perf_tp_event+0x175/0xe70 [ 120.724819] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 120.726279] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012 [ 120.726711] RAX: 1ffff11022b89746 RBX: ffff888115c4b840 RCX: 0000000000000002 [ 120.727285] RDX: ffff888043249b80 RSI: ffffffff8189a4e7 RDI: ffff888115c4ba30 [ 120.727862] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd16868 [ 120.728435] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000 [ 120.729020] R13: 000000000000002c R14: ffff88806cf31490 R15: dffffc0000000000 [ 120.729593] FS: 00007fe5e6808700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 120.730242] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.730711] CR2: ffffed1022b89746 CR3: 00000000417a3000 CR4: 0000000000350ef0 [ 120.731283] Call Trace: [ 120.731498] [ 120.731692] ? __pfx_perf_tp_event+0x10/0x10 [ 120.732059] ? sched_clock_cpu+0x6c/0x4e0 [ 120.732404] ? trace_pelt_se_tp+0xdf/0x130 [ 120.732750] ? __update_load_avg_se+0x428/0xa40 [ 120.733141] ? lock_is_held_type+0x9e/0x120 [ 120.733500] ? perf_trace_lock+0xb5/0x5d0 [ 120.733840] ? perf_trace_lock+0xb5/0x5d0 [ 120.734175] ? __pfx_perf_trace_lock+0x10/0x10 [ 120.734543] ? __pfx_perf_trace_lock+0x10/0x10 [ 120.734911] ? check_preempt_wakeup_fair+0x406/0x950 [ 120.735322] ? perf_trace_run_bpf_submit+0xef/0x180 [ 120.735728] perf_trace_run_bpf_submit+0xef/0x180 [ 120.736121] perf_trace_lock+0x337/0x5d0 [ 120.736454] ? __pfx_perf_trace_lock+0x10/0x10 [ 120.736826] ? find_held_lock+0x2b/0x80 [ 120.737150] ? hrtimer_interrupt+0x114/0x830 [ 120.737509] lock_release+0x1ab/0x290 [ 120.737820] ktime_get_update_offsets_now+0xab/0x3c0 [ 120.738230] ? hrtimer_interrupt+0x114/0x830 [ 120.738582] ? __pfx_lapic_next_deadline+0x10/0x10 [ 120.738982] hrtimer_interrupt+0x114/0x830 [ 120.739318] ? __pfx_do_sync_core+0x10/0x10 [ 120.739674] ? trace_csd_function_exit+0x134/0x190 [ 120.740073] ? __flush_smp_call_function_queue+0x28c/0x740 [ 120.740519] __sysvec_apic_timer_interrupt+0xbb/0x330 [ 120.740928] sysvec_apic_timer_interrupt+0x6b/0x80 [ 120.741327] [ 120.741511] [ 120.741696] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 120.742114] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 120.742491] Code: 38 00 85 db 0f 84 21 01 00 00 e8 09 a6 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 57 a1 38 00 48 85 db 0f 84 17 01 00 00 e9 a5 38 00 31 ff 65 8b 1d 60 2f 49 06 81 e3 ff ff ff 7f 89 de [ 120.743923] RSP: 0018:ffff888045227f28 EFLAGS: 00000246 [ 120.744346] RAX: 0000000000000001 RBX: ffff888043249b80 RCX: ffffffff817c3ab6 [ 120.744908] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 120.745467] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 120.746028] R10: ffffffff8643b457 R11: 0000000000000001 R12: ffff888043249b80 [ 120.746584] R13: 0000000000000009 R14: ffff8880452277e0 R15: 0000000000000000 [ 120.747148] ? trace_irq_enable.constprop.0+0x26/0x100 [ 120.747571] ? make_task_dead+0x214/0x3b0 [ 120.747911] ? make_task_dead+0x214/0x3b0 [ 120.748241] ? do_syscall_64+0xbf/0x360 [ 120.748562] rewind_stack_and_make_dead+0x16/0x20 [ 120.748957] RIP: 0033:0x7fe5e9292b19 [ 120.749255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 120.750682] RSP: 002b:00007fe5e6808218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.751280] RAX: ffffffffffffffda RBX: 00007fe5e93a5f68 RCX: 00007fe5e9292b19 [ 120.751846] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe5e93a5f6c [ 120.752410] RBP: 00007fe5e93a5f60 R08: 000000000000000e R09: 0000000000000000 [ 120.752968] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fe5e93a5f6c [ 120.753529] R13: 00007fffed9c49df R14: 00007fe5e6808300 R15: 0000000000022000 [ 120.754095] [ 120.754284] Modules linked in: [ 120.754543] CR2: ffffed1022b89746 [ 120.754826] ---[ end trace 0000000000000000 ]--- [ 120.755194] RIP: 0010:perf_tp_event+0x175/0xe70 [ 120.755571] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 120.757006] RSP: 0018:ffff888045227800 EFLAGS: 00010212 [ 120.757422] RAX: 1ffff11022b89746 RBX: ffff888115c4b840 RCX: ffffc9000a04d000 [ 120.757983] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: ffff888115c4ba30 [ 120.758543] RBP: ffff888045227a70 R08: ffff88806cf31340 R09: ffffe8ffffd16868 [ 120.759101] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 120.759667] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 120.760228] FS: 00007fe5e6808700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 120.760860] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.761327] CR2: ffffed1022b89746 CR3: 00000000417a3000 CR4: 0000000000350ef0 [ 120.761892] Kernel panic - not syncing: Fatal exception in interrupt [ 120.762575] Kernel Offset: disabled [ 120.762866] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 10:26:16 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff8880e55d8000 RCX=000000000000000d RDX=0000000000000000 RSI=ffffffff85c1c760 RDI=ffff88806ce31850 RBP=ffffffff85c1c760 RSP=ffff888009616e50 R8 =ffffffff84c93ca0 R9 =ffff888009616f58 R10=000000000003bea3 R11=0000000000008833 R12=ffffffff81358702 R13=ffff888009616f60 R14=ffff888009617d98 R15=ffff888009616f18 RIP=ffffffff815af2b0 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0fa91dd541 CR3=000000004169f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000ffff00000000000000000000ffff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff888045227008 R8 =0000000000000000 R9 =ffffed100166f046 R10=0000000000000036 R11=30376578302f4952 R12=0000000000000036 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0 RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe5e6808700 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=ffffed1022b89746 CR3=00000000417a3000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fe5e93797c000007fe5e93797c8 XMM02=00007fe5e93797e000007fe5e93797c0 XMM03=00007fe5e93797c800007fe5e93797c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000