Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:51452' (ECDSA) to the list of known hosts. 2025/09/01 10:44:36 fuzzer started 2025/09/01 10:44:36 dialing manager at localhost:35473 syzkaller login: [ 52.016642] cgroup: Unknown subsys name 'net' [ 52.069589] cgroup: Unknown subsys name 'cpuset' [ 52.081904] cgroup: Unknown subsys name 'rlimit' 2025/09/01 10:44:48 syscalls: 2214 2025/09/01 10:44:48 code coverage: enabled 2025/09/01 10:44:48 comparison tracing: enabled 2025/09/01 10:44:48 extra coverage: enabled 2025/09/01 10:44:48 setuid sandbox: enabled 2025/09/01 10:44:48 namespace sandbox: enabled 2025/09/01 10:44:48 Android sandbox: enabled 2025/09/01 10:44:48 fault injection: enabled 2025/09/01 10:44:48 leak checking: enabled 2025/09/01 10:44:48 net packet injection: enabled 2025/09/01 10:44:48 net device setup: enabled 2025/09/01 10:44:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 10:44:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 10:44:48 USB emulation: enabled 2025/09/01 10:44:48 hci packet injection: enabled 2025/09/01 10:44:48 wifi device emulation: enabled 2025/09/01 10:44:48 802.15.4 emulation: enabled 2025/09/01 10:44:48 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 10:44:48 fetching corpus: 45, signal 17389/21022 (executing program) 2025/09/01 10:44:48 fetching corpus: 92, signal 30862/35855 (executing program) 2025/09/01 10:44:48 fetching corpus: 141, signal 46710/52632 (executing program) 2025/09/01 10:44:48 fetching corpus: 191, signal 51528/58682 (executing program) 2025/09/01 10:44:48 fetching corpus: 240, signal 56181/64455 (executing program) 2025/09/01 10:44:48 fetching corpus: 290, signal 62276/71486 (executing program) 2025/09/01 10:44:48 fetching corpus: 340, signal 65701/75928 (executing program) 2025/09/01 10:44:48 fetching corpus: 390, signal 70847/81870 (executing program) 2025/09/01 10:44:48 fetching corpus: 440, signal 74394/86282 (executing program) 2025/09/01 10:44:48 fetching corpus: 490, signal 77897/90557 (executing program) 2025/09/01 10:44:48 fetching corpus: 540, signal 80518/94028 (executing program) 2025/09/01 10:44:48 fetching corpus: 589, signal 82947/97259 (executing program) 2025/09/01 10:44:49 fetching corpus: 639, signal 85610/100631 (executing program) 2025/09/01 10:44:49 fetching corpus: 689, signal 88149/103798 (executing program) 2025/09/01 10:44:49 fetching corpus: 739, signal 90412/106683 (executing program) 2025/09/01 10:44:49 fetching corpus: 789, signal 93089/109883 (executing program) 2025/09/01 10:44:49 fetching corpus: 836, signal 95284/112626 (executing program) 2025/09/01 10:44:49 fetching corpus: 885, signal 97607/115442 (executing program) 2025/09/01 10:44:49 fetching corpus: 935, signal 99529/117823 (executing program) 2025/09/01 10:44:49 fetching corpus: 985, signal 100885/119811 (executing program) 2025/09/01 10:44:49 fetching corpus: 1034, signal 102444/121840 (executing program) 2025/09/01 10:44:49 fetching corpus: 1084, signal 103345/123409 (executing program) 2025/09/01 10:44:50 fetching corpus: 1134, signal 104695/125254 (executing program) 2025/09/01 10:44:50 fetching corpus: 1184, signal 105831/126916 (executing program) 2025/09/01 10:44:50 fetching corpus: 1234, signal 107514/128990 (executing program) 2025/09/01 10:44:50 fetching corpus: 1283, signal 108466/130454 (executing program) 2025/09/01 10:44:50 fetching corpus: 1333, signal 109530/132023 (executing program) 2025/09/01 10:44:50 fetching corpus: 1383, signal 111118/133889 (executing program) 2025/09/01 10:44:50 fetching corpus: 1433, signal 112331/135478 (executing program) 2025/09/01 10:44:50 fetching corpus: 1483, signal 113789/137224 (executing program) 2025/09/01 10:44:50 fetching corpus: 1533, signal 114592/138467 (executing program) 2025/09/01 10:44:50 fetching corpus: 1582, signal 115463/139780 (executing program) 2025/09/01 10:44:51 fetching corpus: 1632, signal 116811/141348 (executing program) 2025/09/01 10:44:51 fetching corpus: 1682, signal 117871/142721 (executing program) 2025/09/01 10:44:51 fetching corpus: 1732, signal 119035/144124 (executing program) 2025/09/01 10:44:51 fetching corpus: 1782, signal 119963/145438 (executing program) 2025/09/01 10:44:51 fetching corpus: 1832, signal 120770/146628 (executing program) 2025/09/01 10:44:51 fetching corpus: 1882, signal 122416/148251 (executing program) 2025/09/01 10:44:51 fetching corpus: 1932, signal 122864/149177 (executing program) 2025/09/01 10:44:51 fetching corpus: 1982, signal 123894/150372 (executing program) 2025/09/01 10:44:51 fetching corpus: 2032, signal 124717/151466 (executing program) 2025/09/01 10:44:51 fetching corpus: 2082, signal 125796/152622 (executing program) 2025/09/01 10:44:51 fetching corpus: 2132, signal 126835/153810 (executing program) 2025/09/01 10:44:51 fetching corpus: 2182, signal 127888/155033 (executing program) 2025/09/01 10:44:51 fetching corpus: 2232, signal 128832/156122 (executing program) 2025/09/01 10:44:52 fetching corpus: 2282, signal 129524/157060 (executing program) 2025/09/01 10:44:52 fetching corpus: 2331, signal 131283/158447 (executing program) 2025/09/01 10:44:52 fetching corpus: 2381, signal 132079/159376 (executing program) 2025/09/01 10:44:52 fetching corpus: 2431, signal 132975/160335 (executing program) 2025/09/01 10:44:52 fetching corpus: 2481, signal 133574/161124 (executing program) 2025/09/01 10:44:52 fetching corpus: 2531, signal 133977/161870 (executing program) 2025/09/01 10:44:52 fetching corpus: 2581, signal 134547/162659 (executing program) 2025/09/01 10:44:52 fetching corpus: 2631, signal 135393/163577 (executing program) 2025/09/01 10:44:52 fetching corpus: 2681, signal 136225/164460 (executing program) 2025/09/01 10:44:52 fetching corpus: 2731, signal 137097/165290 (executing program) 2025/09/01 10:44:52 fetching corpus: 2781, signal 138066/166150 (executing program) 2025/09/01 10:44:53 fetching corpus: 2831, signal 138848/166957 (executing program) 2025/09/01 10:44:53 fetching corpus: 2881, signal 139478/167676 (executing program) 2025/09/01 10:44:53 fetching corpus: 2931, signal 140182/168426 (executing program) 2025/09/01 10:44:53 fetching corpus: 2981, signal 140761/169110 (executing program) 2025/09/01 10:44:53 fetching corpus: 3031, signal 141886/169895 (executing program) 2025/09/01 10:44:53 fetching corpus: 3080, signal 142635/170588 (executing program) 2025/09/01 10:44:53 fetching corpus: 3130, signal 143250/171227 (executing program) 2025/09/01 10:44:53 fetching corpus: 3179, signal 143766/171845 (executing program) 2025/09/01 10:44:53 fetching corpus: 3229, signal 144253/172416 (executing program) 2025/09/01 10:44:53 fetching corpus: 3279, signal 144767/173029 (executing program) 2025/09/01 10:44:54 fetching corpus: 3328, signal 145219/173577 (executing program) 2025/09/01 10:44:54 fetching corpus: 3378, signal 145876/174173 (executing program) 2025/09/01 10:44:54 fetching corpus: 3428, signal 146317/174710 (executing program) 2025/09/01 10:44:54 fetching corpus: 3478, signal 146929/175235 (executing program) 2025/09/01 10:44:54 fetching corpus: 3528, signal 147836/175802 (executing program) 2025/09/01 10:44:54 fetching corpus: 3577, signal 148519/176343 (executing program) 2025/09/01 10:44:54 fetching corpus: 3627, signal 149152/176862 (executing program) 2025/09/01 10:44:54 fetching corpus: 3677, signal 150290/177532 (executing program) 2025/09/01 10:44:54 fetching corpus: 3727, signal 150938/178023 (executing program) 2025/09/01 10:44:54 fetching corpus: 3777, signal 151432/178470 (executing program) 2025/09/01 10:44:54 fetching corpus: 3827, signal 152168/178954 (executing program) 2025/09/01 10:44:54 fetching corpus: 3876, signal 152799/179402 (executing program) 2025/09/01 10:44:54 fetching corpus: 3925, signal 153204/179807 (executing program) 2025/09/01 10:44:55 fetching corpus: 3975, signal 153735/180259 (executing program) 2025/09/01 10:44:55 fetching corpus: 4025, signal 154181/180647 (executing program) 2025/09/01 10:44:55 fetching corpus: 4072, signal 154581/181013 (executing program) 2025/09/01 10:44:55 fetching corpus: 4121, signal 155236/181405 (executing program) 2025/09/01 10:44:55 fetching corpus: 4171, signal 155810/181857 (executing program) 2025/09/01 10:44:55 fetching corpus: 4221, signal 156155/182215 (executing program) 2025/09/01 10:44:55 fetching corpus: 4271, signal 156770/182598 (executing program) 2025/09/01 10:44:55 fetching corpus: 4321, signal 157225/182905 (executing program) 2025/09/01 10:44:55 fetching corpus: 4370, signal 157626/183248 (executing program) 2025/09/01 10:44:55 fetching corpus: 4420, signal 158196/183514 (executing program) 2025/09/01 10:44:56 fetching corpus: 4470, signal 158610/183697 (executing program) 2025/09/01 10:44:56 fetching corpus: 4520, signal 159234/183708 (executing program) 2025/09/01 10:44:56 fetching corpus: 4569, signal 159743/183713 (executing program) 2025/09/01 10:44:56 fetching corpus: 4619, signal 160205/183719 (executing program) 2025/09/01 10:44:56 fetching corpus: 4668, signal 160721/183750 (executing program) 2025/09/01 10:44:56 fetching corpus: 4718, signal 161210/183812 (executing program) 2025/09/01 10:44:56 fetching corpus: 4768, signal 161761/183868 (executing program) 2025/09/01 10:44:56 fetching corpus: 4817, signal 162122/183873 (executing program) 2025/09/01 10:44:56 fetching corpus: 4866, signal 162663/183902 (executing program) 2025/09/01 10:44:56 fetching corpus: 4916, signal 163016/183952 (executing program) 2025/09/01 10:44:56 fetching corpus: 4964, signal 163409/183974 (executing program) 2025/09/01 10:44:57 fetching corpus: 5014, signal 163765/183982 (executing program) 2025/09/01 10:44:57 fetching corpus: 5064, signal 164041/183988 (executing program) 2025/09/01 10:44:57 fetching corpus: 5114, signal 164389/184021 (executing program) 2025/09/01 10:44:57 fetching corpus: 5163, signal 164868/184022 (executing program) 2025/09/01 10:44:57 fetching corpus: 5213, signal 165322/184026 (executing program) 2025/09/01 10:44:57 fetching corpus: 5263, signal 165748/184034 (executing program) 2025/09/01 10:44:57 fetching corpus: 5312, signal 166078/184037 (executing program) 2025/09/01 10:44:57 fetching corpus: 5362, signal 166361/184037 (executing program) 2025/09/01 10:44:57 fetching corpus: 5412, signal 166619/184044 (executing program) 2025/09/01 10:44:57 fetching corpus: 5462, signal 167050/184048 (executing program) 2025/09/01 10:44:57 fetching corpus: 5512, signal 167425/184049 (executing program) 2025/09/01 10:44:58 fetching corpus: 5561, signal 167705/184060 (executing program) 2025/09/01 10:44:58 fetching corpus: 5611, signal 168030/184070 (executing program) 2025/09/01 10:44:58 fetching corpus: 5660, signal 168520/184072 (executing program) 2025/09/01 10:44:58 fetching corpus: 5710, signal 168873/184093 (executing program) 2025/09/01 10:44:58 fetching corpus: 5760, signal 169381/184106 (executing program) 2025/09/01 10:44:58 fetching corpus: 5809, signal 169764/184113 (executing program) 2025/09/01 10:44:58 fetching corpus: 5859, signal 170043/184116 (executing program) 2025/09/01 10:44:58 fetching corpus: 5909, signal 170286/184135 (executing program) 2025/09/01 10:44:58 fetching corpus: 5959, signal 170616/184141 (executing program) 2025/09/01 10:44:58 fetching corpus: 6009, signal 170915/184155 (executing program) 2025/09/01 10:44:58 fetching corpus: 6059, signal 171284/184162 (executing program) 2025/09/01 10:44:58 fetching corpus: 6109, signal 171844/184201 (executing program) 2025/09/01 10:44:59 fetching corpus: 6159, signal 172249/184202 (executing program) 2025/09/01 10:44:59 fetching corpus: 6209, signal 172547/184226 (executing program) 2025/09/01 10:44:59 fetching corpus: 6259, signal 172994/184231 (executing program) 2025/09/01 10:44:59 fetching corpus: 6309, signal 173430/184246 (executing program) 2025/09/01 10:44:59 fetching corpus: 6359, signal 173678/184283 (executing program) 2025/09/01 10:44:59 fetching corpus: 6409, signal 174016/184288 (executing program) 2025/09/01 10:44:59 fetching corpus: 6459, signal 174321/184309 (executing program) 2025/09/01 10:44:59 fetching corpus: 6509, signal 174623/184317 (executing program) 2025/09/01 10:44:59 fetching corpus: 6559, signal 175009/184355 (executing program) 2025/09/01 10:44:59 fetching corpus: 6608, signal 175372/184357 (executing program) 2025/09/01 10:44:59 fetching corpus: 6657, signal 175616/184363 (executing program) 2025/09/01 10:45:00 fetching corpus: 6707, signal 175807/184370 (executing program) 2025/09/01 10:45:00 fetching corpus: 6756, signal 176161/184379 (executing program) 2025/09/01 10:45:00 fetching corpus: 6806, signal 176430/184398 (executing program) 2025/09/01 10:45:00 fetching corpus: 6856, signal 176755/184492 (executing program) 2025/09/01 10:45:00 fetching corpus: 6906, signal 177053/184567 (executing program) 2025/09/01 10:45:00 fetching corpus: 6956, signal 177428/184586 (executing program) 2025/09/01 10:45:00 fetching corpus: 7006, signal 177687/184606 (executing program) 2025/09/01 10:45:00 fetching corpus: 7054, signal 177921/184609 (executing program) 2025/09/01 10:45:00 fetching corpus: 7103, signal 178342/184659 (executing program) 2025/09/01 10:45:00 fetching corpus: 7152, signal 178706/184662 (executing program) 2025/09/01 10:45:00 fetching corpus: 7201, signal 178962/184664 (executing program) 2025/09/01 10:45:00 fetching corpus: 7251, signal 179245/184669 (executing program) 2025/09/01 10:45:00 fetching corpus: 7300, signal 179655/184703 (executing program) 2025/09/01 10:45:00 fetching corpus: 7349, signal 179850/184704 (executing program) 2025/09/01 10:45:01 fetching corpus: 7399, signal 180065/184737 (executing program) 2025/09/01 10:45:01 fetching corpus: 7449, signal 180453/184784 (executing program) 2025/09/01 10:45:01 fetching corpus: 7499, signal 180857/184798 (executing program) 2025/09/01 10:45:01 fetching corpus: 7549, signal 181074/184798 (executing program) 2025/09/01 10:45:01 fetching corpus: 7599, signal 181315/184802 (executing program) 2025/09/01 10:45:01 fetching corpus: 7649, signal 181672/184839 (executing program) 2025/09/01 10:45:01 fetching corpus: 7697, signal 181975/184845 (executing program) 2025/09/01 10:45:01 fetching corpus: 7715, signal 182039/184862 (executing program) 2025/09/01 10:45:01 fetching corpus: 7715, signal 182039/184862 (executing program) 2025/09/01 10:45:03 starting 8 fuzzer processes 10:45:03 executing program 0: creat(&(0x7f00000003c0)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 10:45:03 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$DVD_AUTH(r0, 0x5392, &(0x7f0000000200)=@hsc={0xb, 0x0, "fcc4dde382d2c46e927d"}) 10:45:04 executing program 3: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000b80)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendfile(r2, r0, 0x0, 0x40) 10:45:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000000) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) 10:45:04 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff812093c0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:45:04 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000300)) [ 78.563167] audit: type=1400 audit(1756723504.113:7): avc: denied { execmem } for pid=281 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:45:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) 10:45:04 executing program 6: keyctl$search(0xa, 0x0, &(0x7f0000000600)='big_key\x00', &(0x7f0000000640)={'syz', 0x3}, 0x0) [ 79.784762] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.792232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.793700] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.799790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.802489] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.806556] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.811319] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.817213] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.819232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.822896] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.843235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.851075] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.852555] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.861760] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.867221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.984138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.985556] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 79.987293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.998182] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.000146] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.001310] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.003617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.005140] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.005514] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.011133] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.016172] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.016193] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 80.018468] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.019983] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.026953] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 80.033032] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 80.034119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.035641] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 80.043389] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.055836] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 80.084181] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 80.100967] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 80.104216] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 80.118939] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 80.120182] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 81.875657] Bluetooth: hci0: command tx timeout [ 81.875665] Bluetooth: hci1: command tx timeout [ 81.938912] Bluetooth: hci2: command tx timeout [ 82.131943] Bluetooth: hci5: command tx timeout [ 82.131997] Bluetooth: hci3: command tx timeout [ 82.134334] Bluetooth: hci4: command tx timeout [ 82.195008] Bluetooth: hci7: command tx timeout [ 82.196879] Bluetooth: hci6: command tx timeout [ 83.923850] Bluetooth: hci1: command tx timeout [ 83.924277] Bluetooth: hci0: command tx timeout [ 83.987323] Bluetooth: hci2: command tx timeout [ 84.179031] Bluetooth: hci3: command tx timeout [ 84.179459] Bluetooth: hci5: command tx timeout [ 84.180082] Bluetooth: hci4: command tx timeout [ 84.242873] Bluetooth: hci7: command tx timeout [ 84.243287] Bluetooth: hci6: command tx timeout [ 85.970879] Bluetooth: hci0: command tx timeout [ 85.971298] Bluetooth: hci1: command tx timeout [ 86.034866] Bluetooth: hci2: command tx timeout [ 86.226871] Bluetooth: hci4: command tx timeout [ 86.227283] Bluetooth: hci5: command tx timeout [ 86.227653] Bluetooth: hci3: command tx timeout [ 86.290865] Bluetooth: hci6: command tx timeout [ 86.291259] Bluetooth: hci7: command tx timeout [ 88.018971] Bluetooth: hci1: command tx timeout [ 88.019404] Bluetooth: hci0: command tx timeout [ 88.084929] Bluetooth: hci2: command tx timeout [ 88.274901] Bluetooth: hci3: command tx timeout [ 88.275342] Bluetooth: hci5: command tx timeout [ 88.275718] Bluetooth: hci4: command tx timeout [ 88.338941] Bluetooth: hci7: command tx timeout [ 88.339374] Bluetooth: hci6: command tx timeout [ 116.300142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.301509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.473880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.474503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.823637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.824622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:45:42 executing program 6: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) fallocate(r0, 0x0, 0x0, 0x7fff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r1, r0, 0x0, 0x80) [ 116.978694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.979358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:45:42 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000004e40)=[{{&(0x7f0000002500)=@rc={0x1f, @fixed}, 0x80, 0x0}}], 0x1, 0x2001, 0x0) 10:45:42 executing program 6: syz_emit_ethernet(0x8a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x54, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @fastopen={0x22, 0x4, "e1ea"}, @mss={0x2, 0x4}, @md5sig={0x13, 0x12, "ef1cbdb0f69905295e5431d540756bec"}, @md5sig={0x13, 0x12, "735093986a972b9cee6a771e74575c8f"}, @mss={0x2, 0x4}, @window={0x3, 0x3}]}}}}}}}}, 0x0) [ 117.126463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.127125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:45:42 executing program 6: syz_emit_ethernet(0x8a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x54, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @fastopen={0x22, 0x4, "e1ea"}, @mss={0x2, 0x4}, @md5sig={0x13, 0x12, "ef1cbdb0f69905295e5431d540756bec"}, @md5sig={0x13, 0x12, "735093986a972b9cee6a771e74575c8f"}, @mss={0x2, 0x4}, @window={0x3, 0x3}]}}}}}}}}, 0x0) 10:45:42 executing program 6: syz_emit_ethernet(0x8a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x54, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @fastopen={0x22, 0x4, "e1ea"}, @mss={0x2, 0x4}, @md5sig={0x13, 0x12, "ef1cbdb0f69905295e5431d540756bec"}, @md5sig={0x13, 0x12, "735093986a972b9cee6a771e74575c8f"}, @mss={0x2, 0x4}, @window={0x3, 0x3}]}}}}}}}}, 0x0) [ 117.266842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.267469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:45:42 executing program 6: syz_emit_ethernet(0x8a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x54, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @fastopen={0x22, 0x4, "e1ea"}, @mss={0x2, 0x4}, @md5sig={0x13, 0x12, "ef1cbdb0f69905295e5431d540756bec"}, @md5sig={0x13, 0x12, "735093986a972b9cee6a771e74575c8f"}, @mss={0x2, 0x4}, @window={0x3, 0x3}]}}}}}}}}, 0x0) [ 117.397888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.398477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:45:43 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x4a002) ioctl$SCSI_IOCTL_SYNC(r0, 0x5393) 10:45:43 executing program 6: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f0000000280)='keyring\x00') [ 117.561882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.562467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.634597] audit: type=1400 audit(1756723543.190:8): avc: denied { open } for pid=3895 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 117.636342] audit: type=1400 audit(1756723543.190:9): avc: denied { kernel } for pid=3895 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 117.644527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.645180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.732596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.733619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.772958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.773583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.821430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.822096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.862757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.863407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.922390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.923141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.967916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.968494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.004561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.005177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:45:43 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f00000024c0), 0x401, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 10:45:43 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) syz_emit_ethernet(0x26, &(0x7f00000003c0)={@link_local, @remote, @val={@void, {0x500}}, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @broadcast, "", @multicast}}}}, 0x0) 10:45:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff812093c0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:45:43 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setown(r0, 0x8, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="da", 0xfffffdef}], 0x1}}], 0x1, 0x1) 10:45:43 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b1000", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fdf66a", 0x0, 0x3b, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}}, 0x0) 10:45:43 executing program 3: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x12, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000100), 0x4723, 0x4) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x0, 0x2) dup2(r3, r1) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 10:45:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGISO7816(r0, 0x5457, 0x0) 10:45:43 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$DVD_AUTH(r0, 0x5392, &(0x7f0000000200)=@hsc={0xb, 0x0, "fcc4dde382d2c46e927d"}) 10:45:43 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) [ 118.319304] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 118.320396] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 118.320998] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 118.321529] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 06 00 [ 118.322170] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 2 [ 118.323364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.323975] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.324698] Buffer I/O error on dev sr0, logical block 0, async page read [ 118.333444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.334079] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.334748] Buffer I/O error on dev sr0, logical block 1, async page read [ 118.342264] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.342741] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.343517] Buffer I/O error on dev sr0, logical block 2, async page read [ 118.349552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.350119] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.350921] Buffer I/O error on dev sr0, logical block 3, async page read [ 118.354937] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.357512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.357992] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.358665] Buffer I/O error on dev sr0, logical block 4, async page read [ 118.364203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.364669] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.365499] Buffer I/O error on dev sr0, logical block 5, async page read [ 118.368630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.369104] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.369768] Buffer I/O error on dev sr0, logical block 6, async page read [ 118.372711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.373199] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.374005] Buffer I/O error on dev sr0, logical block 7, async page read [ 118.374831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.375313] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.375994] Buffer I/O error on dev sr0, logical block 0, async page read [ 118.381608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.382382] Buffer I/O error on dev sr0, logical block 1, async page read [ 118.397379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.400083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.403924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.407307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.421189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.421753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.461295] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 118.462076] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 118.462621] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 118.463183] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 06 00 [ 118.464157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.464727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.465370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.472353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.474569] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.475159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.475770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.476386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.477470] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.478556] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.479198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.479939] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.480489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.481205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.481750] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.482549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.485076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.485645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.488454] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.489227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.489780] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.491504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.492126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.492749] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 10:45:44 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$DVD_AUTH(r0, 0x5392, &(0x7f0000000200)=@hsc={0xb, 0x0, "fcc4dde382d2c46e927d"}) 10:45:44 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff812093c0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:45:44 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect(r0, &(0x7f00000001c0)=@nl=@unspec, 0x80) 10:45:44 executing program 2: munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ff7000/0x2000)=nil) pkey_mprotect(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x10) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 10:45:44 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b1000", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fdf66a", 0x0, 0x3b, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}}, 0x0) 10:45:44 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setown(r0, 0x8, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="da", 0xfffffdef}], 0x1}}], 0x1, 0x1) 10:45:44 executing program 3: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x12, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000100), 0x4723, 0x4) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x0, 0x2) dup2(r3, r1) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 10:45:44 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setown(r0, 0x8, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="da", 0xfffffdef}], 0x1}}], 0x1, 0x1) [ 119.172929] BUG: unable to handle page fault for address: ffffed1028c03106 [ 119.173506] #PF: supervisor read access in kernel mode [ 119.173914] #PF: error_code(0x0000) - not-present page [ 119.174316] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 [ 119.174754] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 119.175891] CPU: 1 UID: 0 PID: 3954 Comm: syz-executor.7 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 119.178499] Tainted: [W]=WARN [ 119.179217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 119.181362] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.182418] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 119.185336] RSP: 0018:ffff888047077780 EFLAGS: 00010016 [ 119.185762] RAX: 1ffff11028c03106 RBX: ffff888146018640 RCX: ffffc90007439000 [ 119.186325] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: ffff888146018830 [ 119.186893] RBP: ffff8880470779f0 R08: ffff88806cf31340 R09: ffffe8ffffd160a0 [ 119.187468] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 119.188030] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 119.188597] FS: 00007fe5e9cab700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 119.189229] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.189688] CR2: ffffed1028c03106 CR3: 000000001c393000 CR4: 0000000000350ef0 [ 119.190253] Call Trace: [ 119.190462] [ 119.190647] ? __pfx_perf_tp_event+0x10/0x10 [ 119.191005] ? __asan_memcpy+0x3d/0x60 [ 119.191332] ? visit_groups_merge.constprop.0.isra.0+0x6e7/0x1150 [ 119.191824] ? __pfx_visit_groups_merge.constprop.0.isra.0+0x10/0x10 [ 119.192330] ? lock_is_held_type+0x9e/0x120 [ 119.192683] ? ctx_sched_in+0x134/0x9b0 [ 119.193003] ? css_rstat_updated+0x1b8/0x4d0 [ 119.193361] ? __pfx_css_rstat_updated+0x10/0x10 [ 119.193743] ? lock_is_held_type+0x9e/0x120 [ 119.194101] ? perf_trace_run_bpf_submit+0xef/0x180 [ 119.194504] ? lock_is_held_type+0x9e/0x120 [ 119.194855] perf_trace_run_bpf_submit+0xef/0x180 [ 119.195246] perf_trace_preemptirq_template+0x259/0x430 [ 119.195681] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 119.196141] ? check_preempt_wakeup_fair+0x406/0x950 [ 119.196547] ? find_held_lock+0x2b/0x80 [ 119.196875] ? try_to_wake_up+0x8ae/0x11d0 [ 119.197220] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 119.197630] trace_irq_enable.constprop.0+0xa6/0x100 [ 119.198034] trace_hardirqs_on+0x26/0x40 [ 119.198357] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 119.198755] try_to_wake_up+0x8ae/0x11d0 [ 119.199082] ? __pfx_try_to_wake_up+0x10/0x10 [ 119.199451] ? plist_del+0x122/0x270 [ 119.199759] ? find_held_lock+0x2b/0x80 [ 119.200080] ? futex_wake+0x474/0x540 [ 119.200391] wake_up_q+0xa1/0x130 [ 119.200680] futex_wake+0x47e/0x540 [ 119.200984] ? __pfx_futex_wake+0x10/0x10 [ 119.201320] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 119.201723] ? lock_release+0xc8/0x290 [ 119.202041] do_futex+0x26d/0x370 [ 119.202325] ? __pfx_do_futex+0x10/0x10 [ 119.202651] __x64_sys_futex+0x1c9/0x4d0 [ 119.202980] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 119.203447] ? __pfx___x64_sys_futex+0x10/0x10 [ 119.203820] ? xfd_validate_state+0x55/0x180 [ 119.204183] do_syscall_64+0xbf/0x360 [ 119.204493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.204905] RIP: 0033:0x7fe5ec735b19 [ 119.205202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.206635] RSP: 002b:00007fe5e9cab218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.207235] RAX: ffffffffffffffda RBX: 00007fe5ec848f68 RCX: 00007fe5ec735b19 [ 119.207802] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe5ec848f6c [ 119.208359] RBP: 00007fe5ec848f60 R08: 000000000000000e R09: 0000000000000000 [ 119.208919] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fe5ec848f6c [ 119.209480] R13: 00007ffeff0cbe6f R14: 00007fe5e9cab300 R15: 0000000000022000 [ 119.210044] [ 119.210233] Modules linked in: [ 119.210492] CR2: ffffed1028c03106 [ 119.210766] ---[ end trace 0000000000000000 ]--- [ 119.210770] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#2] SMP KASAN NOPTI [ 119.211135] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.212246] KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f] [ 119.212611] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 119.213377] CPU: 0 UID: 0 PID: 293 Comm: syz-executor.4 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 119.214776] RSP: 0018:ffff888047077780 EFLAGS: 00010016 [ 119.215814] Tainted: [D]=DIE, [W]=WARN [ 119.216226] RAX: 1ffff11028c03106 RBX: ffff888146018640 RCX: ffffc90007439000 [ 119.216564] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 119.217111] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: ffff888146018830 [ 119.217823] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.218374] RBP: ffff8880470779f0 R08: ffff88806cf31340 R09: ffffe8ffffd160a0 [ 119.218775] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 119.219325] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 119.220884] RSP: 0018:ffff88806ce08980 EFLAGS: 00010013 [ 119.221442] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 119.221445] [ 119.221456] FS: 00007fe5e9cab700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 119.221940] RAX: 0000000020000031 RBX: 00000000ffffff9f RCX: 0000000000000002 [ 119.222496] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.222658] RDX: ffff888016bc9b80 RSI: ffffffff8189a4e7 RDI: 000000010000018f [ 119.223279] CR2: ffffed1028c03106 CR3: 000000001c393000 CR4: 0000000000350ef0 [ 119.223947] RBP: ffff88806ce08bf0 R08: ffff88806ce313e8 R09: ffffe8ffffc160a0 [ 119.224405] note: syz-executor.7[3954] exited with irqs disabled [ 119.225071] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 119.227539] R13: 0000000000000014 R14: ffff88806ce313e8 R15: dffffc0000000000 [ 119.228224] FS: 0000555580826400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 119.228983] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.229535] CR2: 000055558be40708 CR3: 00000000414cf000 CR4: 0000000000350ef0 [ 119.230207] Call Trace: [ 119.230460] [ 119.230677] ? __pfx_perf_tp_event+0x10/0x10 [ 119.231111] ? unwind_get_return_address+0x59/0xa0 [ 119.231602] ? stack_trace_save+0x8e/0xc0 [ 119.232007] ? stack_depot_save_flags+0x2c/0xa20 [ 119.232472] ? kasan_save_stack+0x34/0x50 [ 119.232882] ? kasan_save_stack+0x24/0x50 [ 119.233281] ? kasan_save_track+0x14/0x30 [ 119.233680] ? __kasan_save_free_info+0x3a/0x60 [ 119.234126] ? __kasan_slab_free+0x3f/0x50 [ 119.234535] ? kfree+0x281/0x550 [ 119.234871] ? ip6_dst_destroy+0x2e2/0x380 [ 119.235288] ? dst_destroy+0xc1/0x340 [ 119.235673] ? rcu_core+0x7c8/0x1800 [ 119.236034] ? handle_softirqs+0x1b1/0x770 [ 119.236452] ? __irq_exit_rcu+0xc4/0x100 [ 119.236850] ? irq_exit_rcu+0x9/0x20 [ 119.237214] ? sysvec_apic_timer_interrupt+0x70/0x80 [ 119.237710] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 119.238234] ? perf_trace_run_bpf_submit+0xef/0x180 [ 119.238722] ? kvm_sched_clock_read+0x16/0x30 [ 119.239153] ? sched_clock+0x37/0x60 [ 119.239525] perf_trace_run_bpf_submit+0xef/0x180 [ 119.239994] perf_trace_preemptirq_template+0x259/0x430 [ 119.240509] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 119.241063] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 119.241617] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 119.242068] ? lock_acquire+0x18c/0x2f0 [ 119.242453] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 119.243017] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 119.243510] trace_irq_enable.constprop.0+0xa6/0x100 [ 119.244000] trace_hardirqs_on+0x26/0x40 [ 119.244387] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 119.244857] delete_object_full+0x46/0x70 [ 119.245272] kmem_cache_free+0x33a/0x540 [ 119.245662] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 119.246160] ? dst_destroy+0x23c/0x340 [ 119.246548] ? rcu_core+0x7c3/0x1800 [ 119.246911] dst_destroy+0x23c/0x340 [ 119.247279] rcu_core+0x7c8/0x1800 [ 119.247637] ? __pfx_rcu_core+0x10/0x10 [ 119.248023] ? clockevents_program_event+0x135/0x360 [ 119.248511] ? tick_program_event+0xac/0x140 [ 119.248934] handle_softirqs+0x1b1/0x770 [ 119.249332] __irq_exit_rcu+0xc4/0x100 [ 119.249712] irq_exit_rcu+0x9/0x20 [ 119.250054] sysvec_apic_timer_interrupt+0x70/0x80 [ 119.250526] [ 119.250743] [ 119.250960] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 119.251466] RIP: 0010:copy_page_range+0x149b/0x5140 [ 119.251951] Code: 12 e8 79 96 d5 ff 48 b8 bf ff ff ff ff ff ff fb 48 21 c3 e8 67 96 d5 ff 48 8b 44 24 20 48 83 e3 df 48 c1 e8 03 42 80 3c 38 00 <0f> 85 41 2b 00 00 48 8b 44 24 20 48 83 7c 24 28 00 48 89 18 0f 85 [ 119.253659] RSP: 0018:ffff888016cff6c0 EFLAGS: 00000246 [ 119.254162] RAX: 1ffff11003875449 RBX: 800000003c589007 RCX: ffffffff819e602d [ 119.254835] RDX: ffff888016bc9b80 RSI: ffffffff819e6049 RDI: 0000000000000007 [ 119.255507] RBP: 0000000000000008 R08: 0000000000000000 R09: fffff940001e2c48 [ 119.256174] R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000028 [ 119.256838] R13: ffffea0000f16240 R14: ffffea0000f16240 R15: dffffc0000000000 [ 119.257510] ? copy_page_range+0x146d/0x5140 [ 119.257949] ? copy_page_range+0x1489/0x5140 [ 119.258384] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.258889] ? __pfx_copy_page_range+0x10/0x10 [ 119.259345] ? mas_destroy+0x5ce/0x9c0 [ 119.259729] ? __pfx_mas_store+0x10/0x10 [ 119.260120] ? lock_release+0x1c7/0x290 [ 119.260504] ? down_write+0x119/0x1f0 [ 119.260873] ? up_write+0x195/0x520 [ 119.261241] dup_mmap+0xd2f/0x1d10 [ 119.261595] ? __pfx_dup_mmap+0x10/0x10 [ 119.261987] ? lock_is_held_type+0x9e/0x120 [ 119.262413] copy_process+0x3ad5/0x73c0 [ 119.262798] ? __pfx_copy_process+0x10/0x10 [ 119.263219] ? do_raw_spin_lock+0x123/0x260 [ 119.263647] kernel_clone+0xea/0x7f0 [ 119.264007] ? __pfx_kernel_clone+0x10/0x10 [ 119.264421] ? __lock_acquire+0x694/0x1b70 [ 119.264826] ? css_rstat_updated+0x1b8/0x4d0 [ 119.265254] ? __pfx_css_rstat_updated+0x10/0x10 [ 119.265725] __do_sys_clone+0xce/0x120 [ 119.266102] ? __pfx___do_sys_clone+0x10/0x10 [ 119.266533] ? find_held_lock+0x2b/0x80 [ 119.266923] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 119.267424] do_syscall_64+0xbf/0x360 [ 119.267791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.268277] RIP: 0033:0x7f665736910b [ 119.268634] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 119.270341] RSP: 002b:00007ffd470c7700 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 119.271062] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f665736910b [ 119.271737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 119.272410] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555580826400 [ 119.273085] R10: 00005555808266d0 R11: 0000000000000246 R12: 0000000000000001 [ 119.273761] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd470c77e0 [ 119.274431] [ 119.274659] Modules linked in: [ 119.274969] ---[ end trace 0000000000000000 ]--- [ 119.274970] BUG: unable to handle page fault for address: ffffed1028c03106 [ 119.275431] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.275973] #PF: supervisor read access in kernel mode [ 119.276409] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 119.276810] #PF: error_code(0x0000) - not-present page [ 119.278511] RSP: 0018:ffff888047077780 EFLAGS: 00010016 [ 119.278916] PGD 7ffd4067 [ 119.278918] [ 119.278925] P4D 7ffd4067 [ 119.279428] RAX: 1ffff11028c03106 RBX: ffff888146018640 RCX: ffffc90007439000 [ 119.279647] PUD 7ffd3067 [ 119.279813] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: ffff888146018830 [ 119.280032] PMD 0 [ 119.280698] RBP: ffff8880470779f0 R08: ffff88806cf31340 R09: ffffe8ffffd160a0 [ 119.280914] [ 119.281577] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 119.281752] Oops: Oops: 0000 [#3] SMP KASAN NOPTI [ 119.282422] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 119.282564] CPU: 1 UID: 0 PID: 3954 Comm: syz-executor.7 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 119.283229] FS: 0000555580826400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 119.283613] Tainted: [D]=DIE, [W]=WARN [ 119.284274] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.285195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 119.285938] CR2: 000055558be40708 CR3: 00000000414cf000 CR4: 0000000000350ef0 [ 119.286238] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.286782] Kernel panic - not syncing: Fatal exception in interrupt [ 120.339200] Shutting down cpus with NMI [ 120.341131] Kernel Offset: disabled [ 120.341417] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 10:45:44 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84be3c0e RDX=fffffbfff0f0f609 RSI=0000000000000004 RDI=ffffffff8787b044 RBP=ffffffff8787b044 RSP=ffff88806ce08730 R8 =0000000000000000 R9 =fffffbfff0f0f608 R10=ffffffff8787b047 R11=202c746c75616620 R12=1ffff1100d9c10e7 R13=0000000000000007 R14=fffffbfff0f0f608 R15=ffff88806ce08768 RIP=ffffffff84be3da0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555580826400 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe2500000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055558be40708 CR3=00000000414cf000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff888047076f20 R8 =0000000000000000 R9 =ffffed100152a046 R10=0000000000000063 R11=0000000065646f43 R12=0000000000000063 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0 RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe5e9cab700 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=ffffed1028c03106 CR3=000000001c393000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fe5ec81c7c000007fe5ec81c7c8 XMM02=00007fe5ec81c7e000007fe5ec81c7c0 XMM03=00007fe5ec81c7c800007fe5ec81c7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000