Warning: Permanently added '[localhost]:22369' (ECDSA) to the list of known hosts. 2025/09/01 11:49:27 fuzzer started 2025/09/01 11:49:27 dialing manager at localhost:35473 syzkaller login: [ 44.454579] cgroup: Unknown subsys name 'net' [ 44.529690] cgroup: Unknown subsys name 'cpuset' [ 44.544747] cgroup: Unknown subsys name 'rlimit' 2025/09/01 11:49:37 syscalls: 2214 2025/09/01 11:49:37 code coverage: enabled 2025/09/01 11:49:37 comparison tracing: enabled 2025/09/01 11:49:37 extra coverage: enabled 2025/09/01 11:49:37 setuid sandbox: enabled 2025/09/01 11:49:37 namespace sandbox: enabled 2025/09/01 11:49:37 Android sandbox: enabled 2025/09/01 11:49:37 fault injection: enabled 2025/09/01 11:49:37 leak checking: enabled 2025/09/01 11:49:37 net packet injection: enabled 2025/09/01 11:49:37 net device setup: enabled 2025/09/01 11:49:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 11:49:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 11:49:37 USB emulation: enabled 2025/09/01 11:49:37 hci packet injection: enabled 2025/09/01 11:49:37 wifi device emulation: enabled 2025/09/01 11:49:37 802.15.4 emulation: enabled 2025/09/01 11:49:37 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 11:49:37 fetching corpus: 50, signal 19794/23368 (executing program) 2025/09/01 11:49:38 fetching corpus: 100, signal 30938/35953 (executing program) 2025/09/01 11:49:38 fetching corpus: 150, signal 38978/45329 (executing program) 2025/09/01 11:49:38 fetching corpus: 200, signal 47049/54618 (executing program) 2025/09/01 11:49:38 fetching corpus: 250, signal 50715/59593 (executing program) 2025/09/01 11:49:38 fetching corpus: 300, signal 55193/65225 (executing program) 2025/09/01 11:49:38 fetching corpus: 350, signal 58604/69756 (executing program) 2025/09/01 11:49:38 fetching corpus: 400, signal 64258/76324 (executing program) 2025/09/01 11:49:38 fetching corpus: 450, signal 67975/80990 (executing program) 2025/09/01 11:49:38 fetching corpus: 500, signal 73297/86973 (executing program) 2025/09/01 11:49:38 fetching corpus: 550, signal 77812/92171 (executing program) 2025/09/01 11:49:38 fetching corpus: 600, signal 80110/95321 (executing program) 2025/09/01 11:49:38 fetching corpus: 650, signal 81966/98135 (executing program) 2025/09/01 11:49:39 fetching corpus: 700, signal 83986/100986 (executing program) 2025/09/01 11:49:39 fetching corpus: 750, signal 86388/104118 (executing program) 2025/09/01 11:49:39 fetching corpus: 800, signal 87933/106487 (executing program) 2025/09/01 11:49:39 fetching corpus: 850, signal 89933/109242 (executing program) 2025/09/01 11:49:39 fetching corpus: 900, signal 91785/111800 (executing program) 2025/09/01 11:49:39 fetching corpus: 950, signal 93391/114111 (executing program) 2025/09/01 11:49:39 fetching corpus: 1000, signal 95797/117017 (executing program) 2025/09/01 11:49:39 fetching corpus: 1050, signal 98190/119886 (executing program) 2025/09/01 11:49:39 fetching corpus: 1100, signal 99464/121801 (executing program) 2025/09/01 11:49:39 fetching corpus: 1150, signal 100780/123769 (executing program) 2025/09/01 11:49:39 fetching corpus: 1200, signal 102417/125915 (executing program) 2025/09/01 11:49:39 fetching corpus: 1250, signal 104058/128092 (executing program) 2025/09/01 11:49:40 fetching corpus: 1300, signal 105495/130044 (executing program) 2025/09/01 11:49:40 fetching corpus: 1350, signal 106335/131561 (executing program) 2025/09/01 11:49:40 fetching corpus: 1400, signal 107946/133583 (executing program) 2025/09/01 11:49:40 fetching corpus: 1450, signal 109491/135564 (executing program) 2025/09/01 11:49:40 fetching corpus: 1500, signal 111885/138050 (executing program) 2025/09/01 11:49:40 fetching corpus: 1550, signal 112612/139374 (executing program) 2025/09/01 11:49:40 fetching corpus: 1600, signal 113972/141127 (executing program) 2025/09/01 11:49:40 fetching corpus: 1650, signal 115210/142738 (executing program) 2025/09/01 11:49:40 fetching corpus: 1700, signal 116223/144189 (executing program) 2025/09/01 11:49:40 fetching corpus: 1750, signal 117456/145750 (executing program) 2025/09/01 11:49:40 fetching corpus: 1800, signal 118528/147216 (executing program) 2025/09/01 11:49:41 fetching corpus: 1850, signal 119456/148578 (executing program) 2025/09/01 11:49:41 fetching corpus: 1900, signal 120859/150202 (executing program) 2025/09/01 11:49:41 fetching corpus: 1950, signal 121599/151404 (executing program) 2025/09/01 11:49:41 fetching corpus: 2000, signal 122680/152792 (executing program) 2025/09/01 11:49:41 fetching corpus: 2050, signal 123626/154092 (executing program) 2025/09/01 11:49:41 fetching corpus: 2100, signal 124662/155387 (executing program) 2025/09/01 11:49:41 fetching corpus: 2150, signal 125478/156577 (executing program) 2025/09/01 11:49:41 fetching corpus: 2200, signal 126255/157709 (executing program) 2025/09/01 11:49:41 fetching corpus: 2250, signal 126893/158779 (executing program) 2025/09/01 11:49:41 fetching corpus: 2300, signal 127503/159799 (executing program) 2025/09/01 11:49:41 fetching corpus: 2350, signal 127915/160710 (executing program) 2025/09/01 11:49:42 fetching corpus: 2400, signal 128567/161731 (executing program) 2025/09/01 11:49:42 fetching corpus: 2450, signal 129540/162868 (executing program) 2025/09/01 11:49:42 fetching corpus: 2500, signal 130309/163886 (executing program) 2025/09/01 11:49:42 fetching corpus: 2550, signal 131091/164907 (executing program) 2025/09/01 11:49:42 fetching corpus: 2600, signal 131816/165920 (executing program) 2025/09/01 11:49:42 fetching corpus: 2650, signal 132869/167071 (executing program) 2025/09/01 11:49:42 fetching corpus: 2700, signal 133481/168003 (executing program) 2025/09/01 11:49:42 fetching corpus: 2750, signal 134109/168871 (executing program) 2025/09/01 11:49:42 fetching corpus: 2800, signal 135120/169884 (executing program) 2025/09/01 11:49:42 fetching corpus: 2850, signal 135615/170683 (executing program) 2025/09/01 11:49:42 fetching corpus: 2900, signal 136488/171657 (executing program) 2025/09/01 11:49:42 fetching corpus: 2950, signal 137191/172523 (executing program) 2025/09/01 11:49:43 fetching corpus: 3000, signal 137763/173296 (executing program) 2025/09/01 11:49:43 fetching corpus: 3050, signal 138340/174055 (executing program) 2025/09/01 11:49:43 fetching corpus: 3100, signal 139041/174906 (executing program) 2025/09/01 11:49:43 fetching corpus: 3150, signal 140521/175946 (executing program) 2025/09/01 11:49:43 fetching corpus: 3200, signal 141386/176815 (executing program) 2025/09/01 11:49:43 fetching corpus: 3250, signal 141900/177530 (executing program) 2025/09/01 11:49:43 fetching corpus: 3300, signal 142460/178251 (executing program) 2025/09/01 11:49:43 fetching corpus: 3350, signal 143284/179012 (executing program) 2025/09/01 11:49:43 fetching corpus: 3400, signal 143850/179702 (executing program) 2025/09/01 11:49:43 fetching corpus: 3450, signal 144337/180317 (executing program) 2025/09/01 11:49:43 fetching corpus: 3500, signal 144910/181036 (executing program) 2025/09/01 11:49:43 fetching corpus: 3550, signal 145481/181686 (executing program) 2025/09/01 11:49:44 fetching corpus: 3600, signal 146176/182356 (executing program) 2025/09/01 11:49:44 fetching corpus: 3650, signal 146676/182960 (executing program) 2025/09/01 11:49:44 fetching corpus: 3700, signal 147076/183541 (executing program) 2025/09/01 11:49:44 fetching corpus: 3750, signal 147612/184130 (executing program) 2025/09/01 11:49:44 fetching corpus: 3800, signal 148064/184755 (executing program) 2025/09/01 11:49:44 fetching corpus: 3850, signal 148903/185397 (executing program) 2025/09/01 11:49:44 fetching corpus: 3900, signal 149594/186031 (executing program) 2025/09/01 11:49:44 fetching corpus: 3950, signal 150114/186592 (executing program) 2025/09/01 11:49:44 fetching corpus: 4000, signal 150587/187134 (executing program) 2025/09/01 11:49:44 fetching corpus: 4050, signal 151538/187769 (executing program) 2025/09/01 11:49:44 fetching corpus: 4100, signal 151872/188262 (executing program) 2025/09/01 11:49:45 fetching corpus: 4150, signal 152362/188765 (executing program) 2025/09/01 11:49:45 fetching corpus: 4200, signal 153401/189328 (executing program) 2025/09/01 11:49:45 fetching corpus: 4250, signal 154088/189844 (executing program) 2025/09/01 11:49:45 fetching corpus: 4300, signal 154556/190299 (executing program) 2025/09/01 11:49:45 fetching corpus: 4350, signal 155305/190766 (executing program) 2025/09/01 11:49:45 fetching corpus: 4400, signal 156162/191237 (executing program) 2025/09/01 11:49:45 fetching corpus: 4450, signal 156519/191631 (executing program) 2025/09/01 11:49:45 fetching corpus: 4500, signal 157038/192109 (executing program) 2025/09/01 11:49:45 fetching corpus: 4550, signal 157449/192513 (executing program) 2025/09/01 11:49:45 fetching corpus: 4600, signal 157790/192913 (executing program) 2025/09/01 11:49:46 fetching corpus: 4650, signal 158143/193292 (executing program) 2025/09/01 11:49:46 fetching corpus: 4700, signal 159093/193661 (executing program) 2025/09/01 11:49:46 fetching corpus: 4750, signal 159486/193879 (executing program) 2025/09/01 11:49:46 fetching corpus: 4800, signal 159902/193904 (executing program) 2025/09/01 11:49:46 fetching corpus: 4850, signal 160472/193934 (executing program) 2025/09/01 11:49:46 fetching corpus: 4900, signal 160983/193939 (executing program) 2025/09/01 11:49:46 fetching corpus: 4950, signal 161401/193939 (executing program) 2025/09/01 11:49:46 fetching corpus: 5000, signal 161810/193947 (executing program) 2025/09/01 11:49:46 fetching corpus: 5050, signal 162182/193958 (executing program) 2025/09/01 11:49:46 fetching corpus: 5100, signal 162932/193988 (executing program) 2025/09/01 11:49:46 fetching corpus: 5150, signal 163215/193988 (executing program) 2025/09/01 11:49:46 fetching corpus: 5200, signal 163871/193989 (executing program) 2025/09/01 11:49:47 fetching corpus: 5250, signal 164238/194022 (executing program) 2025/09/01 11:49:47 fetching corpus: 5300, signal 164694/194036 (executing program) 2025/09/01 11:49:47 fetching corpus: 5350, signal 165076/194041 (executing program) 2025/09/01 11:49:47 fetching corpus: 5400, signal 165468/194060 (executing program) 2025/09/01 11:49:47 fetching corpus: 5450, signal 165795/194065 (executing program) 2025/09/01 11:49:47 fetching corpus: 5500, signal 166166/194091 (executing program) 2025/09/01 11:49:47 fetching corpus: 5550, signal 166716/194092 (executing program) 2025/09/01 11:49:47 fetching corpus: 5600, signal 167049/194095 (executing program) 2025/09/01 11:49:47 fetching corpus: 5650, signal 167451/194097 (executing program) 2025/09/01 11:49:47 fetching corpus: 5700, signal 167898/194102 (executing program) 2025/09/01 11:49:48 fetching corpus: 5750, signal 168335/194107 (executing program) 2025/09/01 11:49:48 fetching corpus: 5800, signal 168847/194152 (executing program) 2025/09/01 11:49:48 fetching corpus: 5850, signal 169023/194163 (executing program) 2025/09/01 11:49:48 fetching corpus: 5900, signal 169307/194163 (executing program) 2025/09/01 11:49:48 fetching corpus: 5950, signal 169777/194167 (executing program) 2025/09/01 11:49:48 fetching corpus: 6000, signal 170155/194167 (executing program) 2025/09/01 11:49:48 fetching corpus: 6050, signal 170582/194169 (executing program) 2025/09/01 11:49:48 fetching corpus: 6100, signal 170875/194174 (executing program) 2025/09/01 11:49:48 fetching corpus: 6150, signal 171243/194176 (executing program) 2025/09/01 11:49:48 fetching corpus: 6200, signal 171547/194184 (executing program) 2025/09/01 11:49:48 fetching corpus: 6250, signal 172140/194190 (executing program) 2025/09/01 11:49:48 fetching corpus: 6300, signal 172488/194192 (executing program) 2025/09/01 11:49:49 fetching corpus: 6350, signal 172833/194193 (executing program) 2025/09/01 11:49:49 fetching corpus: 6400, signal 173168/194210 (executing program) 2025/09/01 11:49:49 fetching corpus: 6450, signal 173521/194262 (executing program) 2025/09/01 11:49:49 fetching corpus: 6500, signal 174230/194290 (executing program) 2025/09/01 11:49:49 fetching corpus: 6550, signal 174507/194297 (executing program) 2025/09/01 11:49:49 fetching corpus: 6600, signal 174911/194300 (executing program) 2025/09/01 11:49:49 fetching corpus: 6650, signal 175208/194303 (executing program) 2025/09/01 11:49:49 fetching corpus: 6700, signal 175637/194303 (executing program) 2025/09/01 11:49:49 fetching corpus: 6750, signal 176041/194318 (executing program) 2025/09/01 11:49:49 fetching corpus: 6800, signal 176381/194322 (executing program) 2025/09/01 11:49:49 fetching corpus: 6850, signal 176579/194331 (executing program) 2025/09/01 11:49:49 fetching corpus: 6900, signal 176881/194331 (executing program) 2025/09/01 11:49:50 fetching corpus: 6950, signal 177140/194343 (executing program) 2025/09/01 11:49:50 fetching corpus: 7000, signal 177413/194343 (executing program) 2025/09/01 11:49:50 fetching corpus: 7050, signal 177862/194343 (executing program) 2025/09/01 11:49:50 fetching corpus: 7100, signal 178255/194357 (executing program) 2025/09/01 11:49:50 fetching corpus: 7150, signal 178597/194357 (executing program) 2025/09/01 11:49:50 fetching corpus: 7200, signal 178819/194361 (executing program) 2025/09/01 11:49:50 fetching corpus: 7250, signal 179017/194362 (executing program) 2025/09/01 11:49:50 fetching corpus: 7300, signal 179303/194366 (executing program) 2025/09/01 11:49:50 fetching corpus: 7350, signal 179672/194368 (executing program) 2025/09/01 11:49:50 fetching corpus: 7400, signal 181727/194377 (executing program) 2025/09/01 11:49:50 fetching corpus: 7450, signal 182087/194378 (executing program) 2025/09/01 11:49:51 fetching corpus: 7500, signal 182707/194387 (executing program) 2025/09/01 11:49:51 fetching corpus: 7550, signal 182995/194392 (executing program) 2025/09/01 11:49:51 fetching corpus: 7600, signal 183220/194397 (executing program) 2025/09/01 11:49:51 fetching corpus: 7650, signal 183492/194417 (executing program) 2025/09/01 11:49:51 fetching corpus: 7700, signal 183801/194428 (executing program) 2025/09/01 11:49:51 fetching corpus: 7750, signal 184103/194444 (executing program) 2025/09/01 11:49:51 fetching corpus: 7800, signal 184551/194455 (executing program) 2025/09/01 11:49:51 fetching corpus: 7850, signal 184855/194469 (executing program) 2025/09/01 11:49:51 fetching corpus: 7900, signal 185091/194485 (executing program) 2025/09/01 11:49:51 fetching corpus: 7950, signal 185398/194516 (executing program) 2025/09/01 11:49:51 fetching corpus: 8000, signal 185722/194521 (executing program) 2025/09/01 11:49:51 fetching corpus: 8050, signal 186062/194527 (executing program) 2025/09/01 11:49:52 fetching corpus: 8100, signal 186330/194529 (executing program) 2025/09/01 11:49:52 fetching corpus: 8150, signal 186617/194603 (executing program) 2025/09/01 11:49:52 fetching corpus: 8200, signal 186872/194614 (executing program) 2025/09/01 11:49:52 fetching corpus: 8250, signal 187203/194614 (executing program) 2025/09/01 11:49:52 fetching corpus: 8300, signal 187459/194621 (executing program) 2025/09/01 11:49:52 fetching corpus: 8350, signal 187728/194626 (executing program) 2025/09/01 11:49:52 fetching corpus: 8400, signal 187967/194631 (executing program) 2025/09/01 11:49:52 fetching corpus: 8450, signal 188170/194639 (executing program) 2025/09/01 11:49:52 fetching corpus: 8500, signal 188375/194663 (executing program) 2025/09/01 11:49:52 fetching corpus: 8550, signal 188655/194681 (executing program) 2025/09/01 11:49:52 fetching corpus: 8600, signal 188934/194688 (executing program) 2025/09/01 11:49:52 fetching corpus: 8650, signal 189440/194688 (executing program) 2025/09/01 11:49:53 fetching corpus: 8700, signal 189611/194688 (executing program) 2025/09/01 11:49:53 fetching corpus: 8750, signal 189924/194688 (executing program) 2025/09/01 11:49:53 fetching corpus: 8800, signal 190184/194692 (executing program) 2025/09/01 11:49:53 fetching corpus: 8850, signal 190436/194694 (executing program) 2025/09/01 11:49:53 fetching corpus: 8900, signal 190655/194696 (executing program) 2025/09/01 11:49:53 fetching corpus: 8950, signal 190890/194703 (executing program) 2025/09/01 11:49:53 fetching corpus: 9000, signal 191197/194705 (executing program) 2025/09/01 11:49:53 fetching corpus: 9050, signal 191464/194713 (executing program) 2025/09/01 11:49:53 fetching corpus: 9080, signal 191753/194716 (executing program) 2025/09/01 11:49:53 fetching corpus: 9082, signal 191757/194716 (executing program) 2025/09/01 11:49:53 fetching corpus: 9082, signal 191757/194716 (executing program) 2025/09/01 11:49:55 starting 8 fuzzer processes 11:49:55 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/udp\x00') pread64(r0, &(0x7f0000000200)=""/193, 0xc1, 0x0) 11:49:55 executing program 5: fsopen(&(0x7f0000000000)='rootfs\x00', 0x0) 11:49:55 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') pread64(r0, &(0x7f0000000200)=""/250, 0xfa, 0x12a) 11:49:55 executing program 6: getpgrp(0x0) 11:49:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002380)={0xffffffffffffffff}) connect(r0, &(0x7f00000023c0)=@rc={0x1f, @fixed}, 0x80) [ 72.042567] audit: type=1400 audit(1756727395.688:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:49:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rpc\x00') getdents(r0, &(0x7f0000001080)=""/204, 0x18) getdents64(r0, &(0x7f0000000080)=""/127, 0x7f) 11:49:55 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/255, 0xff}], 0x1}, 0x0) 11:49:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) [ 73.174273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.176367] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.180837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.185738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.188740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.313871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.317704] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.319821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.323463] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.325658] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.347805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.352777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.356394] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.362683] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.366776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.373100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.376046] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.377714] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.382392] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.396373] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.400279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.408900] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 73.410360] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.412284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.414046] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.417410] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 73.419755] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.421254] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 73.430418] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.439050] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 73.441369] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 73.449243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.449481] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 73.457179] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.458950] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.462632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.462675] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 73.473799] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 73.479905] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 73.482861] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 75.271130] Bluetooth: hci0: command tx timeout [ 75.398576] Bluetooth: hci1: command tx timeout [ 75.398633] Bluetooth: hci2: command tx timeout [ 75.462701] Bluetooth: hci3: command tx timeout [ 75.525640] Bluetooth: hci4: command tx timeout [ 75.525764] Bluetooth: hci5: command tx timeout [ 75.526227] Bluetooth: hci6: command tx timeout [ 75.526993] Bluetooth: hci7: command tx timeout [ 77.318636] Bluetooth: hci0: command tx timeout [ 77.445628] Bluetooth: hci2: command tx timeout [ 77.445776] Bluetooth: hci1: command tx timeout [ 77.509704] Bluetooth: hci3: command tx timeout [ 77.573836] Bluetooth: hci6: command tx timeout [ 77.575029] Bluetooth: hci5: command tx timeout [ 77.575616] Bluetooth: hci7: command tx timeout [ 77.575793] Bluetooth: hci4: command tx timeout [ 79.365698] Bluetooth: hci0: command tx timeout [ 79.493576] Bluetooth: hci1: command tx timeout [ 79.494053] Bluetooth: hci2: command tx timeout [ 79.557639] Bluetooth: hci3: command tx timeout [ 79.621594] Bluetooth: hci5: command tx timeout [ 79.622035] Bluetooth: hci7: command tx timeout [ 79.622412] Bluetooth: hci4: command tx timeout [ 79.622838] Bluetooth: hci6: command tx timeout [ 81.413616] Bluetooth: hci0: command tx timeout [ 81.542590] Bluetooth: hci1: command tx timeout [ 81.543352] Bluetooth: hci2: command tx timeout [ 81.605771] Bluetooth: hci3: command tx timeout [ 81.670551] Bluetooth: hci6: command tx timeout [ 81.671261] Bluetooth: hci4: command tx timeout [ 81.672012] Bluetooth: hci7: command tx timeout [ 81.672751] Bluetooth: hci5: command tx timeout [ 111.010858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.011605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.287126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.288289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.395785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.396416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.604929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.605682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.760884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.761490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.783708] audit: type=1400 audit(1756727435.425:8): avc: denied { open } for pid=3830 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 111.790609] audit: type=1400 audit(1756727435.425:9): avc: denied { kernel } for pid=3830 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 111.846229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.846824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.206973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.207633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.352657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.353309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.485063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.485711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.547146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.548038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.603445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.604629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.705562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.706189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.751139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.751870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.831676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.832282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.942682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.943905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.059969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.061151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:50:36 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/udp\x00') pread64(r0, &(0x7f0000000200)=""/193, 0xc1, 0x0) 11:50:36 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x4}) 11:50:36 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 11:50:36 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x7, &(0x7f0000000100)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0177b3bec90000000000001a00"/27], 0x14}}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x9, r1, &(0x7f0000000140)="19c442210570fe2ecb24a1e905cbbb289cec1dbba201ff533ae056309655de5540b26ad6d84da02a816d962760c899", 0x2f, 0x5, 0x0, 0x2, r3}]) dup(0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 11:50:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rpc\x00') getdents(r0, &(0x7f0000001080)=""/204, 0x18) getdents64(r0, &(0x7f0000000080)=""/127, 0x7f) 11:50:36 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/ipc\x00') ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) 11:50:36 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_PACK_ID(r2, 0x227a, 0x0) 11:50:36 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000001380), r0) 11:50:37 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/udp\x00') pread64(r0, &(0x7f0000000200)=""/193, 0xc1, 0x0) 11:50:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rpc\x00') getdents(r0, &(0x7f0000001080)=""/204, 0x18) getdents64(r0, &(0x7f0000000080)=""/127, 0x7f) [ 113.374372] BUG: unable to handle page fault for address: ffffed10212c9296 [ 113.375474] #PF: supervisor read access in kernel mode [ 113.376332] #PF: error_code(0x0000) - not-present page [ 113.377171] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 [ 113.383484] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 113.384239] CPU: 0 UID: 0 PID: 3919 Comm: syz-executor.7 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 113.386060] Tainted: [W]=WARN [ 113.386554] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 113.387802] RIP: 0010:perf_tp_event+0x175/0xe70 [ 113.388540] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 113.391296] RSP: 0018:ffff888016457800 EFLAGS: 00010216 [ 113.392111] RAX: 1ffff110212c9296 RBX: ffff8881096492c0 RCX: ffffc90002ca0000 [ 113.393200] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: ffff8881096494b0 [ 113.394285] RBP: ffff888016457a70 R08: ffff88806ce31340 R09: ffffe8ffffc06938 [ 113.395370] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 113.396453] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 113.397542] FS: 00007ff882c41700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 113.398765] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.399650] CR2: ffffed10212c9296 CR3: 000000001b9b5000 CR4: 0000000000350ef0 [ 113.400754] Call Trace: [ 113.401160] [ 113.401517] ? perf_swevent_event+0x63/0x3f0 [ 113.402217] ? __pfx_perf_tp_event+0x10/0x10 [ 113.402915] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 113.403688] ? perf_swevent_event+0x63/0x3f0 [ 113.404381] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 113.405159] ? perf_swevent_event+0x63/0x3f0 [ 113.405854] ? perf_tp_event+0x807/0xe70 [ 113.406500] ? __pfx_perf_tp_event+0x10/0x10 [ 113.407200] ? __perf_install_in_context+0x503/0xb90 [ 113.407982] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 113.408889] ? do_raw_spin_unlock+0x53/0x220 [ 113.409590] ? perf_trace_run_bpf_submit+0xef/0x180 [ 113.410370] perf_trace_run_bpf_submit+0xef/0x180 [ 113.411142] perf_trace_lock+0x337/0x5d0 [ 113.411783] ? __pfx_perf_trace_lock+0x10/0x10 [ 113.412505] ? lock_acquire+0x15e/0x2f0 [ 113.413163] ? futex_ref_get+0x48/0x300 [ 113.413793] ? futex_ref_get+0x114/0x300 [ 113.414418] ? futex_hash+0x15c/0x390 [ 113.415013] lock_release+0x1ab/0x290 [ 113.415632] ? futex_hash+0x15c/0x390 [ 113.416226] futex_ref_get+0x119/0x300 [ 113.416839] ? futex_hash+0x15c/0x390 [ 113.417431] futex_hash+0x70/0x390 [ 113.417993] futex_wake+0x143/0x540 [ 113.418578] ? __pfx_perf_trace_lock+0x10/0x10 [ 113.419296] ? __pfx_futex_wake+0x10/0x10 [ 113.419947] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 113.420745] ? lock_release+0xc8/0x290 [ 113.421363] do_futex+0x26d/0x370 [ 113.421922] ? __pfx_do_futex+0x10/0x10 [ 113.422548] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 113.423370] ? find_held_lock+0x2b/0x80 [ 113.424005] __x64_sys_futex+0x1c9/0x4d0 [ 113.424645] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 113.425546] ? __pfx___x64_sys_futex+0x10/0x10 [ 113.426276] do_syscall_64+0xbf/0x360 [ 113.426877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.427677] RIP: 0033:0x7ff8856cbb19 [ 113.428261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 113.431041] RSP: 002b:00007ff882c41218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 113.432199] RAX: ffffffffffffffda RBX: 00007ff8857def68 RCX: 00007ff8856cbb19 [ 113.433288] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff8857def6c [ 113.434378] RBP: 00007ff8857def60 R08: 000000000000000e R09: 0000000000000000 [ 113.435467] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ff8857def6c [ 113.436546] R13: 00007fffa20cb33f R14: 00007ff882c41300 R15: 0000000000022000 [ 113.437654] [ 113.438023] Modules linked in: [ 113.438529] CR2: ffffed10212c9296 [ 113.439071] ---[ end trace 0000000000000000 ]--- [ 113.439073] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 113.439801] RIP: 0010:perf_tp_event+0x175/0xe70 [ 113.440705] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 113.441401] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 113.441984] CPU: 1 UID: 0 PID: 3921 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 113.444736] RSP: 0018:ffff888016457800 EFLAGS: 00010216 [ 113.445652] Tainted: [D]=DIE, [W]=WARN [ 113.445660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 113.446450] RAX: 1ffff110212c9296 RBX: ffff8881096492c0 RCX: ffffc90002ca0000 [ 113.446748] RIP: 0010:perf_tp_event+0x175/0xe70 [ 113.447989] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: ffff8881096494b0 [ 113.448541] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 113.449261] RBP: ffff888016457a70 R08: ffff88806ce31340 R09: ffffe8ffffc06938 [ 113.449812] RSP: 0018:ffff8880460bf800 EFLAGS: 00010212 [ 113.452565] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 113.453121] [ 113.453127] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 113.453926] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 113.454475] RDX: ffff888044248000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 113.454746] FS: 00007ff882c41700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 113.455289] RBP: ffff8880460bfa70 R08: ffff88806cf31340 R09: ffffe8ffffd06938 [ 113.456368] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.456926] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 113.458149] CR2: ffffed10212c9296 CR3: 000000001b9b5000 CR4: 0000000000350ef0 [ 113.458694] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 113.459582] note: syz-executor.7[3919] exited with irqs disabled [ 113.460132] FS: 000055557dbc6400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 113.462853] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.463316] CR2: 000055557dbc7c18 CR3: 000000001750c000 CR4: 0000000000350ef0 [ 113.463878] Call Trace: [ 113.464088] [ 113.464275] ? arch_scale_cpu_capacity+0x17/0xa0 [ 113.464673] ? __pfx_perf_tp_event+0x10/0x10 [ 113.465029] ? __asan_memset+0x24/0x50 [ 113.465358] ? __pfx_perf_trace_lock+0x10/0x10 [ 113.465729] ? __pfx___mutex_lock+0x10/0x10 [ 113.466083] ? perf_trace_lock+0xb5/0x5d0 [ 113.466421] ? kvm_sched_clock_read+0x16/0x30 [ 113.466787] ? sched_clock+0x37/0x60 [ 113.467093] ? sched_clock_cpu+0x6c/0x4e0 [ 113.467435] ? perf_trace_run_bpf_submit+0xef/0x180 [ 113.467833] perf_trace_run_bpf_submit+0xef/0x180 [ 113.468224] perf_trace_lock+0x337/0x5d0 [ 113.468552] ? __pfx_perf_trace_lock+0x10/0x10 [ 113.468929] ? __pfx_perf_trace_lock+0x10/0x10 [ 113.469298] ? get_futex_key+0x592/0x14a0 [ 113.469633] ? futex_ref_get+0x114/0x300 [ 113.469956] ? futex_hash+0x15c/0x390 [ 113.470264] lock_release+0x1ab/0x290 [ 113.470580] ? futex_hash+0x15c/0x390 [ 113.470890] futex_ref_get+0x119/0x300 [ 113.471207] ? futex_hash+0x15c/0x390 [ 113.471516] futex_hash+0x70/0x390 [ 113.471807] futex_wake+0x143/0x540 [ 113.472114] ? put_pid+0x1f/0x30 [ 113.472395] ? kernel_clone+0x204/0x7f0 [ 113.472727] ? __pfx_futex_wake+0x10/0x10 [ 113.473069] ? __pfx_kernel_clone+0x10/0x10 [ 113.473422] ? perf_trace_lock+0xb5/0x5d0 [ 113.473763] ? __pfx___handle_mm_fault+0x10/0x10 [ 113.474160] do_futex+0x26d/0x370 [ 113.474448] ? __pfx_do_futex+0x10/0x10 [ 113.474775] ? __pfx___do_sys_clone+0x10/0x10 [ 113.475138] ? handle_mm_fault+0x590/0x9b0 [ 113.475491] __x64_sys_futex+0x1c9/0x4d0 [ 113.475821] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 113.476293] ? __pfx___x64_sys_futex+0x10/0x10 [ 113.476678] do_syscall_64+0xbf/0x360 [ 113.476988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.477403] RIP: 0033:0x7fd3f2708b19 [ 113.477703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 113.479139] RSP: 002b:00007fffca1ae058 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 113.479739] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd3f2708b19 [ 113.480311] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd3f281bf68 [ 113.480890] RBP: 00007fd3f281bf60 R08: 00007fd3efc7e700 R09: 0000000000000000 [ 113.481458] R10: 00007fd3efc7e700 R11: 0000000000000246 R12: 00007fd3f2820070 [ 113.482027] R13: 00007fffca1ae160 R14: 00007fd3f281bf60 R15: 000000000001ba86 [ 113.482605] [ 113.482796] Modules linked in: [ 113.483064] BUG: unable to handle page fault for address: ffffed10212c9296 [ 113.484157] #PF: supervisor read access in kernel mode [ 113.484989] #PF: error_code(0x0000) - not-present page [ 113.485807] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 [ 113.486698] Oops: Oops: 0000 [#3] SMP KASAN NOPTI [ 113.487470] CPU: 0 UID: 0 PID: 3919 Comm: syz-executor.7 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 113.489353] Tainted: [D]=DIE, [W]=WARN [ 113.489957] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 113.491248] RIP: 0010:perf_tp_event+0x175/0xe70 [ 113.491998] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 113.494845] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010016 [ 113.495684] RAX: 1ffff110212c9296 RBX: ffff8881096492c0 RCX: 0000000000000002 [ 113.496809] RDX: ffff888013ff3700 RSI: ffffffff8189a4e7 RDI: ffff8881096494b0 [ 113.497926] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc06938 [ 113.499069] R10: 0000000000000000 R11: ffff888017613c98 R12: dffffc0000000000 [ 113.500194] R13: 0000000000000024 R14: ffff88806ce31490 R15: dffffc0000000000 [ 113.501330] FS: 00007ff882c41700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 113.502602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.503521] CR2: ffffed10212c9296 CR3: 000000001b9b5000 CR4: 0000000000350ef0 [ 113.504680] Call Trace: [ 113.505106] [ 113.505481] ? __pfx_perf_tp_event+0x10/0x10 [ 113.506218] ? sched_clock_cpu+0x6c/0x4e0 [ 113.506914] ? lock_is_held_type+0x9e/0x120 [ 113.507630] ? lock_is_held_type+0x9e/0x120 [ 113.508348] ? perf_trace_lock+0xb5/0x5d0 [ 113.509034] ? perf_trace_lock+0xb5/0x5d0 [ 113.509719] ? __pfx_perf_trace_lock+0x10/0x10 [ 113.510476] ? kvm_sched_clock_read+0x16/0x30 [ 113.511220] ? sched_clock+0x37/0x60 [ 113.511846] ? sched_clock_cpu+0x6c/0x4e0 [ 113.512535] ? perf_trace_run_bpf_submit+0xef/0x180 [ 113.513366] perf_trace_run_bpf_submit+0xef/0x180 [ 113.514170] perf_trace_lock+0x337/0x5d0 [ 113.514848] ? __pfx_perf_trace_lock+0x10/0x10 [ 113.515611] ? check_preempt_wakeup_fair+0x6e/0x950 [ 113.516443] ? sched_ttwu_pending+0x2e0/0x4a0 [ 113.517207] lock_release+0x1ab/0x290 [ 113.517843] ? ttwu_do_activate+0x1a4/0x8a0 [ 113.518564] _raw_spin_unlock+0x16/0x40 [ 113.519233] sched_ttwu_pending+0x2e0/0x4a0 [ 113.519960] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 113.520776] ? hrtimer_interrupt+0x652/0x830 [ 113.521510] __flush_smp_call_function_queue+0x434/0x740 [ 113.522413] __sysvec_call_function_single+0x6d/0x370 [ 113.523277] sysvec_call_function_single+0xa1/0xc0 [ 113.524093] [ 113.524476] [ 113.524864] asm_sysvec_call_function_single+0x1a/0x20 [ 113.525729] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 113.526505] Code: 38 00 85 db 0f 84 21 01 00 00 e8 09 a6 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 57 a1 38 00 48 85 db 0f 84 17 01 00 00 e9 a5 38 00 31 ff 65 8b 1d 60 2f 49 06 81 e3 ff ff ff 7f 89 de [ 113.529446] RSP: 0018:ffff888016457f28 EFLAGS: 00000246 [ 113.530299] RAX: 0000000000000001 RBX: ffff888013ff3700 RCX: ffffffff817c3ab6 [ 113.531441] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 113.532574] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 113.533727] R10: ffffffff8643b457 R11: 3030303030302043 R12: ffff888013ff3700 [ 113.534864] R13: 0000000000000009 R14: ffff8880164577e0 R15: 0000000000000000 [ 113.536016] ? trace_irq_enable.constprop.0+0x26/0x100 [ 113.536868] ? make_task_dead+0x214/0x3b0 [ 113.537545] ? make_task_dead+0x214/0x3b0 [ 113.538223] ? do_syscall_64+0xbf/0x360 [ 113.538875] rewind_stack_and_make_dead+0x16/0x20 [ 113.539671] RIP: 0033:0x7ff8856cbb19 [ 113.540277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 113.543169] RSP: 002b:00007ff882c41218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 113.544374] RAX: ffffffffffffffda RBX: 00007ff8857def68 RCX: 00007ff8856cbb19 [ 113.545538] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff8857def6c [ 113.546683] RBP: 00007ff8857def60 R08: 000000000000000e R09: 0000000000000000 [ 113.547818] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ff8857def6c [ 113.548966] R13: 00007fffa20cb33f R14: 00007ff882c41300 R15: 0000000000022000 [ 113.550127] [ 113.550510] Modules linked in: [ 113.551041] CR2: ffffed10212c9296 [ 113.551600] ---[ end trace 0000000000000000 ]--- [ 113.551601] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#4] SMP KASAN NOPTI [ 113.551616] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 113.552355] RIP: 0010:perf_tp_event+0x175/0xe70 [ 113.553218] CPU: 1 UID: 0 PID: 3921 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 113.554414] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 113.554772] Tainted: [D]=DIE, [W]=WARN [ 113.556494] RSP: 0018:ffff888016457800 EFLAGS: 00010216 [ 113.557894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 113.558442] [ 113.558844] RIP: 0010:perf_tp_event+0x175/0xe70 [ 113.560007] RAX: 1ffff110212c9296 RBX: ffff8881096492c0 RCX: ffffc90002ca0000 [ 113.560141] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 113.560797] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: ffff8881096494b0 [ 113.561345] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012 [ 113.563890] RBP: ffff888016457a70 R08: ffff88806ce31340 R09: ffffe8ffffc06938 [ 113.564432] [ 113.564438] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 113.565173] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 113.565721] RDX: ffff888044248000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 113.565970] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 113.566520] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd06938 [ 113.567535] FS: 00007ff882c41700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 113.568078] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000 [ 113.569098] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.569640] R13: 000000000000002c R14: ffff88806cf31490 R15: dffffc0000000000 [ 113.570774] CR2: ffffed10212c9296 CR3: 000000001b9b5000 CR4: 0000000000350ef0 [ 113.571317] FS: 000055557dbc6400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 113.572145] Kernel panic - not syncing: Fatal exception in interrupt [ 114.674928] Shutting down cpus with NMI [ 114.679029] Kernel Offset: disabled [ 114.679579] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 11:50:37 Registers: info registers vcpu 0 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff888016457018 R8 =0000000000000000 R9 =ffffed1001491046 R10=0000000000000037 R11=6466663720444750 R12=0000000000000037 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0 RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff882c41700 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=ffffed10212c9296 CR3=000000001b9b5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007ff8857b27c000007ff8857b27c8 XMM02=00007ff8857b27e000007ff8857b27c0 XMM03=00007ff8857b27c800007ff8857b27c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffffed10027bee46 RCX=000000000000000d RDX=1ffffd1ffffa0d27 RSI=ffffffff85c1c760 RDI=ffffffff85b23608 RBP=ffff888013df72d8 RSP=ffff888013df7200 R8 =ffffffff84c93ca0 R9 =ffff888013df7430 R10=000000000003bea3 R11=0000000000004433 R12=ffffffff85b235a0 R13=ffffffff85c1c778 R14=ffff888013df72b0 R15=ffffe8ffffd06938 RIP=ffffffff8150e07d RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557b2ee400 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f36ee7923a4 CR3=00000000406b7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000