Warning: Permanently added '[localhost]:53061' (ECDSA) to the list of known hosts. 2025/08/29 11:43:14 fuzzer started 2025/08/29 11:43:14 dialing manager at localhost:43077 syzkaller login: [ 50.192812] cgroup: Unknown subsys name 'net' [ 50.244011] cgroup: Unknown subsys name 'cpuset' [ 50.266037] cgroup: Unknown subsys name 'rlimit' 2025/08/29 11:43:24 syscalls: 2214 2025/08/29 11:43:24 code coverage: enabled 2025/08/29 11:43:24 comparison tracing: enabled 2025/08/29 11:43:24 extra coverage: enabled 2025/08/29 11:43:24 setuid sandbox: enabled 2025/08/29 11:43:24 namespace sandbox: enabled 2025/08/29 11:43:24 Android sandbox: enabled 2025/08/29 11:43:24 fault injection: enabled 2025/08/29 11:43:24 leak checking: enabled 2025/08/29 11:43:24 net packet injection: enabled 2025/08/29 11:43:24 net device setup: enabled 2025/08/29 11:43:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 11:43:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 11:43:24 USB emulation: enabled 2025/08/29 11:43:24 hci packet injection: enabled 2025/08/29 11:43:24 wifi device emulation: enabled 2025/08/29 11:43:24 802.15.4 emulation: enabled 2025/08/29 11:43:24 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 11:43:24 fetching corpus: 50, signal 28105/31514 (executing program) 2025/08/29 11:43:25 fetching corpus: 100, signal 40233/44945 (executing program) 2025/08/29 11:43:25 fetching corpus: 150, signal 48756/54656 (executing program) 2025/08/29 11:43:25 fetching corpus: 200, signal 53829/60984 (executing program) 2025/08/29 11:43:25 fetching corpus: 250, signal 56720/65120 (executing program) 2025/08/29 11:43:25 fetching corpus: 300, signal 59981/69596 (executing program) 2025/08/29 11:43:25 fetching corpus: 350, signal 64444/75048 (executing program) 2025/08/29 11:43:25 fetching corpus: 400, signal 67555/79173 (executing program) 2025/08/29 11:43:25 fetching corpus: 450, signal 70301/82923 (executing program) 2025/08/29 11:43:25 fetching corpus: 500, signal 71896/85627 (executing program) 2025/08/29 11:43:25 fetching corpus: 550, signal 74346/88984 (executing program) 2025/08/29 11:43:25 fetching corpus: 600, signal 78338/93684 (executing program) 2025/08/29 11:43:25 fetching corpus: 650, signal 81023/97188 (executing program) 2025/08/29 11:43:26 fetching corpus: 700, signal 83567/100504 (executing program) 2025/08/29 11:43:26 fetching corpus: 750, signal 85279/103066 (executing program) 2025/08/29 11:43:26 fetching corpus: 800, signal 87364/105888 (executing program) 2025/08/29 11:43:26 fetching corpus: 850, signal 90256/109342 (executing program) 2025/08/29 11:43:26 fetching corpus: 900, signal 92395/112166 (executing program) 2025/08/29 11:43:26 fetching corpus: 950, signal 94291/114714 (executing program) 2025/08/29 11:43:26 fetching corpus: 1000, signal 97846/118488 (executing program) 2025/08/29 11:43:26 fetching corpus: 1050, signal 98993/120356 (executing program) 2025/08/29 11:43:26 fetching corpus: 1100, signal 100381/122388 (executing program) 2025/08/29 11:43:27 fetching corpus: 1150, signal 102202/124668 (executing program) 2025/08/29 11:43:27 fetching corpus: 1200, signal 103907/126890 (executing program) 2025/08/29 11:43:27 fetching corpus: 1250, signal 105225/128776 (executing program) 2025/08/29 11:43:27 fetching corpus: 1300, signal 107202/131032 (executing program) 2025/08/29 11:43:27 fetching corpus: 1350, signal 109023/133208 (executing program) 2025/08/29 11:43:27 fetching corpus: 1400, signal 110325/134975 (executing program) 2025/08/29 11:43:27 fetching corpus: 1450, signal 111338/136553 (executing program) 2025/08/29 11:43:27 fetching corpus: 1500, signal 112826/138469 (executing program) 2025/08/29 11:43:27 fetching corpus: 1550, signal 114020/140111 (executing program) 2025/08/29 11:43:27 fetching corpus: 1600, signal 114788/141446 (executing program) 2025/08/29 11:43:28 fetching corpus: 1650, signal 116497/143295 (executing program) 2025/08/29 11:43:28 fetching corpus: 1700, signal 117160/144516 (executing program) 2025/08/29 11:43:28 fetching corpus: 1750, signal 118544/146151 (executing program) 2025/08/29 11:43:28 fetching corpus: 1800, signal 119545/147587 (executing program) 2025/08/29 11:43:28 fetching corpus: 1850, signal 120445/148924 (executing program) 2025/08/29 11:43:28 fetching corpus: 1900, signal 121108/150054 (executing program) 2025/08/29 11:43:28 fetching corpus: 1950, signal 122209/151496 (executing program) 2025/08/29 11:43:28 fetching corpus: 2000, signal 123008/152677 (executing program) 2025/08/29 11:43:28 fetching corpus: 2050, signal 123999/153953 (executing program) 2025/08/29 11:43:28 fetching corpus: 2100, signal 124939/155152 (executing program) 2025/08/29 11:43:28 fetching corpus: 2150, signal 126033/156477 (executing program) 2025/08/29 11:43:29 fetching corpus: 2200, signal 127068/157737 (executing program) 2025/08/29 11:43:29 fetching corpus: 2250, signal 128077/158928 (executing program) 2025/08/29 11:43:29 fetching corpus: 2300, signal 128602/159864 (executing program) 2025/08/29 11:43:29 fetching corpus: 2350, signal 129969/161181 (executing program) 2025/08/29 11:43:29 fetching corpus: 2400, signal 130984/162320 (executing program) 2025/08/29 11:43:29 fetching corpus: 2450, signal 132100/163546 (executing program) 2025/08/29 11:43:29 fetching corpus: 2500, signal 132907/164596 (executing program) 2025/08/29 11:43:29 fetching corpus: 2550, signal 133653/165567 (executing program) 2025/08/29 11:43:29 fetching corpus: 2600, signal 134326/166446 (executing program) 2025/08/29 11:43:29 fetching corpus: 2650, signal 134917/167324 (executing program) 2025/08/29 11:43:30 fetching corpus: 2700, signal 135684/168326 (executing program) 2025/08/29 11:43:30 fetching corpus: 2750, signal 136306/169213 (executing program) 2025/08/29 11:43:30 fetching corpus: 2800, signal 136984/170101 (executing program) 2025/08/29 11:43:30 fetching corpus: 2850, signal 137626/170939 (executing program) 2025/08/29 11:43:30 fetching corpus: 2900, signal 138034/171668 (executing program) 2025/08/29 11:43:30 fetching corpus: 2950, signal 138660/172440 (executing program) 2025/08/29 11:43:30 fetching corpus: 3000, signal 139410/173276 (executing program) 2025/08/29 11:43:30 fetching corpus: 3050, signal 140386/174158 (executing program) 2025/08/29 11:43:30 fetching corpus: 3100, signal 141020/174890 (executing program) 2025/08/29 11:43:30 fetching corpus: 3150, signal 141802/175641 (executing program) 2025/08/29 11:43:30 fetching corpus: 3200, signal 142368/176326 (executing program) 2025/08/29 11:43:30 fetching corpus: 3250, signal 143231/177120 (executing program) 2025/08/29 11:43:31 fetching corpus: 3300, signal 143785/177791 (executing program) 2025/08/29 11:43:31 fetching corpus: 3350, signal 144320/178437 (executing program) 2025/08/29 11:43:31 fetching corpus: 3400, signal 145066/179143 (executing program) 2025/08/29 11:43:31 fetching corpus: 3450, signal 145612/179752 (executing program) 2025/08/29 11:43:31 fetching corpus: 3500, signal 146121/180404 (executing program) 2025/08/29 11:43:31 fetching corpus: 3550, signal 146821/181069 (executing program) 2025/08/29 11:43:31 fetching corpus: 3600, signal 147299/181692 (executing program) 2025/08/29 11:43:31 fetching corpus: 3650, signal 147910/182298 (executing program) 2025/08/29 11:43:31 fetching corpus: 3700, signal 148319/182909 (executing program) 2025/08/29 11:43:31 fetching corpus: 3750, signal 149207/183625 (executing program) 2025/08/29 11:43:32 fetching corpus: 3800, signal 149604/184152 (executing program) 2025/08/29 11:43:32 fetching corpus: 3850, signal 150138/184691 (executing program) 2025/08/29 11:43:32 fetching corpus: 3900, signal 150587/185222 (executing program) 2025/08/29 11:43:32 fetching corpus: 3950, signal 151124/185744 (executing program) 2025/08/29 11:43:32 fetching corpus: 4000, signal 151667/186265 (executing program) 2025/08/29 11:43:32 fetching corpus: 4050, signal 152158/186807 (executing program) 2025/08/29 11:43:32 fetching corpus: 4100, signal 152776/187333 (executing program) 2025/08/29 11:43:32 fetching corpus: 4150, signal 153124/187758 (executing program) 2025/08/29 11:43:32 fetching corpus: 4200, signal 155467/188390 (executing program) 2025/08/29 11:43:32 fetching corpus: 4250, signal 155860/188828 (executing program) 2025/08/29 11:43:32 fetching corpus: 4300, signal 156265/189286 (executing program) 2025/08/29 11:43:32 fetching corpus: 4350, signal 156873/189736 (executing program) 2025/08/29 11:43:33 fetching corpus: 4400, signal 157178/190092 (executing program) 2025/08/29 11:43:33 fetching corpus: 4450, signal 157582/190507 (executing program) 2025/08/29 11:43:33 fetching corpus: 4500, signal 158005/190911 (executing program) 2025/08/29 11:43:33 fetching corpus: 4550, signal 158738/191331 (executing program) 2025/08/29 11:43:33 fetching corpus: 4600, signal 159392/191664 (executing program) 2025/08/29 11:43:33 fetching corpus: 4650, signal 159925/191786 (executing program) 2025/08/29 11:43:33 fetching corpus: 4700, signal 160316/191858 (executing program) 2025/08/29 11:43:33 fetching corpus: 4750, signal 160630/191875 (executing program) 2025/08/29 11:43:33 fetching corpus: 4800, signal 161414/191898 (executing program) 2025/08/29 11:43:33 fetching corpus: 4850, signal 161819/191903 (executing program) 2025/08/29 11:43:33 fetching corpus: 4900, signal 162229/191909 (executing program) 2025/08/29 11:43:33 fetching corpus: 4950, signal 162559/191919 (executing program) 2025/08/29 11:43:33 fetching corpus: 5000, signal 162980/191920 (executing program) 2025/08/29 11:43:33 fetching corpus: 5050, signal 163480/191933 (executing program) 2025/08/29 11:43:34 fetching corpus: 5100, signal 164110/191941 (executing program) 2025/08/29 11:43:34 fetching corpus: 5150, signal 164673/192013 (executing program) 2025/08/29 11:43:34 fetching corpus: 5200, signal 165030/192014 (executing program) 2025/08/29 11:43:34 fetching corpus: 5250, signal 165365/192017 (executing program) 2025/08/29 11:43:34 fetching corpus: 5300, signal 165646/192031 (executing program) 2025/08/29 11:43:34 fetching corpus: 5350, signal 166069/192148 (executing program) 2025/08/29 11:43:34 fetching corpus: 5400, signal 166531/192189 (executing program) 2025/08/29 11:43:34 fetching corpus: 5450, signal 166849/192192 (executing program) 2025/08/29 11:43:34 fetching corpus: 5500, signal 167466/192211 (executing program) 2025/08/29 11:43:34 fetching corpus: 5550, signal 167752/192212 (executing program) 2025/08/29 11:43:35 fetching corpus: 5600, signal 168186/192220 (executing program) 2025/08/29 11:43:35 fetching corpus: 5650, signal 168731/192312 (executing program) 2025/08/29 11:43:35 fetching corpus: 5700, signal 169185/192315 (executing program) 2025/08/29 11:43:35 fetching corpus: 5750, signal 169449/192316 (executing program) 2025/08/29 11:43:35 fetching corpus: 5800, signal 169948/192317 (executing program) 2025/08/29 11:43:35 fetching corpus: 5850, signal 170367/192365 (executing program) 2025/08/29 11:43:35 fetching corpus: 5900, signal 170580/192384 (executing program) 2025/08/29 11:43:35 fetching corpus: 5950, signal 171188/192391 (executing program) 2025/08/29 11:43:35 fetching corpus: 6000, signal 171521/192399 (executing program) 2025/08/29 11:43:36 fetching corpus: 6050, signal 172016/192412 (executing program) 2025/08/29 11:43:36 fetching corpus: 6100, signal 172305/192422 (executing program) 2025/08/29 11:43:36 fetching corpus: 6150, signal 172820/192427 (executing program) 2025/08/29 11:43:36 fetching corpus: 6200, signal 173163/192444 (executing program) 2025/08/29 11:43:36 fetching corpus: 6250, signal 173459/192456 (executing program) 2025/08/29 11:43:36 fetching corpus: 6300, signal 173857/192461 (executing program) 2025/08/29 11:43:36 fetching corpus: 6350, signal 174260/192466 (executing program) 2025/08/29 11:43:36 fetching corpus: 6400, signal 174594/192474 (executing program) 2025/08/29 11:43:36 fetching corpus: 6450, signal 174967/192477 (executing program) 2025/08/29 11:43:36 fetching corpus: 6500, signal 175652/192477 (executing program) 2025/08/29 11:43:37 fetching corpus: 6550, signal 176698/192483 (executing program) 2025/08/29 11:43:37 fetching corpus: 6600, signal 176982/192484 (executing program) 2025/08/29 11:43:37 fetching corpus: 6650, signal 177327/192533 (executing program) 2025/08/29 11:43:37 fetching corpus: 6700, signal 177714/192541 (executing program) 2025/08/29 11:43:37 fetching corpus: 6750, signal 178053/192552 (executing program) 2025/08/29 11:43:37 fetching corpus: 6800, signal 178444/192554 (executing program) 2025/08/29 11:43:37 fetching corpus: 6850, signal 178835/192574 (executing program) 2025/08/29 11:43:37 fetching corpus: 6900, signal 179130/192575 (executing program) 2025/08/29 11:43:37 fetching corpus: 6950, signal 179457/192579 (executing program) 2025/08/29 11:43:37 fetching corpus: 7000, signal 179773/192581 (executing program) 2025/08/29 11:43:37 fetching corpus: 7050, signal 180186/192582 (executing program) 2025/08/29 11:43:37 fetching corpus: 7100, signal 180579/192642 (executing program) 2025/08/29 11:43:38 fetching corpus: 7150, signal 180861/192652 (executing program) 2025/08/29 11:43:38 fetching corpus: 7200, signal 181061/192654 (executing program) 2025/08/29 11:43:38 fetching corpus: 7250, signal 181365/192693 (executing program) 2025/08/29 11:43:38 fetching corpus: 7300, signal 181604/192700 (executing program) 2025/08/29 11:43:38 fetching corpus: 7350, signal 181852/192710 (executing program) 2025/08/29 11:43:38 fetching corpus: 7400, signal 182090/192713 (executing program) 2025/08/29 11:43:38 fetching corpus: 7450, signal 182346/192717 (executing program) 2025/08/29 11:43:38 fetching corpus: 7500, signal 182687/192728 (executing program) 2025/08/29 11:43:38 fetching corpus: 7550, signal 183000/192731 (executing program) 2025/08/29 11:43:38 fetching corpus: 7600, signal 183259/192738 (executing program) 2025/08/29 11:43:38 fetching corpus: 7650, signal 183529/192743 (executing program) 2025/08/29 11:43:39 fetching corpus: 7700, signal 184159/192747 (executing program) 2025/08/29 11:43:39 fetching corpus: 7750, signal 184467/192778 (executing program) 2025/08/29 11:43:39 fetching corpus: 7800, signal 184752/192780 (executing program) 2025/08/29 11:43:39 fetching corpus: 7850, signal 185086/192797 (executing program) 2025/08/29 11:43:39 fetching corpus: 7900, signal 185277/192802 (executing program) 2025/08/29 11:43:39 fetching corpus: 7950, signal 185621/192804 (executing program) 2025/08/29 11:43:39 fetching corpus: 8000, signal 185994/192811 (executing program) 2025/08/29 11:43:39 fetching corpus: 8050, signal 186200/192839 (executing program) 2025/08/29 11:43:39 fetching corpus: 8100, signal 186409/192846 (executing program) 2025/08/29 11:43:39 fetching corpus: 8150, signal 186540/192851 (executing program) 2025/08/29 11:43:39 fetching corpus: 8200, signal 186804/192853 (executing program) 2025/08/29 11:43:40 fetching corpus: 8250, signal 187112/192881 (executing program) 2025/08/29 11:43:40 fetching corpus: 8300, signal 187323/192888 (executing program) 2025/08/29 11:43:40 fetching corpus: 8350, signal 187525/192895 (executing program) 2025/08/29 11:43:40 fetching corpus: 8400, signal 187715/192900 (executing program) 2025/08/29 11:43:40 fetching corpus: 8450, signal 188080/192904 (executing program) 2025/08/29 11:43:40 fetching corpus: 8500, signal 188273/192912 (executing program) 2025/08/29 11:43:40 fetching corpus: 8550, signal 188471/192913 (executing program) 2025/08/29 11:43:40 fetching corpus: 8600, signal 188722/192921 (executing program) 2025/08/29 11:43:40 fetching corpus: 8650, signal 189012/192933 (executing program) 2025/08/29 11:43:40 fetching corpus: 8700, signal 189247/192939 (executing program) 2025/08/29 11:43:40 fetching corpus: 8750, signal 189494/192950 (executing program) 2025/08/29 11:43:40 fetching corpus: 8775, signal 189572/192953 (executing program) 2025/08/29 11:43:40 fetching corpus: 8775, signal 189572/192953 (executing program) 2025/08/29 11:43:43 starting 8 fuzzer processes 11:43:43 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x800) readv(r0, &(0x7f0000001300)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) 11:43:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x5}, 0x14}}, 0x0) 11:43:43 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000240), 0x80000) r0 = inotify_init() openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f0000001900)=[{}, {r0}], 0x2, &(0x7f0000001980), &(0x7f00000019c0), 0x8) 11:43:43 executing program 3: clone3(&(0x7f0000005880)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0xdc) 11:43:43 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 11:43:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000640)={@multicast2, @local}, 0x8) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @local}, 0x8) dup3(r1, r0, 0x0) [ 78.449135] audit: type=1400 audit(1756467823.233:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:43:43 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 11:43:43 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') pread64(r0, &(0x7f0000000080)=""/94, 0x5e, 0x0) [ 79.611911] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.617014] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.618881] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.622437] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.624910] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.682518] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.684987] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.686410] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.690170] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.693011] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.698994] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.701857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.711961] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.722008] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.728228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.739366] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.745041] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.746469] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.750959] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.755985] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.758170] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.766000] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.770091] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.795097] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.805892] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.810133] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 79.823511] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 79.835429] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 79.837956] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 79.839793] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 79.843933] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 79.845955] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 79.850114] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 79.853422] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 79.866452] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 79.866863] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 79.869202] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 79.881294] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 79.910164] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 79.920181] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 81.648316] Bluetooth: hci0: command tx timeout [ 81.776189] Bluetooth: hci3: command tx timeout [ 81.776550] Bluetooth: hci2: command tx timeout [ 81.777372] Bluetooth: hci1: command tx timeout [ 81.839820] Bluetooth: hci4: command tx timeout [ 81.903116] Bluetooth: hci7: command tx timeout [ 81.966914] Bluetooth: hci6: command tx timeout [ 81.968059] Bluetooth: hci5: command tx timeout [ 83.695245] Bluetooth: hci0: command tx timeout [ 83.822947] Bluetooth: hci3: command tx timeout [ 83.823415] Bluetooth: hci1: command tx timeout [ 83.823862] Bluetooth: hci2: command tx timeout [ 83.887696] Bluetooth: hci4: command tx timeout [ 83.950806] Bluetooth: hci7: command tx timeout [ 84.014822] Bluetooth: hci5: command tx timeout [ 84.015258] Bluetooth: hci6: command tx timeout [ 85.743746] Bluetooth: hci0: command tx timeout [ 85.870802] Bluetooth: hci1: command tx timeout [ 85.871248] Bluetooth: hci3: command tx timeout [ 85.871820] Bluetooth: hci2: command tx timeout [ 85.934919] Bluetooth: hci4: command tx timeout [ 86.000748] Bluetooth: hci7: command tx timeout [ 86.062787] Bluetooth: hci5: command tx timeout [ 86.063234] Bluetooth: hci6: command tx timeout [ 87.790861] Bluetooth: hci0: command tx timeout [ 87.918798] Bluetooth: hci2: command tx timeout [ 87.919273] Bluetooth: hci3: command tx timeout [ 87.919656] Bluetooth: hci1: command tx timeout [ 87.982821] Bluetooth: hci4: command tx timeout [ 88.046774] Bluetooth: hci7: command tx timeout [ 88.111883] Bluetooth: hci6: command tx timeout [ 88.111949] Bluetooth: hci5: command tx timeout [ 115.871706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.873034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.081645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.082305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:44:21 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) [ 116.536768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.537364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:44:21 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) [ 116.742037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.742656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:44:21 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 11:44:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x42, &(0x7f0000000000)="a94a128f", 0x4) 11:44:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x42, &(0x7f0000000000)="a94a128f", 0x4) [ 117.111879] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 11:44:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x42, &(0x7f0000000000)="a94a128f", 0x4) 11:44:21 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000640)={@multicast2, @local}, 0x8) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @local}, 0x8) dup3(r1, r0, 0x0) 11:44:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x42, &(0x7f0000000000)="a94a128f", 0x4) [ 117.362227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.363317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.459040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.459650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.510378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.511011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.591582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.592234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.700207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.701135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.804662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.805603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.858560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.859673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.910188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.910855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.987114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.987807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.039685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.040491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.166809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.167487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.205376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.206045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.214847] audit: type=1400 audit(1756467862.997:8): avc: denied { open } for pid=3907 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 118.218906] audit: type=1400 audit(1756467862.998:9): avc: denied { kernel } for pid=3907 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 11:44:23 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x800) readv(r0, &(0x7f0000001300)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) 11:44:23 executing program 7: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002d80)={0x0, 0x3938700}) 11:44:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x15, 0x101}, 0x14}}, 0x0) 11:44:23 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000640)={@multicast2, @local}, 0x8) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @local}, 0x8) dup3(r1, r0, 0x0) 11:44:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000640)={@multicast2, @local}, 0x8) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @local}, 0x8) dup3(r1, r0, 0x0) 11:44:23 executing program 4: syz_mount_image$nfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@reiserfs_2={0x8}, &(0x7f0000000180), 0x3) 11:44:23 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') pread64(r0, &(0x7f0000000080)=""/94, 0x5e, 0x0) 11:44:23 executing program 3: clone3(&(0x7f0000005880)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0xdc) 11:44:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x15, 0x101}, 0x14}}, 0x0) 11:44:23 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000640)={@multicast2, @local}, 0x8) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @local}, 0x8) dup3(r1, r0, 0x0) 11:44:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000640)={@multicast2, @local}, 0x8) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @local}, 0x8) dup3(r1, r0, 0x0) 11:44:23 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@lsrr={0x83, 0xf, 0x6f, [@broadcast, @broadcast, @remote]}, @timestamp={0x44, 0x4}]}}}}}}, 0x0) 11:44:23 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)="ae98d7aa", 0x5dc}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@flowinfo={{0xf}}], 0x18}}], 0x2, 0x0) 11:44:23 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') pread64(r0, &(0x7f0000000080)=""/94, 0x5e, 0x0) 11:44:23 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x800) readv(r0, &(0x7f0000001300)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) 11:44:23 executing program 3: clone3(&(0x7f0000005880)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0xdc) [ 118.541341] BUG: unable to handle page fault for address: ffffed10212c935e [ 118.541976] #PF: supervisor read access in kernel mode [ 118.542402] #PF: error_code(0x0000) - not-present page [ 118.542833] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 [ 118.543618] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 118.544622] CPU: 0 UID: 0 PID: 3948 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 118.546073] Tainted: [W]=WARN [ 118.546480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 118.547416] RIP: 0010:perf_tp_event+0x175/0xe70 [ 118.548001] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 118.550280] RSP: 0018:ffff8880164cf800 EFLAGS: 00010212 [ 118.551096] RAX: 1ffff110212c935e RBX: ffff888109649900 RCX: ffffc9000209a000 [ 118.552161] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff888109649af0 [ 118.553267] RBP: ffff8880164cfa70 R08: ffff88806ce31340 R09: ffffe8ffffc09480 [ 118.554516] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 118.555099] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 118.555696] FS: 00007f6233152700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 118.556366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.556844] CR2: ffffed10212c935e CR3: 0000000045b35000 CR4: 0000000000350ef0 [ 118.557439] Call Trace: [ 118.557661] [ 118.557861] ? perf_swevent_event+0x63/0x3f0 [ 118.558235] ? __pfx_perf_tp_event+0x10/0x10 [ 118.558586] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 118.558997] ? perf_swevent_event+0x63/0x3f0 [ 118.559370] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 118.559788] ? perf_swevent_event+0x63/0x3f0 [ 118.560156] ? perf_tp_event+0x807/0xe70 [ 118.560509] ? __pfx_perf_tp_event+0x10/0x10 11:44:23 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)="ae98d7aa", 0x5dc}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@flowinfo={{0xf}}], 0x18}}], 0x2, 0x0) [ 118.560879] ? __perf_install_in_context+0x503/0xb90 [ 118.561446] ? do_raw_spin_unlock+0x53/0x220 [ 118.561810] ? perf_trace_run_bpf_submit+0xef/0x180 [ 118.562207] perf_trace_run_bpf_submit+0xef/0x180 [ 118.562592] perf_trace_lock+0x337/0x5d0 [ 118.562922] ? __pfx_perf_trace_lock+0x10/0x10 [ 118.563286] ? lock_acquire+0x15e/0x2f0 [ 118.563605] ? futex_ref_get+0x48/0x300 [ 118.563922] ? futex_ref_get+0x114/0x300 [ 118.564251] ? futex_hash+0x15c/0x390 [ 118.564555] lock_release+0x1ab/0x290 [ 118.564860] ? futex_hash+0x15c/0x390 [ 118.565163] futex_ref_get+0x119/0x300 [ 118.565478] ? futex_hash+0x15c/0x390 [ 118.565784] futex_hash+0x70/0x390 [ 118.566072] futex_wake+0x143/0x540 [ 118.566371] ? __pfx_perf_trace_lock+0x10/0x10 [ 118.566742] ? __pfx_futex_wake+0x10/0x10 [ 118.567078] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 118.567489] ? lock_release+0xc8/0x290 [ 118.567806] do_futex+0x26d/0x370 [ 118.568092] ? __pfx_do_futex+0x10/0x10 [ 118.568422] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 118.568850] ? __pfx___schedule+0x10/0x10 [ 118.569184] __x64_sys_futex+0x1c9/0x4d0 [ 118.569513] ? __pfx___x64_sys_futex+0x10/0x10 [ 118.569879] ? xfd_validate_state+0x55/0x180 [ 118.570245] do_syscall_64+0xbf/0x360 [ 118.570553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.570961] RIP: 0033:0x7f6235bdcb19 [ 118.571263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 118.572690] RSP: 002b:00007f6233152218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.573288] RAX: ffffffffffffffda RBX: 00007f6235ceff68 RCX: 00007f6235bdcb19 [ 118.573848] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6235ceff6c [ 118.574407] RBP: 00007f6235ceff60 R08: 000000000000000e R09: 0000000000000000 [ 118.574970] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f6235ceff6c [ 118.575526] R13: 00007fffb3525f3f R14: 00007f6233152300 R15: 0000000000022000 [ 118.576094] [ 118.576291] Modules linked in: [ 118.576556] CR2: ffffed10212c935e [ 118.576831] ---[ end trace 0000000000000000 ]--- 11:44:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000640)={@multicast2, @local}, 0x8) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @local}, 0x8) dup3(r1, r0, 0x0) [ 118.577204] RIP: 0010:perf_tp_event+0x175/0xe70 [ 118.577704] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 118.579339] RSP: 0018:ffff8880164cf800 EFLAGS: 00010212 [ 118.579826] RAX: 1ffff110212c935e RBX: ffff888109649900 RCX: ffffc9000209a000 [ 118.580486] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff888109649af0 [ 118.581142] RBP: ffff8880164cfa70 R08: ffff88806ce31340 R09: ffffe8ffffc09480 [ 118.581789] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 118.582430] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 118.583076] FS: 00007f6233152700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 118.583795] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.584329] CR2: ffffed10212c935e CR3: 0000000045b35000 CR4: 0000000000350ef0 [ 118.584977] note: syz-executor.1[3948] exited with irqs disabled [ 118.585565] BUG: unable to handle page fault for address: ffffed10212c935e [ 118.586175] #PF: supervisor read access in kernel mode [ 118.586644] #PF: error_code(0x0000) - not-present page [ 118.587115] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 [ 118.587621] Oops: Oops: 0000 [#2] SMP KASAN NOPTI [ 118.588058] CPU: 0 UID: 0 PID: 3948 Comm: syz-executor.1 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 118.589122] Tainted: [D]=DIE, [W]=WARN [ 118.589468] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 118.590197] RIP: 0010:perf_tp_event+0x175/0xe70 [ 118.590623] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 118.592234] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012 [ 118.592707] RAX: 1ffff110212c935e RBX: ffff888109649900 RCX: 0000000000000002 [ 118.593340] RDX: ffff88800f57d280 RSI: ffffffff818995b7 RDI: ffff888109649af0 [ 118.593974] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc09480 [ 118.594610] R10: 0000000000000000 R11: ffff88806ce37018 R12: dffffc0000000000 [ 118.595243] R13: 0000000000000024 R14: ffff88806ce31490 R15: dffffc0000000000 [ 118.595878] FS: 00007f6233152700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 118.596601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.597122] CR2: ffffed10212c935e CR3: 0000000045b35000 CR4: 0000000000350ef0 [ 118.597758] Call Trace: [ 118.597998] [ 118.598205] ? __pfx_perf_tp_event+0x10/0x10 [ 118.598612] ? __lock_acquire+0xc65/0x1b70 [ 118.599002] ? trace_rcu_utilization+0x26/0x190 [ 118.599432] ? rcu_sched_clock_irq+0x7a0/0x2b40 [ 118.599860] ? __lock_acquire+0x694/0x1b70 [ 118.600258] ? kvm_sched_clock_read+0x16/0x30 [ 118.600670] ? sched_clock+0x37/0x60 [ 118.601020] ? sched_clock_cpu+0x6c/0x4e0 [ 118.601402] ? perf_trace_run_bpf_submit+0xef/0x180 [ 118.601858] perf_trace_run_bpf_submit+0xef/0x180 [ 118.602301] perf_trace_lock+0x337/0x5d0 [ 118.602671] ? update_cfs_group+0x11d/0x260 [ 118.603064] ? kvm_sched_clock_read+0x16/0x30 [ 118.603479] ? __pfx_perf_trace_lock+0x10/0x10 [ 118.603895] ? check_preempt_wakeup_fair+0x6e/0x950 [ 118.604356] ? sched_ttwu_pending+0x2e0/0x4a0 [ 118.604772] lock_release+0x1ab/0x290 [ 118.605120] ? ttwu_do_activate+0x1a4/0x8a0 [ 118.605512] _raw_spin_unlock+0x16/0x40 [ 118.605879] sched_ttwu_pending+0x2e0/0x4a0 [ 118.606275] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 118.606716] ? hrtimer_interrupt+0x652/0x830 [ 118.607121] __flush_smp_call_function_queue+0x434/0x740 [ 118.607615] __sysvec_call_function_single+0x6d/0x370 [ 118.608089] sysvec_call_function_single+0xa1/0xc0 [ 118.608545] [ 118.608757] [ 118.608972] asm_sysvec_call_function_single+0x1a/0x20 [ 118.609443] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 118.609873] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de [ 118.611476] RSP: 0018:ffff8880164cff28 EFLAGS: 00000246 [ 118.611953] RAX: 0000000000000001 RBX: ffff88800f57d280 RCX: ffffffff817c2b86 [ 118.612600] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 118.613238] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 118.613870] R10: ffffffff8643ac57 R11: 0000000000000001 R12: ffff88800f57d280 [ 118.614504] R13: 0000000000000009 R14: ffff8880164cf7e0 R15: 0000000000000000 [ 118.615140] ? trace_irq_enable.constprop.0+0x26/0x100 [ 118.615610] ? make_task_dead+0x214/0x3b0 [ 118.615991] ? make_task_dead+0x214/0x3b0 [ 118.616377] ? do_syscall_64+0xbf/0x360 [ 118.616739] rewind_stack_and_make_dead+0x16/0x20 [ 118.617178] RIP: 0033:0x7f6235bdcb19 [ 118.617485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 118.618907] RSP: 002b:00007f6233152218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.619504] RAX: ffffffffffffffda RBX: 00007f6235ceff68 RCX: 00007f6235bdcb19 [ 118.620075] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6235ceff6c [ 118.620647] RBP: 00007f6235ceff60 R08: 000000000000000e R09: 0000000000000000 [ 118.621209] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f6235ceff6c [ 118.621771] R13: 00007fffb3525f3f R14: 00007f6233152300 R15: 0000000000022000 [ 118.622375] [ 118.622591] Modules linked in: [ 118.622885] CR2: ffffed10212c935e [ 118.623205] ---[ end trace 0000000000000000 ]--- [ 118.623627] RIP: 0010:perf_tp_event+0x175/0xe70 [ 118.624054] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 118.625689] RSP: 0018:ffff8880164cf800 EFLAGS: 00010212 [ 118.626166] RAX: 1ffff110212c935e RBX: ffff888109649900 RCX: ffffc9000209a000 [ 118.626814] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff888109649af0 [ 118.627453] RBP: ffff8880164cfa70 R08: ffff88806ce31340 R09: ffffe8ffffc09480 [ 118.628091] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 118.628733] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 118.629368] FS: 00007f6233152700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 118.630082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.630601] CR2: ffffed10212c935e CR3: 0000000045b35000 CR4: 0000000000350ef0 [ 118.631241] Kernel panic - not syncing: Fatal exception in interrupt [ 118.631905] Kernel Offset: disabled [ 118.632245] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 11:44:23 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff8880164cefa0 R8 =0000000000000000 R9 =ffffed100134a046 R10=0000000000000020 R11=0000000065646f43 R12=0000000000000020 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6233152700 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=ffffed10212c935e CR3=0000000045b35000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f6235cc37c000007f6235cc37c8 XMM02=00007f6235cc37e000007f6235cc37c0 XMM03=00007f6235cc37c800007f6235cc37c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff81b4a3a6 RBX=ffffffff86513600 RCX=ffffffff81b4a38e RDX=0000000000000000 RSI=ffffffff8689f5c6 RDI=ffffffff865135ec RBP=ffffffff865135fc RSP=ffff8880162bf980 R8 =ffffffff8689f5c6 R9 =0000000000000000 R10=000000000003be53 R11=0000000000026393 R12=ffffffff865135fc R13=ffffffff865135ec R14=ffffffff865135f8 R15=dffffc0000000000 RIP=ffffffff81357a2f RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555c79d400 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe0100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd89f35bf8 CR3=000000000a0a8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000ff000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000