Warning: Permanently added '[localhost]:9411' (ECDSA) to the list of known hosts. 2025/09/01 10:23:35 fuzzer started 2025/09/01 10:23:36 dialing manager at localhost:35473 syzkaller login: [ 59.241635] cgroup: Unknown subsys name 'net' [ 59.308545] cgroup: Unknown subsys name 'cpuset' [ 59.324640] cgroup: Unknown subsys name 'rlimit' 2025/09/01 10:23:46 syscalls: 2214 2025/09/01 10:23:46 code coverage: enabled 2025/09/01 10:23:46 comparison tracing: enabled 2025/09/01 10:23:46 extra coverage: enabled 2025/09/01 10:23:46 setuid sandbox: enabled 2025/09/01 10:23:46 namespace sandbox: enabled 2025/09/01 10:23:46 Android sandbox: enabled 2025/09/01 10:23:46 fault injection: enabled 2025/09/01 10:23:46 leak checking: enabled 2025/09/01 10:23:46 net packet injection: enabled 2025/09/01 10:23:46 net device setup: enabled 2025/09/01 10:23:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 10:23:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 10:23:46 USB emulation: enabled 2025/09/01 10:23:46 hci packet injection: enabled 2025/09/01 10:23:46 wifi device emulation: enabled 2025/09/01 10:23:46 802.15.4 emulation: enabled 2025/09/01 10:23:46 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 10:23:46 fetching corpus: 50, signal 26522/29879 (executing program) 2025/09/01 10:23:46 fetching corpus: 100, signal 34726/39452 (executing program) 2025/09/01 10:23:46 fetching corpus: 150, signal 42748/48709 (executing program) 2025/09/01 10:23:46 fetching corpus: 200, signal 49708/56761 (executing program) 2025/09/01 10:23:46 fetching corpus: 250, signal 53505/61717 (executing program) 2025/09/01 10:23:46 fetching corpus: 300, signal 56951/66264 (executing program) 2025/09/01 10:23:47 fetching corpus: 350, signal 61624/71833 (executing program) 2025/09/01 10:23:47 fetching corpus: 400, signal 64640/75814 (executing program) 2025/09/01 10:23:47 fetching corpus: 450, signal 67561/79702 (executing program) 2025/09/01 10:23:47 fetching corpus: 500, signal 72913/85609 (executing program) 2025/09/01 10:23:47 fetching corpus: 550, signal 75413/88970 (executing program) 2025/09/01 10:23:47 fetching corpus: 600, signal 79276/93412 (executing program) 2025/09/01 10:23:47 fetching corpus: 650, signal 81692/96530 (executing program) 2025/09/01 10:23:47 fetching corpus: 700, signal 85749/100944 (executing program) 2025/09/01 10:23:47 fetching corpus: 750, signal 87789/103649 (executing program) 2025/09/01 10:23:47 fetching corpus: 800, signal 90328/106659 (executing program) 2025/09/01 10:23:48 fetching corpus: 850, signal 92424/109268 (executing program) 2025/09/01 10:23:48 fetching corpus: 900, signal 94457/111767 (executing program) 2025/09/01 10:23:48 fetching corpus: 950, signal 96030/113896 (executing program) 2025/09/01 10:23:48 fetching corpus: 1000, signal 97330/115778 (executing program) 2025/09/01 10:23:48 fetching corpus: 1050, signal 99221/118055 (executing program) 2025/09/01 10:23:48 fetching corpus: 1100, signal 100367/119746 (executing program) 2025/09/01 10:23:48 fetching corpus: 1150, signal 101897/121708 (executing program) 2025/09/01 10:23:48 fetching corpus: 1200, signal 103954/123939 (executing program) 2025/09/01 10:23:48 fetching corpus: 1250, signal 105343/125693 (executing program) 2025/09/01 10:23:48 fetching corpus: 1300, signal 106494/127248 (executing program) 2025/09/01 10:23:48 fetching corpus: 1350, signal 107711/128859 (executing program) 2025/09/01 10:23:49 fetching corpus: 1400, signal 108620/130215 (executing program) 2025/09/01 10:23:49 fetching corpus: 1450, signal 109506/131520 (executing program) 2025/09/01 10:23:49 fetching corpus: 1500, signal 110648/132976 (executing program) 2025/09/01 10:23:49 fetching corpus: 1550, signal 111898/134509 (executing program) 2025/09/01 10:23:49 fetching corpus: 1600, signal 112720/135732 (executing program) 2025/09/01 10:23:49 fetching corpus: 1650, signal 113528/136914 (executing program) 2025/09/01 10:23:49 fetching corpus: 1700, signal 114365/138093 (executing program) 2025/09/01 10:23:49 fetching corpus: 1750, signal 115582/139511 (executing program) 2025/09/01 10:23:49 fetching corpus: 1800, signal 116764/140865 (executing program) 2025/09/01 10:23:49 fetching corpus: 1850, signal 118497/142497 (executing program) 2025/09/01 10:23:49 fetching corpus: 1900, signal 119104/143488 (executing program) 2025/09/01 10:23:50 fetching corpus: 1950, signal 120148/144712 (executing program) 2025/09/01 10:23:50 fetching corpus: 2000, signal 120957/145742 (executing program) 2025/09/01 10:23:50 fetching corpus: 2050, signal 121878/146817 (executing program) 2025/09/01 10:23:50 fetching corpus: 2100, signal 122654/147833 (executing program) 2025/09/01 10:23:50 fetching corpus: 2150, signal 123307/148715 (executing program) 2025/09/01 10:23:50 fetching corpus: 2200, signal 124187/149721 (executing program) 2025/09/01 10:23:50 fetching corpus: 2250, signal 125257/150826 (executing program) 2025/09/01 10:23:50 fetching corpus: 2300, signal 126310/151906 (executing program) 2025/09/01 10:23:50 fetching corpus: 2350, signal 126869/152702 (executing program) 2025/09/01 10:23:50 fetching corpus: 2400, signal 127756/153650 (executing program) 2025/09/01 10:23:50 fetching corpus: 2450, signal 128642/154611 (executing program) 2025/09/01 10:23:51 fetching corpus: 2500, signal 129743/155637 (executing program) 2025/09/01 10:23:51 fetching corpus: 2550, signal 130841/156592 (executing program) 2025/09/01 10:23:51 fetching corpus: 2600, signal 131691/157457 (executing program) 2025/09/01 10:23:51 fetching corpus: 2650, signal 132608/158258 (executing program) 2025/09/01 10:23:51 fetching corpus: 2700, signal 134256/159342 (executing program) 2025/09/01 10:23:51 fetching corpus: 2750, signal 135016/160007 (executing program) 2025/09/01 10:23:51 fetching corpus: 2800, signal 135587/160681 (executing program) 2025/09/01 10:23:51 fetching corpus: 2850, signal 136408/161403 (executing program) 2025/09/01 10:23:51 fetching corpus: 2900, signal 137440/162248 (executing program) 2025/09/01 10:23:51 fetching corpus: 2950, signal 138116/162883 (executing program) 2025/09/01 10:23:51 fetching corpus: 3000, signal 138549/163406 (executing program) 2025/09/01 10:23:52 fetching corpus: 3050, signal 139086/163992 (executing program) 2025/09/01 10:23:52 fetching corpus: 3100, signal 139836/164583 (executing program) 2025/09/01 10:23:52 fetching corpus: 3150, signal 140434/165135 (executing program) 2025/09/01 10:23:52 fetching corpus: 3200, signal 141370/165831 (executing program) 2025/09/01 10:23:52 fetching corpus: 3250, signal 142015/166377 (executing program) 2025/09/01 10:23:52 fetching corpus: 3300, signal 142684/166927 (executing program) 2025/09/01 10:23:52 fetching corpus: 3350, signal 143224/167431 (executing program) 2025/09/01 10:23:52 fetching corpus: 3400, signal 143727/167885 (executing program) 2025/09/01 10:23:52 fetching corpus: 3450, signal 144119/168285 (executing program) 2025/09/01 10:23:52 fetching corpus: 3500, signal 144472/168699 (executing program) 2025/09/01 10:23:52 fetching corpus: 3550, signal 145725/169280 (executing program) 2025/09/01 10:23:53 fetching corpus: 3600, signal 146513/169771 (executing program) 2025/09/01 10:23:53 fetching corpus: 3650, signal 147734/170253 (executing program) 2025/09/01 10:23:53 fetching corpus: 3700, signal 148370/170737 (executing program) 2025/09/01 10:23:53 fetching corpus: 3750, signal 149072/171146 (executing program) 2025/09/01 10:23:53 fetching corpus: 3800, signal 149718/171536 (executing program) 2025/09/01 10:23:53 fetching corpus: 3850, signal 150186/171891 (executing program) 2025/09/01 10:23:53 fetching corpus: 3900, signal 150787/172229 (executing program) 2025/09/01 10:23:53 fetching corpus: 3950, signal 151263/172552 (executing program) 2025/09/01 10:23:53 fetching corpus: 4000, signal 151813/172898 (executing program) 2025/09/01 10:23:54 fetching corpus: 4050, signal 152227/173180 (executing program) 2025/09/01 10:23:54 fetching corpus: 4100, signal 152648/173440 (executing program) 2025/09/01 10:23:54 fetching corpus: 4150, signal 153101/173714 (executing program) 2025/09/01 10:23:54 fetching corpus: 4200, signal 153738/173970 (executing program) 2025/09/01 10:23:54 fetching corpus: 4250, signal 154220/174131 (executing program) 2025/09/01 10:23:54 fetching corpus: 4300, signal 154710/174135 (executing program) 2025/09/01 10:23:54 fetching corpus: 4350, signal 155237/174138 (executing program) 2025/09/01 10:23:54 fetching corpus: 4400, signal 155780/174144 (executing program) 2025/09/01 10:23:54 fetching corpus: 4450, signal 156293/174156 (executing program) 2025/09/01 10:23:54 fetching corpus: 4500, signal 156628/174174 (executing program) 2025/09/01 10:23:54 fetching corpus: 4550, signal 157077/174197 (executing program) 2025/09/01 10:23:54 fetching corpus: 4600, signal 157640/174203 (executing program) 2025/09/01 10:23:55 fetching corpus: 4650, signal 158226/174219 (executing program) 2025/09/01 10:23:55 fetching corpus: 4700, signal 158568/174234 (executing program) 2025/09/01 10:23:55 fetching corpus: 4750, signal 158901/174239 (executing program) 2025/09/01 10:23:55 fetching corpus: 4800, signal 159370/174247 (executing program) 2025/09/01 10:23:55 fetching corpus: 4850, signal 159903/174249 (executing program) 2025/09/01 10:23:55 fetching corpus: 4900, signal 160459/174276 (executing program) 2025/09/01 10:23:55 fetching corpus: 4950, signal 160724/174277 (executing program) 2025/09/01 10:23:55 fetching corpus: 5000, signal 161170/174282 (executing program) 2025/09/01 10:23:55 fetching corpus: 5050, signal 161617/174286 (executing program) 2025/09/01 10:23:55 fetching corpus: 5100, signal 161892/174306 (executing program) 2025/09/01 10:23:55 fetching corpus: 5150, signal 162224/174316 (executing program) 2025/09/01 10:23:55 fetching corpus: 5200, signal 162675/174320 (executing program) 2025/09/01 10:23:56 fetching corpus: 5250, signal 163113/174320 (executing program) 2025/09/01 10:23:56 fetching corpus: 5300, signal 163434/174326 (executing program) 2025/09/01 10:23:56 fetching corpus: 5350, signal 163940/174326 (executing program) 2025/09/01 10:23:56 fetching corpus: 5400, signal 164408/174442 (executing program) 2025/09/01 10:23:56 fetching corpus: 5450, signal 164787/174443 (executing program) 2025/09/01 10:23:56 fetching corpus: 5500, signal 165236/174452 (executing program) 2025/09/01 10:23:56 fetching corpus: 5550, signal 165574/174462 (executing program) 2025/09/01 10:23:56 fetching corpus: 5600, signal 165864/174463 (executing program) 2025/09/01 10:23:56 fetching corpus: 5650, signal 166163/174469 (executing program) 2025/09/01 10:23:56 fetching corpus: 5700, signal 166493/174474 (executing program) 2025/09/01 10:23:56 fetching corpus: 5750, signal 166858/174549 (executing program) 2025/09/01 10:23:56 fetching corpus: 5800, signal 168554/174583 (executing program) 2025/09/01 10:23:57 fetching corpus: 5850, signal 168852/174597 (executing program) 2025/09/01 10:23:57 fetching corpus: 5900, signal 169274/174671 (executing program) 2025/09/01 10:23:57 fetching corpus: 5950, signal 169643/174680 (executing program) 2025/09/01 10:23:57 fetching corpus: 6000, signal 170006/174680 (executing program) 2025/09/01 10:23:57 fetching corpus: 6050, signal 170341/174689 (executing program) 2025/09/01 10:23:57 fetching corpus: 6100, signal 170653/174708 (executing program) 2025/09/01 10:23:57 fetching corpus: 6150, signal 171046/174717 (executing program) 2025/09/01 10:23:57 fetching corpus: 6200, signal 171385/174717 (executing program) 2025/09/01 10:23:57 fetching corpus: 6250, signal 171748/174727 (executing program) 2025/09/01 10:23:57 fetching corpus: 6251, signal 171749/174727 (executing program) 2025/09/01 10:23:57 fetching corpus: 6251, signal 171749/174727 (executing program) 2025/09/01 10:23:59 starting 8 fuzzer processes 10:23:59 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x9, 0x4) 10:23:59 executing program 1: r0 = epoll_create(0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 10:23:59 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0x7, 0x5}) 10:23:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r2, 0x969d2c5f856015af, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}}, 0x0) [ 82.550676] audit: type=1400 audit(1756722239.517:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:23:59 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000980)) 10:23:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1fe}]}, 0x1c}}, 0x0) 10:23:59 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syncfs(r0) 10:23:59 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) [ 83.735782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.737469] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.739572] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.740919] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.742677] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.743979] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.754085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.756394] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.758165] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.770473] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.773535] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.773574] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.780327] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.798341] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.804628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.863075] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.870428] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.872640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.876064] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.881345] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.883030] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.885117] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.887022] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.889099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.897092] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.900702] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.925249] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.930092] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.943010] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.945419] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.961195] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.967217] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.969271] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.986647] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.008074] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.012232] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.017016] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.031911] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.046063] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.049436] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.825168] Bluetooth: hci2: command tx timeout [ 85.825996] Bluetooth: hci0: command tx timeout [ 85.826607] Bluetooth: hci1: command tx timeout [ 85.954824] Bluetooth: hci3: command tx timeout [ 86.016933] Bluetooth: hci4: command tx timeout [ 86.017599] Bluetooth: hci5: command tx timeout [ 86.144925] Bluetooth: hci6: command tx timeout [ 86.145580] Bluetooth: hci7: command tx timeout [ 87.872983] Bluetooth: hci2: command tx timeout [ 87.874650] Bluetooth: hci1: command tx timeout [ 87.875389] Bluetooth: hci0: command tx timeout [ 88.001849] Bluetooth: hci3: command tx timeout [ 88.064913] Bluetooth: hci5: command tx timeout [ 88.065623] Bluetooth: hci4: command tx timeout [ 88.192874] Bluetooth: hci7: command tx timeout [ 88.193584] Bluetooth: hci6: command tx timeout [ 89.921888] Bluetooth: hci1: command tx timeout [ 89.922372] Bluetooth: hci0: command tx timeout [ 89.923555] Bluetooth: hci2: command tx timeout [ 90.048810] Bluetooth: hci3: command tx timeout [ 90.112868] Bluetooth: hci4: command tx timeout [ 90.113352] Bluetooth: hci5: command tx timeout [ 90.241897] Bluetooth: hci6: command tx timeout [ 90.242308] Bluetooth: hci7: command tx timeout [ 91.969843] Bluetooth: hci2: command tx timeout [ 91.970294] Bluetooth: hci0: command tx timeout [ 91.970680] Bluetooth: hci1: command tx timeout [ 92.096827] Bluetooth: hci3: command tx timeout [ 92.161828] Bluetooth: hci4: command tx timeout [ 92.162258] Bluetooth: hci5: command tx timeout [ 92.288837] Bluetooth: hci7: command tx timeout [ 92.289282] Bluetooth: hci6: command tx timeout [ 121.031168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.031877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.207490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.208237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:24:39 executing program 1: r0 = epoll_create(0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 10:24:39 executing program 1: r0 = epoll_create(0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 10:24:39 executing program 1: r0 = epoll_create(0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 10:24:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2271, &(0x7f0000000000)) 10:24:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2271, &(0x7f0000000000)) 10:24:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2271, &(0x7f0000000000)) 10:24:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2271, &(0x7f0000000000)) 10:24:40 executing program 1: r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file1'}, 0xb) close_range(r0, 0xffffffffffffffff, 0x0) [ 123.983356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.984024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.080620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.081327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.212698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.213321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.355218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.355849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.416333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.417122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.456485] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.604406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.605059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.632820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.633392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.724334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.725569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.856448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.857072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.896887] audit: type=1400 audit(1756722281.862:8): avc: denied { open } for pid=3895 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 124.905181] audit: type=1400 audit(1756722281.862:9): avc: denied { kernel } for pid=3895 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 124.997542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.998663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.090103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.091748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.151150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.152400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.218033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.219164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.343273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.344412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:24:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x9, 0x4) 10:24:42 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1fe}]}, 0x1c}}, 0x0) 10:24:42 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0x7, 0x5}) 10:24:42 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000980)) 10:24:42 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syncfs(r0) 10:24:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r2, 0x969d2c5f856015af, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}}, 0x0) 10:24:42 executing program 1: r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file1'}, 0xb) close_range(r0, 0xffffffffffffffff, 0x0) 10:24:42 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) 10:24:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x9, 0x4) 10:24:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r2, 0x969d2c5f856015af, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}}, 0x0) 10:24:42 executing program 1: r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file1'}, 0xb) close_range(r0, 0xffffffffffffffff, 0x0) 10:24:42 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000980)) 10:24:42 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) 10:24:42 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syncfs(r0) 10:24:42 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0x7, 0x5}) 10:24:42 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1fe}]}, 0x1c}}, 0x0) [ 125.797411] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 125.799081] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 125.800163] CPU: 0 UID: 0 PID: 3939 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 125.804018] Tainted: [W]=WARN [ 125.805184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 125.808844] RIP: 0010:perf_tp_event+0x175/0xe70 [ 125.810639] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 125.813341] RSP: 0018:ffff888045677800 EFLAGS: 00010212 [ 125.814153] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 125.815206] RDX: ffff888018b95280 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 125.816254] RBP: ffff888045677a70 R08: ffff88806ce31340 R09: ffffe8ffffc15820 [ 125.817302] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 125.818353] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 125.819434] FS: 0000555577ccf400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 125.820613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.821471] CR2: 0000555577cd0c18 CR3: 0000000045457000 CR4: 0000000000350ef0 [ 125.822530] Call Trace: [ 125.822935] [ 125.823292] ? arch_scale_cpu_capacity+0x17/0xa0 [ 125.824018] ? __pfx_perf_tp_event+0x10/0x10 [ 125.824697] ? __asan_memset+0x24/0x50 [ 125.825321] ? native_smp_send_reschedule+0x21/0x60 [ 125.826083] ? __resched_curr+0x262/0x330 [ 125.826703] ? __pfx___resched_curr+0x10/0x10 [ 125.827398] ? perf_trace_run_bpf_submit+0xef/0x180 [ 125.828170] perf_trace_run_bpf_submit+0xef/0x180 [ 125.828914] perf_trace_lock+0x337/0x5d0 [ 125.829539] ? __pfx_perf_trace_lock+0x10/0x10 [ 125.830234] ? lock_acquire+0x15e/0x2f0 [ 125.830837] ? futex_ref_get+0x48/0x300 [ 125.831447] ? futex_ref_get+0x114/0x300 [ 125.832062] ? futex_hash+0x15c/0x390 [ 125.832643] lock_release+0x1ab/0x290 [ 125.833232] ? futex_hash+0x15c/0x390 [ 125.833817] futex_ref_get+0x119/0x300 [ 125.834409] ? futex_hash+0x15c/0x390 [ 125.834997] futex_hash+0x70/0x390 [ 125.835549] futex_wake+0x143/0x540 [ 125.836110] ? put_pid+0x1f/0x30 [ 125.836635] ? kernel_clone+0x204/0x7f0 [ 125.837232] ? __pfx_futex_wake+0x10/0x10 [ 125.837855] ? __pfx_kernel_clone+0x10/0x10 [ 125.838494] ? __schedule+0x24e0/0x3590 [ 125.839099] ? lock_release+0xc8/0x290 [ 125.839680] do_futex+0x26d/0x370 [ 125.840202] ? __pfx_do_futex+0x10/0x10 [ 125.840792] ? __pfx___do_sys_clone+0x10/0x10 [ 125.841458] ? __pfx___schedule+0x10/0x10 [ 125.842078] __x64_sys_futex+0x1c9/0x4d0 [ 125.842687] ? __pfx___x64_sys_futex+0x10/0x10 [ 125.843383] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 125.844142] do_syscall_64+0xbf/0x360 [ 125.844712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.845470] RIP: 0033:0x7f0c11c63b19 [ 125.846024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.848643] RSP: 002b:00007fff636d2a18 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.849733] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0c11c63b19 [ 125.850760] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0c11d76f68 [ 125.851815] RBP: 00007f0c11d76f60 R08: 00007f0c0f1d9700 R09: 0000000000000000 [ 125.852841] R10: 00007f0c0f1d9700 R11: 0000000000000246 R12: 00007f0c11d7b070 [ 125.853857] R13: 00007fff636d2b20 R14: 00007f0c11d76f60 R15: 000000000001ead3 [ 125.854917] [ 125.855264] Modules linked in: [ 125.855782] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 125.857385] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 125.858490] CPU: 0 UID: 0 PID: 3939 Comm: syz-executor.1 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 125.860210] Tainted: [D]=DIE, [W]=WARN [ 125.860763] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 125.861942] RIP: 0010:perf_tp_event+0x175/0xe70 [ 125.862641] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 125.865259] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012 [ 125.866027] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 125.867058] RDX: ffff888018b95280 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 125.868078] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc15820 [ 125.869092] R10: 0000000000000000 R11: ffff88806ce37018 R12: dffffc0000000000 [ 125.870126] R13: 0000000000000024 R14: ffff88806ce31490 R15: dffffc0000000000 [ 125.871161] FS: 0000555577ccf400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 125.872325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.873171] CR2: 0000555577cd0c18 CR3: 0000000045457000 CR4: 0000000000350ef0 [ 125.874195] Call Trace: [ 125.874579] [ 125.874909] ? arch_stack_walk+0x9c/0xf0 [ 125.875516] ? __pfx_perf_tp_event+0x10/0x10 [ 125.876172] ? stack_trace_save+0x8e/0xc0 [ 125.876782] ? stack_depot_save_flags+0x2c/0xa20 [ 125.877483] ? stack_depot_save_flags+0x2c/0xa20 [ 125.878183] ? kasan_save_stack+0x34/0x50 [ 125.878787] ? kasan_save_stack+0x24/0x50 [ 125.879412] ? kasan_save_track+0x14/0x30 [ 125.880032] ? __kasan_save_free_info+0x3a/0x60 [ 125.880711] ? __kasan_slab_free+0x3f/0x50 [ 125.881336] ? kmem_cache_free+0x2a1/0x540 10:24:42 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syncfs(r0) 10:24:42 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) 10:24:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x9, 0x4) [ 125.881963] ? rcu_core+0x7c8/0x1800 [ 125.882666] ? handle_softirqs+0x1b1/0x770 [ 125.883320] ? do_softirq+0x48/0x80 [ 125.883848] ? __local_bh_enable_ip+0xf1/0x110 [ 125.884506] ? fpu_clone+0x173/0x740 [ 125.885052] ? copy_thread+0x413/0xb30 [ 125.885632] ? copy_process+0x4710/0x73c0 [ 125.886233] ? kernel_clone+0xea/0x7f0 [ 125.886795] ? __do_sys_clone+0xce/0x120 [ 125.887397] ? do_syscall_64+0xbf/0x360 [ 125.887983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.888746] ? kernel_clone+0xea/0x7f0 [ 125.889315] ? __do_sys_clone+0xce/0x120 [ 125.889915] ? do_syscall_64+0xbf/0x360 [ 125.890493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.891308] ? perf_trace_run_bpf_submit+0xef/0x180 [ 125.892038] perf_trace_run_bpf_submit+0xef/0x180 [ 125.892748] perf_trace_lock+0x337/0x5d0 [ 125.893352] ? place_entity+0x1c/0x410 [ 125.893918] ? kvm_sched_clock_read+0x16/0x30 [ 125.894583] ? __pfx_perf_trace_lock+0x10/0x10 [ 125.895275] ? check_preempt_wakeup_fair+0x6e/0x950 [ 125.896004] ? find_held_lock+0x2b/0x80 [ 125.896603] ? sched_ttwu_pending+0x2e0/0x4a0 [ 125.897277] lock_release+0x1ab/0x290 [ 125.897837] ? ttwu_do_activate+0x1a4/0x8a0 [ 125.898489] _raw_spin_unlock+0x16/0x40 [ 125.899103] sched_ttwu_pending+0x2e0/0x4a0 [ 125.899750] ? __pfx_try_to_wake_up+0x10/0x10 [ 125.900417] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 125.901125] ? flush_tlb_func+0x3eb/0x560 [ 125.901732] __flush_smp_call_function_queue+0x434/0x740 [ 125.902526] __sysvec_call_function_single+0x6d/0x370 [ 125.903291] sysvec_call_function_single+0xa1/0xc0 [ 125.904015] [ 125.904355] [ 125.904690] asm_sysvec_call_function_single+0x1a/0x20 [ 125.905450] RIP: 0010:oops_exit+0x0/0x50 [ 125.906040] Code: 00 3a 00 be ff ff ff ff 48 c7 c7 50 b4 43 86 e8 c6 0f f9 ff 5b e9 50 00 3a 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 36 00 3a 00 8b 1d c0 3d 4f 06 31 ff 89 de e8 57 [ 125.908626] RSP: 0018:ffff888045677690 EFLAGS: 00000202 [ 125.909524] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff8139f06f [ 125.910625] RDX: ffff888018b95280 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 125.911644] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f12690 [ 125.912654] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888045677758 [ 125.913666] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000 [ 125.914687] ? add_taint+0x5f/0xd0 [ 125.915223] ? oops_end+0x4a/0xe0 [ 125.915757] oops_end+0x65/0xe0 [ 125.916270] exc_general_protection+0x1a2/0x330 [ 125.916957] asm_exc_general_protection+0x26/0x30 [ 125.917652] RIP: 0010:perf_tp_event+0x175/0xe70 [ 125.918332] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 125.920902] RSP: 0018:ffff888045677800 EFLAGS: 00010212 [ 125.921660] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 125.922661] RDX: ffff888018b95280 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 125.923696] RBP: ffff888045677a70 R08: ffff88806ce31340 R09: ffffe8ffffc15820 [ 125.924717] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 125.925734] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 125.926757] ? perf_tp_event+0x167/0xe70 [ 125.927384] ? arch_scale_cpu_capacity+0x17/0xa0 [ 125.928094] ? __pfx_perf_tp_event+0x10/0x10 [ 125.928752] ? __asan_memset+0x24/0x50 [ 125.929354] ? native_smp_send_reschedule+0x21/0x60 [ 125.930079] ? __resched_curr+0x262/0x330 [ 125.930699] ? __pfx___resched_curr+0x10/0x10 [ 125.931378] ? perf_trace_run_bpf_submit+0xef/0x180 [ 125.932115] perf_trace_run_bpf_submit+0xef/0x180 [ 125.932830] perf_trace_lock+0x337/0x5d0 [ 125.933422] ? __pfx_perf_trace_lock+0x10/0x10 [ 125.934099] ? lock_acquire+0x15e/0x2f0 [ 125.934690] ? futex_ref_get+0x48/0x300 [ 125.935280] ? futex_ref_get+0x114/0x300 [ 125.935874] ? futex_hash+0x15c/0x390 [ 125.936428] lock_release+0x1ab/0x290 [ 125.936985] ? futex_hash+0x15c/0x390 [ 125.937554] futex_ref_get+0x119/0x300 [ 125.938119] ? futex_hash+0x15c/0x390 [ 125.938680] futex_hash+0x70/0x390 [ 125.939210] futex_wake+0x143/0x540 [ 125.939746] ? put_pid+0x1f/0x30 [ 125.940251] ? kernel_clone+0x204/0x7f0 [ 125.940828] ? __pfx_futex_wake+0x10/0x10 [ 125.941439] ? __pfx_kernel_clone+0x10/0x10 [ 125.942079] ? __schedule+0x24e0/0x3590 [ 125.942665] ? lock_release+0xc8/0x290 [ 125.943256] do_futex+0x26d/0x370 [ 125.943777] ? __pfx_do_futex+0x10/0x10 [ 125.944362] ? __pfx___do_sys_clone+0x10/0x10 [ 125.945013] ? __pfx___schedule+0x10/0x10 [ 125.945620] __x64_sys_futex+0x1c9/0x4d0 [ 125.946219] ? __pfx___x64_sys_futex+0x10/0x10 [ 125.946904] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 125.947662] do_syscall_64+0xbf/0x360 [ 125.948216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.948966] RIP: 0033:0x7f0c11c63b19 [ 125.949508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.952105] RSP: 002b:00007fff636d2a18 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.953194] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0c11c63b19 [ 125.954206] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0c11d76f68 [ 125.955237] RBP: 00007f0c11d76f60 R08: 00007f0c0f1d9700 R09: 0000000000000000 [ 125.956247] R10: 00007f0c0f1d9700 R11: 0000000000000246 R12: 00007f0c11d7b070 [ 125.957255] R13: 00007fff636d2b20 R14: 00007f0c11d76f60 R15: 000000000001ead3 [ 125.958291] [ 125.958633] Modules linked in: [ 125.959117] ---[ end trace 0000000000000000 ]--- [ 125.959785] RIP: 0010:perf_tp_event+0x175/0xe70 [ 125.960465] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 125.963043] RSP: 0018:ffff888045677800 EFLAGS: 00010212 [ 125.963803] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 125.964823] RDX: ffff888018b95280 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 125.965857] RBP: ffff888045677a70 R08: ffff88806ce31340 R09: ffffe8ffffc15820 [ 125.966866] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 125.967891] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 125.968902] FS: 0000555577ccf400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 125.970049] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.970881] CR2: 0000555577cd0c18 CR3: 0000000045457000 CR4: 0000000000350ef0 [ 125.971904] Kernel panic - not syncing: Fatal exception in interrupt [ 125.973033] Kernel Offset: disabled [ 125.973556] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 10:24:42 Registers: info registers vcpu 0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff888045677198 R8 =0000000000000000 R9 =ffffed10016d6046 R10=0000000000000031 R11=6572617764726148 R12=0000000000000031 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0 RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555577ccf400 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555577cd0c18 CR3=0000000045457000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f0c11d4a7c000007f0c11d4a7c8 XMM02=00007f0c11d4a7e000007f0c11d4a7c0 XMM03=00007f0c11d4a7c800007f0c11d4a7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000040000 RBX=ffff88806ce3de20 RCX=ffffc9000088e000 RDX=0000000000040000 RSI=ffffffff816880d6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff8880471678d8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=1ffff1100d9e6bb1 R12=ffffed100d9c7bc5 R13=ffff88806ce3de28 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff816880d8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f0c0f1d9700 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0c11d77018 CR3=0000000045457000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f0c11d4a7c000007f0c11d4a7c8 XMM02=00007f0c11d4a7e000007f0c11d4a7c0 XMM03=00007f0c11d4a7c800007f0c11d4a7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000