Warning: Permanently added '[localhost]:10392' (ECDSA) to the list of known hosts. 2025/09/01 11:25:56 fuzzer started 2025/09/01 11:25:56 dialing manager at localhost:35473 syzkaller login: [ 55.623242] cgroup: Unknown subsys name 'net' [ 55.670936] cgroup: Unknown subsys name 'cpuset' [ 55.682998] cgroup: Unknown subsys name 'rlimit' 2025/09/01 11:26:06 syscalls: 2214 2025/09/01 11:26:06 code coverage: enabled 2025/09/01 11:26:06 comparison tracing: enabled 2025/09/01 11:26:06 extra coverage: enabled 2025/09/01 11:26:06 setuid sandbox: enabled 2025/09/01 11:26:06 namespace sandbox: enabled 2025/09/01 11:26:06 Android sandbox: enabled 2025/09/01 11:26:06 fault injection: enabled 2025/09/01 11:26:06 leak checking: enabled 2025/09/01 11:26:06 net packet injection: enabled 2025/09/01 11:26:06 net device setup: enabled 2025/09/01 11:26:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 11:26:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 11:26:06 USB emulation: enabled 2025/09/01 11:26:06 hci packet injection: enabled 2025/09/01 11:26:06 wifi device emulation: enabled 2025/09/01 11:26:06 802.15.4 emulation: enabled 2025/09/01 11:26:06 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 11:26:06 fetching corpus: 50, signal 22501/26065 (executing program) 2025/09/01 11:26:07 fetching corpus: 100, signal 31237/36288 (executing program) 2025/09/01 11:26:07 fetching corpus: 150, signal 40457/46778 (executing program) 2025/09/01 11:26:07 fetching corpus: 200, signal 44481/52165 (executing program) 2025/09/01 11:26:07 fetching corpus: 250, signal 48431/57415 (executing program) 2025/09/01 11:26:07 fetching corpus: 300, signal 57315/67107 (executing program) 2025/09/01 11:26:07 fetching corpus: 350, signal 61494/72337 (executing program) 2025/09/01 11:26:07 fetching corpus: 400, signal 65640/77430 (executing program) 2025/09/01 11:26:07 fetching corpus: 450, signal 68999/81698 (executing program) 2025/09/01 11:26:07 fetching corpus: 500, signal 71797/85446 (executing program) 2025/09/01 11:26:07 fetching corpus: 550, signal 74781/89330 (executing program) 2025/09/01 11:26:08 fetching corpus: 600, signal 77548/92988 (executing program) 2025/09/01 11:26:08 fetching corpus: 650, signal 80410/96652 (executing program) 2025/09/01 11:26:08 fetching corpus: 700, signal 82439/99452 (executing program) 2025/09/01 11:26:08 fetching corpus: 750, signal 84112/101991 (executing program) 2025/09/01 11:26:08 fetching corpus: 800, signal 85516/104282 (executing program) 2025/09/01 11:26:08 fetching corpus: 850, signal 88573/107810 (executing program) 2025/09/01 11:26:08 fetching corpus: 900, signal 89734/109839 (executing program) 2025/09/01 11:26:08 fetching corpus: 950, signal 91678/112418 (executing program) 2025/09/01 11:26:08 fetching corpus: 1000, signal 94139/115349 (executing program) 2025/09/01 11:26:08 fetching corpus: 1050, signal 96108/117880 (executing program) 2025/09/01 11:26:08 fetching corpus: 1100, signal 97425/119902 (executing program) 2025/09/01 11:26:09 fetching corpus: 1150, signal 99856/122678 (executing program) 2025/09/01 11:26:09 fetching corpus: 1200, signal 101540/124886 (executing program) 2025/09/01 11:26:09 fetching corpus: 1250, signal 103816/127476 (executing program) 2025/09/01 11:26:09 fetching corpus: 1300, signal 104883/129149 (executing program) 2025/09/01 11:26:09 fetching corpus: 1350, signal 106607/131306 (executing program) 2025/09/01 11:26:09 fetching corpus: 1400, signal 108043/133178 (executing program) 2025/09/01 11:26:09 fetching corpus: 1450, signal 109864/135309 (executing program) 2025/09/01 11:26:09 fetching corpus: 1500, signal 110465/136526 (executing program) 2025/09/01 11:26:09 fetching corpus: 1550, signal 111658/138197 (executing program) 2025/09/01 11:26:09 fetching corpus: 1600, signal 112723/139693 (executing program) 2025/09/01 11:26:09 fetching corpus: 1650, signal 114047/141369 (executing program) 2025/09/01 11:26:10 fetching corpus: 1700, signal 115766/143213 (executing program) 2025/09/01 11:26:10 fetching corpus: 1750, signal 117802/145275 (executing program) 2025/09/01 11:26:10 fetching corpus: 1800, signal 118430/146449 (executing program) 2025/09/01 11:26:10 fetching corpus: 1850, signal 119411/147770 (executing program) 2025/09/01 11:26:10 fetching corpus: 1900, signal 120656/149248 (executing program) 2025/09/01 11:26:10 fetching corpus: 1950, signal 121704/150585 (executing program) 2025/09/01 11:26:10 fetching corpus: 2000, signal 122465/151673 (executing program) 2025/09/01 11:26:10 fetching corpus: 2050, signal 123864/153141 (executing program) 2025/09/01 11:26:10 fetching corpus: 2100, signal 124931/154481 (executing program) 2025/09/01 11:26:10 fetching corpus: 2150, signal 125731/155583 (executing program) 2025/09/01 11:26:10 fetching corpus: 2200, signal 126749/156798 (executing program) 2025/09/01 11:26:11 fetching corpus: 2250, signal 127734/158022 (executing program) 2025/09/01 11:26:11 fetching corpus: 2300, signal 128345/158989 (executing program) 2025/09/01 11:26:11 fetching corpus: 2350, signal 129208/160103 (executing program) 2025/09/01 11:26:11 fetching corpus: 2400, signal 129843/161066 (executing program) 2025/09/01 11:26:11 fetching corpus: 2450, signal 130601/162040 (executing program) 2025/09/01 11:26:11 fetching corpus: 2500, signal 131131/162893 (executing program) 2025/09/01 11:26:11 fetching corpus: 2550, signal 131908/163867 (executing program) 2025/09/01 11:26:11 fetching corpus: 2600, signal 132952/164926 (executing program) 2025/09/01 11:26:11 fetching corpus: 2650, signal 134186/166053 (executing program) 2025/09/01 11:26:11 fetching corpus: 2700, signal 134995/166964 (executing program) 2025/09/01 11:26:11 fetching corpus: 2750, signal 135704/167803 (executing program) 2025/09/01 11:26:12 fetching corpus: 2800, signal 136384/168657 (executing program) 2025/09/01 11:26:12 fetching corpus: 2850, signal 137451/169706 (executing program) 2025/09/01 11:26:12 fetching corpus: 2900, signal 138106/170531 (executing program) 2025/09/01 11:26:12 fetching corpus: 2950, signal 138846/171327 (executing program) 2025/09/01 11:26:12 fetching corpus: 3000, signal 139333/172039 (executing program) 2025/09/01 11:26:12 fetching corpus: 3050, signal 139724/172699 (executing program) 2025/09/01 11:26:12 fetching corpus: 3100, signal 140380/173481 (executing program) 2025/09/01 11:26:12 fetching corpus: 3150, signal 140937/174178 (executing program) 2025/09/01 11:26:12 fetching corpus: 3200, signal 141811/174995 (executing program) 2025/09/01 11:26:12 fetching corpus: 3250, signal 142492/175693 (executing program) 2025/09/01 11:26:12 fetching corpus: 3300, signal 143227/176388 (executing program) 2025/09/01 11:26:13 fetching corpus: 3350, signal 143867/177120 (executing program) 2025/09/01 11:26:13 fetching corpus: 3400, signal 144428/177750 (executing program) 2025/09/01 11:26:13 fetching corpus: 3450, signal 144936/178390 (executing program) 2025/09/01 11:26:13 fetching corpus: 3500, signal 145679/179034 (executing program) 2025/09/01 11:26:13 fetching corpus: 3550, signal 146286/179631 (executing program) 2025/09/01 11:26:13 fetching corpus: 3600, signal 146826/180207 (executing program) 2025/09/01 11:26:13 fetching corpus: 3650, signal 147535/180822 (executing program) 2025/09/01 11:26:13 fetching corpus: 3700, signal 148183/181406 (executing program) 2025/09/01 11:26:13 fetching corpus: 3750, signal 148650/181952 (executing program) 2025/09/01 11:26:13 fetching corpus: 3800, signal 149056/182470 (executing program) 2025/09/01 11:26:13 fetching corpus: 3850, signal 149450/183028 (executing program) 2025/09/01 11:26:13 fetching corpus: 3900, signal 149927/183564 (executing program) 2025/09/01 11:26:14 fetching corpus: 3950, signal 150801/184123 (executing program) 2025/09/01 11:26:14 fetching corpus: 4000, signal 151896/184729 (executing program) 2025/09/01 11:26:14 fetching corpus: 4050, signal 152316/185192 (executing program) 2025/09/01 11:26:14 fetching corpus: 4100, signal 152863/185669 (executing program) 2025/09/01 11:26:14 fetching corpus: 4150, signal 153125/186081 (executing program) 2025/09/01 11:26:14 fetching corpus: 4200, signal 153418/186535 (executing program) 2025/09/01 11:26:14 fetching corpus: 4250, signal 153841/186975 (executing program) 2025/09/01 11:26:14 fetching corpus: 4300, signal 154320/187373 (executing program) 2025/09/01 11:26:14 fetching corpus: 4350, signal 154987/187822 (executing program) 2025/09/01 11:26:14 fetching corpus: 4400, signal 155825/188252 (executing program) 2025/09/01 11:26:14 fetching corpus: 4450, signal 156565/188660 (executing program) 2025/09/01 11:26:14 fetching corpus: 4500, signal 157054/189076 (executing program) 2025/09/01 11:26:14 fetching corpus: 4550, signal 157513/189438 (executing program) 2025/09/01 11:26:15 fetching corpus: 4600, signal 157942/189793 (executing program) 2025/09/01 11:26:15 fetching corpus: 4650, signal 158642/190106 (executing program) 2025/09/01 11:26:15 fetching corpus: 4700, signal 159052/190131 (executing program) 2025/09/01 11:26:15 fetching corpus: 4750, signal 159551/190132 (executing program) 2025/09/01 11:26:15 fetching corpus: 4800, signal 159885/190141 (executing program) 2025/09/01 11:26:15 fetching corpus: 4850, signal 160456/190172 (executing program) 2025/09/01 11:26:15 fetching corpus: 4900, signal 160905/190173 (executing program) 2025/09/01 11:26:15 fetching corpus: 4950, signal 161596/190183 (executing program) 2025/09/01 11:26:15 fetching corpus: 5000, signal 162235/190192 (executing program) 2025/09/01 11:26:15 fetching corpus: 5050, signal 162927/190210 (executing program) 2025/09/01 11:26:15 fetching corpus: 5100, signal 163335/190219 (executing program) 2025/09/01 11:26:16 fetching corpus: 5150, signal 163682/190241 (executing program) 2025/09/01 11:26:16 fetching corpus: 5200, signal 163995/190254 (executing program) 2025/09/01 11:26:16 fetching corpus: 5250, signal 164311/190256 (executing program) 2025/09/01 11:26:16 fetching corpus: 5300, signal 164909/190256 (executing program) 2025/09/01 11:26:16 fetching corpus: 5350, signal 165347/190294 (executing program) 2025/09/01 11:26:16 fetching corpus: 5400, signal 165739/190294 (executing program) 2025/09/01 11:26:16 fetching corpus: 5450, signal 166067/190307 (executing program) 2025/09/01 11:26:16 fetching corpus: 5500, signal 166904/190309 (executing program) 2025/09/01 11:26:16 fetching corpus: 5550, signal 167331/190310 (executing program) 2025/09/01 11:26:16 fetching corpus: 5600, signal 167661/190315 (executing program) 2025/09/01 11:26:16 fetching corpus: 5650, signal 168084/190321 (executing program) 2025/09/01 11:26:17 fetching corpus: 5700, signal 168388/190334 (executing program) 2025/09/01 11:26:17 fetching corpus: 5750, signal 168741/190335 (executing program) 2025/09/01 11:26:17 fetching corpus: 5800, signal 169065/190336 (executing program) 2025/09/01 11:26:17 fetching corpus: 5850, signal 169362/190337 (executing program) 2025/09/01 11:26:17 fetching corpus: 5900, signal 169631/190363 (executing program) 2025/09/01 11:26:17 fetching corpus: 5950, signal 169949/190371 (executing program) 2025/09/01 11:26:17 fetching corpus: 6000, signal 170306/190388 (executing program) 2025/09/01 11:26:17 fetching corpus: 6050, signal 170846/190390 (executing program) 2025/09/01 11:26:17 fetching corpus: 6100, signal 171182/190398 (executing program) 2025/09/01 11:26:17 fetching corpus: 6150, signal 171627/190405 (executing program) 2025/09/01 11:26:17 fetching corpus: 6200, signal 172039/190416 (executing program) 2025/09/01 11:26:18 fetching corpus: 6250, signal 172443/190428 (executing program) 2025/09/01 11:26:18 fetching corpus: 6300, signal 172919/190435 (executing program) 2025/09/01 11:26:18 fetching corpus: 6350, signal 173173/190449 (executing program) 2025/09/01 11:26:18 fetching corpus: 6400, signal 173537/190453 (executing program) 2025/09/01 11:26:18 fetching corpus: 6450, signal 175165/190460 (executing program) 2025/09/01 11:26:18 fetching corpus: 6500, signal 175457/190463 (executing program) 2025/09/01 11:26:18 fetching corpus: 6550, signal 176000/190463 (executing program) 2025/09/01 11:26:18 fetching corpus: 6600, signal 176405/190478 (executing program) 2025/09/01 11:26:18 fetching corpus: 6650, signal 176954/190512 (executing program) 2025/09/01 11:26:18 fetching corpus: 6700, signal 177331/190515 (executing program) 2025/09/01 11:26:18 fetching corpus: 6750, signal 177557/190517 (executing program) 2025/09/01 11:26:18 fetching corpus: 6800, signal 177826/190521 (executing program) 2025/09/01 11:26:18 fetching corpus: 6850, signal 178148/190529 (executing program) 2025/09/01 11:26:19 fetching corpus: 6900, signal 178385/190542 (executing program) 2025/09/01 11:26:19 fetching corpus: 6950, signal 178628/190545 (executing program) 2025/09/01 11:26:19 fetching corpus: 7000, signal 178956/190587 (executing program) 2025/09/01 11:26:19 fetching corpus: 7050, signal 179283/190658 (executing program) 2025/09/01 11:26:19 fetching corpus: 7100, signal 179535/190661 (executing program) 2025/09/01 11:26:19 fetching corpus: 7150, signal 180105/190669 (executing program) 2025/09/01 11:26:19 fetching corpus: 7200, signal 180422/190680 (executing program) 2025/09/01 11:26:19 fetching corpus: 7250, signal 180723/190694 (executing program) 2025/09/01 11:26:19 fetching corpus: 7300, signal 181092/190694 (executing program) 2025/09/01 11:26:19 fetching corpus: 7350, signal 181570/190699 (executing program) 2025/09/01 11:26:19 fetching corpus: 7400, signal 181817/190743 (executing program) 2025/09/01 11:26:20 fetching corpus: 7450, signal 182089/190743 (executing program) 2025/09/01 11:26:20 fetching corpus: 7500, signal 182302/190747 (executing program) 2025/09/01 11:26:20 fetching corpus: 7550, signal 182532/190751 (executing program) 2025/09/01 11:26:20 fetching corpus: 7600, signal 182848/190762 (executing program) 2025/09/01 11:26:20 fetching corpus: 7650, signal 183099/190768 (executing program) 2025/09/01 11:26:20 fetching corpus: 7700, signal 183403/190768 (executing program) 2025/09/01 11:26:20 fetching corpus: 7750, signal 183734/190768 (executing program) 2025/09/01 11:26:20 fetching corpus: 7800, signal 184046/190768 (executing program) 2025/09/01 11:26:20 fetching corpus: 7850, signal 184515/190769 (executing program) 2025/09/01 11:26:20 fetching corpus: 7900, signal 184733/190774 (executing program) 2025/09/01 11:26:20 fetching corpus: 7950, signal 185029/190786 (executing program) 2025/09/01 11:26:21 fetching corpus: 8000, signal 185453/190795 (executing program) 2025/09/01 11:26:21 fetching corpus: 8050, signal 185728/190800 (executing program) 2025/09/01 11:26:21 fetching corpus: 8100, signal 185983/190804 (executing program) 2025/09/01 11:26:21 fetching corpus: 8150, signal 186154/190810 (executing program) 2025/09/01 11:26:21 fetching corpus: 8200, signal 186333/190813 (executing program) 2025/09/01 11:26:21 fetching corpus: 8250, signal 186653/190813 (executing program) 2025/09/01 11:26:21 fetching corpus: 8300, signal 186941/190817 (executing program) 2025/09/01 11:26:21 fetching corpus: 8350, signal 187116/190821 (executing program) 2025/09/01 11:26:21 fetching corpus: 8400, signal 187343/190831 (executing program) 2025/09/01 11:26:21 fetching corpus: 8450, signal 187650/190845 (executing program) 2025/09/01 11:26:21 fetching corpus: 8500, signal 187867/190861 (executing program) 2025/09/01 11:26:21 fetching corpus: 8522, signal 188028/190861 (executing program) 2025/09/01 11:26:21 fetching corpus: 8522, signal 188028/190861 (executing program) 2025/09/01 11:26:24 starting 8 fuzzer processes 11:26:24 executing program 2: setgroups(0x41ad, &(0x7f00000001c0)) 11:26:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000dc0)=@buf={0x0, &(0x7f0000000d80)}) 11:26:24 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x541b, &(0x7f0000000000)={@local}) 11:26:24 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000380)={'fscrypt:', @desc4}, &(0x7f00000003c0)={0x0, "b1c79a2b430f7376ac8d7d5ed035f48ba8bad75589a8e51e72b360ef5456fd741eff998769f8b9c9b55adfd3f08b8955435d75520c03d8ab42b60d107b9ba479"}, 0x48, 0xffffffffffffffff) keyctl$get_security(0x3, r0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000380)={'fscrypt:', @desc4}, &(0x7f00000003c0)={0x0, "b1c79a2b430f7376ac8d7d5ed035f48ba8bad75589a8e51e72b360ef5456fd741eff998769f8b9c9b55adfd3f08b8955435d75520c03d8ab42b60d107b9ba479"}, 0x48, 0xffffffffffffffff) 11:26:24 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 11:26:24 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup2(r0, r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0xa}, 0xc, &(0x7f0000000200)={0x0, 0x24}}, 0x0) 11:26:24 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) 11:26:24 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0) [ 83.601736] audit: type=1400 audit(1756725984.537:7): avc: denied { execmem } for pid=271 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 84.838763] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.842103] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.843942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.852895] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.858617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.917261] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.920724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.941791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.946894] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.948083] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.952829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.955747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.957325] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.961786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.965770] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.969774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.972027] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.976161] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.990846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.993299] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.997879] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.001926] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.003801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.007886] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.017767] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.018949] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 85.023831] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.025019] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 85.028044] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.029204] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.031894] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.036230] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.037873] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.037998] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.040016] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.049873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.061833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.064138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.072477] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.076025] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 86.931897] Bluetooth: hci0: command tx timeout [ 87.059660] Bluetooth: hci1: command tx timeout [ 87.060775] Bluetooth: hci2: command tx timeout [ 87.123878] Bluetooth: hci7: command tx timeout [ 87.124476] Bluetooth: hci3: command tx timeout [ 87.125033] Bluetooth: hci5: command tx timeout [ 87.187598] Bluetooth: hci4: command tx timeout [ 87.188241] Bluetooth: hci6: command tx timeout [ 88.980802] Bluetooth: hci0: command tx timeout [ 89.109147] Bluetooth: hci2: command tx timeout [ 89.110415] Bluetooth: hci1: command tx timeout [ 89.171850] Bluetooth: hci7: command tx timeout [ 89.173031] Bluetooth: hci5: command tx timeout [ 89.173163] Bluetooth: hci3: command tx timeout [ 89.235599] Bluetooth: hci4: command tx timeout [ 89.235626] Bluetooth: hci6: command tx timeout [ 91.028688] Bluetooth: hci0: command tx timeout [ 91.155800] Bluetooth: hci1: command tx timeout [ 91.155853] Bluetooth: hci2: command tx timeout [ 91.220559] Bluetooth: hci3: command tx timeout [ 91.220599] Bluetooth: hci7: command tx timeout [ 91.220999] Bluetooth: hci5: command tx timeout [ 91.283634] Bluetooth: hci4: command tx timeout [ 91.285208] Bluetooth: hci6: command tx timeout [ 93.076625] Bluetooth: hci0: command tx timeout [ 93.204194] Bluetooth: hci1: command tx timeout [ 93.204862] Bluetooth: hci2: command tx timeout [ 93.267736] Bluetooth: hci7: command tx timeout [ 93.267937] Bluetooth: hci5: command tx timeout [ 93.268193] Bluetooth: hci3: command tx timeout [ 93.331627] Bluetooth: hci4: command tx timeout [ 93.332052] Bluetooth: hci6: command tx timeout [ 120.794158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.794871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.091033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.091792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.109814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.110372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.262201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.263015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.641724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.642347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.727576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.728192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.955550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.956136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.011660] audit: type=1400 audit(1756726022.946:8): avc: denied { open } for pid=3838 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 122.019855] audit: type=1400 audit(1756726022.946:9): avc: denied { kernel } for pid=3838 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 122.050624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.051248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.167424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.168255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.235417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.236907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.293836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.294449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.371859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.372469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.633119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.634237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.670554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.671119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.778892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.779485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.828265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.828877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:27:03 executing program 7: io_setup(0x400, &(0x7f0000000000)=0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_pgetevents(r0, 0x0, 0x4, 0x0, 0x0, 0x0) 11:27:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005980)=[{{&(0x7f0000001b40)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, &(0x7f0000002d80)=[{&(0x7f0000001b80)="af", 0x1}], 0x1, &(0x7f0000002e00)=[@hopopts_2292={{0x18}}], 0x18}}], 0x1, 0x4010) 11:27:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000001b40)) 11:27:03 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) 11:27:03 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x541b, &(0x7f0000000000)={@local}) 11:27:03 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x80045430, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 11:27:03 executing program 2: setgroups(0x41ad, &(0x7f00000001c0)) 11:27:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000dc0)=@buf={0x0, &(0x7f0000000d80)}) 11:27:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000dc0)=@buf={0x0, &(0x7f0000000d80)}) 11:27:04 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) rmdir(&(0x7f00000003c0)='./file0\x00') 11:27:04 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000001b40)) 11:27:04 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x541b, &(0x7f0000000000)={@local}) [ 123.236230] kmemleak: Found object by alias at 0x607f1a63875c [ 123.236246] CPU: 1 UID: 0 PID: 3908 Comm: syz-executor.2 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 123.236265] Tainted: [W]=WARN [ 123.236269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 123.236275] Call Trace: [ 123.236279] [ 123.236284] dump_stack_lvl+0xca/0x120 [ 123.236307] __lookup_object+0x94/0xb0 [ 123.236324] delete_object_full+0x27/0x70 [ 123.236340] free_percpu+0x30/0x1160 [ 123.236356] ? arch_uprobe_clear_state+0x16/0x140 [ 123.236376] futex_hash_free+0x38/0xc0 [ 123.236390] mmput+0x2d3/0x390 [ 123.236408] do_exit+0x79d/0x2970 [ 123.236422] ? lock_release+0xc8/0x290 [ 123.236438] ? __pfx_do_exit+0x10/0x10 [ 123.236453] ? find_held_lock+0x2b/0x80 [ 123.236470] ? get_signal+0x835/0x2340 [ 123.236489] do_group_exit+0xd3/0x2a0 [ 123.236508] get_signal+0x2315/0x2340 [ 123.236531] ? __pfx_get_signal+0x10/0x10 [ 123.236547] ? do_futex+0x135/0x370 [ 123.236561] ? __pfx_do_futex+0x10/0x10 [ 123.236576] arch_do_signal_or_restart+0x80/0x790 [ 123.236594] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 123.236611] ? __x64_sys_futex+0x1c9/0x4d0 [ 123.236623] ? __x64_sys_futex+0x1d2/0x4d0 [ 123.236637] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 123.236650] ? __pfx___x64_sys_futex+0x10/0x10 [ 123.236664] ? xfd_validate_state+0x55/0x180 [ 123.236685] exit_to_user_mode_loop+0x8b/0x110 [ 123.236697] do_syscall_64+0x2f7/0x360 [ 123.236710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.236722] RIP: 0033:0x7fec356bdb19 [ 123.236731] Code: Unable to access opcode bytes at 0x7fec356bdaef. [ 123.236736] RSP: 002b:00007fec32c33218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 123.236747] RAX: fffffffffffffe00 RBX: 00007fec357d0f68 RCX: 00007fec356bdb19 [ 123.236755] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fec357d0f68 [ 123.236762] RBP: 00007fec357d0f60 R08: 0000000000000000 R09: 0000000000000000 [ 123.236769] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec357d0f6c [ 123.236776] R13: 00007ffd06af998f R14: 00007fec32c33300 R15: 0000000000022000 [ 123.236792] [ 123.236796] kmemleak: Object (percpu) 0x607f1a638758 (size 8): [ 123.236803] kmemleak: comm "syz-executor.6", pid 281, jiffies 4294788558 [ 123.236810] kmemleak: min_count = 1 [ 123.236813] kmemleak: count = 0 [ 123.236817] kmemleak: flags = 0x21 [ 123.236821] kmemleak: checksum = 0 [ 123.236825] kmemleak: backtrace: [ 123.236828] pcpu_alloc_noprof+0x87a/0x1170 [ 123.236843] percpu_ref_init+0x37/0x400 [ 123.236853] cgroup_mkdir+0x28a/0x1110 [ 123.236867] kernfs_iop_mkdir+0x111/0x190 [ 123.236882] vfs_mkdir+0x59a/0x8d0 [ 123.236897] do_mkdirat+0x19f/0x3d0 [ 123.236908] __x64_sys_mkdir+0xf3/0x140 [ 123.236919] do_syscall_64+0xbf/0x360 [ 123.236929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.604578] kmemleak: Cannot insert 0x607f1a63875c into the object search tree (overlaps existing) [ 125.604599] CPU: 0 UID: 0 PID: 3738 Comm: systemd-rfkill Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 125.604617] Tainted: [W]=WARN [ 125.604621] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 125.604629] Call Trace: [ 125.604633] [ 125.604638] dump_stack_lvl+0xca/0x120 [ 125.604668] __link_object+0x190/0x210 [ 125.604687] __create_object+0x48/0x80 [ 125.604706] pcpu_alloc_noprof+0x87a/0x1170 [ 125.604731] bpf_prog_alloc_no_stats+0x14d/0x440 [ 125.604753] bpf_prog_alloc+0x39/0x200 [ 125.604773] __get_filter+0x119/0x2d0 [ 125.604792] sk_attach_filter+0x24/0x3a0 [ 125.604805] sk_setsockopt+0x331b/0x38b0 [ 125.604818] ? sock_has_perm+0x181/0x2b0 [ 125.604833] ? __pfx_sk_setsockopt+0x10/0x10 [ 125.604843] ? selinux_netlbl_socket_setsockopt+0xa1/0x460 [ 125.604859] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 125.604877] ? lock_acquire+0x15e/0x2f0 [ 125.604891] ? fd_install+0xa1/0x660 [ 125.604907] ? selinux_socket_setsockopt+0x6e/0x90 [ 125.604924] do_sock_setsockopt+0x19a/0x1e0 [ 125.604940] __sys_setsockopt+0x11f/0x1a0 [ 125.604960] __x64_sys_setsockopt+0xbe/0x160 [ 125.604977] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 125.604991] do_syscall_64+0xbf/0x360 [ 125.605005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.605018] RIP: 0033:0x7fd83703541a [ 125.605027] Code: ff ff ff c3 0f 1f 40 00 48 8b 15 71 ea 0b 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 46 ea 0b 00 f7 d8 64 89 01 48 [ 125.605039] RSP: 002b:00007ffff50feee8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 125.605050] RAX: ffffffffffffffda RBX: 00007ffff50fef40 RCX: 00007fd83703541a [ 125.605058] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000006 [ 125.605065] RBP: 0000562893755740 R08: 0000000000000010 R09: 0000000000000000 [ 125.605073] R10: 00007ffff50fef30 R11: 0000000000000246 R12: 00007ffff50fef30 [ 125.605080] R13: 00007ffff50fef70 R14: 0000000000000006 R15: 00007ffff50fef78 [ 125.605096] [ 125.605579] kmemleak: Kernel memory leak detector disabled [ 125.605583] kmemleak: Object (percpu) 0x607f1a638758 (size 8): [ 125.605590] kmemleak: comm "syz-executor.6", pid 281, jiffies 4294788558 [ 125.605598] kmemleak: min_count = 1 [ 125.605601] kmemleak: count = 1 [ 125.605605] kmemleak: flags = 0x21 [ 125.605609] kmemleak: checksum = 0 [ 125.605613] kmemleak: backtrace: [ 125.605617] pcpu_alloc_noprof+0x87a/0x1170 [ 125.605633] percpu_ref_init+0x37/0x400 [ 125.605644] cgroup_mkdir+0x28a/0x1110 [ 125.605658] kernfs_iop_mkdir+0x111/0x190 [ 125.605674] vfs_mkdir+0x59a/0x8d0 [ 125.605691] do_mkdirat+0x19f/0x3d0 [ 125.605702] __x64_sys_mkdir+0xf3/0x140 [ 125.605713] do_syscall_64+0xbf/0x360 [ 125.605722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.630903] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 125.633943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 125.635464] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 125.639246] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 125.641090] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 125.651699] kmemleak: Found object by alias at 0x607f1a63875c [ 125.651712] CPU: 0 UID: 0 PID: 11 Comm: kworker/0:1 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 125.651730] Tainted: [W]=WARN [ 125.651734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 125.651741] Workqueue: events bpf_prog_free_deferred [ 125.651757] Call Trace: [ 125.651761] [ 125.651766] dump_stack_lvl+0xca/0x120 [ 125.651786] __lookup_object+0x94/0xb0 [ 125.651802] delete_object_full+0x27/0x70 [ 125.651819] free_percpu+0x30/0x1160 [ 125.651838] __bpf_prog_free+0x12f/0x190 [ 125.651849] bpf_prog_free_deferred+0x2e5/0x420 [ 125.651865] process_one_work+0x8e1/0x19c0 [ 125.651887] ? __pfx_process_one_work+0x10/0x10 [ 125.651901] ? move_linked_works+0x172/0x270 [ 125.651922] ? assign_work+0x196/0x240 [ 125.651938] worker_thread+0x67e/0xe90 [ 125.651952] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 125.651968] ? __pfx_worker_thread+0x10/0x10 [ 125.651984] kthread+0x3c8/0x740 [ 125.651997] ? __pfx_kthread+0x10/0x10 [ 125.652009] ? ret_from_fork+0x23/0x430 [ 125.652028] ? lock_release+0xc8/0x290 [ 125.652042] ? __pfx_kthread+0x10/0x10 [ 125.652055] ret_from_fork+0x34b/0x430 [ 125.652072] ? __pfx_kthread+0x10/0x10 [ 125.652085] ret_from_fork_asm+0x1a/0x30 [ 125.652109] [ 125.652112] kmemleak: Object (percpu) 0x607f1a638758 (size 8): [ 125.652119] kmemleak: comm "syz-executor.6", pid 281, jiffies 4294788558 [ 125.652126] kmemleak: min_count = 1 [ 125.652130] kmemleak: count = 1 [ 125.652134] kmemleak: flags = 0x21 [ 125.652138] kmemleak: checksum = 0 [ 125.652141] kmemleak: backtrace: [ 125.652144] pcpu_alloc_noprof+0x87a/0x1170 [ 125.652160] percpu_ref_init+0x37/0x400 [ 125.652170] cgroup_mkdir+0x28a/0x1110 [ 125.652183] kernfs_iop_mkdir+0x111/0x190 [ 125.652197] vfs_mkdir+0x59a/0x8d0 [ 125.652213] do_mkdirat+0x19f/0x3d0 [ 125.652224] __x64_sys_mkdir+0xf3/0x140 [ 125.652235] do_syscall_64+0xbf/0x360 [ 125.652244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.720678] kmemleak: Automatic memory scanning thread ended [ 127.700575] Bluetooth: hci1: command tx timeout [ 129.748340] Bluetooth: hci1: command tx timeout [ 131.795600] Bluetooth: hci1: command tx timeout [ 133.048086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.049265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.075148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.076873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:27:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000dc0)=@buf={0x0, &(0x7f0000000d80)}) 11:27:14 executing program 2: setgroups(0x41ad, &(0x7f00000001c0)) 11:27:14 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) symlinkat(&(0x7f0000005dc0)='./file0\x00', r0, &(0x7f0000005e00)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) faccessat2(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x300) 11:27:14 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) 11:27:14 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) rmdir(&(0x7f00000003c0)='./file0\x00') 11:27:14 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x541b, &(0x7f0000000000)={@local}) 11:27:14 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000001b40)) 11:27:14 executing program 7: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xfffe) splice(r2, 0x0, r0, 0x0, 0x801, 0x0) 11:27:14 executing program 7: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xfffe) splice(r2, 0x0, r0, 0x0, 0x801, 0x0) 11:27:14 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) rmdir(&(0x7f00000003c0)='./file0\x00') 11:27:14 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000001b40)) 11:27:14 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) rt_sigaction(0x26, 0x0, 0x0, 0x8, &(0x7f0000000100)) 11:27:14 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 11:27:14 executing program 7: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xfffe) splice(r2, 0x0, r0, 0x0, 0x801, 0x0) 11:27:14 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) 11:27:14 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x5, &(0x7f0000000340)) 11:27:14 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) rt_sigaction(0x26, 0x0, 0x0, 0x8, &(0x7f0000000100)) 11:27:14 executing program 7: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xfffe) splice(r2, 0x0, r0, 0x0, 0x801, 0x0) 11:27:14 executing program 2: setgroups(0x41ad, &(0x7f00000001c0)) 11:27:14 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) rt_sigaction(0x26, 0x0, 0x0, 0x8, &(0x7f0000000100)) 11:27:14 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) rmdir(&(0x7f00000003c0)='./file0\x00') [ 133.535741] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 133.537406] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 133.538698] CPU: 0 UID: 0 PID: 4377 Comm: syz-fuzzer Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 133.546366] Tainted: [W]=WARN [ 133.546835] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 133.548058] RIP: 0010:perf_tp_event+0x175/0xe70 [ 133.548774] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 133.551451] RSP: 0018:ffff88804787f780 EFLAGS: 00010012 [ 133.552261] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 133.553298] RDX: ffff888010238000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 133.554354] RBP: ffff88804787f9f0 R08: ffff88806ce31340 R09: ffffe8ffffc10758 [ 133.555396] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 133.555544] unregister_netdevice: waiting for wlan1 to become free. Usage count = 0 [ 133.556479] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000 [ 133.556503] FS: 000000c000031210(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 133.559660] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.560516] CR2: 000055558d4de708 CR3: 000000000ca34000 CR4: 0000000000350ef0 [ 133.561574] Call Trace: [ 133.561972] [ 133.562332] ? __lock_acquire+0x694/0x1b70 [ 133.562973] ? __pfx_perf_tp_event+0x10/0x10 [ 133.563659] ? __lock_acquire+0xc65/0x1b70 [ 133.564323] ? css_rstat_updated+0x1b8/0x4d0 [ 133.565007] ? lock_is_held_type+0x9e/0x120 [ 133.565673] ? perf_trace_run_bpf_submit+0xef/0x180 [ 133.566433] ? lock_is_held_type+0x9e/0x120 [ 133.567098] perf_trace_run_bpf_submit+0xef/0x180 [ 133.567847] perf_trace_preemptirq_template+0x259/0x430 [ 133.568635] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 133.569493] ? check_preempt_wakeup_fair+0x406/0x950 [ 133.570248] ? find_held_lock+0x2b/0x80 [ 133.570860] ? try_to_wake_up+0x8ae/0x11d0 [ 133.571507] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 133.572291] trace_irq_enable.constprop.0+0xa6/0x100 [ 133.573051] trace_hardirqs_on+0x26/0x40 [ 133.573654] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 133.574419] try_to_wake_up+0x8ae/0x11d0 [ 133.575033] ? __pfx_try_to_wake_up+0x10/0x10 [ 133.575702] ? plist_del+0x122/0x270 [ 133.576274] ? find_held_lock+0x2b/0x80 [ 133.576874] ? futex_wake+0x474/0x540 [ 133.577457] wake_up_q+0xa1/0x130 [ 133.577997] futex_wake+0x47e/0x540 [ 133.578547] ? __pfx_futex_wake+0x10/0x10 [ 133.579192] ? __pfx_do_epoll_wait+0x10/0x10 [ 133.579879] do_futex+0x26d/0x370 [ 133.580424] ? __pfx_do_futex+0x10/0x10 [ 133.581021] ? __pfx_set_user_sigmask+0x10/0x10 [ 133.581736] __x64_sys_futex+0x1c9/0x4d0 [ 133.582348] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 133.583243] ? __pfx___x64_sys_futex+0x10/0x10 [ 133.583956] ? xfd_validate_state+0x55/0x180 [ 133.584614] ? __pfx_ksys_read+0x10/0x10 [ 133.585243] do_syscall_64+0xbf/0x360 [ 133.585830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.586597] RIP: 0033:0x466533 [ 133.587086] Code: 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 4c 8b 54 24 18 4c 8b 44 24 20 44 8b 4c 24 28 b8 ca 00 00 00 0f 05 <89> 44 24 30 c3 cc cc cc cc cc cc cc cc 8b 7c 24 08 48 8b 74 24 10 [ 133.589772] RSP: 002b:000000c00024df30 EFLAGS: 00000202 ORIG_RAX: 00000000000000ca [ 133.590915] RAX: ffffffffffffffda RBX: 000000c00024dfd0 RCX: 0000000000466533 [ 133.591993] RDX: 0000000000000001 RSI: 0000000000000081 RDI: 0000000001f20e78 [ 133.593070] RBP: 000000c00024df80 R08: 0000000000000000 R09: 0000000000000000 [ 133.594140] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 133.595218] R13: 000000c0000ed200 R14: 0000000000000000 R15: 0000000000000000 [ 133.596319] [ 133.596674] Modules linked in: [ 133.597176] ---[ end trace 0000000000000000 ]--- [ 133.597898] RIP: 0010:perf_tp_event+0x175/0xe70 [ 133.598616] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 133.601321] RSP: 0018:ffff88804787f780 EFLAGS: 00010012 [ 133.602128] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 133.603190] RDX: ffff888010238000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 133.604261] RBP: ffff88804787f9f0 R08: ffff88806ce31340 R09: ffffe8ffffc10758 [ 133.605325] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 133.606390] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000 [ 133.607463] FS: 000000c000031210(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 133.608662] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.609536] CR2: 000055558d4de708 CR3: 000000000ca34000 CR4: 0000000000350ef0 [ 133.610595] note: syz-fuzzer[4377] exited with irqs disabled [ 133.611605] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 133.613297] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 133.614442] CPU: 0 UID: 0 PID: 4377 Comm: syz-fuzzer Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 133.616176] Tainted: [D]=DIE, [W]=WARN [ 133.616752] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 133.617989] RIP: 0010:perf_tp_event+0x175/0xe70 [ 133.618708] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 133.621397] RSP: 0018:ffff88806ce08b80 EFLAGS: 00010012 [ 133.622209] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 133.623277] RDX: ffff888010238000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 133.624354] RBP: ffff88806ce08df0 R08: ffff88806ce313e8 R09: ffffe8ffffc10758 [ 133.625420] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 133.626492] R13: 0000000000000014 R14: ffff88806ce313e8 R15: dffffc0000000000 [ 133.627556] FS: 000000c000031210(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 133.628769] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.629651] CR2: 000055558d4de708 CR3: 000000000ca34000 CR4: 0000000000350ef0 [ 133.630723] Call Trace: [ 133.631128] [ 133.631474] ? __pfx_perf_tp_event+0x10/0x10 [ 133.632171] ? __virt_addr_valid+0x100/0x5d0 [ 133.632857] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 133.633660] ? task_work_add+0x1b2/0x340 [ 133.634287] ? lock_acquire+0x18c/0x2f0 [ 133.634903] ? __pfx_task_work_add+0x10/0x10 [ 133.635588] ? update_cfs_group+0x11d/0x260 [ 133.636271] ? lock_release+0x1c7/0x290 [ 133.636885] ? trace_softirq_raise+0xbe/0x100 [ 133.637591] ? run_posix_cpu_timers+0x160/0x7d0 [ 133.638306] ? __raise_softirq_irqoff+0x5f/0x90 [ 133.639025] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 133.639776] ? sched_balance_trigger+0x1ac/0xcb0 [ 133.640499] ? sched_tick+0x27c/0x6c0 [ 133.641090] ? do_raw_spin_lock+0x123/0x260 [ 133.641758] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 133.642470] ? perf_trace_run_bpf_submit+0xef/0x180 [ 133.643223] perf_trace_run_bpf_submit+0xef/0x180 [ 133.643985] perf_trace_preemptirq_template+0x259/0x430 [ 133.644774] ? read_tsc+0x9/0x20 [ 133.645304] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 133.646177] ? clockevents_program_event+0x135/0x360 [ 133.646948] ? tick_program_event+0xac/0x140 [ 133.647612] ? handle_softirqs+0x16e/0x770 [ 133.648271] trace_irq_enable.constprop.0+0xa6/0x100 [ 133.649052] trace_hardirqs_on+0x26/0x40 [ 133.649656] handle_softirqs+0x16e/0x770 [ 133.650286] __irq_exit_rcu+0xc4/0x100 [ 133.650882] irq_exit_rcu+0x9/0x20 [ 133.651420] sysvec_apic_timer_interrupt+0x70/0x80 [ 133.652169] [ 133.652516] [ 133.652858] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 133.653638] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 133.654348] Code: 38 00 85 db 0f 84 21 01 00 00 e8 09 a6 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 57 a1 38 00 48 85 db 0f 84 17 01 00 00 e9 a5 38 00 31 ff 65 8b 1d 60 2f 49 06 81 e3 ff ff ff 7f 89 de [ 133.656997] RSP: 0018:ffff88804787ff28 EFLAGS: 00000246 [ 133.657781] RAX: 0000000000000001 RBX: ffff888010238000 RCX: ffffffff817c3ab6 [ 133.658833] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 133.659903] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 133.660967] R10: ffffffff8643b457 R11: 0000000000000001 R12: ffff888010238000 [ 133.662019] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000 [ 133.663069] ? trace_irq_enable.constprop.0+0x26/0x100 [ 133.663867] ? make_task_dead+0x214/0x3b0 [ 133.664499] ? make_task_dead+0x214/0x3b0 [ 133.665121] ? do_syscall_64+0xbf/0x360 [ 133.665708] rewind_stack_and_make_dead+0x16/0x20 [ 133.666446] RIP: 0033:0x466533 [ 133.666933] Code: 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 4c 8b 54 24 18 4c 8b 44 24 20 44 8b 4c 24 28 b8 ca 00 00 00 0f 05 <89> 44 24 30 c3 cc cc cc cc cc cc cc cc 8b 7c 24 08 48 8b 74 24 10 [ 133.669578] RSP: 002b:000000c00024df30 EFLAGS: 00000202 ORIG_RAX: 00000000000000ca [ 133.670671] RAX: ffffffffffffffda RBX: 000000c00024dfd0 RCX: 0000000000466533 [ 133.671708] RDX: 0000000000000001 RSI: 0000000000000081 RDI: 0000000001f20e78 [ 133.672740] RBP: 000000c00024df80 R08: 0000000000000000 R09: 0000000000000000 [ 133.673778] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 133.674799] R13: 000000c0000ed200 R14: 0000000000000000 R15: 0000000000000000 [ 133.675850] [ 133.676200] Modules linked in: [ 133.676688] ---[ end trace 0000000000000000 ]--- [ 133.677381] RIP: 0010:perf_tp_event+0x175/0xe70 [ 133.678083] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 133.680732] RSP: 0018:ffff88804787f780 EFLAGS: 00010012 [ 133.681525] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 133.682570] RDX: ffff888010238000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 133.683628] RBP: ffff88804787f9f0 R08: ffff88806ce31340 R09: ffffe8ffffc10758 [ 133.684692] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 133.685735] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000 [ 133.686781] FS: 000000c000031210(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 133.687986] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.688836] CR2: 000055558d4de708 CR3: 000000000ca34000 CR4: 0000000000350ef0 [ 133.690080] Kernel panic - not syncing: Fatal exception in interrupt [ 133.691396] Kernel Offset: disabled [ 133.692034] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 11:27:14 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff88804787f0e0 R8 =0000000000000000 R9 =ffffed100145b046 R10=0000000000000020 R11=552030203a555043 R12=0000000000000020 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0 RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000000c000031210 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055558d4de708 CR3=000000000ca34000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=652e29646e616d6d6f632a282e637069 XMM03=00000000000000000000000000000000 XMM04=307830202c307830202c307830202c30 XMM05=30783028746e756f6d0a29307830202c XMM06=3030303030303030663778302826202c XMM07=3030785c30656c69662f2e273d293063 XMM08=3778302826202c30783028746e756f6d XMM09=2f2e273d293063303030303030303066 XMM10=78302826202c273030785c30656c6966 XMM11=68273d29303430303030303030306637 XMM12=30202c273030785c7366626c74656775 XMM13=26287269646d720a29307830202c3078 XMM14=29306333303030303030306637783028 XMM15=0a29273030785c30656c69662f2e273d info registers vcpu 1 RAX=1ffffd40001d1ba0 RBX=ffffea0000e8dd00 RCX=ffffffff819d0e57 RDX=dffffc0000000000 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffff888041187878 R8 =0000000000000000 R9 =fffff940001d1ba0 R10=ffffea0000e8dd07 R11=ffff8880171584b8 R12=ffff8880411879e0 R13=00007f293217e000 R14=ffff888041187ce0 R15=800000003a374007 RIP=ffffffff8173f188 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe6000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b31123000 CR3=000000004819f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000