Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:42648' (ECDSA) to the list of known hosts. 2025/09/01 11:32:23 fuzzer started 2025/09/01 11:32:24 dialing manager at localhost:35473 syzkaller login: [ 50.835902] cgroup: Unknown subsys name 'net' [ 50.873349] cgroup: Unknown subsys name 'cpuset' [ 50.887679] cgroup: Unknown subsys name 'rlimit' 2025/09/01 11:32:34 syscalls: 2214 2025/09/01 11:32:34 code coverage: enabled 2025/09/01 11:32:34 comparison tracing: enabled 2025/09/01 11:32:34 extra coverage: enabled 2025/09/01 11:32:34 setuid sandbox: enabled 2025/09/01 11:32:34 namespace sandbox: enabled 2025/09/01 11:32:34 Android sandbox: enabled 2025/09/01 11:32:34 fault injection: enabled 2025/09/01 11:32:34 leak checking: enabled 2025/09/01 11:32:34 net packet injection: enabled 2025/09/01 11:32:34 net device setup: enabled 2025/09/01 11:32:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 11:32:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 11:32:34 USB emulation: enabled 2025/09/01 11:32:34 hci packet injection: enabled 2025/09/01 11:32:34 wifi device emulation: enabled 2025/09/01 11:32:34 802.15.4 emulation: enabled 2025/09/01 11:32:34 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 11:32:34 fetching corpus: 50, signal 22095/25624 (executing program) 2025/09/01 11:32:34 fetching corpus: 100, signal 33492/38437 (executing program) 2025/09/01 11:32:34 fetching corpus: 150, signal 40560/46868 (executing program) 2025/09/01 11:32:35 fetching corpus: 200, signal 45703/53375 (executing program) 2025/09/01 11:32:35 fetching corpus: 250, signal 51652/60447 (executing program) 2025/09/01 11:32:35 fetching corpus: 300, signal 54728/64777 (executing program) 2025/09/01 11:32:35 fetching corpus: 350, signal 60241/71266 (executing program) 2025/09/01 11:32:35 fetching corpus: 400, signal 64670/76647 (executing program) 2025/09/01 11:32:35 fetching corpus: 450, signal 67226/80237 (executing program) 2025/09/01 11:32:35 fetching corpus: 500, signal 69836/83834 (executing program) 2025/09/01 11:32:35 fetching corpus: 550, signal 72679/87570 (executing program) 2025/09/01 11:32:36 fetching corpus: 600, signal 76673/92245 (executing program) 2025/09/01 11:32:36 fetching corpus: 650, signal 79731/96027 (executing program) 2025/09/01 11:32:36 fetching corpus: 700, signal 81872/99006 (executing program) 2025/09/01 11:32:36 fetching corpus: 750, signal 84237/102157 (executing program) 2025/09/01 11:32:36 fetching corpus: 800, signal 86234/104965 (executing program) 2025/09/01 11:32:36 fetching corpus: 850, signal 87591/107177 (executing program) 2025/09/01 11:32:36 fetching corpus: 900, signal 89797/110058 (executing program) 2025/09/01 11:32:36 fetching corpus: 950, signal 91958/112867 (executing program) 2025/09/01 11:32:36 fetching corpus: 1000, signal 93640/115180 (executing program) 2025/09/01 11:32:36 fetching corpus: 1050, signal 95586/117734 (executing program) 2025/09/01 11:32:37 fetching corpus: 1100, signal 96821/119678 (executing program) 2025/09/01 11:32:37 fetching corpus: 1150, signal 98228/121779 (executing program) 2025/09/01 11:32:37 fetching corpus: 1200, signal 99320/123616 (executing program) 2025/09/01 11:32:37 fetching corpus: 1250, signal 101353/126062 (executing program) 2025/09/01 11:32:37 fetching corpus: 1300, signal 102989/128153 (executing program) 2025/09/01 11:32:37 fetching corpus: 1350, signal 104395/130066 (executing program) 2025/09/01 11:32:37 fetching corpus: 1400, signal 105411/131672 (executing program) 2025/09/01 11:32:37 fetching corpus: 1450, signal 107161/133805 (executing program) 2025/09/01 11:32:37 fetching corpus: 1500, signal 109843/136520 (executing program) 2025/09/01 11:32:37 fetching corpus: 1550, signal 110993/138121 (executing program) 2025/09/01 11:32:37 fetching corpus: 1600, signal 112430/139898 (executing program) 2025/09/01 11:32:37 fetching corpus: 1650, signal 114025/141709 (executing program) 2025/09/01 11:32:38 fetching corpus: 1700, signal 115270/143340 (executing program) 2025/09/01 11:32:38 fetching corpus: 1750, signal 115970/144551 (executing program) 2025/09/01 11:32:38 fetching corpus: 1800, signal 117092/146033 (executing program) 2025/09/01 11:32:38 fetching corpus: 1850, signal 118473/147701 (executing program) 2025/09/01 11:32:38 fetching corpus: 1900, signal 120168/149505 (executing program) 2025/09/01 11:32:38 fetching corpus: 1950, signal 123608/152190 (executing program) 2025/09/01 11:32:38 fetching corpus: 2000, signal 124945/153645 (executing program) 2025/09/01 11:32:38 fetching corpus: 2050, signal 126065/154944 (executing program) 2025/09/01 11:32:38 fetching corpus: 2100, signal 126892/156084 (executing program) 2025/09/01 11:32:38 fetching corpus: 2150, signal 127576/157162 (executing program) 2025/09/01 11:32:38 fetching corpus: 2200, signal 128236/158200 (executing program) 2025/09/01 11:32:39 fetching corpus: 2250, signal 129266/159372 (executing program) 2025/09/01 11:32:39 fetching corpus: 2300, signal 130148/160539 (executing program) 2025/09/01 11:32:39 fetching corpus: 2350, signal 131125/161692 (executing program) 2025/09/01 11:32:39 fetching corpus: 2400, signal 131733/162641 (executing program) 2025/09/01 11:32:39 fetching corpus: 2450, signal 132853/163841 (executing program) 2025/09/01 11:32:39 fetching corpus: 2500, signal 133570/164819 (executing program) 2025/09/01 11:32:39 fetching corpus: 2550, signal 134380/165824 (executing program) 2025/09/01 11:32:39 fetching corpus: 2600, signal 135338/166836 (executing program) 2025/09/01 11:32:39 fetching corpus: 2650, signal 136043/167749 (executing program) 2025/09/01 11:32:39 fetching corpus: 2700, signal 137149/168824 (executing program) 2025/09/01 11:32:39 fetching corpus: 2750, signal 137804/169696 (executing program) 2025/09/01 11:32:40 fetching corpus: 2800, signal 138628/170638 (executing program) 2025/09/01 11:32:40 fetching corpus: 2850, signal 139225/171416 (executing program) 2025/09/01 11:32:40 fetching corpus: 2900, signal 140015/172302 (executing program) 2025/09/01 11:32:40 fetching corpus: 2950, signal 140699/173153 (executing program) 2025/09/01 11:32:40 fetching corpus: 3000, signal 141562/174039 (executing program) 2025/09/01 11:32:40 fetching corpus: 3050, signal 142217/174801 (executing program) 2025/09/01 11:32:40 fetching corpus: 3100, signal 142726/175554 (executing program) 2025/09/01 11:32:40 fetching corpus: 3150, signal 143257/176259 (executing program) 2025/09/01 11:32:40 fetching corpus: 3200, signal 144179/177120 (executing program) 2025/09/01 11:32:40 fetching corpus: 3250, signal 144708/177781 (executing program) 2025/09/01 11:32:41 fetching corpus: 3300, signal 145553/178536 (executing program) 2025/09/01 11:32:41 fetching corpus: 3350, signal 146133/179179 (executing program) 2025/09/01 11:32:41 fetching corpus: 3400, signal 146932/179895 (executing program) 2025/09/01 11:32:41 fetching corpus: 3450, signal 147417/180506 (executing program) 2025/09/01 11:32:41 fetching corpus: 3500, signal 147882/181128 (executing program) 2025/09/01 11:32:41 fetching corpus: 3550, signal 148719/181786 (executing program) 2025/09/01 11:32:41 fetching corpus: 3600, signal 149541/182461 (executing program) 2025/09/01 11:32:41 fetching corpus: 3650, signal 150199/183084 (executing program) 2025/09/01 11:32:41 fetching corpus: 3700, signal 150655/183619 (executing program) 2025/09/01 11:32:42 fetching corpus: 3750, signal 151061/184191 (executing program) 2025/09/01 11:32:42 fetching corpus: 3800, signal 151662/184735 (executing program) 2025/09/01 11:32:42 fetching corpus: 3850, signal 152345/185308 (executing program) 2025/09/01 11:32:42 fetching corpus: 3900, signal 152970/185838 (executing program) 2025/09/01 11:32:42 fetching corpus: 3950, signal 153414/186361 (executing program) 2025/09/01 11:32:42 fetching corpus: 4000, signal 153875/186922 (executing program) 2025/09/01 11:32:42 fetching corpus: 4050, signal 154378/187404 (executing program) 2025/09/01 11:32:42 fetching corpus: 4100, signal 154935/187852 (executing program) 2025/09/01 11:32:42 fetching corpus: 4150, signal 155359/188345 (executing program) 2025/09/01 11:32:42 fetching corpus: 4200, signal 156253/188891 (executing program) 2025/09/01 11:32:42 fetching corpus: 4250, signal 156902/189345 (executing program) 2025/09/01 11:32:42 fetching corpus: 4300, signal 157269/189781 (executing program) 2025/09/01 11:32:43 fetching corpus: 4350, signal 157767/190223 (executing program) 2025/09/01 11:32:43 fetching corpus: 4400, signal 158355/190650 (executing program) 2025/09/01 11:32:43 fetching corpus: 4450, signal 158730/191046 (executing program) 2025/09/01 11:32:43 fetching corpus: 4500, signal 159237/191437 (executing program) 2025/09/01 11:32:43 fetching corpus: 4550, signal 159687/191801 (executing program) 2025/09/01 11:32:43 fetching corpus: 4600, signal 160173/192157 (executing program) 2025/09/01 11:32:43 fetching corpus: 4650, signal 160562/192513 (executing program) 2025/09/01 11:32:43 fetching corpus: 4700, signal 161109/192939 (executing program) 2025/09/01 11:32:43 fetching corpus: 4750, signal 161381/193005 (executing program) 2025/09/01 11:32:43 fetching corpus: 4800, signal 161843/193012 (executing program) 2025/09/01 11:32:43 fetching corpus: 4850, signal 162237/193132 (executing program) 2025/09/01 11:32:44 fetching corpus: 4900, signal 162635/193136 (executing program) 2025/09/01 11:32:44 fetching corpus: 4950, signal 162986/193151 (executing program) 2025/09/01 11:32:44 fetching corpus: 5000, signal 163616/193163 (executing program) 2025/09/01 11:32:44 fetching corpus: 5050, signal 164000/193169 (executing program) 2025/09/01 11:32:44 fetching corpus: 5100, signal 164385/193171 (executing program) 2025/09/01 11:32:44 fetching corpus: 5150, signal 164693/193175 (executing program) 2025/09/01 11:32:44 fetching corpus: 5200, signal 165092/193177 (executing program) 2025/09/01 11:32:44 fetching corpus: 5250, signal 165383/193178 (executing program) 2025/09/01 11:32:44 fetching corpus: 5300, signal 165778/193182 (executing program) 2025/09/01 11:32:44 fetching corpus: 5350, signal 166055/193188 (executing program) 2025/09/01 11:32:44 fetching corpus: 5400, signal 166549/193189 (executing program) 2025/09/01 11:32:44 fetching corpus: 5450, signal 166928/193246 (executing program) 2025/09/01 11:32:45 fetching corpus: 5500, signal 167398/193256 (executing program) 2025/09/01 11:32:45 fetching corpus: 5550, signal 167709/193268 (executing program) 2025/09/01 11:32:45 fetching corpus: 5600, signal 168313/193342 (executing program) 2025/09/01 11:32:45 fetching corpus: 5650, signal 168659/193377 (executing program) 2025/09/01 11:32:45 fetching corpus: 5700, signal 169001/193417 (executing program) 2025/09/01 11:32:45 fetching corpus: 5750, signal 169241/193424 (executing program) 2025/09/01 11:32:45 fetching corpus: 5800, signal 169567/193430 (executing program) 2025/09/01 11:32:45 fetching corpus: 5850, signal 169980/193463 (executing program) 2025/09/01 11:32:45 fetching corpus: 5900, signal 170265/193477 (executing program) 2025/09/01 11:32:45 fetching corpus: 5950, signal 170464/193478 (executing program) 2025/09/01 11:32:45 fetching corpus: 6000, signal 170895/193483 (executing program) 2025/09/01 11:32:46 fetching corpus: 6050, signal 171275/193515 (executing program) 2025/09/01 11:32:46 fetching corpus: 6100, signal 171775/193533 (executing program) 2025/09/01 11:32:46 fetching corpus: 6150, signal 172249/193541 (executing program) 2025/09/01 11:32:46 fetching corpus: 6200, signal 172530/193551 (executing program) 2025/09/01 11:32:46 fetching corpus: 6250, signal 173016/193553 (executing program) 2025/09/01 11:32:46 fetching corpus: 6300, signal 173353/193563 (executing program) 2025/09/01 11:32:46 fetching corpus: 6350, signal 173665/193569 (executing program) 2025/09/01 11:32:46 fetching corpus: 6400, signal 174290/193594 (executing program) 2025/09/01 11:32:46 fetching corpus: 6450, signal 174568/193594 (executing program) 2025/09/01 11:32:46 fetching corpus: 6500, signal 175057/193601 (executing program) 2025/09/01 11:32:46 fetching corpus: 6550, signal 175384/193601 (executing program) 2025/09/01 11:32:46 fetching corpus: 6600, signal 175713/193602 (executing program) 2025/09/01 11:32:47 fetching corpus: 6650, signal 175991/193603 (executing program) 2025/09/01 11:32:47 fetching corpus: 6700, signal 176311/193603 (executing program) 2025/09/01 11:32:47 fetching corpus: 6750, signal 176801/193607 (executing program) 2025/09/01 11:32:47 fetching corpus: 6800, signal 177272/193622 (executing program) 2025/09/01 11:32:47 fetching corpus: 6850, signal 177541/193622 (executing program) 2025/09/01 11:32:47 fetching corpus: 6900, signal 177868/193642 (executing program) 2025/09/01 11:32:47 fetching corpus: 6950, signal 178308/193642 (executing program) 2025/09/01 11:32:47 fetching corpus: 7000, signal 178554/193643 (executing program) 2025/09/01 11:32:47 fetching corpus: 7050, signal 178869/193648 (executing program) 2025/09/01 11:32:47 fetching corpus: 7100, signal 179142/193691 (executing program) 2025/09/01 11:32:47 fetching corpus: 7150, signal 179426/193693 (executing program) 2025/09/01 11:32:47 fetching corpus: 7200, signal 179807/193697 (executing program) 2025/09/01 11:32:48 fetching corpus: 7250, signal 180114/193706 (executing program) 2025/09/01 11:32:48 fetching corpus: 7300, signal 180291/193716 (executing program) 2025/09/01 11:32:48 fetching corpus: 7350, signal 180501/193719 (executing program) 2025/09/01 11:32:48 fetching corpus: 7400, signal 180828/193726 (executing program) 2025/09/01 11:32:48 fetching corpus: 7450, signal 181268/193751 (executing program) 2025/09/01 11:32:48 fetching corpus: 7500, signal 181762/193757 (executing program) 2025/09/01 11:32:48 fetching corpus: 7550, signal 182055/193765 (executing program) 2025/09/01 11:32:48 fetching corpus: 7600, signal 182332/193769 (executing program) 2025/09/01 11:32:48 fetching corpus: 7650, signal 182594/193778 (executing program) 2025/09/01 11:32:48 fetching corpus: 7700, signal 182728/193780 (executing program) 2025/09/01 11:32:48 fetching corpus: 7750, signal 182998/193781 (executing program) 2025/09/01 11:32:48 fetching corpus: 7800, signal 183819/193806 (executing program) 2025/09/01 11:32:49 fetching corpus: 7850, signal 184139/193812 (executing program) 2025/09/01 11:32:49 fetching corpus: 7900, signal 184419/193835 (executing program) 2025/09/01 11:32:49 fetching corpus: 7950, signal 184992/193855 (executing program) 2025/09/01 11:32:49 fetching corpus: 8000, signal 185488/193855 (executing program) 2025/09/01 11:32:49 fetching corpus: 8050, signal 185725/193857 (executing program) 2025/09/01 11:32:49 fetching corpus: 8100, signal 186101/193857 (executing program) 2025/09/01 11:32:49 fetching corpus: 8150, signal 186388/193857 (executing program) 2025/09/01 11:32:49 fetching corpus: 8200, signal 186603/193859 (executing program) 2025/09/01 11:32:49 fetching corpus: 8250, signal 187057/193873 (executing program) 2025/09/01 11:32:49 fetching corpus: 8300, signal 187494/193879 (executing program) 2025/09/01 11:32:49 fetching corpus: 8350, signal 187729/193881 (executing program) 2025/09/01 11:32:49 fetching corpus: 8399, signal 187955/193892 (executing program) 2025/09/01 11:32:49 fetching corpus: 8449, signal 188338/193895 (executing program) 2025/09/01 11:32:50 fetching corpus: 8499, signal 188645/193897 (executing program) 2025/09/01 11:32:50 fetching corpus: 8548, signal 188864/193897 (executing program) 2025/09/01 11:32:50 fetching corpus: 8598, signal 189137/193909 (executing program) 2025/09/01 11:32:50 fetching corpus: 8647, signal 189362/193919 (executing program) 2025/09/01 11:32:50 fetching corpus: 8697, signal 189837/193927 (executing program) 2025/09/01 11:32:50 fetching corpus: 8747, signal 190074/193928 (executing program) 2025/09/01 11:32:50 fetching corpus: 8797, signal 190295/193929 (executing program) 2025/09/01 11:32:50 fetching corpus: 8847, signal 190560/193973 (executing program) 2025/09/01 11:32:50 fetching corpus: 8897, signal 190810/193980 (executing program) 2025/09/01 11:32:50 fetching corpus: 8947, signal 191085/193984 (executing program) 2025/09/01 11:32:50 fetching corpus: 8997, signal 191325/193994 (executing program) 2025/09/01 11:32:50 fetching corpus: 9013, signal 191374/193995 (executing program) 2025/09/01 11:32:50 fetching corpus: 9013, signal 191374/193995 (executing program) 2025/09/01 11:32:53 starting 8 fuzzer processes 11:32:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c0a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 11:32:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)={0x18, 0x52, 0x101, 0x0, 0x0, "", [@typed={0x2, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) 11:32:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)='m', 0x1}], 0x1}}], 0x3, 0x44894) sendmmsg$inet6(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)='\'', 0x1}], 0x1}}], 0x1, 0x1) 11:32:53 executing program 3: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000100)={0x1, "e685ae37d8c1841e5799cf3c6730d3055c91c7592d5a89e7294d34106e29f2014e3edca82df1217d6702ec6c72c4e5eb73dca9edc0e205b8aa9d0086ace72283b95b6dc6e19418064e5aff8c10e318fbe7d87202fbf7196e2bb8b51155861449"}, 0x68, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x2800) [ 79.727149] audit: type=1400 audit(1756726373.121:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:32:53 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x400, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000015c0)='./file1\x00') 11:32:53 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) 11:32:53 executing program 6: mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x13) 11:32:53 executing program 7: io_uring_setup(0x78f5, &(0x7f0000000000)) io_uring_setup(0x5e9, &(0x7f0000000080)) [ 80.881822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.888680] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.892633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.897486] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.900093] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.946842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.950530] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.955300] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.962697] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.973853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.001316] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.003149] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.004843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.007908] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.010059] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.227863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.255906] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 81.269703] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.277063] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 81.282685] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 81.300136] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 81.306059] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.308187] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.311579] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 81.341261] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 81.343498] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.346464] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.410194] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.411431] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.411490] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 81.413065] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.413675] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 81.438747] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.443455] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.457505] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.459614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 81.466365] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.472052] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.479716] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.492600] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 82.976545] Bluetooth: hci0: command tx timeout [ 83.042159] Bluetooth: hci2: command tx timeout [ 83.043608] Bluetooth: hci1: command tx timeout [ 83.552864] Bluetooth: hci7: command tx timeout [ 83.554328] Bluetooth: hci5: command tx timeout [ 83.554843] Bluetooth: hci4: command tx timeout [ 83.556331] Bluetooth: hci3: command tx timeout [ 83.616388] Bluetooth: hci6: command tx timeout [ 85.024289] Bluetooth: hci0: command tx timeout [ 85.088384] Bluetooth: hci2: command tx timeout [ 85.088863] Bluetooth: hci1: command tx timeout [ 85.600435] Bluetooth: hci3: command tx timeout [ 85.601251] Bluetooth: hci4: command tx timeout [ 85.601682] Bluetooth: hci5: command tx timeout [ 85.602129] Bluetooth: hci7: command tx timeout [ 85.664652] Bluetooth: hci6: command tx timeout [ 87.072281] Bluetooth: hci0: command tx timeout [ 87.136374] Bluetooth: hci1: command tx timeout [ 87.136831] Bluetooth: hci2: command tx timeout [ 87.648425] Bluetooth: hci7: command tx timeout [ 87.648897] Bluetooth: hci3: command tx timeout [ 87.649476] Bluetooth: hci5: command tx timeout [ 87.649890] Bluetooth: hci4: command tx timeout [ 87.712274] Bluetooth: hci6: command tx timeout [ 89.120434] Bluetooth: hci0: command tx timeout [ 89.184851] Bluetooth: hci1: command tx timeout [ 89.185289] Bluetooth: hci2: command tx timeout [ 89.696396] Bluetooth: hci4: command tx timeout [ 89.696894] Bluetooth: hci5: command tx timeout [ 89.697868] Bluetooth: hci3: command tx timeout [ 89.698270] Bluetooth: hci7: command tx timeout [ 89.760310] Bluetooth: hci6: command tx timeout [ 116.366786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.367453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.587158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.588983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:33:30 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0xb7dd}) 11:33:30 executing program 7: delete_module(0x0, 0x0) [ 117.291066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.291721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:33:30 executing program 7: delete_module(0x0, 0x0) 11:33:30 executing program 7: delete_module(0x0, 0x0) 11:33:30 executing program 7: delete_module(0x0, 0x0) [ 117.508468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.509101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:33:31 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, &(0x7f0000000240)) 11:33:31 executing program 7: add_key$fscrypt_v1(&(0x7f00000017c0), &(0x7f0000001800)={'fscrypt:', @desc1}, &(0x7f0000001840)={0x0, "15bcaf7be1e1f4a77ed49ba2b1ae19b920d1c8e8942cf0fdb004a417e046fd8d31c5115f3b08eb4c87f246e1730583a0e5827ae0d025560f9be483ef473a9c4d"}, 0x48, 0xfffffffffffffffb) [ 117.781264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.781871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:33:31 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) [ 117.872585] audit: type=1400 audit(1756726411.262:8): avc: denied { open } for pid=3862 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 117.886385] audit: type=1400 audit(1756726411.263:9): avc: denied { kernel } for pid=3862 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 117.924606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.925391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.011615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.012197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.072291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.072890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.198377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.199025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.336290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.337681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.440117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.441154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.498827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.499493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.553343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.553941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.631858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.632549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.763582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.764513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.852636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.853512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:33:32 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c0a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 11:33:32 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r0, 0x5323, 0x0) 11:33:32 executing program 3: syz_mount_image$iso9660(&(0x7f0000004f80), &(0x7f0000004fc0)='./file0\x00', 0x0, 0x1, &(0x7f0000005080)=[{&(0x7f0000005000), 0x0, 0x100000001}], 0x0, &(0x7f00000050c0)) 11:33:32 executing program 6: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 11:33:32 executing program 7: socket$inet6_icmp(0xa, 0x2, 0x3a) 11:33:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{}]}) 11:33:32 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6, @multicast}, 0x10) 11:33:32 executing program 1: r0 = getpid() process_vm_writev(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/141, 0x8d}], 0x1, &(0x7f0000001980)=[{&(0x7f00000014c0)=""/123, 0x7b}], 0x1, 0x0) fork() [ 119.102739] loop3: detected capacity change from 0 to 264192 [ 119.122480] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 119.135980] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:33:32 executing program 6: mlockall(0x2) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10031, 0xffffffffffffffff, 0x0) [ 119.194364] ISOFS: Unable to identify CD-ROM format. 11:33:32 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x5000000, 0xfffffffffffffffb}) 11:33:32 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c0a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) 11:33:32 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x42, &(0x7f0000000000)="a94a128f", 0x4) 11:33:32 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:33:32 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r0, 0x5323, 0x0) 11:33:32 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000100)=""/252, &(0x7f0000000000)=0xfc) 11:33:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{}]}) 11:33:32 executing program 6: mlockall(0x2) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10031, 0xffffffffffffffff, 0x0) 11:33:32 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x5000000, 0xfffffffffffffffb}) 11:33:32 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)={[], [], 0x2}) [ 119.424110] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI [ 119.425026] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 119.425731] CPU: 1 UID: 0 PID: 3950 Comm: syz-executor.2 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 119.427710] Tainted: [W]=WARN [ 119.428412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 119.430272] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.431415] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 119.435680] RSP: 0018:ffff88804656f800 EFLAGS: 00010212 [ 119.436610] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90003c2b000 [ 119.437176] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 119.437740] RBP: ffff88804656fa70 R08: ffff88806cf31340 R09: ffffe8ffffd15cf0 [ 119.438313] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 119.438881] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 119.439452] FS: 00007fdc206f1700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 119.440088] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.440556] CR2: 0000555570c32708 CR3: 0000000044756000 CR4: 0000000000350ef0 [ 119.441119] Call Trace: [ 119.441330] [ 119.441519] ? __pfx_perf_tp_event+0x10/0x10 [ 119.441882] ? lock_is_held_type+0x9e/0x120 [ 119.442243] ? lock_is_held_type+0x9e/0x120 [ 119.442594] ? perf_trace_lock+0xb5/0x5d0 [ 119.442932] ? perf_trace_lock+0xb5/0x5d0 [ 119.443277] ? __pfx_perf_trace_lock+0x10/0x10 [ 119.443649] ? __pfx_perf_trace_lock+0x10/0x10 [ 119.444025] ? find_held_lock+0x2b/0x80 [ 119.444354] ? find_held_lock+0x2b/0x80 [ 119.444681] ? __perf_install_in_context+0x503/0xb90 [ 119.445090] ? lock_release+0xc8/0x290 [ 119.445407] ? do_raw_spin_unlock+0x53/0x220 [ 119.445768] ? perf_trace_run_bpf_submit+0xef/0x180 [ 119.446179] perf_trace_run_bpf_submit+0xef/0x180 [ 119.446575] perf_trace_lock+0x337/0x5d0 [ 119.446910] ? __pfx_perf_trace_lock+0x10/0x10 [ 119.447291] ? lock_acquire+0x15e/0x2f0 [ 119.447617] ? futex_ref_get+0x48/0x300 [ 119.447941] ? futex_ref_get+0x114/0x300 [ 119.448268] ? futex_hash+0x15c/0x390 [ 119.448576] lock_release+0x1ab/0x290 [ 119.448889] ? futex_hash+0x15c/0x390 [ 119.449199] futex_ref_get+0x119/0x300 [ 119.449512] ? futex_hash+0x15c/0x390 [ 119.449821] futex_hash+0x70/0x390 [ 119.450115] futex_wake+0x143/0x540 [ 119.450423] ? __pfx_perf_trace_lock+0x10/0x10 [ 119.450798] ? __pfx_futex_wake+0x10/0x10 [ 119.451138] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 119.451547] ? lock_release+0xc8/0x290 [ 119.451867] do_futex+0x26d/0x370 [ 119.452157] ? __pfx_do_futex+0x10/0x10 [ 119.452480] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 119.452914] ? __pfx___schedule+0x10/0x10 [ 119.453257] __x64_sys_futex+0x1c9/0x4d0 [ 119.453592] ? __pfx___x64_sys_futex+0x10/0x10 [ 119.453970] ? xfd_validate_state+0x55/0x180 [ 119.454343] do_syscall_64+0xbf/0x360 [ 119.454655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.455066] RIP: 0033:0x7fdc2317bb19 [ 119.455367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.456796] RSP: 002b:00007fdc206f1218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.457395] RAX: ffffffffffffffda RBX: 00007fdc2328ef68 RCX: 00007fdc2317bb19 [ 119.457960] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdc2328ef6c [ 119.458531] RBP: 00007fdc2328ef60 R08: 000000000000000e R09: 0000000000000000 [ 119.459095] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fdc2328ef6c [ 119.459666] R13: 00007ffd4f07f8cf R14: 00007fdc206f1300 R15: 0000000000022000 [ 119.460237] [ 119.460428] Modules linked in: [ 119.460712] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI [ 119.461583] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 119.462271] CPU: 1 UID: 0 PID: 3950 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 119.463210] Tainted: [D]=DIE, [W]=WARN [ 119.463515] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 119.464164] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.464540] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 119.465967] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012 [ 119.466405] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 119.466965] RDX: ffff8880458c1b80 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 119.467524] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd15cf0 [ 119.468087] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000 [ 119.468647] R13: 000000000000002c R14: ffff88806cf31490 R15: dffffc0000000000 [ 119.469209] FS: 00007fdc206f1700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 119.469846] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.470329] CR2: 0000555570c32708 CR3: 0000000044756000 CR4: 0000000000350ef0 [ 119.470893] Call Trace: [ 119.471101] [ 119.471283] ? __pfx_perf_tp_event+0x10/0x10 [ 119.471645] ? sched_clock_cpu+0x6c/0x4e0 [ 119.471985] ? trace_pelt_se_tp+0xdf/0x130 [ 119.472323] ? __update_load_avg_se+0x428/0xa40 [ 119.472705] ? lock_is_held_type+0x9e/0x120 [ 119.473054] ? __pick_eevdf+0x326/0x570 [ 119.473377] ? update_curr+0x71/0x500 [ 119.473686] ? check_preempt_wakeup_fair+0x406/0x950 [ 119.474096] ? perf_trace_run_bpf_submit+0xef/0x180 [ 119.474506] perf_trace_run_bpf_submit+0xef/0x180 [ 119.474900] perf_trace_lock+0x337/0x5d0 [ 119.475233] ? __pfx_perf_trace_lock+0x10/0x10 [ 119.475606] ? find_held_lock+0x2b/0x80 [ 119.475930] ? hrtimer_interrupt+0x114/0x830 [ 119.476286] lock_release+0x1ab/0x290 [ 119.476604] ktime_get_update_offsets_now+0xab/0x3c0 [ 119.477017] ? hrtimer_interrupt+0x114/0x830 [ 119.477372] ? __pfx_lapic_next_deadline+0x10/0x10 [ 119.477776] hrtimer_interrupt+0x114/0x830 [ 119.478114] ? __pfx_flush_tlb_func+0x10/0x10 [ 119.478487] ? trace_csd_function_exit+0x134/0x190 [ 119.478887] ? __flush_smp_call_function_queue+0x28c/0x740 [ 119.479342] __sysvec_apic_timer_interrupt+0xbb/0x330 [ 119.479760] sysvec_apic_timer_interrupt+0x6b/0x80 [ 119.480157] [ 119.480342] [ 119.480527] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 119.480945] RIP: 0010:oops_exit+0x0/0x50 [ 119.481276] Code: 00 3a 00 be ff ff ff ff 48 c7 c7 50 b4 43 86 e8 c6 0f f9 ff 5b e9 50 00 3a 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 36 00 3a 00 8b 1d c0 3d 4f 06 31 ff 89 de e8 57 [ 119.482713] RSP: 0018:ffff88804656f690 EFLAGS: 00000202 [ 119.483135] RAX: 000000000002db6b RBX: 0000000000000216 RCX: ffffc90003c2b000 [ 119.483694] RDX: 0000000000040000 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 119.484255] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f12690 [ 119.484826] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88804656f758 [ 119.485386] R13: 0000000000000000 R14: dffffc0020000032 R15: 0000000000000000 [ 119.485957] ? oops_end+0x4a/0xe0 [ 119.486258] oops_end+0x65/0xe0 [ 119.486533] exc_general_protection+0x1a2/0x330 [ 119.486920] asm_exc_general_protection+0x26/0x30 [ 119.487305] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.487682] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 119.489114] RSP: 0018:ffff88804656f800 EFLAGS: 00010212 [ 119.489540] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90003c2b000 [ 119.490102] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 119.490676] RBP: ffff88804656fa70 R08: ffff88806cf31340 R09: ffffe8ffffd15cf0 [ 119.491240] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 119.491811] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 119.492378] ? perf_tp_event+0x167/0xe70 [ 119.492715] ? __pfx_perf_tp_event+0x10/0x10 [ 119.493075] ? lock_is_held_type+0x9e/0x120 [ 119.493426] ? lock_is_held_type+0x9e/0x120 [ 119.493776] ? perf_trace_lock+0xb5/0x5d0 [ 119.494113] ? perf_trace_lock+0xb5/0x5d0 [ 119.494456] ? __pfx_perf_trace_lock+0x10/0x10 [ 119.494830] ? __pfx_perf_trace_lock+0x10/0x10 [ 119.495200] ? find_held_lock+0x2b/0x80 [ 119.495531] ? find_held_lock+0x2b/0x80 [ 119.495856] ? __perf_install_in_context+0x503/0xb90 [ 119.496258] ? lock_release+0xc8/0x290 [ 119.496572] ? do_raw_spin_unlock+0x53/0x220 [ 119.496952] ? perf_trace_run_bpf_submit+0xef/0x180 [ 119.497366] perf_trace_run_bpf_submit+0xef/0x180 [ 119.497765] perf_trace_lock+0x337/0x5d0 [ 119.498095] ? __pfx_perf_trace_lock+0x10/0x10 [ 119.498469] ? lock_acquire+0x15e/0x2f0 [ 119.498794] ? futex_ref_get+0x48/0x300 [ 119.499127] ? futex_ref_get+0x114/0x300 [ 119.499455] ? futex_hash+0x15c/0x390 [ 119.499775] lock_release+0x1ab/0x290 [ 119.500097] ? futex_hash+0x15c/0x390 [ 119.500415] futex_ref_get+0x119/0x300 [ 119.500743] ? futex_hash+0x15c/0x390 [ 119.501067] futex_hash+0x70/0x390 [ 119.501371] futex_wake+0x143/0x540 [ 119.501685] ? __pfx_perf_trace_lock+0x10/0x10 [ 119.502077] ? __pfx_futex_wake+0x10/0x10 [ 119.502425] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 119.502834] ? lock_release+0xc8/0x290 [ 119.503152] do_futex+0x26d/0x370 [ 119.503436] ? __pfx_do_futex+0x10/0x10 [ 119.503762] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 119.504188] ? __pfx___schedule+0x10/0x10 [ 119.504527] __x64_sys_futex+0x1c9/0x4d0 [ 119.504860] ? __pfx___x64_sys_futex+0x10/0x10 [ 119.505228] ? xfd_validate_state+0x55/0x180 [ 119.505592] do_syscall_64+0xbf/0x360 [ 119.505903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.506324] RIP: 0033:0x7fdc2317bb19 [ 119.506624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.508054] RSP: 002b:00007fdc206f1218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.508693] RAX: ffffffffffffffda RBX: 00007fdc2328ef68 RCX: 00007fdc2317bb19 [ 119.509265] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdc2328ef6c [ 119.509876] RBP: 00007fdc2328ef60 R08: 000000000000000e R09: 0000000000000000 [ 119.510461] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fdc2328ef6c [ 119.511043] R13: 00007ffd4f07f8cf R14: 00007fdc206f1300 R15: 0000000000022000 [ 119.511629] [ 119.511819] Modules linked in: [ 119.512079] ---[ end trace 0000000000000000 ]--- [ 119.512451] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.512826] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 119.514282] RSP: 0018:ffff88804656f800 EFLAGS: 00010212 [ 119.514722] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90003c2b000 [ 119.515313] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 119.515897] RBP: ffff88804656fa70 R08: ffff88806cf31340 R09: ffffe8ffffd15cf0 [ 119.516459] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 119.517023] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 119.517581] FS: 00007fdc206f1700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 119.518223] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.518732] CR2: 0000555570c32708 CR3: 0000000044756000 CR4: 0000000000350ef0 [ 119.519334] Kernel panic - not syncing: Fatal exception in interrupt [ 119.520046] Kernel Offset: disabled [ 119.520338] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 11:33:32 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88806cf3c300 RCX=ffffffff816880fc RDX=ffff8880170fb700 RSI=ffffffff816880d6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88801a0976f8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=1ffff1100d9c6bb1 R12=ffffed100d9e7861 R13=ffff88806cf3c308 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff816880d8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555ae17400 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2cc22000 CR3=00000000425b3000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff88804656f170 R8 =0000000000000000 R9 =ffffed10013fc046 R10=0000000000000036 R11=313030203a505352 R12=0000000000000036 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0 RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fdc206f1700 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555570c32708 CR3=0000000044756000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000