Warning: Permanently added '[localhost]:23464' (ECDSA) to the list of known hosts. 2025/09/01 12:16:33 fuzzer started 2025/09/01 12:16:34 dialing manager at localhost:35473 syzkaller login: [ 50.847986] cgroup: Unknown subsys name 'net' [ 50.896367] cgroup: Unknown subsys name 'cpuset' [ 50.912588] cgroup: Unknown subsys name 'rlimit' 2025/09/01 12:16:44 syscalls: 2214 2025/09/01 12:16:44 code coverage: enabled 2025/09/01 12:16:44 comparison tracing: enabled 2025/09/01 12:16:44 extra coverage: enabled 2025/09/01 12:16:44 setuid sandbox: enabled 2025/09/01 12:16:44 namespace sandbox: enabled 2025/09/01 12:16:44 Android sandbox: enabled 2025/09/01 12:16:44 fault injection: enabled 2025/09/01 12:16:44 leak checking: enabled 2025/09/01 12:16:44 net packet injection: enabled 2025/09/01 12:16:44 net device setup: enabled 2025/09/01 12:16:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 12:16:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 12:16:44 USB emulation: enabled 2025/09/01 12:16:44 hci packet injection: enabled 2025/09/01 12:16:44 wifi device emulation: enabled 2025/09/01 12:16:44 802.15.4 emulation: enabled 2025/09/01 12:16:44 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 12:16:45 fetching corpus: 50, signal 21147/24723 (executing program) 2025/09/01 12:16:45 fetching corpus: 100, signal 34594/39512 (executing program) 2025/09/01 12:16:45 fetching corpus: 150, signal 42902/49126 (executing program) 2025/09/01 12:16:45 fetching corpus: 200, signal 46891/54454 (executing program) 2025/09/01 12:16:45 fetching corpus: 250, signal 52269/61016 (executing program) 2025/09/01 12:16:45 fetching corpus: 300, signal 56231/66150 (executing program) 2025/09/01 12:16:45 fetching corpus: 350, signal 62381/73226 (executing program) 2025/09/01 12:16:45 fetching corpus: 400, signal 66875/78636 (executing program) 2025/09/01 12:16:45 fetching corpus: 450, signal 69055/81885 (executing program) 2025/09/01 12:16:46 fetching corpus: 500, signal 72348/86069 (executing program) 2025/09/01 12:16:46 fetching corpus: 550, signal 74981/89608 (executing program) 2025/09/01 12:16:46 fetching corpus: 600, signal 78682/94006 (executing program) 2025/09/01 12:16:46 fetching corpus: 650, signal 81239/97372 (executing program) 2025/09/01 12:16:46 fetching corpus: 700, signal 83164/100210 (executing program) 2025/09/01 12:16:46 fetching corpus: 750, signal 84871/102813 (executing program) 2025/09/01 12:16:46 fetching corpus: 800, signal 86717/105406 (executing program) 2025/09/01 12:16:46 fetching corpus: 850, signal 88019/107568 (executing program) 2025/09/01 12:16:46 fetching corpus: 900, signal 89911/110198 (executing program) 2025/09/01 12:16:46 fetching corpus: 950, signal 91142/112320 (executing program) 2025/09/01 12:16:46 fetching corpus: 1000, signal 93338/115166 (executing program) 2025/09/01 12:16:47 fetching corpus: 1050, signal 95261/117716 (executing program) 2025/09/01 12:16:47 fetching corpus: 1100, signal 97220/120243 (executing program) 2025/09/01 12:16:47 fetching corpus: 1150, signal 98484/122228 (executing program) 2025/09/01 12:16:47 fetching corpus: 1200, signal 99255/123776 (executing program) 2025/09/01 12:16:47 fetching corpus: 1250, signal 100806/125918 (executing program) 2025/09/01 12:16:47 fetching corpus: 1300, signal 102663/128259 (executing program) 2025/09/01 12:16:47 fetching corpus: 1350, signal 104484/130512 (executing program) 2025/09/01 12:16:47 fetching corpus: 1400, signal 105549/132168 (executing program) 2025/09/01 12:16:47 fetching corpus: 1450, signal 106526/133783 (executing program) 2025/09/01 12:16:47 fetching corpus: 1500, signal 107843/135612 (executing program) 2025/09/01 12:16:47 fetching corpus: 1550, signal 108783/137139 (executing program) 2025/09/01 12:16:47 fetching corpus: 1600, signal 110105/138895 (executing program) 2025/09/01 12:16:48 fetching corpus: 1650, signal 111757/140891 (executing program) 2025/09/01 12:16:48 fetching corpus: 1700, signal 113030/142551 (executing program) 2025/09/01 12:16:48 fetching corpus: 1750, signal 114293/144226 (executing program) 2025/09/01 12:16:48 fetching corpus: 1800, signal 115737/145960 (executing program) 2025/09/01 12:16:48 fetching corpus: 1850, signal 116717/147369 (executing program) 2025/09/01 12:16:48 fetching corpus: 1900, signal 117398/148563 (executing program) 2025/09/01 12:16:48 fetching corpus: 1950, signal 118457/150028 (executing program) 2025/09/01 12:16:48 fetching corpus: 2000, signal 119971/151733 (executing program) 2025/09/01 12:16:48 fetching corpus: 2050, signal 121544/153419 (executing program) 2025/09/01 12:16:48 fetching corpus: 2100, signal 123153/155124 (executing program) 2025/09/01 12:16:49 fetching corpus: 2150, signal 123877/156218 (executing program) 2025/09/01 12:16:49 fetching corpus: 2200, signal 124500/157310 (executing program) 2025/09/01 12:16:49 fetching corpus: 2250, signal 125218/158415 (executing program) 2025/09/01 12:16:49 fetching corpus: 2300, signal 126100/159593 (executing program) 2025/09/01 12:16:49 fetching corpus: 2350, signal 126905/160815 (executing program) 2025/09/01 12:16:49 fetching corpus: 2400, signal 127497/161806 (executing program) 2025/09/01 12:16:49 fetching corpus: 2450, signal 128891/163204 (executing program) 2025/09/01 12:16:49 fetching corpus: 2500, signal 129540/164226 (executing program) 2025/09/01 12:16:49 fetching corpus: 2550, signal 130490/165352 (executing program) 2025/09/01 12:16:49 fetching corpus: 2600, signal 131419/166435 (executing program) 2025/09/01 12:16:50 fetching corpus: 2650, signal 132296/167525 (executing program) 2025/09/01 12:16:50 fetching corpus: 2700, signal 133005/168492 (executing program) 2025/09/01 12:16:50 fetching corpus: 2750, signal 133625/169375 (executing program) 2025/09/01 12:16:50 fetching corpus: 2800, signal 134268/170269 (executing program) 2025/09/01 12:16:50 fetching corpus: 2850, signal 134949/171229 (executing program) 2025/09/01 12:16:50 fetching corpus: 2900, signal 135952/172272 (executing program) 2025/09/01 12:16:50 fetching corpus: 2950, signal 136530/173097 (executing program) 2025/09/01 12:16:50 fetching corpus: 3000, signal 137157/173956 (executing program) 2025/09/01 12:16:50 fetching corpus: 3050, signal 138089/174874 (executing program) 2025/09/01 12:16:50 fetching corpus: 3100, signal 138648/175651 (executing program) 2025/09/01 12:16:50 fetching corpus: 3150, signal 139429/176564 (executing program) 2025/09/01 12:16:51 fetching corpus: 3200, signal 139858/177315 (executing program) 2025/09/01 12:16:51 fetching corpus: 3250, signal 141257/178305 (executing program) 2025/09/01 12:16:51 fetching corpus: 3300, signal 141748/179050 (executing program) 2025/09/01 12:16:51 fetching corpus: 3350, signal 142408/179810 (executing program) 2025/09/01 12:16:51 fetching corpus: 3400, signal 143112/180515 (executing program) 2025/09/01 12:16:51 fetching corpus: 3450, signal 144871/181555 (executing program) 2025/09/01 12:16:51 fetching corpus: 3500, signal 145285/182214 (executing program) 2025/09/01 12:16:51 fetching corpus: 3550, signal 146085/182953 (executing program) 2025/09/01 12:16:51 fetching corpus: 3600, signal 146775/183651 (executing program) 2025/09/01 12:16:51 fetching corpus: 3650, signal 147582/184346 (executing program) 2025/09/01 12:16:52 fetching corpus: 3700, signal 148172/184962 (executing program) 2025/09/01 12:16:52 fetching corpus: 3750, signal 148639/185589 (executing program) 2025/09/01 12:16:52 fetching corpus: 3800, signal 149580/186275 (executing program) 2025/09/01 12:16:52 fetching corpus: 3850, signal 150351/186924 (executing program) 2025/09/01 12:16:52 fetching corpus: 3900, signal 150943/187512 (executing program) 2025/09/01 12:16:52 fetching corpus: 3950, signal 151421/188038 (executing program) 2025/09/01 12:16:52 fetching corpus: 4000, signal 151949/188569 (executing program) 2025/09/01 12:16:52 fetching corpus: 4050, signal 152523/189147 (executing program) 2025/09/01 12:16:52 fetching corpus: 4100, signal 152888/189654 (executing program) 2025/09/01 12:16:53 fetching corpus: 4150, signal 153361/190158 (executing program) 2025/09/01 12:16:53 fetching corpus: 4200, signal 153976/190654 (executing program) 2025/09/01 12:16:53 fetching corpus: 4250, signal 154486/191110 (executing program) 2025/09/01 12:16:53 fetching corpus: 4300, signal 155236/191599 (executing program) 2025/09/01 12:16:53 fetching corpus: 4350, signal 155673/192053 (executing program) 2025/09/01 12:16:53 fetching corpus: 4400, signal 156208/192475 (executing program) 2025/09/01 12:16:53 fetching corpus: 4450, signal 156706/192963 (executing program) 2025/09/01 12:16:53 fetching corpus: 4500, signal 157038/193396 (executing program) 2025/09/01 12:16:53 fetching corpus: 4550, signal 157768/193855 (executing program) 2025/09/01 12:16:53 fetching corpus: 4600, signal 158085/194282 (executing program) 2025/09/01 12:16:53 fetching corpus: 4650, signal 158381/194658 (executing program) 2025/09/01 12:16:53 fetching corpus: 4700, signal 159119/195063 (executing program) 2025/09/01 12:16:54 fetching corpus: 4750, signal 159737/195518 (executing program) 2025/09/01 12:16:54 fetching corpus: 4800, signal 160096/195757 (executing program) 2025/09/01 12:16:54 fetching corpus: 4850, signal 160589/195760 (executing program) 2025/09/01 12:16:54 fetching corpus: 4900, signal 161090/195764 (executing program) 2025/09/01 12:16:54 fetching corpus: 4950, signal 161462/195767 (executing program) 2025/09/01 12:16:54 fetching corpus: 5000, signal 161958/195772 (executing program) 2025/09/01 12:16:54 fetching corpus: 5050, signal 162574/195790 (executing program) 2025/09/01 12:16:54 fetching corpus: 5100, signal 162917/195790 (executing program) 2025/09/01 12:16:54 fetching corpus: 5150, signal 163278/195801 (executing program) 2025/09/01 12:16:54 fetching corpus: 5200, signal 163685/195828 (executing program) 2025/09/01 12:16:54 fetching corpus: 5250, signal 164023/195832 (executing program) 2025/09/01 12:16:55 fetching corpus: 5300, signal 164279/195843 (executing program) 2025/09/01 12:16:55 fetching corpus: 5350, signal 164662/195893 (executing program) 2025/09/01 12:16:55 fetching corpus: 5400, signal 165153/195893 (executing program) 2025/09/01 12:16:55 fetching corpus: 5450, signal 165709/195974 (executing program) 2025/09/01 12:16:55 fetching corpus: 5500, signal 167515/195975 (executing program) 2025/09/01 12:16:55 fetching corpus: 5550, signal 167811/195992 (executing program) 2025/09/01 12:16:55 fetching corpus: 5600, signal 168271/196006 (executing program) 2025/09/01 12:16:55 fetching corpus: 5650, signal 168744/196066 (executing program) 2025/09/01 12:16:55 fetching corpus: 5700, signal 169110/196066 (executing program) 2025/09/01 12:16:55 fetching corpus: 5750, signal 169490/196091 (executing program) 2025/09/01 12:16:55 fetching corpus: 5800, signal 169867/196096 (executing program) 2025/09/01 12:16:55 fetching corpus: 5850, signal 170174/196097 (executing program) 2025/09/01 12:16:56 fetching corpus: 5900, signal 170501/196100 (executing program) 2025/09/01 12:16:56 fetching corpus: 5950, signal 170807/196106 (executing program) 2025/09/01 12:16:56 fetching corpus: 6000, signal 171092/196112 (executing program) 2025/09/01 12:16:56 fetching corpus: 6050, signal 171454/196116 (executing program) 2025/09/01 12:16:56 fetching corpus: 6100, signal 171705/196119 (executing program) 2025/09/01 12:16:56 fetching corpus: 6150, signal 172133/196119 (executing program) 2025/09/01 12:16:56 fetching corpus: 6200, signal 172399/196122 (executing program) 2025/09/01 12:16:56 fetching corpus: 6250, signal 172680/196133 (executing program) 2025/09/01 12:16:56 fetching corpus: 6300, signal 172943/196139 (executing program) 2025/09/01 12:16:56 fetching corpus: 6350, signal 173500/196186 (executing program) 2025/09/01 12:16:56 fetching corpus: 6400, signal 173816/196188 (executing program) 2025/09/01 12:16:57 fetching corpus: 6450, signal 174109/196203 (executing program) 2025/09/01 12:16:57 fetching corpus: 6500, signal 174409/196217 (executing program) 2025/09/01 12:16:57 fetching corpus: 6550, signal 174702/196217 (executing program) 2025/09/01 12:16:57 fetching corpus: 6600, signal 174972/196220 (executing program) 2025/09/01 12:16:57 fetching corpus: 6650, signal 175256/196249 (executing program) 2025/09/01 12:16:57 fetching corpus: 6700, signal 175647/196271 (executing program) 2025/09/01 12:16:57 fetching corpus: 6750, signal 175881/196297 (executing program) 2025/09/01 12:16:57 fetching corpus: 6800, signal 176241/196298 (executing program) 2025/09/01 12:16:57 fetching corpus: 6850, signal 176505/196315 (executing program) 2025/09/01 12:16:57 fetching corpus: 6900, signal 176793/196345 (executing program) 2025/09/01 12:16:57 fetching corpus: 6950, signal 177071/196346 (executing program) 2025/09/01 12:16:57 fetching corpus: 7000, signal 177557/196350 (executing program) 2025/09/01 12:16:58 fetching corpus: 7050, signal 178341/196365 (executing program) 2025/09/01 12:16:58 fetching corpus: 7100, signal 178720/196366 (executing program) 2025/09/01 12:16:58 fetching corpus: 7150, signal 179136/196388 (executing program) 2025/09/01 12:16:58 fetching corpus: 7200, signal 179642/196389 (executing program) 2025/09/01 12:16:58 fetching corpus: 7250, signal 180036/196395 (executing program) 2025/09/01 12:16:58 fetching corpus: 7300, signal 180353/196404 (executing program) 2025/09/01 12:16:58 fetching corpus: 7350, signal 180851/196407 (executing program) 2025/09/01 12:16:58 fetching corpus: 7400, signal 181204/196422 (executing program) 2025/09/01 12:16:58 fetching corpus: 7450, signal 181433/196424 (executing program) 2025/09/01 12:16:58 fetching corpus: 7500, signal 181650/196439 (executing program) 2025/09/01 12:16:58 fetching corpus: 7550, signal 181839/196452 (executing program) 2025/09/01 12:16:58 fetching corpus: 7600, signal 182540/196459 (executing program) 2025/09/01 12:16:58 fetching corpus: 7650, signal 182894/196465 (executing program) 2025/09/01 12:16:59 fetching corpus: 7700, signal 183195/196467 (executing program) 2025/09/01 12:16:59 fetching corpus: 7750, signal 183544/196467 (executing program) 2025/09/01 12:16:59 fetching corpus: 7800, signal 183893/196467 (executing program) 2025/09/01 12:16:59 fetching corpus: 7850, signal 184160/196524 (executing program) 2025/09/01 12:16:59 fetching corpus: 7900, signal 184685/196544 (executing program) 2025/09/01 12:16:59 fetching corpus: 7950, signal 185135/196602 (executing program) 2025/09/01 12:16:59 fetching corpus: 8000, signal 185325/196602 (executing program) 2025/09/01 12:16:59 fetching corpus: 8050, signal 185709/196624 (executing program) 2025/09/01 12:16:59 fetching corpus: 8100, signal 186082/196624 (executing program) 2025/09/01 12:16:59 fetching corpus: 8150, signal 186317/196626 (executing program) 2025/09/01 12:16:59 fetching corpus: 8200, signal 186532/196633 (executing program) 2025/09/01 12:16:59 fetching corpus: 8250, signal 186862/196633 (executing program) 2025/09/01 12:17:00 fetching corpus: 8300, signal 187266/196635 (executing program) 2025/09/01 12:17:00 fetching corpus: 8350, signal 187634/196652 (executing program) 2025/09/01 12:17:00 fetching corpus: 8400, signal 188089/196656 (executing program) 2025/09/01 12:17:00 fetching corpus: 8450, signal 188336/196686 (executing program) 2025/09/01 12:17:00 fetching corpus: 8500, signal 188767/196691 (executing program) 2025/09/01 12:17:00 fetching corpus: 8550, signal 189136/196698 (executing program) 2025/09/01 12:17:00 fetching corpus: 8600, signal 189449/196704 (executing program) 2025/09/01 12:17:00 fetching corpus: 8650, signal 189847/196704 (executing program) 2025/09/01 12:17:01 fetching corpus: 8700, signal 190048/196704 (executing program) 2025/09/01 12:17:01 fetching corpus: 8750, signal 190304/196747 (executing program) 2025/09/01 12:17:01 fetching corpus: 8800, signal 190671/196747 (executing program) 2025/09/01 12:17:01 fetching corpus: 8850, signal 190881/196751 (executing program) 2025/09/01 12:17:01 fetching corpus: 8900, signal 191161/196756 (executing program) 2025/09/01 12:17:01 fetching corpus: 8950, signal 191365/196767 (executing program) 2025/09/01 12:17:01 fetching corpus: 9000, signal 191567/196771 (executing program) 2025/09/01 12:17:01 fetching corpus: 9050, signal 191783/196779 (executing program) 2025/09/01 12:17:01 fetching corpus: 9100, signal 191970/196792 (executing program) 2025/09/01 12:17:01 fetching corpus: 9150, signal 192225/196796 (executing program) 2025/09/01 12:17:01 fetching corpus: 9200, signal 192510/196805 (executing program) 2025/09/01 12:17:01 fetching corpus: 9250, signal 192808/196813 (executing program) 2025/09/01 12:17:01 fetching corpus: 9300, signal 193034/196818 (executing program) 2025/09/01 12:17:02 fetching corpus: 9350, signal 193226/196820 (executing program) 2025/09/01 12:17:02 fetching corpus: 9400, signal 193591/196824 (executing program) 2025/09/01 12:17:02 fetching corpus: 9405, signal 193601/196824 (executing program) 2025/09/01 12:17:02 fetching corpus: 9405, signal 193601/196824 (executing program) 2025/09/01 12:17:04 starting 8 fuzzer processes 12:17:04 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/123, 0x7b, 0x0) 12:17:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) 12:17:04 executing program 4: mount$9p_xen(0x0, &(0x7f0000000480)='./cgroup/cgroup.procs\x00', &(0x7f00000004c0), 0x0, &(0x7f00000042c0)) 12:17:04 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) truncate(&(0x7f0000000240)='./file1\x00', 0x10000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 12:17:04 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @short}, 0x14) 12:17:04 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x6, 0x7, 0x2) 12:17:04 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) 12:17:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed}, 0xe) getpeername(r0, 0x0, &(0x7f0000000080)) [ 80.980845] audit: type=1400 audit(1756729024.329:7): avc: denied { execmem } for pid=277 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 82.208810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.211326] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.213358] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.217320] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.220009] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.289328] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.299732] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.301161] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.303438] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.315464] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.327073] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.329705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.336181] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.337928] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.340024] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.341660] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.345355] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.348071] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.349218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.352700] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.352729] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.354255] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.359761] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.364139] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.369594] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.372196] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 82.373758] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.374314] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 82.376744] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 82.389637] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 82.395085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.395651] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 82.396631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 82.407646] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.411954] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 82.417606] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.431138] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 82.433250] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 82.439615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 82.441181] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.305528] Bluetooth: hci0: command tx timeout [ 84.432593] Bluetooth: hci1: command tx timeout [ 84.433325] Bluetooth: hci3: command tx timeout [ 84.496469] Bluetooth: hci4: command tx timeout [ 84.496588] Bluetooth: hci2: command tx timeout [ 84.497176] Bluetooth: hci5: command tx timeout [ 84.560512] Bluetooth: hci6: command tx timeout [ 84.562447] Bluetooth: hci7: command tx timeout [ 86.353521] Bluetooth: hci0: command tx timeout [ 86.480673] Bluetooth: hci3: command tx timeout [ 86.483401] Bluetooth: hci1: command tx timeout [ 86.544506] Bluetooth: hci5: command tx timeout [ 86.544955] Bluetooth: hci4: command tx timeout [ 86.545573] Bluetooth: hci2: command tx timeout [ 86.609474] Bluetooth: hci6: command tx timeout [ 86.609929] Bluetooth: hci7: command tx timeout [ 88.401523] Bluetooth: hci0: command tx timeout [ 88.529559] Bluetooth: hci1: command tx timeout [ 88.530107] Bluetooth: hci3: command tx timeout [ 88.593499] Bluetooth: hci2: command tx timeout [ 88.593957] Bluetooth: hci4: command tx timeout [ 88.594359] Bluetooth: hci5: command tx timeout [ 88.656440] Bluetooth: hci6: command tx timeout [ 88.656877] Bluetooth: hci7: command tx timeout [ 90.450467] Bluetooth: hci0: command tx timeout [ 90.577509] Bluetooth: hci1: command tx timeout [ 90.578281] Bluetooth: hci3: command tx timeout [ 90.640513] Bluetooth: hci5: command tx timeout [ 90.641243] Bluetooth: hci4: command tx timeout [ 90.642010] Bluetooth: hci2: command tx timeout [ 90.704616] Bluetooth: hci7: command tx timeout [ 90.705348] Bluetooth: hci6: command tx timeout [ 123.018641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.019269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.254365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.255009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.676506] audit: type=1400 audit(1756729067.022:8): avc: denied { open } for pid=3837 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 123.682516] audit: type=1400 audit(1756729067.023:9): avc: denied { kernel } for pid=3837 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:17:47 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) close_range(r0, r1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0x40, 0x1, 0x0, 0x10001}, {0x5, 0x1f, 0x96, 0x80000000}, {0x7, 0xf2, 0x8, 0xfffffffb}, {0xfff, 0x8, 0xd4, 0x7}, {0xc0, 0x0, 0x1, 0x4}]}, 0x10) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$getown(r1, 0x9) write$binfmt_elf64(r3, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)=ANY=[@ANYBLOB="0e004000000000000000080000"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4, 0x4, 0x2b, 0x4, 0x0, 0x7, 0x10000, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_config_ext={0x5}, 0x400, 0x3, 0x10000, 0x2, 0x6, 0x4, 0x1, 0x0, 0xffffffff, 0x0, 0x4}, 0xffffffffffffffff, 0x9, r3, 0xa) creat(&(0x7f00000003c0)='./file0\x00', 0x0) [ 123.802085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.802707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.927702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.928289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.978183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.978863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:17:47 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) close_range(r0, r1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0x40, 0x1, 0x0, 0x10001}, {0x5, 0x1f, 0x96, 0x80000000}, {0x7, 0xf2, 0x8, 0xfffffffb}, {0xfff, 0x8, 0xd4, 0x7}, {0xc0, 0x0, 0x1, 0x4}]}, 0x10) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$getown(r1, 0x9) write$binfmt_elf64(r3, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)=ANY=[@ANYBLOB="0e004000000000000000080000"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4, 0x4, 0x2b, 0x4, 0x0, 0x7, 0x10000, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_config_ext={0x5}, 0x400, 0x3, 0x10000, 0x2, 0x6, 0x4, 0x1, 0x0, 0xffffffff, 0x0, 0x4}, 0xffffffffffffffff, 0x9, r3, 0xa) creat(&(0x7f00000003c0)='./file0\x00', 0x0) [ 124.091097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.091916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.208209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.209017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:17:47 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) close_range(r0, r1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0x40, 0x1, 0x0, 0x10001}, {0x5, 0x1f, 0x96, 0x80000000}, {0x7, 0xf2, 0x8, 0xfffffffb}, {0xfff, 0x8, 0xd4, 0x7}, {0xc0, 0x0, 0x1, 0x4}]}, 0x10) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$getown(r1, 0x9) write$binfmt_elf64(r3, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)=ANY=[@ANYBLOB="0e004000000000000000080000"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4, 0x4, 0x2b, 0x4, 0x0, 0x7, 0x10000, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_config_ext={0x5}, 0x400, 0x3, 0x10000, 0x2, 0x6, 0x4, 0x1, 0x0, 0xffffffff, 0x0, 0x4}, 0xffffffffffffffff, 0x9, r3, 0xa) creat(&(0x7f00000003c0)='./file0\x00', 0x0) [ 124.254982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.255641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.269742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.270272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.391752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.392363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:17:47 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) close_range(r0, r1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0x40, 0x1, 0x0, 0x10001}, {0x5, 0x1f, 0x96, 0x80000000}, {0x7, 0xf2, 0x8, 0xfffffffb}, {0xfff, 0x8, 0xd4, 0x7}, {0xc0, 0x0, 0x1, 0x4}]}, 0x10) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$getown(r1, 0x9) write$binfmt_elf64(r3, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)=ANY=[@ANYBLOB="0e004000000000000000080000"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4, 0x4, 0x2b, 0x4, 0x0, 0x7, 0x10000, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_config_ext={0x5}, 0x400, 0x3, 0x10000, 0x2, 0x6, 0x4, 0x1, 0x0, 0xffffffff, 0x0, 0x4}, 0xffffffffffffffff, 0x9, r3, 0xa) creat(&(0x7f00000003c0)='./file0\x00', 0x0) [ 124.458609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.459219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:17:47 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @short}, 0x14) 12:17:47 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @short}, 0x14) 12:17:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) truncate(&(0x7f0000000240)='./file1\x00', 0x10000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) [ 124.579490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.580777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:17:47 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) close_range(r0, r1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0x40, 0x1, 0x0, 0x10001}, {0x5, 0x1f, 0x96, 0x80000000}, {0x7, 0xf2, 0x8, 0xfffffffb}, {0xfff, 0x8, 0xd4, 0x7}, {0xc0, 0x0, 0x1, 0x4}]}, 0x10) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$getown(r1, 0x9) write$binfmt_elf64(r3, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)=ANY=[@ANYBLOB="0e004000000000000000080000"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4, 0x4, 0x2b, 0x4, 0x0, 0x7, 0x10000, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_config_ext={0x5}, 0x400, 0x3, 0x10000, 0x2, 0x6, 0x4, 0x1, 0x0, 0xffffffff, 0x0, 0x4}, 0xffffffffffffffff, 0x9, r3, 0xa) creat(&(0x7f00000003c0)='./file0\x00', 0x0) [ 124.643637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.644265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.686421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.687056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.846587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.847181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.917136] 9pnet: Could not find request transport: xen [ 124.946210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.947007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.968494] 9pnet: Could not find request transport: xen 12:17:49 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) close_range(r0, r1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0x40, 0x1, 0x0, 0x10001}, {0x5, 0x1f, 0x96, 0x80000000}, {0x7, 0xf2, 0x8, 0xfffffffb}, {0xfff, 0x8, 0xd4, 0x7}, {0xc0, 0x0, 0x1, 0x4}]}, 0x10) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$getown(r1, 0x9) write$binfmt_elf64(r3, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)=ANY=[@ANYBLOB="0e004000000000000000080000"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4, 0x4, 0x2b, 0x4, 0x0, 0x7, 0x10000, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_config_ext={0x5}, 0x400, 0x3, 0x10000, 0x2, 0x6, 0x4, 0x1, 0x0, 0xffffffff, 0x0, 0x4}, 0xffffffffffffffff, 0x9, r3, 0xa) creat(&(0x7f00000003c0)='./file0\x00', 0x0) 12:17:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) truncate(&(0x7f0000000240)='./file1\x00', 0x10000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 12:17:49 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @short}, 0x14) 12:17:49 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer'}}}]}) 12:17:49 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x6180}], 0x1, 0x0, 0x0, 0x0) 12:17:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed}, 0xe) getpeername(r0, 0x0, &(0x7f0000000080)) 12:17:49 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) 12:17:49 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) [ 125.827991] tmpfs: Bad value for 'mpol' [ 125.833976] tmpfs: Bad value for 'mpol' 12:17:49 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) 12:17:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) truncate(&(0x7f0000000240)='./file1\x00', 0x10000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 12:17:49 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/module/snd_intel_sdw_acpi', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x57c) 12:17:49 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000005c0), 0x24, 0x0) rmdir(&(0x7f00000001c0)='./file0\x00') lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) 12:17:49 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/module/snd_intel_sdw_acpi', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x57c) 12:17:50 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) close_range(r0, r1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0x40, 0x1, 0x0, 0x10001}, {0x5, 0x1f, 0x96, 0x80000000}, {0x7, 0xf2, 0x8, 0xfffffffb}, {0xfff, 0x8, 0xd4, 0x7}, {0xc0, 0x0, 0x1, 0x4}]}, 0x10) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$getown(r1, 0x9) write$binfmt_elf64(r3, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)=ANY=[@ANYBLOB="0e004000000000000000080000"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4, 0x4, 0x2b, 0x4, 0x0, 0x7, 0x10000, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_config_ext={0x5}, 0x400, 0x3, 0x10000, 0x2, 0x6, 0x4, 0x1, 0x0, 0xffffffff, 0x0, 0x4}, 0xffffffffffffffff, 0x9, r3, 0xa) creat(&(0x7f00000003c0)='./file0\x00', 0x0) 12:17:50 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/module/snd_intel_sdw_acpi', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x57c) 12:17:50 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000005c0), 0x24, 0x0) rmdir(&(0x7f00000001c0)='./file0\x00') lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) 12:17:50 executing program 7: syz_emit_ethernet(0x6a, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x3, 0x0, 0x2f, 0x0, @private=0xa010100, @local, {[@ssrr={0x89, 0x3}]}}}}}}, 0x0) 12:17:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed}, 0xe) getpeername(r0, 0x0, &(0x7f0000000080)) 12:17:50 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) 12:17:50 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) 12:17:50 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) [ 126.830634] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 126.831500] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 126.832093] CPU: 0 UID: 0 PID: 3976 Comm: syz-executor.7 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 126.833401] Tainted: [W]=WARN [ 126.833950] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 126.835508] RIP: 0010:perf_tp_event+0x175/0xe70 [ 126.836364] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 126.840244] RSP: 0018:ffff888016527800 EFLAGS: 00010212 [ 126.841211] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 126.842043] RDX: ffff888045918000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 126.842578] RBP: ffff888016527a70 R08: ffff88806ce31340 R09: ffffe8ffffc16840 [ 126.843112] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 126.843646] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 126.844190] FS: 0000555594fc4400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 126.844791] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.845231] CR2: 00007f8f41f75000 CR3: 0000000044e4d000 CR4: 0000000000350ef0 [ 126.845768] Call Trace: [ 126.845969] [ 126.846150] ? __pfx_perf_tp_event+0x10/0x10 [ 126.846495] ? find_held_lock+0x2b/0x80 [ 126.846807] ? lock_release+0xc8/0x290 [ 126.847110] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 126.847517] ? __lock_acquire+0xc65/0x1b70 [ 126.847845] ? perf_trace_lock+0xb5/0x5d0 [ 126.848178] ? perf_trace_run_bpf_submit+0xef/0x180 [ 126.848563] perf_trace_run_bpf_submit+0xef/0x180 [ 126.848937] perf_trace_lock+0x337/0x5d0 [ 126.849254] ? __pfx_perf_trace_lock+0x10/0x10 [ 126.849610] ? lock_acquire+0x15e/0x2f0 [ 126.849916] ? futex_ref_get+0x48/0x300 [ 126.850222] ? futex_ref_get+0x114/0x300 [ 126.850531] ? futex_hash+0x15c/0x390 [ 126.850824] lock_release+0x1ab/0x290 [ 126.851121] ? futex_hash+0x15c/0x390 [ 126.851414] futex_ref_get+0x119/0x300 [ 126.851714] ? futex_hash+0x15c/0x390 [ 126.852006] futex_hash+0x70/0x390 [ 126.852288] futex_wake+0x143/0x540 [ 126.852573] ? ___pte_offset_map+0x176/0x370 [ 126.852915] ? __pfx_futex_wake+0x10/0x10 [ 126.853237] ? __handle_mm_fault+0x753/0x3260 [ 126.853591] ? perf_trace_lock+0xb5/0x5d0 [ 126.853912] do_futex+0x26d/0x370 [ 126.854184] ? __pfx_do_futex+0x10/0x10 [ 126.854491] ? __pfx_perf_trace_lock+0x10/0x10 [ 126.854846] __x64_sys_futex+0x1c9/0x4d0 [ 126.855161] ? __pfx___x64_sys_futex+0x10/0x10 [ 126.855513] ? lock_release+0xc8/0x290 [ 126.855814] ? do_raw_spin_unlock+0x53/0x220 [ 126.856164] ? _raw_spin_unlock+0x1e/0x40 [ 126.856485] ? file_close_fd+0x63/0x80 [ 126.856788] do_syscall_64+0xbf/0x360 [ 126.857084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.857475] RIP: 0033:0x7f8f41e65b19 [ 126.857760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.859120] RSP: 002b:00007ffe8349c208 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.859689] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8f41e65b19 [ 126.860227] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8f41f78f68 [ 126.860763] RBP: 00007f8f41f78f60 R08: 0000000000000000 R09: 0000000000000000 [ 126.861297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8f41f7ddf0 [ 126.861832] R13: 00007ffe8349c310 R14: 00007f8f41f78f60 R15: 000000000001eef7 [ 126.862381] [ 126.862564] Modules linked in: [ 126.862838] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 126.863666] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 126.864240] CPU: 0 UID: 0 PID: 3976 Comm: syz-executor.7 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 126.865125] Tainted: [D]=DIE, [W]=WARN [ 126.865415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 126.866027] RIP: 0010:perf_tp_event+0x175/0xe70 [ 126.866386] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 126.867732] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012 [ 126.868138] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 126.868670] RDX: ffff888045918000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 126.869203] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc16840 [ 126.869735] R10: 0000000000000000 R11: ffff88806ce37018 R12: dffffc0000000000 [ 126.870272] R13: 0000000000000024 R14: ffff88806ce31490 R15: dffffc0000000000 [ 126.870806] FS: 0000555594fc4400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 126.871406] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.871842] CR2: 00007f8f41f75000 CR3: 0000000044e4d000 CR4: 0000000000350ef0 [ 126.872381] Call Trace: [ 126.872581] [ 126.872755] ? __pfx_perf_tp_event+0x10/0x10 [ 126.873097] ? stack_depot_save_flags+0x2c/0xa20 [ 126.873462] ? kasan_save_stack+0x34/0x50 [ 126.873778] ? kasan_save_stack+0x24/0x50 [ 126.874094] ? kasan_save_track+0x14/0x30 [ 126.874409] ? __kasan_save_free_info+0x3a/0x60 [ 126.874762] ? __kasan_slab_free+0x3f/0x50 [ 126.875085] ? kmem_cache_free+0x2a1/0x540 [ 126.875404] ? rcu_core+0x7c8/0x1800 [ 126.875692] ? handle_softirqs+0x1b1/0x770 [ 126.876018] ? __irq_exit_rcu+0xc4/0x100 [ 126.876337] ? irq_exit_rcu+0x9/0x20 [ 126.876620] ? sysvec_apic_timer_interrupt+0x70/0x80 [ 126.877006] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 126.877412] ? debug_lockdep_rcu_enabled+0x2e/0x40 [ 126.877787] ? __might_resched+0x1d/0x510 [ 126.878102] ? __might_fault+0x80/0x190 [ 126.878407] ? kernel_clone+0x4ca/0x7f0 [ 126.878710] ? __do_sys_clone+0xce/0x120 [ 126.879017] ? do_syscall_64+0xbf/0x360 [ 126.879319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.879720] ? __pfx_perf_trace_lock+0x10/0x10 [ 126.880074] ? lock_is_held_type+0x9e/0x120 [ 126.880409] ? perf_trace_run_bpf_submit+0xef/0x180 [ 126.880790] perf_trace_run_bpf_submit+0xef/0x180 [ 126.881162] perf_trace_lock+0x337/0x5d0 [ 126.881472] ? place_entity+0x300/0x410 [ 126.881775] ? kvm_sched_clock_read+0x16/0x30 [ 126.882124] ? __pfx_perf_trace_lock+0x10/0x10 [ 126.882475] ? check_preempt_wakeup_fair+0x6e/0x950 [ 126.882855] ? sched_ttwu_pending+0x2e0/0x4a0 [ 126.883202] lock_release+0x1ab/0x290 [ 126.883495] ? ttwu_do_activate+0x1a4/0x8a0 [ 126.883827] _raw_spin_unlock+0x16/0x40 [ 126.884137] sched_ttwu_pending+0x2e0/0x4a0 [ 126.884469] ? __pfx_try_to_wake_up+0x10/0x10 [ 126.884816] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 126.885188] ? hrtimer_interrupt+0x652/0x830 [ 126.885525] __flush_smp_call_function_queue+0x434/0x740 [ 126.885941] __sysvec_call_function_single+0x6d/0x370 [ 126.886342] sysvec_call_function_single+0xa1/0xc0 [ 126.886718] [ 126.886893] [ 126.887069] asm_sysvec_call_function_single+0x1a/0x20 [ 126.887466] RIP: 0010:oops_exit+0x0/0x50 [ 126.887778] Code: 00 3a 00 be ff ff ff ff 48 c7 c7 50 b4 43 86 e8 c6 0f f9 ff 5b e9 50 00 3a 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 36 00 3a 00 8b 1d c0 3d 4f 06 31 ff 89 de e8 57 [ 126.889131] RSP: 0018:ffff888016527690 EFLAGS: 00000202 [ 126.889534] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff8139f06f [ 126.890066] RDX: ffff888045918000 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 126.890597] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f12690 [ 126.891128] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888016527758 [ 126.891659] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000 [ 126.892206] ? add_taint+0x5f/0xd0 [ 126.892483] ? oops_end+0x4a/0xe0 [ 126.892759] oops_end+0x65/0xe0 [ 126.893020] exc_general_protection+0x1a2/0x330 [ 126.893383] asm_exc_general_protection+0x26/0x30 [ 126.893747] RIP: 0010:perf_tp_event+0x175/0xe70 [ 126.894103] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 126.895447] RSP: 0018:ffff888016527800 EFLAGS: 00010212 [ 126.895847] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 126.896390] RDX: ffff888045918000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 126.896922] RBP: ffff888016527a70 R08: ffff88806ce31340 R09: ffffe8ffffc16840 [ 126.897457] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 126.897990] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 126.898528] ? perf_tp_event+0x167/0xe70 [ 126.898847] ? __pfx_perf_tp_event+0x10/0x10 [ 126.899188] ? find_held_lock+0x2b/0x80 [ 126.899497] ? lock_release+0xc8/0x290 [ 126.899798] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 126.900206] ? __lock_acquire+0xc65/0x1b70 [ 126.900664] ? perf_trace_lock+0xb5/0x5d0 [ 126.900990] ? perf_trace_run_bpf_submit+0xef/0x180 [ 126.901380] perf_trace_run_bpf_submit+0xef/0x180 [ 126.901759] perf_trace_lock+0x337/0x5d0 [ 126.902078] ? __pfx_perf_trace_lock+0x10/0x10 [ 126.902447] ? lock_acquire+0x15e/0x2f0 [ 126.902765] ? futex_ref_get+0x48/0x300 [ 126.903082] ? futex_ref_get+0x114/0x300 [ 126.903403] ? futex_hash+0x15c/0x390 [ 126.903715] lock_release+0x1ab/0x290 [ 126.904023] ? futex_hash+0x15c/0x390 [ 126.904332] futex_ref_get+0x119/0x300 [ 126.904641] ? futex_hash+0x15c/0x390 [ 126.904948] futex_hash+0x70/0x390 [ 126.905237] futex_wake+0x143/0x540 [ 126.905535] ? ___pte_offset_map+0x176/0x370 [ 126.905891] ? __pfx_futex_wake+0x10/0x10 [ 126.906225] ? __handle_mm_fault+0x753/0x3260 [ 126.906593] ? perf_trace_lock+0xb5/0x5d0 [ 126.906930] do_futex+0x26d/0x370 [ 126.907215] ? __pfx_do_futex+0x10/0x10 [ 126.907539] ? __pfx_perf_trace_lock+0x10/0x10 [ 126.907912] __x64_sys_futex+0x1c9/0x4d0 [ 126.908249] ? __pfx___x64_sys_futex+0x10/0x10 [ 126.908616] ? lock_release+0xc8/0x290 [ 126.908931] ? do_raw_spin_unlock+0x53/0x220 [ 126.909289] ? _raw_spin_unlock+0x1e/0x40 [ 126.909623] ? file_close_fd+0x63/0x80 [ 126.909938] do_syscall_64+0xbf/0x360 [ 126.910244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.910652] RIP: 0033:0x7f8f41e65b19 [ 126.910951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.912375] RSP: 002b:00007ffe8349c208 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.912973] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8f41e65b19 [ 126.913530] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8f41f78f68 [ 126.914091] RBP: 00007f8f41f78f60 R08: 0000000000000000 R09: 0000000000000000 [ 126.914655] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8f41f7ddf0 [ 126.915213] R13: 00007ffe8349c310 R14: 00007f8f41f78f60 R15: 000000000001eef7 [ 126.915780] [ 126.915969] Modules linked in: [ 126.916236] ---[ end trace 0000000000000000 ]--- [ 126.916604] RIP: 0010:perf_tp_event+0x175/0xe70 [ 126.916976] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 126.918392] RSP: 0018:ffff888016527800 EFLAGS: 00010212 [ 126.918813] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 126.919376] RDX: ffff888045918000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 126.919935] RBP: ffff888016527a70 R08: ffff88806ce31340 R09: ffffe8ffffc16840 [ 126.920497] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 126.921061] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 126.921623] FS: 0000555594fc4400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 126.922256] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.922713] CR2: 00007f8f41f75000 CR3: 0000000044e4d000 CR4: 0000000000350ef0 [ 126.923279] Kernel panic - not syncing: Fatal exception in interrupt [ 126.923960] Kernel Offset: disabled [ 126.924262] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 12:17:50 Registers: info registers vcpu 0 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff8880165270f0 R8 =0000000000000000 R9 =ffffed100166b046 R10=0000000000000038 R11=0000000065646f43 R12=0000000000000038 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0 RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555594fc4400 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8f41f75000 CR3=0000000044e4d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000000000000ffffffff XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007f8f41f4c7c800007f8f41f4c7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000000195b2 RBX=ffff88806ce3de20 RCX=ffffc900044ac000 RDX=0000000000040000 RSI=ffffffff816880d6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff8880472bf968 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=1ffff1100d9e6bb1 R12=ffffed100d9c7bc5 R13=ffff88806ce3de28 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff816880d8 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd8dec5d700 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d527000 CR3=000000001e6b0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fd8e17ce7c000007fd8e17ce7c8 XMM02=00007fd8e17ce7e000007fd8e17ce7c0 XMM03=00007fd8e17ce7c800007fd8e17ce7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000