Warning: Permanently added '[localhost]:52712' (ECDSA) to the list of known hosts. 2025/08/29 10:25:24 fuzzer started 2025/08/29 10:25:24 dialing manager at localhost:43077 syzkaller login: [ 43.748593] cgroup: Unknown subsys name 'net' [ 43.810365] cgroup: Unknown subsys name 'cpuset' [ 43.824612] cgroup: Unknown subsys name 'rlimit' 2025/08/29 10:25:36 syscalls: 2214 2025/08/29 10:25:36 code coverage: enabled 2025/08/29 10:25:36 comparison tracing: enabled 2025/08/29 10:25:36 extra coverage: enabled 2025/08/29 10:25:36 setuid sandbox: enabled 2025/08/29 10:25:36 namespace sandbox: enabled 2025/08/29 10:25:36 Android sandbox: enabled 2025/08/29 10:25:36 fault injection: enabled 2025/08/29 10:25:36 leak checking: enabled 2025/08/29 10:25:36 net packet injection: enabled 2025/08/29 10:25:36 net device setup: enabled 2025/08/29 10:25:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 10:25:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 10:25:36 USB emulation: enabled 2025/08/29 10:25:36 hci packet injection: enabled 2025/08/29 10:25:36 wifi device emulation: enabled 2025/08/29 10:25:36 802.15.4 emulation: enabled 2025/08/29 10:25:36 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 10:25:36 fetching corpus: 37, signal 18833/22421 (executing program) 2025/08/29 10:25:36 fetching corpus: 83, signal 35031/39802 (executing program) 2025/08/29 10:25:36 fetching corpus: 133, signal 41689/47736 (executing program) 2025/08/29 10:25:37 fetching corpus: 183, signal 47377/54615 (executing program) 2025/08/29 10:25:37 fetching corpus: 233, signal 51741/60164 (executing program) 2025/08/29 10:25:37 fetching corpus: 283, signal 55855/65405 (executing program) 2025/08/29 10:25:37 fetching corpus: 333, signal 60461/70955 (executing program) 2025/08/29 10:25:37 fetching corpus: 383, signal 64801/76148 (executing program) 2025/08/29 10:25:37 fetching corpus: 433, signal 67611/79888 (executing program) 2025/08/29 10:25:37 fetching corpus: 483, signal 70119/83249 (executing program) 2025/08/29 10:25:37 fetching corpus: 533, signal 72683/86624 (executing program) 2025/08/29 10:25:37 fetching corpus: 583, signal 75325/90069 (executing program) 2025/08/29 10:25:37 fetching corpus: 633, signal 78598/93962 (executing program) 2025/08/29 10:25:37 fetching corpus: 683, signal 83025/98798 (executing program) 2025/08/29 10:25:38 fetching corpus: 733, signal 85489/101919 (executing program) 2025/08/29 10:25:38 fetching corpus: 783, signal 87228/104382 (executing program) 2025/08/29 10:25:38 fetching corpus: 833, signal 89343/107130 (executing program) 2025/08/29 10:25:38 fetching corpus: 883, signal 91806/110068 (executing program) 2025/08/29 10:25:38 fetching corpus: 933, signal 94031/112752 (executing program) 2025/08/29 10:25:38 fetching corpus: 983, signal 95358/114680 (executing program) 2025/08/29 10:25:38 fetching corpus: 1033, signal 96983/116819 (executing program) 2025/08/29 10:25:38 fetching corpus: 1083, signal 98084/118550 (executing program) 2025/08/29 10:25:38 fetching corpus: 1133, signal 99632/120629 (executing program) 2025/08/29 10:25:38 fetching corpus: 1183, signal 101106/122539 (executing program) 2025/08/29 10:25:39 fetching corpus: 1233, signal 102654/124515 (executing program) 2025/08/29 10:25:39 fetching corpus: 1283, signal 103645/126040 (executing program) 2025/08/29 10:25:39 fetching corpus: 1332, signal 104601/127509 (executing program) 2025/08/29 10:25:39 fetching corpus: 1382, signal 106443/129500 (executing program) 2025/08/29 10:25:39 fetching corpus: 1431, signal 107469/130960 (executing program) 2025/08/29 10:25:39 fetching corpus: 1481, signal 109184/132821 (executing program) 2025/08/29 10:25:39 fetching corpus: 1531, signal 110374/134368 (executing program) 2025/08/29 10:25:39 fetching corpus: 1581, signal 111588/135894 (executing program) 2025/08/29 10:25:39 fetching corpus: 1631, signal 112704/137333 (executing program) 2025/08/29 10:25:39 fetching corpus: 1681, signal 113463/138518 (executing program) 2025/08/29 10:25:40 fetching corpus: 1731, signal 114542/139858 (executing program) 2025/08/29 10:25:40 fetching corpus: 1781, signal 115661/141222 (executing program) 2025/08/29 10:25:40 fetching corpus: 1831, signal 116534/142441 (executing program) 2025/08/29 10:25:40 fetching corpus: 1881, signal 117670/143764 (executing program) 2025/08/29 10:25:40 fetching corpus: 1931, signal 118847/145037 (executing program) 2025/08/29 10:25:40 fetching corpus: 1981, signal 119945/146261 (executing program) 2025/08/29 10:25:40 fetching corpus: 2031, signal 121289/147645 (executing program) 2025/08/29 10:25:40 fetching corpus: 2081, signal 122099/148671 (executing program) 2025/08/29 10:25:40 fetching corpus: 2130, signal 122997/149767 (executing program) 2025/08/29 10:25:40 fetching corpus: 2180, signal 123814/150841 (executing program) 2025/08/29 10:25:40 fetching corpus: 2229, signal 124623/151900 (executing program) 2025/08/29 10:25:40 fetching corpus: 2279, signal 125884/153070 (executing program) 2025/08/29 10:25:40 fetching corpus: 2329, signal 126977/154137 (executing program) 2025/08/29 10:25:41 fetching corpus: 2379, signal 127600/154964 (executing program) 2025/08/29 10:25:41 fetching corpus: 2429, signal 128319/155876 (executing program) 2025/08/29 10:25:41 fetching corpus: 2479, signal 129324/156969 (executing program) 2025/08/29 10:25:41 fetching corpus: 2529, signal 130008/157781 (executing program) 2025/08/29 10:25:41 fetching corpus: 2579, signal 131382/158817 (executing program) 2025/08/29 10:25:41 fetching corpus: 2629, signal 132364/159766 (executing program) 2025/08/29 10:25:41 fetching corpus: 2679, signal 133517/160731 (executing program) 2025/08/29 10:25:41 fetching corpus: 2729, signal 134381/161516 (executing program) 2025/08/29 10:25:41 fetching corpus: 2779, signal 135048/162279 (executing program) 2025/08/29 10:25:42 fetching corpus: 2829, signal 135976/163090 (executing program) 2025/08/29 10:25:42 fetching corpus: 2879, signal 139085/164633 (executing program) 2025/08/29 10:25:42 fetching corpus: 2929, signal 139770/165257 (executing program) 2025/08/29 10:25:42 fetching corpus: 2979, signal 140411/165883 (executing program) 2025/08/29 10:25:42 fetching corpus: 3029, signal 141046/166508 (executing program) 2025/08/29 10:25:42 fetching corpus: 3079, signal 142049/167253 (executing program) 2025/08/29 10:25:42 fetching corpus: 3129, signal 142511/167730 (executing program) 2025/08/29 10:25:42 fetching corpus: 3179, signal 143065/168274 (executing program) 2025/08/29 10:25:42 fetching corpus: 3229, signal 143622/168804 (executing program) 2025/08/29 10:25:42 fetching corpus: 3279, signal 144431/169332 (executing program) 2025/08/29 10:25:43 fetching corpus: 3329, signal 145200/169875 (executing program) 2025/08/29 10:25:43 fetching corpus: 3379, signal 145768/170362 (executing program) 2025/08/29 10:25:43 fetching corpus: 3429, signal 146368/170934 (executing program) 2025/08/29 10:25:43 fetching corpus: 3479, signal 146850/171370 (executing program) 2025/08/29 10:25:43 fetching corpus: 3529, signal 147742/171886 (executing program) 2025/08/29 10:25:43 fetching corpus: 3579, signal 148308/172392 (executing program) 2025/08/29 10:25:43 fetching corpus: 3629, signal 149231/172892 (executing program) 2025/08/29 10:25:43 fetching corpus: 3679, signal 149726/173292 (executing program) 2025/08/29 10:25:43 fetching corpus: 3728, signal 150523/173683 (executing program) 2025/08/29 10:25:43 fetching corpus: 3778, signal 150976/174059 (executing program) 2025/08/29 10:25:44 fetching corpus: 3828, signal 151806/174489 (executing program) 2025/08/29 10:25:44 fetching corpus: 3878, signal 152281/174861 (executing program) 2025/08/29 10:25:44 fetching corpus: 3928, signal 152671/175199 (executing program) 2025/08/29 10:25:44 fetching corpus: 3978, signal 153240/175522 (executing program) 2025/08/29 10:25:44 fetching corpus: 4028, signal 153769/175826 (executing program) 2025/08/29 10:25:44 fetching corpus: 4078, signal 154369/176113 (executing program) 2025/08/29 10:25:44 fetching corpus: 4128, signal 154936/176367 (executing program) 2025/08/29 10:25:44 fetching corpus: 4178, signal 155452/176640 (executing program) 2025/08/29 10:25:44 fetching corpus: 4228, signal 155979/176947 (executing program) 2025/08/29 10:25:44 fetching corpus: 4278, signal 156519/176952 (executing program) 2025/08/29 10:25:45 fetching corpus: 4328, signal 156827/176965 (executing program) 2025/08/29 10:25:45 fetching corpus: 4378, signal 157267/176980 (executing program) 2025/08/29 10:25:45 fetching corpus: 4428, signal 157787/177090 (executing program) 2025/08/29 10:25:45 fetching corpus: 4478, signal 158234/177091 (executing program) 2025/08/29 10:25:45 fetching corpus: 4528, signal 158711/177099 (executing program) 2025/08/29 10:25:45 fetching corpus: 4578, signal 159108/177103 (executing program) 2025/08/29 10:25:45 fetching corpus: 4628, signal 159521/177110 (executing program) 2025/08/29 10:25:45 fetching corpus: 4678, signal 160119/177143 (executing program) 2025/08/29 10:25:45 fetching corpus: 4728, signal 160555/177143 (executing program) 2025/08/29 10:25:45 fetching corpus: 4778, signal 161332/177158 (executing program) 2025/08/29 10:25:46 fetching corpus: 4828, signal 161761/177172 (executing program) 2025/08/29 10:25:46 fetching corpus: 4878, signal 162171/177207 (executing program) 2025/08/29 10:25:46 fetching corpus: 4928, signal 162567/177209 (executing program) 2025/08/29 10:25:46 fetching corpus: 4978, signal 162918/177220 (executing program) 2025/08/29 10:25:46 fetching corpus: 5028, signal 163409/177228 (executing program) 2025/08/29 10:25:46 fetching corpus: 5078, signal 163701/177245 (executing program) 2025/08/29 10:25:46 fetching corpus: 5128, signal 163981/177254 (executing program) 2025/08/29 10:25:46 fetching corpus: 5178, signal 164472/177254 (executing program) 2025/08/29 10:25:46 fetching corpus: 5228, signal 164875/177254 (executing program) 2025/08/29 10:25:46 fetching corpus: 5278, signal 165249/177255 (executing program) 2025/08/29 10:25:46 fetching corpus: 5328, signal 165687/177261 (executing program) 2025/08/29 10:25:46 fetching corpus: 5378, signal 166026/177299 (executing program) 2025/08/29 10:25:47 fetching corpus: 5428, signal 166360/177306 (executing program) 2025/08/29 10:25:47 fetching corpus: 5478, signal 166739/177308 (executing program) 2025/08/29 10:25:47 fetching corpus: 5528, signal 167207/177313 (executing program) 2025/08/29 10:25:47 fetching corpus: 5578, signal 167665/177320 (executing program) 2025/08/29 10:25:47 fetching corpus: 5628, signal 168018/177329 (executing program) 2025/08/29 10:25:47 fetching corpus: 5678, signal 168570/177329 (executing program) 2025/08/29 10:25:47 fetching corpus: 5728, signal 168960/177336 (executing program) 2025/08/29 10:25:47 fetching corpus: 5778, signal 169283/177432 (executing program) 2025/08/29 10:25:47 fetching corpus: 5828, signal 169730/177438 (executing program) 2025/08/29 10:25:47 fetching corpus: 5878, signal 170324/177442 (executing program) 2025/08/29 10:25:47 fetching corpus: 5928, signal 170629/177442 (executing program) 2025/08/29 10:25:48 fetching corpus: 5978, signal 170952/177453 (executing program) 2025/08/29 10:25:48 fetching corpus: 6028, signal 171528/177460 (executing program) 2025/08/29 10:25:48 fetching corpus: 6078, signal 171830/177462 (executing program) 2025/08/29 10:25:48 fetching corpus: 6128, signal 172157/177471 (executing program) 2025/08/29 10:25:48 fetching corpus: 6178, signal 172514/177475 (executing program) 2025/08/29 10:25:48 fetching corpus: 6228, signal 172781/177476 (executing program) 2025/08/29 10:25:48 fetching corpus: 6278, signal 173083/177484 (executing program) 2025/08/29 10:25:48 fetching corpus: 6328, signal 173395/177487 (executing program) 2025/08/29 10:25:48 fetching corpus: 6378, signal 173655/177508 (executing program) 2025/08/29 10:25:48 fetching corpus: 6428, signal 173971/177513 (executing program) 2025/08/29 10:25:49 fetching corpus: 6478, signal 174360/177516 (executing program) 2025/08/29 10:25:49 fetching corpus: 6528, signal 174903/177528 (executing program) 2025/08/29 10:25:49 fetching corpus: 6578, signal 175164/177541 (executing program) 2025/08/29 10:25:49 fetching corpus: 6588, signal 175256/177541 (executing program) 2025/08/29 10:25:49 fetching corpus: 6588, signal 175256/177541 (executing program) 2025/08/29 10:25:51 starting 8 fuzzer processes 10:25:51 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:25:51 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) 10:25:51 executing program 1: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, {0x11, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "6e5dddff"}}}}}, 0x0) 10:25:51 executing program 5: memfd_create(0x0, 0x18) 10:25:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 10:25:51 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) ioctl$CDROMREADMODE2(r0, 0x530c, &(0x7f0000000480)={0x0, 0x2}) [ 70.509290] audit: type=1400 audit(1756463151.779:7): avc: denied { execmem } for pid=271 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:25:51 executing program 7: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2002, 0x1, 0x0, 0x0, 0x0) 10:25:51 executing program 6: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000bc0)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c0000000000000000fd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172edcf090a5f0", 0xb0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601781c53677b642fa92a7b767d76e208d17a13940ff013466264e16a26d7f004dfb575a75317d1eded2d32cbd9c6789c474435873ebc769bfbf0a064e61b363a4c45bc4b5fc77b81c120bbd2ecf508e7485bfcf1facea6f5763bb13023aed4cd7ff200554cb5d3307dfc43e8fc49878f7ac27e2226a48d87471708d036d5448c20207731438839301058c114dce8bd59355705c1d94d99aa6a2a394a94ddd456c3b66ea43e84253bab73e0699ea6778861b1cf71ce86ffe512040a7c274b4e07", 0x2bf) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = getpgrp(0x0) kcmp(r2, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) getpgrp(0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) [ 71.825600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.829164] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.833429] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.838862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.843362] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.862191] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.876549] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.878486] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.880680] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.883296] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.884455] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.886310] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.888311] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.889732] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.891587] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.891757] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.893385] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 71.896608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.898264] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 71.899064] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.901210] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.901424] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.903860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 71.910169] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.918166] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 71.921130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.923710] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.929060] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 71.930528] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.950189] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.956481] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 71.958837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 71.967389] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 71.970551] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 71.989201] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 71.992065] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 71.994518] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 71.997060] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 72.000201] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 72.008467] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 73.918021] Bluetooth: hci1: command tx timeout [ 73.979009] Bluetooth: hci3: command tx timeout [ 73.979728] Bluetooth: hci2: command tx timeout [ 73.979935] Bluetooth: hci4: command tx timeout [ 74.042966] Bluetooth: hci7: command tx timeout [ 74.043967] Bluetooth: hci0: command tx timeout [ 74.045888] Bluetooth: hci5: command tx timeout [ 74.046407] Bluetooth: hci6: command tx timeout [ 75.963397] Bluetooth: hci1: command tx timeout [ 76.027061] Bluetooth: hci2: command tx timeout [ 76.027530] Bluetooth: hci3: command tx timeout [ 76.028192] Bluetooth: hci4: command tx timeout [ 76.092199] Bluetooth: hci6: command tx timeout [ 76.092662] Bluetooth: hci0: command tx timeout [ 76.093099] Bluetooth: hci5: command tx timeout [ 76.093487] Bluetooth: hci7: command tx timeout [ 78.010970] Bluetooth: hci1: command tx timeout [ 78.075955] Bluetooth: hci3: command tx timeout [ 78.075977] Bluetooth: hci4: command tx timeout [ 78.076601] Bluetooth: hci2: command tx timeout [ 78.138995] Bluetooth: hci7: command tx timeout [ 78.139042] Bluetooth: hci5: command tx timeout [ 78.139627] Bluetooth: hci6: command tx timeout [ 78.140365] Bluetooth: hci0: command tx timeout [ 80.058971] Bluetooth: hci1: command tx timeout [ 80.124745] Bluetooth: hci2: command tx timeout [ 80.126156] Bluetooth: hci4: command tx timeout [ 80.126541] Bluetooth: hci3: command tx timeout [ 80.187013] Bluetooth: hci6: command tx timeout [ 80.187500] Bluetooth: hci5: command tx timeout [ 80.188307] Bluetooth: hci0: command tx timeout [ 80.188690] Bluetooth: hci7: command tx timeout [ 109.313378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.314026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.555081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.555716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.862207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.862796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.965444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.966045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.967946] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 10:26:31 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) ioctl$CDROMREADMODE2(r0, 0x530c, &(0x7f0000000480)={0x0, 0x2}) [ 110.090446] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 110.090761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.091675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.097952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.098473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:26:31 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) ioctl$CDROMREADMODE2(r0, 0x530c, &(0x7f0000000480)={0x0, 0x2}) [ 110.192533] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 10:26:31 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) ioctl$CDROMREADMODE2(r0, 0x530c, &(0x7f0000000480)={0x0, 0x2}) [ 110.234916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.235465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.260149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.260750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.268829] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 110.292912] audit: type=1400 audit(1756463191.564:8): avc: denied { open } for pid=3872 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 110.294541] audit: type=1400 audit(1756463191.564:9): avc: denied { kernel } for pid=3872 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 110.340078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.340707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:26:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0xb, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) [ 110.374132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.374712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.393637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.394395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:26:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0xb, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 10:26:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0xb, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 10:26:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0xb, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 10:26:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x2, 0x2000000000000000) [ 110.594052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.594820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.650186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.650787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.747381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.748663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.772401] syz-executor.6 (3873) used greatest stack depth: 23792 bytes left [ 110.795804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.796390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.853477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.854155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:26:32 executing program 6: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000bc0)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c0000000000000000fd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172edcf090a5f0", 0xb0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x2bf) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = getpgrp(0x0) kcmp(r2, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) getpgrp(0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 10:26:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x2, 0x2000000000000000) 10:26:32 executing program 3: timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x4, @thr={&(0x7f0000000040), 0x0}}, 0x0) 10:26:32 executing program 5: memfd_create(0x0, 0x18) 10:26:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) 10:26:32 executing program 7: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2002, 0x1, 0x0, 0x0, 0x0) 10:26:32 executing program 1: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, {0x11, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "6e5dddff"}}}}}, 0x0) 10:26:32 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:26:32 executing program 5: memfd_create(0x0, 0x18) 10:26:32 executing program 7: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2002, 0x1, 0x0, 0x0, 0x0) 10:26:32 executing program 1: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, {0x11, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "6e5dddff"}}}}}, 0x0) 10:26:32 executing program 3: timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x4, @thr={&(0x7f0000000040), 0x0}}, 0x0) 10:26:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) 10:26:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x2, 0x2000000000000000) 10:26:32 executing program 5: memfd_create(0x0, 0x18) 10:26:32 executing program 7: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2002, 0x1, 0x0, 0x0, 0x0) 10:26:32 executing program 3: timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x4, @thr={&(0x7f0000000040), 0x0}}, 0x0) 10:26:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x2, 0x2000000000000000) 10:26:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) 10:26:32 executing program 7: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000bc0)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c0000000000000000fd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172edcf090a5f0", 0xb0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x2bf) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = getpgrp(0x0) kcmp(r2, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) getpgrp(0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 10:26:32 executing program 1: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, {0x11, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "6e5dddff"}}}}}, 0x0) 10:26:32 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:26:32 executing program 6: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000bc0)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c0000000000000000fd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172edcf090a5f0", 0xb0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x2bf) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = getpgrp(0x0) kcmp(r2, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) getpgrp(0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 10:26:32 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000bc0)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c0000000000000000fd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172edcf090a5f0", 0xb0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x2bf) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = getpgrp(0x0) kcmp(r2, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) getpgrp(0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 10:26:32 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0004}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) [ 111.600576] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 111.601752] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 111.602457] CPU: 1 UID: 0 PID: 357 Comm: kworker/u10:5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 111.603727] Tainted: [W]=WARN [ 111.604321] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 111.606012] Workqueue: ext4-rsv-conversion ext4_end_io_rsv_work [ 111.607222] RIP: 0010:perf_tp_event+0x175/0xe70 [ 111.608434] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 111.611363] RSP: 0018:ffff88801652f580 EFLAGS: 00010012 [ 111.611768] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 111.612289] RDX: ffff88801515b700 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 111.612809] RBP: ffff88801652f7f0 R08: ffff88806cf31340 R09: ffffe8ffffd10b38 [ 111.613329] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 111.613854] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 111.614374] FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 111.614961] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.615388] CR2: 0000001b2d424000 CR3: 00000000424ba000 CR4: 0000000000350ef0 [ 111.615919] Call Trace: [ 111.616113] [ 111.616286] ? ret_from_fork_asm+0x1a/0x30 [ 111.616606] ? __pfx_perf_tp_event+0x10/0x10 [ 111.616942] ? __lock_acquire+0xc65/0x1b70 [ 111.617260] ? __lock_acquire+0xc65/0x1b70 [ 111.617579] ? find_held_lock+0x2b/0x80 [ 111.617882] ? __mod_timer+0x86f/0xcc0 [ 111.618177] ? lock_release+0xc8/0x290 [ 111.618470] ? perf_trace_run_bpf_submit+0xef/0x180 [ 111.618841] ? __lock_acquire+0xc65/0x1b70 [ 111.619159] perf_trace_run_bpf_submit+0xef/0x180 [ 111.619521] perf_trace_preemptirq_template+0x259/0x430 [ 111.619932] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 111.620373] ? find_held_lock+0x2b/0x80 [ 111.620675] ? sb_clear_inode_writeback+0x18b/0x300 [ 111.621051] ? find_held_lock+0x2b/0x80 [ 111.621352] ? __folio_end_writeback+0x5b3/0xae0 [ 111.621708] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 111.622089] trace_irq_enable.constprop.0+0xa6/0x100 [ 111.622468] trace_hardirqs_on+0x26/0x40 [ 111.622769] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 111.623137] __folio_end_writeback+0x5b3/0xae0 [ 111.623481] folio_end_writeback+0x11f/0x430 [ 111.623837] ext4_finish_bio+0x709/0x940 [ 111.624151] ? __pfx_ext4_finish_bio+0x10/0x10 [ 111.624495] ? __pfx_ext4_convert_unwritten_extents+0x10/0x10 [ 111.624935] ? __ext4_journal_stop+0x10b/0x1f0 [ 111.625277] ext4_release_io_end+0x119/0x320 [ 111.625613] ext4_end_io_end+0x13f/0x4b0 [ 111.625923] ext4_end_io_rsv_work+0x1b9/0x310 [ 111.626263] ? __pfx_ext4_end_io_rsv_work+0x10/0x10 [ 111.626644] process_one_work+0x8e1/0x19c0 [ 111.626966] ? __pfx_process_one_work+0x10/0x10 [ 111.627313] ? move_linked_works+0x172/0x270 [ 111.627655] ? assign_work+0x196/0x240 [ 111.627950] worker_thread+0x67e/0xe90 [ 111.628245] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 111.628632] ? __pfx_worker_thread+0x10/0x10 [ 111.628965] kthread+0x3c8/0x740 [ 111.629223] ? __pfx_kthread+0x10/0x10 [ 111.629518] ? ret_from_fork+0x23/0x430 [ 111.629822] ? lock_release+0xc8/0x290 [ 111.630116] ? __pfx_kthread+0x10/0x10 [ 111.630424] ret_from_fork+0x34b/0x430 [ 111.630739] ? __pfx_kthread+0x10/0x10 [ 111.631048] ret_from_fork_asm+0x1a/0x30 [ 111.631378] [ 111.631574] Modules linked in: [ 111.631831] ---[ end trace 0000000000000000 ]--- [ 111.632199] RIP: 0010:perf_tp_event+0x175/0xe70 [ 111.632581] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 111.634012] RSP: 0018:ffff88801652f580 EFLAGS: 00010012 [ 111.634432] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 111.634986] RDX: ffff88801515b700 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 111.635546] RBP: ffff88801652f7f0 R08: ffff88806cf31340 R09: ffffe8ffffd10b38 [ 111.636121] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 111.636676] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 111.637232] FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 111.637855] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.638311] CR2: 0000001b2d424000 CR3: 00000000424ba000 CR4: 0000000000350ef0 [ 111.638867] note: kworker/u10:5[357] exited with irqs disabled [ 111.639392] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 111.640277] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 111.640869] CPU: 1 UID: 0 PID: 357 Comm: kworker/u10:5 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 111.641786] Tainted: [D]=DIE, [W]=WARN [ 111.642089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 111.642732] Workqueue: ext4-rsv-conversion ext4_end_io_rsv_work [ 111.643213] RIP: 0010:perf_tp_event+0x175/0xe70 [ 111.643596] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 111.645012] RSP: 0018:ffff88806cf08b80 EFLAGS: 00010012 [ 111.645551] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 111.646277] RDX: ffff88801515b700 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 111.646845] RBP: ffff88806cf08df0 R08: ffff88806cf313e8 R09: ffffe8ffffd10b38 [ 111.647401] R10: 0000000000000000 R11: ffff888020105098 R12: dffffc0000000000 [ 111.647966] R13: 0000000000000014 R14: ffff88806cf313e8 R15: dffffc0000000000 [ 111.648525] FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 111.649150] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.649610] CR2: 0000001b2d424000 CR3: 00000000424ba000 CR4: 0000000000350ef0 [ 111.650168] Call Trace: [ 111.650375] [ 111.650551] ? __pfx_perf_tp_event+0x10/0x10 [ 111.650909] ? enqueue_task_fair+0x43a/0x1e00 [ 111.651271] ? check_preempt_wakeup_fair+0x6e/0x950 [ 111.651678] ? wakeup_preempt+0x140/0x2a0 [ 111.652012] ? lock_release+0x1c7/0x290 [ 111.652331] ? lock_release+0x1c7/0x290 [ 111.652654] ? do_raw_spin_unlock+0x53/0x220 [ 111.653012] ? _raw_spin_unlock_irqrestore+0x22/0x50 [ 111.653417] ? try_to_wake_up+0x8ae/0x11d0 [ 111.653759] ? do_raw_spin_lock+0x123/0x260 [ 111.654104] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 111.654488] ? perf_trace_run_bpf_submit+0xef/0x180 [ 111.654888] perf_trace_run_bpf_submit+0xef/0x180 [ 111.655276] perf_trace_preemptirq_template+0x259/0x430 [ 111.655710] ? read_tsc+0x9/0x20 [ 111.655988] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 111.656457] ? clockevents_program_event+0x135/0x360 [ 111.656864] ? tick_program_event+0xac/0x140 [ 111.657214] ? handle_softirqs+0x16e/0x770 [ 111.657561] trace_irq_enable.constprop.0+0xa6/0x100 [ 111.657963] trace_hardirqs_on+0x26/0x40 [ 111.658283] handle_softirqs+0x16e/0x770 [ 111.658620] __irq_exit_rcu+0xc4/0x100 [ 111.658940] irq_exit_rcu+0x9/0x20 [ 111.659223] sysvec_apic_timer_interrupt+0x70/0x80 [ 111.659625] [ 111.659806] [ 111.659991] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 111.660407] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 111.660783] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de [ 111.662200] RSP: 0018:ffff88801652ff28 EFLAGS: 00000246 [ 111.662619] RAX: 0000000000000001 RBX: ffff88801515b700 RCX: ffffffff817c2b86 [ 111.663173] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 111.663744] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 111.664310] R10: ffffffff8643ac57 R11: 0000000000000001 R12: ffff88801515b700 [ 111.664870] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000 [ 111.665432] ? trace_irq_enable.constprop.0+0x26/0x100 [ 111.665845] ? make_task_dead+0x214/0x3b0 [ 111.666176] ? make_task_dead+0x214/0x3b0 [ 111.666503] ? ret_from_fork+0x34b/0x430 [ 111.666832] rewind_stack_and_make_dead+0x16/0x20 [ 111.667223] RIP: 0000:0x0 [ 111.667448] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 111.667973] RSP: 0000:0000000000000000 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 111.668571] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 111.669133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.669687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.670239] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 111.670790] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.671350] [ 111.671542] Modules linked in: [ 111.671807] ---[ end trace 0000000000000000 ]--- [ 111.671810] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#3] SMP KASAN NOPTI [ 111.672175] RIP: 0010:perf_tp_event+0x175/0xe70 [ 111.673021] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 111.673379] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 111.673953] CPU: 0 UID: 0 PID: 3960 Comm: syz-executor.0 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 111.675354] RSP: 0018:ffff88801652f580 EFLAGS: 00010012 [ 111.676253] Tainted: [D]=DIE, [W]=WARN [ 111.676664] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 111.676958] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 111.677506] RDX: ffff88801515b700 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 111.678127] RIP: 0010:perf_tp_event+0x175/0xe70 [ 111.678676] RBP: ffff88801652f7f0 R08: ffff88806cf31340 R09: ffffe8ffffd10b38 [ 111.679029] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 111.679588] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 111.680945] RSP: 0018:ffff88804469f140 EFLAGS: 00010012 [ 111.681495] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 111.681498] [ 111.681508] FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 111.681904] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc900015f0000 [ 111.682463] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.682598] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 111.683218] CR2: ffffffffffffffd6 CR3: 00000000424ba000 CR4: 0000000000350ef0 [ 111.683772] RBP: ffff88804469f3b0 R08: ffff88806ce31340 R09: ffffe8ffffc10b38 [ 111.684229] Kernel panic - not syncing: Fatal exception in interrupt [ 111.686537] Kernel Offset: disabled [ 111.686821] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 10:26:33 Registers: info registers vcpu 0 RAX=000000000000004c RBX=ffff88804469f708 RCX=ffffc900015f0000 RDX=0000000000000004 RSI=ffffffff83bfa2ef RDI=ffff88804469f708 RBP=1ffff110088d3ed9 RSP=ffff88804469f680 R8 =00000000ffffffff R9 =0000000000000000 R10=ffff88804469f6c0 R11=0000000000000000 R12=ffff88804469f6f8 R13=0000000000000cc0 R14=00000000ffffffff R15=ffff8880096f18c0 RIP=ffffffff83bfa31b RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff6be05e700 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe0988e4004 CR3=0000000043027000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff88801652ee70 R8 =0000000000000000 R9 =ffffed10016d8046 R10=0000000000000031 R11=0000000065646f43 R12=0000000000000031 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d424000 CR3=00000000424ba000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000ff0000000000000000ff000000 XMM01=6e657300656c6966646e657300706f64 XMM02=ff00000100000000000000ff00000000 XMM03=ffffffff812c835effffffff812c82b4 XMM04=ffffffff813cdf68ffffffff813cdf68 XMM05=ffffffff813cdf26ffffffff813cdf26 XMM06=ffffffff8138e6c9ffffffff8138e6c9 XMM07=ffffffff812c8387ffffffff812c835e XMM08=59bde8dc14c158103039884331772020 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000