Warning: Permanently added '[localhost]:15328' (ECDSA) to the list of known hosts. 2025/08/29 11:08:17 fuzzer started 2025/08/29 11:08:17 dialing manager at localhost:43077 syzkaller login: [ 43.713511] cgroup: Unknown subsys name 'net' [ 43.767216] cgroup: Unknown subsys name 'cpuset' [ 43.784065] cgroup: Unknown subsys name 'rlimit' 2025/08/29 11:08:27 syscalls: 2214 2025/08/29 11:08:27 code coverage: enabled 2025/08/29 11:08:27 comparison tracing: enabled 2025/08/29 11:08:27 extra coverage: enabled 2025/08/29 11:08:27 setuid sandbox: enabled 2025/08/29 11:08:27 namespace sandbox: enabled 2025/08/29 11:08:27 Android sandbox: enabled 2025/08/29 11:08:27 fault injection: enabled 2025/08/29 11:08:27 leak checking: enabled 2025/08/29 11:08:27 net packet injection: enabled 2025/08/29 11:08:27 net device setup: enabled 2025/08/29 11:08:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 11:08:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 11:08:27 USB emulation: enabled 2025/08/29 11:08:27 hci packet injection: enabled 2025/08/29 11:08:27 wifi device emulation: enabled 2025/08/29 11:08:27 802.15.4 emulation: enabled 2025/08/29 11:08:27 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 11:08:28 fetching corpus: 50, signal 24936/28399 (executing program) 2025/08/29 11:08:28 fetching corpus: 100, signal 33153/38070 (executing program) 2025/08/29 11:08:28 fetching corpus: 150, signal 39834/46067 (executing program) 2025/08/29 11:08:28 fetching corpus: 200, signal 46655/54107 (executing program) 2025/08/29 11:08:28 fetching corpus: 250, signal 54313/62750 (executing program) 2025/08/29 11:08:28 fetching corpus: 300, signal 57862/67433 (executing program) 2025/08/29 11:08:28 fetching corpus: 350, signal 63518/73967 (executing program) 2025/08/29 11:08:28 fetching corpus: 400, signal 68250/79617 (executing program) 2025/08/29 11:08:28 fetching corpus: 450, signal 71432/83709 (executing program) 2025/08/29 11:08:28 fetching corpus: 500, signal 73844/87051 (executing program) 2025/08/29 11:08:29 fetching corpus: 550, signal 76315/90381 (executing program) 2025/08/29 11:08:29 fetching corpus: 600, signal 78057/93032 (executing program) 2025/08/29 11:08:29 fetching corpus: 650, signal 80852/96613 (executing program) 2025/08/29 11:08:29 fetching corpus: 700, signal 83037/99587 (executing program) 2025/08/29 11:08:29 fetching corpus: 750, signal 84472/101884 (executing program) 2025/08/29 11:08:29 fetching corpus: 800, signal 86171/104395 (executing program) 2025/08/29 11:08:29 fetching corpus: 850, signal 88597/107507 (executing program) 2025/08/29 11:08:29 fetching corpus: 900, signal 90019/109706 (executing program) 2025/08/29 11:08:29 fetching corpus: 950, signal 92530/112674 (executing program) 2025/08/29 11:08:29 fetching corpus: 1000, signal 94641/115367 (executing program) 2025/08/29 11:08:29 fetching corpus: 1050, signal 96711/117952 (executing program) 2025/08/29 11:08:30 fetching corpus: 1100, signal 98631/120347 (executing program) 2025/08/29 11:08:30 fetching corpus: 1150, signal 99862/122229 (executing program) 2025/08/29 11:08:30 fetching corpus: 1200, signal 101812/124610 (executing program) 2025/08/29 11:08:30 fetching corpus: 1250, signal 103496/126785 (executing program) 2025/08/29 11:08:30 fetching corpus: 1300, signal 104313/128217 (executing program) 2025/08/29 11:08:30 fetching corpus: 1350, signal 105430/129871 (executing program) 2025/08/29 11:08:30 fetching corpus: 1400, signal 106912/131747 (executing program) 2025/08/29 11:08:30 fetching corpus: 1450, signal 108279/133487 (executing program) 2025/08/29 11:08:30 fetching corpus: 1500, signal 109433/135116 (executing program) 2025/08/29 11:08:30 fetching corpus: 1550, signal 110539/136667 (executing program) 2025/08/29 11:08:30 fetching corpus: 1600, signal 111586/138167 (executing program) 2025/08/29 11:08:31 fetching corpus: 1650, signal 113070/139960 (executing program) 2025/08/29 11:08:31 fetching corpus: 1700, signal 114914/141933 (executing program) 2025/08/29 11:08:31 fetching corpus: 1750, signal 115803/143248 (executing program) 2025/08/29 11:08:31 fetching corpus: 1800, signal 117072/144793 (executing program) 2025/08/29 11:08:31 fetching corpus: 1850, signal 118452/146451 (executing program) 2025/08/29 11:08:31 fetching corpus: 1900, signal 119367/147689 (executing program) 2025/08/29 11:08:31 fetching corpus: 1950, signal 120102/148831 (executing program) 2025/08/29 11:08:31 fetching corpus: 2000, signal 121077/150069 (executing program) 2025/08/29 11:08:31 fetching corpus: 2050, signal 122119/151352 (executing program) 2025/08/29 11:08:31 fetching corpus: 2100, signal 123420/152708 (executing program) 2025/08/29 11:08:32 fetching corpus: 2150, signal 125051/154216 (executing program) 2025/08/29 11:08:32 fetching corpus: 2200, signal 125894/155355 (executing program) 2025/08/29 11:08:32 fetching corpus: 2250, signal 126587/156366 (executing program) 2025/08/29 11:08:32 fetching corpus: 2300, signal 127358/157378 (executing program) 2025/08/29 11:08:32 fetching corpus: 2350, signal 128433/158565 (executing program) 2025/08/29 11:08:32 fetching corpus: 2400, signal 129251/159560 (executing program) 2025/08/29 11:08:32 fetching corpus: 2450, signal 130139/160591 (executing program) 2025/08/29 11:08:32 fetching corpus: 2500, signal 131845/161947 (executing program) 2025/08/29 11:08:32 fetching corpus: 2550, signal 133111/163078 (executing program) 2025/08/29 11:08:32 fetching corpus: 2600, signal 133753/163900 (executing program) 2025/08/29 11:08:32 fetching corpus: 2650, signal 134420/164714 (executing program) 2025/08/29 11:08:33 fetching corpus: 2700, signal 135220/165639 (executing program) 2025/08/29 11:08:33 fetching corpus: 2750, signal 136062/166535 (executing program) 2025/08/29 11:08:33 fetching corpus: 2800, signal 136666/167295 (executing program) 2025/08/29 11:08:33 fetching corpus: 2850, signal 137140/167978 (executing program) 2025/08/29 11:08:33 fetching corpus: 2900, signal 137951/168838 (executing program) 2025/08/29 11:08:33 fetching corpus: 2950, signal 138947/169721 (executing program) 2025/08/29 11:08:33 fetching corpus: 3000, signal 139425/170433 (executing program) 2025/08/29 11:08:33 fetching corpus: 3050, signal 140441/171300 (executing program) 2025/08/29 11:08:33 fetching corpus: 3100, signal 140990/171924 (executing program) 2025/08/29 11:08:33 fetching corpus: 3150, signal 141664/172702 (executing program) 2025/08/29 11:08:34 fetching corpus: 3200, signal 142205/173379 (executing program) 2025/08/29 11:08:34 fetching corpus: 3250, signal 142937/174165 (executing program) 2025/08/29 11:08:34 fetching corpus: 3300, signal 143408/174762 (executing program) 2025/08/29 11:08:34 fetching corpus: 3350, signal 143857/175362 (executing program) 2025/08/29 11:08:34 fetching corpus: 3400, signal 144214/175935 (executing program) 2025/08/29 11:08:34 fetching corpus: 3450, signal 144953/176568 (executing program) 2025/08/29 11:08:34 fetching corpus: 3500, signal 145500/177134 (executing program) 2025/08/29 11:08:34 fetching corpus: 3550, signal 146215/177716 (executing program) 2025/08/29 11:08:34 fetching corpus: 3600, signal 146856/178317 (executing program) 2025/08/29 11:08:34 fetching corpus: 3650, signal 147543/178910 (executing program) 2025/08/29 11:08:35 fetching corpus: 3700, signal 148449/179563 (executing program) 2025/08/29 11:08:35 fetching corpus: 3750, signal 149218/180101 (executing program) 2025/08/29 11:08:35 fetching corpus: 3800, signal 150002/180620 (executing program) 2025/08/29 11:08:35 fetching corpus: 3850, signal 150508/181090 (executing program) 2025/08/29 11:08:35 fetching corpus: 3900, signal 151005/181571 (executing program) 2025/08/29 11:08:35 fetching corpus: 3950, signal 151482/182012 (executing program) 2025/08/29 11:08:35 fetching corpus: 4000, signal 152166/182481 (executing program) 2025/08/29 11:08:35 fetching corpus: 4050, signal 152719/183037 (executing program) 2025/08/29 11:08:35 fetching corpus: 4100, signal 153282/183528 (executing program) 2025/08/29 11:08:35 fetching corpus: 4150, signal 153781/183958 (executing program) 2025/08/29 11:08:35 fetching corpus: 4200, signal 154181/184341 (executing program) 2025/08/29 11:08:36 fetching corpus: 4250, signal 154638/184739 (executing program) 2025/08/29 11:08:36 fetching corpus: 4300, signal 155036/185105 (executing program) 2025/08/29 11:08:36 fetching corpus: 4350, signal 155461/185453 (executing program) 2025/08/29 11:08:36 fetching corpus: 4400, signal 156032/185867 (executing program) 2025/08/29 11:08:36 fetching corpus: 4450, signal 156478/186235 (executing program) 2025/08/29 11:08:36 fetching corpus: 4500, signal 156984/186467 (executing program) 2025/08/29 11:08:36 fetching corpus: 4550, signal 157621/186467 (executing program) 2025/08/29 11:08:36 fetching corpus: 4600, signal 158070/186530 (executing program) 2025/08/29 11:08:36 fetching corpus: 4650, signal 158567/186537 (executing program) 2025/08/29 11:08:36 fetching corpus: 4700, signal 158984/186554 (executing program) 2025/08/29 11:08:36 fetching corpus: 4750, signal 159337/186564 (executing program) 2025/08/29 11:08:37 fetching corpus: 4800, signal 159625/186569 (executing program) 2025/08/29 11:08:37 fetching corpus: 4850, signal 160201/186621 (executing program) 2025/08/29 11:08:37 fetching corpus: 4900, signal 160638/186691 (executing program) 2025/08/29 11:08:37 fetching corpus: 4950, signal 160970/186702 (executing program) 2025/08/29 11:08:37 fetching corpus: 5000, signal 161560/186763 (executing program) 2025/08/29 11:08:37 fetching corpus: 5050, signal 161961/186766 (executing program) 2025/08/29 11:08:37 fetching corpus: 5100, signal 162300/186768 (executing program) 2025/08/29 11:08:37 fetching corpus: 5150, signal 162767/186792 (executing program) 2025/08/29 11:08:37 fetching corpus: 5200, signal 163297/186797 (executing program) 2025/08/29 11:08:37 fetching corpus: 5250, signal 163752/186807 (executing program) 2025/08/29 11:08:37 fetching corpus: 5300, signal 164144/186807 (executing program) 2025/08/29 11:08:38 fetching corpus: 5350, signal 164401/186812 (executing program) 2025/08/29 11:08:38 fetching corpus: 5400, signal 164887/186831 (executing program) 2025/08/29 11:08:38 fetching corpus: 5450, signal 165316/186858 (executing program) 2025/08/29 11:08:38 fetching corpus: 5500, signal 165837/186871 (executing program) 2025/08/29 11:08:38 fetching corpus: 5550, signal 167869/186875 (executing program) 2025/08/29 11:08:38 fetching corpus: 5600, signal 168238/186910 (executing program) 2025/08/29 11:08:38 fetching corpus: 5650, signal 168786/186921 (executing program) 2025/08/29 11:08:38 fetching corpus: 5700, signal 169249/186929 (executing program) 2025/08/29 11:08:38 fetching corpus: 5750, signal 169517/186932 (executing program) 2025/08/29 11:08:38 fetching corpus: 5800, signal 169979/186933 (executing program) 2025/08/29 11:08:38 fetching corpus: 5850, signal 170338/187008 (executing program) 2025/08/29 11:08:39 fetching corpus: 5900, signal 170778/187038 (executing program) 2025/08/29 11:08:39 fetching corpus: 5950, signal 171115/187050 (executing program) 2025/08/29 11:08:39 fetching corpus: 6000, signal 171492/187061 (executing program) 2025/08/29 11:08:39 fetching corpus: 6050, signal 171829/187064 (executing program) 2025/08/29 11:08:39 fetching corpus: 6100, signal 172276/187080 (executing program) 2025/08/29 11:08:39 fetching corpus: 6150, signal 172610/187085 (executing program) 2025/08/29 11:08:39 fetching corpus: 6200, signal 172868/187108 (executing program) 2025/08/29 11:08:39 fetching corpus: 6250, signal 173165/187123 (executing program) 2025/08/29 11:08:39 fetching corpus: 6300, signal 173519/187131 (executing program) 2025/08/29 11:08:39 fetching corpus: 6350, signal 173784/187140 (executing program) 2025/08/29 11:08:39 fetching corpus: 6400, signal 174020/187140 (executing program) 2025/08/29 11:08:39 fetching corpus: 6450, signal 174425/187163 (executing program) 2025/08/29 11:08:39 fetching corpus: 6500, signal 174774/187174 (executing program) 2025/08/29 11:08:40 fetching corpus: 6550, signal 174962/187188 (executing program) 2025/08/29 11:08:40 fetching corpus: 6600, signal 175198/187205 (executing program) 2025/08/29 11:08:40 fetching corpus: 6650, signal 175437/187207 (executing program) 2025/08/29 11:08:40 fetching corpus: 6700, signal 175866/187229 (executing program) 2025/08/29 11:08:40 fetching corpus: 6750, signal 176400/187336 (executing program) 2025/08/29 11:08:40 fetching corpus: 6800, signal 176744/187337 (executing program) 2025/08/29 11:08:40 fetching corpus: 6850, signal 177312/187369 (executing program) 2025/08/29 11:08:40 fetching corpus: 6900, signal 177545/187380 (executing program) 2025/08/29 11:08:40 fetching corpus: 6950, signal 177829/187388 (executing program) 2025/08/29 11:08:40 fetching corpus: 7000, signal 178105/187390 (executing program) 2025/08/29 11:08:40 fetching corpus: 7050, signal 178427/187408 (executing program) 2025/08/29 11:08:40 fetching corpus: 7100, signal 178645/187444 (executing program) 2025/08/29 11:08:41 fetching corpus: 7150, signal 178962/187467 (executing program) 2025/08/29 11:08:41 fetching corpus: 7200, signal 179280/187492 (executing program) 2025/08/29 11:08:41 fetching corpus: 7250, signal 179538/187499 (executing program) 2025/08/29 11:08:41 fetching corpus: 7300, signal 179800/187509 (executing program) 2025/08/29 11:08:41 fetching corpus: 7350, signal 180447/187520 (executing program) 2025/08/29 11:08:41 fetching corpus: 7400, signal 180711/187523 (executing program) 2025/08/29 11:08:41 fetching corpus: 7450, signal 180925/187529 (executing program) 2025/08/29 11:08:41 fetching corpus: 7500, signal 181270/187530 (executing program) 2025/08/29 11:08:41 fetching corpus: 7550, signal 181638/187530 (executing program) 2025/08/29 11:08:41 fetching corpus: 7600, signal 181864/187554 (executing program) 2025/08/29 11:08:41 fetching corpus: 7650, signal 182377/187562 (executing program) 2025/08/29 11:08:42 fetching corpus: 7700, signal 182633/187569 (executing program) 2025/08/29 11:08:42 fetching corpus: 7750, signal 182964/187612 (executing program) 2025/08/29 11:08:42 fetching corpus: 7800, signal 183303/187614 (executing program) 2025/08/29 11:08:42 fetching corpus: 7850, signal 183590/187631 (executing program) 2025/08/29 11:08:42 fetching corpus: 7900, signal 183943/187634 (executing program) 2025/08/29 11:08:42 fetching corpus: 7950, signal 184134/187648 (executing program) 2025/08/29 11:08:42 fetching corpus: 8000, signal 184411/187668 (executing program) 2025/08/29 11:08:42 fetching corpus: 8009, signal 184466/187668 (executing program) 2025/08/29 11:08:42 fetching corpus: 8009, signal 184466/187668 (executing program) 2025/08/29 11:08:44 starting 8 fuzzer processes 11:08:44 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) ioprio_set$pid(0x3, 0x0, 0x0) 11:08:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup2(r0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x9) 11:08:45 executing program 7: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000080)=0x8000, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000400)=0x2, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:08:45 executing program 2: openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syncfs(r0) [ 71.305263] audit: type=1400 audit(1756465725.083:7): avc: denied { execmem } for pid=272 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:08:45 executing program 4: sched_setattr(0x0, &(0x7f0000000140)={0x58}, 0x0) 11:08:45 executing program 5: syz_open_procfs(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{}, {0x0, @none}}}}, 0xd) 11:08:45 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(r0, 0x1, 0x29, &(0x7f0000000080), 0x8) 11:08:45 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x80000000}) fcntl$lock(r0, 0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xf04a, 0xffffffffffffffff}) [ 72.537049] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.538907] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.541247] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.542606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.548158] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.554176] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.559174] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.560919] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.563816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.568763] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.597666] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.602945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.604503] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.609174] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.613259] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.798987] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.806803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.810441] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.818657] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.829071] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.839260] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.856265] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 72.859988] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.862487] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 72.867021] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.867064] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 72.874883] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.878918] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 72.882207] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 72.884436] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 72.887389] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.893896] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 72.895448] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 72.898826] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 72.900754] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 72.935189] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 72.947413] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 72.949751] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 72.982840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 72.996001] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 74.627219] Bluetooth: hci1: command tx timeout [ 74.628024] Bluetooth: hci0: command tx timeout [ 74.690847] Bluetooth: hci2: command tx timeout [ 74.883691] Bluetooth: hci3: command tx timeout [ 75.009969] Bluetooth: hci5: command tx timeout [ 75.011292] Bluetooth: hci4: command tx timeout [ 75.012745] Bluetooth: hci6: command tx timeout [ 75.074072] Bluetooth: hci7: command tx timeout [ 76.674835] Bluetooth: hci1: command tx timeout [ 76.675394] Bluetooth: hci0: command tx timeout [ 76.737804] Bluetooth: hci2: command tx timeout [ 76.930660] Bluetooth: hci3: command tx timeout [ 77.059454] Bluetooth: hci4: command tx timeout [ 77.060986] Bluetooth: hci6: command tx timeout [ 77.061366] Bluetooth: hci5: command tx timeout [ 77.122809] Bluetooth: hci7: command tx timeout [ 78.722007] Bluetooth: hci1: command tx timeout [ 78.722448] Bluetooth: hci0: command tx timeout [ 78.786767] Bluetooth: hci2: command tx timeout [ 78.978672] Bluetooth: hci3: command tx timeout [ 79.106763] Bluetooth: hci4: command tx timeout [ 79.107192] Bluetooth: hci5: command tx timeout [ 79.107583] Bluetooth: hci6: command tx timeout [ 79.170670] Bluetooth: hci7: command tx timeout [ 80.770006] Bluetooth: hci1: command tx timeout [ 80.770466] Bluetooth: hci0: command tx timeout [ 80.834742] Bluetooth: hci2: command tx timeout [ 81.026401] Bluetooth: hci3: command tx timeout [ 81.154675] Bluetooth: hci6: command tx timeout [ 81.155098] Bluetooth: hci4: command tx timeout [ 81.155470] Bluetooth: hci5: command tx timeout [ 81.218162] Bluetooth: hci7: command tx timeout [ 109.441809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.442483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.659299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.659954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:09:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup2(r0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x9) 11:09:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup2(r0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x9) 11:09:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup2(r0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x9) 11:09:24 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') pread64(r1, &(0x7f0000000040)=""/169, 0xa9, 0x10000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) r2 = fork() ptrace(0x10, r2) wait4(0x0, 0x0, 0x8, &(0x7f0000000240)) r3 = fork() ptrace(0x10, r3) kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) wait4(r0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) wait4(r0, 0x0, 0x4, &(0x7f0000000240)) [ 110.600747] audit: type=1400 audit(1756465764.377:8): avc: denied { open } for pid=3789 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 110.607065] audit: type=1400 audit(1756465764.377:9): avc: denied { kernel } for pid=3789 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 110.627671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.628238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.770707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.771332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:09:24 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') pread64(r1, &(0x7f0000000040)=""/169, 0xa9, 0x10000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) r2 = fork() ptrace(0x10, r2) wait4(0x0, 0x0, 0x8, &(0x7f0000000240)) r3 = fork() ptrace(0x10, r3) kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) wait4(r0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) wait4(r0, 0x0, 0x4, &(0x7f0000000240)) [ 111.042640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.043296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.240425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.241820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:09:25 executing program 7: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000080)=0x8000, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000400)=0x2, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:09:25 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') pread64(r1, &(0x7f0000000040)=""/169, 0xa9, 0x10000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) r2 = fork() ptrace(0x10, r2) wait4(0x0, 0x0, 0x8, &(0x7f0000000240)) r3 = fork() ptrace(0x10, r3) kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) wait4(r0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) wait4(r0, 0x0, 0x4, &(0x7f0000000240)) 11:09:25 executing program 7: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000080)=0x8000, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000400)=0x2, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 111.980687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.981293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.142210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.142852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.326820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.327421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.332197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.333816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.567434] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.711448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.712320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.746802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.747379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.898811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.899894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.974964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.976362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.226340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.227561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.259472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.260224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:09:27 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) ioprio_set$pid(0x3, 0x0, 0x0) 11:09:27 executing program 7: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000080)=0x8000, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000400)=0x2, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:09:27 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x80000000}) fcntl$lock(r0, 0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xf04a, 0xffffffffffffffff}) 11:09:27 executing program 5: syz_open_procfs(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{}, {0x0, @none}}}}, 0xd) 11:09:27 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') pread64(r1, &(0x7f0000000040)=""/169, 0xa9, 0x10000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) r2 = fork() ptrace(0x10, r2) wait4(0x0, 0x0, 0x8, &(0x7f0000000240)) r3 = fork() ptrace(0x10, r3) kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) wait4(r0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) wait4(r0, 0x0, 0x4, &(0x7f0000000240)) 11:09:27 executing program 3: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000080)=0x8000, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000400)=0x2, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:09:27 executing program 2: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000080)=0x8000, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000400)=0x2, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:09:27 executing program 4: sched_setattr(0x0, &(0x7f0000000140)={0x58}, 0x0) 11:09:27 executing program 3: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000080)=0x8000, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000400)=0x2, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:09:27 executing program 4: sched_setattr(0x0, &(0x7f0000000140)={0x58}, 0x0) 11:09:27 executing program 2: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000080)=0x8000, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000400)=0x2, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:09:27 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) ioprio_set$pid(0x3, 0x0, 0x0) 11:09:27 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x80000000}) fcntl$lock(r0, 0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xf04a, 0xffffffffffffffff}) 11:09:27 executing program 7: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7}, 0xfffffdef) 11:09:27 executing program 3: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000080)=0x8000, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000400)=0x2, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:09:27 executing program 5: syz_open_procfs(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{}, {0x0, @none}}}}, 0xd) 11:09:27 executing program 4: sched_setattr(0x0, &(0x7f0000000140)={0x58}, 0x0) 11:09:27 executing program 2: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000080)=0x8000, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000400)=0x2, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:09:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8}]]}, 0x30}}, 0x0) 11:09:27 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x127d, 0x0) 11:09:27 executing program 7: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7}, 0xfffffdef) 11:09:27 executing program 2: rseq(&(0x7f0000000040), 0x20, 0x1, 0x0) 11:09:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8}]]}, 0x30}}, 0x0) 11:09:27 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) ioprio_set$pid(0x3, 0x0, 0x0) 11:09:27 executing program 5: syz_open_procfs(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{}, {0x0, @none}}}}, 0xd) 11:09:27 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x80000000}) fcntl$lock(r0, 0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xf04a, 0xffffffffffffffff}) 11:09:27 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x8) wait4(0x0, 0x0, 0x0, &(0x7f0000000440)) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x2284, &(0x7f0000000000)={0x4, 0x0, 0x0, "b210f8e6"}) 11:09:27 executing program 2: rseq(&(0x7f0000000040), 0x20, 0x1, 0x0) 11:09:27 executing program 7: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7}, 0xfffffdef) [ 113.857068] kmemleak: Found object by alias at 0x607f1a6391cc [ 113.857089] CPU: 0 UID: 0 PID: 3978 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 113.857107] Tainted: [W]=WARN [ 113.857111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 113.857118] Call Trace: [ 113.857122] [ 113.857127] dump_stack_lvl+0xca/0x120 [ 113.857152] __lookup_object+0x94/0xb0 [ 113.857169] delete_object_full+0x27/0x70 [ 113.857185] free_percpu+0x30/0x1160 [ 113.857201] ? arch_uprobe_clear_state+0x16/0x140 [ 113.857221] futex_hash_free+0x38/0xc0 [ 113.857236] mmput+0x2d3/0x390 [ 113.857255] do_exit+0x79d/0x2970 [ 113.857268] ? signal_wake_up_state+0x85/0x120 [ 113.857284] ? zap_other_threads+0x2b9/0x3a0 [ 113.857300] ? __pfx_do_exit+0x10/0x10 [ 113.857312] ? do_group_exit+0x1c3/0x2a0 [ 113.857325] ? lock_release+0xc8/0x290 [ 113.857343] do_group_exit+0xd3/0x2a0 [ 113.857362] __x64_sys_exit_group+0x3e/0x50 [ 113.857376] x64_sys_call+0x18c5/0x18d0 [ 113.857391] do_syscall_64+0xbf/0x360 [ 113.857403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.857414] RIP: 0033:0x7fc99dcfcb19 [ 113.857422] Code: Unable to access opcode bytes at 0x7fc99dcfcaef. [ 113.857427] RSP: 002b:00007fffa10a3698 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 113.857439] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fc99dcfcb19 [ 113.857446] RDX: 00007fc99dcaf72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 113.857454] RBP: 0000000000000000 R08: 0000001b2d321c64 R09: 0000000000000000 [ 113.857461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.857468] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffa10a3780 [ 113.857485] [ 113.857489] kmemleak: Object (percpu) 0x607f1a6391c8 (size 8): [ 113.857495] kmemleak: comm "syz-executor.4", pid 3980, jiffies 4294780708 [ 113.857502] kmemleak: min_count = 1 [ 113.857506] kmemleak: count = 0 [ 113.857509] kmemleak: flags = 0x21 [ 113.857513] kmemleak: checksum = 0 [ 113.857517] kmemleak: backtrace: [ 113.857520] pcpu_alloc_noprof+0x87a/0x1170 [ 113.857535] perf_trace_event_init+0x366/0xa10 [ 113.857548] perf_trace_init+0x1a4/0x2f0 [ 113.857559] perf_tp_event_init+0xa6/0x120 [ 113.857575] perf_try_init_event+0x140/0x9f0 [ 113.857588] perf_event_alloc.part.0+0x118e/0x45f0 [ 113.857604] __do_sys_perf_event_open+0x719/0x2c20 [ 113.857616] do_syscall_64+0xbf/0x360 [ 113.857625] entry_SYSCALL_64_after_hwframe+0x77/0x7f 11:09:27 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x127d, 0x0) 11:09:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8}]]}, 0x30}}, 0x0) 11:09:27 executing program 5: r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000640)=""/231, 0xe7}], 0x1) 11:09:27 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0xa, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 11:09:27 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x8) wait4(0x0, 0x0, 0x0, &(0x7f0000000440)) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x2284, &(0x7f0000000000)={0x4, 0x0, 0x0, "b210f8e6"}) [ 113.964452] kmemleak: Found object by alias at 0x607f1a639a4c [ 113.964472] CPU: 0 UID: 0 PID: 3992 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 113.964490] Tainted: [W]=WARN [ 113.964494] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 113.964501] Call Trace: [ 113.964505] [ 113.964510] dump_stack_lvl+0xca/0x120 [ 113.964535] __lookup_object+0x94/0xb0 [ 113.964552] delete_object_full+0x27/0x70 [ 113.964569] free_percpu+0x30/0x1160 [ 113.964585] ? arch_uprobe_clear_state+0x16/0x140 [ 113.964612] futex_hash_free+0x38/0xc0 [ 113.964626] mmput+0x2d3/0x390 [ 113.964646] do_exit+0x79d/0x2970 [ 113.964666] ? __pfx_do_exit+0x10/0x10 [ 113.964687] ? find_held_lock+0x2b/0x80 [ 113.964705] ? get_signal+0x835/0x2340 [ 113.964727] do_group_exit+0xd3/0x2a0 [ 113.964743] get_signal+0x2315/0x2340 [ 113.964761] ? put_task_stack+0xd2/0x240 [ 113.964780] ? __pfx_get_signal+0x10/0x10 [ 113.964798] ? __schedule+0xe91/0x3590 [ 113.964820] arch_do_signal_or_restart+0x80/0x790 [ 113.964838] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 113.964855] ? __x64_sys_futex+0x1c9/0x4d0 [ 113.964867] ? __x64_sys_futex+0x1d2/0x4d0 [ 113.964881] ? exc_page_fault+0xb0/0x180 [ 113.964897] ? __pfx___x64_sys_futex+0x10/0x10 [ 113.964918] exit_to_user_mode_loop+0x8b/0x110 [ 113.964932] do_syscall_64+0x2f7/0x360 [ 113.964944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.964957] RIP: 0033:0x7f34a417cb19 [ 113.964965] Code: Unable to access opcode bytes at 0x7f34a417caef. [ 113.964971] RSP: 002b:00007f34a16f2218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 113.964981] RAX: 0000000000000001 RBX: 00007f34a428ff68 RCX: 00007f34a417cb19 [ 113.964989] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f34a428ff6c [ 113.964996] RBP: 00007f34a428ff60 R08: 0000000000000016 R09: 0000000000000000 [ 113.965003] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f34a428ff6c [ 113.965009] R13: 00007ffd298c1d0f R14: 00007f34a16f2300 R15: 0000000000022000 [ 113.965029] [ 113.965033] kmemleak: Object (percpu) 0x607f1a639a48 (size 8): [ 113.965039] kmemleak: comm "syz-executor.0", pid 3997, jiffies 4294780820 [ 113.965046] kmemleak: min_count = 1 [ 113.965050] kmemleak: count = 0 [ 113.965054] kmemleak: flags = 0x21 [ 113.965057] kmemleak: checksum = 0 [ 113.965061] kmemleak: backtrace: [ 113.965064] pcpu_alloc_noprof+0x87a/0x1170 [ 113.965079] percpu_ref_init+0x37/0x400 [ 113.965097] blkg_alloc+0xe9/0x7d0 [ 113.965108] blkg_create+0xe08/0x1420 [ 113.965120] bio_associate_blkg_from_css+0xe06/0x1380 [ 113.965133] bio_associate_blkg+0x10e/0x2a0 [ 113.965145] bio_init+0x2dd/0x570 [ 113.965158] blkdev_issue_flush+0x80/0xc0 [ 113.965172] jbd2_cleanup_journal_tail+0x1ab/0x1f0 [ 113.965184] jbd2_log_do_checkpoint+0x85/0xb20 [ 113.965194] jbd2_journal_flush+0x1a8/0xc20 [ 113.965206] __ext4_ioctl+0x96b/0x38b0 [ 113.965220] __x64_sys_ioctl+0x18f/0x210 [ 113.965235] do_syscall_64+0xbf/0x360 [ 113.965243] entry_SYSCALL_64_after_hwframe+0x77/0x7f 11:09:27 executing program 7: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7}, 0xfffffdef) 11:09:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8}]]}, 0x30}}, 0x0) 11:09:27 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x127d, 0x0) [ 114.038172] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 114.039213] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 114.039838] CPU: 1 UID: 0 PID: 4004 Comm: syz-executor.4 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 114.041188] Tainted: [W]=WARN [ 114.041922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 114.043733] RIP: 0010:perf_tp_event+0x175/0xe70 [ 114.044780] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 114.049023] RSP: 0018:ffff8880473bf800 EFLAGS: 00010212 [ 114.049445] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc9000821a000 [ 114.050013] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 114.050571] RBP: ffff8880473bfa70 R08: ffff88806cf31340 R09: ffffe8ffffd161c8 [ 114.051132] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000 [ 114.051692] R13: 0000000000000024 R14: ffff88806cf31340 R15: dffffc0000000000 [ 114.052253] FS: 00007f7d74daa700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 114.052897] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.053357] CR2: 00007f7d77948018 CR3: 000000004434f000 CR4: 0000000000350ef0 [ 114.053920] Call Trace: [ 114.054130] [ 114.054322] ? __pfx_perf_tp_event+0x10/0x10 [ 114.054686] ? lock_is_held_type+0x9e/0x120 [ 114.055038] ? lock_is_held_type+0x9e/0x120 [ 114.055389] ? perf_trace_lock+0xb5/0x5d0 [ 114.055727] ? perf_trace_lock+0xb5/0x5d0 [ 114.056061] ? __pfx_perf_trace_lock+0x10/0x10 [ 114.056432] ? __pfx_perf_trace_lock+0x10/0x10 [ 114.056813] ? find_held_lock+0x2b/0x80 [ 114.057141] ? find_held_lock+0x2b/0x80 [ 114.057468] ? __perf_install_in_context+0x503/0xb90 [ 114.057876] ? lock_release+0xc8/0x290 [ 114.058194] ? do_raw_spin_unlock+0x53/0x220 [ 114.058557] ? perf_trace_run_bpf_submit+0xef/0x180 [ 114.058973] perf_trace_run_bpf_submit+0xef/0x180 [ 114.059387] perf_trace_lock_acquire+0x3c2/0x700 [ 114.059790] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 114.060207] ? __pfx_perf_trace_lock+0x10/0x10 [ 114.060576] ? futex_ref_get+0x48/0x300 [ 114.060908] ? find_held_lock+0x2b/0x80 [ 114.061239] lock_acquire+0xc5/0x2f0 [ 114.061544] ? futex_wake+0x228/0x540 [ 114.061864] _raw_spin_lock+0x2b/0x40 [ 114.062173] ? futex_wake+0x228/0x540 [ 114.062484] futex_wake+0x228/0x540 [ 114.062784] ? __pfx_perf_trace_lock+0x10/0x10 [ 114.063155] ? __pfx_futex_wake+0x10/0x10 [ 114.063494] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 114.063906] ? lock_release+0xc8/0x290 [ 114.064225] do_futex+0x26d/0x370 [ 114.064507] ? __pfx_do_futex+0x10/0x10 [ 114.064839] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 114.065262] ? find_held_lock+0x2b/0x80 [ 114.065589] __x64_sys_futex+0x1c9/0x4d0 [ 114.065924] ? __pfx___x64_sys_futex+0x10/0x10 [ 114.066293] ? xfd_validate_state+0x55/0x180 [ 114.066663] do_syscall_64+0xbf/0x360 [ 114.066971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.067382] RIP: 0033:0x7f7d77834b19 [ 114.067680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 114.069108] RSP: 002b:00007f7d74daa218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 114.069702] RAX: ffffffffffffffda RBX: 00007f7d77947f68 RCX: 00007f7d77834b19 [ 114.070264] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7d77947f6c [ 114.070828] RBP: 00007f7d77947f60 R08: 000000000000000e R09: 0000000000000000 [ 114.071391] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7d77947f6c [ 114.071953] R13: 00007fff6aa8b12f R14: 00007f7d74daa300 R15: 0000000000022000 [ 114.072527] [ 114.072724] Modules linked in: [ 114.073011] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 114.073876] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 114.074468] CPU: 1 UID: 0 PID: 4004 Comm: syz-executor.4 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 114.075404] Tainted: [D]=DIE, [W]=WARN [ 114.075710] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 114.076362] RIP: 0010:perf_tp_event+0x175/0xe70 [ 114.076753] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 114.078214] RSP: 0018:ffff88806cf08a40 EFLAGS: 00010012 [ 114.078638] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 114.079297] RDX: ffff888047561b80 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 114.079868] RBP: ffff88806cf08cb0 R08: ffff88806cf31490 R09: ffffe8ffffd161c8 [ 114.080437] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000 [ 114.081007] R13: 0000000000000024 R14: ffff88806cf31490 R15: dffffc0000000000 [ 114.081580] FS: 00007f7d74daa700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 114.082213] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.082675] CR2: 00007f7d77948018 CR3: 000000004434f000 CR4: 0000000000350ef0 [ 114.083242] Call Trace: [ 114.083455] [ 114.083634] ? lock_is_held_type+0x9e/0x120 [ 114.083987] ? __update_load_avg_se+0x428/0xa40 [ 114.084367] ? __pfx_perf_tp_event+0x10/0x10 [ 114.084732] ? match_held_lock+0xb0/0xd0 [ 114.085071] ? kvm_sched_clock_read+0x16/0x30 [ 114.085440] ? sched_clock+0x37/0x60 [ 114.085747] ? sched_clock_cpu+0x6c/0x4e0 [ 114.086083] ? trace_pelt_se_tp+0xdf/0x130 [ 114.086421] ? __update_load_avg_se+0x428/0xa40 [ 114.086798] ? lock_is_held_type+0x9e/0x120 [ 114.087150] ? perf_trace_lock+0xb5/0x5d0 [ 114.087481] ? perf_trace_lock+0xb5/0x5d0 [ 114.087814] ? __resched_curr+0x2a2/0x330 [ 114.088155] ? __pfx_perf_trace_lock+0x10/0x10 [ 114.088530] ? __pfx_perf_trace_lock+0x10/0x10 [ 114.088907] ? perf_trace_run_bpf_submit+0xef/0x180 [ 114.089306] perf_trace_run_bpf_submit+0xef/0x180 [ 114.089700] perf_trace_lock_acquire+0x3c2/0x700 [ 114.090089] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 114.090517] lock_acquire+0xc5/0x2f0 [ 114.090818] ? sched_ttwu_pending+0xa1/0x4a0 [ 114.091180] ? lock_release+0xc8/0x290 [ 114.091497] _raw_spin_lock_nested+0x29/0x40 [ 114.091852] ? sched_ttwu_pending+0xa1/0x4a0 [ 114.092214] sched_ttwu_pending+0xa1/0x4a0 [ 114.092555] ? __pfx_lapic_next_deadline+0x10/0x10 [ 114.092958] ? clockevents_program_event+0x135/0x360 [ 114.093370] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 114.093761] ? hrtimer_interrupt+0x652/0x830 [ 114.094127] __flush_smp_call_function_queue+0x434/0x740 [ 114.094570] __sysvec_call_function_single+0x6d/0x370 [ 114.094987] sysvec_call_function_single+0xa1/0xc0 [ 114.095384] [ 114.095566] [ 114.095753] asm_sysvec_call_function_single+0x1a/0x20 [ 114.096166] RIP: 0010:oops_exit+0x0/0x50 [ 114.096496] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27 [ 114.097920] RSP: 0018:ffff8880473bf690 EFLAGS: 00000202 [ 114.098338] RAX: 000000000002c1b7 RBX: 0000000000000216 RCX: ffffc9000821a000 [ 114.098906] RDX: 0000000000040000 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 114.099472] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90 [ 114.100033] R10: 0000000000000000 R11: 000000000000002c R12: ffff8880473bf758 [ 114.100594] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000 [ 114.101177] ? oops_end+0x4a/0xe0 [ 114.101469] oops_end+0x65/0xe0 [ 114.101746] exc_general_protection+0x1a2/0x330 [ 114.102128] asm_exc_general_protection+0x26/0x30 [ 114.102513] RIP: 0010:perf_tp_event+0x175/0xe70 [ 114.102890] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 114.104321] RSP: 0018:ffff8880473bf800 EFLAGS: 00010212 [ 114.104753] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc9000821a000 [ 114.105320] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 114.105880] RBP: ffff8880473bfa70 R08: ffff88806cf31340 R09: ffffe8ffffd161c8 [ 114.106437] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000 [ 114.107002] R13: 0000000000000024 R14: ffff88806cf31340 R15: dffffc0000000000 [ 114.107571] ? perf_tp_event+0x167/0xe70 [ 114.107909] ? __pfx_perf_tp_event+0x10/0x10 [ 114.108264] ? lock_is_held_type+0x9e/0x120 [ 114.108612] ? lock_is_held_type+0x9e/0x120 [ 114.108968] ? perf_trace_lock+0xb5/0x5d0 [ 114.109300] ? perf_trace_lock+0xb5/0x5d0 [ 114.109636] ? __pfx_perf_trace_lock+0x10/0x10 [ 114.110006] ? __pfx_perf_trace_lock+0x10/0x10 [ 114.110373] ? find_held_lock+0x2b/0x80 [ 114.110694] ? find_held_lock+0x2b/0x80 [ 114.111014] ? __perf_install_in_context+0x503/0xb90 [ 114.111413] ? lock_release+0xc8/0x290 [ 114.111726] ? do_raw_spin_unlock+0x53/0x220 [ 114.112081] ? perf_trace_run_bpf_submit+0xef/0x180 [ 114.112477] perf_trace_run_bpf_submit+0xef/0x180 [ 114.112876] perf_trace_lock_acquire+0x3c2/0x700 [ 114.113257] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 114.113672] ? __pfx_perf_trace_lock+0x10/0x10 [ 114.114037] ? futex_ref_get+0x48/0x300 [ 114.114351] ? find_held_lock+0x2b/0x80 [ 114.114675] lock_acquire+0xc5/0x2f0 [ 114.114972] ? futex_wake+0x228/0x540 [ 114.115282] _raw_spin_lock+0x2b/0x40 [ 114.115585] ? futex_wake+0x228/0x540 [ 114.115892] futex_wake+0x228/0x540 [ 114.116191] ? __pfx_perf_trace_lock+0x10/0x10 [ 114.116557] ? __pfx_futex_wake+0x10/0x10 [ 114.116900] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 114.117298] ? lock_release+0xc8/0x290 [ 114.117612] do_futex+0x26d/0x370 [ 114.117894] ? __pfx_do_futex+0x10/0x10 [ 114.118211] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 114.118629] ? find_held_lock+0x2b/0x80 [ 114.118958] __x64_sys_futex+0x1c9/0x4d0 [ 114.119284] ? __pfx___x64_sys_futex+0x10/0x10 [ 114.119648] ? xfd_validate_state+0x55/0x180 [ 114.120015] do_syscall_64+0xbf/0x360 [ 114.120319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.120736] RIP: 0033:0x7f7d77834b19 [ 114.121036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 114.122464] RSP: 002b:00007f7d74daa218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 114.123059] RAX: ffffffffffffffda RBX: 00007f7d77947f68 RCX: 00007f7d77834b19 [ 114.123612] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7d77947f6c [ 114.124167] RBP: 00007f7d77947f60 R08: 000000000000000e R09: 0000000000000000 [ 114.124733] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7d77947f6c [ 114.125291] R13: 00007fff6aa8b12f R14: 00007f7d74daa300 R15: 0000000000022000 [ 114.125855] [ 114.126042] Modules linked in: [ 114.126301] ---[ end trace 0000000000000000 ]--- [ 114.126676] RIP: 0010:perf_tp_event+0x175/0xe70 [ 114.127049] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 114.128453] RSP: 0018:ffff8880473bf800 EFLAGS: 00010212 [ 114.128876] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc9000821a000 [ 114.129430] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 114.129994] RBP: ffff8880473bfa70 R08: ffff88806cf31340 R09: ffffe8ffffd161c8 [ 114.130547] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000 [ 114.131104] R13: 0000000000000024 R14: ffff88806cf31340 R15: dffffc0000000000 [ 114.131673] FS: 00007f7d74daa700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 114.132299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.132765] CR2: 00007f7d77948018 CR3: 000000004434f000 CR4: 0000000000350ef0 [ 114.133323] Kernel panic - not syncing: Fatal exception in interrupt [ 114.134023] Kernel Offset: disabled [ 114.134311] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 11:09:27 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff819e51ba RDX=ffff888015f50000 RSI=0000000000000008 RDI=ffffea000057ca80 RBP=ffffea000057ca80 RSP=ffff888016ecf6b8 R8 =0000000000000001 R9 =fffff940000af956 R10=0000000000000000 R11=00000000000001ff R12=0000000000000000 R13=ffffea000057ca80 R14=ffffea000057ca80 R15=dffffc0000000000 RIP=ffffffff81affe88 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555860b7400 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2ce20000 CR3=0000000036a2e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff8880473bf0f0 R8 =0000000000000000 R9 =ffffed100172f046 R10=0000000000000063 R11=000000000000002c R12=0000000000000063 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7d74daa700 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7d77948018 CR3=000000004434f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f7d7791b7c000007f7d7791b7c8 XMM02=00007f7d7791b7e000007f7d7791b7c0 XMM03=00007f7d7791b7c800007f7d7791b7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000