Debian GNU/Linux 11 syzkaller ttyS0
Warning: Permanently added '[localhost]:38004' (ECDSA) to the list of known hosts.
2025/08/29 11:13:09 fuzzer started
2025/08/29 11:13:10 dialing manager at localhost:43077
syzkaller login: [ 52.095024] cgroup: Unknown subsys name 'net'
[ 52.158527] cgroup: Unknown subsys name 'cpuset'
[ 52.176202] cgroup: Unknown subsys name 'rlimit'
2025/08/29 11:13:21 syscalls: 2214
2025/08/29 11:13:21 code coverage: enabled
2025/08/29 11:13:21 comparison tracing: enabled
2025/08/29 11:13:21 extra coverage: enabled
2025/08/29 11:13:21 setuid sandbox: enabled
2025/08/29 11:13:21 namespace sandbox: enabled
2025/08/29 11:13:21 Android sandbox: enabled
2025/08/29 11:13:21 fault injection: enabled
2025/08/29 11:13:21 leak checking: enabled
2025/08/29 11:13:21 net packet injection: enabled
2025/08/29 11:13:21 net device setup: enabled
2025/08/29 11:13:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/29 11:13:21 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/29 11:13:21 USB emulation: enabled
2025/08/29 11:13:21 hci packet injection: enabled
2025/08/29 11:13:21 wifi device emulation: enabled
2025/08/29 11:13:21 802.15.4 emulation: enabled
2025/08/29 11:13:21 fetching corpus: 0, signal 0/2000 (executing program)
2025/08/29 11:13:21 fetching corpus: 50, signal 23155/26676 (executing program)
2025/08/29 11:13:21 fetching corpus: 100, signal 30994/36011 (executing program)
2025/08/29 11:13:21 fetching corpus: 150, signal 41832/48036 (executing program)
2025/08/29 11:13:21 fetching corpus: 200, signal 47512/54951 (executing program)
2025/08/29 11:13:21 fetching corpus: 250, signal 50806/59490 (executing program)
2025/08/29 11:13:21 fetching corpus: 300, signal 57070/66684 (executing program)
2025/08/29 11:13:22 fetching corpus: 350, signal 60818/71494 (executing program)
2025/08/29 11:13:22 fetching corpus: 400, signal 64701/76366 (executing program)
2025/08/29 11:13:22 fetching corpus: 450, signal 68594/81090 (executing program)
2025/08/29 11:13:22 fetching corpus: 500, signal 71253/84667 (executing program)
2025/08/29 11:13:22 fetching corpus: 550, signal 75050/89206 (executing program)
2025/08/29 11:13:22 fetching corpus: 600, signal 78466/93414 (executing program)
2025/08/29 11:13:22 fetching corpus: 650, signal 81442/97049 (executing program)
2025/08/29 11:13:22 fetching corpus: 700, signal 83880/100221 (executing program)
2025/08/29 11:13:23 fetching corpus: 750, signal 86158/103195 (executing program)
2025/08/29 11:13:23 fetching corpus: 800, signal 88290/106092 (executing program)
2025/08/29 11:13:23 fetching corpus: 850, signal 89730/108264 (executing program)
2025/08/29 11:13:23 fetching corpus: 900, signal 92138/111243 (executing program)
2025/08/29 11:13:23 fetching corpus: 950, signal 93456/113288 (executing program)
2025/08/29 11:13:23 fetching corpus: 1000, signal 94268/114876 (executing program)
2025/08/29 11:13:23 fetching corpus: 1050, signal 96244/117412 (executing program)
2025/08/29 11:13:23 fetching corpus: 1100, signal 97883/119628 (executing program)
2025/08/29 11:13:23 fetching corpus: 1150, signal 98991/121427 (executing program)
2025/08/29 11:13:23 fetching corpus: 1200, signal 100039/123158 (executing program)
2025/08/29 11:13:24 fetching corpus: 1250, signal 101660/125259 (executing program)
2025/08/29 11:13:24 fetching corpus: 1300, signal 104764/128448 (executing program)
2025/08/29 11:13:24 fetching corpus: 1350, signal 106058/130227 (executing program)
2025/08/29 11:13:24 fetching corpus: 1400, signal 109541/133540 (executing program)
2025/08/29 11:13:24 fetching corpus: 1450, signal 110776/135211 (executing program)
2025/08/29 11:13:24 fetching corpus: 1500, signal 112434/137170 (executing program)
2025/08/29 11:13:24 fetching corpus: 1550, signal 113886/138874 (executing program)
2025/08/29 11:13:24 fetching corpus: 1600, signal 114836/140260 (executing program)
2025/08/29 11:13:24 fetching corpus: 1650, signal 116434/142133 (executing program)
2025/08/29 11:13:25 fetching corpus: 1700, signal 117612/143619 (executing program)
2025/08/29 11:13:25 fetching corpus: 1750, signal 118714/145018 (executing program)
2025/08/29 11:13:25 fetching corpus: 1800, signal 120317/146731 (executing program)
2025/08/29 11:13:25 fetching corpus: 1850, signal 121283/148006 (executing program)
2025/08/29 11:13:25 fetching corpus: 1900, signal 122522/149458 (executing program)
2025/08/29 11:13:25 fetching corpus: 1950, signal 123472/150705 (executing program)
2025/08/29 11:13:25 fetching corpus: 2000, signal 124411/151909 (executing program)
2025/08/29 11:13:25 fetching corpus: 2050, signal 125097/152973 (executing program)
2025/08/29 11:13:25 fetching corpus: 2100, signal 126131/154182 (executing program)
2025/08/29 11:13:25 fetching corpus: 2150, signal 127037/155380 (executing program)
2025/08/29 11:13:25 fetching corpus: 2200, signal 127724/156340 (executing program)
2025/08/29 11:13:26 fetching corpus: 2250, signal 128574/157446 (executing program)
2025/08/29 11:13:26 fetching corpus: 2300, signal 129459/158527 (executing program)
2025/08/29 11:13:26 fetching corpus: 2350, signal 130400/159598 (executing program)
2025/08/29 11:13:26 fetching corpus: 2400, signal 131696/160818 (executing program)
2025/08/29 11:13:26 fetching corpus: 2450, signal 132766/161938 (executing program)
2025/08/29 11:13:26 fetching corpus: 2500, signal 133419/162813 (executing program)
2025/08/29 11:13:26 fetching corpus: 2550, signal 134471/163941 (executing program)
2025/08/29 11:13:26 fetching corpus: 2600, signal 135517/164941 (executing program)
2025/08/29 11:13:26 fetching corpus: 2650, signal 136264/165800 (executing program)
2025/08/29 11:13:26 fetching corpus: 2700, signal 137289/166776 (executing program)
2025/08/29 11:13:26 fetching corpus: 2750, signal 138169/167631 (executing program)
2025/08/29 11:13:26 fetching corpus: 2800, signal 138865/168411 (executing program)
2025/08/29 11:13:27 fetching corpus: 2850, signal 140159/169407 (executing program)
2025/08/29 11:13:27 fetching corpus: 2900, signal 140606/170113 (executing program)
2025/08/29 11:13:27 fetching corpus: 2950, signal 141306/170854 (executing program)
2025/08/29 11:13:27 fetching corpus: 3000, signal 141909/171578 (executing program)
2025/08/29 11:13:27 fetching corpus: 3050, signal 142517/172268 (executing program)
2025/08/29 11:13:27 fetching corpus: 3100, signal 143134/172948 (executing program)
2025/08/29 11:13:27 fetching corpus: 3150, signal 144187/173780 (executing program)
2025/08/29 11:13:27 fetching corpus: 3200, signal 144738/174432 (executing program)
2025/08/29 11:13:27 fetching corpus: 3250, signal 145329/175072 (executing program)
2025/08/29 11:13:27 fetching corpus: 3300, signal 145814/175640 (executing program)
2025/08/29 11:13:27 fetching corpus: 3350, signal 146639/176289 (executing program)
2025/08/29 11:13:28 fetching corpus: 3400, signal 147277/176918 (executing program)
2025/08/29 11:13:28 fetching corpus: 3450, signal 147981/177547 (executing program)
2025/08/29 11:13:28 fetching corpus: 3500, signal 148780/178194 (executing program)
2025/08/29 11:13:28 fetching corpus: 3550, signal 149280/178720 (executing program)
2025/08/29 11:13:28 fetching corpus: 3600, signal 149966/179332 (executing program)
2025/08/29 11:13:28 fetching corpus: 3650, signal 150413/179834 (executing program)
2025/08/29 11:13:28 fetching corpus: 3700, signal 151242/180375 (executing program)
2025/08/29 11:13:28 fetching corpus: 3750, signal 151603/180812 (executing program)
2025/08/29 11:13:28 fetching corpus: 3800, signal 152018/181294 (executing program)
2025/08/29 11:13:28 fetching corpus: 3850, signal 152543/181791 (executing program)
2025/08/29 11:13:28 fetching corpus: 3900, signal 152955/182239 (executing program)
2025/08/29 11:13:29 fetching corpus: 3950, signal 153536/182676 (executing program)
2025/08/29 11:13:29 fetching corpus: 4000, signal 154088/183173 (executing program)
2025/08/29 11:13:29 fetching corpus: 4050, signal 154565/183585 (executing program)
2025/08/29 11:13:29 fetching corpus: 4100, signal 155232/183981 (executing program)
2025/08/29 11:13:29 fetching corpus: 4150, signal 155540/184359 (executing program)
2025/08/29 11:13:29 fetching corpus: 4200, signal 156296/184805 (executing program)
2025/08/29 11:13:29 fetching corpus: 4250, signal 156650/185179 (executing program)
2025/08/29 11:13:29 fetching corpus: 4300, signal 157156/185542 (executing program)
2025/08/29 11:13:29 fetching corpus: 4350, signal 157481/185907 (executing program)
2025/08/29 11:13:29 fetching corpus: 4400, signal 157919/186267 (executing program)
2025/08/29 11:13:29 fetching corpus: 4450, signal 158270/186623 (executing program)
2025/08/29 11:13:30 fetching corpus: 4500, signal 158754/186871 (executing program)
2025/08/29 11:13:30 fetching corpus: 4550, signal 159181/186873 (executing program)
2025/08/29 11:13:30 fetching corpus: 4600, signal 159599/186882 (executing program)
2025/08/29 11:13:30 fetching corpus: 4650, signal 159972/186887 (executing program)
2025/08/29 11:13:30 fetching corpus: 4700, signal 160543/186979 (executing program)
2025/08/29 11:13:30 fetching corpus: 4750, signal 160903/186995 (executing program)
2025/08/29 11:13:30 fetching corpus: 4800, signal 161567/186997 (executing program)
2025/08/29 11:13:30 fetching corpus: 4850, signal 162008/187013 (executing program)
2025/08/29 11:13:30 fetching corpus: 4900, signal 162467/187042 (executing program)
2025/08/29 11:13:30 fetching corpus: 4950, signal 162856/187043 (executing program)
2025/08/29 11:13:30 fetching corpus: 5000, signal 163233/187054 (executing program)
2025/08/29 11:13:30 fetching corpus: 5050, signal 163840/187057 (executing program)
2025/08/29 11:13:30 fetching corpus: 5100, signal 164268/187073 (executing program)
2025/08/29 11:13:31 fetching corpus: 5150, signal 164664/187092 (executing program)
2025/08/29 11:13:31 fetching corpus: 5200, signal 164912/187095 (executing program)
2025/08/29 11:13:31 fetching corpus: 5250, signal 165417/187096 (executing program)
2025/08/29 11:13:31 fetching corpus: 5300, signal 165688/187109 (executing program)
2025/08/29 11:13:31 fetching corpus: 5350, signal 166043/187115 (executing program)
2025/08/29 11:13:31 fetching corpus: 5400, signal 166410/187118 (executing program)
2025/08/29 11:13:31 fetching corpus: 5450, signal 166697/187137 (executing program)
2025/08/29 11:13:31 fetching corpus: 5500, signal 167099/187143 (executing program)
2025/08/29 11:13:31 fetching corpus: 5550, signal 167603/187153 (executing program)
2025/08/29 11:13:31 fetching corpus: 5600, signal 167909/187163 (executing program)
2025/08/29 11:13:31 fetching corpus: 5650, signal 168395/187172 (executing program)
2025/08/29 11:13:31 fetching corpus: 5700, signal 168853/187174 (executing program)
2025/08/29 11:13:32 fetching corpus: 5750, signal 169109/187176 (executing program)
2025/08/29 11:13:32 fetching corpus: 5800, signal 169495/187183 (executing program)
2025/08/29 11:13:32 fetching corpus: 5850, signal 169732/187187 (executing program)
2025/08/29 11:13:32 fetching corpus: 5900, signal 170069/187215 (executing program)
2025/08/29 11:13:32 fetching corpus: 5950, signal 170613/187216 (executing program)
2025/08/29 11:13:32 fetching corpus: 6000, signal 171122/187231 (executing program)
2025/08/29 11:13:32 fetching corpus: 6050, signal 171438/187231 (executing program)
2025/08/29 11:13:32 fetching corpus: 6100, signal 171817/187243 (executing program)
2025/08/29 11:13:32 fetching corpus: 6150, signal 172043/187245 (executing program)
2025/08/29 11:13:32 fetching corpus: 6200, signal 172470/187250 (executing program)
2025/08/29 11:13:32 fetching corpus: 6250, signal 172761/187273 (executing program)
2025/08/29 11:13:32 fetching corpus: 6300, signal 173052/187280 (executing program)
2025/08/29 11:13:33 fetching corpus: 6350, signal 173730/187283 (executing program)
2025/08/29 11:13:33 fetching corpus: 6400, signal 174268/187328 (executing program)
2025/08/29 11:13:33 fetching corpus: 6450, signal 174651/187340 (executing program)
2025/08/29 11:13:33 fetching corpus: 6500, signal 174924/187344 (executing program)
2025/08/29 11:13:33 fetching corpus: 6550, signal 175321/187345 (executing program)
2025/08/29 11:13:33 fetching corpus: 6600, signal 175706/187360 (executing program)
2025/08/29 11:13:33 fetching corpus: 6650, signal 175927/187379 (executing program)
2025/08/29 11:13:33 fetching corpus: 6700, signal 176167/187379 (executing program)
2025/08/29 11:13:33 fetching corpus: 6750, signal 176641/187411 (executing program)
2025/08/29 11:13:33 fetching corpus: 6800, signal 176939/187414 (executing program)
2025/08/29 11:13:34 fetching corpus: 6850, signal 177207/187424 (executing program)
2025/08/29 11:13:34 fetching corpus: 6900, signal 177763/187426 (executing program)
2025/08/29 11:13:34 fetching corpus: 6950, signal 178079/187458 (executing program)
2025/08/29 11:13:34 fetching corpus: 7000, signal 178408/187468 (executing program)
2025/08/29 11:13:34 fetching corpus: 7050, signal 178706/187483 (executing program)
2025/08/29 11:13:34 fetching corpus: 7100, signal 179034/187530 (executing program)
2025/08/29 11:13:34 fetching corpus: 7150, signal 179282/187537 (executing program)
2025/08/29 11:13:34 fetching corpus: 7200, signal 179489/187559 (executing program)
2025/08/29 11:13:34 fetching corpus: 7250, signal 179682/187576 (executing program)
2025/08/29 11:13:34 fetching corpus: 7300, signal 180041/187577 (executing program)
2025/08/29 11:13:34 fetching corpus: 7350, signal 180274/187582 (executing program)
2025/08/29 11:13:34 fetching corpus: 7400, signal 180726/187595 (executing program)
2025/08/29 11:13:35 fetching corpus: 7450, signal 181124/187627 (executing program)
2025/08/29 11:13:35 fetching corpus: 7500, signal 181398/187673 (executing program)
2025/08/29 11:13:35 fetching corpus: 7550, signal 181792/187682 (executing program)
2025/08/29 11:13:35 fetching corpus: 7600, signal 182042/187684 (executing program)
2025/08/29 11:13:35 fetching corpus: 7650, signal 182420/187685 (executing program)
2025/08/29 11:13:35 fetching corpus: 7700, signal 182689/187686 (executing program)
2025/08/29 11:13:35 fetching corpus: 7750, signal 182969/187695 (executing program)
2025/08/29 11:13:35 fetching corpus: 7800, signal 183215/187706 (executing program)
2025/08/29 11:13:35 fetching corpus: 7850, signal 183543/187707 (executing program)
2025/08/29 11:13:35 fetching corpus: 7900, signal 183832/187707 (executing program)
2025/08/29 11:13:35 fetching corpus: 7950, signal 184084/187741 (executing program)
2025/08/29 11:13:35 fetching corpus: 8000, signal 184374/187749 (executing program)
2025/08/29 11:13:35 fetching corpus: 8039, signal 184541/187757 (executing program)
2025/08/29 11:13:35 fetching corpus: 8039, signal 184541/187757 (executing program)
2025/08/29 11:13:37 starting 8 fuzzer processes
11:13:37 executing program 0:
ptrace$peekuser(0x3, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
11:13:37 executing program 7:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_test', 0x8242, 0x0)
sendfile(r0, r0, 0x0, 0xb67)
11:13:37 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x21, &(0x7f0000000000)="92f46193", 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x40, @remote, 0x2}, 0x1c)
11:13:37 executing program 2:
pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffff5b3)
11:13:37 executing program 3:
clock_adjtime(0x0, &(0x7f0000000000)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000})
11:13:37 executing program 4:
setpriority(0x1, 0xffffffffffffffff, 0x0)
11:13:37 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffc00}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00'})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
clone3(0x0, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
ptrace(0xffffffffffffffff, 0x0)
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r1, 0x11, 0x68, &(0x7f0000003600)=0x1, 0x4)
11:13:37 executing program 6:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
lseek(r0, 0x0, 0x0)
[ 79.251620] audit: type=1400 audit(1756466017.975:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[ 80.523078] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 80.524444] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 80.527098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 80.533154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 80.534851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 80.538035] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 80.543614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 80.545488] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 80.547936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 80.550961] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 80.555841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 80.559224] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 80.563209] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 80.564345] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 80.565904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 80.567170] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 80.568516] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 80.575204] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 80.576362] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 80.577457] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 80.578551] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 80.585508] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 80.587061] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 80.588996] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 80.590974] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 80.594323] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 80.597820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 80.600814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 80.601912] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 80.603203] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 80.604466] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 80.610500] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 80.612022] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 80.631124] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 80.644105] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 80.646359] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 80.669245] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 80.671075] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 80.684133] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 80.710971] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 82.607102] Bluetooth: hci2: command tx timeout
[ 82.670791] Bluetooth: hci0: command tx timeout
[ 82.670863] Bluetooth: hci1: command tx timeout
[ 82.671747] Bluetooth: hci5: command tx timeout
[ 82.737523] Bluetooth: hci6: command tx timeout
[ 82.739149] Bluetooth: hci3: command tx timeout
[ 82.739794] Bluetooth: hci4: command tx timeout
[ 82.798887] Bluetooth: hci7: command tx timeout
[ 84.655775] Bluetooth: hci2: command tx timeout
[ 84.719366] Bluetooth: hci1: command tx timeout
[ 84.719852] Bluetooth: hci0: command tx timeout
[ 84.720243] Bluetooth: hci5: command tx timeout
[ 84.782842] Bluetooth: hci3: command tx timeout
[ 84.783263] Bluetooth: hci4: command tx timeout
[ 84.783310] Bluetooth: hci6: command tx timeout
[ 84.846715] Bluetooth: hci7: command tx timeout
[ 86.702800] Bluetooth: hci2: command tx timeout
[ 86.766746] Bluetooth: hci0: command tx timeout
[ 86.766768] Bluetooth: hci1: command tx timeout
[ 86.767821] Bluetooth: hci5: command tx timeout
[ 86.830712] Bluetooth: hci6: command tx timeout
[ 86.831847] Bluetooth: hci3: command tx timeout
[ 86.832480] Bluetooth: hci4: command tx timeout
[ 86.894829] Bluetooth: hci7: command tx timeout
[ 88.750774] Bluetooth: hci2: command tx timeout
[ 88.814708] Bluetooth: hci0: command tx timeout
[ 88.815132] Bluetooth: hci5: command tx timeout
[ 88.815513] Bluetooth: hci1: command tx timeout
[ 88.879798] Bluetooth: hci4: command tx timeout
[ 88.879909] Bluetooth: hci3: command tx timeout
[ 88.880231] Bluetooth: hci6: command tx timeout
[ 88.942703] Bluetooth: hci7: command tx timeout
[ 115.979899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 115.980583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.116085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.116744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.190102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.190734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.289350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.289991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.368055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.368933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.415529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.416257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
11:14:15 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x21, &(0x7f0000000000)="92f46193", 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x40, @remote, 0x2}, 0x1c)
[ 116.460242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.460824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
11:14:15 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x21, &(0x7f0000000000)="92f46193", 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x40, @remote, 0x2}, 0x1c)
11:14:15 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x21, &(0x7f0000000000)="92f46193", 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x40, @remote, 0x2}, 0x1c)
[ 116.533479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.534839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
11:14:15 executing program 1:
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'wlan1\x00'})
[ 116.571093] audit: type=1400 audit(1756466055.295:8): avc: denied { open } for pid=3877 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 116.579937] audit: type=1400 audit(1756466055.295:9): avc: denied { kernel } for pid=3877 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 116.589163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.590140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.608111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.609199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
11:14:15 executing program 1:
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'wlan1\x00'})
11:14:15 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
11:14:15 executing program 7:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_test', 0x8242, 0x0)
sendfile(r0, r0, 0x0, 0xb67)
11:14:15 executing program 1:
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'wlan1\x00'})
[ 116.687334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.688696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.696419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 116.701970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.702539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.711080] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 116.758974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.759551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.775571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.776187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.838624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.839576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.906273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.906853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 117.215025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 117.216058] misc raw-gadget: fail, usb_gadget_register_driver returned -16
11:14:15 executing program 0:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x1}})
11:14:15 executing program 2:
pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffff5b3)
11:14:15 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_test', 0x8242, 0x0)
sendfile(r0, r0, 0x0, 0xb67)
11:14:15 executing program 3:
clock_adjtime(0x0, &(0x7f0000000000)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000})
11:14:15 executing program 1:
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'wlan1\x00'})
11:14:15 executing program 7:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_test', 0x8242, 0x0)
sendfile(r0, r0, 0x0, 0xb67)
11:14:15 executing program 4:
setpriority(0x1, 0xffffffffffffffff, 0x0)
11:14:15 executing program 6:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
lseek(r0, 0x0, 0x0)
[ 117.258319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 117.266717] misc raw-gadget: fail, usb_gadget_register_driver returned -16
11:14:16 executing program 2:
pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffff5b3)
11:14:16 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_test', 0x8242, 0x0)
sendfile(r0, r0, 0x0, 0xb67)
11:14:16 executing program 6:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
lseek(r0, 0x0, 0x0)
11:14:16 executing program 4:
setpriority(0x1, 0xffffffffffffffff, 0x0)
11:14:16 executing program 7:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_test', 0x8242, 0x0)
sendfile(r0, r0, 0x0, 0xb67)
11:14:16 executing program 3:
clock_adjtime(0x0, &(0x7f0000000000)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000})
11:14:16 executing program 1:
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0)
syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0)
11:14:16 executing program 2:
pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffff5b3)
[ 117.777231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 117.778170] misc raw-gadget: fail, usb_gadget_register_driver returned -16
11:14:16 executing program 0:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x1}})
11:14:16 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_test', 0x8242, 0x0)
sendfile(r0, r0, 0x0, 0xb67)
11:14:16 executing program 4:
setpriority(0x1, 0xffffffffffffffff, 0x0)
11:14:16 executing program 6:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
lseek(r0, 0x0, 0x0)
11:14:16 executing program 3:
clock_adjtime(0x0, &(0x7f0000000000)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000})
11:14:16 executing program 1:
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0)
syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0)
11:14:16 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0xe, 0x0, &(0x7f00000023c0))
11:14:16 executing program 7:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000000)=':/\\\x00')
[ 117.834865] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI
[ 117.835789] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 117.836395] CPU: 0 UID: 0 PID: 3956 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 117.839338] Tainted: [W]=WARN
[ 117.840850] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 117.841505] RIP: 0010:perf_tp_event+0x175/0xe70
[ 117.841894] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 117.843317] RSP: 0018:ffff888047b0f800 EFLAGS: 00010212
[ 117.843739] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc9000088e000
[ 117.844299] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 117.844880] RBP: ffff888047b0fa70 R08: ffff88806ce31340 R09: ffffe8ffffc151d8
[ 117.845445] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 117.846010] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[ 117.846576] FS: 00007f80fbdf9700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 117.847212] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 117.847676] CR2: 00007f80fe997018 CR3: 000000001ec1c000 CR4: 0000000000350ef0
[ 117.848241] Call Trace:
[ 117.848449]
[ 117.848643] ? __netif_receive_skb_one_core+0x135/0x1e0
[ 117.849079] ? __pfx_perf_tp_event+0x10/0x10
[ 117.849438] ? find_held_lock+0x2b/0x80
[ 117.849767] ? netif_receive_skb+0x150/0x720
[ 117.850122] ? lock_release+0xc8/0x290
[ 117.850439] ? netif_receive_skb+0x1ae/0x720
[ 117.850796] ? __pfx_netif_receive_skb+0x10/0x10
[ 117.851182] ? perf_trace_lock+0xb5/0x5d0
[ 117.851515] ? tun_rx_batched.isra.0+0x472/0x710
[ 117.851903] ? __pfx_perf_trace_lock+0x10/0x10
[ 117.852271] ? __pfx_tun_rx_batched.isra.0+0x10/0x10
[ 117.852694] ? perf_trace_run_bpf_submit+0xef/0x180
[ 117.853095] perf_trace_run_bpf_submit+0xef/0x180
[ 117.853487] perf_trace_lock+0x337/0x5d0
[ 117.853816] ? __pfx_perf_trace_lock+0x10/0x10
[ 117.854185] ? lock_acquire+0x15e/0x2f0
[ 117.854507] ? futex_ref_get+0x48/0x300
[ 117.854831] ? futex_ref_get+0x114/0x300
[ 117.855155] ? futex_hash+0x15c/0x390
[ 117.855466] lock_release+0x1ab/0x290
[ 117.855775] ? futex_hash+0x15c/0x390
[ 117.856082] futex_ref_get+0x119/0x300
[ 117.856398] ? futex_hash+0x15c/0x390
[ 117.856712] futex_hash+0x70/0x390
[ 117.857002] futex_wake+0x143/0x540
[ 117.857300] ? lock_is_held_type+0x9e/0x120
[ 117.857656] ? __pfx_futex_wake+0x10/0x10
[ 117.858000] ? vfs_write+0x169/0x1150
[ 117.858313] do_futex+0x26d/0x370
[ 117.858597] ? __pfx_do_futex+0x10/0x10
[ 117.858926] __x64_sys_futex+0x1c9/0x4d0
[ 117.859255] ? fput+0x6a/0x100
[ 117.859522] ? __pfx___x64_sys_futex+0x10/0x10
[ 117.859890] ? ksys_write+0x1a3/0x240
[ 117.860203] ? __pfx_ksys_write+0x10/0x10
[ 117.860542] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 117.860961] do_syscall_64+0xbf/0x360
[ 117.861266] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 117.861683] RIP: 0033:0x7f80fe883b19
[ 117.861980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 117.863404] RSP: 002b:00007f80fbdf9218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 117.864011] RAX: ffffffffffffffda RBX: 00007f80fe996f68 RCX: 00007f80fe883b19
[ 117.864582] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f80fe996f6c
[ 117.865146] RBP: 00007f80fe996f60 R08: 000000000000000e R09: 0000000000000000
[ 117.865709] R10: 00000000000000be R11: 0000000000000246 R12: 00007f80fe996f6c
[ 117.866277] R13: 00007fff8fe96b0f R14: 00007f80fbdf9300 R15: 0000000000022000
[ 117.866846]
[ 117.867038] Modules linked in:
[ 117.867325] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI
[ 117.868194] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 117.868800] CPU: 0 UID: 0 PID: 3956 Comm: syz-executor.1 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 117.869727] Tainted: [D]=DIE, [W]=WARN
[ 117.870033] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 117.870676] RIP: 0010:perf_tp_event+0x175/0xe70
[ 117.871056] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 117.872481] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012
[ 117.872909] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 117.873465] RDX: ffff88801bddd280 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 117.874020] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc151d8
[ 117.874573] R10: 0000000000000000 R11: ffff88806ce37018 R12: dffffc0000000000
[ 117.875128] R13: 0000000000000024 R14: ffff88806ce31490 R15: dffffc0000000000
[ 117.875685] FS: 00007f80fbdf9700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 117.876320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 117.876785] CR2: 00007f80fe997018 CR3: 000000001ec1c000 CR4: 0000000000350ef0
[ 117.877341] Call Trace:
[ 117.877550]
[ 117.877731] ? __pfx_perf_tp_event+0x10/0x10
[ 117.878087] ? sched_clock_cpu+0x6c/0x4e0
[ 117.878428] ? perf_trace_lock+0xb5/0x5d0
[ 117.878763] ? __pfx_perf_trace_lock+0x10/0x10
[ 117.879134] ? mark_held_locks+0x49/0x80
[ 117.879461] ? perf_trace_run_bpf_submit+0xef/0x180
[ 117.879860] perf_trace_run_bpf_submit+0xef/0x180
[ 117.880251] perf_trace_lock+0x337/0x5d0
[ 117.880582] ? place_entity+0x1c/0x410
[ 117.880895] ? kvm_sched_clock_read+0x16/0x30
[ 117.881258] ? __pfx_perf_trace_lock+0x10/0x10
[ 117.881622] ? check_preempt_wakeup_fair+0x6e/0x950
[ 117.882019] ? sched_ttwu_pending+0x2e0/0x4a0
[ 117.882383] lock_release+0x1ab/0x290
[ 117.882691] ? ttwu_do_activate+0x1a4/0x8a0
[ 117.883043] _raw_spin_unlock+0x16/0x40
[ 117.883365] sched_ttwu_pending+0x2e0/0x4a0
[ 117.883716] ? __pfx_sched_ttwu_pending+0x10/0x10
[ 117.884107] __flush_smp_call_function_queue+0x434/0x740
[ 117.884556] __sysvec_call_function_single+0x6d/0x370
[ 117.884973] sysvec_call_function_single+0xa1/0xc0
[ 117.885365]
[ 117.885548]
[ 117.885732] asm_sysvec_call_function_single+0x1a/0x20
[ 117.886146] RIP: 0010:oops_exit+0x0/0x50
[ 117.886472] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27
[ 117.887882] RSP: 0018:ffff888047b0f690 EFLAGS: 00000202
[ 117.888299] RAX: 000000000002969d RBX: 0000000000000202 RCX: ffffc9000088e000
[ 117.888866] RDX: 0000000000040000 RSI: ffffffff812a3dca RDI: 0000000000000007
[ 117.889420] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90
[ 117.889973] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888047b0f758
[ 117.890530] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000
[ 117.891095] ? oops_end+0x4a/0xe0
[ 117.891387] oops_end+0x65/0xe0
[ 117.891659] exc_general_protection+0x1a2/0x330
[ 117.892036] asm_exc_general_protection+0x26/0x30
[ 117.892417] RIP: 0010:perf_tp_event+0x175/0xe70
[ 117.892793] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 117.894209] RSP: 0018:ffff888047b0f800 EFLAGS: 00010212
[ 117.894625] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc9000088e000
[ 117.895180] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 117.895735] RBP: ffff888047b0fa70 R08: ffff88806ce31340 R09: ffffe8ffffc151d8
[ 117.896291] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 117.896859] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[ 117.897421] ? perf_tp_event+0x167/0xe70
[ 117.897755] ? __netif_receive_skb_one_core+0x135/0x1e0
[ 117.898177] ? __pfx_perf_tp_event+0x10/0x10
[ 117.898531] ? find_held_lock+0x2b/0x80
[ 117.898856] ? netif_receive_skb+0x150/0x720
[ 117.899207] ? lock_release+0xc8/0x290
[ 117.899521] ? netif_receive_skb+0x1ae/0x720
[ 117.899872] ? __pfx_netif_receive_skb+0x10/0x10
[ 117.900253] ? perf_trace_lock+0xb5/0x5d0
[ 117.900593] ? tun_rx_batched.isra.0+0x472/0x710
[ 117.900974] ? __pfx_perf_trace_lock+0x10/0x10
[ 117.901339] ? __pfx_tun_rx_batched.isra.0+0x10/0x10
[ 117.901748] ? perf_trace_run_bpf_submit+0xef/0x180
[ 117.902144] perf_trace_run_bpf_submit+0xef/0x180
[ 117.902533] perf_trace_lock+0x337/0x5d0
[ 117.902862] ? __pfx_perf_trace_lock+0x10/0x10
[ 117.903228] ? lock_acquire+0x15e/0x2f0
[ 117.903546] ? futex_ref_get+0x48/0x300
[ 117.903862] ? futex_ref_get+0x114/0x300
[ 117.904184] ? futex_hash+0x15c/0x390
[ 117.904487] lock_release+0x1ab/0x290
[ 117.904802] ? futex_hash+0x15c/0x390
[ 117.905109] futex_ref_get+0x119/0x300
[ 117.905419] ? futex_hash+0x15c/0x390
[ 117.905729] futex_hash+0x70/0x390
[ 117.906019] futex_wake+0x143/0x540
[ 117.906314] ? lock_is_held_type+0x9e/0x120
[ 117.906661] ? __pfx_futex_wake+0x10/0x10
[ 117.906996] ? vfs_write+0x169/0x1150
[ 117.907304] do_futex+0x26d/0x370
[ 117.907587] ? __pfx_do_futex+0x10/0x10
[ 117.907911] __x64_sys_futex+0x1c9/0x4d0
[ 117.908235] ? fput+0x6a/0x100
[ 117.908507] ? __pfx___x64_sys_futex+0x10/0x10
[ 117.908874] ? ksys_write+0x1a3/0x240
[ 117.909186] ? __pfx_ksys_write+0x10/0x10
[ 117.909519] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 117.909934] do_syscall_64+0xbf/0x360
[ 117.910237] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 117.910642] RIP: 0033:0x7f80fe883b19
[ 117.910938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 117.912356] RSP: 002b:00007f80fbdf9218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 117.912958] RAX: ffffffffffffffda RBX: 00007f80fe996f68 RCX: 00007f80fe883b19
[ 117.913517] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f80fe996f6c
[ 117.914076] RBP: 00007f80fe996f60 R08: 000000000000000e R09: 0000000000000000
[ 117.914633] R10: 00000000000000be R11: 0000000000000246 R12: 00007f80fe996f6c
[ 117.915192] R13: 00007fff8fe96b0f R14: 00007f80fbdf9300 R15: 0000000000022000
[ 117.915756]
[ 117.915946] Modules linked in:
[ 117.916206] ---[ end trace 0000000000000000 ]---
[ 117.916582] RIP: 0010:perf_tp_event+0x175/0xe70
[ 117.916960] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 117.918372] RSP: 0018:ffff888047b0f800 EFLAGS: 00010212
[ 117.918787] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc9000088e000
[ 117.919348] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 117.919907] RBP: ffff888047b0fa70 R08: ffff88806ce31340 R09: ffffe8ffffc151d8
[ 117.920465] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 117.921029] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[ 117.921594] FS: 00007f80fbdf9700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 117.922222] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 117.922680] CR2: 00007f80fe997018 CR3: 000000001ec1c000 CR4: 0000000000350ef0
[ 117.923237] Kernel panic - not syncing: Fatal exception in interrupt
[ 117.923818] Kernel Offset: disabled
[ 117.924103] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---
VM DIAGNOSIS:
11:14:16 Registers:
info registers vcpu 0
RAX=0000000000000054 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888047b0f160
R8 =0000000000000000 R9 =ffffed10013fb046 R10=0000000000000054 R11=552030203a555043
R12=0000000000000054 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0
RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f80fbdf9700 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe2f00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f80fe997018 CR3=000000001ec1c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f80fe96a7c000007f80fe96a7c8
XMM02=00007f80fe96a7e000007f80fe96a7c0 XMM03=00007f80fe96a7c800007f80fe96a7c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=00000000000197ec RBX=ffff88806ce3de00 RCX=ffffc90001c98000 RDX=0000000000040000
RSI=ffffffff816880d6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff888047ac75a8
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=1ffff1100d9e6bb1
R12=ffffed100d9c7bc1 R13=ffff88806ce3de08 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff816880d8 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fc6464dd700 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe4500000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc64907b018 CR3=000000000d025000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fc64904e7c000007fc64904e7c8
XMM02=00007fc64904e7e000007fc64904e7c0 XMM03=00007fc64904e7c800007fc64904e7c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000