Warning: Permanently added '[localhost]:15018' (ECDSA) to the list of known hosts.
2025/08/29 12:54:53 fuzzer started
2025/08/29 12:54:53 dialing manager at localhost:43077
syzkaller login: [ 51.484618] cgroup: Unknown subsys name 'net'
[ 51.551301] cgroup: Unknown subsys name 'cpuset'
[ 51.563439] cgroup: Unknown subsys name 'rlimit'
2025/08/29 12:55:04 syscalls: 2214
2025/08/29 12:55:04 code coverage: enabled
2025/08/29 12:55:04 comparison tracing: enabled
2025/08/29 12:55:04 extra coverage: enabled
2025/08/29 12:55:04 setuid sandbox: enabled
2025/08/29 12:55:04 namespace sandbox: enabled
2025/08/29 12:55:04 Android sandbox: enabled
2025/08/29 12:55:04 fault injection: enabled
2025/08/29 12:55:04 leak checking: enabled
2025/08/29 12:55:04 net packet injection: enabled
2025/08/29 12:55:04 net device setup: enabled
2025/08/29 12:55:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/29 12:55:04 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/29 12:55:04 USB emulation: enabled
2025/08/29 12:55:04 hci packet injection: enabled
2025/08/29 12:55:04 wifi device emulation: enabled
2025/08/29 12:55:04 802.15.4 emulation: enabled
2025/08/29 12:55:04 fetching corpus: 0, signal 0/2000 (executing program)
2025/08/29 12:55:04 fetching corpus: 50, signal 21266/24851 (executing program)
2025/08/29 12:55:04 fetching corpus: 100, signal 32508/37513 (executing program)
2025/08/29 12:55:04 fetching corpus: 150, signal 39299/45684 (executing program)
2025/08/29 12:55:04 fetching corpus: 200, signal 45846/53544 (executing program)
2025/08/29 12:55:04 fetching corpus: 250, signal 53520/62280 (executing program)
2025/08/29 12:55:04 fetching corpus: 300, signal 62746/72306 (executing program)
2025/08/29 12:55:04 fetching corpus: 350, signal 65530/76261 (executing program)
2025/08/29 12:55:04 fetching corpus: 400, signal 68718/80570 (executing program)
2025/08/29 12:55:05 fetching corpus: 450, signal 72844/85607 (executing program)
2025/08/29 12:55:05 fetching corpus: 500, signal 74957/88727 (executing program)
2025/08/29 12:55:05 fetching corpus: 550, signal 78785/93354 (executing program)
2025/08/29 12:55:05 fetching corpus: 600, signal 82403/97716 (executing program)
2025/08/29 12:55:05 fetching corpus: 650, signal 84295/100574 (executing program)
2025/08/29 12:55:05 fetching corpus: 700, signal 85782/103026 (executing program)
2025/08/29 12:55:05 fetching corpus: 750, signal 87218/105365 (executing program)
2025/08/29 12:55:05 fetching corpus: 800, signal 89853/108650 (executing program)
2025/08/29 12:55:05 fetching corpus: 850, signal 92038/111537 (executing program)
2025/08/29 12:55:05 fetching corpus: 900, signal 94185/114350 (executing program)
2025/08/29 12:55:05 fetching corpus: 950, signal 96137/116948 (executing program)
2025/08/29 12:55:06 fetching corpus: 1000, signal 98231/119660 (executing program)
2025/08/29 12:55:06 fetching corpus: 1050, signal 100012/122102 (executing program)
2025/08/29 12:55:06 fetching corpus: 1100, signal 101571/124290 (executing program)
2025/08/29 12:55:06 fetching corpus: 1150, signal 102924/126290 (executing program)
2025/08/29 12:55:06 fetching corpus: 1200, signal 104849/128708 (executing program)
2025/08/29 12:55:06 fetching corpus: 1250, signal 105997/130498 (executing program)
2025/08/29 12:55:06 fetching corpus: 1300, signal 107290/132401 (executing program)
2025/08/29 12:55:06 fetching corpus: 1350, signal 108383/134129 (executing program)
2025/08/29 12:55:06 fetching corpus: 1400, signal 110115/136275 (executing program)
2025/08/29 12:55:06 fetching corpus: 1450, signal 111027/137804 (executing program)
2025/08/29 12:55:07 fetching corpus: 1500, signal 112016/139412 (executing program)
2025/08/29 12:55:07 fetching corpus: 1550, signal 112826/140826 (executing program)
2025/08/29 12:55:07 fetching corpus: 1600, signal 113805/142369 (executing program)
2025/08/29 12:55:07 fetching corpus: 1650, signal 114849/143911 (executing program)
2025/08/29 12:55:07 fetching corpus: 1700, signal 116371/145740 (executing program)
2025/08/29 12:55:07 fetching corpus: 1750, signal 117187/147103 (executing program)
2025/08/29 12:55:07 fetching corpus: 1800, signal 119162/149126 (executing program)
2025/08/29 12:55:07 fetching corpus: 1850, signal 120206/150628 (executing program)
2025/08/29 12:55:07 fetching corpus: 1900, signal 121201/152014 (executing program)
2025/08/29 12:55:07 fetching corpus: 1950, signal 122519/153636 (executing program)
2025/08/29 12:55:07 fetching corpus: 2000, signal 123333/154819 (executing program)
2025/08/29 12:55:08 fetching corpus: 2050, signal 124301/156151 (executing program)
2025/08/29 12:55:08 fetching corpus: 2100, signal 125150/157430 (executing program)
2025/08/29 12:55:08 fetching corpus: 2150, signal 125923/158591 (executing program)
2025/08/29 12:55:08 fetching corpus: 2200, signal 127215/160093 (executing program)
2025/08/29 12:55:08 fetching corpus: 2250, signal 128172/161324 (executing program)
2025/08/29 12:55:08 fetching corpus: 2300, signal 129232/162613 (executing program)
2025/08/29 12:55:08 fetching corpus: 2350, signal 130298/163875 (executing program)
2025/08/29 12:55:08 fetching corpus: 2400, signal 130852/164824 (executing program)
2025/08/29 12:55:08 fetching corpus: 2450, signal 132228/166206 (executing program)
2025/08/29 12:55:08 fetching corpus: 2500, signal 132918/167220 (executing program)
2025/08/29 12:55:08 fetching corpus: 2550, signal 133688/168270 (executing program)
2025/08/29 12:55:09 fetching corpus: 2600, signal 134445/169298 (executing program)
2025/08/29 12:55:09 fetching corpus: 2650, signal 135280/170429 (executing program)
2025/08/29 12:55:09 fetching corpus: 2700, signal 135711/171290 (executing program)
2025/08/29 12:55:09 fetching corpus: 2750, signal 137013/172533 (executing program)
2025/08/29 12:55:09 fetching corpus: 2800, signal 137854/173561 (executing program)
2025/08/29 12:55:09 fetching corpus: 2850, signal 138653/174497 (executing program)
2025/08/29 12:55:09 fetching corpus: 2900, signal 139086/175317 (executing program)
2025/08/29 12:55:09 fetching corpus: 2950, signal 139828/176280 (executing program)
2025/08/29 12:55:09 fetching corpus: 3000, signal 140348/177072 (executing program)
2025/08/29 12:55:09 fetching corpus: 3050, signal 140980/177859 (executing program)
2025/08/29 12:55:09 fetching corpus: 3100, signal 141447/178655 (executing program)
2025/08/29 12:55:10 fetching corpus: 3150, signal 142627/179719 (executing program)
2025/08/29 12:55:10 fetching corpus: 3200, signal 143275/180490 (executing program)
2025/08/29 12:55:10 fetching corpus: 3250, signal 143897/181237 (executing program)
2025/08/29 12:55:10 fetching corpus: 3300, signal 144356/181896 (executing program)
2025/08/29 12:55:10 fetching corpus: 3350, signal 145405/182788 (executing program)
2025/08/29 12:55:10 fetching corpus: 3400, signal 145974/183485 (executing program)
2025/08/29 12:55:10 fetching corpus: 3450, signal 146545/184228 (executing program)
2025/08/29 12:55:10 fetching corpus: 3500, signal 147304/185016 (executing program)
2025/08/29 12:55:10 fetching corpus: 3550, signal 147903/185719 (executing program)
2025/08/29 12:55:10 fetching corpus: 3600, signal 148433/186384 (executing program)
2025/08/29 12:55:11 fetching corpus: 3650, signal 148951/187029 (executing program)
2025/08/29 12:55:11 fetching corpus: 3700, signal 149564/187643 (executing program)
2025/08/29 12:55:11 fetching corpus: 3750, signal 150122/188276 (executing program)
2025/08/29 12:55:11 fetching corpus: 3800, signal 150680/188916 (executing program)
2025/08/29 12:55:11 fetching corpus: 3850, signal 151503/189689 (executing program)
2025/08/29 12:55:11 fetching corpus: 3900, signal 151979/190285 (executing program)
2025/08/29 12:55:11 fetching corpus: 3950, signal 152442/190890 (executing program)
2025/08/29 12:55:11 fetching corpus: 4000, signal 153124/191514 (executing program)
2025/08/29 12:55:11 fetching corpus: 4050, signal 153553/192155 (executing program)
2025/08/29 12:55:11 fetching corpus: 4100, signal 154255/192773 (executing program)
2025/08/29 12:55:11 fetching corpus: 4150, signal 154752/193326 (executing program)
2025/08/29 12:55:12 fetching corpus: 4200, signal 155341/193873 (executing program)
2025/08/29 12:55:12 fetching corpus: 4250, signal 155769/194365 (executing program)
2025/08/29 12:55:12 fetching corpus: 4300, signal 156362/194874 (executing program)
2025/08/29 12:55:12 fetching corpus: 4350, signal 156949/195415 (executing program)
2025/08/29 12:55:12 fetching corpus: 4400, signal 157501/195916 (executing program)
2025/08/29 12:55:12 fetching corpus: 4450, signal 157947/196391 (executing program)
2025/08/29 12:55:12 fetching corpus: 4500, signal 158322/196848 (executing program)
2025/08/29 12:55:12 fetching corpus: 4550, signal 158740/197304 (executing program)
2025/08/29 12:55:12 fetching corpus: 4600, signal 159347/197747 (executing program)
2025/08/29 12:55:12 fetching corpus: 4650, signal 159735/198207 (executing program)
2025/08/29 12:55:12 fetching corpus: 4700, signal 160241/198633 (executing program)
2025/08/29 12:55:12 fetching corpus: 4750, signal 160606/199081 (executing program)
2025/08/29 12:55:12 fetching corpus: 4800, signal 160885/199514 (executing program)
2025/08/29 12:55:13 fetching corpus: 4850, signal 161734/199608 (executing program)
2025/08/29 12:55:13 fetching corpus: 4900, signal 162019/199630 (executing program)
2025/08/29 12:55:13 fetching corpus: 4950, signal 162784/199698 (executing program)
2025/08/29 12:55:13 fetching corpus: 5000, signal 163435/199711 (executing program)
2025/08/29 12:55:13 fetching corpus: 5050, signal 163937/199711 (executing program)
2025/08/29 12:55:13 fetching corpus: 5100, signal 164582/199713 (executing program)
2025/08/29 12:55:13 fetching corpus: 5150, signal 164992/199715 (executing program)
2025/08/29 12:55:13 fetching corpus: 5200, signal 165465/199719 (executing program)
2025/08/29 12:55:13 fetching corpus: 5250, signal 165779/199736 (executing program)
2025/08/29 12:55:13 fetching corpus: 5300, signal 166095/199746 (executing program)
2025/08/29 12:55:13 fetching corpus: 5350, signal 166545/199757 (executing program)
2025/08/29 12:55:13 fetching corpus: 5400, signal 167094/199758 (executing program)
2025/08/29 12:55:14 fetching corpus: 5450, signal 167525/199768 (executing program)
2025/08/29 12:55:14 fetching corpus: 5500, signal 167886/199770 (executing program)
2025/08/29 12:55:14 fetching corpus: 5550, signal 168748/199779 (executing program)
2025/08/29 12:55:14 fetching corpus: 5600, signal 169036/199800 (executing program)
2025/08/29 12:55:14 fetching corpus: 5650, signal 169415/199816 (executing program)
2025/08/29 12:55:14 fetching corpus: 5700, signal 169806/199820 (executing program)
2025/08/29 12:55:14 fetching corpus: 5750, signal 170101/199828 (executing program)
2025/08/29 12:55:14 fetching corpus: 5800, signal 170384/199911 (executing program)
2025/08/29 12:55:14 fetching corpus: 5850, signal 170681/199922 (executing program)
2025/08/29 12:55:14 fetching corpus: 5900, signal 171061/199926 (executing program)
2025/08/29 12:55:14 fetching corpus: 5950, signal 171431/199950 (executing program)
2025/08/29 12:55:15 fetching corpus: 6000, signal 171860/199973 (executing program)
2025/08/29 12:55:15 fetching corpus: 6050, signal 172244/199978 (executing program)
2025/08/29 12:55:15 fetching corpus: 6100, signal 172707/200050 (executing program)
2025/08/29 12:55:15 fetching corpus: 6150, signal 173151/200079 (executing program)
2025/08/29 12:55:15 fetching corpus: 6200, signal 173502/200081 (executing program)
2025/08/29 12:55:15 fetching corpus: 6250, signal 173847/200087 (executing program)
2025/08/29 12:55:15 fetching corpus: 6300, signal 174395/200099 (executing program)
2025/08/29 12:55:15 fetching corpus: 6350, signal 174730/200101 (executing program)
2025/08/29 12:55:15 fetching corpus: 6400, signal 174971/200108 (executing program)
2025/08/29 12:55:15 fetching corpus: 6450, signal 175267/200109 (executing program)
2025/08/29 12:55:15 fetching corpus: 6500, signal 175579/200116 (executing program)
2025/08/29 12:55:15 fetching corpus: 6550, signal 175930/200129 (executing program)
2025/08/29 12:55:16 fetching corpus: 6600, signal 176132/200147 (executing program)
2025/08/29 12:55:16 fetching corpus: 6650, signal 176526/200186 (executing program)
2025/08/29 12:55:16 fetching corpus: 6700, signal 176828/200198 (executing program)
2025/08/29 12:55:16 fetching corpus: 6750, signal 177064/200200 (executing program)
2025/08/29 12:55:16 fetching corpus: 6800, signal 177323/200217 (executing program)
2025/08/29 12:55:16 fetching corpus: 6850, signal 177687/200232 (executing program)
2025/08/29 12:55:16 fetching corpus: 6900, signal 177901/200234 (executing program)
2025/08/29 12:55:16 fetching corpus: 6950, signal 178167/200251 (executing program)
2025/08/29 12:55:16 fetching corpus: 7000, signal 178445/200267 (executing program)
2025/08/29 12:55:16 fetching corpus: 7050, signal 178711/200277 (executing program)
2025/08/29 12:55:16 fetching corpus: 7100, signal 179569/200281 (executing program)
2025/08/29 12:55:16 fetching corpus: 7150, signal 179848/200282 (executing program)
2025/08/29 12:55:16 fetching corpus: 7200, signal 180156/200287 (executing program)
2025/08/29 12:55:17 fetching corpus: 7250, signal 180580/200298 (executing program)
2025/08/29 12:55:17 fetching corpus: 7300, signal 180887/200300 (executing program)
2025/08/29 12:55:17 fetching corpus: 7350, signal 181168/200303 (executing program)
2025/08/29 12:55:17 fetching corpus: 7400, signal 181503/200317 (executing program)
2025/08/29 12:55:17 fetching corpus: 7450, signal 181918/200405 (executing program)
2025/08/29 12:55:17 fetching corpus: 7500, signal 182295/200411 (executing program)
2025/08/29 12:55:17 fetching corpus: 7550, signal 182563/200431 (executing program)
2025/08/29 12:55:17 fetching corpus: 7600, signal 183012/200446 (executing program)
2025/08/29 12:55:17 fetching corpus: 7650, signal 183294/200452 (executing program)
2025/08/29 12:55:17 fetching corpus: 7700, signal 183501/200452 (executing program)
2025/08/29 12:55:17 fetching corpus: 7750, signal 183815/200458 (executing program)
2025/08/29 12:55:17 fetching corpus: 7800, signal 184000/200494 (executing program)
2025/08/29 12:55:18 fetching corpus: 7850, signal 184303/200502 (executing program)
2025/08/29 12:55:18 fetching corpus: 7900, signal 184577/200508 (executing program)
2025/08/29 12:55:18 fetching corpus: 7950, signal 184919/200509 (executing program)
2025/08/29 12:55:18 fetching corpus: 8000, signal 185368/200509 (executing program)
2025/08/29 12:55:18 fetching corpus: 8050, signal 185696/200519 (executing program)
2025/08/29 12:55:18 fetching corpus: 8100, signal 185978/200533 (executing program)
2025/08/29 12:55:18 fetching corpus: 8150, signal 186271/200540 (executing program)
2025/08/29 12:55:18 fetching corpus: 8200, signal 186649/200542 (executing program)
2025/08/29 12:55:18 fetching corpus: 8250, signal 187013/200555 (executing program)
2025/08/29 12:55:18 fetching corpus: 8300, signal 187239/200556 (executing program)
2025/08/29 12:55:18 fetching corpus: 8350, signal 187488/200562 (executing program)
2025/08/29 12:55:19 fetching corpus: 8400, signal 187759/200572 (executing program)
2025/08/29 12:55:19 fetching corpus: 8450, signal 187957/200574 (executing program)
2025/08/29 12:55:19 fetching corpus: 8500, signal 188207/200575 (executing program)
2025/08/29 12:55:19 fetching corpus: 8550, signal 188463/200592 (executing program)
2025/08/29 12:55:19 fetching corpus: 8600, signal 188813/200598 (executing program)
2025/08/29 12:55:19 fetching corpus: 8650, signal 189073/200602 (executing program)
2025/08/29 12:55:19 fetching corpus: 8700, signal 189342/200610 (executing program)
2025/08/29 12:55:19 fetching corpus: 8750, signal 189626/200613 (executing program)
2025/08/29 12:55:19 fetching corpus: 8800, signal 189906/200636 (executing program)
2025/08/29 12:55:19 fetching corpus: 8850, signal 190213/200647 (executing program)
2025/08/29 12:55:19 fetching corpus: 8900, signal 190535/200658 (executing program)
2025/08/29 12:55:19 fetching corpus: 8950, signal 190810/200663 (executing program)
2025/08/29 12:55:19 fetching corpus: 9000, signal 191094/200668 (executing program)
2025/08/29 12:55:20 fetching corpus: 9050, signal 191391/200715 (executing program)
2025/08/29 12:55:20 fetching corpus: 9100, signal 191681/200725 (executing program)
2025/08/29 12:55:20 fetching corpus: 9150, signal 191968/200734 (executing program)
2025/08/29 12:55:20 fetching corpus: 9200, signal 192231/200747 (executing program)
2025/08/29 12:55:20 fetching corpus: 9250, signal 192424/200748 (executing program)
2025/08/29 12:55:20 fetching corpus: 9300, signal 192816/200748 (executing program)
2025/08/29 12:55:20 fetching corpus: 9350, signal 193003/200754 (executing program)
2025/08/29 12:55:20 fetching corpus: 9400, signal 193259/200758 (executing program)
2025/08/29 12:55:20 fetching corpus: 9450, signal 193437/200759 (executing program)
2025/08/29 12:55:20 fetching corpus: 9500, signal 193704/200761 (executing program)
2025/08/29 12:55:20 fetching corpus: 9550, signal 193913/200763 (executing program)
2025/08/29 12:55:20 fetching corpus: 9600, signal 194207/200766 (executing program)
2025/08/29 12:55:21 fetching corpus: 9650, signal 194435/200776 (executing program)
2025/08/29 12:55:21 fetching corpus: 9700, signal 194689/200779 (executing program)
2025/08/29 12:55:21 fetching corpus: 9750, signal 195030/200799 (executing program)
2025/08/29 12:55:21 fetching corpus: 9800, signal 195288/200804 (executing program)
2025/08/29 12:55:21 fetching corpus: 9850, signal 195535/200812 (executing program)
2025/08/29 12:55:21 fetching corpus: 9900, signal 195795/200835 (executing program)
2025/08/29 12:55:21 fetching corpus: 9950, signal 196026/200847 (executing program)
2025/08/29 12:55:21 fetching corpus: 10000, signal 196290/200852 (executing program)
2025/08/29 12:55:21 fetching corpus: 10050, signal 196495/200854 (executing program)
2025/08/29 12:55:21 fetching corpus: 10100, signal 196711/200855 (executing program)
2025/08/29 12:55:21 fetching corpus: 10150, signal 196939/200857 (executing program)
2025/08/29 12:55:21 fetching corpus: 10164, signal 196970/200858 (executing program)
2025/08/29 12:55:21 fetching corpus: 10164, signal 196970/200858 (executing program)
2025/08/29 12:55:24 starting 8 fuzzer processes
12:55:24 executing program 0:
r0 = add_key(&(0x7f0000000500)='id_legacy\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="d8", 0x1, 0xffffffffffffffff)
keyctl$get_security(0x3, r0, 0x0, 0x0)
request_key(&(0x7f0000000280)='id_legacy\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0)
12:55:24 executing program 1:
prctl$PR_SET_FP_MODE(0x1b, 0x0)
12:55:24 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x5a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0)
12:55:24 executing program 7:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_linger(r0, 0x1, 0x37, 0x0, &(0x7f0000000140))
12:55:24 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fchmod(0xffffffffffffffff, 0x0)
[ 81.908511] audit: type=1400 audit(1756472124.426:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
12:55:24 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"})
12:55:24 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000003d40), 0x4)
sendmmsg$inet6(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
12:55:24 executing program 5:
munmap(&(0x7f0000000000/0x2000)=nil, 0x2000)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x8)
[ 83.085720] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 83.088727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 83.091903] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 83.096489] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 83.102178] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 83.162812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 83.166776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 83.169706] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 83.174212] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 83.176491] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 83.266035] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 83.269803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 83.272935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 83.276209] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 83.279933] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 83.347236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 83.352461] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 83.357155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 83.358894] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 83.365813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 83.368070] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 83.370499] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 83.373673] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 83.381347] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 83.386298] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 83.402668] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 83.411919] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 83.415205] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 83.434107] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 83.436600] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 83.440348] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 83.448778] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 83.450255] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 83.457567] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 83.462697] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 83.464976] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 83.475888] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 83.478800] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 83.483795] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 83.485364] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 85.116033] Bluetooth: hci0: command tx timeout
[ 85.245672] Bluetooth: hci1: command tx timeout
[ 85.309592] Bluetooth: hci2: command tx timeout
[ 85.435587] Bluetooth: hci3: command tx timeout
[ 85.499607] Bluetooth: hci5: command tx timeout
[ 85.499633] Bluetooth: hci4: command tx timeout
[ 85.563602] Bluetooth: hci7: command tx timeout
[ 85.563634] Bluetooth: hci6: command tx timeout
[ 87.164240] Bluetooth: hci0: command tx timeout
[ 87.291652] Bluetooth: hci1: command tx timeout
[ 87.355566] Bluetooth: hci2: command tx timeout
[ 87.484573] Bluetooth: hci3: command tx timeout
[ 87.547605] Bluetooth: hci5: command tx timeout
[ 87.548656] Bluetooth: hci4: command tx timeout
[ 87.612054] Bluetooth: hci7: command tx timeout
[ 87.612084] Bluetooth: hci6: command tx timeout
[ 89.212597] Bluetooth: hci0: command tx timeout
[ 89.339586] Bluetooth: hci1: command tx timeout
[ 89.403616] Bluetooth: hci2: command tx timeout
[ 89.531673] Bluetooth: hci3: command tx timeout
[ 89.595600] Bluetooth: hci4: command tx timeout
[ 89.595666] Bluetooth: hci5: command tx timeout
[ 89.660576] Bluetooth: hci7: command tx timeout
[ 89.660630] Bluetooth: hci6: command tx timeout
[ 91.259649] Bluetooth: hci0: command tx timeout
[ 91.388564] Bluetooth: hci1: command tx timeout
[ 91.452581] Bluetooth: hci2: command tx timeout
[ 91.580687] Bluetooth: hci3: command tx timeout
[ 91.643714] Bluetooth: hci5: command tx timeout
[ 91.644578] Bluetooth: hci4: command tx timeout
[ 91.707583] Bluetooth: hci7: command tx timeout
[ 91.708653] Bluetooth: hci6: command tx timeout
[ 118.883913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 118.884791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.004994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.005625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.115241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.115863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.221306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.221956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.246370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.247119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
12:56:01 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000003d40), 0x4)
sendmmsg$inet6(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
12:56:01 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000003d40), 0x4)
sendmmsg$inet6(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
[ 119.340845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.341453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
12:56:01 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000003d40), 0x4)
sendmmsg$inet6(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
12:56:01 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000003d40), 0x4)
sendmmsg$inet6(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
12:56:01 executing program 1:
prctl$PR_SET_FP_MODE(0x1b, 0x0)
[ 119.424575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.425174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
12:56:01 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000003d40), 0x4)
sendmmsg$inet6(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
[ 119.475820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.476413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
12:56:01 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000003d40), 0x4)
sendmmsg$inet6(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
12:56:02 executing program 1:
prctl$PR_SET_FP_MODE(0x1b, 0x0)
[ 119.561039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.561645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.586878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.587436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.610845] audit: type=1400 audit(1756472162.128:8): avc: denied { open } for pid=3889 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 119.616615] audit: type=1400 audit(1756472162.129:9): avc: denied { kernel } for pid=3889 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 119.619415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.620143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.667863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.668444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.708933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.709502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.757062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.757654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.808005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.808773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.905901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.906458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 120.030284] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
12:56:02 executing program 0:
r0 = io_uring_setup(0x18a, &(0x7f0000000200))
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x2000)
close_range(r0, 0xffffffffffffffff, 0x0)
12:56:02 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000))
12:56:02 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x5a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0)
12:56:02 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0xfff, 0x4)
12:56:02 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
12:56:02 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fchmod(0xffffffffffffffff, 0x0)
12:56:02 executing program 1:
prctl$PR_SET_FP_MODE(0x1b, 0x0)
12:56:02 executing program 5:
munmap(&(0x7f0000000000/0x2000)=nil, 0x2000)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x8)
[ 120.120934] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
12:56:02 executing program 5:
munmap(&(0x7f0000000000/0x2000)=nil, 0x2000)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x8)
12:56:02 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fchmod(0xffffffffffffffff, 0x0)
12:56:02 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0xfff, 0x4)
12:56:02 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x5a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0)
[ 120.206321] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
12:56:02 executing program 0:
r0 = io_uring_setup(0x18a, &(0x7f0000000200))
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x2000)
close_range(r0, 0xffffffffffffffff, 0x0)
12:56:02 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0xfff, 0x4)
12:56:02 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[])
umount2(&(0x7f0000000080)='./file0\x00', 0x0)
12:56:02 executing program 7:
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00'})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x0)
12:56:02 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
12:56:02 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x5a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0)
12:56:02 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fchmod(0xffffffffffffffff, 0x0)
12:56:02 executing program 5:
munmap(&(0x7f0000000000/0x2000)=nil, 0x2000)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x8)
[ 120.325083] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 120.338016] kmemleak: Found object by alias at 0x607f1a638f0c
[ 120.338031] CPU: 1 UID: 0 PID: 3937 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 120.338049] Tainted: [W]=WARN
[ 120.338052] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 120.338059] Call Trace:
[ 120.338063]
[ 120.338067] dump_stack_lvl+0xca/0x120
[ 120.338091] __lookup_object+0x94/0xb0
[ 120.338108] delete_object_full+0x27/0x70
[ 120.338124] free_percpu+0x30/0x1160
[ 120.338141] ? arch_uprobe_clear_state+0x16/0x140
[ 120.338161] futex_hash_free+0x38/0xc0
[ 120.338175] mmput+0x2d3/0x390
[ 120.338194] do_exit+0x79d/0x2970
[ 120.338207] ? signal_wake_up_state+0x85/0x120
[ 120.338223] ? zap_other_threads+0x2b9/0x3a0
[ 120.338239] ? __pfx_do_exit+0x10/0x10
[ 120.338252] ? do_group_exit+0x1c3/0x2a0
[ 120.338265] ? lock_release+0xc8/0x290
[ 120.338282] do_group_exit+0xd3/0x2a0
[ 120.338308] __x64_sys_exit_group+0x3e/0x50
[ 120.338322] x64_sys_call+0x18c5/0x18d0
[ 120.338338] do_syscall_64+0xbf/0x360
[ 120.338350] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 120.338361] RIP: 0033:0x7ff4df3ecb19
[ 120.338369] Code: Unable to access opcode bytes at 0x7ff4df3ecaef.
[ 120.338375] RSP: 002b:00007ffd49cf0cb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 120.338386] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007ff4df3ecb19
[ 120.338394] RDX: 00007ff4df39f72b RSI: ffffffffffffffbc RDI: 0000000000000000
[ 120.338401] RBP: 0000000000000000 R08: 0000001b2d621448 R09: 0000000000000000
[ 120.338407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 120.338414] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd49cf0da0
[ 120.338429]
[ 120.338433] kmemleak: Object (percpu) 0x607f1a638f04 (size 16):
[ 120.338439] kmemleak: comm "syz-executor.0", pid 279, jiffies 4294787100
[ 120.338446] kmemleak: min_count = 1
[ 120.338450] kmemleak: count = 0
[ 120.338454] kmemleak: flags = 0x21
[ 120.338457] kmemleak: checksum = 0
[ 120.338461] kmemleak: backtrace:
[ 120.338465] pcpu_alloc_noprof+0x87a/0x1170
[ 120.338479] __percpu_counter_init_many+0x44/0x360
[ 120.338493] mm_init+0xcac/0x1170
[ 120.338500] copy_process+0x3ab7/0x73c0
[ 120.338514] kernel_clone+0xea/0x7f0
[ 120.338524] __do_sys_clone+0xce/0x120
[ 120.338534] do_syscall_64+0xbf/0x360
[ 120.338542] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 120.348502] kmemleak: Found object by alias at 0x607f1a638f10
[ 120.348525] CPU: 0 UID: 0 PID: 3945 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 120.348543] Tainted: [W]=WARN
[ 120.348547] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 120.348554] Call Trace:
[ 120.348558]
[ 120.348563] dump_stack_lvl+0xca/0x120
[ 120.348590] __lookup_object+0x94/0xb0
[ 120.348607] delete_object_full+0x27/0x70
[ 120.348623] free_percpu+0x30/0x1160
[ 120.348639] ? arch_uprobe_clear_state+0x16/0x140
[ 120.348659] futex_hash_free+0x38/0xc0
[ 120.348674] mmput+0x2d3/0x390
[ 120.348692] do_exit+0x79d/0x2970
[ 120.348706] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 120.348727] ? zap_other_threads+0x2b9/0x3a0
[ 120.348744] ? __pfx_do_exit+0x10/0x10
[ 120.348756] ? do_group_exit+0x1c3/0x2a0
[ 120.348771] ? _raw_spin_unlock_irq+0x23/0x40
[ 120.348788] do_group_exit+0xd3/0x2a0
[ 120.348803] __x64_sys_exit_group+0x3e/0x50
[ 120.348816] x64_sys_call+0x18c5/0x18d0
[ 120.348832] do_syscall_64+0xbf/0x360
[ 120.348844] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 120.348855] RIP: 0033:0x7fe305305b19
[ 120.348864] Code: Unable to access opcode bytes at 0x7fe305305aef.
[ 120.348869] RSP: 002b:00007ffeb2b64f78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 120.348880] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fe305305b19
[ 120.348888] RDX: 00007fe3052b872b RSI: ffffffffffffffbc RDI: 0000000000000000
[ 120.348895] RBP: 0000000000000000 R08: 0000001b2d721624 R09: 0000000000000000
[ 120.348902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 120.348909] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffeb2b65060
[ 120.348925]
[ 120.348928] kmemleak: Object (percpu) 0x607f1a638f04 (size 16):
[ 120.348935] kmemleak: comm "syz-executor.0", pid 279, jiffies 4294787100
[ 120.348942] kmemleak: min_count = 1
[ 120.348946] kmemleak: count = 0
[ 120.348949] kmemleak: flags = 0x21
[ 120.348953] kmemleak: checksum = 0
[ 120.348957] kmemleak: backtrace:
[ 120.348960] pcpu_alloc_noprof+0x87a/0x1170
[ 120.348975] __percpu_counter_init_many+0x44/0x360
[ 120.348988] mm_init+0xcac/0x1170
[ 120.348995] copy_process+0x3ab7/0x73c0
[ 120.349005] kernel_clone+0xea/0x7f0
[ 120.349015] __do_sys_clone+0xce/0x120
[ 120.349025] do_syscall_64+0xbf/0x360
[ 120.349033] entry_SYSCALL_64_after_hwframe+0x77/0x7f
12:56:02 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0xfff, 0x4)
12:56:02 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
12:56:02 executing program 0:
r0 = io_uring_setup(0x18a, &(0x7f0000000200))
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x2000)
close_range(r0, 0xffffffffffffffff, 0x0)
12:56:02 executing program 7:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000080)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x5)
[ 120.449593] kmemleak: Found object by alias at 0x607f1a638f08
[ 120.449614] CPU: 0 UID: 0 PID: 3949 Comm: syz-executor.4 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 120.449632] Tainted: [W]=WARN
[ 120.449636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 120.449643] Call Trace:
[ 120.449647]
[ 120.449652] dump_stack_lvl+0xca/0x120
[ 120.449679] __lookup_object+0x94/0xb0
[ 120.449696] delete_object_full+0x27/0x70
[ 120.449711] free_percpu+0x30/0x1160
[ 120.449727] ? arch_uprobe_clear_state+0x16/0x140
[ 120.449748] futex_hash_free+0x38/0xc0
[ 120.449762] mmput+0x2d3/0x390
[ 120.449780] do_exit+0x79d/0x2970
[ 120.449798] ? __pfx_do_exit+0x10/0x10
[ 120.449812] ? find_held_lock+0x2b/0x80
[ 120.449829] ? get_signal+0x835/0x2340
[ 120.449849] do_group_exit+0xd3/0x2a0
[ 120.449864] get_signal+0x2315/0x2340
[ 120.449880] ? __call_rcu_common.constprop.0+0x4c1/0x960
[ 120.449896] ? __call_rcu_common.constprop.0+0x4c1/0x960
[ 120.449912] ? __pfx_get_signal+0x10/0x10
[ 120.449927] ? do_futex+0x135/0x370
[ 120.449941] ? __pfx_do_futex+0x10/0x10
[ 120.449956] arch_do_signal_or_restart+0x80/0x790
[ 120.449974] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 120.449990] ? __x64_sys_futex+0x1c9/0x4d0
[ 120.450001] ? __x64_sys_futex+0x1d2/0x4d0
[ 120.450015] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 120.450035] ? __pfx___x64_sys_futex+0x10/0x10
[ 120.450047] ? __pfx_fput_close_sync+0x10/0x10
[ 120.450063] ? xfd_validate_state+0x55/0x180
[ 120.450084] exit_to_user_mode_loop+0x8b/0x110
[ 120.450097] do_syscall_64+0x2f7/0x360
[ 120.450109] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 120.450121] RIP: 0033:0x7fcc2c117b19
[ 120.450130] Code: Unable to access opcode bytes at 0x7fcc2c117aef.
[ 120.450135] RSP: 002b:00007fcc2968d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 120.450147] RAX: fffffffffffffe00 RBX: 00007fcc2c22af68 RCX: 00007fcc2c117b19
[ 120.450154] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcc2c22af68
[ 120.450161] RBP: 00007fcc2c22af60 R08: 0000000000000000 R09: 0000000000000000
[ 120.450168] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc2c22af6c
[ 120.450175] R13: 00007ffdc4575a5f R14: 00007fcc2968d300 R15: 0000000000022000
[ 120.450191]
[ 120.450195] kmemleak: Object (percpu) 0x607f1a638f04 (size 16):
[ 120.450202] kmemleak: comm "syz-executor.1", pid 276, jiffies 4294787253
[ 120.450209] kmemleak: min_count = 1
[ 120.450212] kmemleak: count = 0
[ 120.450216] kmemleak: flags = 0x21
[ 120.450220] kmemleak: checksum = 0
[ 120.450228] kmemleak: backtrace:
[ 120.450232] pcpu_alloc_noprof+0x87a/0x1170
[ 120.450246] __percpu_counter_init_many+0x44/0x360
[ 120.450259] mm_init+0xcac/0x1170
[ 120.450267] copy_process+0x3ab7/0x73c0
[ 120.450277] kernel_clone+0xea/0x7f0
[ 120.450287] __do_sys_clone+0xce/0x120
[ 120.450296] do_syscall_64+0xbf/0x360
[ 120.450313] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 120.466641] kmemleak: Cannot insert 0x607f1a638f08 into the object search tree (overlaps existing)
[ 120.466659] CPU: 1 UID: 0 PID: 3958 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 120.466678] Tainted: [W]=WARN
[ 120.466682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 120.466690] Call Trace:
[ 120.466694]
[ 120.466699] dump_stack_lvl+0xca/0x120
[ 120.466726] __link_object+0x190/0x210
[ 120.466745] __create_object+0x48/0x80
[ 120.466763] pcpu_alloc_noprof+0x87a/0x1170
[ 120.466788] perf_trace_event_init+0x366/0xa10
[ 120.466807] perf_trace_init+0x1a4/0x2f0
[ 120.466823] perf_tp_event_init+0xa6/0x120
[ 120.466841] perf_try_init_event+0x140/0x9f0
[ 120.466859] perf_event_alloc.part.0+0x118e/0x45f0
[ 120.466878] ? perf_event_alloc.part.0+0x1074/0x45f0
[ 120.466899] ? __fget_files+0x203/0x3b0
[ 120.466915] ? __pfx_perf_event_alloc.part.0+0x10/0x10
[ 120.466936] ? find_held_lock+0x2b/0x80
[ 120.466954] ? __do_sys_perf_event_open+0x11df/0x2c20
[ 120.466972] __do_sys_perf_event_open+0x719/0x2c20
[ 120.466992] ? __pfx___do_sys_perf_event_open+0x10/0x10
[ 120.467006] ? find_held_lock+0x2b/0x80
[ 120.467034] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 120.467050] do_syscall_64+0xbf/0x360
[ 120.467063] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 120.467076] RIP: 0033:0x7fbf5653db19
[ 120.467086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 120.467098] RSP: 002b:00007fbf53ab3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[ 120.467109] RAX: ffffffffffffffda RBX: 00007fbf56650f60 RCX: 00007fbf5653db19
[ 120.467117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000
[ 120.467125] RBP: 00007fbf56597f6d R08: 0000000000000000 R09: 0000000000000000
[ 120.467132] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 120.467140] R13: 00007ffdde8f0f1f R14: 00007fbf53ab3300 R15: 0000000000022000
[ 120.467156]
[ 120.467955] kmemleak: Kernel memory leak detector disabled
[ 120.467960] kmemleak: Object (percpu) 0x607f1a638f04 (size 16):
[ 120.467967] kmemleak: comm "syz-executor.1", pid 276, jiffies 4294787253
[ 120.467975] kmemleak: min_count = 1
[ 120.467979] kmemleak: count = 0
[ 120.467983] kmemleak: flags = 0x21
[ 120.467987] kmemleak: checksum = 0
[ 120.467991] kmemleak: backtrace:
[ 120.467995] pcpu_alloc_noprof+0x87a/0x1170
[ 120.468010] __percpu_counter_init_many+0x44/0x360
[ 120.468024] mm_init+0xcac/0x1170
[ 120.468033] copy_process+0x3ab7/0x73c0
[ 120.468044] kernel_clone+0xea/0x7f0
[ 120.468054] __do_sys_clone+0xce/0x120
[ 120.468065] do_syscall_64+0xbf/0x360
[ 120.468073] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 120.524915] kmemleak: Found object by alias at 0x607f1a638f10
[ 120.524929] CPU: 1 UID: 0 PID: 3956 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 120.524947] Tainted: [W]=WARN
[ 120.524951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 120.524958] Call Trace:
[ 120.524961]
[ 120.524966] dump_stack_lvl+0xca/0x120
[ 120.524986] __lookup_object+0x94/0xb0
[ 120.525001] delete_object_full+0x27/0x70
[ 120.525017] free_percpu+0x30/0x1160
[ 120.525031] ? arch_uprobe_clear_state+0x16/0x140
[ 120.525050] futex_hash_free+0x38/0xc0
[ 120.525064] mmput+0x2d3/0x390
[ 120.525082] do_exit+0x79d/0x2970
[ 120.525096] ? lock_release+0xc8/0x290
[ 120.525111] ? __pfx_do_exit+0x10/0x10
[ 120.525125] ? find_held_lock+0x2b/0x80
[ 120.525141] ? get_signal+0x835/0x2340
[ 120.525161] do_group_exit+0xd3/0x2a0
[ 120.525176] get_signal+0x2315/0x2340
[ 120.525193] ? __pfx_sk_setsockopt+0x10/0x10
[ 120.525213] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10
[ 120.525231] ? __pfx_get_signal+0x10/0x10
[ 120.525246] ? do_futex+0x135/0x370
[ 120.525260] ? __pfx_do_futex+0x10/0x10
[ 120.525274] arch_do_signal_or_restart+0x80/0x790
[ 120.525292] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 120.525308] ? __x64_sys_futex+0x1c9/0x4d0
[ 120.525320] ? __x64_sys_futex+0x1d2/0x4d0
[ 120.525335] ? __pfx___x64_sys_futex+0x10/0x10
[ 120.525348] ? __sys_setsockopt+0x13f/0x1a0
[ 120.525368] exit_to_user_mode_loop+0x8b/0x110
[ 120.525381] do_syscall_64+0x2f7/0x360
[ 120.525392] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 120.525403] RIP: 0033:0x7fe305305b19
[ 120.525412] Code: Unable to access opcode bytes at 0x7fe305305aef.
[ 120.525417] RSP: 002b:00007fe30287b218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 120.525428] RAX: fffffffffffffe00 RBX: 00007fe305418f68 RCX: 00007fe305305b19
[ 120.525436] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe305418f68
[ 120.525443] RBP: 00007fe305418f60 R08: 0000000000000000 R09: 0000000000000000
[ 120.525450] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe305418f6c
[ 120.525457] R13: 00007ffeb2b64d4f R14: 00007fe30287b300 R15: 0000000000022000
[ 120.525473]
[ 120.525476] kmemleak: Object (percpu) 0x607f1a638f04 (size 16):
[ 120.525483] kmemleak: comm "syz-executor.1", pid 276, jiffies 4294787253
[ 120.525490] kmemleak: min_count = 1
[ 120.525493] kmemleak: count = 0
[ 120.525498] kmemleak: flags = 0x21
[ 120.525501] kmemleak: checksum = 0
[ 120.525505] kmemleak: backtrace:
[ 120.525508] pcpu_alloc_noprof+0x87a/0x1170
[ 120.525527] __percpu_counter_init_many+0x44/0x360
[ 120.525540] mm_init+0xcac/0x1170
[ 120.525548] copy_process+0x3ab7/0x73c0
[ 120.525557] kernel_clone+0xea/0x7f0
[ 120.525567] __do_sys_clone+0xce/0x120
[ 120.525577] do_syscall_64+0xbf/0x360
[ 120.525585] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 120.546860] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI
[ 120.547765] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 120.548363] CPU: 0 UID: 0 PID: 3958 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 120.549796] Tainted: [W]=WARN
[ 120.550584] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 120.552202] RIP: 0010:perf_tp_event+0x175/0xe70
[ 120.553183] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 120.557283] RSP: 0018:ffff8880453ff3c0 EFLAGS: 00010012
[ 120.557679] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc9000088e000
[ 120.558199] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 120.558727] RBP: ffff8880453ff630 R08: ffff88806ce31340 R09: ffffe8ffffc15f08
[ 120.559247] R10: 0000000000000000 R11: 1ffff1100d9c6bb1 R12: dffffc0000000000
[ 120.559768] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000
[ 120.560288] FS: 00007fbf53ab3700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 120.560874] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 120.561301] CR2: 00007fbf53a92718 CR3: 000000001e1c1000 CR4: 0000000000350ef0
[ 120.561827] Call Trace:
[ 120.562023]
[ 120.562196] ? __lock_acquire+0xc65/0x1b70
[ 120.562527] ? __pfx_perf_tp_event+0x10/0x10
[ 120.562862] ? do_raw_spin_lock+0x123/0x260
[ 120.563187] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 120.563541] ? __lock_acquire+0xc65/0x1b70
[ 120.563861] ? perf_trace_run_bpf_submit+0xef/0x180
[ 120.564235] perf_trace_run_bpf_submit+0xef/0x180
[ 120.564599] perf_trace_preemptirq_template+0x259/0x430
[ 120.565001] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 120.565439] ? __text_poke+0x3f2/0x860
[ 120.565735] ? __text_poke+0x3f7/0x860
[ 120.566026] ? trace_irq_enable.constprop.0+0x3b/0x100
[ 120.566419] ? trace_irq_enable.constprop.0+0x2/0x100
[ 120.566801] ? __text_poke+0x3f7/0x860
[ 120.567092] trace_irq_enable.constprop.0+0xa6/0x100
[ 120.567467] trace_hardirqs_on+0x26/0x40
[ 120.567773] __text_poke+0x3f7/0x860
[ 120.568053] ? __pfx_text_poke_memcpy+0x10/0x10
[ 120.568401] ? __pfx___text_poke+0x10/0x10
[ 120.568717] ? lock_is_held_type+0x9e/0x120
[ 120.569045] ? trace_irq_enable.constprop.0+0x2/0x100
[ 120.569427] ? trace_irq_enable.constprop.0+0x2/0x100
[ 120.569808] smp_text_poke_batch_finish+0x326/0xb50
[ 120.570182] ? __pfx___mutex_lock+0x10/0x10
[ 120.570517] ? trace_irq_enable.constprop.0+0x2/0x100
[ 120.570897] ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[ 120.571306] ? arch_jump_label_transform_queue+0xbd/0x110
[ 120.571720] ? __jump_label_update+0x29a/0x410
[ 120.572068] arch_jump_label_transform_apply+0x1c/0x30
[ 120.572458] jump_label_update+0x376/0x550
[ 120.572780] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 120.573218] static_key_enable_cpuslocked+0x1b7/0x270
[ 120.573606] static_key_enable+0x1a/0x20
[ 120.573916] tracepoint_add_func+0xaf2/0xec0
[ 120.574248] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 120.574695] tracepoint_probe_register+0xa4/0xf0
[ 120.575046] ? __pfx_tracepoint_probe_register+0x10/0x10
[ 120.575444] ? pcpu_obj_full_size+0x3c/0x90
[ 120.575770] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 120.576207] ? pcpu_alloc_noprof+0x12d/0x1170
[ 120.576549] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 120.576934] trace_event_reg+0x297/0x350
[ 120.577242] perf_trace_event_init+0x511/0xa10
[ 120.577589] perf_trace_init+0x1a4/0x2f0
[ 120.577894] perf_tp_event_init+0xa6/0x120
[ 120.578216] perf_try_init_event+0x140/0x9f0
[ 120.578557] perf_event_alloc.part.0+0x118e/0x45f0
[ 120.578928] ? perf_event_alloc.part.0+0x1074/0x45f0
[ 120.579311] ? __fget_files+0x203/0x3b0
[ 120.579613] ? __pfx_perf_event_alloc.part.0+0x10/0x10
[ 120.580005] ? find_held_lock+0x2b/0x80
[ 120.580310] ? __do_sys_perf_event_open+0x11df/0x2c20
[ 120.580700] __do_sys_perf_event_open+0x719/0x2c20
[ 120.581072] ? __pfx___do_sys_perf_event_open+0x10/0x10
[ 120.581468] ? find_held_lock+0x2b/0x80
[ 120.581777] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 120.582165] do_syscall_64+0xbf/0x360
[ 120.582456] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 120.582839] RIP: 0033:0x7fbf5653db19
[ 120.583116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 120.584429] RSP: 002b:00007fbf53ab3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[ 120.584985] RAX: ffffffffffffffda RBX: 00007fbf56650f60 RCX: 00007fbf5653db19
[ 120.585503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000
[ 120.586023] RBP: 00007fbf56597f6d R08: 0000000000000000 R09: 0000000000000000
[ 120.586549] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 120.587077] R13: 00007ffdde8f0f1f R14: 00007fbf53ab3300 R15: 0000000000022000
[ 120.587600]
[ 120.587777] Modules linked in:
[ 120.588021] ---[ end trace 0000000000000000 ]---
[ 120.588366] RIP: 0010:perf_tp_event+0x175/0xe70
[ 120.588718] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 120.590032] RSP: 0018:ffff8880453ff3c0 EFLAGS: 00010012
[ 120.590429] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc9000088e000
[ 120.590949] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 120.591468] RBP: ffff8880453ff630 R08: ffff88806ce31340 R09: ffffe8ffffc15f08
[ 120.591989] R10: 0000000000000000 R11: 1ffff1100d9c6bb1 R12: dffffc0000000000
[ 120.592507] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000
[ 120.593027] FS: 00007fbf53ab3700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 120.593613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 120.594040] CR2: 00007fbf53a92718 CR3: 000000001e1c1000 CR4: 0000000000350ef0
[ 120.594569] note: syz-executor.1[3958] exited with irqs disabled
[ 120.595074] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI
[ 120.595893] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 120.596449] CPU: 0 UID: 0 PID: 3958 Comm: syz-executor.1 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 120.597325] Tainted: [D]=DIE, [W]=WARN
[ 120.597612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 120.598216] RIP: 0010:perf_tp_event+0x175/0xe70
[ 120.598580] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 120.599905] RSP: 0018:ffff88806ce08b80 EFLAGS: 00010012
[ 120.600299] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 120.600823] RDX: ffff888046199b80 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 120.601347] RBP: ffff88806ce08df0 R08: ffff88806ce313e8 R09: ffffe8ffffc15f08
[ 120.601873] R10: 0000000000000000 R11: ffff88801defb498 R12: dffffc0000000000
[ 120.602403] R13: 0000000000000014 R14: ffff88806ce313e8 R15: dffffc0000000000
[ 120.602927] FS: 00007fbf53ab3700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 120.603518] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 120.603946] CR2: 00007fbf53a92718 CR3: 000000001e1c1000 CR4: 0000000000350ef0
[ 120.604470] Call Trace:
[ 120.604666]
[ 120.604834] ? __pfx_perf_tp_event+0x10/0x10
[ 120.605172] ? enqueue_task_fair+0xded/0x1e00
[ 120.605514] ? check_preempt_wakeup_fair+0x6e/0x950
[ 120.605888] ? wakeup_preempt+0x140/0x2a0
[ 120.606199] ? lock_release+0x1c7/0x290
[ 120.606505] ? lock_release+0x1c7/0x290
[ 120.606805] ? do_raw_spin_unlock+0x53/0x220
[ 120.607141] ? _raw_spin_unlock_irqrestore+0x22/0x50
[ 120.607522] ? try_to_wake_up+0x8ae/0x11d0
[ 120.607844] ? do_raw_spin_lock+0x123/0x260
[ 120.608173] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 120.608526] ? perf_trace_run_bpf_submit+0xef/0x180
[ 120.608900] perf_trace_run_bpf_submit+0xef/0x180
[ 120.609266] perf_trace_preemptirq_template+0x259/0x430
[ 120.609668] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 120.610109] ? handle_softirqs+0x16e/0x770
[ 120.610439] ? trace_irq_enable.constprop.0+0x3b/0x100
[ 120.610829] ? handle_softirqs+0x16e/0x770
[ 120.611151] trace_irq_enable.constprop.0+0xa6/0x100
[ 120.611528] trace_hardirqs_on+0x26/0x40
[ 120.611829] handle_softirqs+0x16e/0x770
[ 120.612142] __irq_exit_rcu+0xc4/0x100
[ 120.612442] irq_exit_rcu+0x9/0x20
[ 120.612710] sysvec_apic_timer_interrupt+0x70/0x80
[ 120.613078]
[ 120.613250]
[ 120.613422] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 120.613811] RIP: 0010:make_task_dead+0xa2/0x3b0
[ 120.614162] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de
[ 120.615497] RSP: 0018:ffff8880453fff28 EFLAGS: 00000246
[ 120.615890] RAX: 0000000000000001 RBX: ffff888046199b80 RCX: ffffffff817c2b86
[ 120.616410] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234
[ 120.616931] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000
[ 120.617450] R10: ffffffff8643ac57 R11: 0000000000000001 R12: ffff888046199b80
[ 120.617973] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000
[ 120.618501] ? trace_irq_enable.constprop.0+0x26/0x100
[ 120.618892] ? make_task_dead+0x214/0x3b0
[ 120.619204] ? make_task_dead+0x214/0x3b0
[ 120.619514] ? do_syscall_64+0xbf/0x360
[ 120.619811] rewind_stack_and_make_dead+0x16/0x20
[ 120.620174] RIP: 0033:0x7fbf5653db19
[ 120.620450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 120.621769] RSP: 002b:00007fbf53ab3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[ 120.622331] RAX: ffffffffffffffda RBX: 00007fbf56650f60 RCX: 00007fbf5653db19
[ 120.622854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000
[ 120.623375] RBP: 00007fbf56597f6d R08: 0000000000000000 R09: 0000000000000000
[ 120.623894] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 120.624414] R13: 00007ffdde8f0f1f R14: 00007fbf53ab3300 R15: 0000000000022000
[ 120.624938]
[ 120.625114] Modules linked in:
[ 120.625357] ---[ end trace 0000000000000000 ]---
[ 120.625703] RIP: 0010:perf_tp_event+0x175/0xe70
[ 120.626053] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 120.627377] RSP: 0018:ffff8880453ff3c0 EFLAGS: 00010012
[ 120.627769] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc9000088e000
[ 120.628289] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 120.628809] RBP: ffff8880453ff630 R08: ffff88806ce31340 R09: ffffe8ffffc15f08
[ 120.629329] R10: 0000000000000000 R11: 1ffff1100d9c6bb1 R12: dffffc0000000000
[ 120.629851] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000
[ 120.630382] FS: 00007fbf53ab3700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 120.630968] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 120.631394] CR2: 00007fbf53a92718 CR3: 000000001e1c1000 CR4: 0000000000350ef0
[ 120.631918] Kernel panic - not syncing: Fatal exception in interrupt
[ 120.632577] Kernel Offset: disabled
[ 120.632847] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---
VM DIAGNOSIS:
12:56:03 Registers:
info registers vcpu 0
RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff8880453fecb0
R8 =0000000000000000 R9 =ffffed10014f2046 R10=0000000000000035 R11=0000000065646f43
R12=0000000000000035 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0
RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fbf53ab3700 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe3b00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbf53a92718 CR3=000000001e1c1000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000001 RCX=ffff88800da7dd1c RDX=ffff888015bb0000
RSI=ffffffff82276d24 RDI=ffff88800beca020 RBP=0000000000000001 RSP=ffff888017e77a10
R8 =0000000000000001 R9 =ffffed10011fbb36 R10=0000000000000001 R11=0000000000000000
R12=ffff88800beca000 R13=000000000000002b R14=0000000000000001 R15=0000000020000000
RIP=ffffffff8173e7cb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f721398f8c0 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe2300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f68a6606bd0 CR3=000000000cf41000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffffffffff00ffffffffffffffff
XMM02=7269762f736563697665642f7379732f XMM03=747269762f736563697665642f737973
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055cefc22e4e0000055cefc220a10
XMM06=0000000000000000ffffffff00000004 XMM07=00000000000000000000000000000000
XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000