Warning: Permanently added '[localhost]:21175' (ECDSA) to the list of known hosts. 2025/08/29 09:08:38 fuzzer started 2025/08/29 09:08:38 dialing manager at localhost:43077 syzkaller login: [ 50.095981] cgroup: Unknown subsys name 'net' [ 50.134239] cgroup: Unknown subsys name 'cpuset' [ 50.147420] cgroup: Unknown subsys name 'rlimit' 2025/08/29 09:08:49 syscalls: 2214 2025/08/29 09:08:49 code coverage: enabled 2025/08/29 09:08:49 comparison tracing: enabled 2025/08/29 09:08:49 extra coverage: enabled 2025/08/29 09:08:49 setuid sandbox: enabled 2025/08/29 09:08:49 namespace sandbox: enabled 2025/08/29 09:08:49 Android sandbox: enabled 2025/08/29 09:08:49 fault injection: enabled 2025/08/29 09:08:49 leak checking: enabled 2025/08/29 09:08:49 net packet injection: enabled 2025/08/29 09:08:49 net device setup: enabled 2025/08/29 09:08:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 09:08:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 09:08:49 USB emulation: enabled 2025/08/29 09:08:49 hci packet injection: enabled 2025/08/29 09:08:49 wifi device emulation: enabled 2025/08/29 09:08:49 802.15.4 emulation: enabled 2025/08/29 09:08:49 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 09:08:49 fetching corpus: 50, signal 23273/26572 (executing program) 2025/08/29 09:08:49 fetching corpus: 100, signal 40391/44568 (executing program) 2025/08/29 09:08:49 fetching corpus: 150, signal 48482/53577 (executing program) 2025/08/29 09:08:49 fetching corpus: 200, signal 56788/62525 (executing program) 2025/08/29 09:08:49 fetching corpus: 250, signal 59346/66070 (executing program) 2025/08/29 09:08:49 fetching corpus: 300, signal 66901/73957 (executing program) 2025/08/29 09:08:50 fetching corpus: 350, signal 69785/77461 (executing program) 2025/08/29 09:08:50 fetching corpus: 400, signal 72454/80746 (executing program) 2025/08/29 09:08:50 fetching corpus: 450, signal 75175/83967 (executing program) 2025/08/29 09:08:50 fetching corpus: 500, signal 78682/87818 (executing program) 2025/08/29 09:08:50 fetching corpus: 550, signal 81145/90743 (executing program) 2025/08/29 09:08:50 fetching corpus: 600, signal 83623/93564 (executing program) 2025/08/29 09:08:50 fetching corpus: 650, signal 85346/95714 (executing program) 2025/08/29 09:08:50 fetching corpus: 700, signal 87532/98126 (executing program) 2025/08/29 09:08:50 fetching corpus: 750, signal 89764/100546 (executing program) 2025/08/29 09:08:51 fetching corpus: 800, signal 91247/102328 (executing program) 2025/08/29 09:08:51 fetching corpus: 850, signal 92424/103852 (executing program) 2025/08/29 09:08:51 fetching corpus: 900, signal 94408/105924 (executing program) 2025/08/29 09:08:51 fetching corpus: 950, signal 96603/108033 (executing program) 2025/08/29 09:08:51 fetching corpus: 1000, signal 98010/109555 (executing program) 2025/08/29 09:08:51 fetching corpus: 1050, signal 99125/110855 (executing program) 2025/08/29 09:08:51 fetching corpus: 1100, signal 100996/112573 (executing program) 2025/08/29 09:08:51 fetching corpus: 1150, signal 102302/113882 (executing program) 2025/08/29 09:08:51 fetching corpus: 1200, signal 104021/115417 (executing program) 2025/08/29 09:08:52 fetching corpus: 1250, signal 105196/116576 (executing program) 2025/08/29 09:08:52 fetching corpus: 1300, signal 106740/117943 (executing program) 2025/08/29 09:08:52 fetching corpus: 1350, signal 107712/118977 (executing program) 2025/08/29 09:08:52 fetching corpus: 1400, signal 108783/119989 (executing program) 2025/08/29 09:08:52 fetching corpus: 1450, signal 109681/120900 (executing program) 2025/08/29 09:08:52 fetching corpus: 1500, signal 110767/121808 (executing program) 2025/08/29 09:08:52 fetching corpus: 1550, signal 111892/122736 (executing program) 2025/08/29 09:08:53 fetching corpus: 1600, signal 113269/123812 (executing program) 2025/08/29 09:08:53 fetching corpus: 1650, signal 114979/124909 (executing program) 2025/08/29 09:08:53 fetching corpus: 1700, signal 116413/125887 (executing program) 2025/08/29 09:08:53 fetching corpus: 1750, signal 117616/126740 (executing program) 2025/08/29 09:08:53 fetching corpus: 1800, signal 118665/127459 (executing program) 2025/08/29 09:08:53 fetching corpus: 1850, signal 119743/128184 (executing program) 2025/08/29 09:08:53 fetching corpus: 1900, signal 120476/128760 (executing program) 2025/08/29 09:08:53 fetching corpus: 1950, signal 121531/129418 (executing program) 2025/08/29 09:08:54 fetching corpus: 2000, signal 122648/130031 (executing program) 2025/08/29 09:08:54 fetching corpus: 2050, signal 123775/130629 (executing program) 2025/08/29 09:08:54 fetching corpus: 2100, signal 124512/131050 (executing program) 2025/08/29 09:08:54 fetching corpus: 2150, signal 125894/131688 (executing program) 2025/08/29 09:08:54 fetching corpus: 2200, signal 127145/132269 (executing program) 2025/08/29 09:08:54 fetching corpus: 2250, signal 128030/132799 (executing program) 2025/08/29 09:08:54 fetching corpus: 2300, signal 128737/133115 (executing program) 2025/08/29 09:08:54 fetching corpus: 2350, signal 129263/133359 (executing program) 2025/08/29 09:08:55 fetching corpus: 2400, signal 130040/133642 (executing program) 2025/08/29 09:08:55 fetching corpus: 2450, signal 130848/133963 (executing program) 2025/08/29 09:08:55 fetching corpus: 2500, signal 131427/134201 (executing program) 2025/08/29 09:08:55 fetching corpus: 2550, signal 132443/134491 (executing program) 2025/08/29 09:08:55 fetching corpus: 2561, signal 132625/134583 (executing program) 2025/08/29 09:08:55 fetching corpus: 2561, signal 132625/134617 (executing program) 2025/08/29 09:08:55 fetching corpus: 2561, signal 132625/134640 (executing program) 2025/08/29 09:08:55 fetching corpus: 2561, signal 132625/134662 (executing program) 2025/08/29 09:08:55 fetching corpus: 2561, signal 132625/134696 (executing program) 2025/08/29 09:08:55 fetching corpus: 2561, signal 132625/134733 (executing program) 2025/08/29 09:08:55 fetching corpus: 2561, signal 132625/134762 (executing program) 2025/08/29 09:08:55 fetching corpus: 2561, signal 132625/134800 (executing program) 2025/08/29 09:08:55 fetching corpus: 2561, signal 132625/134835 (executing program) 2025/08/29 09:08:55 fetching corpus: 2561, signal 132625/134870 (executing program) 2025/08/29 09:08:55 fetching corpus: 2561, signal 132625/134908 (executing program) 2025/08/29 09:08:55 fetching corpus: 2561, signal 132625/134945 (executing program) 2025/08/29 09:08:55 fetching corpus: 2561, signal 132625/134988 (executing program) 2025/08/29 09:08:55 fetching corpus: 2561, signal 132625/134992 (executing program) 2025/08/29 09:08:55 fetching corpus: 2561, signal 132625/134992 (executing program) 2025/08/29 09:08:57 starting 8 fuzzer processes 09:08:57 executing program 0: pipe(&(0x7f0000000880)={0xffffffffffffffff}) setresuid(0x0, 0xee01, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) 09:08:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x44a, &(0x7f0000000280)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0xd098, 0x1, 0x0, 0x0) 09:08:57 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000640)={@multicast2, @dev}, 0x8) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000000)={@multicast2, @remote, @multicast2}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @remote, @multicast2}, 0xc) 09:08:57 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x44840, 0x0) ioctl$DVD_AUTH(r0, 0x5308, 0x0) 09:08:57 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)=ANY=[@ANYBLOB="01"]) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2284, &(0x7f0000000000)) 09:08:57 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x18, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [{0x0, 0x0, "1833"}]}}}}}}, 0x0) 09:08:57 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x161c03, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 09:08:57 executing program 3: r0 = io_uring_setup(0x3e96, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000c80), 0x80004, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 68.673696] audit: type=1400 audit(1756458537.597:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 70.005622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.009893] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.042292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.044103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.047850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 70.052997] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.055723] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 70.057522] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.062502] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 70.065299] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.068278] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 70.068913] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 70.070516] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.071398] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.071979] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.074136] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.074349] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 70.076829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.076894] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.079567] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 70.082106] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.085096] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 70.086834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.088810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.090340] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 70.090816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.093904] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 70.097605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 70.097636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.099421] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.101314] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.101968] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.102773] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 70.104605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.107506] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 70.114188] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.116988] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.120102] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 70.140365] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.160956] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 72.158939] Bluetooth: hci1: command tx timeout [ 72.159532] Bluetooth: hci5: command tx timeout [ 72.159727] Bluetooth: hci6: command tx timeout [ 72.160498] Bluetooth: hci2: command tx timeout [ 72.160566] Bluetooth: hci0: command tx timeout [ 72.222203] Bluetooth: hci4: command tx timeout [ 72.222732] Bluetooth: hci7: command tx timeout [ 72.224095] Bluetooth: hci3: command tx timeout [ 74.206412] Bluetooth: hci5: command tx timeout [ 74.207135] Bluetooth: hci0: command tx timeout [ 74.207625] Bluetooth: hci2: command tx timeout [ 74.207812] Bluetooth: hci1: command tx timeout [ 74.208743] Bluetooth: hci6: command tx timeout [ 74.270139] Bluetooth: hci3: command tx timeout [ 74.270637] Bluetooth: hci7: command tx timeout [ 74.271023] Bluetooth: hci4: command tx timeout [ 76.254242] Bluetooth: hci6: command tx timeout [ 76.254693] Bluetooth: hci2: command tx timeout [ 76.256008] Bluetooth: hci1: command tx timeout [ 76.256512] Bluetooth: hci5: command tx timeout [ 76.256548] Bluetooth: hci0: command tx timeout [ 76.318107] Bluetooth: hci4: command tx timeout [ 76.318535] Bluetooth: hci7: command tx timeout [ 76.318917] Bluetooth: hci3: command tx timeout [ 78.302280] Bluetooth: hci6: command tx timeout [ 78.302733] Bluetooth: hci1: command tx timeout [ 78.304133] Bluetooth: hci0: command tx timeout [ 78.304524] Bluetooth: hci5: command tx timeout [ 78.304903] Bluetooth: hci2: command tx timeout [ 78.367098] Bluetooth: hci4: command tx timeout [ 78.367460] Bluetooth: hci7: command tx timeout [ 78.367922] Bluetooth: hci3: command tx timeout [ 107.318934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.319858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.480092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.480758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.652094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.652716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.811797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.812693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:09:36 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x44840, 0x0) ioctl$DVD_AUTH(r0, 0x5308, 0x0) 09:09:37 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x44840, 0x0) ioctl$DVD_AUTH(r0, 0x5308, 0x0) 09:09:37 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x44840, 0x0) ioctl$DVD_AUTH(r0, 0x5308, 0x0) 09:09:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @local, 0x3}, 0x1c) 09:09:37 executing program 3: r0 = io_uring_setup(0x3e96, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000c80), 0x80004, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 09:09:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @local, 0x3}, 0x1c) 09:09:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @local, 0x3}, 0x1c) 09:09:37 executing program 3: r0 = io_uring_setup(0x3e96, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000c80), 0x80004, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 108.966092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.966723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.151865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.152706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.271473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.272111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.393872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.395222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.670849] audit: type=1400 audit(1756458578.600:8): avc: denied { open } for pid=3879 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 109.677279] audit: type=1400 audit(1756458578.600:9): avc: denied { kernel } for pid=3879 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 109.773977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.774705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.865218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.865946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.938720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.939438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.029715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.030875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.212088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.212779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.274406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.275719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.500486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.501209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.555542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.556193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:09:40 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000640)={@multicast2, @dev}, 0x8) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000000)={@multicast2, @remote, @multicast2}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @remote, @multicast2}, 0xc) 09:09:40 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x18, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [{0x0, 0x0, "1833"}]}}}}}}, 0x0) 09:09:40 executing program 0: pipe(&(0x7f0000000880)={0xffffffffffffffff}) setresuid(0x0, 0xee01, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) 09:09:40 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)=ANY=[@ANYBLOB="01"]) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2284, &(0x7f0000000000)) 09:09:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x44a, &(0x7f0000000280)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0xd098, 0x1, 0x0, 0x0) 09:09:40 executing program 3: r0 = io_uring_setup(0x3e96, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000c80), 0x80004, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 09:09:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @local, 0x3}, 0x1c) 09:09:40 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x161c03, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 09:09:40 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x44a, &(0x7f0000000280)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0xd098, 0x1, 0x0, 0x0) 09:09:40 executing program 0: pipe(&(0x7f0000000880)={0xffffffffffffffff}) setresuid(0x0, 0xee01, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) 09:09:40 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x18, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [{0x0, 0x0, "1833"}]}}}}}}, 0x0) 09:09:40 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x161c03, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) [ 196.063895] Bluetooth: hci6: command 0x0406 tx timeout [ 196.064818] Bluetooth: hci1: command 0x0406 tx timeout [ 196.066007] Bluetooth: hci4: command 0x0406 tx timeout [ 196.066097] Bluetooth: hci2: command 0x0406 tx timeout [ 196.066954] Bluetooth: hci5: command 0x0406 tx timeout [ 196.067357] Bluetooth: hci0: command 0x0406 tx timeout [ 196.067374] Bluetooth: hci7: command 0x0406 tx timeout [ 196.068220] Bluetooth: hci3: command 0x0406 tx timeout [ 274.910116] INFO: task kworker/u9:5:332 blocked for more than 143 seconds. [ 274.910810] Tainted: G W 6.17.0-rc3-next-20250829 #1 [ 274.911399] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 274.912556] task:kworker/u9:5 state:D stack:24400 pid:332 tgid:332 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 274.915152] Workqueue: iou_exit io_ring_exit_work [ 274.916692] Call Trace: [ 274.917291] [ 274.917740] __schedule+0xe7e/0x3590 [ 274.918518] ? __pfx___schedule+0x10/0x10 [ 274.919429] ? lock_acquire+0x15e/0x2f0 [ 274.920382] ? find_held_lock+0x2b/0x80 [ 274.920724] ? schedule+0x2c7/0x390 [ 274.921054] ? lock_release+0xc8/0x290 [ 274.921382] ? __mutex_lock+0x4d5/0x1020 [ 274.921726] schedule+0xdb/0x390 [ 274.922039] schedule_preempt_disabled+0x10/0x20 [ 274.922433] __mutex_lock+0x813/0x1020 [ 274.922761] ? io_sq_thread_park+0x44/0x160 [ 274.923159] ? __pfx___mutex_lock+0x10/0x10 [ 274.923520] ? ret_from_fork_asm+0x1a/0x30 [ 274.923874] ? __pfx_io_uring_try_cancel_requests+0x10/0x10 [ 274.924363] io_sq_thread_park+0x44/0x160 [ 274.924710] io_ring_exit_work+0x254/0xf60 [ 274.925084] ? __lock_acquire+0xc65/0x1b70 [ 274.925438] ? __pfx_io_ring_exit_work+0x10/0x10 [ 274.925829] ? lock_acquire+0x15e/0x2f0 [ 274.926181] ? process_one_work+0x857/0x19c0 [ 274.926553] ? lock_release+0xc8/0x290 [ 274.926878] process_one_work+0x8e1/0x19c0 [ 274.927271] ? __pfx_process_one_work+0x10/0x10 [ 274.927659] ? move_linked_works+0x172/0x270 [ 274.928050] ? assign_work+0x196/0x240 [ 274.928374] worker_thread+0x67e/0xe90 [ 274.928699] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 274.929157] ? __pfx_worker_thread+0x10/0x10 [ 274.929528] kthread+0x3c8/0x740 [ 274.929817] ? __pfx_kthread+0x10/0x10 [ 274.930163] ? ret_from_fork+0x23/0x430 [ 274.930503] ? lock_release+0xc8/0x290 [ 274.930830] ? __pfx_kthread+0x10/0x10 [ 274.931190] ret_from_fork+0x34b/0x430 [ 274.931519] ? __pfx_kthread+0x10/0x10 [ 274.931846] ret_from_fork_asm+0x1a/0x30 [ 274.932220] [ 274.932427] INFO: task kworker/u9:5:332 is blocked on a mutex likely owned by task iou-sqp-3947:3948. [ 274.933184] task:iou-sqp-3947 state:R running task stack:29264 pid:3948 tgid:3946 ppid:286 task_flags:0x404450 flags:0x00004000 [ 274.934245] Call Trace: [ 274.934461] [ 274.934652] __schedule+0xe7e/0x3590 [ 274.934978] ? __pfx___schedule+0x10/0x10 [ 274.935350] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 274.935776] schedule+0xdb/0x390 [ 274.936086] io_uring_cancel_generic+0x5c1/0x960 [ 274.936481] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 274.936913] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 274.937323] ? __pfx_autoremove_wake_function+0x10/0x10 [ 274.937767] ? mark_held_locks+0x49/0x80 [ 274.938126] io_sq_thread+0xd50/0x1b00 [ 274.938461] ? __pfx_io_sq_thread+0x10/0x10 [ 274.938822] ? perf_trace_lock+0xb5/0x5d0 [ 274.939190] ? __lock_acquire+0xc65/0x1b70 [ 274.939531] ? __pfx_autoremove_wake_function+0x10/0x10 [ 274.939956] ? __lock_acquire+0xc65/0x1b70 [ 274.940324] ? do_raw_spin_lock+0x123/0x260 [ 274.940673] ? find_held_lock+0x2b/0x80 [ 274.941001] ? __pfx_io_sq_thread+0x10/0x10 [ 274.941368] ? lock_release+0xc8/0x290 [ 274.941686] ? __pfx_io_sq_thread+0x10/0x10 [ 274.942062] ret_from_fork+0x34b/0x430 [ 274.942387] ? __pfx_io_sq_thread+0x10/0x10 [ 274.942738] ret_from_fork_asm+0x1a/0x30 [ 274.943109] [ 274.943306] [ 274.943306] Showing all locks held in the system: [ 274.943805] 1 lock held by khungtaskd/32: [ 274.944153] #0: ffffffff85c1c760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 274.944884] 1 lock held by systemd-journal/97: [ 274.945269] 1 lock held by in:imklog/175: [ 274.945595] #0: ffff888015eacb78 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a8/0x380 [ 274.946292] 3 locks held by kworker/u9:5/332: [ 274.946649] #0: ffff88800b800148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1240/0x19c0 [ 274.947470] #1: ffff888015db7d30 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x857/0x19c0 [ 274.948353] #2: ffff888013e2fc70 (&sqd->lock){+.+.}-{4:4}, at: io_sq_thread_park+0x44/0x160 [ 274.949068] 1 lock held by iou-sqp-3947/3948: [ 274.949425] [ 274.949567] ============================================= [ 274.949567] VM DIAGNOSIS: 09:12:24 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff828e3230 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888009a876c8 R8 =0000000000000000 R9 =ffffed10014f1046 R10=00000000000fe503 R11=0000000000000001 R12=0000000000000823 R13=0000000000000060 R14=fffffbfff10e4882 R15=dffffc0000000000 RIP=ffffffff828e3285 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc8f37d2fd8 CR3=000000001d836000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=91727b8603662bd4d963eda67acf61f6 XMM02=327450c50144df2b04ebc36fd68fe2b1 XMM03=12376e02c4010c36c82a052e3844b3b2 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003 XMM08=bcabfccd88bfea677dbff5f4fe2930a2 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88800706fca8 RCX=0000000000000001 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffffff85c1c760 RSP=ffff88800706fa08 R8 =0000000000000001 R9 =ffff88800706fb00 R10=000000000003be53 R11=0000000000025bdb R12=ffffffff81358702 R13=0000000000000206 R14=ffff888007070000 R15=ffff88800706fac0 RIP=ffffffff8151d948 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3426f74900 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f34263e9af0 CR3=000000000ea1e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=30306234386136303638616663356134 XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=231f414d59e9b5e5000000000014d398 XMM05=d3fdd5f48436fbd700000000000aead0 XMM06=6100ee9bc81c7c3700000000000ae988 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00000000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000