Warning: Permanently added '[localhost]:52991' (ECDSA) to the list of known hosts. 2025/09/01 09:50:22 fuzzer started 2025/09/01 09:50:22 dialing manager at localhost:35473 syzkaller login: [ 51.390932] cgroup: Unknown subsys name 'net' [ 51.437851] cgroup: Unknown subsys name 'cpuset' [ 51.447034] cgroup: Unknown subsys name 'rlimit' 2025/09/01 09:50:32 syscalls: 2214 2025/09/01 09:50:32 code coverage: enabled 2025/09/01 09:50:32 comparison tracing: enabled 2025/09/01 09:50:32 extra coverage: enabled 2025/09/01 09:50:32 setuid sandbox: enabled 2025/09/01 09:50:32 namespace sandbox: enabled 2025/09/01 09:50:32 Android sandbox: enabled 2025/09/01 09:50:32 fault injection: enabled 2025/09/01 09:50:32 leak checking: enabled 2025/09/01 09:50:32 net packet injection: enabled 2025/09/01 09:50:32 net device setup: enabled 2025/09/01 09:50:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 09:50:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 09:50:32 USB emulation: enabled 2025/09/01 09:50:32 hci packet injection: enabled 2025/09/01 09:50:32 wifi device emulation: enabled 2025/09/01 09:50:32 802.15.4 emulation: enabled 2025/09/01 09:50:32 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 09:50:32 fetching corpus: 49, signal 18630/22168 (executing program) 2025/09/01 09:50:32 fetching corpus: 99, signal 37153/41738 (executing program) 2025/09/01 09:50:32 fetching corpus: 149, signal 46861/52485 (executing program) 2025/09/01 09:50:32 fetching corpus: 199, signal 54318/60924 (executing program) 2025/09/01 09:50:32 fetching corpus: 249, signal 59381/66893 (executing program) 2025/09/01 09:50:32 fetching corpus: 299, signal 63105/71599 (executing program) 2025/09/01 09:50:32 fetching corpus: 349, signal 67739/76950 (executing program) 2025/09/01 09:50:32 fetching corpus: 399, signal 71548/81505 (executing program) 2025/09/01 09:50:33 fetching corpus: 449, signal 73265/84103 (executing program) 2025/09/01 09:50:33 fetching corpus: 499, signal 76241/87725 (executing program) 2025/09/01 09:50:33 fetching corpus: 549, signal 78900/91012 (executing program) 2025/09/01 09:50:33 fetching corpus: 599, signal 82495/95038 (executing program) 2025/09/01 09:50:33 fetching corpus: 649, signal 84968/98067 (executing program) 2025/09/01 09:50:33 fetching corpus: 699, signal 86905/100575 (executing program) 2025/09/01 09:50:33 fetching corpus: 749, signal 88817/103039 (executing program) 2025/09/01 09:50:33 fetching corpus: 799, signal 90643/105380 (executing program) 2025/09/01 09:50:33 fetching corpus: 849, signal 92726/107877 (executing program) 2025/09/01 09:50:33 fetching corpus: 899, signal 94366/110085 (executing program) 2025/09/01 09:50:34 fetching corpus: 949, signal 95601/111839 (executing program) 2025/09/01 09:50:34 fetching corpus: 999, signal 96709/113468 (executing program) 2025/09/01 09:50:34 fetching corpus: 1049, signal 97735/115032 (executing program) 2025/09/01 09:50:34 fetching corpus: 1099, signal 99488/117053 (executing program) 2025/09/01 09:50:34 fetching corpus: 1149, signal 102714/120053 (executing program) 2025/09/01 09:50:34 fetching corpus: 1199, signal 103817/121542 (executing program) 2025/09/01 09:50:34 fetching corpus: 1249, signal 104835/122985 (executing program) 2025/09/01 09:50:34 fetching corpus: 1299, signal 106397/124700 (executing program) 2025/09/01 09:50:34 fetching corpus: 1349, signal 107736/126271 (executing program) 2025/09/01 09:50:34 fetching corpus: 1399, signal 109116/127869 (executing program) 2025/09/01 09:50:34 fetching corpus: 1449, signal 110234/129209 (executing program) 2025/09/01 09:50:35 fetching corpus: 1499, signal 111328/130544 (executing program) 2025/09/01 09:50:35 fetching corpus: 1549, signal 112470/131855 (executing program) 2025/09/01 09:50:35 fetching corpus: 1599, signal 113572/133132 (executing program) 2025/09/01 09:50:35 fetching corpus: 1649, signal 115109/134611 (executing program) 2025/09/01 09:50:35 fetching corpus: 1699, signal 116166/135783 (executing program) 2025/09/01 09:50:35 fetching corpus: 1749, signal 116969/136805 (executing program) 2025/09/01 09:50:35 fetching corpus: 1799, signal 118017/137884 (executing program) 2025/09/01 09:50:35 fetching corpus: 1849, signal 119591/139226 (executing program) 2025/09/01 09:50:35 fetching corpus: 1899, signal 120798/140425 (executing program) 2025/09/01 09:50:35 fetching corpus: 1949, signal 123425/142252 (executing program) 2025/09/01 09:50:36 fetching corpus: 1999, signal 124210/143102 (executing program) 2025/09/01 09:50:36 fetching corpus: 2049, signal 124965/143999 (executing program) 2025/09/01 09:50:36 fetching corpus: 2099, signal 126111/145015 (executing program) 2025/09/01 09:50:36 fetching corpus: 2149, signal 126991/145863 (executing program) 2025/09/01 09:50:36 fetching corpus: 2199, signal 127739/146639 (executing program) 2025/09/01 09:50:36 fetching corpus: 2249, signal 128804/147476 (executing program) 2025/09/01 09:50:36 fetching corpus: 2299, signal 129671/148245 (executing program) 2025/09/01 09:50:36 fetching corpus: 2349, signal 130543/149017 (executing program) 2025/09/01 09:50:36 fetching corpus: 2399, signal 131594/149807 (executing program) 2025/09/01 09:50:37 fetching corpus: 2449, signal 132426/150496 (executing program) 2025/09/01 09:50:37 fetching corpus: 2499, signal 133628/151354 (executing program) 2025/09/01 09:50:37 fetching corpus: 2549, signal 134116/151841 (executing program) 2025/09/01 09:50:37 fetching corpus: 2599, signal 134725/152387 (executing program) 2025/09/01 09:50:37 fetching corpus: 2649, signal 135629/153071 (executing program) 2025/09/01 09:50:37 fetching corpus: 2699, signal 136267/153628 (executing program) 2025/09/01 09:50:37 fetching corpus: 2749, signal 137325/154262 (executing program) 2025/09/01 09:50:37 fetching corpus: 2799, signal 138127/154859 (executing program) 2025/09/01 09:50:37 fetching corpus: 2849, signal 139087/155395 (executing program) 2025/09/01 09:50:38 fetching corpus: 2899, signal 139656/155828 (executing program) 2025/09/01 09:50:38 fetching corpus: 2949, signal 140418/156302 (executing program) 2025/09/01 09:50:38 fetching corpus: 2999, signal 140966/156724 (executing program) 2025/09/01 09:50:38 fetching corpus: 3049, signal 141855/157202 (executing program) 2025/09/01 09:50:38 fetching corpus: 3099, signal 142389/157639 (executing program) 2025/09/01 09:50:38 fetching corpus: 3149, signal 142847/157998 (executing program) 2025/09/01 09:50:38 fetching corpus: 3199, signal 143381/158327 (executing program) 2025/09/01 09:50:38 fetching corpus: 3249, signal 144106/158792 (executing program) 2025/09/01 09:50:38 fetching corpus: 3299, signal 144698/159110 (executing program) 2025/09/01 09:50:38 fetching corpus: 3349, signal 145286/159400 (executing program) 2025/09/01 09:50:38 fetching corpus: 3399, signal 145821/159707 (executing program) 2025/09/01 09:50:39 fetching corpus: 3449, signal 146350/159963 (executing program) 2025/09/01 09:50:39 fetching corpus: 3499, signal 146985/160235 (executing program) 2025/09/01 09:50:39 fetching corpus: 3549, signal 147520/160483 (executing program) 2025/09/01 09:50:39 fetching corpus: 3599, signal 148097/160728 (executing program) 2025/09/01 09:50:39 fetching corpus: 3649, signal 148704/161027 (executing program) 2025/09/01 09:50:39 fetching corpus: 3699, signal 149111/161256 (executing program) 2025/09/01 09:50:39 fetching corpus: 3749, signal 150189/161479 (executing program) 2025/09/01 09:50:39 fetching corpus: 3799, signal 150648/161657 (executing program) 2025/09/01 09:50:39 fetching corpus: 3849, signal 151223/161818 (executing program) 2025/09/01 09:50:39 fetching corpus: 3899, signal 152166/161974 (executing program) 2025/09/01 09:50:39 fetching corpus: 3949, signal 152727/162071 (executing program) 2025/09/01 09:50:40 fetching corpus: 3999, signal 153135/162073 (executing program) 2025/09/01 09:50:40 fetching corpus: 4049, signal 153554/162079 (executing program) 2025/09/01 09:50:40 fetching corpus: 4099, signal 154142/162099 (executing program) 2025/09/01 09:50:40 fetching corpus: 4149, signal 154692/162100 (executing program) 2025/09/01 09:50:40 fetching corpus: 4199, signal 155157/162101 (executing program) 2025/09/01 09:50:40 fetching corpus: 4249, signal 155966/162286 (executing program) 2025/09/01 09:50:40 fetching corpus: 4299, signal 156586/162318 (executing program) 2025/09/01 09:50:40 fetching corpus: 4349, signal 157090/162331 (executing program) 2025/09/01 09:50:40 fetching corpus: 4399, signal 157532/162352 (executing program) 2025/09/01 09:50:40 fetching corpus: 4449, signal 157849/162352 (executing program) 2025/09/01 09:50:40 fetching corpus: 4499, signal 158237/162352 (executing program) 2025/09/01 09:50:41 fetching corpus: 4549, signal 158612/162364 (executing program) 2025/09/01 09:50:41 fetching corpus: 4599, signal 159157/162409 (executing program) 2025/09/01 09:50:41 fetching corpus: 4649, signal 159539/162446 (executing program) 2025/09/01 09:50:41 fetching corpus: 4650, signal 159545/162446 (executing program) 2025/09/01 09:50:41 fetching corpus: 4650, signal 159545/162446 (executing program) 2025/09/01 09:50:42 starting 8 fuzzer processes 09:50:42 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x6801, 0xffffffffffffffff) 09:50:42 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x0, 0xc005}, 0x4) syz_emit_ethernet(0x11, &(0x7f0000000040)={@empty, @local, @void, {@llc_tr={0x11, {@llc={0x0, 0x0, 'v'}}}}}, 0x0) 09:50:42 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) syz_io_uring_setup(0x1cfa, &(0x7f00000011c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000002c40), 0xffffffffffffffff) renameat2(0xffffffffffffffff, &(0x7f0000002d40)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 09:50:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {0x3}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 09:50:42 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "aa59a295b8abf010"}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) statfs(0x0, 0x0) 09:50:43 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000001800)=[{0x10}], 0x10}, 0x0) 09:50:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x18, 0x1, 0x0, 0x0, "", [@generic="80"]}, 0x14}], 0x1}, 0x0) 09:50:43 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x80086603, &(0x7f0000002a00)) [ 72.023464] audit: type=1400 audit(1756720243.040:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 73.194356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.199516] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.201131] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.204992] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.209843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.262543] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.265063] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.270340] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.286780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.288756] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.325833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.327855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.329621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.339740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.351137] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.354334] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 73.356328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.357944] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.359514] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 73.361450] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.363085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.364591] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.365976] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 73.367749] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 73.368572] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.369180] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.370553] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.372727] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 73.373939] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.375901] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.379991] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 73.382856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.386796] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 73.397879] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.400020] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.401485] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 73.404044] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 73.411749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.413121] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 73.417338] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.229265] Bluetooth: hci0: command tx timeout [ 75.356280] Bluetooth: hci1: command tx timeout [ 75.420483] Bluetooth: hci2: command tx timeout [ 75.484318] Bluetooth: hci3: command tx timeout [ 75.484952] Bluetooth: hci7: command tx timeout [ 75.485450] Bluetooth: hci4: command tx timeout [ 75.485903] Bluetooth: hci6: command tx timeout [ 75.486728] Bluetooth: hci5: command tx timeout [ 77.276728] Bluetooth: hci0: command tx timeout [ 77.404276] Bluetooth: hci1: command tx timeout [ 77.469379] Bluetooth: hci2: command tx timeout [ 77.532441] Bluetooth: hci5: command tx timeout [ 77.532955] Bluetooth: hci6: command tx timeout [ 77.534131] Bluetooth: hci4: command tx timeout [ 77.534621] Bluetooth: hci7: command tx timeout [ 77.535006] Bluetooth: hci3: command tx timeout [ 79.326091] Bluetooth: hci0: command tx timeout [ 79.453258] Bluetooth: hci1: command tx timeout [ 79.517257] Bluetooth: hci2: command tx timeout [ 79.580285] Bluetooth: hci5: command tx timeout [ 79.580715] Bluetooth: hci4: command tx timeout [ 79.581088] Bluetooth: hci3: command tx timeout [ 79.581484] Bluetooth: hci7: command tx timeout [ 79.581847] Bluetooth: hci6: command tx timeout [ 81.373735] Bluetooth: hci0: command tx timeout [ 81.501358] Bluetooth: hci1: command tx timeout [ 81.564303] Bluetooth: hci2: command tx timeout [ 81.628555] Bluetooth: hci6: command tx timeout [ 81.628969] Bluetooth: hci7: command tx timeout [ 81.629383] Bluetooth: hci3: command tx timeout [ 81.629742] Bluetooth: hci4: command tx timeout [ 81.630096] Bluetooth: hci5: command tx timeout [ 108.616489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.617147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.774074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.774734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:51:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000001800)=[{0x10}], 0x10}, 0x0) 09:51:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000001800)=[{0x10}], 0x10}, 0x0) 09:51:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000001800)=[{0x10}], 0x10}, 0x0) 09:51:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000001800)=[{0x10}], 0x10}, 0x0) 09:51:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000001800)=[{0x10}], 0x10}, 0x0) [ 110.078029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.079428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:51:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000001800)=[{0x10}], 0x10}, 0x0) [ 110.234051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.234707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.329155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.329800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.532677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.533605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:51:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x18, 0x1, 0x0, 0x0, "", [@generic="80"]}, 0x14}], 0x1}, 0x0) [ 110.622942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.623999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:51:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x18, 0x1, 0x0, 0x0, "", [@generic="80"]}, 0x14}], 0x1}, 0x0) [ 110.780498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.781137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.014606] audit: type=1400 audit(1756720282.030:8): avc: denied { open } for pid=3853 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 111.032025] audit: type=1400 audit(1756720282.030:9): avc: denied { kernel } for pid=3853 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 111.173909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.174732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.233111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.234992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.474278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.474903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.537477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.538090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.783525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.784139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.828862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.829986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.344961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.346357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.398360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.399782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:51:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "aa59a295b8abf010"}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) statfs(0x0, 0x0) 09:51:23 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x6801, 0xffffffffffffffff) 09:51:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {0x3}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 09:51:23 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r1, 0x0) getpid() readv(0xffffffffffffffff, 0x0, 0x0) 09:51:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x18, 0x1, 0x0, 0x0, "", [@generic="80"]}, 0x14}], 0x1}, 0x0) 09:51:23 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "aa59a295b8abf010"}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) statfs(0x0, 0x0) 09:51:23 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x80086603, &(0x7f0000002a00)) 09:51:23 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x0, 0xc005}, 0x4) syz_emit_ethernet(0x11, &(0x7f0000000040)={@empty, @local, @void, {@llc_tr={0x11, {@llc={0x0, 0x0, 'v'}}}}}, 0x0) 09:51:23 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x80086603, &(0x7f0000002a00)) 09:51:23 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000872000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000874000/0x1000)=nil, 0x1000, 0x3) [ 112.705168] BUG: unable to handle page fault for address: ffffed10212c967e [ 112.705766] #PF: supervisor read access in kernel mode [ 112.706171] #PF: error_code(0x0000) - not-present page [ 112.706576] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 [ 112.707400] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 112.708462] CPU: 0 UID: 0 PID: 3941 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 112.710809] Tainted: [W]=WARN [ 112.711938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.713588] RIP: 0010:perf_tp_event+0x175/0xe70 [ 112.714537] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 112.716634] RSP: 0018:ffff8880469cf800 EFLAGS: 00010216 [ 112.717049] RAX: 1ffff110212c967e RBX: ffff88810964b200 RCX: ffffc9000a236000 [ 112.717608] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: ffff88810964b3f0 [ 112.718160] RBP: ffff8880469cfa70 R08: ffff88806ce31340 R09: ffffe8ffffc06860 [ 112.718715] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 112.719266] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 112.719819] FS: 00007fcc3a209700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 112.720450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.720903] CR2: ffffed10212c967e CR3: 000000000d5ac000 CR4: 0000000000350ef0 [ 112.721461] Call Trace: [ 112.721672] [ 112.721860] ? perf_swevent_event+0x63/0x3f0 [ 112.722224] ? __pfx_perf_tp_event+0x10/0x10 [ 112.722589] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 112.722990] ? perf_swevent_event+0x63/0x3f0 [ 112.723351] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 112.723746] ? perf_swevent_event+0x63/0x3f0 [ 112.724105] ? perf_tp_event+0x807/0xe70 [ 112.724444] ? __pfx_perf_tp_event+0x10/0x10 [ 112.724803] ? __perf_install_in_context+0x503/0xb90 [ 112.725211] ? do_raw_spin_unlock+0x53/0x220 [ 112.725573] ? perf_trace_run_bpf_submit+0xef/0x180 [ 112.725972] perf_trace_run_bpf_submit+0xef/0x180 [ 112.726368] perf_trace_lock+0x337/0x5d0 [ 112.726701] ? __pfx_perf_trace_lock+0x10/0x10 [ 112.727070] ? lock_acquire+0x15e/0x2f0 [ 112.727394] ? futex_ref_get+0x48/0x300 [ 112.727716] ? futex_ref_get+0x114/0x300 [ 112.728037] ? futex_hash+0x15c/0x390 [ 112.728357] lock_release+0x1ab/0x290 [ 112.728667] ? futex_hash+0x15c/0x390 [ 112.728971] futex_ref_get+0x119/0x300 [ 112.729286] ? futex_hash+0x15c/0x390 [ 112.729593] futex_hash+0x70/0x390 [ 112.729880] futex_wake+0x143/0x540 [ 112.730177] ? __pfx_perf_trace_lock+0x10/0x10 [ 112.730549] ? __pfx_futex_wake+0x10/0x10 [ 112.730885] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 112.731293] ? lock_release+0xc8/0x290 [ 112.731608] do_futex+0x26d/0x370 [ 112.731893] ? __pfx_do_futex+0x10/0x10 [ 112.732217] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 112.732650] ? find_held_lock+0x2b/0x80 [ 112.732977] __x64_sys_futex+0x1c9/0x4d0 [ 112.733311] ? __pfx___x64_sys_futex+0x10/0x10 [ 112.733679] ? xfd_validate_state+0x55/0x180 [ 112.734045] do_syscall_64+0xbf/0x360 [ 112.734357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.734768] RIP: 0033:0x7fcc3cc93b19 [ 112.735064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 112.736494] RSP: 002b:00007fcc3a209218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.737093] RAX: ffffffffffffffda RBX: 00007fcc3cda6f68 RCX: 00007fcc3cc93b19 [ 112.737656] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcc3cda6f6c [ 112.738219] RBP: 00007fcc3cda6f60 R08: 000000000000000e R09: 0000000000000000 [ 112.738784] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fcc3cda6f6c [ 112.739346] R13: 00007ffe6dfc4f2f R14: 00007fcc3a209300 R15: 0000000000022000 [ 112.739914] [ 112.740104] Modules linked in: [ 112.740376] CR2: ffffed10212c967e [ 112.740653] ---[ end trace 0000000000000000 ]--- [ 112.741026] RIP: 0010:perf_tp_event+0x175/0xe70 [ 112.741404] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 112.742827] RSP: 0018:ffff8880469cf800 EFLAGS: 00010216 [ 112.743249] RAX: 1ffff110212c967e RBX: ffff88810964b200 RCX: ffffc9000a236000 [ 112.743806] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: ffff88810964b3f0 [ 112.744374] RBP: ffff8880469cfa70 R08: ffff88806ce31340 R09: ffffe8ffffc06860 [ 112.744935] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 112.745498] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 112.746063] FS: 00007fcc3a209700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 112.746704] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.747165] CR2: ffffed10212c967e CR3: 000000000d5ac000 CR4: 0000000000350ef0 [ 112.747733] note: syz-executor.3[3941] exited with irqs disabled [ 112.748235] BUG: unable to handle page fault for address: ffffed10212c967e [ 112.748780] #PF: supervisor read access in kernel mode [ 112.749188] #PF: error_code(0x0000) - not-present page [ 112.749598] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 [ 112.750048] Oops: Oops: 0000 [#2] SMP KASAN NOPTI [ 112.750434] CPU: 0 UID: 0 PID: 3941 Comm: syz-executor.3 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 112.751368] Tainted: [D]=DIE, [W]=WARN [ 112.751674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.752326] RIP: 0010:perf_tp_event+0x175/0xe70 [ 112.752705] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 112.754123] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010016 [ 112.754544] RAX: 1ffff110212c967e RBX: ffff88810964b200 RCX: 0000000000000002 [ 112.755102] RDX: ffff88801c781b80 RSI: ffffffff8189a4e7 RDI: ffff88810964b3f0 [ 112.755667] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc06860 [ 112.756226] R10: 0000000000000000 R11: ffff88806ce37018 R12: dffffc0000000000 [ 112.756792] R13: 0000000000000024 R14: ffff88806ce31490 R15: dffffc0000000000 [ 112.757353] FS: 00007fcc3a209700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 112.757984] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.758446] CR2: ffffed10212c967e CR3: 000000000d5ac000 CR4: 0000000000350ef0 [ 112.759005] Call Trace: [ 112.759217] [ 112.759399] ? __pfx_perf_tp_event+0x10/0x10 [ 112.759757] ? lock_is_held_type+0x9e/0x120 [ 112.760108] ? trace_pelt_se_tp+0xdf/0x130 [ 112.760458] ? __update_load_avg_se+0x428/0xa40 [ 112.760839] ? lock_is_held_type+0x9e/0x120 [ 112.761187] ? __pick_eevdf+0x326/0x570 [ 112.761507] ? update_curr+0x71/0x500 [ 112.761815] ? trace_sched_set_need_resched_tp+0xd4/0x110 [ 112.762261] ? __resched_curr+0x2a2/0x330 [ 112.762596] ? __pfx___resched_curr+0x10/0x10 [ 112.762963] ? perf_trace_run_bpf_submit+0xef/0x180 [ 112.763364] perf_trace_run_bpf_submit+0xef/0x180 [ 112.763756] perf_trace_lock+0x337/0x5d0 [ 112.764081] ? update_cfs_group+0x11d/0x260 [ 112.764435] ? kvm_sched_clock_read+0x16/0x30 [ 112.764800] ? __pfx_perf_trace_lock+0x10/0x10 [ 112.765169] ? check_preempt_wakeup_fair+0x6e/0x950 [ 112.765572] ? sched_ttwu_pending+0x2e0/0x4a0 [ 112.765938] lock_release+0x1ab/0x290 [ 112.766245] ? ttwu_do_activate+0x1a4/0x8a0 [ 112.766595] _raw_spin_unlock+0x16/0x40 [ 112.766919] sched_ttwu_pending+0x2e0/0x4a0 [ 112.767268] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 112.767655] ? hrtimer_interrupt+0x652/0x830 [ 112.768011] __flush_smp_call_function_queue+0x434/0x740 [ 112.768457] __sysvec_call_function_single+0x6d/0x370 [ 112.768878] sysvec_call_function_single+0xa1/0xc0 [ 112.769271] [ 112.769454] [ 112.769638] asm_sysvec_call_function_single+0x1a/0x20 [ 112.770056] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 112.770431] Code: 38 00 85 db 0f 84 21 01 00 00 e8 09 a6 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 57 a1 38 00 48 85 db 0f 84 17 01 00 00 e9 a5 38 00 31 ff 65 8b 1d 60 2f 49 06 81 e3 ff ff ff 7f 89 de [ 112.771852] RSP: 0018:ffff8880469cff28 EFLAGS: 00000246 [ 112.772278] RAX: 0000000000000001 RBX: ffff88801c781b80 RCX: ffffffff817c3ab6 [ 112.772837] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 112.773394] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 112.773954] R10: ffffffff8643b457 R11: 0000000000000001 R12: ffff88801c781b80 [ 112.774517] R13: 0000000000000009 R14: ffff8880469cf7e0 R15: 0000000000000000 [ 112.775080] ? trace_irq_enable.constprop.0+0x26/0x100 [ 112.775500] ? make_task_dead+0x214/0x3b0 [ 112.775837] ? make_task_dead+0x214/0x3b0 [ 112.776167] ? do_syscall_64+0xbf/0x360 [ 112.776493] rewind_stack_and_make_dead+0x16/0x20 [ 112.776885] RIP: 0033:0x7fcc3cc93b19 [ 112.777183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 112.778604] RSP: 002b:00007fcc3a209218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.779197] RAX: ffffffffffffffda RBX: 00007fcc3cda6f68 RCX: 00007fcc3cc93b19 [ 112.779755] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcc3cda6f6c [ 112.780320] RBP: 00007fcc3cda6f60 R08: 000000000000000e R09: 0000000000000000 [ 112.780878] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fcc3cda6f6c [ 112.781439] R13: 00007ffe6dfc4f2f R14: 00007fcc3a209300 R15: 0000000000022000 [ 112.782001] [ 112.782191] Modules linked in: [ 112.782451] CR2: ffffed10212c967e [ 112.782725] ---[ end trace 0000000000000000 ]--- [ 112.783094] RIP: 0010:perf_tp_event+0x175/0xe70 [ 112.783470] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 112.784899] RSP: 0018:ffff8880469cf800 EFLAGS: 00010216 [ 112.785318] RAX: 1ffff110212c967e RBX: ffff88810964b200 RCX: ffffc9000a236000 [ 112.785880] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: ffff88810964b3f0 [ 112.786441] RBP: ffff8880469cfa70 R08: ffff88806ce31340 R09: ffffe8ffffc06860 [ 112.786998] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 112.787559] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 112.788119] FS: 00007fcc3a209700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 112.788757] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.789216] CR2: ffffed10212c967e CR3: 000000000d5ac000 CR4: 0000000000350ef0 [ 112.789778] Kernel panic - not syncing: Fatal exception in interrupt [ 113.834546] Shutting down cpus with NMI [ 113.835084] Kernel Offset: disabled [ 113.835374] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 09:51:23 Registers: info registers vcpu 0 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff8880469cf048 R8 =0000000000000000 R9 =ffffed100166f046 R10=0000000000000001 R11=3a6465746e696154 R12=000000000000000a R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0 RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fcc3a209700 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=ffffed10212c967e CR3=000000000d5ac000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fcc3cd7a7c000007fcc3cd7a7c8 XMM02=00007fcc3cd7a7e000007fcc3cd7a7c0 XMM03=00007fcc3cd7a7c800007fcc3cd7a7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff8880e56d8000 RCX=000000000000000d RDX=0000000000000000 RSI=ffffffff85c1c760 RDI=ffff88806cf31850 RBP=ffffffff85c1c760 RSP=ffff8880178bf8a8 R8 =ffffffff84c93ca0 R9 =ffff8880178bf9b0 R10=000000000003bea3 R11=00000000000c5f1c R12=ffffffff81358702 R13=ffff8880178bf9b8 R14=ffff8880178bff48 R15=ffff8880178bf970 RIP=ffffffff815af2b0 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3fb61638c0 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffec0af2d98 CR3=000000000dea4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004114d88000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000