Warning: Permanently added '[localhost]:38384' (ECDSA) to the list of known hosts. 2025/09/01 10:15:35 fuzzer started 2025/09/01 10:15:35 dialing manager at localhost:35473 syzkaller login: [ 59.184273] cgroup: Unknown subsys name 'net' [ 59.244490] cgroup: Unknown subsys name 'cpuset' [ 59.264112] cgroup: Unknown subsys name 'rlimit' 2025/09/01 10:15:45 syscalls: 2214 2025/09/01 10:15:45 code coverage: enabled 2025/09/01 10:15:45 comparison tracing: enabled 2025/09/01 10:15:45 extra coverage: enabled 2025/09/01 10:15:45 setuid sandbox: enabled 2025/09/01 10:15:45 namespace sandbox: enabled 2025/09/01 10:15:45 Android sandbox: enabled 2025/09/01 10:15:45 fault injection: enabled 2025/09/01 10:15:45 leak checking: enabled 2025/09/01 10:15:45 net packet injection: enabled 2025/09/01 10:15:45 net device setup: enabled 2025/09/01 10:15:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 10:15:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 10:15:45 USB emulation: enabled 2025/09/01 10:15:45 hci packet injection: enabled 2025/09/01 10:15:45 wifi device emulation: enabled 2025/09/01 10:15:45 802.15.4 emulation: enabled 2025/09/01 10:15:45 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 10:15:45 fetching corpus: 50, signal 24993/28395 (executing program) 2025/09/01 10:15:45 fetching corpus: 100, signal 37404/42043 (executing program) 2025/09/01 10:15:45 fetching corpus: 150, signal 42384/48319 (executing program) 2025/09/01 10:15:45 fetching corpus: 200, signal 51766/58648 (executing program) 2025/09/01 10:15:45 fetching corpus: 250, signal 57190/65068 (executing program) 2025/09/01 10:15:46 fetching corpus: 300, signal 61034/69946 (executing program) 2025/09/01 10:15:46 fetching corpus: 350, signal 64320/74222 (executing program) 2025/09/01 10:15:46 fetching corpus: 400, signal 68346/79055 (executing program) 2025/09/01 10:15:46 fetching corpus: 450, signal 71947/83477 (executing program) 2025/09/01 10:15:46 fetching corpus: 500, signal 74466/86807 (executing program) 2025/09/01 10:15:46 fetching corpus: 550, signal 78724/91647 (executing program) 2025/09/01 10:15:46 fetching corpus: 600, signal 80301/94045 (executing program) 2025/09/01 10:15:46 fetching corpus: 650, signal 82449/96870 (executing program) 2025/09/01 10:15:46 fetching corpus: 700, signal 84800/99797 (executing program) 2025/09/01 10:15:46 fetching corpus: 750, signal 87416/102924 (executing program) 2025/09/01 10:15:47 fetching corpus: 800, signal 89932/105861 (executing program) 2025/09/01 10:15:47 fetching corpus: 850, signal 91441/108002 (executing program) 2025/09/01 10:15:47 fetching corpus: 900, signal 93073/110190 (executing program) 2025/09/01 10:15:47 fetching corpus: 950, signal 94365/112068 (executing program) 2025/09/01 10:15:47 fetching corpus: 1000, signal 96344/114479 (executing program) 2025/09/01 10:15:47 fetching corpus: 1050, signal 97325/116062 (executing program) 2025/09/01 10:15:47 fetching corpus: 1100, signal 99193/118278 (executing program) 2025/09/01 10:15:47 fetching corpus: 1150, signal 100570/120087 (executing program) 2025/09/01 10:15:47 fetching corpus: 1200, signal 102403/122193 (executing program) 2025/09/01 10:15:47 fetching corpus: 1250, signal 103543/123810 (executing program) 2025/09/01 10:15:48 fetching corpus: 1300, signal 104938/125566 (executing program) 2025/09/01 10:15:48 fetching corpus: 1350, signal 107223/127939 (executing program) 2025/09/01 10:15:48 fetching corpus: 1400, signal 108536/129557 (executing program) 2025/09/01 10:15:48 fetching corpus: 1450, signal 109367/130802 (executing program) 2025/09/01 10:15:48 fetching corpus: 1500, signal 110857/132512 (executing program) 2025/09/01 10:15:48 fetching corpus: 1550, signal 112012/133939 (executing program) 2025/09/01 10:15:48 fetching corpus: 1600, signal 113339/135420 (executing program) 2025/09/01 10:15:48 fetching corpus: 1650, signal 114594/136826 (executing program) 2025/09/01 10:15:48 fetching corpus: 1700, signal 115410/137998 (executing program) 2025/09/01 10:15:48 fetching corpus: 1750, signal 116336/139165 (executing program) 2025/09/01 10:15:48 fetching corpus: 1800, signal 116934/140167 (executing program) 2025/09/01 10:15:49 fetching corpus: 1850, signal 118201/141495 (executing program) 2025/09/01 10:15:49 fetching corpus: 1900, signal 119695/142899 (executing program) 2025/09/01 10:15:49 fetching corpus: 1950, signal 121437/144421 (executing program) 2025/09/01 10:15:49 fetching corpus: 2000, signal 122520/145575 (executing program) 2025/09/01 10:15:49 fetching corpus: 2050, signal 123439/146632 (executing program) 2025/09/01 10:15:49 fetching corpus: 2100, signal 124199/147579 (executing program) 2025/09/01 10:15:49 fetching corpus: 2150, signal 125176/148593 (executing program) 2025/09/01 10:15:49 fetching corpus: 2200, signal 126750/149837 (executing program) 2025/09/01 10:15:49 fetching corpus: 2250, signal 127513/150720 (executing program) 2025/09/01 10:15:49 fetching corpus: 2300, signal 128830/151830 (executing program) 2025/09/01 10:15:50 fetching corpus: 2350, signal 129892/152817 (executing program) 2025/09/01 10:15:50 fetching corpus: 2400, signal 131038/153838 (executing program) 2025/09/01 10:15:50 fetching corpus: 2450, signal 131791/154597 (executing program) 2025/09/01 10:15:50 fetching corpus: 2500, signal 132615/155390 (executing program) 2025/09/01 10:15:50 fetching corpus: 2550, signal 133438/156208 (executing program) 2025/09/01 10:15:50 fetching corpus: 2600, signal 133972/156815 (executing program) 2025/09/01 10:15:50 fetching corpus: 2650, signal 134839/157593 (executing program) 2025/09/01 10:15:50 fetching corpus: 2700, signal 135645/158344 (executing program) 2025/09/01 10:15:50 fetching corpus: 2750, signal 136500/159034 (executing program) 2025/09/01 10:15:50 fetching corpus: 2800, signal 137375/159721 (executing program) 2025/09/01 10:15:50 fetching corpus: 2850, signal 137909/160298 (executing program) 2025/09/01 10:15:51 fetching corpus: 2900, signal 138608/160882 (executing program) 2025/09/01 10:15:51 fetching corpus: 2950, signal 139185/161459 (executing program) 2025/09/01 10:15:51 fetching corpus: 3000, signal 140148/162061 (executing program) 2025/09/01 10:15:51 fetching corpus: 3050, signal 141056/162779 (executing program) 2025/09/01 10:15:51 fetching corpus: 3100, signal 141621/163247 (executing program) 2025/09/01 10:15:51 fetching corpus: 3150, signal 142101/163716 (executing program) 2025/09/01 10:15:51 fetching corpus: 3200, signal 142640/164195 (executing program) 2025/09/01 10:15:51 fetching corpus: 3250, signal 143104/164665 (executing program) 2025/09/01 10:15:51 fetching corpus: 3300, signal 143472/165062 (executing program) 2025/09/01 10:15:51 fetching corpus: 3350, signal 144402/165641 (executing program) 2025/09/01 10:15:52 fetching corpus: 3400, signal 144933/166076 (executing program) 2025/09/01 10:15:52 fetching corpus: 3450, signal 145366/166473 (executing program) 2025/09/01 10:15:52 fetching corpus: 3500, signal 147226/167085 (executing program) 2025/09/01 10:15:52 fetching corpus: 3550, signal 147942/167484 (executing program) 2025/09/01 10:15:52 fetching corpus: 3600, signal 148375/167842 (executing program) 2025/09/01 10:15:52 fetching corpus: 3650, signal 149009/168169 (executing program) 2025/09/01 10:15:52 fetching corpus: 3700, signal 149519/168533 (executing program) 2025/09/01 10:15:52 fetching corpus: 3750, signal 150227/168886 (executing program) 2025/09/01 10:15:52 fetching corpus: 3800, signal 150811/169199 (executing program) 2025/09/01 10:15:52 fetching corpus: 3850, signal 151364/169466 (executing program) 2025/09/01 10:15:52 fetching corpus: 3900, signal 151894/169768 (executing program) 2025/09/01 10:15:53 fetching corpus: 3950, signal 152452/170041 (executing program) 2025/09/01 10:15:53 fetching corpus: 4000, signal 152961/170278 (executing program) 2025/09/01 10:15:53 fetching corpus: 4050, signal 153476/170521 (executing program) 2025/09/01 10:15:53 fetching corpus: 4100, signal 153883/170744 (executing program) 2025/09/01 10:15:53 fetching corpus: 4150, signal 154380/170965 (executing program) 2025/09/01 10:15:53 fetching corpus: 4200, signal 154860/170979 (executing program) 2025/09/01 10:15:53 fetching corpus: 4250, signal 155449/170983 (executing program) 2025/09/01 10:15:53 fetching corpus: 4300, signal 155846/170991 (executing program) 2025/09/01 10:15:53 fetching corpus: 4350, signal 156265/170998 (executing program) 2025/09/01 10:15:53 fetching corpus: 4400, signal 156721/170998 (executing program) 2025/09/01 10:15:53 fetching corpus: 4450, signal 156997/171006 (executing program) 2025/09/01 10:15:54 fetching corpus: 4500, signal 157528/171014 (executing program) 2025/09/01 10:15:54 fetching corpus: 4550, signal 158103/171056 (executing program) 2025/09/01 10:15:54 fetching corpus: 4600, signal 158683/171063 (executing program) 2025/09/01 10:15:54 fetching corpus: 4650, signal 159145/171069 (executing program) 2025/09/01 10:15:54 fetching corpus: 4700, signal 159639/171079 (executing program) 2025/09/01 10:15:54 fetching corpus: 4750, signal 160087/171093 (executing program) 2025/09/01 10:15:54 fetching corpus: 4800, signal 160307/171095 (executing program) 2025/09/01 10:15:54 fetching corpus: 4850, signal 160820/171098 (executing program) 2025/09/01 10:15:54 fetching corpus: 4900, signal 161258/171110 (executing program) 2025/09/01 10:15:54 fetching corpus: 4950, signal 161839/171118 (executing program) 2025/09/01 10:15:54 fetching corpus: 5000, signal 162283/171121 (executing program) 2025/09/01 10:15:55 fetching corpus: 5050, signal 162670/171141 (executing program) 2025/09/01 10:15:55 fetching corpus: 5100, signal 163049/171155 (executing program) 2025/09/01 10:15:55 fetching corpus: 5150, signal 163371/171156 (executing program) 2025/09/01 10:15:55 fetching corpus: 5200, signal 164053/171159 (executing program) 2025/09/01 10:15:55 fetching corpus: 5250, signal 164367/171177 (executing program) 2025/09/01 10:15:55 fetching corpus: 5300, signal 164817/171275 (executing program) 2025/09/01 10:15:55 fetching corpus: 5350, signal 165128/171284 (executing program) 2025/09/01 10:15:55 fetching corpus: 5400, signal 165337/171290 (executing program) 2025/09/01 10:15:55 fetching corpus: 5450, signal 165757/171324 (executing program) 2025/09/01 10:15:55 fetching corpus: 5500, signal 166113/171333 (executing program) 2025/09/01 10:15:55 fetching corpus: 5550, signal 166419/171336 (executing program) 2025/09/01 10:15:55 fetching corpus: 5600, signal 166722/171340 (executing program) 2025/09/01 10:15:55 fetching corpus: 5650, signal 167136/171370 (executing program) 2025/09/01 10:15:56 fetching corpus: 5700, signal 167582/171372 (executing program) 2025/09/01 10:15:56 fetching corpus: 5750, signal 168031/171383 (executing program) 2025/09/01 10:15:56 fetching corpus: 5800, signal 168460/171449 (executing program) 2025/09/01 10:15:56 fetching corpus: 5849, signal 168855/171540 (executing program) 2025/09/01 10:15:56 fetching corpus: 5849, signal 168855/171540 (executing program) 2025/09/01 10:15:57 starting 8 fuzzer processes 10:15:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) readlink(0x0, 0x0, 0x0) 10:15:57 executing program 1: io_setup(0x10000, &(0x7f0000000000)) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x60220400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x8044805) accept$inet(0xffffffffffffffff, 0x0, 0x0) getpgid(0xffffffffffffffff) fork() setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) 10:15:57 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 10:15:57 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x23, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 10:15:57 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x200) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) splice(r0, 0x0, r1, 0x0, 0x7ff, 0x0) 10:15:57 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000017c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="820395b3262f"}, 0x14) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') pread64(r3, &(0x7f0000000080)=""/203, 0xcb, 0x0) [ 81.279729] audit: type=1400 audit(1756721757.884:7): avc: denied { execmem } for pid=273 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:15:57 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000180)={0x11, 0xf3, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 10:15:57 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r0, 0x1, 0x2c, 0x0, &(0x7f0000000080)) [ 82.437179] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.439916] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.441819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.445333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.448952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.499444] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.503226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.505833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.510449] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.512995] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.572739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.581936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.584366] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.586633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.591357] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.594540] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.597317] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.599428] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.601121] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.603223] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.604391] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.606409] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.611512] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.617946] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.619871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.622417] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.622632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 82.630308] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 82.632757] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 82.636165] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.639646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 82.642950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.645298] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.647714] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 82.653286] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 82.655231] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 82.662717] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 82.670596] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 82.720388] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 82.729568] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.470408] Bluetooth: hci0: command tx timeout [ 84.534167] Bluetooth: hci1: command tx timeout [ 84.725217] Bluetooth: hci4: command tx timeout [ 84.725902] Bluetooth: hci3: command tx timeout [ 84.727537] Bluetooth: hci5: command tx timeout [ 84.728579] Bluetooth: hci2: command tx timeout [ 84.789192] Bluetooth: hci6: command tx timeout [ 84.789879] Bluetooth: hci7: command tx timeout [ 86.517523] Bluetooth: hci0: command tx timeout [ 86.581039] Bluetooth: hci1: command tx timeout [ 86.773664] Bluetooth: hci5: command tx timeout [ 86.775079] Bluetooth: hci4: command tx timeout [ 86.775466] Bluetooth: hci2: command tx timeout [ 86.775853] Bluetooth: hci3: command tx timeout [ 86.838186] Bluetooth: hci7: command tx timeout [ 86.838648] Bluetooth: hci6: command tx timeout [ 88.565123] Bluetooth: hci0: command tx timeout [ 88.630319] Bluetooth: hci1: command tx timeout [ 88.823006] Bluetooth: hci3: command tx timeout [ 88.823462] Bluetooth: hci2: command tx timeout [ 88.823837] Bluetooth: hci4: command tx timeout [ 88.824604] Bluetooth: hci5: command tx timeout [ 88.885045] Bluetooth: hci6: command tx timeout [ 88.885360] Bluetooth: hci7: command tx timeout [ 90.614019] Bluetooth: hci0: command tx timeout [ 90.677030] Bluetooth: hci1: command tx timeout [ 90.869163] Bluetooth: hci2: command tx timeout [ 90.870332] Bluetooth: hci5: command tx timeout [ 90.870734] Bluetooth: hci4: command tx timeout [ 90.870897] Bluetooth: hci3: command tx timeout [ 90.935022] Bluetooth: hci7: command tx timeout [ 90.935062] Bluetooth: hci6: command tx timeout [ 118.090079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.090732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.253168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.253753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.433303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.433935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.513642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.514942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.580280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.580894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:16:35 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x23, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) [ 118.661153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.661760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:16:35 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x23, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) [ 118.689234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.689803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:16:35 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x23, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) [ 118.719092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.719664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.756607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.757218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:16:35 executing program 7: fspick(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$iso9660(&(0x7f0000004f80), &(0x7f0000004fc0)='./file0\x00', 0x0, 0x1, &(0x7f0000005080)=[{&(0x7f0000005000)=',', 0x1, 0x100000001}], 0x808000, &(0x7f00000050c0)={[{}]}) 10:16:35 executing program 1: io_setup(0x10000, &(0x7f0000000000)) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x60220400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x8044805) accept$inet(0xffffffffffffffff, 0x0, 0x0) getpgid(0xffffffffffffffff) fork() setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) [ 118.816700] loop7: detected capacity change from 0 to 264192 [ 118.824515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.825395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.884162] mmap: syz-executor.5 (3886) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. 10:16:35 executing program 7: fspick(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$iso9660(&(0x7f0000004f80), &(0x7f0000004fc0)='./file0\x00', 0x0, 0x1, &(0x7f0000005080)=[{&(0x7f0000005000)=',', 0x1, 0x100000001}], 0x808000, &(0x7f00000050c0)={[{}]}) [ 118.914407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.915046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:16:35 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) [ 118.950060] loop7: detected capacity change from 0 to 264192 [ 118.953247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.953829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:16:35 executing program 1: io_setup(0x10000, &(0x7f0000000000)) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x60220400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x8044805) accept$inet(0xffffffffffffffff, 0x0, 0x0) getpgid(0xffffffffffffffff) fork() setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) [ 119.017398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.018326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.122589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.123310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.124280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.124910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.158510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.159109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.226710] audit: type=1400 audit(1756721795.831:8): avc: denied { open } for pid=3903 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.235056] audit: type=1400 audit(1756721795.831:9): avc: denied { kernel } for pid=3903 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 10:16:35 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) readlink(0x0, 0x0, 0x0) 10:16:35 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000017c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="820395b3262f"}, 0x14) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') pread64(r3, &(0x7f0000000080)=""/203, 0xcb, 0x0) 10:16:35 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000180)={0x11, 0xf3, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 10:16:35 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r0, 0x1, 0x2c, 0x0, &(0x7f0000000080)) 10:16:35 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 10:16:35 executing program 7: fspick(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$iso9660(&(0x7f0000004f80), &(0x7f0000004fc0)='./file0\x00', 0x0, 0x1, &(0x7f0000005080)=[{&(0x7f0000005000)=',', 0x1, 0x100000001}], 0x808000, &(0x7f00000050c0)={[{}]}) 10:16:35 executing program 1: io_setup(0x10000, &(0x7f0000000000)) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x60220400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x8044805) accept$inet(0xffffffffffffffff, 0x0, 0x0) getpgid(0xffffffffffffffff) fork() setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) 10:16:35 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x200) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) splice(r0, 0x0, r1, 0x0, 0x7ff, 0x0) [ 119.430122] loop7: detected capacity change from 0 to 264192 10:16:36 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000017c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="820395b3262f"}, 0x14) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') pread64(r3, &(0x7f0000000080)=""/203, 0xcb, 0x0) 10:16:36 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000180)={0x11, 0xf3, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 10:16:36 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r0, 0x1, 0x2c, 0x0, &(0x7f0000000080)) 10:16:36 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) readlink(0x0, 0x0, 0x0) 10:16:36 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 10:16:36 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x200) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) splice(r0, 0x0, r1, 0x0, 0x7ff, 0x0) 10:16:36 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r0, 0x1, 0x2c, 0x0, &(0x7f0000000080)) 10:16:36 executing program 7: fspick(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$iso9660(&(0x7f0000004f80), &(0x7f0000004fc0)='./file0\x00', 0x0, 0x1, &(0x7f0000005080)=[{&(0x7f0000005000)=',', 0x1, 0x100000001}], 0x808000, &(0x7f00000050c0)={[{}]}) 10:16:36 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000017c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="820395b3262f"}, 0x14) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') pread64(r3, &(0x7f0000000080)=""/203, 0xcb, 0x0) 10:16:36 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000180)={0x11, 0xf3, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) [ 119.662167] loop7: detected capacity change from 0 to 264192 [ 119.676477] BUG: unable to handle page fault for address: ffffed10212c9426 [ 119.677036] #PF: supervisor read access in kernel mode [ 119.677451] #PF: error_code(0x0000) - not-present page [ 119.677857] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 [ 119.678302] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 119.679256] CPU: 0 UID: 0 PID: 3952 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 119.682038] Tainted: [W]=WARN [ 119.682927] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 119.684994] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.686073] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 119.688009] RSP: 0018:ffff888015f5f800 EFLAGS: 00010212 [ 119.688439] RAX: 1ffff110212c9426 RBX: ffff888109649f40 RCX: ffffc9000de78000 [ 119.688996] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: ffff88810964a130 [ 119.689558] RBP: ffff888015f5fa70 R08: ffff88806ce31340 R09: ffffe8ffffc15d28 [ 119.690115] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000 [ 119.690668] R13: 0000000000000024 R14: ffff88806ce31340 R15: dffffc0000000000 [ 119.691228] FS: 00007fe6e29ee700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 119.691852] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.692310] CR2: ffffed10212c9426 CR3: 00000000460cd000 CR4: 0000000000350ef0 [ 119.692866] Call Trace: [ 119.693083] [ 119.693270] ? __pfx_perf_tp_event+0x10/0x10 [ 119.693632] ? perf_tp_event+0x807/0xe70 [ 119.693960] ? lock_is_held_type+0x9e/0x120 [ 119.694316] ? __pfx_perf_tp_event+0x10/0x10 [ 119.694674] ? __pfx_ctx_sched_in+0x10/0x10 [ 119.695015] ? arch_stack_walk+0x9c/0xf0 [ 119.695344] ? find_held_lock+0x2b/0x80 [ 119.695672] ? perf_trace_run_bpf_submit+0xef/0x180 [ 119.696076] ? perf_trace_run_bpf_submit+0xef/0x180 [ 119.696479] ? perf_trace_run_bpf_submit+0xef/0x180 [ 119.696878] perf_trace_run_bpf_submit+0xef/0x180 [ 119.697280] perf_trace_lock_acquire+0x3c2/0x700 [ 119.697669] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 119.698108] ? futex_ref_get+0x48/0x300 [ 119.698428] ? find_held_lock+0x2b/0x80 [ 119.698754] lock_acquire+0xc5/0x2f0 [ 119.699061] ? futex_wake+0x228/0x540 [ 119.699372] _raw_spin_lock+0x2b/0x40 [ 119.699678] ? futex_wake+0x228/0x540 [ 119.699986] futex_wake+0x228/0x540 [ 119.700284] ? __pfx_futex_wake+0x10/0x10 [ 119.700618] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 119.701024] ? lock_release+0xc8/0x290 [ 119.701357] do_futex+0x26d/0x370 [ 119.701641] ? __pfx_do_futex+0x10/0x10 [ 119.701962] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 119.702381] ? find_held_lock+0x2b/0x80 [ 119.702707] __x64_sys_futex+0x1c9/0x4d0 [ 119.703037] ? __pfx___x64_sys_futex+0x10/0x10 [ 119.703404] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 119.703821] do_syscall_64+0xbf/0x360 [ 119.704128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.704539] RIP: 0033:0x7fe6e5478b19 [ 119.704833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.706252] RSP: 002b:00007fe6e29ee218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.706843] RAX: ffffffffffffffda RBX: 00007fe6e558bf68 RCX: 00007fe6e5478b19 [ 119.707404] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe6e558bf6c [ 119.707957] RBP: 00007fe6e558bf60 R08: 000000000000000e R09: 0000000000000000 [ 119.708514] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fe6e558bf6c [ 119.709098] R13: 00007ffc00bacbff R14: 00007fe6e29ee300 R15: 0000000000022000 [ 119.709693] [ 119.709885] Modules linked in: [ 119.710152] CR2: ffffed10212c9426 [ 119.710431] ---[ end trace 0000000000000000 ]--- [ 119.710812] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.711194] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 119.712637] RSP: 0018:ffff888015f5f800 EFLAGS: 00010212 [ 119.713071] RAX: 1ffff110212c9426 RBX: ffff888109649f40 RCX: ffffc9000de78000 [ 119.713633] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: ffff88810964a130 [ 119.714188] RBP: ffff888015f5fa70 R08: ffff88806ce31340 R09: ffffe8ffffc15d28 [ 119.714742] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000 [ 119.715299] R13: 0000000000000024 R14: ffff88806ce31340 R15: dffffc0000000000 [ 119.715855] FS: 00007fe6e29ee700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 119.716485] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.716939] CR2: ffffed10212c9426 CR3: 00000000460cd000 CR4: 0000000000350ef0 [ 119.717506] note: syz-executor.3[3952] exited with irqs disabled [ 119.717991] BUG: unable to handle page fault for address: ffffed10212c9426 [ 119.718527] #PF: supervisor read access in kernel mode [ 119.718934] #PF: error_code(0x0000) - not-present page [ 119.719340] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 [ 119.719783] Oops: Oops: 0000 [#2] SMP KASAN NOPTI [ 119.720164] CPU: 0 UID: 0 PID: 3952 Comm: syz-executor.3 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 119.721099] Tainted: [D]=DIE, [W]=WARN [ 119.721402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 119.722041] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.722417] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 119.723831] RSP: 0018:ffff88806ce08a40 EFLAGS: 00010012 [ 119.724249] RAX: 1ffff110212c9426 RBX: ffff888109649f40 RCX: 0000000000000002 [ 119.724804] RDX: ffff88801e718000 RSI: ffffffff8189a4e7 RDI: ffff88810964a130 [ 119.725362] RBP: ffff88806ce08cb0 R08: ffff88806ce31490 R09: ffffe8ffffc15d28 [ 119.725916] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000 [ 119.726476] R13: 0000000000000024 R14: ffff88806ce31490 R15: dffffc0000000000 [ 119.727035] FS: 00007fe6e29ee700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 119.727664] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.728119] CR2: ffffed10212c9426 CR3: 00000000460cd000 CR4: 0000000000350ef0 [ 119.728676] Call Trace: [ 119.728882] [ 119.729062] ? __kernel_text_address+0xd/0x40 [ 119.729427] ? __pfx_perf_tp_event+0x10/0x10 [ 119.729783] ? __lock_acquire+0x694/0x1b70 [ 119.730124] ? trace_pelt_se_tp+0xdf/0x130 [ 119.730460] ? __lock_acquire+0xc65/0x1b70 [ 119.730804] ? find_held_lock+0x2b/0x80 [ 119.731130] ? perf_trace_run_bpf_submit+0xef/0x180 [ 119.731526] perf_trace_run_bpf_submit+0xef/0x180 [ 119.731916] perf_trace_lock_acquire+0x3c2/0x700 [ 119.732299] ? __lock_acquire+0xc65/0x1b70 [ 119.732636] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 119.733065] lock_acquire+0xc5/0x2f0 [ 119.733364] ? sched_ttwu_pending+0xa1/0x4a0 [ 119.733721] ? _raw_spin_unlock_irq+0x23/0x40 [ 119.734081] _raw_spin_lock_nested+0x29/0x40 [ 119.734439] ? sched_ttwu_pending+0xa1/0x4a0 [ 119.734791] sched_ttwu_pending+0xa1/0x4a0 [ 119.735133] ? run_timer_softirq+0x11f/0x210 [ 119.735495] ? lock_release+0xc8/0x290 [ 119.735805] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 119.736196] __flush_smp_call_function_queue+0x434/0x740 [ 119.736636] __sysvec_call_function_single+0x6d/0x370 [ 119.737059] sysvec_call_function_single+0xa1/0xc0 [ 119.737452] [ 119.737633] [ 119.737817] asm_sysvec_call_function_single+0x1a/0x20 [ 119.738231] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 119.738602] Code: 38 00 85 db 0f 84 21 01 00 00 e8 09 a6 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 57 a1 38 00 48 85 db 0f 84 17 01 00 00 e9 a5 38 00 31 ff 65 8b 1d 60 2f 49 06 81 e3 ff ff ff 7f 89 de [ 119.740008] RSP: 0018:ffff888015f5ff28 EFLAGS: 00000246 [ 119.740432] RAX: 0000000000000001 RBX: ffff88801e718000 RCX: ffffffff817c3ab6 [ 119.740987] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 119.741545] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 119.742101] R10: ffffffff8643b457 R11: 0000000000000001 R12: ffff88801e718000 [ 119.742651] R13: 0000000000000009 R14: ffff888015f5f7e0 R15: 0000000000000000 [ 119.743206] ? trace_irq_enable.constprop.0+0x26/0x100 [ 119.743618] ? make_task_dead+0x214/0x3b0 [ 119.743950] ? make_task_dead+0x214/0x3b0 [ 119.744280] ? do_syscall_64+0xbf/0x360 [ 119.744597] rewind_stack_and_make_dead+0x16/0x20 [ 119.744985] RIP: 0033:0x7fe6e5478b19 [ 119.745281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.746685] RSP: 002b:00007fe6e29ee218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.747276] RAX: ffffffffffffffda RBX: 00007fe6e558bf68 RCX: 00007fe6e5478b19 [ 119.747830] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe6e558bf6c [ 119.748390] RBP: 00007fe6e558bf60 R08: 000000000000000e R09: 0000000000000000 [ 119.748946] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fe6e558bf6c [ 119.749507] R13: 00007ffc00bacbff R14: 00007fe6e29ee300 R15: 0000000000022000 [ 119.750068] [ 119.750257] Modules linked in: [ 119.750512] CR2: ffffed10212c9426 [ 119.750785] ---[ end trace 0000000000000000 ]--- [ 119.751150] RIP: 0010:perf_tp_event+0x175/0xe70 [ 119.751533] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 119.752939] RSP: 0018:ffff888015f5f800 EFLAGS: 00010212 [ 119.753362] RAX: 1ffff110212c9426 RBX: ffff888109649f40 RCX: ffffc9000de78000 [ 119.753916] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: ffff88810964a130 [ 119.754471] RBP: ffff888015f5fa70 R08: ffff88806ce31340 R09: ffffe8ffffc15d28 [ 119.755026] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000 [ 119.755579] R13: 0000000000000024 R14: ffff88806ce31340 R15: dffffc0000000000 [ 119.756134] FS: 00007fe6e29ee700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 119.756755] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.757212] CR2: ffffed10212c9426 CR3: 00000000460cd000 CR4: 0000000000350ef0 [ 119.757772] Kernel panic - not syncing: Fatal exception in interrupt [ 119.758462] Kernel Offset: disabled [ 119.758750] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 10:16:36 Registers: info registers vcpu 0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff828e5070 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff888015f5f050 R8 =ffffffff828fc500 R9 =0000000000000001 R10=0000000000000000 R11=000000000000002c R12=000000000000005f R13=ffffffff88729290 R14=ffffffff88729240 R15=ffffffff88729500 RIP=ffffffff828e50c5 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe6e29ee700 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=ffffed10212c9426 CR3=00000000460cd000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fe6e555f7c000007fe6e555f7c8 XMM02=00007fe6e555f7e000007fe6e555f7c0 XMM03=00007fe6e555f7c800007fe6e555f7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffea0000775c40 RCX=ffff88800e1fe640 RDX=0000000000000001 RSI=ffffea0000775c40 RDI=ffffea0000775c40 RBP=0000000000000000 RSP=ffff88804689f870 R8 =0000000000000000 R9 =fffff940000eeb88 R10=0000000000000000 R11=1ffff1100d9e6f7b R12=ffff88804689f9e0 R13=00007f822a268000 R14=ffff88804689fce0 R15=800000001dd71007 RIP=ffffffff81a296b6 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d022000 CR3=000000003732b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000