Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:44178' (ECDSA) to the list of known hosts. 2025/08/29 09:33:48 fuzzer started 2025/08/29 09:33:48 dialing manager at localhost:43077 syzkaller login: [ 50.764727] cgroup: Unknown subsys name 'net' [ 50.816543] cgroup: Unknown subsys name 'cpuset' [ 50.826691] cgroup: Unknown subsys name 'rlimit' 2025/08/29 09:33:57 syscalls: 2214 2025/08/29 09:33:57 code coverage: enabled 2025/08/29 09:33:57 comparison tracing: enabled 2025/08/29 09:33:57 extra coverage: enabled 2025/08/29 09:33:57 setuid sandbox: enabled 2025/08/29 09:33:57 namespace sandbox: enabled 2025/08/29 09:33:57 Android sandbox: enabled 2025/08/29 09:33:57 fault injection: enabled 2025/08/29 09:33:57 leak checking: enabled 2025/08/29 09:33:57 net packet injection: enabled 2025/08/29 09:33:57 net device setup: enabled 2025/08/29 09:33:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 09:33:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 09:33:57 USB emulation: enabled 2025/08/29 09:33:57 hci packet injection: enabled 2025/08/29 09:33:57 wifi device emulation: enabled 2025/08/29 09:33:57 802.15.4 emulation: enabled 2025/08/29 09:33:57 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 09:33:57 fetching corpus: 50, signal 22357/25804 (executing program) 2025/08/29 09:33:58 fetching corpus: 100, signal 33693/38369 (executing program) 2025/08/29 09:33:58 fetching corpus: 150, signal 41055/46890 (executing program) 2025/08/29 09:33:58 fetching corpus: 200, signal 46714/53633 (executing program) 2025/08/29 09:33:58 fetching corpus: 250, signal 52138/60049 (executing program) 2025/08/29 09:33:58 fetching corpus: 300, signal 57683/66458 (executing program) 2025/08/29 09:33:58 fetching corpus: 350, signal 61557/71140 (executing program) 2025/08/29 09:33:58 fetching corpus: 400, signal 66214/76442 (executing program) 2025/08/29 09:33:58 fetching corpus: 450, signal 70870/81599 (executing program) 2025/08/29 09:33:58 fetching corpus: 500, signal 73428/84859 (executing program) 2025/08/29 09:33:58 fetching corpus: 550, signal 75233/87390 (executing program) 2025/08/29 09:33:59 fetching corpus: 600, signal 77591/90348 (executing program) 2025/08/29 09:33:59 fetching corpus: 650, signal 79573/92968 (executing program) 2025/08/29 09:33:59 fetching corpus: 700, signal 81939/95801 (executing program) 2025/08/29 09:33:59 fetching corpus: 750, signal 83665/98118 (executing program) 2025/08/29 09:33:59 fetching corpus: 800, signal 86423/101290 (executing program) 2025/08/29 09:33:59 fetching corpus: 850, signal 88198/103546 (executing program) 2025/08/29 09:33:59 fetching corpus: 900, signal 90323/105933 (executing program) 2025/08/29 09:33:59 fetching corpus: 950, signal 92193/108134 (executing program) 2025/08/29 09:33:59 fetching corpus: 1000, signal 94291/110489 (executing program) 2025/08/29 09:34:00 fetching corpus: 1050, signal 95705/112371 (executing program) 2025/08/29 09:34:00 fetching corpus: 1100, signal 97059/114080 (executing program) 2025/08/29 09:34:00 fetching corpus: 1150, signal 98982/116117 (executing program) 2025/08/29 09:34:00 fetching corpus: 1200, signal 100282/117726 (executing program) 2025/08/29 09:34:00 fetching corpus: 1250, signal 102786/120066 (executing program) 2025/08/29 09:34:00 fetching corpus: 1300, signal 104017/121523 (executing program) 2025/08/29 09:34:00 fetching corpus: 1350, signal 106570/123786 (executing program) 2025/08/29 09:34:00 fetching corpus: 1400, signal 108057/125345 (executing program) 2025/08/29 09:34:00 fetching corpus: 1450, signal 109540/126870 (executing program) 2025/08/29 09:34:00 fetching corpus: 1500, signal 110808/128236 (executing program) 2025/08/29 09:34:01 fetching corpus: 1550, signal 111778/129348 (executing program) 2025/08/29 09:34:01 fetching corpus: 1600, signal 113157/130677 (executing program) 2025/08/29 09:34:01 fetching corpus: 1650, signal 114655/132086 (executing program) 2025/08/29 09:34:01 fetching corpus: 1700, signal 116079/133364 (executing program) 2025/08/29 09:34:01 fetching corpus: 1750, signal 117349/134513 (executing program) 2025/08/29 09:34:01 fetching corpus: 1800, signal 118261/135474 (executing program) 2025/08/29 09:34:01 fetching corpus: 1850, signal 119274/136519 (executing program) 2025/08/29 09:34:01 fetching corpus: 1900, signal 119869/137216 (executing program) 2025/08/29 09:34:01 fetching corpus: 1950, signal 121586/138540 (executing program) 2025/08/29 09:34:01 fetching corpus: 2000, signal 122682/139437 (executing program) 2025/08/29 09:34:02 fetching corpus: 2050, signal 123756/140336 (executing program) 2025/08/29 09:34:02 fetching corpus: 2100, signal 124653/141094 (executing program) 2025/08/29 09:34:02 fetching corpus: 2150, signal 126224/142140 (executing program) 2025/08/29 09:34:02 fetching corpus: 2200, signal 127493/143070 (executing program) 2025/08/29 09:34:02 fetching corpus: 2250, signal 128289/143723 (executing program) 2025/08/29 09:34:02 fetching corpus: 2300, signal 129535/144544 (executing program) 2025/08/29 09:34:02 fetching corpus: 2350, signal 130268/145072 (executing program) 2025/08/29 09:34:02 fetching corpus: 2400, signal 131228/145754 (executing program) 2025/08/29 09:34:02 fetching corpus: 2450, signal 131820/146260 (executing program) 2025/08/29 09:34:03 fetching corpus: 2500, signal 132610/146794 (executing program) 2025/08/29 09:34:03 fetching corpus: 2550, signal 133302/147300 (executing program) 2025/08/29 09:34:03 fetching corpus: 2600, signal 133903/147744 (executing program) 2025/08/29 09:34:03 fetching corpus: 2650, signal 135232/148365 (executing program) 2025/08/29 09:34:03 fetching corpus: 2700, signal 135953/148794 (executing program) 2025/08/29 09:34:03 fetching corpus: 2750, signal 136506/149149 (executing program) 2025/08/29 09:34:03 fetching corpus: 2800, signal 137191/149532 (executing program) 2025/08/29 09:34:03 fetching corpus: 2850, signal 138153/149997 (executing program) 2025/08/29 09:34:03 fetching corpus: 2900, signal 138744/150343 (executing program) 2025/08/29 09:34:04 fetching corpus: 2950, signal 139414/150716 (executing program) 2025/08/29 09:34:04 fetching corpus: 3000, signal 139998/151023 (executing program) 2025/08/29 09:34:04 fetching corpus: 3050, signal 140524/151275 (executing program) 2025/08/29 09:34:04 fetching corpus: 3100, signal 141432/151595 (executing program) 2025/08/29 09:34:04 fetching corpus: 3150, signal 142055/151994 (executing program) 2025/08/29 09:34:04 fetching corpus: 3200, signal 142838/152231 (executing program) 2025/08/29 09:34:04 fetching corpus: 3250, signal 143444/152490 (executing program) 2025/08/29 09:34:04 fetching corpus: 3300, signal 143940/152687 (executing program) 2025/08/29 09:34:04 fetching corpus: 3350, signal 144485/152882 (executing program) 2025/08/29 09:34:05 fetching corpus: 3400, signal 145086/153117 (executing program) 2025/08/29 09:34:05 fetching corpus: 3450, signal 145609/153283 (executing program) 2025/08/29 09:34:05 fetching corpus: 3500, signal 146317/153464 (executing program) 2025/08/29 09:34:05 fetching corpus: 3550, signal 146969/153639 (executing program) 2025/08/29 09:34:05 fetching corpus: 3600, signal 147434/153758 (executing program) 2025/08/29 09:34:05 fetching corpus: 3650, signal 147964/153892 (executing program) 2025/08/29 09:34:05 fetching corpus: 3700, signal 148433/153923 (executing program) 2025/08/29 09:34:05 fetching corpus: 3750, signal 149026/153924 (executing program) 2025/08/29 09:34:05 fetching corpus: 3800, signal 149704/153924 (executing program) 2025/08/29 09:34:06 fetching corpus: 3850, signal 150180/153924 (executing program) 2025/08/29 09:34:06 fetching corpus: 3900, signal 150576/153967 (executing program) 2025/08/29 09:34:06 fetching corpus: 3950, signal 151332/153978 (executing program) 2025/08/29 09:34:06 fetching corpus: 3998, signal 151812/153983 (executing program) 2025/08/29 09:34:06 fetching corpus: 3998, signal 151812/153983 (executing program) 2025/08/29 09:34:08 starting 8 fuzzer processes 09:34:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@empty}, 0x14) 09:34:08 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) getpeername$inet6(r0, 0x0, &(0x7f00000001c0)) 09:34:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x1a, &(0x7f0000002b00)={0x5, {{0x2, 0x0, @multicast1}}}, 0x90) 09:34:08 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) 09:34:08 executing program 2: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6, @link_local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 09:34:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup2(r1, r0) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) 09:34:08 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x45, 0x0, 0x0, 0x80000001}, {0x6}]}) truncate(0x0, 0x0) [ 70.530857] audit: type=1400 audit(1756460048.215:7): avc: denied { execmem } for pid=273 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:34:08 executing program 6: r0 = fsopen(&(0x7f0000000000)='msdos\x00', 0x0) fsmount(r0, 0x0, 0x0) [ 71.645820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.647296] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.649816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.652373] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.654269] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.789976] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.791846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.797064] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.797925] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.798941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.803292] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.806705] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.810184] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.811034] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.812347] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.845339] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.848261] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 71.849658] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 71.850663] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.852850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.853550] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 71.864226] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 71.866296] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 71.867853] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 71.871292] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 71.871372] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 71.872286] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 71.876634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.876833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 71.877902] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 71.880262] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.882754] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.884190] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 71.885821] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 71.888628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.893737] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 71.895832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.907679] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 71.918112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.921807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.679904] Bluetooth: hci0: command tx timeout [ 73.871531] Bluetooth: hci1: command tx timeout [ 73.871651] Bluetooth: hci2: command tx timeout [ 73.937464] Bluetooth: hci3: command tx timeout [ 73.937595] Bluetooth: hci5: command tx timeout [ 73.938297] Bluetooth: hci7: command tx timeout [ 73.939862] Bluetooth: hci6: command tx timeout [ 74.000462] Bluetooth: hci4: command tx timeout [ 75.729337] Bluetooth: hci0: command tx timeout [ 75.919891] Bluetooth: hci2: command tx timeout [ 75.920526] Bluetooth: hci1: command tx timeout [ 75.983494] Bluetooth: hci7: command tx timeout [ 75.983953] Bluetooth: hci6: command tx timeout [ 75.984003] Bluetooth: hci3: command tx timeout [ 75.984924] Bluetooth: hci5: command tx timeout [ 76.047532] Bluetooth: hci4: command tx timeout [ 77.776079] Bluetooth: hci0: command tx timeout [ 77.969507] Bluetooth: hci1: command tx timeout [ 77.970562] Bluetooth: hci2: command tx timeout [ 78.031987] Bluetooth: hci5: command tx timeout [ 78.032200] Bluetooth: hci7: command tx timeout [ 78.033577] Bluetooth: hci6: command tx timeout [ 78.034107] Bluetooth: hci3: command tx timeout [ 78.097425] Bluetooth: hci4: command tx timeout [ 79.824513] Bluetooth: hci0: command tx timeout [ 80.015587] Bluetooth: hci2: command tx timeout [ 80.015709] Bluetooth: hci1: command tx timeout [ 80.079774] Bluetooth: hci6: command tx timeout [ 80.079889] Bluetooth: hci7: command tx timeout [ 80.080789] Bluetooth: hci3: command tx timeout [ 80.081635] Bluetooth: hci5: command tx timeout [ 80.144486] Bluetooth: hci4: command tx timeout [ 109.838348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.839791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.949064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.950829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.194282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.195489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.324960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.326173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.390429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.391047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.629457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.630675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.631678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.631719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.672683] audit: type=1326 audit(1756460088.352:8): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3869 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8017afdb19 code=0x0 09:34:48 executing program 6: r0 = fsopen(&(0x7f0000000000)='msdos\x00', 0x0) fsmount(r0, 0x0, 0x0) 09:34:48 executing program 6: r0 = fsopen(&(0x7f0000000000)='msdos\x00', 0x0) fsmount(r0, 0x0, 0x0) [ 110.744469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.745038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.788827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.789417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:34:48 executing program 6: r0 = fsopen(&(0x7f0000000000)='msdos\x00', 0x0) fsmount(r0, 0x0, 0x0) [ 110.851485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.852047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.882463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.883035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:34:48 executing program 6: r0 = fsopen(&(0x7f0000000000)='msdos\x00', 0x0) fsmount(r0, 0x0, 0x0) [ 110.947463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.948031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:34:48 executing program 6: r0 = fsopen(&(0x7f0000000000)='msdos\x00', 0x0) fsmount(r0, 0x0, 0x0) 09:34:48 executing program 6: r0 = fsopen(&(0x7f0000000000)='msdos\x00', 0x0) fsmount(r0, 0x0, 0x0) [ 111.026323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.026910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.085044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.085660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:34:48 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @short}, 0xb) 09:34:48 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @short}, 0xb) [ 111.186209] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.233725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.234316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.289823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.290405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.336644] audit: type=1400 audit(1756460089.018:9): avc: denied { open } for pid=3902 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 111.344759] audit: type=1400 audit(1756460089.019:10): avc: denied { kernel } for pid=3902 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 111.379883] lo: entered promiscuous mode [ 111.383069] lo: left promiscuous mode [ 111.501301] audit: type=1326 audit(1756460089.186:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3869 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8017afdb19 code=0x0 09:34:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x1a, &(0x7f0000002b00)={0x5, {{0x2, 0x0, @multicast1}}}, 0x90) 09:34:49 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) 09:34:49 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x45, 0x0, 0x0, 0x80000001}, {0x6}]}) truncate(0x0, 0x0) 09:34:49 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) getpeername$inet6(r0, 0x0, &(0x7f00000001c0)) 09:34:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup2(r1, r0) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) 09:34:49 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @short}, 0xb) 09:34:49 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@empty}, 0x14) 09:34:49 executing program 2: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6, @link_local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) [ 111.602978] lo: entered promiscuous mode [ 111.606915] lo: left promiscuous mode [ 111.638422] audit: type=1326 audit(1756460089.322:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3923 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8017afdb19 code=0x0 09:34:49 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @short}, 0xb) 09:34:49 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@empty}, 0x14) 09:34:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x1a, &(0x7f0000002b00)={0x5, {{0x2, 0x0, @multicast1}}}, 0x90) 09:34:50 executing program 2: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6, @link_local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 09:34:50 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) getpeername$inet6(r0, 0x0, &(0x7f00000001c0)) 09:34:50 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) 09:34:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup2(r1, r0) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) 09:34:50 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@empty}, 0x14) 09:34:50 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x45, 0x0, 0x0, 0x80000001}, {0x6}]}) truncate(0x0, 0x0) 09:34:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@empty}, 0x14) [ 112.548182] lo: entered promiscuous mode [ 112.553622] lo: left promiscuous mode 09:34:50 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@empty}, 0x14) [ 112.613544] audit: type=1326 audit(1756460090.298:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3956 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8017afdb19 code=0x0 09:34:50 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) getpeername$inet6(r0, 0x0, &(0x7f00000001c0)) 09:34:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup2(r1, r0) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) 09:34:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x1a, &(0x7f0000002b00)={0x5, {{0x2, 0x0, @multicast1}}}, 0x90) 09:34:50 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) 09:34:50 executing program 2: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6, @link_local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 09:34:50 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x45, 0x0, 0x0, 0x80000001}, {0x6}]}) truncate(0x0, 0x0) [ 112.675687] audit: type=1326 audit(1756460090.359:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3960 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd055148b19 code=0x0 [ 112.685216] lo: entered promiscuous mode [ 112.687132] lo: left promiscuous mode [ 112.690759] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 112.691630] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 112.692263] CPU: 1 UID: 0 PID: 3970 Comm: syz-executor.7 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 112.693817] Tainted: [W]=WARN [ 112.694655] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.696440] RIP: 0010:perf_tp_event+0x175/0xe70 [ 112.697502] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 112.701872] RSP: 0018:ffff8880461ff800 EFLAGS: 00010212 [ 112.702332] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90005c2f000 [ 112.702922] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 112.703520] RBP: ffff8880461ffa70 R08: ffff88806cf31340 R09: ffffe8ffffd152e8 [ 112.704071] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 112.704628] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 112.705177] FS: 00007f163178e700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 112.705794] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.706254] CR2: 00007ffce1a7fff8 CR3: 0000000045456000 CR4: 0000000000350ef0 [ 112.706801] Call Trace: [ 112.707007] [ 112.707190] ? __pfx_perf_tp_event+0x10/0x10 [ 112.707542] ? lock_is_held_type+0x9e/0x120 [ 112.707893] ? lock_is_held_type+0x9e/0x120 [ 112.708237] ? perf_trace_lock+0xb5/0x5d0 [ 112.708569] ? perf_trace_lock+0xb5/0x5d0 [ 112.708895] ? __pfx_perf_trace_lock+0x10/0x10 [ 112.709257] ? __pfx_perf_trace_lock+0x10/0x10 [ 112.709616] ? find_held_lock+0x2b/0x80 [ 112.709937] ? find_held_lock+0x2b/0x80 [ 112.710264] ? __perf_install_in_context+0x503/0xb90 [ 112.710656] ? lock_release+0xc8/0x290 [ 112.710966] ? do_raw_spin_unlock+0x53/0x220 [ 112.711317] ? perf_trace_run_bpf_submit+0xef/0x180 [ 112.711710] perf_trace_run_bpf_submit+0xef/0x180 [ 112.712092] perf_trace_lock+0x337/0x5d0 [ 112.712418] ? __pfx_perf_trace_lock+0x10/0x10 [ 112.712778] ? lock_acquire+0x15e/0x2f0 [ 112.713096] ? futex_ref_get+0x48/0x300 [ 112.713411] ? futex_ref_get+0x114/0x300 [ 112.713736] ? futex_hash+0x15c/0x390 [ 112.714044] lock_release+0x1ab/0x290 [ 112.714348] ? futex_hash+0x15c/0x390 [ 112.714648] futex_ref_get+0x119/0x300 [ 112.714952] ? futex_hash+0x15c/0x390 [ 112.715258] futex_hash+0x70/0x390 [ 112.715537] futex_wake+0x143/0x540 [ 112.715830] ? __pfx_perf_trace_lock+0x10/0x10 [ 112.716192] ? __pfx_futex_wake+0x10/0x10 [ 112.716529] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 112.716916] ? lock_release+0xc8/0x290 [ 112.717215] do_futex+0x26d/0x370 [ 112.717484] ? __pfx_do_futex+0x10/0x10 [ 112.717792] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 112.718203] ? find_held_lock+0x2b/0x80 [ 112.718511] __x64_sys_futex+0x1c9/0x4d0 [ 112.718826] ? __pfx___x64_sys_futex+0x10/0x10 [ 112.719180] ? xfd_validate_state+0x55/0x180 [ 112.719529] do_syscall_64+0xbf/0x360 [ 112.719823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.720211] RIP: 0033:0x7f1634218b19 [ 112.720493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 112.721845] RSP: 002b:00007f163178e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.722418] RAX: ffffffffffffffda RBX: 00007f163432bf68 RCX: 00007f1634218b19 [ 112.722946] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f163432bf6c [ 112.723478] RBP: 00007f163432bf60 R08: 000000000000000e R09: 0000000000000000 [ 112.724005] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f163432bf6c [ 112.724536] R13: 00007ffc19cd901f R14: 00007f163178e300 R15: 0000000000022000 [ 112.725071] [ 112.725254] Modules linked in: [ 112.725537] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 112.726376] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 112.726945] CPU: 1 UID: 0 PID: 3970 Comm: syz-executor.7 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 112.727824] Tainted: [D]=DIE, [W]=WARN [ 112.728109] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.728714] RIP: 0010:perf_tp_event+0x175/0xe70 [ 112.729066] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 112.730398] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012 [ 112.730794] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 112.731318] RDX: ffff888015f5d280 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 112.731848] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd152e8 [ 112.732377] R10: 0000000000000000 R11: ffff88806cf37018 R12: dffffc0000000000 [ 112.732901] R13: 0000000000000024 R14: ffff88806cf31490 R15: dffffc0000000000 [ 112.733431] FS: 00007f163178e700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 112.734026] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.734458] CR2: 00007ffce1a7fff8 CR3: 0000000045456000 CR4: 0000000000350ef0 [ 112.734984] Call Trace: [ 112.735181] [ 112.735354] ? __pfx_perf_tp_event+0x10/0x10 [ 112.735690] ? __lock_acquire+0xc65/0x1b70 [ 112.736017] ? __lock_acquire+0x694/0x1b70 [ 112.736337] ? __update_load_avg_se+0x428/0xa40 [ 112.736692] ? trace_sched_set_need_resched_tp+0xd4/0x110 [ 112.737120] ? __resched_curr+0x2a2/0x330 [ 112.737436] ? __pfx___resched_curr+0x10/0x10 [ 112.737779] ? perf_trace_run_bpf_submit+0xef/0x180 [ 112.738166] perf_trace_run_bpf_submit+0xef/0x180 [ 112.738533] perf_trace_lock+0x337/0x5d0 [ 112.738836] ? update_cfs_group+0x11d/0x260 [ 112.739163] ? kvm_sched_clock_read+0x16/0x30 [ 112.739503] ? __pfx_perf_trace_lock+0x10/0x10 [ 112.739847] ? check_preempt_wakeup_fair+0x6e/0x950 [ 112.740236] ? sched_ttwu_pending+0x2e0/0x4a0 [ 112.740587] lock_release+0x1ab/0x290 [ 112.740887] ? ttwu_do_activate+0x1a4/0x8a0 [ 112.741221] _raw_spin_unlock+0x16/0x40 [ 112.741535] sched_ttwu_pending+0x2e0/0x4a0 [ 112.741873] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 112.742258] ? hrtimer_interrupt+0x652/0x830 [ 112.742599] __flush_smp_call_function_queue+0x434/0x740 [ 112.743021] __sysvec_call_function_single+0x6d/0x370 [ 112.743426] sysvec_call_function_single+0xa1/0xc0 [ 112.743812] [ 112.743988] [ 112.744167] asm_sysvec_call_function_single+0x1a/0x20 [ 112.744569] RIP: 0010:oops_exit+0x0/0x50 [ 112.744886] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27 [ 112.746248] RSP: 0018:ffff8880461ff690 EFLAGS: 00000202 [ 112.746652] RAX: 000000000002cf7b RBX: 0000000000000216 RCX: ffffc90005c2f000 [ 112.747186] RDX: 0000000000040000 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 112.747734] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90 [ 112.748266] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880461ff758 [ 112.748799] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000 [ 112.749336] ? oops_end+0x4a/0xe0 [ 112.749618] oops_end+0x65/0xe0 [ 112.749885] exc_general_protection+0x1a2/0x330 [ 112.750258] asm_exc_general_protection+0x26/0x30 [ 112.750627] RIP: 0010:perf_tp_event+0x175/0xe70 [ 112.750990] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 112.752345] RSP: 0018:ffff8880461ff800 EFLAGS: 00010212 [ 112.752748] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90005c2f000 [ 112.753281] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 112.753814] RBP: ffff8880461ffa70 R08: ffff88806cf31340 R09: ffffe8ffffd152e8 [ 112.754357] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 112.754900] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 112.755444] ? perf_tp_event+0x167/0xe70 [ 112.755765] ? __pfx_perf_tp_event+0x10/0x10 [ 112.756108] ? lock_is_held_type+0x9e/0x120 [ 112.756446] ? lock_is_held_type+0x9e/0x120 [ 112.756782] ? perf_trace_lock+0xb5/0x5d0 [ 112.757104] ? perf_trace_lock+0xb5/0x5d0 [ 112.757422] ? __pfx_perf_trace_lock+0x10/0x10 [ 112.757777] ? __pfx_perf_trace_lock+0x10/0x10 [ 112.758145] ? find_held_lock+0x2b/0x80 [ 112.758457] ? find_held_lock+0x2b/0x80 [ 112.758771] ? __perf_install_in_context+0x503/0xb90 [ 112.759163] ? lock_release+0xc8/0x290 [ 112.759463] ? do_raw_spin_unlock+0x53/0x220 [ 112.759816] ? perf_trace_run_bpf_submit+0xef/0x180 [ 112.760202] perf_trace_run_bpf_submit+0xef/0x180 [ 112.760576] perf_trace_lock+0x337/0x5d0 [ 112.760892] ? __pfx_perf_trace_lock+0x10/0x10 [ 112.761247] ? lock_acquire+0x15e/0x2f0 [ 112.761555] ? futex_ref_get+0x48/0x300 [ 112.761859] ? futex_ref_get+0x114/0x300 [ 112.762187] ? futex_hash+0x15c/0x390 [ 112.762480] lock_release+0x1ab/0x290 [ 112.762777] ? futex_hash+0x15c/0x390 [ 112.763073] futex_ref_get+0x119/0x300 [ 112.763371] ? futex_hash+0x15c/0x390 [ 112.763663] futex_hash+0x70/0x390 [ 112.763944] futex_wake+0x143/0x540 [ 112.764229] ? __pfx_perf_trace_lock+0x10/0x10 [ 112.764583] ? __pfx_futex_wake+0x10/0x10 [ 112.764906] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 112.765300] ? lock_release+0xc8/0x290 [ 112.765605] do_futex+0x26d/0x370 [ 112.765878] ? __pfx_do_futex+0x10/0x10 [ 112.766197] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 112.766602] ? find_held_lock+0x2b/0x80 [ 112.766917] __x64_sys_futex+0x1c9/0x4d0 [ 112.767233] ? __pfx___x64_sys_futex+0x10/0x10 [ 112.767587] ? xfd_validate_state+0x55/0x180 [ 112.767934] do_syscall_64+0xbf/0x360 [ 112.768235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.768624] RIP: 0033:0x7f1634218b19 [ 112.768914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 112.770272] RSP: 002b:00007f163178e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.770840] RAX: ffffffffffffffda RBX: 00007f163432bf68 RCX: 00007f1634218b19 [ 112.771375] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f163432bf6c [ 112.771895] RBP: 00007f163432bf60 R08: 000000000000000e R09: 0000000000000000 [ 112.772417] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f163432bf6c [ 112.772938] R13: 00007ffc19cd901f R14: 00007f163178e300 R15: 0000000000022000 [ 112.773473] [ 112.773650] Modules linked in: [ 112.773893] ---[ end trace 0000000000000000 ]--- [ 112.774253] RIP: 0010:perf_tp_event+0x175/0xe70 [ 112.774606] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 112.775941] RSP: 0018:ffff8880461ff800 EFLAGS: 00010212 [ 112.776332] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90005c2f000 [ 112.776854] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 112.777376] RBP: ffff8880461ffa70 R08: ffff88806cf31340 R09: ffffe8ffffd152e8 [ 112.777898] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 112.778431] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 112.778962] FS: 00007f163178e700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 112.779575] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.780013] CR2: 00007ffce1a7fff8 CR3: 0000000045456000 CR4: 0000000000350ef0 [ 112.780552] Kernel panic - not syncing: Fatal exception in interrupt [ 113.823861] Shutting down cpus with NMI [ 113.824446] Kernel Offset: disabled [ 113.824729] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 09:34:50 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88801593fa60 RCX=000000000000000d RDX=1ffff11002b27f61 RSI=ffffffff81b6ff50 RDI=ffff88801593fa6c RBP=ffff88801593fb08 RSP=ffff88801593f978 R8 =ffffffff84c93ca0 R9 =ffff88801593f9d8 R10=000000000003be53 R11=000000000002746e R12=ffff88801593fa60 R13=0000000000000000 R14=ffff888016b70000 R15=ffffea0000598400 RIP=ffffffff81608887 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555809a3400 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555809acc58 CR3=0000000032a21000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000ff000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff8880461ff0f0 R8 =0000000000000000 R9 =ffffed10013e6046 R10=0000000000000020 R11=0000000065646f43 R12=0000000000000020 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f163178e700 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffce1a7fff8 CR3=0000000045456000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f16342ff7c000007f16342ff7c8 XMM02=00007f16342ff7e000007f16342ff7c0 XMM03=00007f16342ff7c800007f16342ff7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000