Warning: Permanently added '[localhost]:28780' (ECDSA) to the list of known hosts.
2025/09/01 08:06:50 fuzzer started
2025/09/01 08:06:51 dialing manager at localhost:35473
syzkaller login: [ 59.826455] cgroup: Unknown subsys name 'net'
[ 59.883773] cgroup: Unknown subsys name 'cpuset'
[ 59.908218] cgroup: Unknown subsys name 'rlimit'
2025/09/01 08:07:01 syscalls: 2214
2025/09/01 08:07:01 code coverage: enabled
2025/09/01 08:07:01 comparison tracing: enabled
2025/09/01 08:07:01 extra coverage: enabled
2025/09/01 08:07:01 setuid sandbox: enabled
2025/09/01 08:07:01 namespace sandbox: enabled
2025/09/01 08:07:01 Android sandbox: enabled
2025/09/01 08:07:01 fault injection: enabled
2025/09/01 08:07:01 leak checking: enabled
2025/09/01 08:07:01 net packet injection: enabled
2025/09/01 08:07:01 net device setup: enabled
2025/09/01 08:07:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/09/01 08:07:01 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/09/01 08:07:01 USB emulation: enabled
2025/09/01 08:07:01 hci packet injection: enabled
2025/09/01 08:07:01 wifi device emulation: enabled
2025/09/01 08:07:01 802.15.4 emulation: enabled
2025/09/01 08:07:01 fetching corpus: 0, signal 0/2000 (executing program)
2025/09/01 08:07:01 fetching corpus: 50, signal 27820/29803 (executing program)
2025/09/01 08:07:01 fetching corpus: 100, signal 42338/43612 (executing program)
2025/09/01 08:07:01 fetching corpus: 150, signal 50856/51274 (executing program)
2025/09/01 08:07:01 fetching corpus: 159, signal 52439/52648 (executing program)
2025/09/01 08:07:01 fetching corpus: 159, signal 52439/52686 (executing program)
2025/09/01 08:07:01 fetching corpus: 159, signal 52439/52723 (executing program)
2025/09/01 08:07:01 fetching corpus: 159, signal 52439/52762 (executing program)
2025/09/01 08:07:01 fetching corpus: 159, signal 52439/52798 (executing program)
2025/09/01 08:07:01 fetching corpus: 159, signal 52439/52829 (executing program)
2025/09/01 08:07:01 fetching corpus: 159, signal 52439/52873 (executing program)
2025/09/01 08:07:01 fetching corpus: 159, signal 52439/52901 (executing program)
2025/09/01 08:07:01 fetching corpus: 159, signal 52439/52935 (executing program)
2025/09/01 08:07:01 fetching corpus: 159, signal 52439/52978 (executing program)
2025/09/01 08:07:01 fetching corpus: 159, signal 52439/53010 (executing program)
2025/09/01 08:07:01 fetching corpus: 159, signal 52439/53045 (executing program)
2025/09/01 08:07:01 fetching corpus: 159, signal 52439/53082 (executing program)
2025/09/01 08:07:01 fetching corpus: 159, signal 52439/53127 (executing program)
2025/09/01 08:07:01 fetching corpus: 159, signal 52439/53175 (executing program)
2025/09/01 08:07:01 fetching corpus: 159, signal 52439/53223 (executing program)
2025/09/01 08:07:01 fetching corpus: 159, signal 52439/53262 (executing program)
2025/09/01 08:07:01 fetching corpus: 159, signal 52439/53295 (executing program)
2025/09/01 08:07:01 fetching corpus: 159, signal 52439/53334 (executing program)
2025/09/01 08:07:01 fetching corpus: 159, signal 52439/53370 (executing program)
2025/09/01 08:07:01 fetching corpus: 159, signal 52439/53412 (executing program)
2025/09/01 08:07:02 fetching corpus: 159, signal 52439/53450 (executing program)
2025/09/01 08:07:02 fetching corpus: 159, signal 52439/53480 (executing program)
2025/09/01 08:07:02 fetching corpus: 159, signal 52439/53480 (executing program)
2025/09/01 08:07:04 starting 8 fuzzer processes
08:07:04 executing program 0:
r0 = epoll_create(0x6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0)
08:07:04 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x300489830ddf23be, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
write$binfmt_elf64(r0, 0x0, 0xfffffdef)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/137, 0x89}], 0x1, 0x0, 0x0)
08:07:04 executing program 3:
r0 = gettid()
rt_sigqueueinfo(r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xf9ffffff})
08:07:04 executing program 2:
syz_emit_ethernet(0x66, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "ec3ba1", 0x0, 0x3c, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}}, 0x0)
08:07:04 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in6=@private2, 0x0, 0x3c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
08:07:04 executing program 4:
r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x8, 0xf5})
08:07:04 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
[ 72.945118] audit: type=1400 audit(1756714024.537:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
08:07:04 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r0, 0x6)
[ 74.223959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 74.227241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 74.229143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 74.233384] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 74.235793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 74.238845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 74.239054] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 74.242650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 74.242708] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 74.244252] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 74.253258] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 74.255844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 74.256925] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 74.258989] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 74.260921] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 74.262328] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 74.268074] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 74.269939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 74.271911] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 74.282841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 74.290975] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 74.298938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 74.306669] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 74.308021] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 74.320718] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 74.321868] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 74.328041] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 74.330865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 74.335006] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 74.337032] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 74.338828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 74.340724] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 74.342290] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 74.354367] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 74.355822] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 74.358265] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 74.359853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 74.361371] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 74.371126] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 74.384471] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 76.318913] Bluetooth: hci0: command tx timeout
[ 76.383391] Bluetooth: hci4: command tx timeout
[ 76.384097] Bluetooth: hci3: command tx timeout
[ 76.384463] Bluetooth: hci1: command tx timeout
[ 76.385206] Bluetooth: hci2: command tx timeout
[ 76.446537] Bluetooth: hci7: command tx timeout
[ 76.446562] Bluetooth: hci6: command tx timeout
[ 76.447170] Bluetooth: hci5: command tx timeout
[ 78.367948] Bluetooth: hci0: command tx timeout
[ 78.431688] Bluetooth: hci3: command tx timeout
[ 78.431723] Bluetooth: hci2: command tx timeout
[ 78.432101] Bluetooth: hci4: command tx timeout
[ 78.432934] Bluetooth: hci1: command tx timeout
[ 78.494640] Bluetooth: hci6: command tx timeout
[ 78.495330] Bluetooth: hci7: command tx timeout
[ 78.496200] Bluetooth: hci5: command tx timeout
[ 80.414554] Bluetooth: hci0: command tx timeout
[ 80.478551] Bluetooth: hci2: command tx timeout
[ 80.479297] Bluetooth: hci1: command tx timeout
[ 80.480286] Bluetooth: hci4: command tx timeout
[ 80.482038] Bluetooth: hci3: command tx timeout
[ 80.542562] Bluetooth: hci6: command tx timeout
[ 80.542653] Bluetooth: hci7: command tx timeout
[ 80.543300] Bluetooth: hci5: command tx timeout
[ 82.465455] Bluetooth: hci0: command tx timeout
[ 82.526584] Bluetooth: hci3: command tx timeout
[ 82.527036] Bluetooth: hci1: command tx timeout
[ 82.527723] Bluetooth: hci4: command tx timeout
[ 82.528105] Bluetooth: hci2: command tx timeout
[ 82.592546] Bluetooth: hci7: command tx timeout
[ 82.592591] Bluetooth: hci5: command tx timeout
[ 82.593023] Bluetooth: hci6: command tx timeout
[ 112.347686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.348351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.563393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.564059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:07:44 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x300489830ddf23be, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
write$binfmt_elf64(r0, 0x0, 0xfffffdef)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/137, 0x89}], 0x1, 0x0, 0x0)
08:07:45 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x300489830ddf23be, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
write$binfmt_elf64(r0, 0x0, 0xfffffdef)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/137, 0x89}], 0x1, 0x0, 0x0)
[ 113.658675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.659291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:07:45 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x300489830ddf23be, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
write$binfmt_elf64(r0, 0x0, 0xfffffdef)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/137, 0x89}], 0x1, 0x0, 0x0)
[ 113.911372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.912013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:07:45 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x300489830ddf23be, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
write$binfmt_elf64(r0, 0x0, 0xfffffdef)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/137, 0x89}], 0x1, 0x0, 0x0)
08:07:45 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x300489830ddf23be, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
write$binfmt_elf64(r0, 0x0, 0xfffffdef)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/137, 0x89}], 0x1, 0x0, 0x0)
[ 114.034703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.035740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:07:45 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x300489830ddf23be, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
write$binfmt_elf64(r0, 0x0, 0xfffffdef)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/137, 0x89}], 0x1, 0x0, 0x0)
08:07:45 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x300489830ddf23be, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
write$binfmt_elf64(r0, 0x0, 0xfffffdef)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/137, 0x89}], 0x1, 0x0, 0x0)
[ 114.186674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.187257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:07:45 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x300489830ddf23be, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
write$binfmt_elf64(r0, 0x0, 0xfffffdef)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/137, 0x89}], 0x1, 0x0, 0x0)
[ 114.348591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.349330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 114.407197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.407852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 114.600217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.601338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 114.742809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.743398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 114.781508] audit: type=1400 audit(1756714066.372:8): avc: denied { open } for pid=3890 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 114.786037] audit: type=1400 audit(1756714066.373:9): avc: denied { kernel } for pid=3890 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 114.802335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.802989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 114.890449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.891071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 114.951626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.952246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 115.040935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 115.041648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 115.126062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 115.127611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 115.183779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 115.184350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:07:46 executing program 4:
r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x8, 0xf5})
08:07:46 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
08:07:46 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r0, 0x6)
08:07:46 executing program 2:
syz_emit_ethernet(0x66, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "ec3ba1", 0x0, 0x3c, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}}, 0x0)
08:07:46 executing program 0:
r0 = epoll_create(0x6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0)
08:07:46 executing program 3:
r0 = gettid()
rt_sigqueueinfo(r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xf9ffffff})
08:07:46 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in6=@private2, 0x0, 0x3c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
08:07:46 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x300489830ddf23be, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
write$binfmt_elf64(r0, 0x0, 0xfffffdef)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/137, 0x89}], 0x1, 0x0, 0x0)
08:07:47 executing program 0:
r0 = epoll_create(0x6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0)
08:07:47 executing program 0:
r0 = epoll_create(0x6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0)
08:07:47 executing program 4:
r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x8, 0xf5})
08:07:47 executing program 3:
r0 = gettid()
rt_sigqueueinfo(r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xf9ffffff})
08:07:47 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r0, 0x6)
08:07:47 executing program 2:
syz_emit_ethernet(0x66, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "ec3ba1", 0x0, 0x3c, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}}, 0x0)
08:07:47 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
08:07:47 executing program 1:
r0 = epoll_create(0x6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0)
08:07:47 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in6=@private2, 0x0, 0x3c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
[ 115.528681] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI
[ 115.529558] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 115.530165] CPU: 0 UID: 0 PID: 3945 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
[ 115.531618] Tainted: [W]=WARN
[ 115.532445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 115.534248] RIP: 0010:perf_tp_event+0x175/0xe70
[ 115.535198] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 115.538482] RSP: 0018:ffff888045367780 EFLAGS: 00010012
[ 115.539536] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90000805000
[ 115.540540] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[ 115.541097] RBP: ffff8880453679f0 R08: ffff88806ce31340 R09: ffffe8ffffc15188
[ 115.541653] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 115.542208] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000
[ 115.542773] FS: 00007fa47a56b700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[ 115.543402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 115.543889] CR2: 00007fa47d109018 CR3: 0000000019349000 CR4: 0000000000350ef0
[ 115.544450] Call Trace:
[ 115.544660]
[ 115.544843] ? __is_insn_slot_addr+0x136/0x290
[ 115.545218] ? __pfx_perf_tp_event+0x10/0x10
[ 115.545575] ? kernel_text_address+0x5b/0xc0
[ 115.545928] ? __kernel_text_address+0xd/0x40
[ 115.546292] ? unwind_get_return_address+0x59/0xa0
[ 115.546688] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 115.547115] ? arch_stack_walk+0x9c/0xf0
[ 115.547438] ? __lock_acquire+0x694/0x1b70
[ 115.547794] ? __lock_acquire+0x694/0x1b70
[ 115.548133] ? lock_acquire+0x15e/0x2f0
[ 115.548454] ? __is_insn_slot_addr+0x2e/0x290
[ 115.548820] ? find_held_lock+0x2b/0x80
[ 115.549142] ? perf_trace_run_bpf_submit+0xef/0x180
[ 115.549546] perf_trace_run_bpf_submit+0xef/0x180
[ 115.549939] perf_trace_preemptirq_template+0x259/0x430
[ 115.550361] ? trace_sched_set_need_resched_tp+0xd4/0x110
[ 115.550802] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 115.551260] ? __pfx___resched_curr+0x10/0x10
[ 115.551632] ? find_held_lock+0x2b/0x80
[ 115.551966] ? try_to_wake_up+0x8ae/0x11d0
[ 115.552313] ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 115.552720] trace_irq_enable.constprop.0+0xa6/0x100
[ 115.553120] trace_hardirqs_on+0x26/0x40
[ 115.553444] _raw_spin_unlock_irqrestore+0x2c/0x50
[ 115.553839] try_to_wake_up+0x8ae/0x11d0
[ 115.554168] ? __pfx_try_to_wake_up+0x10/0x10
[ 115.554531] ? plist_del+0x122/0x270
[ 115.554833] ? find_held_lock+0x2b/0x80
[ 115.555154] ? futex_wake+0x474/0x540
[ 115.555462] wake_up_q+0xa1/0x130
[ 115.555765] futex_wake+0x47e/0x540
[ 115.556067] ? __pfx_futex_wake+0x10/0x10
[ 115.556404] ? __lock_acquire+0x694/0x1b70
[ 115.556744] do_futex+0x26d/0x370
[ 115.557025] ? __pfx_do_futex+0x10/0x10
[ 115.557347] ? lock_acquire+0x15e/0x2f0
[ 115.557667] ? fd_install+0xa1/0x660
[ 115.557964] ? find_held_lock+0x2b/0x80
[ 115.558286] __x64_sys_futex+0x1c9/0x4d0
[ 115.558609] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 115.559071] ? __pfx___x64_sys_futex+0x10/0x10
[ 115.559438] ? __x64_sys_epoll_create+0x164/0x1e0
[ 115.559846] ? __pfx___x64_sys_epoll_create+0x10/0x10
[ 115.560263] do_syscall_64+0xbf/0x360
[ 115.560570] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 115.560981] RIP: 0033:0x7fa47cff5b19
[ 115.561276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 115.562700] RSP: 002b:00007fa47a56b218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 115.563293] RAX: ffffffffffffffda RBX: 00007fa47d108f68 RCX: 00007fa47cff5b19
[ 115.563866] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa47d108f6c
[ 115.564424] RBP: 00007fa47d108f60 R08: 000000000000000e R09: 0000000000000000
[ 115.564982] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fa47d108f6c
[ 115.565542] R13: 00007ffc634bec0f R14: 00007fa47a56b300 R15: 0000000000022000
[ 115.566103]
[ 115.566292] Modules linked in:
[ 115.566554] ---[ end trace 0000000000000000 ]---
[ 115.566925] RIP: 0010:perf_tp_event+0x175/0xe70
[ 115.567299] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 115.568740] RSP: 0018:ffff888045367780 EFLAGS: 00010012
[ 115.569156] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90000805000
[ 115.569712] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[ 115.570274] RBP: ffff8880453679f0 R08: ffff88806ce31340 R09: ffffe8ffffc15188
[ 115.570834] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 115.571395] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000
[ 115.571976] FS: 00007fa47a56b700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[ 115.572605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 115.573061] CR2: 00007fa47d109018 CR3: 0000000019349000 CR4: 0000000000350ef0
[ 115.573621] note: syz-executor.1[3945] exited with irqs disabled
[ 115.574850] note: syz-executor.1[3945] exited with preempt_count 3
08:07:47 executing program 3:
r0 = gettid()
rt_sigqueueinfo(r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xf9ffffff})
08:07:47 executing program 4:
r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x8, 0xf5})
08:07:47 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in6=@private2, 0x0, 0x3c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
08:07:47 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
08:07:47 executing program 1:
r0 = epoll_create(0x6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0)
08:07:47 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r0, 0x6)
08:07:47 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in6=@private2, 0x0, 0x3c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
08:07:47 executing program 3:
r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x8, 0xf5})
08:07:47 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r0, 0x6)
08:07:47 executing program 2:
syz_emit_ethernet(0x66, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "ec3ba1", 0x0, 0x3c, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}}, 0x0)
08:07:48 executing program 3:
r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x8, 0xf5})
08:07:48 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
08:07:48 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r0, 0x6)
08:07:48 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x300489830ddf23be, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
write$binfmt_elf64(r0, 0x0, 0xfffffdef)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/137, 0x89}], 0x1, 0x0, 0x0)
08:07:48 executing program 1:
r0 = epoll_create(0x6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0)
08:07:48 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in6=@private2, 0x0, 0x3c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
08:07:48 executing program 6:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r1, 0x0, 0x4, 0x0, 0x0)
dup3(r0, r1, 0x0)
[ 116.515364] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI
[ 116.516225] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 116.516786] CPU: 1 UID: 0 PID: 3976 Comm: syz-executor.1 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
[ 116.517657] Tainted: [D]=DIE, [W]=WARN
[ 116.517962] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 116.518608] RIP: 0010:perf_tp_event+0x175/0xe70
[ 116.518995] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 116.520429] RSP: 0018:ffff888044aa7780 EFLAGS: 00010012
[ 116.520846] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 116.521401] RDX: ffff88801765d280 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[ 116.521957] RBP: ffff888044aa79f0 R08: ffff88806cf31340 R09: ffffe8ffffd15188
[ 116.522512] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[ 116.523067] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000
[ 116.523626] FS: 000055557e9fc400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[ 116.524263] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 116.524720] CR2: 000055557e9fdc18 CR3: 0000000015f13000 CR4: 0000000000350ef0
[ 116.525282] Call Trace:
[ 116.525490]
[ 116.525671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 116.526094] ? mod_memcg_lruvec_state+0x3da/0x500
[ 116.526486] ? __pfx_perf_tp_event+0x10/0x10
[ 116.526840] ? __mutex_trylock_common+0xf9/0x260
[ 116.527222] ? arch_scale_cpu_capacity+0x17/0xa0
[ 116.527611] ? cpu_util.constprop.0+0x17d/0x340
[ 116.527994] ? __asan_memset+0x24/0x50
[ 116.528307] ? sched_balance_find_dst_group+0xa9a/0x1c00
[ 116.528736] ? lock_release+0x1c7/0x290
[ 116.529058] ? __pfx___mutex_lock+0x10/0x10
[ 116.529407] ? __pfx_sched_balance_find_dst_group+0x10/0x10
[ 116.529852] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 116.530279] ? perf_trace_run_bpf_submit+0xef/0x180
[ 116.530679] ? __resched_curr+0x2a2/0x330
[ 116.531017] ? __pfx___resched_curr+0x10/0x10
[ 116.531384] perf_trace_run_bpf_submit+0xef/0x180
[ 116.531775] perf_trace_preemptirq_template+0x259/0x430
[ 116.532195] ? __pick_eevdf+0x326/0x570
[ 116.532512] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 116.532971] ? update_curr+0x39e/0x500
[ 116.533281] ? check_preempt_wakeup_fair+0x406/0x950
[ 116.533685] ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 116.534090] trace_irq_enable.constprop.0+0xa6/0x100
[ 116.534493] trace_hardirqs_on+0x26/0x40
[ 116.534815] _raw_spin_unlock_irqrestore+0x2c/0x50
[ 116.535207] try_to_wake_up+0x8ae/0x11d0
[ 116.535537] ? __pfx_try_to_wake_up+0x10/0x10
[ 116.535906] ? plist_del+0x122/0x270
[ 116.536211] ? __futex_unqueue+0xda/0x1c0
[ 116.536544] wake_up_q+0xa1/0x130
[ 116.536827] futex_wake+0x47e/0x540
[ 116.537126] ? __pfx_futex_wake+0x10/0x10
[ 116.537461] ? xfd_validate_state+0x55/0x180
[ 116.537832] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 116.538258] ? finish_task_switch.isra.0+0x206/0x840
[ 116.538645] do_futex+0x26d/0x370
[ 116.538911] ? __pfx_do_futex+0x10/0x10
[ 116.539212] ? __pfx___schedule+0x10/0x10
[ 116.539527] __x64_sys_futex+0x1c9/0x4d0
[ 116.539843] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 116.540279] ? __pfx___x64_sys_futex+0x10/0x10
[ 116.540623] ? xfd_validate_state+0x55/0x180
[ 116.540959] do_syscall_64+0xbf/0x360
[ 116.541246] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 116.541628] RIP: 0033:0x7fa47cff5b19
[ 116.541906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 116.543233] RSP: 002b:00007ffc634bec88 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 116.543797] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa47cff5b19
[ 116.544318] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa47d108f68
[ 116.544839] RBP: 00007fa47d108f60 R08: 00007fa47a56b700 R09: 0000000000000000
[ 116.545364] R10: 00007fa47a56b700 R11: 0000000000000246 R12: 00007fa47d10d030
[ 116.545884] R13: 00007ffc634bed90 R14: 00007fa47d108f60 R15: 000000000001c6bd
[ 116.546408]
[ 116.546585] Modules linked in:
[ 116.546827] ---[ end trace 0000000000000000 ]---
[ 116.547172] RIP: 0010:perf_tp_event+0x175/0xe70
[ 116.547524] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 116.548848] RSP: 0018:ffff888045367780 EFLAGS: 00010012
[ 116.549239] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90000805000
[ 116.549761] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[ 116.550284] RBP: ffff8880453679f0 R08: ffff88806ce31340 R09: ffffe8ffffc15188
[ 116.550806] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 116.551327] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000
[ 116.551857] FS: 000055557e9fc400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[ 116.552444] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 116.552870] CR2: 000055557e9fdc18 CR3: 0000000015f13000 CR4: 0000000000350ef0
[ 116.553420] note: syz-executor.1[3976] exited with irqs disabled
[ 116.554064] note: syz-executor.1[3976] exited with preempt_count 3
08:07:48 executing program 3:
r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x8, 0xf5})
[ 116.592632] kmemleak: Found object by alias at 0x607f1a63d18c
[ 116.592654] CPU: 0 UID: 0 PID: 3985 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
[ 116.592675] Tainted: [D]=DIE, [W]=WARN
[ 116.592679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 116.592687] Call Trace:
[ 116.592690]
[ 116.592695] dump_stack_lvl+0xca/0x120
[ 116.592721] __lookup_object+0x94/0xb0
[ 116.592742] delete_object_full+0x27/0x70
[ 116.592758] free_percpu+0x30/0x1160
[ 116.592776] ? arch_uprobe_clear_state+0x16/0x140
[ 116.592795] futex_hash_free+0x38/0xc0
[ 116.592809] mmput+0x2d3/0x390
[ 116.592828] do_exit+0x79d/0x2970
[ 116.592842] ? lock_release+0x1c7/0x290
[ 116.592857] ? __pfx_do_exit+0x10/0x10
[ 116.592870] ? do_raw_spin_lock+0x123/0x260
[ 116.592886] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 116.592903] do_group_exit+0xd3/0x2a0
[ 116.592917] get_signal+0x2315/0x2340
[ 116.592937] ? __pfx_get_signal+0x10/0x10
[ 116.592954] ? do_futex+0x135/0x370
[ 116.592966] ? __pfx_do_futex+0x10/0x10
[ 116.592980] arch_do_signal_or_restart+0x80/0x790
[ 116.592998] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 116.593014] ? __x64_sys_futex+0x1c9/0x4d0
[ 116.593027] ? __x64_sys_futex+0x1d2/0x4d0
[ 116.593041] ? __pfx___x64_sys_futex+0x10/0x10
[ 116.593054] ? __pfx_do_preadv+0x10/0x10
[ 116.593067] exit_to_user_mode_loop+0x8b/0x110
[ 116.593080] do_syscall_64+0x2f7/0x360
[ 116.593092] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 116.593104] RIP: 0033:0x7f40f4243b19
[ 116.593114] Code: Unable to access opcode bytes at 0x7f40f4243aef.
[ 116.593119] RSP: 002b:00007f40f17b9218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 116.593131] RAX: fffffffffffffe00 RBX: 00007f40f4356f68 RCX: 00007f40f4243b19
[ 116.593139] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f40f4356f68
[ 116.593146] RBP: 00007f40f4356f60 R08: 0000000000000000 R09: 0000000000000000
[ 116.593153] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f40f4356f6c
[ 116.593160] R13: 00007ffff50a264f R14: 00007f40f17b9300 R15: 0000000000022000
[ 116.593171]
[ 116.593174] kmemleak: Object (percpu) 0x607f1a63d188 (size 8):
[ 116.593181] kmemleak: comm "syz-executor.4", pid 3975, jiffies 4294783423
[ 116.593188] kmemleak: min_count = 1
[ 116.593192] kmemleak: count = 0
[ 116.593196] kmemleak: flags = 0x21
[ 116.593200] kmemleak: checksum = 0
[ 116.593204] kmemleak: backtrace:
[ 116.593207] pcpu_alloc_noprof+0x87a/0x1170
[ 116.593223] perf_trace_event_init+0x366/0xa10
[ 116.593237] perf_trace_init+0x1a4/0x2f0
[ 116.593250] perf_tp_event_init+0xa6/0x120
[ 116.593266] perf_try_init_event+0x140/0x9f0
[ 116.593280] perf_event_alloc.part.0+0x118e/0x45f0
[ 116.593298] __do_sys_perf_event_open+0x719/0x2c20
[ 116.593312] do_syscall_64+0xbf/0x360
[ 116.593321] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 117.286313] syz-executor.5 (3967) used greatest stack depth: 23640 bytes left
08:07:51 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in6=@private2, 0x0, 0x3c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
08:07:51 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x300489830ddf23be, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
write$binfmt_elf64(r0, 0x0, 0xfffffdef)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/137, 0x89}], 0x1, 0x0, 0x0)
08:07:51 executing program 3:
futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x3000000)
08:07:51 executing program 6:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r1, 0x0, 0x4, 0x0, 0x0)
dup3(r0, r1, 0x0)
08:07:51 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r0, 0x6)
08:07:51 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r1, 0x0, 0x4, 0x0, 0x0)
dup3(r0, r1, 0x0)
08:07:51 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
08:07:51 executing program 1:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r1, 0x0, 0x4, 0x0, 0x0)
dup3(r0, r1, 0x0)
[ 119.555281] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#3] SMP KASAN NOPTI
[ 119.556605] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[ 119.557613] CPU: 1 UID: 0 PID: 3994 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
[ 119.558831] Tainted: [D]=DIE, [W]=WARN
[ 119.559220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 119.560046] RIP: 0010:perf_tp_event+0x175/0xe70
[ 119.560534] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 119.562328] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012
[ 119.562867] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[ 119.563570] RDX: ffff88801a01d280 RSI: ffffffff8189a4e7 RDI: 0000000100000190
[ 119.564298] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd15188
[ 119.565006] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000
[ 119.565707] R13: 000000000000002c R14: ffff88806cf31490 R15: dffffc0000000000
[ 119.566413] FS: 0000555565ab7400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[ 119.567204] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 119.567797] CR2: 0000555565ab8c18 CR3: 0000000042b79000 CR4: 0000000000350ef0
[ 119.568511] Call Trace:
[ 119.568763]
[ 119.568997] ? __pfx_perf_tp_event+0x10/0x10
[ 119.569451] ? stack_depot_save_flags+0x2c/0xa20
[ 119.569941] ? kasan_save_stack+0x34/0x50
[ 119.570364] ? kasan_save_stack+0x24/0x50
[ 119.570793] ? kasan_save_track+0x14/0x30
[ 119.571218] ? __kasan_save_free_info+0x3a/0x60
[ 119.571699] ? __kasan_slab_free+0x3f/0x50
[ 119.572127] ? kmem_cache_free+0x2a1/0x540
[ 119.572549] ? rcu_core+0x7c8/0x1800
[ 119.572936] ? handle_softirqs+0x1b1/0x770
[ 119.573369] ? __irq_exit_rcu+0xc4/0x100
[ 119.573791] ? irq_exit_rcu+0x9/0x20
[ 119.574167] ? sysvec_apic_timer_interrupt+0x70/0x80
[ 119.574682] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 119.575222] ? __pfx_get_stack_info+0x10/0x10
[ 119.575696] ? __unwind_start+0x4aa/0x7c0
[ 119.576121] ? arch_stack_walk+0x62/0xf0
[ 119.576531] ? stack_trace_save+0x8e/0xc0
[ 119.576955] ? kasan_save_stack+0x24/0x50
[ 119.577375] ? kasan_record_aux_stack+0x89/0xa0
[ 119.577840] ? __call_rcu_common.constprop.0+0x70/0x960
[ 119.578431] ? kmem_cache_free+0x33a/0x540
[ 119.578903] ? mas_destroy+0x5b6/0x9c0
[ 119.579349] ? mas_store_prealloc+0x66d/0xb00
[ 119.579868] ? vma_complete+0xb62/0x12a0
[ 119.580336] ? __split_vma+0x9f9/0xde0
[ 119.580777] ? vma_modify+0xa9c/0x2030
[ 119.581228] ? vma_modify_flags+0x1b0/0x250
[ 119.581714] ? mprotect_fixup+0x1f4/0xba0
[ 119.582197] ? do_mprotect_pkey+0xa0f/0xd30
[ 119.582692] ? __x64_sys_mprotect+0x78/0xc0
[ 119.583177] ? do_syscall_64+0xbf/0x360
[ 119.583621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 119.584230] ? perf_trace_lock+0xb5/0x5d0
[ 119.584700] ? __x64_sys_mprotect+0x78/0xc0
[ 119.585186] ? perf_trace_run_bpf_submit+0xef/0x180
[ 119.585744] perf_trace_run_bpf_submit+0xef/0x180
[ 119.586295] perf_trace_lock+0x337/0x5d0
[ 119.586764] ? __pfx_perf_trace_lock+0x10/0x10
[ 119.587287] ? rcu_core+0x7c3/0x1800
[ 119.587718] ? rcu_core+0x7c3/0x1800
[ 119.588151] ? trace_rcu_batch_end+0x32/0x1e0
[ 119.588653] ? hrtimer_interrupt+0x114/0x830
[ 119.589142] lock_release+0x1ab/0x290
[ 119.589595] ktime_get_update_offsets_now+0xab/0x3c0
[ 119.590187] ? hrtimer_interrupt+0x114/0x830
[ 119.590700] ? __pfx_rcu_core+0x10/0x10
[ 119.591155] hrtimer_interrupt+0x114/0x830
[ 119.591592] ? __local_bh_enable+0x7b/0x90
[ 119.592035] ? handle_softirqs+0x50c/0x770
[ 119.592475] __sysvec_apic_timer_interrupt+0xbb/0x330
[ 119.593002] sysvec_apic_timer_interrupt+0x6b/0x80
[ 119.593496]
[ 119.593730]
[ 119.593965] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 119.594491] RIP: 0010:insn_get_prefixes.part.0+0x98c/0x1450
[ 119.595081] Code: c5 b8 fc 41 89 dc bf 03 00 00 00 41 c0 ec 06 44 89 e6 e8 d7 bf b8 fc 41 80 fc 03 0f 84 70 03 00 00 e8 f8 c4 b8 fc 48 8b 04 24 <48> 8d 78 14 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f
[ 119.596915] RSP: 0018:ffff888045197468 EFLAGS: 00000293
[ 119.597449] RAX: ffff8880451975b0 RBX: ffff8880451975b0 RCX: ffffffff84bb2e17
[ 119.598228] RDX: ffff88801a01d280 RSI: ffffffff84bb31b8 RDI: ffff8880451975bc
[ 119.599020] RBP: ffff888045197642 R08: 0000000000000001 R09: 0000000000000000
[ 119.599801] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000000c
[ 119.600445] R13: ffff88804519764f R14: 0000000000000000 R15: dffffc0000000000
[ 119.601087] ? insn_get_prefixes.part.0+0x5e7/0x1450
[ 119.601556] ? insn_get_prefixes.part.0+0x988/0x1450
[ 119.602019] ? insn_get_prefixes.part.0+0x988/0x1450
[ 119.602488] insn_get_modrm+0x37d/0x870
[ 119.602853] ? hw_breakpoint_exceptions_notify+0x38/0x370
[ 119.603350] insn_get_displacement+0x31a/0x950
[ 119.603776] insn_decode+0x262/0x350
[ 119.604123] get_kernel_gp_address+0x131/0x230
[ 119.604545] ? __pfx_get_kernel_gp_address+0x10/0x10
[ 119.605011] ? atomic_notifier_call_chain+0xa9/0x1c0
[ 119.605470] ? search_exception_tables+0x37/0x50
[ 119.605900] ? fixup_exception+0x10d/0xc00
[ 119.606284] exc_general_protection+0x259/0x330
[ 119.606716] asm_exc_general_protection+0x26/0x30
[ 119.607149] RIP: 0010:perf_tp_event+0x175/0xe70
[ 119.607574] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 119.609173] RSP: 0018:ffff888045197800 EFLAGS: 00010212
[ 119.609647] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[ 119.610280] RDX: ffff88801a01d280 RSI: ffffffff8189a4e7 RDI: 0000000100000190
[ 119.610912] RBP: ffff888045197a70 R08: ffff88806cf31340 R09: ffffe8ffffd15188
[ 119.611539] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[ 119.612178] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[ 119.612811] ? perf_tp_event+0x167/0xe70
[ 119.613187] ? arch_scale_cpu_capacity+0x17/0xa0
[ 119.613621] ? __pfx_perf_tp_event+0x10/0x10
[ 119.614024] ? __asan_memset+0x24/0x50
[ 119.614388] ? __pfx_perf_trace_lock+0x10/0x10
[ 119.614802] ? __pfx___mutex_lock+0x10/0x10
[ 119.615194] ? perf_trace_lock+0xb5/0x5d0
[ 119.615575] ? kvm_sched_clock_read+0x16/0x30
[ 119.615986] ? sched_clock+0x37/0x60
[ 119.616333] ? sched_clock_cpu+0x6c/0x4e0
[ 119.616710] ? perf_trace_run_bpf_submit+0xef/0x180
[ 119.617173] perf_trace_run_bpf_submit+0xef/0x180
[ 119.617609] perf_trace_lock+0x337/0x5d0
[ 119.617978] ? __pfx_perf_trace_lock+0x10/0x10
[ 119.618390] ? __pfx_perf_trace_lock+0x10/0x10
[ 119.618807] ? get_futex_key+0x592/0x14a0
[ 119.619182] ? futex_ref_get+0x114/0x300
[ 119.619548] ? futex_hash+0x15c/0x390
[ 119.619898] lock_release+0x1ab/0x290
[ 119.620250] ? futex_hash+0x15c/0x390
[ 119.620591] futex_ref_get+0x119/0x300
[ 119.620946] ? futex_hash+0x15c/0x390
[ 119.621287] futex_hash+0x70/0x390
[ 119.621617] futex_wake+0x143/0x540
[ 119.621957] ? put_pid+0x1f/0x30
[ 119.622269] ? kernel_clone+0x204/0x7f0
[ 119.622630] ? __pfx_futex_wake+0x10/0x10
[ 119.623015] ? __pfx_kernel_clone+0x10/0x10
[ 119.623401] ? perf_trace_lock+0xb5/0x5d0
[ 119.623784] ? __pfx___handle_mm_fault+0x10/0x10
[ 119.624222] do_futex+0x26d/0x370
[ 119.624545] ? __pfx_do_futex+0x10/0x10
[ 119.624905] ? __pfx___do_sys_clone+0x10/0x10
[ 119.625310] ? handle_mm_fault+0x590/0x9b0
[ 119.625693] __x64_sys_futex+0x1c9/0x4d0
[ 119.626072] ? __pfx___x64_sys_futex+0x10/0x10
[ 119.626497] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 119.626964] do_syscall_64+0xbf/0x360
[ 119.627344] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 119.627858] RIP: 0033:0x7f40f4243b19
[ 119.628172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 119.629672] RSP: 002b:00007ffff50a26c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 119.630307] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f40f4243b19
[ 119.630900] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f40f4356f68
[ 119.631485] RBP: 00007f40f4356f60 R08: 00007f40f17b9700 R09: 0000000000000000
[ 119.632084] R10: 00007f40f17b9700 R11: 0000000000000246 R12: 00007f40f435b0a8
[ 119.632655] R13: 00007ffff50a27d0 R14: 00007f40f4356f60 R15: 000000000001d29c
[ 119.633258]
[ 119.633464] Modules linked in:
[ 119.633769] ---[ end trace 0000000000000000 ]---
[ 119.634173] RIP: 0010:perf_tp_event+0x175/0xe70
[ 119.634575] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 119.636123] RSP: 0018:ffff888045367780 EFLAGS: 00010012
[ 119.636617] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90000805000
[ 119.637236] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[ 119.637876] RBP: ffff8880453679f0 R08: ffff88806ce31340 R09: ffffe8ffffc15188
[ 119.638485] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 119.639064] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000
[ 119.639673] FS: 0000555565ab7400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[ 119.640356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 119.640837] CR2: 0000555565ab8c18 CR3: 0000000042b79000 CR4: 0000000000350ef0
[ 119.641468] Kernel panic - not syncing: Fatal exception in interrupt
[ 119.642144] Kernel Offset: disabled
[ 119.642469] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---
VM DIAGNOSIS:
08:07:47 Registers:
info registers vcpu 0
RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff888045367070
R8 =0000000000000000 R9 =ffffed10013ab046 R10=0000000000000035 R11=0000000065646f43
R12=0000000000000035 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0
RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fa47a56b700 00000000 00000000
GS =0000 ffff8880e55d8000 00000000 00000000
LDT=0000 fffffe4900000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa47d109018 CR3=0000000019349000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fa47d0dc7c000007fa47d0dc7c8
XMM02=00007fa47d0dc7e000007fa47d0dc7c0 XMM03=00007fa47d0dc7c800007fa47d0dc7c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff88806ce3de20 RCX=ffffffff816880fc RDX=ffff888019005280
RSI=ffffffff816880d6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff8880452ef988
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=1ffff1100d9e6bb1
R12=ffffed100d9c7bc5 R13=ffff88806ce3de28 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff816880d8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555579477400 00000000 00000000
GS =0000 ffff8880e56d8000 00000000 00000000
LDT=0000 fffffe5a00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2d026000 CR3=0000000044122000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff812c8387ffffffff812c8313 XMM01=ffffffff812c8387ffffffff812c8313
XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007f6cd76cd7c800007f6cd76cd7c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000