Warning: Permanently added '[localhost]:43148' (ECDSA) to the list of known hosts. 2025/09/01 09:08:35 fuzzer started 2025/09/01 09:08:36 dialing manager at localhost:35473 syzkaller login: [ 52.214296] cgroup: Unknown subsys name 'net' [ 52.268495] cgroup: Unknown subsys name 'cpuset' [ 52.288511] cgroup: Unknown subsys name 'rlimit' 2025/09/01 09:08:47 syscalls: 2214 2025/09/01 09:08:47 code coverage: enabled 2025/09/01 09:08:47 comparison tracing: enabled 2025/09/01 09:08:47 extra coverage: enabled 2025/09/01 09:08:47 setuid sandbox: enabled 2025/09/01 09:08:47 namespace sandbox: enabled 2025/09/01 09:08:47 Android sandbox: enabled 2025/09/01 09:08:47 fault injection: enabled 2025/09/01 09:08:47 leak checking: enabled 2025/09/01 09:08:47 net packet injection: enabled 2025/09/01 09:08:47 net device setup: enabled 2025/09/01 09:08:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 09:08:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 09:08:47 USB emulation: enabled 2025/09/01 09:08:47 hci packet injection: enabled 2025/09/01 09:08:47 wifi device emulation: enabled 2025/09/01 09:08:47 802.15.4 emulation: enabled 2025/09/01 09:08:47 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 09:08:47 fetching corpus: 50, signal 17347/20843 (executing program) 2025/09/01 09:08:47 fetching corpus: 100, signal 30081/34800 (executing program) 2025/09/01 09:08:47 fetching corpus: 150, signal 40303/46020 (executing program) 2025/09/01 09:08:47 fetching corpus: 200, signal 45206/52033 (executing program) 2025/09/01 09:08:48 fetching corpus: 250, signal 53500/61006 (executing program) 2025/09/01 09:08:48 fetching corpus: 300, signal 57580/65941 (executing program) 2025/09/01 09:08:48 fetching corpus: 350, signal 64681/73473 (executing program) 2025/09/01 09:08:48 fetching corpus: 400, signal 68591/77980 (executing program) 2025/09/01 09:08:48 fetching corpus: 450, signal 72709/82560 (executing program) 2025/09/01 09:08:48 fetching corpus: 500, signal 76530/86800 (executing program) 2025/09/01 09:08:48 fetching corpus: 550, signal 80043/90674 (executing program) 2025/09/01 09:08:48 fetching corpus: 600, signal 82133/93311 (executing program) 2025/09/01 09:08:48 fetching corpus: 650, signal 85560/96900 (executing program) 2025/09/01 09:08:49 fetching corpus: 700, signal 87113/98995 (executing program) 2025/09/01 09:08:49 fetching corpus: 750, signal 88946/101234 (executing program) 2025/09/01 09:08:49 fetching corpus: 800, signal 91113/103671 (executing program) 2025/09/01 09:08:49 fetching corpus: 850, signal 94357/106872 (executing program) 2025/09/01 09:08:49 fetching corpus: 900, signal 97372/109765 (executing program) 2025/09/01 09:08:49 fetching corpus: 950, signal 98658/111386 (executing program) 2025/09/01 09:08:49 fetching corpus: 1000, signal 99746/112833 (executing program) 2025/09/01 09:08:49 fetching corpus: 1050, signal 101152/114465 (executing program) 2025/09/01 09:08:49 fetching corpus: 1100, signal 102737/116161 (executing program) 2025/09/01 09:08:49 fetching corpus: 1150, signal 104002/117546 (executing program) 2025/09/01 09:08:50 fetching corpus: 1200, signal 106028/119497 (executing program) 2025/09/01 09:08:50 fetching corpus: 1250, signal 108951/121945 (executing program) 2025/09/01 09:08:50 fetching corpus: 1300, signal 110028/123133 (executing program) 2025/09/01 09:08:50 fetching corpus: 1350, signal 111459/124503 (executing program) 2025/09/01 09:08:50 fetching corpus: 1400, signal 113065/125933 (executing program) 2025/09/01 09:08:50 fetching corpus: 1450, signal 114380/127163 (executing program) 2025/09/01 09:08:50 fetching corpus: 1500, signal 115163/128061 (executing program) 2025/09/01 09:08:50 fetching corpus: 1550, signal 116792/129488 (executing program) 2025/09/01 09:08:50 fetching corpus: 1600, signal 118083/130586 (executing program) 2025/09/01 09:08:51 fetching corpus: 1650, signal 119420/131679 (executing program) 2025/09/01 09:08:51 fetching corpus: 1700, signal 120545/132638 (executing program) 2025/09/01 09:08:51 fetching corpus: 1750, signal 121259/133396 (executing program) 2025/09/01 09:08:51 fetching corpus: 1800, signal 121881/134011 (executing program) 2025/09/01 09:08:51 fetching corpus: 1850, signal 123296/134987 (executing program) 2025/09/01 09:08:51 fetching corpus: 1900, signal 124316/135818 (executing program) 2025/09/01 09:08:51 fetching corpus: 1950, signal 125184/136526 (executing program) 2025/09/01 09:08:51 fetching corpus: 2000, signal 126240/137270 (executing program) 2025/09/01 09:08:51 fetching corpus: 2050, signal 127077/137919 (executing program) 2025/09/01 09:08:52 fetching corpus: 2100, signal 127983/138531 (executing program) 2025/09/01 09:08:52 fetching corpus: 2150, signal 128909/139130 (executing program) 2025/09/01 09:08:52 fetching corpus: 2200, signal 129631/139652 (executing program) 2025/09/01 09:08:52 fetching corpus: 2250, signal 130333/140146 (executing program) 2025/09/01 09:08:52 fetching corpus: 2300, signal 131134/140623 (executing program) 2025/09/01 09:08:52 fetching corpus: 2350, signal 131895/141070 (executing program) 2025/09/01 09:08:52 fetching corpus: 2400, signal 132691/141498 (executing program) 2025/09/01 09:08:52 fetching corpus: 2450, signal 133631/141984 (executing program) 2025/09/01 09:08:52 fetching corpus: 2500, signal 134446/142411 (executing program) 2025/09/01 09:08:52 fetching corpus: 2550, signal 135086/142741 (executing program) 2025/09/01 09:08:53 fetching corpus: 2600, signal 135692/143043 (executing program) 2025/09/01 09:08:53 fetching corpus: 2650, signal 136460/143356 (executing program) 2025/09/01 09:08:53 fetching corpus: 2700, signal 137183/143646 (executing program) 2025/09/01 09:08:53 fetching corpus: 2750, signal 137617/143864 (executing program) 2025/09/01 09:08:53 fetching corpus: 2800, signal 138017/144053 (executing program) 2025/09/01 09:08:53 fetching corpus: 2850, signal 138564/144282 (executing program) 2025/09/01 09:08:53 fetching corpus: 2900, signal 139041/144467 (executing program) 2025/09/01 09:08:53 fetching corpus: 2950, signal 141178/144894 (executing program) 2025/09/01 09:08:53 fetching corpus: 3000, signal 141881/145075 (executing program) 2025/09/01 09:08:54 fetching corpus: 3050, signal 142600/145216 (executing program) 2025/09/01 09:08:54 fetching corpus: 3100, signal 143138/145345 (executing program) 2025/09/01 09:08:54 fetching corpus: 3100, signal 143138/145380 (executing program) 2025/09/01 09:08:54 fetching corpus: 3100, signal 143138/145418 (executing program) 2025/09/01 09:08:54 fetching corpus: 3100, signal 143138/145452 (executing program) 2025/09/01 09:08:54 fetching corpus: 3100, signal 143138/145496 (executing program) 2025/09/01 09:08:54 fetching corpus: 3100, signal 143138/145542 (executing program) 2025/09/01 09:08:54 fetching corpus: 3100, signal 143138/145563 (executing program) 2025/09/01 09:08:54 fetching corpus: 3100, signal 143138/145604 (executing program) 2025/09/01 09:08:54 fetching corpus: 3100, signal 143138/145649 (executing program) 2025/09/01 09:08:54 fetching corpus: 3100, signal 143138/145666 (executing program) 2025/09/01 09:08:54 fetching corpus: 3100, signal 143138/145666 (executing program) 2025/09/01 09:08:56 starting 8 fuzzer processes 09:08:56 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) quotactl(0x0, 0x0, 0x0, 0x0) 09:08:56 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "9ded38c7", {0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0xb4}}) kexec_load(0x2, 0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x1000000}], 0x0) 09:08:56 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f00000000c0)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 09:08:56 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002d40)={[{@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x37, 0x35, 0x38, 0x35, 0x39, 0x35, 0x31, 0x37, 0x35, 0x34]}}}}]}) 09:08:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x30, 0x28, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x30}], 0x1}, 0x0) 09:08:56 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x1000) [ 72.599904] audit: type=1400 audit(1756717736.796:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:08:56 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000868, 0x0) 09:08:56 executing program 6: pipe(&(0x7f0000000380)) getresuid(&(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)) [ 73.830905] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.832623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.833730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.836198] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.838433] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.889503] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.892198] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.898018] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.904401] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.909595] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.949983] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.952247] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.953640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.955348] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.957446] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.960228] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.964048] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.967131] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.968997] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.970954] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.990072] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.997860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.025171] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 74.026880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.029244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.033398] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.039923] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 74.043949] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 74.045617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 74.047222] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 74.048990] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 74.052194] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 74.053590] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.056080] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 74.057597] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 74.082946] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 74.103216] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 74.138529] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 74.165130] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 74.174476] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 75.860910] Bluetooth: hci0: command tx timeout [ 75.987876] Bluetooth: hci1: command tx timeout [ 75.989002] Bluetooth: hci3: command tx timeout [ 76.052807] Bluetooth: hci4: command tx timeout [ 76.117823] Bluetooth: hci6: command tx timeout [ 76.118425] Bluetooth: hci2: command tx timeout [ 76.180799] Bluetooth: hci5: command tx timeout [ 76.243939] Bluetooth: hci7: command tx timeout [ 77.907846] Bluetooth: hci0: command tx timeout [ 78.035816] Bluetooth: hci3: command tx timeout [ 78.036243] Bluetooth: hci1: command tx timeout [ 78.100867] Bluetooth: hci4: command tx timeout [ 78.164820] Bluetooth: hci2: command tx timeout [ 78.165302] Bluetooth: hci6: command tx timeout [ 78.228850] Bluetooth: hci5: command tx timeout [ 78.292854] Bluetooth: hci7: command tx timeout [ 79.956832] Bluetooth: hci0: command tx timeout [ 80.085912] Bluetooth: hci3: command tx timeout [ 80.086351] Bluetooth: hci1: command tx timeout [ 80.148844] Bluetooth: hci4: command tx timeout [ 80.213005] Bluetooth: hci2: command tx timeout [ 80.213425] Bluetooth: hci6: command tx timeout [ 80.277898] Bluetooth: hci5: command tx timeout [ 80.341774] Bluetooth: hci7: command tx timeout [ 82.004790] Bluetooth: hci0: command tx timeout [ 82.132999] Bluetooth: hci3: command tx timeout [ 82.133551] Bluetooth: hci1: command tx timeout [ 82.195884] Bluetooth: hci4: command tx timeout [ 82.259830] Bluetooth: hci2: command tx timeout [ 82.260303] Bluetooth: hci6: command tx timeout [ 82.325436] Bluetooth: hci5: command tx timeout [ 82.388794] Bluetooth: hci7: command tx timeout [ 110.760524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.761229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.935847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.936488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.088205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.089356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.242141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.243059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:09:35 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f00000000c0)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 111.452360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.453054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:09:35 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f00000000c0)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 09:09:35 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f00000000c0)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 111.623813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.624379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.648588] tmpfs: Bad value for 'mpol' [ 111.652677] tmpfs: Bad value for 'mpol' 09:09:35 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002d40)={[{@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x37, 0x35, 0x38, 0x35, 0x39, 0x35, 0x31, 0x37, 0x35, 0x34]}}}}]}) [ 111.815633] tmpfs: Bad value for 'mpol' 09:09:36 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f00000000c0)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 09:09:36 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f00000000c0)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 09:09:36 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002d40)={[{@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x37, 0x35, 0x38, 0x35, 0x39, 0x35, 0x31, 0x37, 0x35, 0x34]}}}}]}) [ 111.881982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.883151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:09:36 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f00000000c0)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 111.940570] tmpfs: Bad value for 'mpol' [ 112.028821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.029386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.137464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.138262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.259098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.259991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.321304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.322080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.339249] audit: type=1400 audit(1756717776.536:8): avc: denied { open } for pid=3889 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 112.350914] audit: type=1400 audit(1756717776.536:9): avc: denied { kernel } for pid=3889 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 112.358132] ======================================================= [ 112.358132] WARNING: The mand mount option has been deprecated and [ 112.358132] and is ignored by this kernel. Remove the mand [ 112.358132] option from the mount to silence this warning. [ 112.358132] ======================================================= [ 112.376844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.377468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.402266] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. [ 112.415164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.415833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.442873] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. [ 112.503428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.504578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.886876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.888030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.063123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.064548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.215356] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 113.219498] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 09:09:37 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) quotactl(0x0, 0x0, 0x0, 0x0) 09:09:37 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x15) 09:09:37 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000868, 0x0) 09:09:37 executing program 4: syz_emit_ethernet(0x8e, &(0x7f00000003c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b1000", 0x58, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "61165b", 0x0, 0x2b, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@private0, @loopback]}]}}}}}}}, 0x0) 09:09:37 executing program 6: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 09:09:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x30, 0x28, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x30}], 0x1}, 0x0) 09:09:37 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "9ded38c7", {0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0xb4}}) kexec_load(0x2, 0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x1000000}], 0x0) 09:09:37 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002d40)={[{@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x37, 0x35, 0x38, 0x35, 0x39, 0x35, 0x31, 0x37, 0x35, 0x34]}}}}]}) [ 113.306387] tmpfs: Bad value for 'mpol' 09:09:37 executing program 4: syz_emit_ethernet(0x8e, &(0x7f00000003c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b1000", 0x58, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "61165b", 0x0, 0x2b, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@private0, @loopback]}]}}}}}}}, 0x0) [ 113.344534] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. [ 113.349327] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 09:09:38 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) quotactl(0x0, 0x0, 0x0, 0x0) 09:09:38 executing program 6: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 09:09:38 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "9ded38c7", {0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0xb4}}) kexec_load(0x2, 0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x1000000}], 0x0) 09:09:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x15) 09:09:38 executing program 4: syz_emit_ethernet(0x8e, &(0x7f00000003c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b1000", 0x58, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "61165b", 0x0, 0x2b, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@private0, @loopback]}]}}}}}}}, 0x0) 09:09:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x30, 0x28, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x30}], 0x1}, 0x0) 09:09:38 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000868, 0x0) 09:09:38 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x15) 09:09:38 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x15) 09:09:38 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) quotactl(0x0, 0x0, 0x0, 0x0) [ 114.051889] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 114.064152] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI [ 114.065005] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 114.065658] CPU: 1 UID: 0 PID: 3948 Comm: syz-executor.5 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 114.067236] Tainted: [W]=WARN [ 114.067973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 114.070027] RIP: 0010:perf_tp_event+0x175/0xe70 [ 114.071291] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 114.072614] RSP: 0018:ffff88804569f780 EFLAGS: 00010012 [ 114.073007] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90009845000 [ 114.073527] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 114.074078] RBP: ffff88804569f9f0 R08: ffff88806cf31340 R09: ffffe8ffffd15e30 [ 114.074599] R10: 0000000000000000 R11: ffff88806cf37018 R12: dffffc0000000000 [ 114.075121] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 114.075641] FS: 00007f6c1c71b700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 114.076231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.076658] CR2: 0000001b2cf22000 CR3: 000000000e0b5000 CR4: 0000000000350ef0 [ 114.077182] Call Trace: [ 114.077376] [ 114.077549] ? __pfx_perf_tp_event+0x10/0x10 [ 114.077910] ? visit_groups_merge.constprop.0.isra.0+0x6e7/0x1150 [ 114.078367] ? lock_acquire+0x15e/0x2f0 [ 114.078669] ? __pfx_visit_groups_merge.constprop.0.isra.0+0x10/0x10 [ 114.079145] ? lock_is_held_type+0x9e/0x120 [ 114.079475] ? lock_is_held_type+0x9e/0x120 [ 114.079802] ? ctx_sched_in+0x134/0x9b0 [ 114.080098] ? kvm_sched_clock_read+0x16/0x30 [ 114.080438] ? sched_clock+0x37/0x60 [ 114.080724] ? lock_is_held_type+0x9e/0x120 [ 114.081052] ? perf_trace_run_bpf_submit+0xef/0x180 [ 114.081426] ? lock_is_held_type+0x9e/0x120 [ 114.081752] perf_trace_run_bpf_submit+0xef/0x180 [ 114.082134] perf_trace_preemptirq_template+0x259/0x430 [ 114.082530] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 114.082965] ? check_preempt_wakeup_fair+0x406/0x950 [ 114.083346] ? find_held_lock+0x2b/0x80 [ 114.083649] ? try_to_wake_up+0x8ae/0x11d0 [ 114.083971] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 114.084355] trace_irq_enable.constprop.0+0xa6/0x100 [ 114.084730] trace_hardirqs_on+0x26/0x40 [ 114.085032] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 114.085400] try_to_wake_up+0x8ae/0x11d0 [ 114.085708] ? __pfx_try_to_wake_up+0x10/0x10 [ 114.086066] ? plist_del+0x122/0x270 [ 114.086350] ? find_held_lock+0x2b/0x80 [ 114.086653] ? futex_wake+0x474/0x540 [ 114.086944] wake_up_q+0xa1/0x130 [ 114.087212] futex_wake+0x47e/0x540 [ 114.087491] ? __pfx_futex_wake+0x10/0x10 [ 114.087808] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 114.088186] ? lock_release+0xc8/0x290 [ 114.088479] do_futex+0x26d/0x370 [ 114.088743] ? __pfx_do_futex+0x10/0x10 [ 114.089041] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 114.089434] ? arch_do_signal_or_restart+0x204/0x790 [ 114.089833] __x64_sys_futex+0x1c9/0x4d0 [ 114.090145] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 114.090575] ? __pfx___x64_sys_futex+0x10/0x10 [ 114.090919] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 114.091264] ? xfd_validate_state+0x55/0x180 [ 114.091599] do_syscall_64+0xbf/0x360 [ 114.091886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.092270] RIP: 0033:0x7f6c1f1a5b19 [ 114.092546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 114.093874] RSP: 002b:00007f6c1c71b218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 114.094429] RAX: ffffffffffffffda RBX: 00007f6c1f2b8f68 RCX: 00007f6c1f1a5b19 [ 114.094948] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6c1f2b8f6c [ 114.095466] RBP: 00007f6c1f2b8f60 R08: 000000000000000e R09: 0000000000000000 [ 114.095984] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f6c1f2b8f6c [ 114.096502] R13: 00007ffeaaf70bff R14: 00007f6c1c71b300 R15: 0000000000022000 [ 114.097025] [ 114.097201] Modules linked in: [ 114.097443] ---[ end trace 0000000000000000 ]--- [ 114.097799] RIP: 0010:perf_tp_event+0x175/0xe70 [ 114.098159] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 114.099474] RSP: 0018:ffff88804569f780 EFLAGS: 00010012 [ 114.099865] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90009845000 [ 114.100384] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 114.100904] RBP: ffff88804569f9f0 R08: ffff88806cf31340 R09: ffffe8ffffd15e30 [ 114.101423] R10: 0000000000000000 R11: ffff88806cf37018 R12: dffffc0000000000 [ 114.101967] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 114.102488] FS: 00007f6c1c71b700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 114.103075] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.103500] CR2: 0000001b2cf22000 CR3: 000000000e0b5000 CR4: 0000000000350ef0 [ 114.104023] note: syz-executor.5[3948] exited with irqs disabled [ 114.104516] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI [ 114.105328] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 114.105977] CPU: 1 UID: 0 PID: 3948 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 114.106846] Tainted: [D]=DIE, [W]=WARN [ 114.107130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 114.107727] RIP: 0010:perf_tp_event+0x175/0xe70 [ 114.108079] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 114.109403] RSP: 0018:ffff88806cf08b80 EFLAGS: 00010012 [ 114.109807] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 114.110329] RDX: ffff888043fe3700 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 114.110848] RBP: ffff88806cf08df0 R08: ffff88806cf313e8 R09: ffffe8ffffd15e30 [ 114.111370] R10: 0000000000000000 R11: ffff8880070f5498 R12: dffffc0000000000 [ 114.111887] R13: 0000000000000014 R14: ffff88806cf313e8 R15: dffffc0000000000 [ 114.112405] FS: 00007f6c1c71b700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 114.112989] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.113413] CR2: 0000001b2cf22000 CR3: 000000000e0b5000 CR4: 0000000000350ef0 [ 114.113961] Call Trace: [ 114.114155] [ 114.114322] ? __pfx_perf_tp_event+0x10/0x10 [ 114.114657] ? trace_pelt_se_tp+0xdf/0x130 [ 114.114974] ? place_entity+0x300/0x410 [ 114.115272] ? lock_acquire+0x18c/0x2f0 [ 114.115571] ? update_cfs_group+0x11d/0x260 [ 114.115893] ? lock_release+0x1c7/0x290 [ 114.116192] ? run_posix_cpu_timers+0x160/0x7d0 [ 114.116543] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 114.116913] ? sched_balance_trigger+0x1ac/0xcb0 [ 114.117274] ? sched_tick+0x27c/0x6c0 [ 114.117584] ? do_raw_spin_lock+0x123/0x260 [ 114.117953] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 114.118330] ? perf_trace_run_bpf_submit+0xef/0x180 [ 114.118730] perf_trace_run_bpf_submit+0xef/0x180 [ 114.119120] perf_trace_preemptirq_template+0x259/0x430 [ 114.119542] ? read_tsc+0x9/0x20 [ 114.119824] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 114.120287] ? clockevents_program_event+0x135/0x360 [ 114.120696] ? tick_program_event+0xac/0x140 [ 114.121048] ? handle_softirqs+0x16e/0x770 [ 114.121391] trace_irq_enable.constprop.0+0xa6/0x100 [ 114.121806] trace_hardirqs_on+0x26/0x40 [ 114.122139] handle_softirqs+0x16e/0x770 [ 114.122474] __irq_exit_rcu+0xc4/0x100 [ 114.122795] irq_exit_rcu+0x9/0x20 [ 114.123077] sysvec_apic_timer_interrupt+0x70/0x80 [ 114.123473] [ 114.123653] [ 114.123839] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 114.124252] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 114.124625] Code: 38 00 85 db 0f 84 21 01 00 00 e8 09 a6 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 57 a1 38 00 48 85 db 0f 84 17 01 00 00 e9 a5 38 00 31 ff 65 8b 1d 60 2f 49 06 81 e3 ff ff ff 7f 89 de [ 114.126074] RSP: 0018:ffff88804569ff28 EFLAGS: 00000246 [ 114.126492] RAX: 0000000000000001 RBX: ffff888043fe3700 RCX: ffffffff817c3ab6 [ 114.127051] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 114.127614] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 114.128174] R10: ffffffff8643b457 R11: 0000000000000001 R12: ffff888043fe3700 [ 114.128729] R13: 0000000000000000 R14: dffffc0020000032 R15: 0000000000000000 [ 114.129297] ? trace_irq_enable.constprop.0+0x26/0x100 [ 114.129710] ? make_task_dead+0x214/0x3b0 [ 114.130066] ? make_task_dead+0x214/0x3b0 [ 114.130399] ? do_syscall_64+0xbf/0x360 [ 114.130714] rewind_stack_and_make_dead+0x16/0x20 [ 114.131107] RIP: 0033:0x7f6c1f1a5b19 [ 114.131403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 114.132818] RSP: 002b:00007f6c1c71b218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 114.133414] RAX: ffffffffffffffda RBX: 00007f6c1f2b8f68 RCX: 00007f6c1f1a5b19 [ 114.133999] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6c1f2b8f6c [ 114.134558] RBP: 00007f6c1f2b8f60 R08: 000000000000000e R09: 0000000000000000 [ 114.135117] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f6c1f2b8f6c [ 114.135679] R13: 00007ffeaaf70bff R14: 00007f6c1c71b300 R15: 0000000000022000 [ 114.136238] [ 114.136425] Modules linked in: [ 114.136686] ---[ end trace 0000000000000000 ]--- [ 114.137053] RIP: 0010:perf_tp_event+0x175/0xe70 [ 114.137427] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 114.138858] RSP: 0018:ffff88804569f780 EFLAGS: 00010012 [ 114.139275] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90009845000 [ 114.139831] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 114.140393] RBP: ffff88804569f9f0 R08: ffff88806cf31340 R09: ffffe8ffffd15e30 [ 114.140951] R10: 0000000000000000 R11: ffff88806cf37018 R12: dffffc0000000000 [ 114.141505] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 114.142086] FS: 00007f6c1c71b700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 114.142715] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.143174] CR2: 0000001b2cf22000 CR3: 000000000e0b5000 CR4: 0000000000350ef0 [ 114.143735] Kernel panic - not syncing: Fatal exception in interrupt [ 114.144449] Kernel Offset: disabled [ 114.144741] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 09:09:38 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88806cf3c300 RCX=ffffffff816880fc RDX=ffff888007321b80 RSI=ffffffff816880d6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff8880172df6f8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=1ffff1100d9c6bb1 R12=ffffed100d9e7861 R13=ffff88806cf3c308 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff816880d8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555585757400 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1c5a065018 CR3=0000000036afe000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000078 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff88804569f0d8 R8 =0000000000000000 R9 =ffffed10016f7046 R10=0000000000000078 R11=30376578302f4952 R12=0000000000000078 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0 RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6c1c71b700 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2cf22000 CR3=000000000e0b5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000