Warning: Permanently added '[localhost]:25172' (ECDSA) to the list of known hosts. 2025/09/01 09:25:10 fuzzer started 2025/09/01 09:25:11 dialing manager at localhost:35473 syzkaller login: [ 51.801659] cgroup: Unknown subsys name 'net' [ 52.082166] cgroup: Unknown subsys name 'cpuset' [ 52.114841] cgroup: Unknown subsys name 'rlimit' 2025/09/01 09:25:21 syscalls: 2214 2025/09/01 09:25:21 code coverage: enabled 2025/09/01 09:25:21 comparison tracing: enabled 2025/09/01 09:25:21 extra coverage: enabled 2025/09/01 09:25:21 setuid sandbox: enabled 2025/09/01 09:25:21 namespace sandbox: enabled 2025/09/01 09:25:21 Android sandbox: enabled 2025/09/01 09:25:21 fault injection: enabled 2025/09/01 09:25:21 leak checking: enabled 2025/09/01 09:25:21 net packet injection: enabled 2025/09/01 09:25:21 net device setup: enabled 2025/09/01 09:25:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 09:25:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 09:25:21 USB emulation: enabled 2025/09/01 09:25:21 hci packet injection: enabled 2025/09/01 09:25:21 wifi device emulation: enabled 2025/09/01 09:25:21 802.15.4 emulation: enabled 2025/09/01 09:25:21 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 09:25:22 fetching corpus: 48, signal 29308/32518 (executing program) 2025/09/01 09:25:22 fetching corpus: 98, signal 41910/46223 (executing program) 2025/09/01 09:25:22 fetching corpus: 148, signal 47293/52789 (executing program) 2025/09/01 09:25:22 fetching corpus: 198, signal 53459/59898 (executing program) 2025/09/01 09:25:22 fetching corpus: 248, signal 57794/65197 (executing program) 2025/09/01 09:25:22 fetching corpus: 298, signal 63802/71913 (executing program) 2025/09/01 09:25:22 fetching corpus: 348, signal 67959/76777 (executing program) 2025/09/01 09:25:22 fetching corpus: 398, signal 71863/81297 (executing program) 2025/09/01 09:25:23 fetching corpus: 448, signal 75372/85358 (executing program) 2025/09/01 09:25:23 fetching corpus: 498, signal 78149/88753 (executing program) 2025/09/01 09:25:23 fetching corpus: 548, signal 80238/91477 (executing program) 2025/09/01 09:25:23 fetching corpus: 597, signal 81690/93583 (executing program) 2025/09/01 09:25:23 fetching corpus: 647, signal 84633/96914 (executing program) 2025/09/01 09:25:23 fetching corpus: 697, signal 87556/100080 (executing program) 2025/09/01 09:25:23 fetching corpus: 747, signal 89338/102286 (executing program) 2025/09/01 09:25:23 fetching corpus: 797, signal 90744/104181 (executing program) 2025/09/01 09:25:23 fetching corpus: 847, signal 92543/106379 (executing program) 2025/09/01 09:25:23 fetching corpus: 897, signal 93677/107970 (executing program) 2025/09/01 09:25:24 fetching corpus: 947, signal 95470/110073 (executing program) 2025/09/01 09:25:24 fetching corpus: 997, signal 97740/112416 (executing program) 2025/09/01 09:25:24 fetching corpus: 1047, signal 99234/114158 (executing program) 2025/09/01 09:25:24 fetching corpus: 1097, signal 100689/115854 (executing program) 2025/09/01 09:25:24 fetching corpus: 1147, signal 101924/117338 (executing program) 2025/09/01 09:25:24 fetching corpus: 1197, signal 103820/119263 (executing program) 2025/09/01 09:25:24 fetching corpus: 1247, signal 105122/120793 (executing program) 2025/09/01 09:25:24 fetching corpus: 1297, signal 107048/122660 (executing program) 2025/09/01 09:25:24 fetching corpus: 1347, signal 109101/124525 (executing program) 2025/09/01 09:25:25 fetching corpus: 1397, signal 110240/125792 (executing program) 2025/09/01 09:25:25 fetching corpus: 1447, signal 111623/127157 (executing program) 2025/09/01 09:25:25 fetching corpus: 1497, signal 112885/128438 (executing program) 2025/09/01 09:25:25 fetching corpus: 1547, signal 114094/129577 (executing program) 2025/09/01 09:25:25 fetching corpus: 1597, signal 115643/130981 (executing program) 2025/09/01 09:25:25 fetching corpus: 1647, signal 116972/132160 (executing program) 2025/09/01 09:25:25 fetching corpus: 1697, signal 117715/133045 (executing program) 2025/09/01 09:25:25 fetching corpus: 1747, signal 118583/133948 (executing program) 2025/09/01 09:25:26 fetching corpus: 1797, signal 119483/134834 (executing program) 2025/09/01 09:25:26 fetching corpus: 1847, signal 120462/135700 (executing program) 2025/09/01 09:25:26 fetching corpus: 1897, signal 121094/136380 (executing program) 2025/09/01 09:25:26 fetching corpus: 1947, signal 122415/137391 (executing program) 2025/09/01 09:25:26 fetching corpus: 1997, signal 123325/138182 (executing program) 2025/09/01 09:25:26 fetching corpus: 2047, signal 124196/138912 (executing program) 2025/09/01 09:25:26 fetching corpus: 2097, signal 125219/139748 (executing program) 2025/09/01 09:25:26 fetching corpus: 2147, signal 126442/140638 (executing program) 2025/09/01 09:25:26 fetching corpus: 2197, signal 127151/141224 (executing program) 2025/09/01 09:25:26 fetching corpus: 2247, signal 127635/141755 (executing program) 2025/09/01 09:25:27 fetching corpus: 2297, signal 128735/142480 (executing program) 2025/09/01 09:25:27 fetching corpus: 2347, signal 129797/143186 (executing program) 2025/09/01 09:25:27 fetching corpus: 2397, signal 130836/143831 (executing program) 2025/09/01 09:25:27 fetching corpus: 2447, signal 131505/144314 (executing program) 2025/09/01 09:25:27 fetching corpus: 2497, signal 132759/144939 (executing program) 2025/09/01 09:25:27 fetching corpus: 2547, signal 133320/145353 (executing program) 2025/09/01 09:25:27 fetching corpus: 2597, signal 134305/145858 (executing program) 2025/09/01 09:25:27 fetching corpus: 2647, signal 135342/146329 (executing program) 2025/09/01 09:25:27 fetching corpus: 2697, signal 135842/146683 (executing program) 2025/09/01 09:25:28 fetching corpus: 2747, signal 136636/147093 (executing program) 2025/09/01 09:25:28 fetching corpus: 2797, signal 137248/147433 (executing program) 2025/09/01 09:25:28 fetching corpus: 2847, signal 137944/147790 (executing program) 2025/09/01 09:25:28 fetching corpus: 2897, signal 138595/148203 (executing program) 2025/09/01 09:25:28 fetching corpus: 2947, signal 139173/148472 (executing program) 2025/09/01 09:25:28 fetching corpus: 2997, signal 139866/148777 (executing program) 2025/09/01 09:25:28 fetching corpus: 3047, signal 140574/149071 (executing program) 2025/09/01 09:25:28 fetching corpus: 3097, signal 141087/149285 (executing program) 2025/09/01 09:25:28 fetching corpus: 3147, signal 141895/149519 (executing program) 2025/09/01 09:25:28 fetching corpus: 3197, signal 142804/149748 (executing program) 2025/09/01 09:25:29 fetching corpus: 3247, signal 143479/149952 (executing program) 2025/09/01 09:25:29 fetching corpus: 3297, signal 143934/150086 (executing program) 2025/09/01 09:25:29 fetching corpus: 3347, signal 145757/150385 (executing program) 2025/09/01 09:25:29 fetching corpus: 3397, signal 146589/150510 (executing program) 2025/09/01 09:25:29 fetching corpus: 3447, signal 147370/150616 (executing program) 2025/09/01 09:25:29 fetching corpus: 3489, signal 148065/150729 (executing program) 2025/09/01 09:25:29 fetching corpus: 3489, signal 148065/150765 (executing program) 2025/09/01 09:25:29 fetching corpus: 3489, signal 148065/150799 (executing program) 2025/09/01 09:25:29 fetching corpus: 3489, signal 148065/150843 (executing program) 2025/09/01 09:25:29 fetching corpus: 3489, signal 148065/150851 (executing program) 2025/09/01 09:25:29 fetching corpus: 3489, signal 148065/150851 (executing program) 2025/09/01 09:25:31 starting 8 fuzzer processes 09:25:31 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) 09:25:31 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@GFS2_LARGE_FH_SIZE={0x20}, 0xfffffffffffffffc, 0x0) 09:25:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x14, r1, 0x1, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) 09:25:32 executing program 5: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/156, 0x9c, 0x0) 09:25:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) 09:25:32 executing program 7: setreuid(0x0, 0xee00) setfsuid(0x0) setresuid(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000780), 0xffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) 09:25:32 executing program 6: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001580), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0) 09:25:32 executing program 4: syz_open_dev$usbmon(&(0x7f0000001400), 0x7, 0x0) [ 72.535073] audit: type=1400 audit(1756718732.146:7): avc: denied { execmem } for pid=269 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 73.778492] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.782954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.791440] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.796995] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.800452] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.831101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.835685] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.838732] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.840176] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.842201] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.845629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.848044] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.854955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.857785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.859326] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.862732] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.869869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.872591] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.875284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.878865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.878916] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.881413] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.894088] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 73.895955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.897857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.901665] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.907193] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.918114] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 73.920457] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 73.928828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 73.933193] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 73.948074] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.949344] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 73.951194] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.958331] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 73.960203] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.965382] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 73.986108] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.989624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 74.002912] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 75.863022] Bluetooth: hci0: command tx timeout [ 75.925687] Bluetooth: hci1: command tx timeout [ 75.926240] Bluetooth: hci4: command tx timeout [ 75.991536] Bluetooth: hci3: command tx timeout [ 75.992051] Bluetooth: hci2: command tx timeout [ 76.056504] Bluetooth: hci6: command tx timeout [ 76.057057] Bluetooth: hci5: command tx timeout [ 76.058062] Bluetooth: hci7: command tx timeout [ 77.910552] Bluetooth: hci0: command tx timeout [ 77.974636] Bluetooth: hci4: command tx timeout [ 77.975039] Bluetooth: hci1: command tx timeout [ 78.038593] Bluetooth: hci3: command tx timeout [ 78.038989] Bluetooth: hci2: command tx timeout [ 78.101611] Bluetooth: hci7: command tx timeout [ 78.102011] Bluetooth: hci5: command tx timeout [ 78.102390] Bluetooth: hci6: command tx timeout [ 79.959637] Bluetooth: hci0: command tx timeout [ 80.022593] Bluetooth: hci4: command tx timeout [ 80.023061] Bluetooth: hci1: command tx timeout [ 80.086554] Bluetooth: hci2: command tx timeout [ 80.087028] Bluetooth: hci3: command tx timeout [ 80.150684] Bluetooth: hci6: command tx timeout [ 80.151097] Bluetooth: hci5: command tx timeout [ 80.152405] Bluetooth: hci7: command tx timeout [ 82.005754] Bluetooth: hci0: command tx timeout [ 82.070174] Bluetooth: hci1: command tx timeout [ 82.070712] Bluetooth: hci4: command tx timeout [ 82.135501] Bluetooth: hci2: command tx timeout [ 82.136042] Bluetooth: hci3: command tx timeout [ 82.197556] Bluetooth: hci7: command tx timeout [ 82.198067] Bluetooth: hci5: command tx timeout [ 82.198590] Bluetooth: hci6: command tx timeout [ 110.420412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.421494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.621957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.622746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.776994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.778682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.932843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.933651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.437312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.437974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.559130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.560291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.642803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.643417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.752657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.753250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.829577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.830201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.921222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.922342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.227533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.228128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.268346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.269134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.285646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.286175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.329614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.330245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.710235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.711265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.749269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.750212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:26:14 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) 09:26:14 executing program 4: setreuid(0x0, 0xee00) setfsuid(0x0) setresuid(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000780), 0xffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) 09:26:14 executing program 5: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/156, 0x9c, 0x0) 09:26:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) 09:26:14 executing program 6: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001580), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0) 09:26:14 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@GFS2_LARGE_FH_SIZE={0x20}, 0xfffffffffffffffc, 0x0) 09:26:14 executing program 7: setreuid(0x0, 0xee00) setfsuid(0x0) setresuid(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000780), 0xffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) 09:26:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x14, r1, 0x1, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) 09:26:14 executing program 6: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001580), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0) 09:26:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x14, r1, 0x1, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) 09:26:14 executing program 4: setreuid(0x0, 0xee00) setfsuid(0x0) setresuid(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000780), 0xffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) 09:26:14 executing program 7: setreuid(0x0, 0xee00) setfsuid(0x0) setresuid(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000780), 0xffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) 09:26:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) 09:26:14 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) 09:26:14 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@GFS2_LARGE_FH_SIZE={0x20}, 0xfffffffffffffffc, 0x0) 09:26:14 executing program 5: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/156, 0x9c, 0x0) 09:26:14 executing program 6: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001580), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0) 09:26:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) 09:26:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x14, r1, 0x1, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) 09:26:14 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) 09:26:14 executing program 7: setreuid(0x0, 0xee00) setfsuid(0x0) setresuid(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000780), 0xffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) 09:26:14 executing program 5: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/156, 0x9c, 0x0) 09:26:14 executing program 4: setreuid(0x0, 0xee00) setfsuid(0x0) setresuid(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000780), 0xffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) 09:26:14 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@GFS2_LARGE_FH_SIZE={0x20}, 0xfffffffffffffffc, 0x0) 09:26:14 executing program 6: setreuid(0x0, 0xee00) setfsuid(0x0) setresuid(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000780), 0xffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) 09:26:14 executing program 7: setreuid(0x0, 0xee00) setfsuid(0x0) setresuid(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000780), 0xffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) 09:26:14 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 09:26:15 executing program 6: setreuid(0x0, 0xee00) setfsuid(0x0) setresuid(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000780), 0xffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) 09:26:15 executing program 7: setreuid(0x0, 0xee00) setfsuid(0x0) setresuid(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000780), 0xffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) 09:26:15 executing program 5: openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x6880, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) openat$cdrom(0xffffffffffffff9c, 0x0, 0x800, 0x0) 09:26:15 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fremovexattr(0xffffffffffffffff, 0x0) 09:26:15 executing program 3: creat(&(0x7f00000003c0)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200801, 0x0) 09:26:15 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) syz_emit_ethernet(0x6c, &(0x7f00000003c0)=ANY=[], 0x0) 09:26:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000001800)=@req={0x8000, 0x9}, 0x10) 09:26:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) 09:26:15 executing program 6: setreuid(0x0, 0xee00) setfsuid(0x0) setresuid(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000780), 0xffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) 09:26:15 executing program 7: setreuid(0x0, 0xee00) setfsuid(0x0) setresuid(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000780), 0xffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) 09:26:15 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x8905, &(0x7f0000000000)) 09:26:15 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) [ 115.569727] audit: type=1400 audit(1756718775.175:8): avc: denied { open } for pid=3963 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 115.574771] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI [ 115.576413] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 115.577660] CPU: 0 UID: 60928 PID: 3966 Comm: syz-executor.7 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 115.580334] Tainted: [W]=WARN [ 115.581042] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 115.585776] RIP: 0010:perf_tp_event+0x175/0xe70 [ 115.587430] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 115.590043] RSP: 0018:ffff888046087800 EFLAGS: 00010212 09:26:15 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) [ 115.590819] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90006216000 [ 115.591993] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 115.593017] RBP: ffff888046087a70 R08: ffff88806ce31340 R09: ffffe8ffffc162a8 [ 115.594046] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 115.595067] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 115.596104] FS: 00007f3cbb7aa700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 115.597257] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.598096] CR2: 00007fbdf8bd3f64 CR3: 000000004501d000 CR4: 0000000000350ef0 [ 115.599127] Call Trace: [ 115.599520] [ 115.599857] ? __mutex_add_waiter+0x202/0x220 [ 115.600547] ? __pfx_perf_tp_event+0x10/0x10 [ 115.601221] ? perf_trace_lock+0xb5/0x5d0 [ 115.601836] ? __mutex_add_waiter+0x202/0x220 [ 115.602501] ? __pfx_perf_trace_lock+0x10/0x10 [ 115.603175] ? lock_acquire+0x15e/0x2f0 [ 115.603760] ? __is_insn_slot_addr+0x2e/0x290 [ 115.604462] ? find_held_lock+0x2b/0x80 [ 115.605052] ? __is_insn_slot_addr+0x136/0x290 [ 115.605729] ? lock_release+0xc8/0x290 [ 115.606303] ? __is_insn_slot_addr+0x140/0x290 [ 115.606987] ? perf_trace_run_bpf_submit+0xef/0x180 [ 115.607715] ? arch_stack_walk+0x9c/0xf0 [ 115.608319] perf_trace_run_bpf_submit+0xef/0x180 [ 115.609029] perf_trace_lock+0x337/0x5d0 [ 115.609633] ? __pfx_perf_trace_lock+0x10/0x10 [ 115.610305] ? lock_acquire+0x15e/0x2f0 [ 115.610889] ? futex_ref_get+0x48/0x300 [ 115.611484] ? futex_ref_get+0x114/0x300 [ 115.612077] ? futex_hash+0x15c/0x390 [ 115.612634] lock_release+0x1ab/0x290 [ 115.613199] ? futex_hash+0x15c/0x390 [ 115.613759] futex_ref_get+0x119/0x300 [ 115.614331] ? futex_hash+0x15c/0x390 [ 115.614887] futex_hash+0x70/0x390 [ 115.615415] futex_wake+0x143/0x540 [ 115.615972] ? __pfx_futex_wake+0x10/0x10 [ 115.616585] ? lock_acquire+0x15e/0x2f0 [ 115.617171] ? find_held_lock+0x2b/0x80 [ 115.617773] ? __virt_addr_valid+0x2e8/0x5d0 [ 115.618430] ? lock_release+0xc8/0x290 [ 115.619013] do_futex+0x26d/0x370 [ 115.619537] ? __pfx_do_futex+0x10/0x10 [ 115.620131] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 115.620910] ? __call_rcu_common.constprop.0+0x4c1/0x960 [ 115.621694] ? __create_object+0x59/0x80 [ 115.622304] __x64_sys_futex+0x1c9/0x4d0 [ 115.622909] ? __pfx___x64_sys_futex+0x10/0x10 [ 115.623596] ? __sys_setfsuid+0x2e0/0x390 [ 115.624219] do_syscall_64+0xbf/0x360 [ 115.624785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.625535] RIP: 0033:0x7f3cbe234b19 [ 115.626074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 115.628666] RSP: 002b:00007f3cbb7aa218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.629751] RAX: ffffffffffffffda RBX: 00007f3cbe347f68 RCX: 00007f3cbe234b19 [ 115.630767] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3cbe347f6c [ 115.631791] RBP: 00007f3cbe347f60 R08: 000000000000000e R09: 0000000000000000 [ 115.632830] R10: 000000000000ee00 R11: 0000000000000246 R12: 00007f3cbe347f6c [ 115.633845] R13: 00007ffe282b5f0f R14: 00007f3cbb7aa300 R15: 0000000000022000 [ 115.634882] [ 115.635228] Modules linked in: [ 115.635755] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI [ 115.637354] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 115.638611] CPU: 0 UID: 60928 PID: 3966 Comm: syz-executor.7 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 115.640365] Tainted: [D]=DIE, [W]=WARN [ 115.640919] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 115.642087] RIP: 0010:perf_tp_event+0x175/0xe70 [ 115.642778] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 115.645370] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012 [ 115.646132] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 115.647154] RDX: ffff888046078000 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 115.648175] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc162a8 [ 115.649189] R10: 0000000000000000 R11: ffff88806ce37018 R12: dffffc0000000000 [ 115.650196] R13: 0000000000000024 R14: ffff88806ce31490 R15: dffffc0000000000 [ 115.651214] FS: 00007f3cbb7aa700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 115.652368] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.653203] CR2: 00007fbdf8bd3f64 CR3: 000000004501d000 CR4: 0000000000350ef0 [ 115.654227] Call Trace: [ 115.654609] [ 115.654942] ? __pfx_perf_tp_event+0x10/0x10 [ 115.655600] ? stack_depot_save_flags+0x2c/0xa20 [ 115.656303] ? kasan_save_stack+0x34/0x50 [ 115.656910] ? kasan_save_stack+0x24/0x50 [ 115.657508] ? kasan_save_track+0x14/0x30 [ 115.658110] ? __kasan_save_free_info+0x3a/0x60 [ 115.658787] ? __kasan_slab_free+0x3f/0x50 [ 115.659403] ? kmem_cache_free+0x2a1/0x540 [ 115.660021] ? rcu_core+0x7c8/0x1800 [ 115.660572] ? handle_softirqs+0x1b1/0x770 [ 115.661197] ? __irq_exit_rcu+0xc4/0x100 [ 115.661797] ? irq_exit_rcu+0x9/0x20 [ 115.662340] ? sysvec_apic_timer_interrupt+0x70/0x80 [ 115.663083] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 115.663861] ? lock_acquire+0x5b/0x2f0 [ 115.664446] ? ___pte_offset_map+0x42/0x370 [ 115.665077] ? __pte_offset_map_lock+0x91/0x330 [ 115.665761] ? unmap_page_range+0x7cd/0x36d0 [ 115.666412] ? unmap_single_vma.constprop.0+0x153/0x230 [ 115.667187] ? unmap_vmas+0x1d6/0x430 [ 115.667750] ? exit_mmap+0x181/0xaa0 [ 115.668313] ? mmput+0xd5/0x390 [ 115.668812] ? do_exit+0x79d/0x2970 [ 115.669360] ? kvm_sched_clock_read+0x16/0x30 [ 115.670027] ? sched_clock+0x37/0x60 [ 115.670581] ? sched_clock_cpu+0x6c/0x4e0 [ 115.671196] ? perf_trace_run_bpf_submit+0xef/0x180 [ 115.671934] perf_trace_run_bpf_submit+0xef/0x180 [ 115.672653] perf_trace_lock+0x337/0x5d0 [ 115.673254] ? place_entity+0x300/0x410 [ 115.673840] ? kvm_sched_clock_read+0x16/0x30 [ 115.674508] ? __pfx_perf_trace_lock+0x10/0x10 [ 115.675186] ? check_preempt_wakeup_fair+0x6e/0x950 [ 115.675931] ? sched_ttwu_pending+0x2e0/0x4a0 [ 115.676601] lock_release+0x1ab/0x290 [ 115.677162] ? ttwu_do_activate+0x1a4/0x8a0 [ 115.677802] _raw_spin_unlock+0x16/0x40 [ 115.678390] sched_ttwu_pending+0x2e0/0x4a0 [ 115.679037] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 115.679748] ? flush_tlb_func+0x24d/0x560 [ 115.680369] __flush_smp_call_function_queue+0x434/0x740 [ 115.681172] __sysvec_call_function_single+0x6d/0x370 [ 115.681933] sysvec_call_function_single+0xa1/0xc0 [ 115.682659] [ 115.682996] [ 115.683335] asm_sysvec_call_function_single+0x1a/0x20 [ 115.684101] RIP: 0010:oops_exit+0x0/0x50 [ 115.684706] Code: 00 3a 00 be ff ff ff ff 48 c7 c7 50 b4 43 86 e8 c6 0f f9 ff 5b e9 50 00 3a 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 36 00 3a 00 8b 1d c0 3d 4f 06 31 ff 89 de e8 57 [ 115.687285] RSP: 0018:ffff888046087690 EFLAGS: 00000202 [ 115.688061] RAX: 000000000002c799 RBX: 0000000000000212 RCX: ffffc90006216000 [ 115.689085] RDX: 0000000000040000 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 115.690120] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f12690 [ 115.691137] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888046087758 [ 115.692159] R13: 0000000000000000 R14: dffffc0020000032 R15: 0000000000000000 [ 115.693182] ? oops_end+0x4a/0xe0 [ 115.693709] oops_end+0x65/0xe0 [ 115.694209] exc_general_protection+0x1a2/0x330 [ 115.694903] asm_exc_general_protection+0x26/0x30 [ 115.695598] RIP: 0010:perf_tp_event+0x175/0xe70 [ 115.696317] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 115.698889] RSP: 0018:ffff888046087800 EFLAGS: 00010212 [ 115.699660] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90006216000 [ 115.700725] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 115.701756] RBP: ffff888046087a70 R08: ffff88806ce31340 R09: ffffe8ffffc162a8 [ 115.702779] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 115.703804] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 115.704845] ? perf_tp_event+0x167/0xe70 [ 115.705453] ? __mutex_add_waiter+0x202/0x220 [ 115.706125] ? __pfx_perf_tp_event+0x10/0x10 [ 115.706798] ? perf_trace_lock+0xb5/0x5d0 [ 115.707407] ? __mutex_add_waiter+0x202/0x220 [ 115.708077] ? __pfx_perf_trace_lock+0x10/0x10 [ 115.708753] ? lock_acquire+0x15e/0x2f0 [ 115.709336] ? __is_insn_slot_addr+0x2e/0x290 [ 115.710011] ? find_held_lock+0x2b/0x80 [ 115.710604] ? __is_insn_slot_addr+0x136/0x290 [ 115.711285] ? lock_release+0xc8/0x290 [ 115.711860] ? __is_insn_slot_addr+0x140/0x290 [ 115.712555] ? perf_trace_run_bpf_submit+0xef/0x180 [ 115.713294] ? arch_stack_walk+0x9c/0xf0 [ 115.713892] perf_trace_run_bpf_submit+0xef/0x180 [ 115.714609] perf_trace_lock+0x337/0x5d0 [ 115.715209] ? __pfx_perf_trace_lock+0x10/0x10 [ 115.715903] ? lock_acquire+0x15e/0x2f0 [ 115.716504] ? futex_ref_get+0x48/0x300 [ 115.717088] ? futex_ref_get+0x114/0x300 [ 115.717688] ? futex_hash+0x15c/0x390 [ 115.718253] lock_release+0x1ab/0x290 [ 115.718815] ? futex_hash+0x15c/0x390 [ 115.719379] futex_ref_get+0x119/0x300 [ 115.719964] ? futex_hash+0x15c/0x390 [ 115.720519] futex_hash+0x70/0x390 [ 115.721052] futex_wake+0x143/0x540 [ 115.721598] ? __pfx_futex_wake+0x10/0x10 [ 115.722211] ? lock_acquire+0x15e/0x2f0 [ 115.722804] ? find_held_lock+0x2b/0x80 [ 115.723398] ? __virt_addr_valid+0x2e8/0x5d0 [ 115.724063] ? lock_release+0xc8/0x290 [ 115.724642] do_futex+0x26d/0x370 [ 115.725161] ? __pfx_do_futex+0x10/0x10 [ 115.725744] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 115.726500] ? __call_rcu_common.constprop.0+0x4c1/0x960 [ 115.727287] ? __create_object+0x59/0x80 [ 115.727899] __x64_sys_futex+0x1c9/0x4d0 [ 115.728500] ? __pfx___x64_sys_futex+0x10/0x10 [ 115.729178] ? __sys_setfsuid+0x2e0/0x390 [ 115.729796] do_syscall_64+0xbf/0x360 [ 115.730352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.731111] RIP: 0033:0x7f3cbe234b19 [ 115.731654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 115.734278] RSP: 002b:00007f3cbb7aa218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.735368] RAX: ffffffffffffffda RBX: 00007f3cbe347f68 RCX: 00007f3cbe234b19 [ 115.736414] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3cbe347f6c [ 115.737436] RBP: 00007f3cbe347f60 R08: 000000000000000e R09: 0000000000000000 [ 115.738467] R10: 000000000000ee00 R11: 0000000000000246 R12: 00007f3cbe347f6c [ 115.739482] R13: 00007ffe282b5f0f R14: 00007f3cbb7aa300 R15: 0000000000022000 [ 115.740527] [ 115.740872] Modules linked in: [ 115.741349] ---[ end trace 0000000000000000 ]--- [ 115.742032] RIP: 0010:perf_tp_event+0x175/0xe70 [ 115.742719] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 115.745313] RSP: 0018:ffff888046087800 EFLAGS: 00010212 [ 115.746079] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90006216000 [ 115.747106] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 115.748149] RBP: ffff888046087a70 R08: ffff88806ce31340 R09: ffffe8ffffc162a8 [ 115.749182] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 115.750197] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 115.751228] FS: 00007f3cbb7aa700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 115.752398] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.753238] CR2: 00007fbdf8bd3f64 CR3: 000000004501d000 CR4: 0000000000350ef0 [ 115.754264] Kernel panic - not syncing: Fatal exception in interrupt [ 116.838877] Shutting down cpus with NMI [ 116.839521] Kernel Offset: disabled [ 116.839849] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 09:26:15 Registers: info registers vcpu 0 RAX=000000000000002f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff888046087198 R8 =0000000000000000 R9 =ffffed1001750046 R10=000000000000002f R11=6572617764726148 R12=000000000000002f R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0 RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3cbb7aa700 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbdf8bd3f64 CR3=000000004501d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f3cbe31b7c000007f3cbe31b7c8 XMM02=00007f3cbe31b7e000007f3cbe31b7c0 XMM03=00007f3cbe31b7c800007f3cbe31b7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffea00008008c0 RCX=ffffffff819d036a RDX=ffff888046099b80 RSI=ffffffff819d0378 RDI=0000000000000007 RBP=000000000000002b RSP=ffff888044c2f670 R8 =0000000000000000 R9 =fffff94000100118 R10=0000000000000000 R11=1ffff1100d9e6f7b R12=0000000000000000 R13=00007feb4f492000 R14=ffff888044c2fad0 R15=0000000020023025 RIP=ffffffff819d0378 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe4c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007feb4f4e0e98 CR3=0000000041d0a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000