Warning: Permanently added '[localhost]:5077' (ECDSA) to the list of known hosts. 2025/09/01 09:46:06 fuzzer started 2025/09/01 09:46:06 dialing manager at localhost:35473 syzkaller login: [ 51.143484] cgroup: Unknown subsys name 'net' [ 51.289599] cgroup: Unknown subsys name 'cpuset' [ 51.325803] cgroup: Unknown subsys name 'rlimit' 2025/09/01 09:46:17 syscalls: 2214 2025/09/01 09:46:17 code coverage: enabled 2025/09/01 09:46:17 comparison tracing: enabled 2025/09/01 09:46:17 extra coverage: enabled 2025/09/01 09:46:17 setuid sandbox: enabled 2025/09/01 09:46:17 namespace sandbox: enabled 2025/09/01 09:46:17 Android sandbox: enabled 2025/09/01 09:46:17 fault injection: enabled 2025/09/01 09:46:17 leak checking: enabled 2025/09/01 09:46:17 net packet injection: enabled 2025/09/01 09:46:17 net device setup: enabled 2025/09/01 09:46:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 09:46:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 09:46:17 USB emulation: enabled 2025/09/01 09:46:17 hci packet injection: enabled 2025/09/01 09:46:17 wifi device emulation: enabled 2025/09/01 09:46:17 802.15.4 emulation: enabled 2025/09/01 09:46:18 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 09:46:18 fetching corpus: 50, signal 22275/25717 (executing program) 2025/09/01 09:46:18 fetching corpus: 100, signal 34889/39564 (executing program) 2025/09/01 09:46:18 fetching corpus: 150, signal 48198/53796 (executing program) 2025/09/01 09:46:18 fetching corpus: 200, signal 52265/59027 (executing program) 2025/09/01 09:46:18 fetching corpus: 250, signal 56408/64167 (executing program) 2025/09/01 09:46:18 fetching corpus: 300, signal 61521/70121 (executing program) 2025/09/01 09:46:18 fetching corpus: 350, signal 63727/73362 (executing program) 2025/09/01 09:46:18 fetching corpus: 400, signal 66675/77191 (executing program) 2025/09/01 09:46:18 fetching corpus: 450, signal 69644/80989 (executing program) 2025/09/01 09:46:19 fetching corpus: 500, signal 72573/84636 (executing program) 2025/09/01 09:46:19 fetching corpus: 550, signal 76217/88827 (executing program) 2025/09/01 09:46:19 fetching corpus: 600, signal 79208/92411 (executing program) 2025/09/01 09:46:19 fetching corpus: 650, signal 82072/95728 (executing program) 2025/09/01 09:46:19 fetching corpus: 700, signal 84667/98828 (executing program) 2025/09/01 09:46:19 fetching corpus: 750, signal 87345/101915 (executing program) 2025/09/01 09:46:19 fetching corpus: 800, signal 88823/103969 (executing program) 2025/09/01 09:46:19 fetching corpus: 850, signal 91873/107233 (executing program) 2025/09/01 09:46:19 fetching corpus: 900, signal 93359/109248 (executing program) 2025/09/01 09:46:19 fetching corpus: 950, signal 95077/111376 (executing program) 2025/09/01 09:46:19 fetching corpus: 1000, signal 97258/113819 (executing program) 2025/09/01 09:46:20 fetching corpus: 1050, signal 99012/115894 (executing program) 2025/09/01 09:46:20 fetching corpus: 1100, signal 99873/117283 (executing program) 2025/09/01 09:46:20 fetching corpus: 1150, signal 102157/119650 (executing program) 2025/09/01 09:46:20 fetching corpus: 1200, signal 103716/121437 (executing program) 2025/09/01 09:46:20 fetching corpus: 1250, signal 104942/122965 (executing program) 2025/09/01 09:46:20 fetching corpus: 1300, signal 106258/124545 (executing program) 2025/09/01 09:46:20 fetching corpus: 1350, signal 107072/125773 (executing program) 2025/09/01 09:46:20 fetching corpus: 1400, signal 108882/127567 (executing program) 2025/09/01 09:46:20 fetching corpus: 1450, signal 109747/128786 (executing program) 2025/09/01 09:46:20 fetching corpus: 1500, signal 110785/130112 (executing program) 2025/09/01 09:46:20 fetching corpus: 1550, signal 112306/131700 (executing program) 2025/09/01 09:46:21 fetching corpus: 1600, signal 113407/132947 (executing program) 2025/09/01 09:46:21 fetching corpus: 1650, signal 114447/134120 (executing program) 2025/09/01 09:46:21 fetching corpus: 1700, signal 115497/135289 (executing program) 2025/09/01 09:46:21 fetching corpus: 1750, signal 116618/136459 (executing program) 2025/09/01 09:46:21 fetching corpus: 1800, signal 117811/137646 (executing program) 2025/09/01 09:46:21 fetching corpus: 1850, signal 118599/138658 (executing program) 2025/09/01 09:46:21 fetching corpus: 1900, signal 119250/139506 (executing program) 2025/09/01 09:46:21 fetching corpus: 1950, signal 120439/140627 (executing program) 2025/09/01 09:46:21 fetching corpus: 2000, signal 121842/141796 (executing program) 2025/09/01 09:46:22 fetching corpus: 2050, signal 122843/142817 (executing program) 2025/09/01 09:46:22 fetching corpus: 2100, signal 123645/143655 (executing program) 2025/09/01 09:46:22 fetching corpus: 2150, signal 124833/144661 (executing program) 2025/09/01 09:46:22 fetching corpus: 2200, signal 126180/145726 (executing program) 2025/09/01 09:46:22 fetching corpus: 2250, signal 126732/146403 (executing program) 2025/09/01 09:46:22 fetching corpus: 2300, signal 127516/147115 (executing program) 2025/09/01 09:46:22 fetching corpus: 2350, signal 128589/148007 (executing program) 2025/09/01 09:46:22 fetching corpus: 2400, signal 129569/148776 (executing program) 2025/09/01 09:46:22 fetching corpus: 2450, signal 132098/150092 (executing program) 2025/09/01 09:46:22 fetching corpus: 2500, signal 132912/150781 (executing program) 2025/09/01 09:46:23 fetching corpus: 2550, signal 133607/151415 (executing program) 2025/09/01 09:46:23 fetching corpus: 2600, signal 134290/151994 (executing program) 2025/09/01 09:46:23 fetching corpus: 2650, signal 135021/152581 (executing program) 2025/09/01 09:46:23 fetching corpus: 2700, signal 135595/153081 (executing program) 2025/09/01 09:46:23 fetching corpus: 2750, signal 136704/153760 (executing program) 2025/09/01 09:46:23 fetching corpus: 2800, signal 137577/154337 (executing program) 2025/09/01 09:46:23 fetching corpus: 2850, signal 138524/154922 (executing program) 2025/09/01 09:46:23 fetching corpus: 2900, signal 139367/155421 (executing program) 2025/09/01 09:46:23 fetching corpus: 2950, signal 140025/155845 (executing program) 2025/09/01 09:46:24 fetching corpus: 3000, signal 140761/156271 (executing program) 2025/09/01 09:46:24 fetching corpus: 3050, signal 141823/156752 (executing program) 2025/09/01 09:46:24 fetching corpus: 3100, signal 142675/157247 (executing program) 2025/09/01 09:46:24 fetching corpus: 3150, signal 143400/157654 (executing program) 2025/09/01 09:46:24 fetching corpus: 3200, signal 144185/158030 (executing program) 2025/09/01 09:46:24 fetching corpus: 3250, signal 144631/158345 (executing program) 2025/09/01 09:46:24 fetching corpus: 3300, signal 145288/158734 (executing program) 2025/09/01 09:46:24 fetching corpus: 3350, signal 146560/159153 (executing program) 2025/09/01 09:46:24 fetching corpus: 3400, signal 147273/159470 (executing program) 2025/09/01 09:46:25 fetching corpus: 3450, signal 147863/159713 (executing program) 2025/09/01 09:46:25 fetching corpus: 3500, signal 148206/159961 (executing program) 2025/09/01 09:46:25 fetching corpus: 3550, signal 148775/160194 (executing program) 2025/09/01 09:46:25 fetching corpus: 3600, signal 149325/160404 (executing program) 2025/09/01 09:46:25 fetching corpus: 3650, signal 149672/160590 (executing program) 2025/09/01 09:46:25 fetching corpus: 3700, signal 150077/160775 (executing program) 2025/09/01 09:46:25 fetching corpus: 3750, signal 150810/160955 (executing program) 2025/09/01 09:46:25 fetching corpus: 3800, signal 151192/161089 (executing program) 2025/09/01 09:46:25 fetching corpus: 3850, signal 151761/161225 (executing program) 2025/09/01 09:46:25 fetching corpus: 3900, signal 152276/161335 (executing program) 2025/09/01 09:46:26 fetching corpus: 3950, signal 152936/161463 (executing program) 2025/09/01 09:46:26 fetching corpus: 4000, signal 153629/161558 (executing program) 2025/09/01 09:46:26 fetching corpus: 4050, signal 154272/161560 (executing program) 2025/09/01 09:46:26 fetching corpus: 4100, signal 154843/161560 (executing program) 2025/09/01 09:46:26 fetching corpus: 4150, signal 155289/161612 (executing program) 2025/09/01 09:46:26 fetching corpus: 4200, signal 155774/161619 (executing program) 2025/09/01 09:46:26 fetching corpus: 4250, signal 156295/161626 (executing program) 2025/09/01 09:46:26 fetching corpus: 4300, signal 156832/161632 (executing program) 2025/09/01 09:46:26 fetching corpus: 4350, signal 157310/161637 (executing program) 2025/09/01 09:46:26 fetching corpus: 4400, signal 157649/161663 (executing program) 2025/09/01 09:46:27 fetching corpus: 4450, signal 157955/161687 (executing program) 2025/09/01 09:46:27 fetching corpus: 4500, signal 158296/161688 (executing program) 2025/09/01 09:46:27 fetching corpus: 4550, signal 158776/161783 (executing program) 2025/09/01 09:46:27 fetching corpus: 4589, signal 159066/161823 (executing program) 2025/09/01 09:46:27 fetching corpus: 4589, signal 159066/161823 (executing program) 2025/09/01 09:46:29 starting 8 fuzzer processes 09:46:29 executing program 0: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) write$binfmt_script(r0, 0x0, 0x20) fallocate(r0, 0x10, 0x0, 0x7fff) 09:46:29 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x40181, 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) 09:46:29 executing program 7: clock_adjtime(0x0, &(0x7f0000000000)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}) 09:46:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, 0x0) 09:46:29 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xfffffffffffffffd}) 09:46:29 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8fa4, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 09:46:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r0, 0x5411, &(0x7f00000002c0)) [ 73.638664] audit: type=1400 audit(1756719989.508:7): avc: denied { execmem } for pid=276 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:46:29 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6}]}, 0x10) [ 74.957955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.962277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.967417] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.974618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.977777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.981167] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.987815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.991746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.994807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.996559] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.998602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.003937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.009251] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.010418] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.012289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.015681] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.016947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.028474] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.031988] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 75.034801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.036336] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.037650] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.039911] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.044190] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.046596] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.047934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.050604] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 75.056559] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 75.058692] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 75.062643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 75.069988] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 75.071389] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 75.083657] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 75.095840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 75.104612] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 75.105148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 75.115554] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 75.121526] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 75.124936] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 75.128753] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 77.048584] Bluetooth: hci0: command tx timeout [ 77.111640] Bluetooth: hci2: command tx timeout [ 77.112743] Bluetooth: hci1: command tx timeout [ 77.113125] Bluetooth: hci3: command tx timeout [ 77.113703] Bluetooth: hci4: command tx timeout [ 77.176163] Bluetooth: hci5: command tx timeout [ 77.176228] Bluetooth: hci7: command tx timeout [ 77.177302] Bluetooth: hci6: command tx timeout [ 79.095221] Bluetooth: hci0: command tx timeout [ 79.159277] Bluetooth: hci4: command tx timeout [ 79.161325] Bluetooth: hci3: command tx timeout [ 79.161718] Bluetooth: hci1: command tx timeout [ 79.162261] Bluetooth: hci2: command tx timeout [ 79.224142] Bluetooth: hci6: command tx timeout [ 79.224672] Bluetooth: hci5: command tx timeout [ 79.224706] Bluetooth: hci7: command tx timeout [ 81.143138] Bluetooth: hci0: command tx timeout [ 81.207224] Bluetooth: hci3: command tx timeout [ 81.209119] Bluetooth: hci1: command tx timeout [ 81.209152] Bluetooth: hci2: command tx timeout [ 81.209525] Bluetooth: hci4: command tx timeout [ 81.271399] Bluetooth: hci7: command tx timeout [ 81.271828] Bluetooth: hci6: command tx timeout [ 81.273105] Bluetooth: hci5: command tx timeout [ 83.191282] Bluetooth: hci0: command tx timeout [ 83.255152] Bluetooth: hci2: command tx timeout [ 83.255576] Bluetooth: hci4: command tx timeout [ 83.255601] Bluetooth: hci1: command tx timeout [ 83.255960] Bluetooth: hci3: command tx timeout [ 83.319790] Bluetooth: hci5: command tx timeout [ 83.320803] Bluetooth: hci6: command tx timeout [ 83.321229] Bluetooth: hci7: command tx timeout [ 111.685172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.685818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.775021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.775639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.157141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.157768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.282996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.283876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.477599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.479160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.628461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.629100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.722235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.722869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.847856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.848495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.026230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.026843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.132333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.132921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.165292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.165865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.251093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.251710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.339685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.340536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.355007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.355595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.375880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.376533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.454930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.455656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.554854] kernel profiling enabled (shift: 0) 09:47:09 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6}]}, 0x10) 09:47:09 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8fa4, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 09:47:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, 0x0) 09:47:09 executing program 7: clock_adjtime(0x0, &(0x7f0000000000)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}) 09:47:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r0, 0x5411, &(0x7f00000002c0)) 09:47:09 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xfffffffffffffffd}) 09:47:09 executing program 0: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) write$binfmt_script(r0, 0x0, 0x20) fallocate(r0, 0x10, 0x0, 0x7fff) 09:47:09 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x40181, 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) 09:47:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r0, 0x5411, &(0x7f00000002c0)) 09:47:09 executing program 7: clock_adjtime(0x0, &(0x7f0000000000)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}) 09:47:09 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8fa4, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 09:47:09 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xfffffffffffffffd}) 09:47:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, 0x0) 09:47:09 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x40181, 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) 09:47:09 executing program 0: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) write$binfmt_script(r0, 0x0, 0x20) fallocate(r0, 0x10, 0x0, 0x7fff) 09:47:09 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6}]}, 0x10) 09:47:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r0, 0x5411, &(0x7f00000002c0)) 09:47:09 executing program 7: clock_adjtime(0x0, &(0x7f0000000000)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}) 09:47:09 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8fa4, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 09:47:09 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xfffffffffffffffd}) 09:47:09 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x40181, 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) 09:47:09 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6}]}, 0x10) 09:47:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, 0x0) 09:47:09 executing program 0: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) write$binfmt_script(r0, 0x0, 0x20) fallocate(r0, 0x10, 0x0, 0x7fff) 09:47:09 executing program 2: setitimer(0x1, 0x0, &(0x7f00000002c0)) 09:47:09 executing program 3: ioprio_set$pid(0x0, 0xffffffffffffffff, 0x0) 09:47:09 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0bc5310, &(0x7f0000000080)) 09:47:09 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) eventfd2(0x0, 0x0) [ 114.043199] audit: type=1400 audit(1756720029.912:8): avc: denied { open } for pid=3946 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 114.051952] audit: type=1400 audit(1756720029.912:9): avc: denied { kernel } for pid=3946 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 114.059888] syz-executor.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 09:47:09 executing program 7: io_uring_setup(0x7b5c, &(0x7f0000000340)={0x0, 0xd006, 0x8, 0x0, 0x2bb}) socket$inet(0x2, 0x0, 0x0) 09:47:09 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/201) [ 114.115167] kmemleak: Found object by alias at 0x607f1a63d1dc [ 114.115186] CPU: 1 UID: 0 PID: 3954 Comm: syz-executor.6 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 114.115204] Tainted: [W]=WARN [ 114.115208] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 114.115216] Call Trace: [ 114.115220] [ 114.115225] dump_stack_lvl+0xca/0x120 [ 114.115262] __lookup_object+0x94/0xb0 [ 114.115281] delete_object_full+0x27/0x70 [ 114.115298] free_percpu+0x30/0x1160 [ 114.115316] ? arch_uprobe_clear_state+0x16/0x140 [ 114.115337] futex_hash_free+0x38/0xc0 [ 114.115352] mmput+0x2d3/0x390 [ 114.115372] do_exit+0x79d/0x2970 [ 114.115386] ? signal_wake_up_state+0x85/0x120 [ 114.115403] ? zap_other_threads+0x2b9/0x3a0 [ 114.115419] ? __pfx_do_exit+0x10/0x10 [ 114.115432] ? do_group_exit+0x1c3/0x2a0 [ 114.115446] ? lock_release+0xc8/0x290 [ 114.115465] do_group_exit+0xd3/0x2a0 [ 114.115480] __x64_sys_exit_group+0x3e/0x50 [ 114.115498] x64_sys_call+0x18c5/0x18d0 [ 114.115514] do_syscall_64+0xbf/0x360 [ 114.115528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.115540] RIP: 0033:0x7f0fbb7d9b19 [ 114.115549] Code: Unable to access opcode bytes at 0x7f0fbb7d9aef. [ 114.115554] RSP: 002b:00007ffcd70eb8e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 114.115566] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f0fbb7d9b19 [ 114.115574] RDX: 00007f0fbb78c72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 114.115581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 114.115588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.115595] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffcd70eb9d0 [ 114.115611] [ 114.115615] kmemleak: Object (percpu) 0x607f1a63d1d8 (size 8): [ 114.115622] kmemleak: comm "syz-executor.7", pid 3957, jiffies 4294780924 [ 114.115629] kmemleak: min_count = 1 [ 114.115633] kmemleak: count = 0 [ 114.115637] kmemleak: flags = 0x21 [ 114.115641] kmemleak: checksum = 0 [ 114.115645] kmemleak: backtrace: [ 114.115648] pcpu_alloc_noprof+0x87a/0x1170 [ 114.115664] percpu_ref_init+0x37/0x400 [ 114.115676] io_uring_setup+0x44c/0x2000 [ 114.115688] __x64_sys_io_uring_setup+0xc8/0x170 [ 114.115700] do_syscall_64+0xbf/0x360 [ 114.115719] entry_SYSCALL_64_after_hwframe+0x77/0x7f 09:47:10 executing program 2: setitimer(0x1, 0x0, &(0x7f00000002c0)) 09:47:10 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) eventfd2(0x0, 0x0) 09:47:10 executing program 3: ioprio_set$pid(0x0, 0xffffffffffffffff, 0x0) 09:47:10 executing program 5: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.origin\x00') 09:47:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000000c0)=@v3, 0x14, 0x0) 09:47:10 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0bc5310, &(0x7f0000000080)) 09:47:10 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r0, &(0x7f0000008100)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000940)="13", 0x1}], 0x1}}, {{&(0x7f0000000b00)=@isdn, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b80)="0f", 0x1}], 0x1}}], 0x2, 0x0) 09:47:10 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/201) [ 114.245648] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 114.246552] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 114.247136] CPU: 0 UID: 0 PID: 3966 Comm: syz-executor.2 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 114.248650] Tainted: [W]=WARN [ 114.249423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 114.251067] RIP: 0010:perf_tp_event+0x175/0xe70 [ 114.252484] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 114.256019] RSP: 0018:ffff8880430ef600 EFLAGS: 00010212 [ 114.256437] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 114.256997] RDX: ffff888016023700 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 114.257547] RBP: ffff8880430ef870 R08: ffff88806ce31340 R09: ffffe8ffffc151d8 [ 114.258100] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 114.258654] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 114.259209] FS: 00005555690ee400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 114.259847] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.260299] CR2: 00007f49c1f7a547 CR3: 0000000053665000 CR4: 0000000000350ef0 [ 114.260849] Call Trace: [ 114.261056] [ 114.261243] ? __pfx_perf_tp_event+0x10/0x10 [ 114.261600] ? __is_insn_slot_addr+0x140/0x290 [ 114.261970] ? kernel_text_address+0x5b/0xc0 [ 114.262326] ? __lock_acquire+0x694/0x1b70 [ 114.262663] ? __rmqueue_pcplist+0x1f3/0x10f0 [ 114.263025] ? find_held_lock+0x2b/0x80 [ 114.263349] ? perf_trace_run_bpf_submit+0xef/0x180 [ 114.263749] ? kasan_unpoison+0x27/0x60 [ 114.264071] ? __kasan_unpoison_pages+0x2f/0x40 [ 114.264442] perf_trace_run_bpf_submit+0xef/0x180 [ 114.264828] perf_trace_lock+0x337/0x5d0 [ 114.265153] ? __pfx_perf_trace_lock+0x10/0x10 [ 114.265519] ? lock_acquire+0x15e/0x2f0 [ 114.265836] ? futex_ref_get+0x48/0x300 [ 114.266147] ? futex_ref_get+0x114/0x300 [ 114.266466] ? futex_hash+0x15c/0x390 [ 114.266771] lock_release+0x1ab/0x290 [ 114.267073] ? futex_hash+0x15c/0x390 [ 114.267372] futex_ref_get+0x119/0x300 [ 114.267683] ? futex_hash+0x15c/0x390 [ 114.267989] futex_hash+0x70/0x390 [ 114.268279] futex_wait_setup+0xae/0x550 [ 114.268611] __futex_wait+0x151/0x300 [ 114.268917] ? __pfx___futex_wait+0x10/0x10 [ 114.269263] ? __pfx_futex_wake_mark+0x10/0x10 [ 114.269630] ? __hrtimer_setup+0x1a4/0x2c0 [ 114.269973] ? ktime_add_safe+0x5f/0x70 [ 114.270293] futex_wait+0xde/0x380 [ 114.270582] ? __pfx_futex_wait+0x10/0x10 [ 114.270915] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 114.271274] ? __pfx_perf_trace_lock+0x10/0x10 [ 114.271641] do_futex+0x2ee/0x370 [ 114.271928] ? __pfx_do_futex+0x10/0x10 [ 114.272245] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 114.272659] ? read_tsc+0x9/0x20 [ 114.272938] __x64_sys_futex+0x1c9/0x4d0 [ 114.273262] ? __pfx___x64_sys_futex+0x10/0x10 [ 114.273628] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 114.274040] do_syscall_64+0xbf/0x360 [ 114.274346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.274749] RIP: 0033:0x7fcaaebd7b19 [ 114.275045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 114.276449] RSP: 002b:00007ffc8c4f2588 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 114.277036] RAX: ffffffffffffffda RBX: 0000000000000032 RCX: 00007fcaaebd7b19 [ 114.277583] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcaaeceaf6c [ 114.278135] RBP: 00007fcaaeceaf6c R08: 00007fcaaecc7000 R09: 0000000000000000 [ 114.278684] R10: 00007ffc8c4f2660 R11: 0000000000000246 R12: 000000000001bdd4 [ 114.279235] R13: 00000000000003e8 R14: 00007fcaaeceaf60 R15: 000000000001bdd0 [ 114.279796] [ 114.279984] Modules linked in: [ 114.280265] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 114.281120] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 114.281708] CPU: 0 UID: 0 PID: 3966 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 114.282628] Tainted: [D]=DIE, [W]=WARN [ 114.282928] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 114.283564] RIP: 0010:perf_tp_event+0x175/0xe70 [ 114.283945] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 114.285343] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012 [ 114.285651] kmemleak: Found object by alias at 0x607f1a63d1dc [ 114.285672] CPU: 1 UID: 0 PID: 3963 Comm: syz-executor.6 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 114.285693] Tainted: [D]=DIE, [W]=WARN [ 114.285697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 114.285705] Call Trace: [ 114.285709] [ 114.285714] dump_stack_lvl+0xca/0x120 [ 114.285747] __lookup_object+0x94/0xb0 [ 114.285765] delete_object_full+0x27/0x70 [ 114.285782] free_percpu+0x30/0x1160 [ 114.285800] ? arch_uprobe_clear_state+0x16/0x140 [ 114.285820] futex_hash_free+0x38/0xc0 [ 114.285835] mmput+0x2d3/0x390 [ 114.285854] do_exit+0x79d/0x2970 [ 114.285869] ? signal_wake_up_state+0x85/0x120 [ 114.285885] ? zap_other_threads+0x2b9/0x3a0 [ 114.285901] ? __pfx_do_exit+0x10/0x10 [ 114.285914] ? do_group_exit+0x1c3/0x2a0 [ 114.285928] ? lock_release+0xc8/0x290 [ 114.285945] do_group_exit+0xd3/0x2a0 [ 114.285960] __x64_sys_exit_group+0x3e/0x50 [ 114.285974] x64_sys_call+0x18c5/0x18d0 [ 114.285991] do_syscall_64+0xbf/0x360 [ 114.286004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.286016] RIP: 0033:0x7f0fbb7d9b19 [ 114.286025] Code: Unable to access opcode bytes at 0x7f0fbb7d9aef. [ 114.286031] RSP: 002b:00007ffcd70eb8e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 114.286043] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f0fbb7d9b19 [ 114.286055] RDX: 00007f0fbb78c72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 114.286063] RBP: 0000000000000000 R08: 0000001b2d62779c R09: 0000000000000000 [ 114.286070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.286077] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffcd70eb9d0 [ 114.286090] [ 114.286094] kmemleak: Object (percpu) 0x607f1a63d1d8 (size 8): [ 114.286101] kmemleak: comm "syz-executor.4", pid 3975, jiffies 4294781070 [ 114.286108] kmemleak: min_count = 1 [ 114.286112] kmemleak: count = 0 [ 114.286116] kmemleak: flags = 0x21 [ 114.286120] kmemleak: checksum = 0 [ 114.286124] kmemleak: backtrace: [ 114.286128] pcpu_alloc_noprof+0x87a/0x1170 [ 114.286144] perf_trace_event_init+0x366/0xa10 [ 114.286159] perf_trace_init+0x1a4/0x2f0 [ 114.286172] perf_tp_event_init+0xa6/0x120 [ 114.286189] perf_try_init_event+0x140/0x9f0 [ 114.286204] perf_event_alloc.part.0+0x118e/0x45f0 [ 114.286221] __do_sys_perf_event_open+0x719/0x2c20 [ 114.286235] do_syscall_64+0xbf/0x360 [ 114.286245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.303528] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 114.304086] RDX: ffff888016023700 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 114.304638] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc151d8 [ 114.305188] R10: 0000000000000000 R11: ffff88806ce37018 R12: dffffc0000000000 [ 114.305737] R13: 0000000000000024 R14: ffff88806ce31490 R15: dffffc0000000000 [ 114.306284] FS: 00005555690ee400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 114.306902] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.307354] CR2: 00007f49c1f7a547 CR3: 0000000053665000 CR4: 0000000000350ef0 [ 114.307917] Call Trace: [ 114.308122] [ 114.308301] ? __pfx_perf_tp_event+0x10/0x10 [ 114.308656] ? __lock_acquire+0xc65/0x1b70 [ 114.308995] ? __lock_acquire+0x694/0x1b70 [ 114.309332] ? lock_acquire+0x15e/0x2f0 [ 114.309647] ? perf_trace_run_bpf_submit+0xef/0x180 [ 114.310042] perf_trace_run_bpf_submit+0xef/0x180 [ 114.310428] perf_trace_lock+0x337/0x5d0 [ 114.310751] ? place_entity+0x1c/0x410 [ 114.311060] ? kvm_sched_clock_read+0x16/0x30 [ 114.311420] ? __pfx_perf_trace_lock+0x10/0x10 [ 114.311789] ? check_preempt_wakeup_fair+0x6e/0x950 [ 114.312182] ? sched_ttwu_pending+0x2e0/0x4a0 [ 114.312542] lock_release+0x1ab/0x290 [ 114.312845] ? ttwu_do_activate+0x1a4/0x8a0 [ 114.313188] _raw_spin_unlock+0x16/0x40 [ 114.313506] sched_ttwu_pending+0x2e0/0x4a0 [ 114.313851] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 114.314233] ? flush_tlb_func+0x3eb/0x560 [ 114.314563] __flush_smp_call_function_queue+0x434/0x740 [ 114.314993] __sysvec_call_function_single+0x6d/0x370 [ 114.315404] sysvec_call_function_single+0xa1/0xc0 [ 114.315801] [ 114.315983] [ 114.316163] asm_sysvec_call_function_single+0x1a/0x20 [ 114.316571] RIP: 0010:oops_exit+0x0/0x50 [ 114.316895] Code: 00 3a 00 be ff ff ff ff 48 c7 c7 50 b4 43 86 e8 c6 0f f9 ff 5b e9 50 00 3a 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 36 00 3a 00 8b 1d c0 3d 4f 06 31 ff 89 de e8 57 [ 114.318284] RSP: 0018:ffff8880430ef490 EFLAGS: 00000202 [ 114.318699] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff8139f06f [ 114.319250] RDX: ffff888016023700 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 114.319809] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f12690 [ 114.320360] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880430ef558 [ 114.320907] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000 [ 114.321461] ? add_taint+0x5f/0xd0 [ 114.321746] ? oops_end+0x4a/0xe0 [ 114.322031] oops_end+0x65/0xe0 [ 114.322302] exc_general_protection+0x1a2/0x330 [ 114.322677] asm_exc_general_protection+0x26/0x30 [ 114.323054] RIP: 0010:perf_tp_event+0x175/0xe70 [ 114.323424] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 114.324827] RSP: 0018:ffff8880430ef600 EFLAGS: 00010212 [ 114.325238] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 114.325785] RDX: ffff888016023700 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 114.326338] RBP: ffff8880430ef870 R08: ffff88806ce31340 R09: ffffe8ffffc151d8 [ 114.326889] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 114.327438] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 114.327997] ? perf_tp_event+0x167/0xe70 [ 114.328327] ? __pfx_perf_tp_event+0x10/0x10 [ 114.328682] ? __is_insn_slot_addr+0x140/0x290 [ 114.329049] ? kernel_text_address+0x5b/0xc0 [ 114.329401] ? __lock_acquire+0x694/0x1b70 [ 114.329735] ? __rmqueue_pcplist+0x1f3/0x10f0 [ 114.330098] ? find_held_lock+0x2b/0x80 [ 114.330420] ? perf_trace_run_bpf_submit+0xef/0x180 [ 114.330812] ? kasan_unpoison+0x27/0x60 [ 114.331127] ? __kasan_unpoison_pages+0x2f/0x40 [ 114.331497] perf_trace_run_bpf_submit+0xef/0x180 [ 114.331886] perf_trace_lock+0x337/0x5d0 [ 114.332211] ? __pfx_perf_trace_lock+0x10/0x10 [ 114.332574] ? lock_acquire+0x15e/0x2f0 [ 114.332889] ? futex_ref_get+0x48/0x300 [ 114.333200] ? futex_ref_get+0x114/0x300 [ 114.333516] ? futex_hash+0x15c/0x390 [ 114.333819] lock_release+0x1ab/0x290 [ 114.334124] ? futex_hash+0x15c/0x390 [ 114.334425] futex_ref_get+0x119/0x300 [ 114.334732] ? futex_hash+0x15c/0x390 [ 114.335032] futex_hash+0x70/0x390 [ 114.335316] futex_wait_setup+0xae/0x550 [ 114.335643] __futex_wait+0x151/0x300 [ 114.335955] ? __pfx___futex_wait+0x10/0x10 [ 114.336298] ? __pfx_futex_wake_mark+0x10/0x10 [ 114.336663] ? __hrtimer_setup+0x1a4/0x2c0 [ 114.337001] ? ktime_add_safe+0x5f/0x70 [ 114.337320] futex_wait+0xde/0x380 [ 114.337608] ? __pfx_futex_wait+0x10/0x10 [ 114.337939] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 114.338298] ? __pfx_perf_trace_lock+0x10/0x10 [ 114.338666] do_futex+0x2ee/0x370 [ 114.338946] ? __pfx_do_futex+0x10/0x10 [ 114.339260] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 114.339668] ? read_tsc+0x9/0x20 [ 114.339950] __x64_sys_futex+0x1c9/0x4d0 [ 114.340272] ? __pfx___x64_sys_futex+0x10/0x10 [ 114.340636] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 114.341048] do_syscall_64+0xbf/0x360 [ 114.341350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.341750] RIP: 0033:0x7fcaaebd7b19 [ 114.342043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 114.343439] RSP: 002b:00007ffc8c4f2588 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 114.344030] RAX: ffffffffffffffda RBX: 0000000000000032 RCX: 00007fcaaebd7b19 [ 114.344580] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcaaeceaf6c [ 114.345129] RBP: 00007fcaaeceaf6c R08: 00007fcaaecc7000 R09: 0000000000000000 [ 114.345678] R10: 00007ffc8c4f2660 R11: 0000000000000246 R12: 000000000001bdd4 [ 114.346229] R13: 00000000000003e8 R14: 00007fcaaeceaf60 R15: 000000000001bdd0 [ 114.346788] [ 114.346978] Modules linked in: [ 114.347240] ---[ end trace 0000000000000000 ]--- [ 114.347611] RIP: 0010:perf_tp_event+0x175/0xe70 [ 114.347992] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 114.349434] RSP: 0018:ffff8880430ef600 EFLAGS: 00010212 [ 114.349855] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 114.350414] RDX: ffff888016023700 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 114.350975] RBP: ffff8880430ef870 R08: ffff88806ce31340 R09: ffffe8ffffc151d8 [ 114.351532] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 114.352095] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 114.352655] FS: 00005555690ee400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 114.353285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.353743] CR2: 00007f49c1f7a547 CR3: 0000000053665000 CR4: 0000000000350ef0 [ 114.354305] Kernel panic - not syncing: Fatal exception in interrupt [ 115.399057] Shutting down cpus with NMI [ 115.399576] Kernel Offset: disabled [ 115.399871] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 09:47:10 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff828e5070 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff8880430eef00 R8 =0000000000000000 R9 =ffffed10013e6046 R10=00000000000fe503 R11=30376578302f4952 R12=0000000000000823 R13=0000000000000020 R14=fffffbfff10e52a2 R15=dffffc0000000000 RIP=ffffffff828e50c5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555690ee400 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe1900000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f49c1f7a547 CR3=0000000053665000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fcaaecbe7c000007fcaaecbe7c8 XMM02=00007fcaaecbe7e000007fcaaecbe7c0 XMM03=00007fcaaecbe7c800007fcaaecbe7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000000044b4 RBX=ffff88806ce3de20 RCX=ffffc90000fd9000 RDX=0000000000040000 RSI=ffffffff816880d6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88804385f8d8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=1ffff1100d9e6bb1 R12=ffffed100d9c7bc5 R13=ffff88806ce3de28 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff816880d8 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fcaac14d700 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcaaeceb018 CR3=0000000053665000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fcaaecbe7c000007fcaaecbe7c8 XMM02=00007fcaaecbe7e000007fcaaecbe7c0 XMM03=00007fcaaecbe7c800007fcaaecbe7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000