Warning: Permanently added '[localhost]:36242' (ECDSA) to the list of known hosts.
2025/08/29 09:46:39 fuzzer started
2025/08/29 09:46:39 dialing manager at localhost:43077
syzkaller login: [   52.236518] cgroup: Unknown subsys name 'net'
[   52.299976] cgroup: Unknown subsys name 'cpuset'
[   52.318598] cgroup: Unknown subsys name 'rlimit'
2025/08/29 09:46:51 syscalls: 2214
2025/08/29 09:46:51 code coverage: enabled
2025/08/29 09:46:51 comparison tracing: enabled
2025/08/29 09:46:51 extra coverage: enabled
2025/08/29 09:46:51 setuid sandbox: enabled
2025/08/29 09:46:51 namespace sandbox: enabled
2025/08/29 09:46:51 Android sandbox: enabled
2025/08/29 09:46:51 fault injection: enabled
2025/08/29 09:46:51 leak checking: enabled
2025/08/29 09:46:51 net packet injection: enabled
2025/08/29 09:46:51 net device setup: enabled
2025/08/29 09:46:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/29 09:46:51 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/29 09:46:51 USB emulation: enabled
2025/08/29 09:46:51 hci packet injection: enabled
2025/08/29 09:46:51 wifi device emulation: enabled
2025/08/29 09:46:51 802.15.4 emulation: enabled
2025/08/29 09:46:51 fetching corpus: 0, signal 0/2000 (executing program)
2025/08/29 09:46:51 fetching corpus: 44, signal 14962/18598 (executing program)
2025/08/29 09:46:51 fetching corpus: 86, signal 26256/31297 (executing program)
2025/08/29 09:46:51 fetching corpus: 136, signal 33341/39667 (executing program)
2025/08/29 09:46:52 fetching corpus: 186, signal 44689/51875 (executing program)
2025/08/29 09:46:52 fetching corpus: 236, signal 48659/57010 (executing program)
2025/08/29 09:46:52 fetching corpus: 286, signal 54468/63703 (executing program)
2025/08/29 09:46:52 fetching corpus: 336, signal 61033/70889 (executing program)
2025/08/29 09:46:52 fetching corpus: 386, signal 66212/76704 (executing program)
2025/08/29 09:46:52 fetching corpus: 436, signal 68821/80150 (executing program)
2025/08/29 09:46:52 fetching corpus: 486, signal 73331/85136 (executing program)
2025/08/29 09:46:52 fetching corpus: 536, signal 76407/88874 (executing program)
2025/08/29 09:46:52 fetching corpus: 586, signal 78575/91770 (executing program)
2025/08/29 09:46:53 fetching corpus: 636, signal 82238/95821 (executing program)
2025/08/29 09:46:53 fetching corpus: 686, signal 85603/99628 (executing program)
2025/08/29 09:46:53 fetching corpus: 736, signal 88539/102929 (executing program)
2025/08/29 09:46:53 fetching corpus: 786, signal 89846/104839 (executing program)
2025/08/29 09:46:53 fetching corpus: 836, signal 92189/107536 (executing program)
2025/08/29 09:46:53 fetching corpus: 886, signal 94064/109838 (executing program)
2025/08/29 09:46:53 fetching corpus: 936, signal 95581/111807 (executing program)
2025/08/29 09:46:53 fetching corpus: 986, signal 97464/114058 (executing program)
2025/08/29 09:46:53 fetching corpus: 1035, signal 98298/115451 (executing program)
2025/08/29 09:46:54 fetching corpus: 1085, signal 99986/117453 (executing program)
2025/08/29 09:46:54 fetching corpus: 1135, signal 102083/119715 (executing program)
2025/08/29 09:46:54 fetching corpus: 1185, signal 103645/121487 (executing program)
2025/08/29 09:46:54 fetching corpus: 1234, signal 104729/122948 (executing program)
2025/08/29 09:46:54 fetching corpus: 1284, signal 105883/124461 (executing program)
2025/08/29 09:46:54 fetching corpus: 1333, signal 107224/126029 (executing program)
2025/08/29 09:46:54 fetching corpus: 1383, signal 108227/127423 (executing program)
2025/08/29 09:46:54 fetching corpus: 1433, signal 109538/128906 (executing program)
2025/08/29 09:46:54 fetching corpus: 1482, signal 110737/130329 (executing program)
2025/08/29 09:46:54 fetching corpus: 1532, signal 111810/131674 (executing program)
2025/08/29 09:46:55 fetching corpus: 1582, signal 112882/132919 (executing program)
2025/08/29 09:46:55 fetching corpus: 1632, signal 113905/134133 (executing program)
2025/08/29 09:46:55 fetching corpus: 1681, signal 114785/135223 (executing program)
2025/08/29 09:46:55 fetching corpus: 1731, signal 115871/136401 (executing program)
2025/08/29 09:46:55 fetching corpus: 1781, signal 116814/137488 (executing program)
2025/08/29 09:46:55 fetching corpus: 1831, signal 117910/138703 (executing program)
2025/08/29 09:46:55 fetching corpus: 1881, signal 119622/140143 (executing program)
2025/08/29 09:46:55 fetching corpus: 1931, signal 120804/141271 (executing program)
2025/08/29 09:46:55 fetching corpus: 1980, signal 123384/142988 (executing program)
2025/08/29 09:46:55 fetching corpus: 2029, signal 124394/144002 (executing program)
2025/08/29 09:46:55 fetching corpus: 2079, signal 125324/144912 (executing program)
2025/08/29 09:46:55 fetching corpus: 2129, signal 126175/145867 (executing program)
2025/08/29 09:46:56 fetching corpus: 2179, signal 127416/146907 (executing program)
2025/08/29 09:46:56 fetching corpus: 2229, signal 128469/147748 (executing program)
2025/08/29 09:46:56 fetching corpus: 2279, signal 129574/148652 (executing program)
2025/08/29 09:46:56 fetching corpus: 2329, signal 130270/149381 (executing program)
2025/08/29 09:46:56 fetching corpus: 2379, signal 131254/150156 (executing program)
2025/08/29 09:46:56 fetching corpus: 2429, signal 132140/150870 (executing program)
2025/08/29 09:46:56 fetching corpus: 2479, signal 132772/151479 (executing program)
2025/08/29 09:46:56 fetching corpus: 2529, signal 133365/152018 (executing program)
2025/08/29 09:46:56 fetching corpus: 2579, signal 134342/152865 (executing program)
2025/08/29 09:46:56 fetching corpus: 2628, signal 135131/153535 (executing program)
2025/08/29 09:46:56 fetching corpus: 2677, signal 136081/154149 (executing program)
2025/08/29 09:46:57 fetching corpus: 2726, signal 136711/154679 (executing program)
2025/08/29 09:46:57 fetching corpus: 2776, signal 137762/155303 (executing program)
2025/08/29 09:46:57 fetching corpus: 2826, signal 138725/155935 (executing program)
2025/08/29 09:46:57 fetching corpus: 2876, signal 139812/156489 (executing program)
2025/08/29 09:46:57 fetching corpus: 2926, signal 140593/156997 (executing program)
2025/08/29 09:46:57 fetching corpus: 2976, signal 141217/157421 (executing program)
2025/08/29 09:46:57 fetching corpus: 3026, signal 141706/157738 (executing program)
2025/08/29 09:46:57 fetching corpus: 3076, signal 142565/158184 (executing program)
2025/08/29 09:46:57 fetching corpus: 3124, signal 143309/158619 (executing program)
2025/08/29 09:46:57 fetching corpus: 3174, signal 143879/158990 (executing program)
2025/08/29 09:46:57 fetching corpus: 3224, signal 144585/159350 (executing program)
2025/08/29 09:46:58 fetching corpus: 3274, signal 144941/159627 (executing program)
2025/08/29 09:46:58 fetching corpus: 3324, signal 145639/159932 (executing program)
2025/08/29 09:46:58 fetching corpus: 3374, signal 146250/160261 (executing program)
2025/08/29 09:46:58 fetching corpus: 3424, signal 146653/160523 (executing program)
2025/08/29 09:46:58 fetching corpus: 3474, signal 147209/160859 (executing program)
2025/08/29 09:46:58 fetching corpus: 3524, signal 147736/161124 (executing program)
2025/08/29 09:46:58 fetching corpus: 3574, signal 148174/161324 (executing program)
2025/08/29 09:46:58 fetching corpus: 3624, signal 148737/161528 (executing program)
2025/08/29 09:46:58 fetching corpus: 3674, signal 149240/161752 (executing program)
2025/08/29 09:46:58 fetching corpus: 3724, signal 149779/161925 (executing program)
2025/08/29 09:46:58 fetching corpus: 3774, signal 150280/162150 (executing program)
2025/08/29 09:46:59 fetching corpus: 3824, signal 150741/162326 (executing program)
2025/08/29 09:46:59 fetching corpus: 3874, signal 151279/162455 (executing program)
2025/08/29 09:46:59 fetching corpus: 3924, signal 151799/162459 (executing program)
2025/08/29 09:46:59 fetching corpus: 3974, signal 152630/162462 (executing program)
2025/08/29 09:46:59 fetching corpus: 4024, signal 152956/162586 (executing program)
2025/08/29 09:46:59 fetching corpus: 4074, signal 153472/162599 (executing program)
2025/08/29 09:46:59 fetching corpus: 4124, signal 153988/162675 (executing program)
2025/08/29 09:46:59 fetching corpus: 4174, signal 154559/162696 (executing program)
2025/08/29 09:46:59 fetching corpus: 4224, signal 155297/162700 (executing program)
2025/08/29 09:46:59 fetching corpus: 4274, signal 156011/162728 (executing program)
2025/08/29 09:47:00 fetching corpus: 4324, signal 156534/162728 (executing program)
2025/08/29 09:47:00 fetching corpus: 4374, signal 157049/162739 (executing program)
2025/08/29 09:47:00 fetching corpus: 4424, signal 157700/162746 (executing program)
2025/08/29 09:47:00 fetching corpus: 4474, signal 158167/162766 (executing program)
2025/08/29 09:47:00 fetching corpus: 4524, signal 158614/162781 (executing program)
2025/08/29 09:47:00 fetching corpus: 4574, signal 159051/162812 (executing program)
2025/08/29 09:47:00 fetching corpus: 4623, signal 159676/162820 (executing program)
2025/08/29 09:47:00 fetching corpus: 4673, signal 160051/162869 (executing program)
2025/08/29 09:47:00 fetching corpus: 4723, signal 160656/162871 (executing program)
2025/08/29 09:47:00 fetching corpus: 4753, signal 160790/162871 (executing program)
2025/08/29 09:47:00 fetching corpus: 4753, signal 160790/162871 (executing program)
2025/08/29 09:47:02 starting 8 fuzzer processes
09:47:02 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETLED(r0, 0x4b48, 0x0)

09:47:02 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x154, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}}, 0x0)

09:47:03 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000008700)=[{{&(0x7f0000000000)={0x2, 0x4e64, @dev}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @multicast1}}}], 0x20}}], 0x2, 0x0)

09:47:03 executing program 7:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}}]}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4)

09:47:03 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setresuid(0x0, r1, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(r0, 0x4b4c, &(0x7f0000000140))

09:47:03 executing program 3:
keyctl$setperm(0x5, 0x0, 0xf8ffffff)

[   74.395980] audit: type=1400 audit(1756460823.089:7): avc:  denied  { execmem } for  pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
09:47:03 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
epoll_create(0x8001)

09:47:03 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x22, 0x0, &(0x7f0000000140))

[   75.534940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   75.537115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   75.541759] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   75.548183] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   75.551434] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   75.666641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   75.674879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   75.676709] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   75.678115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   75.678656] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   75.680705] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   75.685294] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   75.687566] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   75.687623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   75.690828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   75.692455] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   75.694809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   75.702585] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   75.705606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   75.736417] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   75.736609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   75.762833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   75.763121] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   75.768610] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   75.778514] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   75.779781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   75.790836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   75.795101] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   75.797077] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   75.798705] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   75.798838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   75.810873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   75.819974] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   75.823305] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   75.830756] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   75.849508] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   75.865983] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   75.875755] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   75.899440] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   75.910488] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   77.628720] Bluetooth: hci0: command tx timeout
[   77.756653] Bluetooth: hci2: command tx timeout
[   77.756697] Bluetooth: hci1: command tx timeout
[   77.758013] Bluetooth: hci3: command tx timeout
[   77.884293] Bluetooth: hci4: command tx timeout
[   77.949515] Bluetooth: hci5: command tx timeout
[   77.951333] Bluetooth: hci6: command tx timeout
[   78.012472] Bluetooth: hci7: command tx timeout
[   79.676398] Bluetooth: hci0: command tx timeout
[   79.804640] Bluetooth: hci3: command tx timeout
[   79.805169] Bluetooth: hci2: command tx timeout
[   79.805619] Bluetooth: hci1: command tx timeout
[   79.933406] Bluetooth: hci4: command tx timeout
[   79.997463] Bluetooth: hci5: command tx timeout
[   79.997894] Bluetooth: hci6: command tx timeout
[   80.061254] Bluetooth: hci7: command tx timeout
[   81.725278] Bluetooth: hci0: command tx timeout
[   81.853439] Bluetooth: hci2: command tx timeout
[   81.854194] Bluetooth: hci3: command tx timeout
[   81.854930] Bluetooth: hci1: command tx timeout
[   81.980312] Bluetooth: hci4: command tx timeout
[   82.044468] Bluetooth: hci5: command tx timeout
[   82.044574] Bluetooth: hci6: command tx timeout
[   82.109377] Bluetooth: hci7: command tx timeout
[   83.773249] Bluetooth: hci0: command tx timeout
[   83.900343] Bluetooth: hci1: command tx timeout
[   83.900377] Bluetooth: hci3: command tx timeout
[   83.901058] Bluetooth: hci2: command tx timeout
[   84.028450] Bluetooth: hci4: command tx timeout
[   84.092336] Bluetooth: hci6: command tx timeout
[   84.093044] Bluetooth: hci5: command tx timeout
[   84.157433] Bluetooth: hci7: command tx timeout
[  112.775982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.776678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.023193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.024567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:47:42 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
epoll_create(0x8001)

09:47:42 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
epoll_create(0x8001)

09:47:42 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
epoll_create(0x8001)

[  113.768800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.770010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:47:42 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x800001a})

[  113.942736] audit: type=1400 audit(1756460862.639:8): avc:  denied  { open } for  pid=3746 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  113.948748] audit: type=1400 audit(1756460862.639:9): avc:  denied  { kernel } for  pid=3746 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  113.961435] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  113.971843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.972429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.998733] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
09:47:42 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x800001a})

[  114.161285] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
09:47:42 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x800001a})

[  114.340462] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
09:47:43 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x22, 0x0, &(0x7f0000000140))

09:47:43 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x800001a})

[  114.467095] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  114.613654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.614291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.730699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.731343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.127328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.127956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.252340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.252954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.451583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.453111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.554157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.554770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.576566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.577139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.664046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.665083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.776545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.777155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.799726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.800347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.889250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.889848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.943111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.943834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:47:44 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETLED(r0, 0x4b48, 0x0)

09:47:44 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setresuid(0x0, r1, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(r0, 0x4b4c, &(0x7f0000000140))

09:47:44 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000008700)=[{{&(0x7f0000000000)={0x2, 0x4e64, @dev}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @multicast1}}}], 0x20}}], 0x2, 0x0)

09:47:44 executing program 7:
sched_rr_get_interval(0x0, &(0x7f0000000000))

09:47:44 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x22, 0x0, &(0x7f0000000140))

09:47:44 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x27, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}})

09:47:44 executing program 3:
keyctl$setperm(0x5, 0x0, 0xf8ffffff)

09:47:44 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x154, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}}, 0x0)

09:47:44 executing program 3:
keyctl$setperm(0x5, 0x0, 0xf8ffffff)

09:47:44 executing program 7:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
ioprio_set$pid(0x1, 0x0, 0x4000)
sendfile(r0, r1, 0x0, 0x68e146a1)

09:47:44 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x27, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}})

09:47:44 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x22, 0x0, &(0x7f0000000140))

09:47:44 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x27, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}})

09:47:44 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000008700)=[{{&(0x7f0000000000)={0x2, 0x4e64, @dev}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @multicast1}}}], 0x20}}], 0x2, 0x0)

09:47:44 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x154, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}}, 0x0)

09:47:44 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setresuid(0x0, r1, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(r0, 0x4b4c, &(0x7f0000000140))

09:47:44 executing program 3:
keyctl$setperm(0x5, 0x0, 0xf8ffffff)

09:47:44 executing program 5:
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x2)

09:47:44 executing program 7:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
ioprio_set$pid(0x1, 0x0, 0x4000)
sendfile(r0, r1, 0x0, 0x68e146a1)

09:47:44 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETLED(r0, 0x4b48, 0x0)

[  116.331539] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI
[  116.332487] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[  116.333161] CPU: 1 UID: 0 PID: 3944 Comm: syz-executor.0 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  116.334958] Tainted: [W]=WARN
[  116.335822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  116.337893] RIP: 0010:perf_tp_event+0x175/0xe70
[  116.339355] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  116.343054] RSP: 0018:ffff8880464df800 EFLAGS: 00010212
[  116.343475] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90002a9f000
[  116.344038] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190
[  116.344591] RBP: ffff8880464dfa70 R08: ffff88806cf31340 R09: ffffe8ffffd16200
[  116.345143] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000
[  116.345696] R13: 0000000000000024 R14: ffff88806cf31340 R15: dffffc0000000000
[  116.346249] FS:  00007f87f5246700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  116.346872] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.347326] CR2: 00007f87f7de4018 CR3: 0000000043e3f000 CR4: 0000000000350ef0
[  116.347902] Call Trace:
[  116.348108]  <TASK>
[  116.348295]  ? __pfx_perf_tp_event+0x10/0x10
[  116.348650]  ? lock_is_held_type+0x9e/0x120
[  116.348999]  ? lock_is_held_type+0x9e/0x120
[  116.349346]  ? ctx_sched_in+0x134/0x9b0
[  116.349664]  ? __pfx_ctx_sched_in+0x10/0x10
[  116.350005]  ? arch_stack_walk+0x9c/0xf0
[  116.350335]  ? find_held_lock+0x2b/0x80
[  116.350657]  ? find_held_lock+0x2b/0x80
[  116.350977]  ? __perf_install_in_context+0x503/0xb90
[  116.351374]  ? lock_release+0xc8/0x290
[  116.351686]  ? do_raw_spin_unlock+0x53/0x220
[  116.352055]  ? perf_trace_run_bpf_submit+0xef/0x180
[  116.352452]  perf_trace_run_bpf_submit+0xef/0x180
[  116.352841]  perf_trace_lock_acquire+0x3c2/0x700
[  116.353225]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  116.353641]  ? futex_ref_get+0x48/0x300
[  116.353955]  ? find_held_lock+0x2b/0x80
[  116.354278]  lock_acquire+0xc5/0x2f0
[  116.354577]  ? futex_wake+0x228/0x540
[  116.354888]  _raw_spin_lock+0x2b/0x40
[  116.355192]  ? futex_wake+0x228/0x540
[  116.355497]  futex_wake+0x228/0x540
[  116.355800]  ? __pfx_futex_wake+0x10/0x10
[  116.356135]  ? __do_sys_perf_event_open+0x44d/0x2c20
[  116.356536]  ? lock_release+0xc8/0x290
[  116.356848]  do_futex+0x26d/0x370
[  116.357130]  ? __pfx_do_futex+0x10/0x10
[  116.357447]  ? __pfx___do_sys_perf_event_open+0x10/0x10
[  116.357865]  ? find_held_lock+0x2b/0x80
[  116.358185]  __x64_sys_futex+0x1c9/0x4d0
[  116.358511]  ? __pfx___x64_sys_futex+0x10/0x10
[  116.358878]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  116.359291]  do_syscall_64+0xbf/0x360
[  116.359594]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.360005] RIP: 0033:0x7f87f7cd0b19
[  116.360298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  116.361697] RSP: 002b:00007f87f5246218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  116.362303] RAX: ffffffffffffffda RBX: 00007f87f7de3f68 RCX: 00007f87f7cd0b19
[  116.362870] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f87f7de3f6c
[  116.363431] RBP: 00007f87f7de3f60 R08: 000000000000000e R09: 0000000000000000
[  116.364001] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f87f7de3f6c
[  116.364568] R13: 00007ffdda07f24f R14: 00007f87f5246300 R15: 0000000000022000
[  116.365139]  </TASK>
[  116.365330] Modules linked in:
[  116.365617] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI
[  116.366491] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[  116.367182] CPU: 1 UID: 0 PID: 3944 Comm: syz-executor.0 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  116.368130] Tainted: [D]=DIE, [W]=WARN
[  116.368437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  116.369082] RIP: 0010:perf_tp_event+0x175/0xe70
[  116.369462] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  116.370901] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012
[  116.371316] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[  116.371873] RDX: ffff8880445e5280 RSI: ffffffff818995b7 RDI: 0000000100000190
[  116.372440] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd16200
[  116.373004] R10: 0000000000000000 R11: 000000000000002c R12: dffffc0000000000
[  116.373570] R13: 000000000000002c R14: ffff88806cf31490 R15: dffffc0000000000
[  116.374134] FS:  00007f87f5246700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  116.374767] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.375228] CR2: 00007f87f7de4018 CR3: 0000000043e3f000 CR4: 0000000000350ef0
[  116.375805] Call Trace:
[  116.376015]  <IRQ>
[  116.376197]  ? __pfx_perf_tp_event+0x10/0x10
[  116.376554]  ? __lock_acquire+0x694/0x1b70
[  116.376900]  ? trace_softirq_raise+0xbe/0x100
[  116.377272]  ? lock_acquire+0x15e/0x2f0
[  116.377591]  ? select_task_rq_fair+0x2b6/0x38b0
[  116.377971]  ? find_held_lock+0x2b/0x80
[  116.378298]  ? select_task_rq_fair+0x48c/0x38b0
[  116.378670]  ? __pfx_call_function_single_prep_ipi+0x10/0x10
[  116.379128]  ? trace_ipi_send_cpu.constprop.0+0x158/0x1c0
[  116.379571]  ? __smp_call_single_queue+0x15b/0x2f0
[  116.379979]  ? __pfx___smp_call_single_queue+0x10/0x10
[  116.380406]  ? perf_trace_run_bpf_submit+0xef/0x180
[  116.380812]  ? lock_release+0xc8/0x290
[  116.381126]  perf_trace_run_bpf_submit+0xef/0x180
[  116.381518]  perf_trace_lock_acquire+0x3c2/0x700
[  116.381903]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  116.382289]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  116.382711]  ? mark_held_locks+0x49/0x80
[  116.383041]  ? trace_rcu_utilization+0x26/0x190
[  116.383424]  lock_acquire+0xc5/0x2f0
[  116.383738]  ? hrtimer_interrupt+0xd6/0x830
[  116.384085]  ? __pfx_rcu_core+0x10/0x10
[  116.384418]  _raw_spin_lock_irqsave+0x3a/0x60
[  116.384782]  ? hrtimer_interrupt+0xd6/0x830
[  116.385129]  hrtimer_interrupt+0xd6/0x830
[  116.385464]  ? __pfx_do_sync_core+0x10/0x10
[  116.385813]  ? trace_csd_function_exit+0x134/0x190
[  116.386209]  ? __flush_smp_call_function_queue+0x28c/0x740
[  116.386660]  __sysvec_apic_timer_interrupt+0xbb/0x330
[  116.387074]  sysvec_apic_timer_interrupt+0x6b/0x80
[  116.387473]  </IRQ>
[  116.387658]  <TASK>
[  116.387852]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  116.388272] RIP: 0010:oops_exit+0x0/0x50
[  116.388601] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27
[  116.390032] RSP: 0018:ffff8880464df690 EFLAGS: 00000202
[  116.390454] RAX: 000000000002abb2 RBX: 0000000000000216 RCX: ffffc90002a9f000
[  116.391014] RDX: 0000000000040000 RSI: ffffffff812a3dca RDI: 0000000000000007
[  116.391581] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90
[  116.392153] R10: 0000000000000000 R11: 000000000000002c R12: ffff8880464df758
[  116.392710] R13: 0000000000000000 R14: dffffc0020000032 R15: 0000000000000000
[  116.393266]  ? oops_end+0x4a/0xe0
[  116.393555]  oops_end+0x65/0xe0
[  116.393827]  exc_general_protection+0x1a2/0x330
[  116.394200]  asm_exc_general_protection+0x26/0x30
[  116.394581] RIP: 0010:perf_tp_event+0x175/0xe70
[  116.394951] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  116.396361] RSP: 0018:ffff8880464df800 EFLAGS: 00010212
[  116.396777] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90002a9f000
[  116.397326] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190
[  116.397876] RBP: ffff8880464dfa70 R08: ffff88806cf31340 R09: ffffe8ffffd16200
[  116.398427] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000
[  116.398974] R13: 0000000000000024 R14: ffff88806cf31340 R15: dffffc0000000000
[  116.399533]  ? perf_tp_event+0x167/0xe70
[  116.399873]  ? __pfx_perf_tp_event+0x10/0x10
[  116.400224]  ? lock_is_held_type+0x9e/0x120
[  116.400565]  ? lock_is_held_type+0x9e/0x120
[  116.400921]  ? ctx_sched_in+0x134/0x9b0
[  116.401241]  ? __pfx_ctx_sched_in+0x10/0x10
[  116.401586]  ? arch_stack_walk+0x9c/0xf0
[  116.401913]  ? find_held_lock+0x2b/0x80
[  116.402238]  ? find_held_lock+0x2b/0x80
[  116.402562]  ? __perf_install_in_context+0x503/0xb90
[  116.402967]  ? lock_release+0xc8/0x290
[  116.403282]  ? do_raw_spin_unlock+0x53/0x220
[  116.403644]  ? perf_trace_run_bpf_submit+0xef/0x180
[  116.404057]  perf_trace_run_bpf_submit+0xef/0x180
[  116.404450]  perf_trace_lock_acquire+0x3c2/0x700
[  116.404835]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  116.405251]  ? futex_ref_get+0x48/0x300
[  116.405562]  ? find_held_lock+0x2b/0x80
[  116.405881]  lock_acquire+0xc5/0x2f0
[  116.406175]  ? futex_wake+0x228/0x540
[  116.406485]  _raw_spin_lock+0x2b/0x40
[  116.406790]  ? futex_wake+0x228/0x540
[  116.407094]  futex_wake+0x228/0x540
[  116.407392]  ? __pfx_futex_wake+0x10/0x10
[  116.407728]  ? __do_sys_perf_event_open+0x44d/0x2c20
[  116.408122]  ? lock_release+0xc8/0x290
[  116.408435]  do_futex+0x26d/0x370
[  116.408715]  ? __pfx_do_futex+0x10/0x10
[  116.409032]  ? __pfx___do_sys_perf_event_open+0x10/0x10
[  116.409447]  ? find_held_lock+0x2b/0x80
[  116.409769]  __x64_sys_futex+0x1c9/0x4d0
[  116.410093]  ? __pfx___x64_sys_futex+0x10/0x10
[  116.410460]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  116.410868]  do_syscall_64+0xbf/0x360
[  116.411169]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.411571] RIP: 0033:0x7f87f7cd0b19
[  116.411872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  116.413271] RSP: 002b:00007f87f5246218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  116.413857] RAX: ffffffffffffffda RBX: 00007f87f7de3f68 RCX: 00007f87f7cd0b19
[  116.414404] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f87f7de3f6c
[  116.414956] RBP: 00007f87f7de3f60 R08: 000000000000000e R09: 0000000000000000
[  116.415508] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f87f7de3f6c
[  116.416062] R13: 00007ffdda07f24f R14: 00007f87f5246300 R15: 0000000000022000
[  116.416619]  </TASK>
[  116.416807] Modules linked in:
[  116.417066] ---[ end trace 0000000000000000 ]---
[  116.417432] RIP: 0010:perf_tp_event+0x175/0xe70
[  116.417801] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  116.419198] RSP: 0018:ffff8880464df800 EFLAGS: 00010212
[  116.419607] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90002a9f000
[  116.420163] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190
[  116.420716] RBP: ffff8880464dfa70 R08: ffff88806cf31340 R09: ffffe8ffffd16200
[  116.421274] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000
[  116.421827] R13: 0000000000000024 R14: ffff88806cf31340 R15: dffffc0000000000
[  116.422380] FS:  00007f87f5246700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  116.422999] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.423453] CR2: 00007f87f7de4018 CR3: 0000000043e3f000 CR4: 0000000000350ef0
[  116.424020] Kernel panic - not syncing: Fatal exception in interrupt
[  116.424697] Kernel Offset: disabled
[  116.424990] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---

VM DIAGNOSIS:
09:47:45  Registers:
info registers vcpu 0
RAX=0000000000008ff3 RBX=ffff88806cf3c300 RCX=ffffc9000088e000 RDX=0000000000040000
RSI=ffffffff816880d6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff888044d975a8
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=1ffff1100d9c6bb1
R12=ffffed100d9e7861 R13=ffff88806cf3c308 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff816880d8 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fe0d7562700 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe6300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe0da100018 CR3=000000004509c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fe0da0d37c000007fe0da0d37c8
XMM02=00007fe0da0d37e000007fe0da0d37c0 XMM03=00007fe0da0d37c800007fe0da0d37c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff828e3230 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff8880464df098
R8 =0000000000000000 R9 =ffffed1001d65046 R10=00000000000fe503 R11=000000000000002c
R12=0000000000000823 R13=0000000000000020 R14=fffffbfff10e4882 R15=dffffc0000000000
RIP=ffffffff828e3285 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f87f5246700 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe4000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f87f7de4018 CR3=0000000043e3f000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f87f7db77c000007f87f7db77c8
XMM02=00007f87f7db77e000007f87f7db77c0 XMM03=00007f87f7db77c800007f87f7db77c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000