Warning: Permanently added '[localhost]:27064' (ECDSA) to the list of known hosts. 2025/09/01 10:48:14 fuzzer started 2025/09/01 10:48:14 dialing manager at localhost:35473 syzkaller login: [ 52.516977] cgroup: Unknown subsys name 'net' [ 52.610084] cgroup: Unknown subsys name 'cpuset' [ 52.632897] cgroup: Unknown subsys name 'rlimit' 2025/09/01 10:48:25 syscalls: 2214 2025/09/01 10:48:25 code coverage: enabled 2025/09/01 10:48:25 comparison tracing: enabled 2025/09/01 10:48:25 extra coverage: enabled 2025/09/01 10:48:25 setuid sandbox: enabled 2025/09/01 10:48:25 namespace sandbox: enabled 2025/09/01 10:48:25 Android sandbox: enabled 2025/09/01 10:48:25 fault injection: enabled 2025/09/01 10:48:25 leak checking: enabled 2025/09/01 10:48:25 net packet injection: enabled 2025/09/01 10:48:25 net device setup: enabled 2025/09/01 10:48:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 10:48:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 10:48:25 USB emulation: enabled 2025/09/01 10:48:25 hci packet injection: enabled 2025/09/01 10:48:25 wifi device emulation: enabled 2025/09/01 10:48:25 802.15.4 emulation: enabled 2025/09/01 10:48:25 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 10:48:25 fetching corpus: 49, signal 18911/22513 (executing program) 2025/09/01 10:48:25 fetching corpus: 99, signal 29939/34999 (executing program) 2025/09/01 10:48:25 fetching corpus: 149, signal 38030/44393 (executing program) 2025/09/01 10:48:25 fetching corpus: 199, signal 47435/54889 (executing program) 2025/09/01 10:48:25 fetching corpus: 249, signal 53378/61917 (executing program) 2025/09/01 10:48:25 fetching corpus: 299, signal 60637/70059 (executing program) 2025/09/01 10:48:25 fetching corpus: 349, signal 65746/76024 (executing program) 2025/09/01 10:48:26 fetching corpus: 399, signal 68972/80257 (executing program) 2025/09/01 10:48:26 fetching corpus: 449, signal 72415/84502 (executing program) 2025/09/01 10:48:26 fetching corpus: 499, signal 74928/87916 (executing program) 2025/09/01 10:48:26 fetching corpus: 549, signal 77690/91510 (executing program) 2025/09/01 10:48:26 fetching corpus: 599, signal 79608/94347 (executing program) 2025/09/01 10:48:26 fetching corpus: 649, signal 82375/97848 (executing program) 2025/09/01 10:48:26 fetching corpus: 699, signal 84050/100370 (executing program) 2025/09/01 10:48:26 fetching corpus: 749, signal 86705/103648 (executing program) 2025/09/01 10:48:26 fetching corpus: 799, signal 87997/105772 (executing program) 2025/09/01 10:48:26 fetching corpus: 849, signal 90264/108648 (executing program) 2025/09/01 10:48:26 fetching corpus: 899, signal 92151/111153 (executing program) 2025/09/01 10:48:27 fetching corpus: 949, signal 93813/113442 (executing program) 2025/09/01 10:48:27 fetching corpus: 999, signal 97463/117264 (executing program) 2025/09/01 10:48:27 fetching corpus: 1049, signal 98692/119153 (executing program) 2025/09/01 10:48:27 fetching corpus: 1099, signal 99533/120740 (executing program) 2025/09/01 10:48:27 fetching corpus: 1149, signal 101103/122814 (executing program) 2025/09/01 10:48:27 fetching corpus: 1199, signal 102849/124997 (executing program) 2025/09/01 10:48:27 fetching corpus: 1249, signal 104052/126846 (executing program) 2025/09/01 10:48:27 fetching corpus: 1299, signal 104949/128364 (executing program) 2025/09/01 10:48:27 fetching corpus: 1349, signal 107061/130765 (executing program) 2025/09/01 10:48:27 fetching corpus: 1399, signal 108435/132593 (executing program) 2025/09/01 10:48:27 fetching corpus: 1449, signal 109665/134248 (executing program) 2025/09/01 10:48:28 fetching corpus: 1499, signal 110627/135749 (executing program) 2025/09/01 10:48:28 fetching corpus: 1549, signal 111695/137218 (executing program) 2025/09/01 10:48:28 fetching corpus: 1599, signal 112842/138795 (executing program) 2025/09/01 10:48:28 fetching corpus: 1649, signal 114320/140487 (executing program) 2025/09/01 10:48:28 fetching corpus: 1699, signal 115565/141981 (executing program) 2025/09/01 10:48:28 fetching corpus: 1749, signal 116553/143301 (executing program) 2025/09/01 10:48:28 fetching corpus: 1799, signal 117541/144652 (executing program) 2025/09/01 10:48:28 fetching corpus: 1849, signal 118365/145915 (executing program) 2025/09/01 10:48:28 fetching corpus: 1899, signal 119715/147459 (executing program) 2025/09/01 10:48:28 fetching corpus: 1949, signal 120723/148800 (executing program) 2025/09/01 10:48:29 fetching corpus: 1999, signal 121699/150035 (executing program) 2025/09/01 10:48:29 fetching corpus: 2049, signal 122975/151367 (executing program) 2025/09/01 10:48:29 fetching corpus: 2099, signal 124137/152696 (executing program) 2025/09/01 10:48:29 fetching corpus: 2149, signal 125256/153927 (executing program) 2025/09/01 10:48:29 fetching corpus: 2199, signal 126027/154981 (executing program) 2025/09/01 10:48:29 fetching corpus: 2249, signal 126648/155914 (executing program) 2025/09/01 10:48:29 fetching corpus: 2299, signal 127389/156939 (executing program) 2025/09/01 10:48:29 fetching corpus: 2349, signal 128461/158081 (executing program) 2025/09/01 10:48:29 fetching corpus: 2399, signal 129309/159076 (executing program) 2025/09/01 10:48:29 fetching corpus: 2449, signal 130154/160072 (executing program) 2025/09/01 10:48:29 fetching corpus: 2499, signal 130981/161090 (executing program) 2025/09/01 10:48:29 fetching corpus: 2549, signal 131622/161977 (executing program) 2025/09/01 10:48:29 fetching corpus: 2599, signal 132120/162834 (executing program) 2025/09/01 10:48:30 fetching corpus: 2649, signal 133128/163900 (executing program) 2025/09/01 10:48:30 fetching corpus: 2699, signal 133583/164613 (executing program) 2025/09/01 10:48:30 fetching corpus: 2749, signal 134602/165567 (executing program) 2025/09/01 10:48:30 fetching corpus: 2799, signal 135592/166478 (executing program) 2025/09/01 10:48:30 fetching corpus: 2849, signal 136101/167261 (executing program) 2025/09/01 10:48:30 fetching corpus: 2899, signal 137028/168122 (executing program) 2025/09/01 10:48:31 fetching corpus: 2949, signal 137965/168933 (executing program) 2025/09/01 10:48:31 fetching corpus: 2999, signal 138727/169723 (executing program) 2025/09/01 10:48:31 fetching corpus: 3049, signal 139112/170359 (executing program) 2025/09/01 10:48:31 fetching corpus: 3099, signal 139708/171054 (executing program) 2025/09/01 10:48:31 fetching corpus: 3149, signal 140085/171627 (executing program) 2025/09/01 10:48:31 fetching corpus: 3199, signal 140950/172350 (executing program) 2025/09/01 10:48:31 fetching corpus: 3249, signal 141664/173045 (executing program) 2025/09/01 10:48:31 fetching corpus: 3299, signal 142177/173641 (executing program) 2025/09/01 10:48:31 fetching corpus: 3349, signal 142946/174338 (executing program) 2025/09/01 10:48:31 fetching corpus: 3399, signal 143492/174924 (executing program) 2025/09/01 10:48:31 fetching corpus: 3449, signal 144140/175525 (executing program) 2025/09/01 10:48:32 fetching corpus: 3499, signal 144858/176141 (executing program) 2025/09/01 10:48:32 fetching corpus: 3549, signal 145361/176664 (executing program) 2025/09/01 10:48:32 fetching corpus: 3599, signal 145972/177219 (executing program) 2025/09/01 10:48:32 fetching corpus: 3649, signal 146399/177706 (executing program) 2025/09/01 10:48:32 fetching corpus: 3699, signal 146953/178250 (executing program) 2025/09/01 10:48:32 fetching corpus: 3749, signal 147638/178765 (executing program) 2025/09/01 10:48:32 fetching corpus: 3799, signal 148301/179316 (executing program) 2025/09/01 10:48:32 fetching corpus: 3849, signal 148677/179800 (executing program) 2025/09/01 10:48:32 fetching corpus: 3899, signal 149127/180257 (executing program) 2025/09/01 10:48:32 fetching corpus: 3949, signal 149560/180724 (executing program) 2025/09/01 10:48:32 fetching corpus: 3999, signal 150022/181164 (executing program) 2025/09/01 10:48:32 fetching corpus: 4049, signal 150599/181632 (executing program) 2025/09/01 10:48:33 fetching corpus: 4099, signal 151236/182079 (executing program) 2025/09/01 10:48:33 fetching corpus: 4149, signal 151793/182471 (executing program) 2025/09/01 10:48:33 fetching corpus: 4199, signal 152258/182874 (executing program) 2025/09/01 10:48:33 fetching corpus: 4249, signal 152616/183284 (executing program) 2025/09/01 10:48:33 fetching corpus: 4299, signal 153184/183669 (executing program) 2025/09/01 10:48:33 fetching corpus: 4349, signal 153852/184047 (executing program) 2025/09/01 10:48:33 fetching corpus: 4399, signal 154254/184424 (executing program) 2025/09/01 10:48:33 fetching corpus: 4449, signal 154724/184762 (executing program) 2025/09/01 10:48:33 fetching corpus: 4499, signal 155082/185113 (executing program) 2025/09/01 10:48:33 fetching corpus: 4549, signal 155568/185187 (executing program) 2025/09/01 10:48:33 fetching corpus: 4599, signal 156092/185189 (executing program) 2025/09/01 10:48:34 fetching corpus: 4649, signal 156382/185194 (executing program) 2025/09/01 10:48:34 fetching corpus: 4699, signal 156837/185224 (executing program) 2025/09/01 10:48:34 fetching corpus: 4749, signal 157396/185225 (executing program) 2025/09/01 10:48:34 fetching corpus: 4799, signal 157847/185230 (executing program) 2025/09/01 10:48:34 fetching corpus: 4849, signal 158309/185238 (executing program) 2025/09/01 10:48:34 fetching corpus: 4899, signal 158685/185240 (executing program) 2025/09/01 10:48:34 fetching corpus: 4949, signal 159147/185262 (executing program) 2025/09/01 10:48:34 fetching corpus: 4999, signal 159949/185267 (executing program) 2025/09/01 10:48:34 fetching corpus: 5049, signal 160929/185294 (executing program) 2025/09/01 10:48:34 fetching corpus: 5099, signal 161309/185298 (executing program) 2025/09/01 10:48:34 fetching corpus: 5149, signal 161749/185321 (executing program) 2025/09/01 10:48:35 fetching corpus: 5199, signal 162177/185321 (executing program) 2025/09/01 10:48:35 fetching corpus: 5249, signal 162672/185338 (executing program) 2025/09/01 10:48:35 fetching corpus: 5299, signal 163006/185354 (executing program) 2025/09/01 10:48:35 fetching corpus: 5349, signal 163520/185364 (executing program) 2025/09/01 10:48:35 fetching corpus: 5399, signal 163805/185376 (executing program) 2025/09/01 10:48:35 fetching corpus: 5449, signal 164180/185382 (executing program) 2025/09/01 10:48:35 fetching corpus: 5499, signal 164440/185382 (executing program) 2025/09/01 10:48:35 fetching corpus: 5549, signal 165231/185391 (executing program) 2025/09/01 10:48:35 fetching corpus: 5599, signal 165979/185399 (executing program) 2025/09/01 10:48:35 fetching corpus: 5649, signal 166288/185412 (executing program) 2025/09/01 10:48:36 fetching corpus: 5699, signal 166676/185413 (executing program) 2025/09/01 10:48:36 fetching corpus: 5749, signal 166973/185413 (executing program) 2025/09/01 10:48:36 fetching corpus: 5799, signal 167388/185413 (executing program) 2025/09/01 10:48:36 fetching corpus: 5849, signal 167752/185426 (executing program) 2025/09/01 10:48:36 fetching corpus: 5899, signal 168226/185443 (executing program) 2025/09/01 10:48:36 fetching corpus: 5949, signal 169123/185483 (executing program) 2025/09/01 10:48:36 fetching corpus: 5999, signal 169462/185489 (executing program) 2025/09/01 10:48:36 fetching corpus: 6049, signal 169794/185491 (executing program) 2025/09/01 10:48:36 fetching corpus: 6099, signal 170332/185513 (executing program) 2025/09/01 10:48:36 fetching corpus: 6149, signal 170655/185517 (executing program) 2025/09/01 10:48:37 fetching corpus: 6199, signal 171013/185525 (executing program) 2025/09/01 10:48:37 fetching corpus: 6249, signal 171255/185535 (executing program) 2025/09/01 10:48:37 fetching corpus: 6299, signal 171510/185542 (executing program) 2025/09/01 10:48:37 fetching corpus: 6349, signal 171808/185567 (executing program) 2025/09/01 10:48:37 fetching corpus: 6399, signal 172103/185576 (executing program) 2025/09/01 10:48:37 fetching corpus: 6449, signal 172568/185611 (executing program) 2025/09/01 10:48:37 fetching corpus: 6499, signal 172938/185627 (executing program) 2025/09/01 10:48:37 fetching corpus: 6549, signal 173216/185629 (executing program) 2025/09/01 10:48:37 fetching corpus: 6599, signal 173553/185648 (executing program) 2025/09/01 10:48:37 fetching corpus: 6649, signal 173862/185651 (executing program) 2025/09/01 10:48:37 fetching corpus: 6699, signal 174215/185652 (executing program) 2025/09/01 10:48:38 fetching corpus: 6749, signal 174574/185655 (executing program) 2025/09/01 10:48:38 fetching corpus: 6799, signal 174860/185660 (executing program) 2025/09/01 10:48:38 fetching corpus: 6849, signal 175154/185669 (executing program) 2025/09/01 10:48:38 fetching corpus: 6899, signal 175638/185674 (executing program) 2025/09/01 10:48:38 fetching corpus: 6949, signal 175890/185677 (executing program) 2025/09/01 10:48:38 fetching corpus: 6999, signal 176255/185692 (executing program) 2025/09/01 10:48:38 fetching corpus: 7049, signal 176498/185710 (executing program) 2025/09/01 10:48:38 fetching corpus: 7099, signal 176916/185716 (executing program) 2025/09/01 10:48:38 fetching corpus: 7149, signal 177252/185717 (executing program) 2025/09/01 10:48:38 fetching corpus: 7199, signal 177544/185803 (executing program) 2025/09/01 10:48:38 fetching corpus: 7249, signal 177850/185810 (executing program) 2025/09/01 10:48:38 fetching corpus: 7299, signal 178090/185810 (executing program) 2025/09/01 10:48:38 fetching corpus: 7349, signal 178416/185818 (executing program) 2025/09/01 10:48:39 fetching corpus: 7399, signal 178816/185924 (executing program) 2025/09/01 10:48:39 fetching corpus: 7449, signal 179228/185930 (executing program) 2025/09/01 10:48:39 fetching corpus: 7499, signal 179516/185931 (executing program) 2025/09/01 10:48:39 fetching corpus: 7549, signal 179871/185933 (executing program) 2025/09/01 10:48:39 fetching corpus: 7599, signal 180207/185937 (executing program) 2025/09/01 10:48:39 fetching corpus: 7649, signal 181929/185946 (executing program) 2025/09/01 10:48:39 fetching corpus: 7699, signal 182364/185974 (executing program) 2025/09/01 10:48:39 fetching corpus: 7749, signal 182601/185977 (executing program) 2025/09/01 10:48:39 fetching corpus: 7799, signal 183035/185990 (executing program) 2025/09/01 10:48:39 fetching corpus: 7846, signal 183253/185991 (executing program) 2025/09/01 10:48:39 fetching corpus: 7846, signal 183253/185991 (executing program) 2025/09/01 10:48:41 starting 8 fuzzer processes 10:48:41 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5411, &(0x7f0000000bc0)={'wlan1\x00'}) 10:48:41 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0xc1d, &(0x7f0000000000)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/freeze_filesystems', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 10:48:41 executing program 1: r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, 0x0, 0x0) 10:48:41 executing program 2: r0 = inotify_init() lseek(r0, 0x0, 0x0) 10:48:41 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@nfc={0x27, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d88a8", 0x1000e}], 0x1}}], 0x1, 0x0) 10:48:41 executing program 4: prctl$PR_GET_THP_DISABLE(0x2a) 10:48:41 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x8, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) dup2(r2, r1) 10:48:42 executing program 6: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000100)=[{0x0, 0xff81}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x1000}], 0x1) [ 79.927436] audit: type=1400 audit(1756723722.008:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 81.145793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.151290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.153505] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.155780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.158004] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.161499] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.164880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.167876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.172716] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.180937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.210363] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.212301] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.220921] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.224990] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.226884] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.229456] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.231444] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.233310] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.237156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.239042] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.241107] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.247121] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.249076] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.251962] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.253870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.256309] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 81.259718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.261630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.263435] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.273779] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 81.274032] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 81.276237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.279772] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.281855] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 81.290266] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 81.309046] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 81.311052] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 81.320828] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 81.323181] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 81.328051] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.238168] Bluetooth: hci1: command tx timeout [ 83.238174] Bluetooth: hci0: command tx timeout [ 83.299761] Bluetooth: hci5: command tx timeout [ 83.299807] Bluetooth: hci4: command tx timeout [ 83.363789] Bluetooth: hci3: command tx timeout [ 83.364420] Bluetooth: hci2: command tx timeout [ 83.365183] Bluetooth: hci7: command tx timeout [ 83.429674] Bluetooth: hci6: command tx timeout [ 85.283694] Bluetooth: hci1: command tx timeout [ 85.284137] Bluetooth: hci0: command tx timeout [ 85.347998] Bluetooth: hci4: command tx timeout [ 85.348404] Bluetooth: hci5: command tx timeout [ 85.411629] Bluetooth: hci2: command tx timeout [ 85.413595] Bluetooth: hci7: command tx timeout [ 85.414031] Bluetooth: hci3: command tx timeout [ 85.475606] Bluetooth: hci6: command tx timeout [ 87.331637] Bluetooth: hci1: command tx timeout [ 87.332074] Bluetooth: hci0: command tx timeout [ 87.395622] Bluetooth: hci4: command tx timeout [ 87.396051] Bluetooth: hci5: command tx timeout [ 87.459787] Bluetooth: hci3: command tx timeout [ 87.460221] Bluetooth: hci7: command tx timeout [ 87.461070] Bluetooth: hci2: command tx timeout [ 87.523582] Bluetooth: hci6: command tx timeout [ 89.379670] Bluetooth: hci0: command tx timeout [ 89.380097] Bluetooth: hci1: command tx timeout [ 89.443618] Bluetooth: hci5: command tx timeout [ 89.444018] Bluetooth: hci4: command tx timeout [ 89.507783] Bluetooth: hci2: command tx timeout [ 89.508183] Bluetooth: hci7: command tx timeout [ 89.509389] Bluetooth: hci3: command tx timeout [ 89.571607] Bluetooth: hci6: command tx timeout [ 118.340172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.341190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.619579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.620503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:49:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@nfc={0x27, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d88a8", 0x1000e}], 0x1}}], 0x1, 0x0) [ 119.298504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.299585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:49:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@nfc={0x27, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d88a8", 0x1000e}], 0x1}}], 0x1, 0x0) 10:49:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@nfc={0x27, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d88a8", 0x1000e}], 0x1}}], 0x1, 0x0) [ 119.479966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.480591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:49:21 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x28, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) [ 119.516390] audit: type=1400 audit(1756723761.597:8): avc: denied { open } for pid=3840 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.533018] audit: type=1400 audit(1756723761.597:9): avc: denied { kernel } for pid=3840 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 10:49:21 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) [ 119.680186] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.689833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.690462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:49:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 119.918260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.919414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:49:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x12) [ 119.974366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.975299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:49:22 executing program 7: syz_read_part_table(0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000340)="eb", 0x1, 0x80000000}]) [ 120.052628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.053261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.083052] loop7: detected capacity change from 0 to 264192 [ 120.102369] loop7: detected capacity change from 0 to 264192 [ 120.180955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.181703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.223696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.224320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.305913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.306847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.407522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.408187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.453336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.454172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.489577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.490211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.660618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.661914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.690338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.691062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:49:22 executing program 2: r0 = inotify_init() lseek(r0, 0x0, 0x0) 10:49:22 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x8, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) dup2(r2, r1) 10:49:22 executing program 6: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000100)=[{0x0, 0xff81}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x1000}], 0x1) 10:49:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 10:49:22 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x8, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) dup2(r2, r1) 10:49:22 executing program 1: r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, 0x0, 0x0) 10:49:22 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000000)=""/77, 0x4d, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x0, 0x0, 0xb7, 0x1ff, 0xffffffffffffffff}) 10:49:22 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) 10:49:23 executing program 1: r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, 0x0, 0x0) 10:49:23 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x8, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) dup2(r2, r1) 10:49:23 executing program 6: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000100)=[{0x0, 0xff81}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x1000}], 0x1) 10:49:23 executing program 2: r0 = inotify_init() lseek(r0, 0x0, 0x0) 10:49:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x3}, 0x20) 10:49:23 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x8, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) dup2(r2, r1) 10:49:23 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) 10:49:23 executing program 1: r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, 0x0, 0x0) 10:49:23 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000000)=""/77, 0x4d, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x0, 0x0, 0xb7, 0x1ff, 0xffffffffffffffff}) 10:49:23 executing program 6: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000100)=[{0x0, 0xff81}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x1000}], 0x1) 10:49:23 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x8, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) dup2(r2, r1) [ 121.251355] Oops: general protection fault, probably for non-canonical address 0xfbfffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 121.253109] KASAN: maybe wild-memory-access in range [0xe000000000000190-0xe000000000000197] [ 121.255683] CPU: 0 UID: 0 PID: 3948 Comm: syz-executor.5 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 121.261855] Tainted: [W]=WARN [ 121.262310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 121.263501] RIP: 0010:perf_tp_event+0x175/0xe70 [ 121.264230] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 121.266834] RSP: 0018:ffff888046f7f780 EFLAGS: 00010012 [ 121.267631] RAX: 1c00000000000032 RBX: dfffffffffffffa0 RCX: ffffc9000562a000 [ 121.268661] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: e000000000000190 [ 121.269690] RBP: ffff888046f7f9f0 R08: ffff88806ce31340 R09: ffffe8ffffc10ce0 [ 121.270722] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 121.271757] R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 [ 121.272786] FS: 00007f7e6f4d4700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 121.273950] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.274796] CR2: 00007f7e72072018 CR3: 000000000de08000 CR4: 0000000000350ef0 [ 121.275851] Call Trace: [ 121.276234] [ 121.276576] ? merge_sched_in+0xcb/0x1810 [ 121.277190] ? __pfx_perf_tp_event+0x10/0x10 [ 121.277856] ? __asan_memcpy+0x3d/0x60 [ 121.278450] ? __pfx_visit_groups_merge.constprop.0.isra.0+0x10/0x10 [ 121.279397] ? lock_is_held_type+0x9e/0x120 [ 121.280063] ? perf_trace_lock+0xb5/0x5d0 [ 121.280681] ? perf_trace_lock+0xb5/0x5d0 [ 121.281303] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 121.282046] ? perf_swevent_event+0x63/0x3f0 [ 121.282725] ? perf_tp_event+0x807/0xe70 [ 121.283336] ? perf_trace_run_bpf_submit+0xef/0x180 [ 121.284087] perf_trace_run_bpf_submit+0xef/0x180 [ 121.284817] perf_trace_preemptirq_template+0x259/0x430 [ 121.285599] ? mark_held_locks+0x49/0x80 [ 121.286202] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 121.287072] ? perf_trace_lock+0xb5/0x5d0 [ 121.287705] ? _raw_spin_lock_irqsave+0x53/0x60 [ 121.288398] trace_irq_disable.constprop.0+0xa6/0x100 [ 121.289154] _raw_spin_lock_irqsave+0x53/0x60 [ 121.289832] try_to_wake_up+0xa0/0x11d0 [ 121.290442] ? __pfx_try_to_wake_up+0x10/0x10 [ 121.291122] ? plist_del+0x122/0x270 [ 121.291701] ? find_held_lock+0x2b/0x80 [ 121.292302] ? futex_wake+0x474/0x540 [ 121.292880] wake_up_q+0xa1/0x130 [ 121.293419] futex_wake+0x47e/0x540 [ 121.293979] ? __pfx_futex_wake+0x10/0x10 [ 121.294595] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 121.295344] ? lock_release+0xc8/0x290 [ 121.295943] do_futex+0x26d/0x370 [ 121.296472] ? __pfx_do_futex+0x10/0x10 [ 121.297062] ? perf_trace_run_bpf_submit+0xef/0x180 [ 121.297827] __x64_sys_futex+0x1c9/0x4d0 [ 121.298430] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 121.299296] ? __pfx___x64_sys_futex+0x10/0x10 [ 121.300010] do_syscall_64+0xbf/0x360 [ 121.300591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.301354] RIP: 0033:0x7f7e71f5eb19 [ 121.301917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.304562] RSP: 002b:00007f7e6f4d4218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.305664] RAX: ffffffffffffffda RBX: 00007f7e72071f68 RCX: 00007f7e71f5eb19 [ 121.306705] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7e72071f6c [ 121.307750] RBP: 00007f7e72071f60 R08: 000000000000000e R09: 0000000000000000 [ 121.308780] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7e72071f6c [ 121.309804] R13: 00007fff45d78c0f R14: 00007f7e6f4d4300 R15: 0000000000022000 [ 121.310831] [ 121.311178] Modules linked in: [ 121.311669] ---[ end trace 0000000000000000 ]--- [ 121.312358] RIP: 0010:perf_tp_event+0x175/0xe70 [ 121.313050] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 121.315682] RSP: 0018:ffff888046f7f780 EFLAGS: 00010012 [ 121.316460] RAX: 1c00000000000032 RBX: dfffffffffffffa0 RCX: ffffc9000562a000 [ 121.317002] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI [ 121.317488] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: e000000000000190 [ 121.318859] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 121.319880] RBP: ffff888046f7f9f0 R08: ffff88806ce31340 R09: ffffe8ffffc10ce0 [ 121.320915] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 121.321940] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 121.323305] Tainted: [D]=DIE, [W]=WARN [ 121.324327] R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 [ 121.324787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 121.325807] FS: 00007f7e6f4d4700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 121.326791] Workqueue: ipv6_addrconf addrconf_dad_work [ 121.327939] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.328558] RIP: 0010:perf_tp_event+0x175/0xe70 [ 121.329387] CR2: 00007f7e72072018 CR3: 000000000de08000 CR4: 0000000000350ef0 [ 121.329936] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 121.330980] note: syz-executor.5[3948] exited with irqs disabled [ 121.333107] RSP: 0018:ffff8880095ff2c0 EFLAGS: 00010012 [ 121.334628] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 121.335478] RDX: ffff8880095dd280 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 121.336326] RBP: ffff8880095ff530 R08: ffff88806cf31340 R09: ffffe8ffffd10ce0 [ 121.337164] R10: 0000000000000000 R11: 00000000ffffffff R12: dffffc0000000000 [ 121.337999] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 121.338840] FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 121.339782] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.340465] CR2: 00007fd7bf378718 CR3: 000000004467b000 CR4: 0000000000350ef0 [ 121.341314] Call Trace: [ 121.341631] [ 121.341915] ? lock_release+0x1c7/0x290 [ 121.342409] ? __pfx_perf_tp_event+0x10/0x10 [ 121.342958] ? unwind_next_frame+0x3bc/0x2540 [ 121.343510] ? ret_from_fork_asm+0x1a/0x30 [ 121.344052] ? ret_from_fork_asm+0x1a/0x30 [ 121.344577] ? kernel_text_address+0x11/0xc0 [ 121.345127] ? lock_release+0x1c7/0x290 [ 121.345620] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 121.346281] ? arch_stack_walk+0x86/0xf0 [ 121.346786] ? perf_trace_lock+0xb5/0x5d0 [ 121.347303] ? ret_from_fork_asm+0x1a/0x30 [ 121.347829] ? perf_trace_lock+0xb5/0x5d0 [ 121.348322] ? stack_trace_save+0x8e/0xc0 [ 121.348817] ? __pfx_perf_trace_lock+0x10/0x10 [ 121.349369] ? perf_trace_run_bpf_submit+0xef/0x180 [ 121.349968] ? lock_release+0x1c7/0x290 [ 121.350461] perf_trace_run_bpf_submit+0xef/0x180 [ 121.351040] perf_trace_preemptirq_template+0x259/0x430 [ 121.351689] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 121.352382] ? ret_from_fork_asm+0x1a/0x30 [ 121.352889] ? kernel_text_address+0x11/0xc0 [ 121.353415] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 121.354055] ? arch_stack_walk+0x86/0xf0 [ 121.354538] ? ___slab_alloc+0x5b2/0xf30 [ 121.355031] trace_irq_disable.constprop.0+0xa6/0x100 [ 121.355654] ___slab_alloc+0x5b2/0xf30 [ 121.356125] ? __alloc_object+0x2b/0x2c0 [ 121.356615] ? ___slab_alloc+0x5c/0xf30 [ 121.357105] ? stack_trace_save+0x8e/0xc0 [ 121.357612] ? __pfx_perf_trace_lock+0x10/0x10 [ 121.358158] ? perf_trace_lock+0xb5/0x5d0 [ 121.358660] ? __alloc_object+0x2b/0x2c0 [ 121.359148] ? kmem_cache_alloc_noprof+0x47e/0x690 [ 121.359741] kmem_cache_alloc_noprof+0x47e/0x690 [ 121.360309] ? __create_object+0x59/0x80 [ 121.360804] ? __alloc_object+0x2b/0x2c0 [ 121.361302] __alloc_object+0x2b/0x2c0 [ 121.361773] __create_object+0x1d/0x80 [ 121.362246] __kmalloc_cache_noprof+0x42a/0x690 [ 121.362814] ? mld_newpack.isra.0+0x670/0x950 [ 121.363351] ? dst_cow_metrics_generic+0x4c/0x1e0 [ 121.363935] dst_cow_metrics_generic+0x4c/0x1e0 [ 121.364491] icmp6_dst_alloc+0x4a7/0x650 [ 121.364969] ? icmpv6_flow_init+0x3d/0x280 [ 121.365469] ? selinux_sk_getsecid+0x7c/0xd0 [ 121.365989] mld_sendpack+0x50a/0x11b0 [ 121.366452] ? __pfx_mld_sendpack+0x10/0x10 [ 121.366963] ? __ipv6_ifa_notify+0x108/0xb00 [ 121.367485] mld_send_initial_cr+0x21b/0x320 [ 121.368010] ipv6_mc_dad_complete+0xa5/0x1c0 [ 121.368533] addrconf_dad_completed+0xa8b/0xe70 [ 121.369095] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 121.369707] ? addrconf_dad_work+0x73e/0x11a0 [ 121.370246] addrconf_dad_work+0x762/0x11a0 [ 121.370761] ? __pfx_addrconf_dad_work+0x10/0x10 [ 121.371336] ? lock_acquire+0x18c/0x2f0 [ 121.371813] ? lock_release+0x1c7/0x290 [ 121.372285] process_one_work+0x8e1/0x19c0 [ 121.372791] ? __pfx_process_one_work+0x10/0x10 [ 121.373338] ? move_linked_works+0x172/0x270 [ 121.373866] ? assign_work+0x196/0x240 [ 121.374327] worker_thread+0x67e/0xe90 [ 121.374791] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 121.375403] ? __pfx_worker_thread+0x10/0x10 [ 121.375937] kthread+0x3c8/0x740 [ 121.376342] ? __pfx_kthread+0x10/0x10 [ 121.376801] ? ret_from_fork+0x23/0x430 [ 121.377274] ? lock_release+0xc8/0x290 [ 121.377735] ? __pfx_kthread+0x10/0x10 [ 121.378188] ret_from_fork+0x34b/0x430 [ 121.378655] ? __pfx_kthread+0x10/0x10 [ 121.379117] ret_from_fork_asm+0x1a/0x30 [ 121.379609] [ 121.379887] Modules linked in: [ 121.380269] ---[ end trace 0000000000000000 ]--- [ 121.380271] Oops: general protection fault, probably for non-canonical address 0xfbfffc0000000032: 0000 [#3] SMP KASAN NOPTI [ 121.380805] RIP: 0010:perf_tp_event+0x175/0xe70 [ 121.382389] KASAN: maybe wild-memory-access in range [0xe000000000000190-0xe000000000000197] [ 121.382910] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 121.384136] CPU: 0 UID: 0 PID: 3948 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 121.386170] RSP: 0018:ffff888046f7f780 EFLAGS: 00010012 [ 121.387889] Tainted: [D]=DIE, [W]=WARN [ 121.388482] RAX: 1c00000000000032 RBX: dfffffffffffffa0 RCX: ffffc9000562a000 [ 121.389058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 121.389866] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: e000000000000190 [ 121.391064] RIP: 0010:perf_tp_event+0x175/0xe70 [ 121.391871] RBP: ffff888046f7f9f0 R08: ffff88806ce31340 R09: ffffe8ffffc10ce0 [ 121.392554] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 121.393352] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 121.396002] RSP: 0018:ffff88806ce08b40 EFLAGS: 00010012 [ 121.396802] R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 [ 121.396806] [ 121.396821] FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 121.397602] RAX: 1c00000000000032 RBX: dfffffffffffffa0 RCX: ffffffff818998a3 [ 121.398404] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.398650] RDX: ffff8880173e9b80 RSI: ffffffff8189a4e7 RDI: e000000000000190 [ 121.399550] CR2: 00007fd7bf378718 CR3: 000000004467b000 CR4: 0000000000350ef0 [ 121.400595] RBP: ffff88806ce08db0 R08: ffff88806ce313e8 R09: ffffe8ffffc10ce0 [ 121.401250] note: kworker/u8:0[12] exited with irqs disabled [ 121.402266] R10: 0000000000000000 R11: ffff88801a60ec98 R12: dffffc0000000000 [ 121.405960] R13: 0000000000000000 R14: ffff88806ce313e8 R15: dffffc0000000000 [ 121.407000] FS: 00007f7e6f4d4700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 121.408212] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.409061] CR2: 00007f7e72072018 CR3: 000000000de08000 CR4: 0000000000350ef0 [ 121.410107] Call Trace: [ 121.410506] [ 121.410855] ? __pfx_perf_tp_event+0x10/0x10 [ 121.411556] ? __pfx_perf_trace_lock+0x10/0x10 [ 121.412240] ? __pfx_perf_trace_lock+0x10/0x10 [ 121.412921] ? update_load_avg+0x17d/0x1ef0 [ 121.413554] ? place_entity+0x1c/0x410 [ 121.414144] ? try_to_wake_up+0x8ae/0x11d0 [ 121.414791] ? lock_release+0x1c7/0x290 [ 121.415392] ? lock_release+0x1c7/0x290 [ 121.415984] ? do_raw_spin_unlock+0x53/0x220 [ 121.416647] ? _raw_spin_unlock_irqrestore+0x22/0x50 [ 121.417422] ? try_to_wake_up+0x8ae/0x11d0 [ 121.418050] ? perf_trace_lock+0xb5/0x5d0 [ 121.418678] ? perf_trace_run_bpf_submit+0xef/0x180 [ 121.419426] ? lock_release+0x1c7/0x290 [ 121.420032] ? perf_trace_lock+0xb5/0x5d0 [ 121.420655] perf_trace_run_bpf_submit+0xef/0x180 [ 121.421375] perf_trace_preemptirq_template+0x259/0x430 [ 121.422158] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 121.423018] ? read_tsc+0x9/0x20 [ 121.423539] ? ktime_get+0x16d/0x270 [ 121.424128] ? __pfx_lapic_next_deadline+0x10/0x10 [ 121.424941] ? clockevents_program_event+0x135/0x360 [ 121.425720] ? _raw_spin_lock_irq+0x42/0x50 [ 121.426370] trace_irq_disable.constprop.0+0xa6/0x100 [ 121.427123] _raw_spin_lock_irq+0x42/0x50 [ 121.427754] run_timer_softirq+0x10f/0x210 [ 121.428378] handle_softirqs+0x1b1/0x770 [ 121.428997] __irq_exit_rcu+0xc4/0x100 [ 121.429585] irq_exit_rcu+0x9/0x20 [ 121.430105] sysvec_apic_timer_interrupt+0x70/0x80 [ 121.430833] [ 121.431168] [ 121.431505] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 121.432305] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 121.432998] Code: 38 00 85 db 0f 84 21 01 00 00 e8 09 a6 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 57 a1 38 00 48 85 db 0f 84 17 01 00 00 e9 a5 38 00 31 ff 65 8b 1d 60 2f 49 06 81 e3 ff ff ff 7f 89 de [ 121.435677] RSP: 0018:ffff888046f7ff28 EFLAGS: 00000246 [ 121.436473] RAX: 0000000000000001 RBX: ffff8880173e9b80 RCX: ffffffff817c3ab6 [ 121.437534] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 121.438598] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 121.439686] R10: ffffffff8643b457 R11: 7973203a65746f6e R12: ffff8880173e9b80 [ 121.440755] R13: 0000000000000000 R14: fbfffc0000000032 R15: 0000000000000000 [ 121.441824] ? trace_irq_enable.constprop.0+0x26/0x100 [ 121.442606] ? make_task_dead+0x214/0x3b0 [ 121.443239] ? make_task_dead+0x214/0x3b0 [ 121.443881] ? do_syscall_64+0xbf/0x360 [ 121.444486] rewind_stack_and_make_dead+0x16/0x20 [ 121.445222] RIP: 0033:0x7f7e71f5eb19 [ 121.445785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.448496] RSP: 002b:00007f7e6f4d4218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.449631] RAX: ffffffffffffffda RBX: 00007f7e72071f68 RCX: 00007f7e71f5eb19 [ 121.450695] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7e72071f6c [ 121.451767] RBP: 00007f7e72071f60 R08: 000000000000000e R09: 0000000000000000 [ 121.452835] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7e72071f6c [ 121.453898] R13: 00007fff45d78c0f R14: 00007f7e6f4d4300 R15: 0000000000022000 [ 121.454970] [ 121.455328] Modules linked in: [ 121.455823] ---[ end trace 0000000000000000 ]--- [ 121.455825] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#4] SMP KASAN NOPTI [ 121.456533] RIP: 0010:perf_tp_event+0x175/0xe70 [ 121.457763] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 121.458447] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 121.459415] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 121.462103] RSP: 0018:ffff888046f7f780 EFLAGS: 00010012 [ 121.463395] Tainted: [D]=DIE, [W]=WARN [ 121.463404] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 121.464179] RAX: 1c00000000000032 RBX: dfffffffffffffa0 RCX: ffffc9000562a000 [ 121.464618] Workqueue: ipv6_addrconf addrconf_dad_work [ 121.465822] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: e000000000000190 [ 121.466584] [ 121.467339] RBP: ffff888046f7f9f0 R08: ffff88806ce31340 R09: ffffe8ffffc10ce0 [ 121.468112] RIP: 0010:perf_tp_event+0x175/0xe70 [ 121.468365] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 121.469139] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 121.469804] R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 [ 121.470577] RSP: 0018:ffff88806cf08b40 EFLAGS: 00010012 [ 121.473186] FS: 00007f7e6f4d4700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 121.473943] [ 121.473949] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 121.474700] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.475563] RDX: ffff8880095dd280 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 121.475817] CR2: 00007f7e72072018 CR3: 000000000de08000 CR4: 0000000000350ef0 [ 121.476589] RBP: ffff88806cf08db0 R08: ffff88806cf313e8 R09: ffffe8ffffd10ce0 [ 121.477419] Kernel panic - not syncing: Fatal exception in interrupt [ 122.587441] Shutting down cpus with NMI [ 122.591168] Kernel Offset: disabled [ 122.591708] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 10:49:23 Registers: info registers vcpu 0 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff888046f7f0e0 R8 =0000000000000000 R9 =ffffed10016cb046 R10=000000000000005d R11=552030203a555043 R12=000000000000005d R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0 RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7e6f4d4700 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe2500000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7e72072018 CR3=000000000de08000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f7e720457c000007f7e720457c8 XMM02=00007f7e720457e000007f7e720457c0 XMM03=00007f7e720457c800007f7e720457c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88800af65280 RCX=ffffffff8143cbaf RDX=ffff88800af65280 RSI=ffffffff8143cbb8 RDI=0000000000000005 RBP=0000000000200000 RSP=ffff88800f5cfdb0 R8 =0000000000000000 R9 =ffffed1001ebe880 R10=0000000000200000 R11=1ffff1100d9e6f7b R12=ffff888077a2aff9 R13=ffffffff886f2af8 R14=ffff88800af65280 R15=0000000000000086 RIP=ffffffff8173f6b8 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d027000 CR3=0000000043bbd000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000