Warning: Permanently added '[localhost]:56345' (ECDSA) to the list of known hosts.
2025/08/29 09:53:10 fuzzer started
2025/08/29 09:53:10 dialing manager at localhost:43077
syzkaller login: [   50.689229] cgroup: Unknown subsys name 'net'
[   50.770139] cgroup: Unknown subsys name 'cpuset'
[   50.793589] cgroup: Unknown subsys name 'rlimit'
2025/08/29 09:53:21 syscalls: 2214
2025/08/29 09:53:21 code coverage: enabled
2025/08/29 09:53:21 comparison tracing: enabled
2025/08/29 09:53:21 extra coverage: enabled
2025/08/29 09:53:21 setuid sandbox: enabled
2025/08/29 09:53:21 namespace sandbox: enabled
2025/08/29 09:53:21 Android sandbox: enabled
2025/08/29 09:53:21 fault injection: enabled
2025/08/29 09:53:21 leak checking: enabled
2025/08/29 09:53:21 net packet injection: enabled
2025/08/29 09:53:21 net device setup: enabled
2025/08/29 09:53:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/29 09:53:21 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/29 09:53:21 USB emulation: enabled
2025/08/29 09:53:21 hci packet injection: enabled
2025/08/29 09:53:21 wifi device emulation: enabled
2025/08/29 09:53:21 802.15.4 emulation: enabled
2025/08/29 09:53:21 fetching corpus: 0, signal 0/2000 (executing program)
2025/08/29 09:53:21 fetching corpus: 50, signal 17816/21409 (executing program)
2025/08/29 09:53:21 fetching corpus: 100, signal 29974/34904 (executing program)
2025/08/29 09:53:21 fetching corpus: 150, signal 42978/48916 (executing program)
2025/08/29 09:53:21 fetching corpus: 200, signal 49241/56330 (executing program)
2025/08/29 09:53:21 fetching corpus: 250, signal 53247/61470 (executing program)
2025/08/29 09:53:21 fetching corpus: 300, signal 58285/67413 (executing program)
2025/08/29 09:53:21 fetching corpus: 350, signal 61653/71768 (executing program)
2025/08/29 09:53:21 fetching corpus: 400, signal 68041/78779 (executing program)
2025/08/29 09:53:21 fetching corpus: 450, signal 71154/82712 (executing program)
2025/08/29 09:53:22 fetching corpus: 500, signal 73549/85924 (executing program)
2025/08/29 09:53:22 fetching corpus: 550, signal 76642/89718 (executing program)
2025/08/29 09:53:22 fetching corpus: 600, signal 79334/93149 (executing program)
2025/08/29 09:53:22 fetching corpus: 650, signal 81613/96118 (executing program)
2025/08/29 09:53:22 fetching corpus: 700, signal 84084/99180 (executing program)
2025/08/29 09:53:22 fetching corpus: 750, signal 86411/102040 (executing program)
2025/08/29 09:53:22 fetching corpus: 800, signal 88791/104961 (executing program)
2025/08/29 09:53:22 fetching corpus: 850, signal 90819/107501 (executing program)
2025/08/29 09:53:22 fetching corpus: 900, signal 92168/109480 (executing program)
2025/08/29 09:53:22 fetching corpus: 950, signal 93003/111038 (executing program)
2025/08/29 09:53:23 fetching corpus: 1000, signal 94294/112886 (executing program)
2025/08/29 09:53:23 fetching corpus: 1050, signal 96858/115688 (executing program)
2025/08/29 09:53:23 fetching corpus: 1100, signal 98560/117748 (executing program)
2025/08/29 09:53:23 fetching corpus: 1150, signal 101067/120383 (executing program)
2025/08/29 09:53:23 fetching corpus: 1200, signal 103658/122977 (executing program)
2025/08/29 09:53:23 fetching corpus: 1250, signal 105834/125272 (executing program)
2025/08/29 09:53:23 fetching corpus: 1300, signal 107659/127316 (executing program)
2025/08/29 09:53:23 fetching corpus: 1350, signal 108579/128686 (executing program)
2025/08/29 09:53:23 fetching corpus: 1400, signal 110066/130458 (executing program)
2025/08/29 09:53:23 fetching corpus: 1450, signal 111442/132015 (executing program)
2025/08/29 09:53:24 fetching corpus: 1500, signal 112569/133442 (executing program)
2025/08/29 09:53:24 fetching corpus: 1550, signal 114411/135228 (executing program)
2025/08/29 09:53:24 fetching corpus: 1600, signal 115420/136444 (executing program)
2025/08/29 09:53:24 fetching corpus: 1650, signal 116951/137985 (executing program)
2025/08/29 09:53:24 fetching corpus: 1700, signal 118929/139756 (executing program)
2025/08/29 09:53:24 fetching corpus: 1750, signal 120368/141124 (executing program)
2025/08/29 09:53:24 fetching corpus: 1800, signal 121327/142252 (executing program)
2025/08/29 09:53:24 fetching corpus: 1850, signal 122353/143395 (executing program)
2025/08/29 09:53:24 fetching corpus: 1900, signal 123308/144445 (executing program)
2025/08/29 09:53:24 fetching corpus: 1950, signal 123987/145340 (executing program)
2025/08/29 09:53:24 fetching corpus: 2000, signal 125290/146543 (executing program)
2025/08/29 09:53:25 fetching corpus: 2050, signal 126025/147460 (executing program)
2025/08/29 09:53:25 fetching corpus: 2100, signal 127129/148565 (executing program)
2025/08/29 09:53:25 fetching corpus: 2150, signal 127868/149446 (executing program)
2025/08/29 09:53:25 fetching corpus: 2200, signal 128473/150238 (executing program)
2025/08/29 09:53:25 fetching corpus: 2250, signal 129418/151219 (executing program)
2025/08/29 09:53:25 fetching corpus: 2300, signal 130514/152336 (executing program)
2025/08/29 09:53:25 fetching corpus: 2350, signal 131276/153130 (executing program)
2025/08/29 09:53:25 fetching corpus: 2400, signal 132062/153938 (executing program)
2025/08/29 09:53:25 fetching corpus: 2450, signal 133168/154854 (executing program)
2025/08/29 09:53:25 fetching corpus: 2500, signal 134082/155654 (executing program)
2025/08/29 09:53:25 fetching corpus: 2550, signal 134628/156289 (executing program)
2025/08/29 09:53:25 fetching corpus: 2600, signal 135713/157093 (executing program)
2025/08/29 09:53:26 fetching corpus: 2650, signal 136518/157779 (executing program)
2025/08/29 09:53:26 fetching corpus: 2700, signal 137284/158447 (executing program)
2025/08/29 09:53:26 fetching corpus: 2750, signal 138228/159153 (executing program)
2025/08/29 09:53:26 fetching corpus: 2800, signal 139026/159772 (executing program)
2025/08/29 09:53:26 fetching corpus: 2850, signal 139474/160282 (executing program)
2025/08/29 09:53:26 fetching corpus: 2900, signal 140031/160799 (executing program)
2025/08/29 09:53:26 fetching corpus: 2950, signal 140998/161486 (executing program)
2025/08/29 09:53:26 fetching corpus: 3000, signal 141710/162018 (executing program)
2025/08/29 09:53:26 fetching corpus: 3050, signal 142357/162490 (executing program)
2025/08/29 09:53:27 fetching corpus: 3100, signal 143148/163015 (executing program)
2025/08/29 09:53:27 fetching corpus: 3150, signal 143893/163502 (executing program)
2025/08/29 09:53:27 fetching corpus: 3200, signal 144668/163987 (executing program)
2025/08/29 09:53:27 fetching corpus: 3250, signal 145147/164388 (executing program)
2025/08/29 09:53:27 fetching corpus: 3300, signal 145738/164784 (executing program)
2025/08/29 09:53:27 fetching corpus: 3349, signal 146246/165138 (executing program)
2025/08/29 09:53:27 fetching corpus: 3399, signal 146619/165485 (executing program)
2025/08/29 09:53:27 fetching corpus: 3449, signal 147272/165881 (executing program)
2025/08/29 09:53:27 fetching corpus: 3499, signal 147611/166234 (executing program)
2025/08/29 09:53:27 fetching corpus: 3549, signal 148105/166567 (executing program)
2025/08/29 09:53:27 fetching corpus: 3599, signal 148561/166888 (executing program)
2025/08/29 09:53:27 fetching corpus: 3649, signal 149074/167195 (executing program)
2025/08/29 09:53:28 fetching corpus: 3699, signal 149780/167497 (executing program)
2025/08/29 09:53:28 fetching corpus: 3749, signal 150156/167791 (executing program)
2025/08/29 09:53:28 fetching corpus: 3798, signal 150709/168150 (executing program)
2025/08/29 09:53:28 fetching corpus: 3848, signal 151245/168436 (executing program)
2025/08/29 09:53:28 fetching corpus: 3897, signal 152082/168785 (executing program)
2025/08/29 09:53:28 fetching corpus: 3947, signal 152332/169008 (executing program)
2025/08/29 09:53:28 fetching corpus: 3997, signal 152867/169251 (executing program)
2025/08/29 09:53:28 fetching corpus: 4046, signal 153232/169474 (executing program)
2025/08/29 09:53:28 fetching corpus: 4096, signal 153765/169540 (executing program)
2025/08/29 09:53:28 fetching corpus: 4146, signal 154308/169582 (executing program)
2025/08/29 09:53:28 fetching corpus: 4194, signal 154605/169594 (executing program)
2025/08/29 09:53:29 fetching corpus: 4243, signal 155077/169620 (executing program)
2025/08/29 09:53:29 fetching corpus: 4290, signal 155507/169663 (executing program)
2025/08/29 09:53:29 fetching corpus: 4340, signal 155798/169663 (executing program)
2025/08/29 09:53:29 fetching corpus: 4390, signal 156670/169667 (executing program)
2025/08/29 09:53:29 fetching corpus: 4439, signal 157348/169689 (executing program)
2025/08/29 09:53:29 fetching corpus: 4489, signal 157837/169728 (executing program)
2025/08/29 09:53:29 fetching corpus: 4538, signal 158350/169731 (executing program)
2025/08/29 09:53:29 fetching corpus: 4586, signal 158867/169848 (executing program)
2025/08/29 09:53:29 fetching corpus: 4635, signal 159637/169851 (executing program)
2025/08/29 09:53:29 fetching corpus: 4685, signal 160155/169861 (executing program)
2025/08/29 09:53:29 fetching corpus: 4735, signal 160622/169865 (executing program)
2025/08/29 09:53:29 fetching corpus: 4785, signal 161027/169871 (executing program)
2025/08/29 09:53:30 fetching corpus: 4835, signal 161261/169879 (executing program)
2025/08/29 09:53:30 fetching corpus: 4885, signal 161757/169884 (executing program)
2025/08/29 09:53:30 fetching corpus: 4935, signal 162154/169884 (executing program)
2025/08/29 09:53:30 fetching corpus: 4985, signal 162830/169889 (executing program)
2025/08/29 09:53:30 fetching corpus: 5035, signal 163228/169914 (executing program)
2025/08/29 09:53:30 fetching corpus: 5085, signal 163577/169920 (executing program)
2025/08/29 09:53:30 fetching corpus: 5135, signal 163862/169932 (executing program)
2025/08/29 09:53:30 fetching corpus: 5185, signal 164156/169936 (executing program)
2025/08/29 09:53:30 fetching corpus: 5235, signal 164499/169948 (executing program)
2025/08/29 09:53:30 fetching corpus: 5285, signal 165842/169964 (executing program)
2025/08/29 09:53:31 fetching corpus: 5335, signal 166242/169964 (executing program)
2025/08/29 09:53:31 fetching corpus: 5385, signal 166622/169969 (executing program)
2025/08/29 09:53:31 fetching corpus: 5435, signal 166828/169969 (executing program)
2025/08/29 09:53:31 fetching corpus: 5485, signal 167189/169976 (executing program)
2025/08/29 09:53:31 fetching corpus: 5535, signal 167486/169985 (executing program)
2025/08/29 09:53:31 fetching corpus: 5574, signal 167721/170006 (executing program)
2025/08/29 09:53:31 fetching corpus: 5574, signal 167721/170006 (executing program)
2025/08/29 09:53:33 starting 8 fuzzer processes
09:53:33 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000080))

09:53:33 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x31, 0x0, 0x0)

09:53:33 executing program 5:
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x9c}, {0x6}]}, 0x10)

09:53:33 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0)

09:53:33 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dc3, 0x1, @perf_config_ext={0x8001, 0x5}}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

09:53:33 executing program 7:
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc9, 0x8}}}, 0x7)

09:53:33 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000000))

[   73.559447] audit: type=1400 audit(1756461213.788:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
09:53:33 executing program 6:
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "4cd30c", 0x10, 0x73, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "c99152", 0x0, "cf6c7b"}}}}}}}, 0x0)

[   74.662788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   74.664802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   74.666669] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   74.671267] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   74.674297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   74.796306] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   74.800919] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   74.802327] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   74.809782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   74.811230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   74.812986] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   74.815326] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   74.815839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   74.821732] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   74.824939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   74.825255] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   74.829377] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   74.834698] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   74.847260] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   74.851549] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   74.888547] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   74.890776] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   74.892445] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   74.900620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   74.902531] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   74.903635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   74.906716] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   74.912893] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   74.922352] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   74.924767] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   74.935134] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   74.944338] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   74.948288] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   74.965604] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   74.975424] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   75.014292] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   75.023888] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   75.028762] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   75.037834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   75.040306] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   76.696305] Bluetooth: hci0: command tx timeout
[   76.888224] Bluetooth: hci2: command tx timeout
[   76.891059] Bluetooth: hci3: command tx timeout
[   76.952079] Bluetooth: hci4: command tx timeout
[   76.952646] Bluetooth: hci1: command tx timeout
[   77.016107] Bluetooth: hci5: command tx timeout
[   77.016729] Bluetooth: hci6: command tx timeout
[   77.080121] Bluetooth: hci7: command tx timeout
[   78.744201] Bluetooth: hci0: command tx timeout
[   78.936367] Bluetooth: hci3: command tx timeout
[   78.936788] Bluetooth: hci2: command tx timeout
[   79.000256] Bluetooth: hci1: command tx timeout
[   79.000677] Bluetooth: hci4: command tx timeout
[   79.064111] Bluetooth: hci6: command tx timeout
[   79.064558] Bluetooth: hci5: command tx timeout
[   79.128090] Bluetooth: hci7: command tx timeout
[   80.792596] Bluetooth: hci0: command tx timeout
[   80.985668] Bluetooth: hci2: command tx timeout
[   80.986554] Bluetooth: hci3: command tx timeout
[   81.048181] Bluetooth: hci1: command tx timeout
[   81.048604] Bluetooth: hci4: command tx timeout
[   81.112214] Bluetooth: hci5: command tx timeout
[   81.112640] Bluetooth: hci6: command tx timeout
[   81.176071] Bluetooth: hci7: command tx timeout
[   82.840907] Bluetooth: hci0: command tx timeout
[   83.032130] Bluetooth: hci3: command tx timeout
[   83.032575] Bluetooth: hci2: command tx timeout
[   83.096218] Bluetooth: hci4: command tx timeout
[   83.096649] Bluetooth: hci1: command tx timeout
[   83.160074] Bluetooth: hci5: command tx timeout
[   83.160492] Bluetooth: hci6: command tx timeout
[   83.225138] Bluetooth: hci7: command tx timeout
[  110.029908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.030853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.179552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.180205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:54:10 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0)

09:54:11 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0)

09:54:11 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0)

09:54:11 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x5, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  111.064130] audit: type=1400 audit(1756461251.288:8): avc:  denied  { open } for  pid=3552 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  111.071975] audit: type=1400 audit(1756461251.289:9): avc:  denied  { kernel } for  pid=3552 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
09:54:11 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x5, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

09:54:11 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x5, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

09:54:12 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x5, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

09:54:12 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x18, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0)

[  113.473508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.474397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.639502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.640141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.941535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.942150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.072087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.072720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.177197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.177827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.290934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.291697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.395684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.396782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.476469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.477902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.595650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.596402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.659851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.660472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.807448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.808284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.846323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.846967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.947148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.947769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.976465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.977060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:54:16 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x31, 0x0, 0x0)

09:54:16 executing program 7:
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc9, 0x8}}}, 0x7)

09:54:16 executing program 6:
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "4cd30c", 0x10, 0x73, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "c99152", 0x0, "cf6c7b"}}}}}}}, 0x0)

09:54:16 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000080))

09:54:16 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dc3, 0x1, @perf_config_ext={0x8001, 0x5}}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

09:54:16 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000000))

09:54:16 executing program 5:
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x9c}, {0x6}]}, 0x10)

09:54:16 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x18, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0)

09:54:16 executing program 5:
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x9c}, {0x6}]}, 0x10)

09:54:16 executing program 6:
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "4cd30c", 0x10, 0x73, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "c99152", 0x0, "cf6c7b"}}}}}}}, 0x0)

09:54:16 executing program 7:
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc9, 0x8}}}, 0x7)

09:54:16 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000000))

09:54:16 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x18, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0)

09:54:16 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000080))

09:54:16 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x31, 0x0, 0x0)

09:54:16 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dc3, 0x1, @perf_config_ext={0x8001, 0x5}}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

09:54:16 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000080))

09:54:16 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x18, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0)

09:54:16 executing program 7:
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc9, 0x8}}}, 0x7)

09:54:16 executing program 5:
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x9c}, {0x6}]}, 0x10)

09:54:16 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000000))

09:54:16 executing program 6:
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "4cd30c", 0x10, 0x73, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "c99152", 0x0, "cf6c7b"}}}}}}}, 0x0)

[  116.401547] Oops: general protection fault, probably for non-canonical address 0xe6fffc0000000032: 0000 [#1] SMP KASAN NOPTI
[  116.402682] KASAN: maybe wild-memory-access in range [0x3800000000000190-0x3800000000000197]
[  116.403505] CPU: 0 UID: 0 PID: 3951 Comm: syz-executor.4 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  116.405404] Tainted: [W]=WARN
[  116.406393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  116.408471] RIP: 0010:perf_tp_event+0x175/0xe70
[  116.409693] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  116.414440] RSP: 0018:ffff888015d6f780 EFLAGS: 00010012
[  116.414987] RAX: 0700000000000032 RBX: 37ffffffffffffa0 RCX: ffffc90005015000
[  116.415676] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 3800000000000190
[  116.416382] RBP: ffff888015d6f9f0 R08: ffff88806ce31340 R09: ffffe8ffffc15c38
[  116.417074] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  116.417769] R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000
[  116.418462] FS:  00007f481bbfc700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  116.419402] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.420124] CR2: 00007f481e79a018 CR3: 000000000d5fa000 CR4: 0000000000350ef0
[  116.420980] Call Trace:
[  116.421312]  <TASK>
[  116.421607]  ? merge_sched_in+0xcb/0x1810
[  116.422079]  ? __pfx_perf_tp_event+0x10/0x10
[  116.422657]  ? __asan_memcpy+0x3d/0x60
[  116.423152]  ? __pfx_visit_groups_merge.constprop.0.isra.0+0x10/0x10
[  116.423921]  ? lock_is_held_type+0x9e/0x120
[  116.424424]  ? ctx_sched_in+0x134/0x9b0
[  116.424917]  ? tracing_gen_ctx_irq_test+0x167/0x1f0
[  116.425528]  ? perf_swevent_event+0x63/0x3f0
[  116.426079]  ? perf_tp_event+0x807/0xe70
[  116.426577]  ? perf_trace_run_bpf_submit+0xef/0x180
[  116.427090]  perf_trace_run_bpf_submit+0xef/0x180
[  116.427604]  perf_trace_preemptirq_template+0x259/0x430
[  116.428149]  ? mark_held_locks+0x49/0x80
[  116.428579]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  116.429182]  ? _raw_spin_lock_irqsave+0x53/0x60
[  116.429669]  trace_irq_disable.constprop.0+0xa6/0x100
[  116.430220]  _raw_spin_lock_irqsave+0x53/0x60
[  116.430732]  try_to_wake_up+0xa0/0x11d0
[  116.431146]  ? __pfx_try_to_wake_up+0x10/0x10
[  116.431610]  ? plist_del+0x122/0x270
[  116.431993]  ? find_held_lock+0x2b/0x80
[  116.432405]  ? futex_wake+0x474/0x540
[  116.432800]  wake_up_q+0xa1/0x130
[  116.433161]  futex_wake+0x47e/0x540
[  116.433541]  ? __pfx_futex_wake+0x10/0x10
[  116.433965]  ? __do_sys_perf_event_open+0x44d/0x2c20
[  116.434494]  ? lock_release+0xc8/0x290
[  116.434917]  do_futex+0x26d/0x370
[  116.435278]  ? __pfx_do_futex+0x10/0x10
[  116.435687]  ? perf_trace_run_bpf_submit+0xef/0x180
[  116.436198]  __x64_sys_futex+0x1c9/0x4d0
[  116.436606]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  116.437201]  ? __pfx___x64_sys_futex+0x10/0x10
[  116.437663]  do_syscall_64+0xbf/0x360
[  116.438048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.438594] RIP: 0033:0x7f481e686b19
[  116.438977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  116.440764] RSP: 002b:00007f481bbfc218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  116.441517] RAX: ffffffffffffffda RBX: 00007f481e799f68 RCX: 00007f481e686b19
[  116.442219] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f481e799f6c
[  116.442956] RBP: 00007f481e799f60 R08: 000000000000000e R09: 0000000000000000
[  116.443656] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f481e799f6c
[  116.444357] R13: 00007fff22c5ff4f R14: 00007f481bbfc300 R15: 0000000000022000
[  116.445064]  </TASK>
[  116.445299] Modules linked in:
[  116.445621] ---[ end trace 0000000000000000 ]---
[  116.446086] RIP: 0010:perf_tp_event+0x175/0xe70
[  116.446582] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  116.448388] RSP: 0018:ffff888015d6f780 EFLAGS: 00010012
[  116.448917] RAX: 0700000000000032 RBX: 37ffffffffffffa0 RCX: ffffc90005015000
[  116.449611] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 3800000000000190
[  116.450353] RBP: ffff888015d6f9f0 R08: ffff88806ce31340 R09: ffffe8ffffc15c38
[  116.451188] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  116.452024] R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000
[  116.452775] FS:  00007f481bbfc700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  116.453567] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.454135] CR2: 00007f481e79a018 CR3: 000000000d5fa000 CR4: 0000000000350ef0
[  116.454842] note: syz-executor.4[3951] exited with irqs disabled
[  116.455510] Oops: general protection fault, probably for non-canonical address 0xe6fffc0000000032: 0000 [#2] SMP KASAN NOPTI
[  116.456602] KASAN: maybe wild-memory-access in range [0x3800000000000190-0x3800000000000197]
[  116.457446] CPU: 0 UID: 0 PID: 3951 Comm: syz-executor.4 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  116.458621] Tainted: [D]=DIE, [W]=WARN
[  116.459062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  116.459978] RIP: 0010:perf_tp_event+0x175/0xe70
[  116.460468] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  116.462431] RSP: 0018:ffff88806ce08b40 EFLAGS: 00010012
[  116.463081] RAX: 0700000000000032 RBX: 37ffffffffffffa0 RCX: ffffffff81898973
[  116.463932] RDX: ffff88800f44d280 RSI: ffffffff818995b7 RDI: 3800000000000190
[  116.464778] RBP: ffff88806ce08db0 R08: ffff88806ce313e8 R09: ffffe8ffffc15c38
[  116.465625] R10: 0000000000000000 R11: ffff88801a1ff098 R12: dffffc0000000000
[  116.466481] R13: 0000000000000000 R14: ffff88806ce313e8 R15: dffffc0000000000
[  116.467350] FS:  00007f481bbfc700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  116.468307] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.469005] CR2: 00007f481e79a018 CR3: 000000000d5fa000 CR4: 0000000000350ef0
[  116.469864] Call Trace:
[  116.470176]  <IRQ>
[  116.470438]  ? __pfx_perf_tp_event+0x10/0x10
[  116.471003]  ? reweight_entity+0x3ad/0x800
[  116.471530]  ? kvm_sched_clock_read+0x16/0x30
[  116.472091]  ? enqueue_task_fair+0xded/0x1e00
[  116.472659]  ? check_preempt_wakeup_fair+0x6e/0x950
[  116.473264]  ? wakeup_preempt+0x140/0x2a0
[  116.473772]  ? lock_release+0x1c7/0x290
[  116.474211]  ? lock_release+0x1c7/0x290
[  116.474621]  ? do_raw_spin_unlock+0x53/0x220
[  116.475068]  ? _raw_spin_unlock_irqrestore+0x22/0x50
[  116.475667]  ? try_to_wake_up+0x8ae/0x11d0
[  116.476189]  ? perf_trace_run_bpf_submit+0xef/0x180
[  116.476773]  ? lock_release+0x1c7/0x290
[  116.477260]  perf_trace_run_bpf_submit+0xef/0x180
[  116.477841]  perf_trace_preemptirq_template+0x259/0x430
[  116.478499]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  116.479240]  ? read_tsc+0x9/0x20
[  116.479675]  ? ktime_get+0x16d/0x270
[  116.480152]  ? __pfx_lapic_next_deadline+0x10/0x10
[  116.480770]  ? clockevents_program_event+0x135/0x360
[  116.481412]  ? _raw_spin_lock_irq+0x42/0x50
[  116.481920]  trace_irq_disable.constprop.0+0xa6/0x100
[  116.482564]  _raw_spin_lock_irq+0x42/0x50
[  116.483082]  run_timer_softirq+0x10f/0x210
[  116.483618]  handle_softirqs+0x1b1/0x770
[  116.484152]  __irq_exit_rcu+0xc4/0x100
[  116.484653]  irq_exit_rcu+0x9/0x20
[  116.485101]  sysvec_apic_timer_interrupt+0x70/0x80
[  116.485713]  </IRQ>
[  116.485999]  <TASK>
[  116.486276]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  116.486919] RIP: 0010:make_task_dead+0xa2/0x3b0
[  116.487506] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 <e8> b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de
[  116.489667] RSP: 0018:ffff888015d6ff28 EFLAGS: 00000246
[  116.490323] RAX: 0000000000000001 RBX: ffff88800f44d280 RCX: ffffffff817c2b86
[  116.491197] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234
[  116.492041] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000
[  116.492864] R10: ffffffff8643ac57 R11: 0000000000000001 R12: ffff88800f44d280
[  116.493709] R13: 0000000000000000 R14: e6fffc0000000032 R15: 0000000000000000
[  116.494553]  ? trace_irq_enable.constprop.0+0x26/0x100
[  116.495097]  ? make_task_dead+0x214/0x3b0
[  116.495507]  ? make_task_dead+0x214/0x3b0
[  116.495906]  ? do_syscall_64+0xbf/0x360
[  116.496288]  rewind_stack_and_make_dead+0x16/0x20
[  116.496755] RIP: 0033:0x7f481e686b19
[  116.497108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  116.498851] RSP: 002b:00007f481bbfc218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  116.499562] RAX: ffffffffffffffda RBX: 00007f481e799f68 RCX: 00007f481e686b19
[  116.500228] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f481e799f6c
[  116.500889] RBP: 00007f481e799f60 R08: 000000000000000e R09: 0000000000000000
[  116.501549] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f481e799f6c
[  116.502216] R13: 00007fff22c5ff4f R14: 00007f481bbfc300 R15: 0000000000022000
[  116.502908]  </TASK>
[  116.503132] Modules linked in:
[  116.503438] ---[ end trace 0000000000000000 ]---
[  116.503873] RIP: 0010:perf_tp_event+0x175/0xe70
[  116.504315] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  116.506019] RSP: 0018:ffff888015d6f780 EFLAGS: 00010012
[  116.506523] RAX: 0700000000000032 RBX: 37ffffffffffffa0 RCX: ffffc90005015000
[  116.507204] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 3800000000000190
[  116.507866] RBP: ffff888015d6f9f0 R08: ffff88806ce31340 R09: ffffe8ffffc15c38
[  116.508528] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  116.509196] R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000
[  116.509861] FS:  00007f481bbfc700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  116.510608] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.511147] CR2: 00007f481e79a018 CR3: 000000000d5fa000 CR4: 0000000000350ef0
[  116.511820] Kernel panic - not syncing: Fatal exception in interrupt
[  116.512611] Kernel Offset: disabled
[  116.512943] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---

VM DIAGNOSIS:
09:54:16  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888015d6f050
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000065646f43
R12=0000000000000000 R13=ffffffff88724190 R14=ffffffff88724140 R15=ffffffff88724400
RIP=ffffffff828e331d RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f481bbfc700 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe4900000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f481e79a018 CR3=000000000d5fa000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f481e76d7c000007f481e76d7c8
XMM02=00007f481e76d7e000007f481e76d7c0 XMM03=00007f481e76d7c800007f481e76d7c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000004cb8a23120 RBX=0000000000000000 RCX=00000000000006e0 RDX=000000000000004c
RSI=ffff88806cf238c0 RDI=000000000001590a RBP=ffff88806cf238c0 RSP=ffff88806cf08ed8
R8 =0000000000000001 R9 =0000000000000000 R10=000000000003dbaf R11=ffff88800e648c98
R12=000000000001590a R13=0000000000000000 R14=0000000000000000 R15=ffff88806cf28080
RIP=ffffffff81327f55 RFL=00000013 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe1900000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555738c8c58 CR3=0000000033c9a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000