Warning: Permanently added '[localhost]:28522' (ECDSA) to the list of known hosts. 2025/09/01 12:01:09 fuzzer started 2025/09/01 12:01:09 dialing manager at localhost:35473 syzkaller login: [ 58.690122] cgroup: Unknown subsys name 'net' [ 58.766723] cgroup: Unknown subsys name 'cpuset' [ 58.794129] cgroup: Unknown subsys name 'rlimit' 2025/09/01 12:01:19 syscalls: 2214 2025/09/01 12:01:19 code coverage: enabled 2025/09/01 12:01:19 comparison tracing: enabled 2025/09/01 12:01:19 extra coverage: enabled 2025/09/01 12:01:19 setuid sandbox: enabled 2025/09/01 12:01:19 namespace sandbox: enabled 2025/09/01 12:01:19 Android sandbox: enabled 2025/09/01 12:01:19 fault injection: enabled 2025/09/01 12:01:19 leak checking: enabled 2025/09/01 12:01:19 net packet injection: enabled 2025/09/01 12:01:19 net device setup: enabled 2025/09/01 12:01:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 12:01:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 12:01:19 USB emulation: enabled 2025/09/01 12:01:19 hci packet injection: enabled 2025/09/01 12:01:19 wifi device emulation: enabled 2025/09/01 12:01:19 802.15.4 emulation: enabled 2025/09/01 12:01:19 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 12:01:19 fetching corpus: 50, signal 30325/33686 (executing program) 2025/09/01 12:01:19 fetching corpus: 100, signal 38448/43268 (executing program) 2025/09/01 12:01:19 fetching corpus: 150, signal 44368/50546 (executing program) 2025/09/01 12:01:19 fetching corpus: 200, signal 49507/56952 (executing program) 2025/09/01 12:01:19 fetching corpus: 250, signal 53687/62359 (executing program) 2025/09/01 12:01:19 fetching corpus: 300, signal 57555/67371 (executing program) 2025/09/01 12:01:19 fetching corpus: 350, signal 63355/74093 (executing program) 2025/09/01 12:01:19 fetching corpus: 400, signal 65776/77683 (executing program) 2025/09/01 12:01:20 fetching corpus: 450, signal 68293/81241 (executing program) 2025/09/01 12:01:20 fetching corpus: 500, signal 71737/85588 (executing program) 2025/09/01 12:01:20 fetching corpus: 550, signal 75359/90044 (executing program) 2025/09/01 12:01:20 fetching corpus: 600, signal 78446/93952 (executing program) 2025/09/01 12:01:20 fetching corpus: 650, signal 80856/97203 (executing program) 2025/09/01 12:01:20 fetching corpus: 700, signal 84688/101599 (executing program) 2025/09/01 12:01:20 fetching corpus: 750, signal 87513/105063 (executing program) 2025/09/01 12:01:20 fetching corpus: 800, signal 89280/107658 (executing program) 2025/09/01 12:01:20 fetching corpus: 850, signal 90852/110025 (executing program) 2025/09/01 12:01:20 fetching corpus: 900, signal 92680/112576 (executing program) 2025/09/01 12:01:21 fetching corpus: 950, signal 93787/114505 (executing program) 2025/09/01 12:01:21 fetching corpus: 1000, signal 95585/116945 (executing program) 2025/09/01 12:01:21 fetching corpus: 1050, signal 97339/119299 (executing program) 2025/09/01 12:01:21 fetching corpus: 1100, signal 99230/121762 (executing program) 2025/09/01 12:01:21 fetching corpus: 1150, signal 100090/123368 (executing program) 2025/09/01 12:01:21 fetching corpus: 1200, signal 101039/125090 (executing program) 2025/09/01 12:01:21 fetching corpus: 1250, signal 102365/126999 (executing program) 2025/09/01 12:01:21 fetching corpus: 1300, signal 104109/129225 (executing program) 2025/09/01 12:01:21 fetching corpus: 1350, signal 105471/131102 (executing program) 2025/09/01 12:01:21 fetching corpus: 1400, signal 106601/132791 (executing program) 2025/09/01 12:01:21 fetching corpus: 1450, signal 108272/134850 (executing program) 2025/09/01 12:01:21 fetching corpus: 1500, signal 109581/136649 (executing program) 2025/09/01 12:01:22 fetching corpus: 1550, signal 111128/138574 (executing program) 2025/09/01 12:01:22 fetching corpus: 1600, signal 112410/140253 (executing program) 2025/09/01 12:01:22 fetching corpus: 1650, signal 113772/141958 (executing program) 2025/09/01 12:01:22 fetching corpus: 1700, signal 115477/143890 (executing program) 2025/09/01 12:01:22 fetching corpus: 1750, signal 116654/145494 (executing program) 2025/09/01 12:01:22 fetching corpus: 1800, signal 117550/146843 (executing program) 2025/09/01 12:01:22 fetching corpus: 1850, signal 118827/148472 (executing program) 2025/09/01 12:01:22 fetching corpus: 1900, signal 119897/149916 (executing program) 2025/09/01 12:01:22 fetching corpus: 1950, signal 120860/151261 (executing program) 2025/09/01 12:01:23 fetching corpus: 2000, signal 122087/152709 (executing program) 2025/09/01 12:01:23 fetching corpus: 2050, signal 122938/153982 (executing program) 2025/09/01 12:01:23 fetching corpus: 2100, signal 123740/155145 (executing program) 2025/09/01 12:01:23 fetching corpus: 2150, signal 124595/156379 (executing program) 2025/09/01 12:01:23 fetching corpus: 2200, signal 125559/157612 (executing program) 2025/09/01 12:01:23 fetching corpus: 2250, signal 126369/158749 (executing program) 2025/09/01 12:01:23 fetching corpus: 2300, signal 127168/159868 (executing program) 2025/09/01 12:01:23 fetching corpus: 2350, signal 127908/160964 (executing program) 2025/09/01 12:01:23 fetching corpus: 2400, signal 128481/161936 (executing program) 2025/09/01 12:01:23 fetching corpus: 2450, signal 128969/162899 (executing program) 2025/09/01 12:01:24 fetching corpus: 2500, signal 129628/163936 (executing program) 2025/09/01 12:01:24 fetching corpus: 2550, signal 130172/164895 (executing program) 2025/09/01 12:01:24 fetching corpus: 2600, signal 131226/165988 (executing program) 2025/09/01 12:01:24 fetching corpus: 2650, signal 132162/167069 (executing program) 2025/09/01 12:01:24 fetching corpus: 2700, signal 132928/168064 (executing program) 2025/09/01 12:01:24 fetching corpus: 2750, signal 133654/169004 (executing program) 2025/09/01 12:01:24 fetching corpus: 2800, signal 134190/169864 (executing program) 2025/09/01 12:01:24 fetching corpus: 2850, signal 135089/170862 (executing program) 2025/09/01 12:01:24 fetching corpus: 2900, signal 136331/171984 (executing program) 2025/09/01 12:01:24 fetching corpus: 2950, signal 137023/172877 (executing program) 2025/09/01 12:01:24 fetching corpus: 3000, signal 137564/173663 (executing program) 2025/09/01 12:01:25 fetching corpus: 3050, signal 138151/174470 (executing program) 2025/09/01 12:01:25 fetching corpus: 3100, signal 138660/175222 (executing program) 2025/09/01 12:01:25 fetching corpus: 3150, signal 139588/176099 (executing program) 2025/09/01 12:01:25 fetching corpus: 3200, signal 140318/176954 (executing program) 2025/09/01 12:01:25 fetching corpus: 3250, signal 141343/177947 (executing program) 2025/09/01 12:01:25 fetching corpus: 3300, signal 142031/178747 (executing program) 2025/09/01 12:01:25 fetching corpus: 3350, signal 143352/179744 (executing program) 2025/09/01 12:01:25 fetching corpus: 3400, signal 144014/180479 (executing program) 2025/09/01 12:01:25 fetching corpus: 3450, signal 144514/181118 (executing program) 2025/09/01 12:01:25 fetching corpus: 3500, signal 144989/181781 (executing program) 2025/09/01 12:01:26 fetching corpus: 3550, signal 145616/182464 (executing program) 2025/09/01 12:01:26 fetching corpus: 3600, signal 146111/183084 (executing program) 2025/09/01 12:01:26 fetching corpus: 3650, signal 147890/183998 (executing program) 2025/09/01 12:01:26 fetching corpus: 3700, signal 148520/184584 (executing program) 2025/09/01 12:01:26 fetching corpus: 3750, signal 148934/185149 (executing program) 2025/09/01 12:01:26 fetching corpus: 3800, signal 149335/185713 (executing program) 2025/09/01 12:01:26 fetching corpus: 3850, signal 149770/186263 (executing program) 2025/09/01 12:01:26 fetching corpus: 3900, signal 150266/186841 (executing program) 2025/09/01 12:01:26 fetching corpus: 3950, signal 150687/187442 (executing program) 2025/09/01 12:01:26 fetching corpus: 4000, signal 151326/187990 (executing program) 2025/09/01 12:01:26 fetching corpus: 4050, signal 151731/188519 (executing program) 2025/09/01 12:01:26 fetching corpus: 4100, signal 152120/189033 (executing program) 2025/09/01 12:01:27 fetching corpus: 4150, signal 152704/189552 (executing program) 2025/09/01 12:01:27 fetching corpus: 4200, signal 153165/190063 (executing program) 2025/09/01 12:01:27 fetching corpus: 4250, signal 153655/190542 (executing program) 2025/09/01 12:01:27 fetching corpus: 4300, signal 154167/190991 (executing program) 2025/09/01 12:01:27 fetching corpus: 4350, signal 154627/191482 (executing program) 2025/09/01 12:01:27 fetching corpus: 4400, signal 155055/191972 (executing program) 2025/09/01 12:01:27 fetching corpus: 4450, signal 155383/192395 (executing program) 2025/09/01 12:01:27 fetching corpus: 4500, signal 155860/192849 (executing program) 2025/09/01 12:01:27 fetching corpus: 4550, signal 156341/193269 (executing program) 2025/09/01 12:01:27 fetching corpus: 4600, signal 156872/193705 (executing program) 2025/09/01 12:01:28 fetching corpus: 4650, signal 157314/194130 (executing program) 2025/09/01 12:01:28 fetching corpus: 4700, signal 157848/194537 (executing program) 2025/09/01 12:01:28 fetching corpus: 4750, signal 158166/194926 (executing program) 2025/09/01 12:01:28 fetching corpus: 4800, signal 158833/194992 (executing program) 2025/09/01 12:01:28 fetching corpus: 4850, signal 159182/195018 (executing program) 2025/09/01 12:01:28 fetching corpus: 4900, signal 159604/195042 (executing program) 2025/09/01 12:01:28 fetching corpus: 4950, signal 160058/195042 (executing program) 2025/09/01 12:01:28 fetching corpus: 5000, signal 161717/195046 (executing program) 2025/09/01 12:01:28 fetching corpus: 5050, signal 162020/195063 (executing program) 2025/09/01 12:01:28 fetching corpus: 5100, signal 162606/195073 (executing program) 2025/09/01 12:01:28 fetching corpus: 5150, signal 163146/195094 (executing program) 2025/09/01 12:01:29 fetching corpus: 5200, signal 163862/195116 (executing program) 2025/09/01 12:01:29 fetching corpus: 5250, signal 164202/195136 (executing program) 2025/09/01 12:01:29 fetching corpus: 5300, signal 164508/195145 (executing program) 2025/09/01 12:01:29 fetching corpus: 5350, signal 165205/195161 (executing program) 2025/09/01 12:01:29 fetching corpus: 5400, signal 165758/195203 (executing program) 2025/09/01 12:01:29 fetching corpus: 5450, signal 166229/195205 (executing program) 2025/09/01 12:01:29 fetching corpus: 5500, signal 166518/195213 (executing program) 2025/09/01 12:01:29 fetching corpus: 5550, signal 166987/195221 (executing program) 2025/09/01 12:01:29 fetching corpus: 5600, signal 167465/195231 (executing program) 2025/09/01 12:01:29 fetching corpus: 5650, signal 167812/195247 (executing program) 2025/09/01 12:01:30 fetching corpus: 5700, signal 168057/195252 (executing program) 2025/09/01 12:01:30 fetching corpus: 5750, signal 168417/195258 (executing program) 2025/09/01 12:01:30 fetching corpus: 5800, signal 168867/195261 (executing program) 2025/09/01 12:01:30 fetching corpus: 5850, signal 169464/195265 (executing program) 2025/09/01 12:01:30 fetching corpus: 5900, signal 169785/195265 (executing program) 2025/09/01 12:01:30 fetching corpus: 5950, signal 170150/195275 (executing program) 2025/09/01 12:01:30 fetching corpus: 6000, signal 170529/195278 (executing program) 2025/09/01 12:01:30 fetching corpus: 6050, signal 170793/195280 (executing program) 2025/09/01 12:01:30 fetching corpus: 6100, signal 171382/195287 (executing program) 2025/09/01 12:01:30 fetching corpus: 6150, signal 171604/195290 (executing program) 2025/09/01 12:01:31 fetching corpus: 6200, signal 172007/195301 (executing program) 2025/09/01 12:01:31 fetching corpus: 6250, signal 172419/195304 (executing program) 2025/09/01 12:01:31 fetching corpus: 6300, signal 172810/195341 (executing program) 2025/09/01 12:01:31 fetching corpus: 6350, signal 173243/195342 (executing program) 2025/09/01 12:01:31 fetching corpus: 6400, signal 173626/195347 (executing program) 2025/09/01 12:01:31 fetching corpus: 6450, signal 173996/195347 (executing program) 2025/09/01 12:01:31 fetching corpus: 6500, signal 174298/195355 (executing program) 2025/09/01 12:01:31 fetching corpus: 6550, signal 174792/195365 (executing program) 2025/09/01 12:01:31 fetching corpus: 6600, signal 175056/195373 (executing program) 2025/09/01 12:01:31 fetching corpus: 6650, signal 175398/195382 (executing program) 2025/09/01 12:01:31 fetching corpus: 6700, signal 175616/195410 (executing program) 2025/09/01 12:01:32 fetching corpus: 6750, signal 175979/195413 (executing program) 2025/09/01 12:01:32 fetching corpus: 6800, signal 176164/195425 (executing program) 2025/09/01 12:01:32 fetching corpus: 6850, signal 176521/195475 (executing program) 2025/09/01 12:01:32 fetching corpus: 6900, signal 176880/195475 (executing program) 2025/09/01 12:01:32 fetching corpus: 6950, signal 177303/195542 (executing program) 2025/09/01 12:01:32 fetching corpus: 7000, signal 179009/195543 (executing program) 2025/09/01 12:01:32 fetching corpus: 7050, signal 179341/195544 (executing program) 2025/09/01 12:01:32 fetching corpus: 7100, signal 179678/195550 (executing program) 2025/09/01 12:01:32 fetching corpus: 7150, signal 180076/195578 (executing program) 2025/09/01 12:01:32 fetching corpus: 7200, signal 180377/195578 (executing program) 2025/09/01 12:01:32 fetching corpus: 7250, signal 180674/195597 (executing program) 2025/09/01 12:01:33 fetching corpus: 7300, signal 181020/195602 (executing program) 2025/09/01 12:01:33 fetching corpus: 7350, signal 181256/195602 (executing program) 2025/09/01 12:01:33 fetching corpus: 7400, signal 181523/195606 (executing program) 2025/09/01 12:01:33 fetching corpus: 7450, signal 181779/195612 (executing program) 2025/09/01 12:01:33 fetching corpus: 7500, signal 182003/195618 (executing program) 2025/09/01 12:01:33 fetching corpus: 7550, signal 182281/195622 (executing program) 2025/09/01 12:01:33 fetching corpus: 7600, signal 182515/195625 (executing program) 2025/09/01 12:01:33 fetching corpus: 7650, signal 182796/195625 (executing program) 2025/09/01 12:01:33 fetching corpus: 7700, signal 183024/195628 (executing program) 2025/09/01 12:01:33 fetching corpus: 7750, signal 183262/195636 (executing program) 2025/09/01 12:01:33 fetching corpus: 7800, signal 183643/195639 (executing program) 2025/09/01 12:01:33 fetching corpus: 7850, signal 183967/195684 (executing program) 2025/09/01 12:01:34 fetching corpus: 7900, signal 184250/195686 (executing program) 2025/09/01 12:01:34 fetching corpus: 7950, signal 184504/195701 (executing program) 2025/09/01 12:01:34 fetching corpus: 8000, signal 184758/195711 (executing program) 2025/09/01 12:01:34 fetching corpus: 8050, signal 185012/195712 (executing program) 2025/09/01 12:01:34 fetching corpus: 8100, signal 185276/195714 (executing program) 2025/09/01 12:01:34 fetching corpus: 8150, signal 185509/195720 (executing program) 2025/09/01 12:01:34 fetching corpus: 8200, signal 185859/195743 (executing program) 2025/09/01 12:01:34 fetching corpus: 8250, signal 186066/195765 (executing program) 2025/09/01 12:01:34 fetching corpus: 8300, signal 186374/195778 (executing program) 2025/09/01 12:01:34 fetching corpus: 8350, signal 186561/195782 (executing program) 2025/09/01 12:01:34 fetching corpus: 8400, signal 186811/195809 (executing program) 2025/09/01 12:01:35 fetching corpus: 8450, signal 187093/195810 (executing program) 2025/09/01 12:01:35 fetching corpus: 8500, signal 187865/195813 (executing program) 2025/09/01 12:01:35 fetching corpus: 8550, signal 188138/195818 (executing program) 2025/09/01 12:01:35 fetching corpus: 8600, signal 188571/195819 (executing program) 2025/09/01 12:01:35 fetching corpus: 8650, signal 188866/195836 (executing program) 2025/09/01 12:01:35 fetching corpus: 8700, signal 189199/195839 (executing program) 2025/09/01 12:01:35 fetching corpus: 8750, signal 189639/195843 (executing program) 2025/09/01 12:01:35 fetching corpus: 8800, signal 189793/195854 (executing program) 2025/09/01 12:01:35 fetching corpus: 8850, signal 190271/195855 (executing program) 2025/09/01 12:01:35 fetching corpus: 8900, signal 190584/195872 (executing program) 2025/09/01 12:01:35 fetching corpus: 8950, signal 190782/195873 (executing program) 2025/09/01 12:01:35 fetching corpus: 9000, signal 190981/195889 (executing program) 2025/09/01 12:01:35 fetching corpus: 9050, signal 191209/195902 (executing program) 2025/09/01 12:01:36 fetching corpus: 9100, signal 191819/195906 (executing program) 2025/09/01 12:01:36 fetching corpus: 9150, signal 192178/195910 (executing program) 2025/09/01 12:01:36 fetching corpus: 9200, signal 192468/195910 (executing program) 2025/09/01 12:01:36 fetching corpus: 9250, signal 192743/195910 (executing program) 2025/09/01 12:01:36 fetching corpus: 9270, signal 192866/195910 (executing program) 2025/09/01 12:01:36 fetching corpus: 9270, signal 192866/195910 (executing program) 2025/09/01 12:01:38 starting 8 fuzzer processes 12:01:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="28000000120001d3"], 0x28}], 0x1}, 0x0) close(r0) 12:01:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)) 12:01:38 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/1, 0x1) 12:01:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000580)={&(0x7f0000000040)=@in={0x2, 0x4e24, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[@mark={{0x14, 0x1, 0xc}}], 0x18}, 0x0) 12:01:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x800454cf, &(0x7f0000000040)={'vcan0\x00'}) [ 87.248229] audit: type=1400 audit(1756728098.384:7): avc: denied { execmem } for pid=276 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:01:38 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/123, 0x7b, 0x7fff) 12:01:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') pread64(r0, &(0x7f0000000140)=""/154, 0x9a, 0x4) 12:01:38 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, 0x0, 0x0) [ 88.418759] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.421384] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.423537] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.427781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.429909] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.433648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.435911] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.437454] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.443519] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.448972] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.533213] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.547216] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.548765] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.552558] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.553905] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.557042] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.558344] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.564960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.566487] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.573369] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.577994] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.600153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.603118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.636851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.638495] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.644941] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.645803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.654224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.656274] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.658405] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.661513] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.673466] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.677851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.686747] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.688891] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.713334] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.713430] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.725270] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.733725] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.755034] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.508986] Bluetooth: hci0: command tx timeout [ 90.508997] Bluetooth: hci1: command tx timeout [ 90.634131] Bluetooth: hci3: command tx timeout [ 90.634674] Bluetooth: hci2: command tx timeout [ 90.761758] Bluetooth: hci6: command tx timeout [ 90.762773] Bluetooth: hci4: command tx timeout [ 90.762798] Bluetooth: hci5: command tx timeout [ 90.825945] Bluetooth: hci7: command tx timeout [ 92.553866] Bluetooth: hci1: command tx timeout [ 92.554771] Bluetooth: hci0: command tx timeout [ 92.681843] Bluetooth: hci2: command tx timeout [ 92.682494] Bluetooth: hci3: command tx timeout [ 92.810410] Bluetooth: hci5: command tx timeout [ 92.811296] Bluetooth: hci4: command tx timeout [ 92.811357] Bluetooth: hci6: command tx timeout [ 92.874895] Bluetooth: hci7: command tx timeout [ 94.601643] Bluetooth: hci1: command tx timeout [ 94.602062] Bluetooth: hci0: command tx timeout [ 94.729674] Bluetooth: hci2: command tx timeout [ 94.729690] Bluetooth: hci3: command tx timeout [ 94.858703] Bluetooth: hci5: command tx timeout [ 94.858727] Bluetooth: hci4: command tx timeout [ 94.859544] Bluetooth: hci6: command tx timeout [ 94.921839] Bluetooth: hci7: command tx timeout [ 96.649645] Bluetooth: hci0: command tx timeout [ 96.650110] Bluetooth: hci1: command tx timeout [ 96.777752] Bluetooth: hci3: command tx timeout [ 96.778227] Bluetooth: hci2: command tx timeout [ 96.905689] Bluetooth: hci6: command tx timeout [ 96.906163] Bluetooth: hci4: command tx timeout [ 96.906547] Bluetooth: hci5: command tx timeout [ 96.969710] Bluetooth: hci7: command tx timeout [ 127.457872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.458557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.704151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.704808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.145693] audit: type=1400 audit(1756728139.279:8): avc: denied { open } for pid=3676 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.153932] audit: type=1400 audit(1756728139.279:9): avc: denied { kernel } for pid=3676 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:02:19 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x10}) [ 128.334489] EXT4-fs warning (device sda): verify_group_input:161: Bad blocks count 0 12:02:19 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0xffff292b}) 12:02:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x1, 0x0, 0xd}, 0x20) 12:02:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x1, 0x0, 0xd}, 0x20) 12:02:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x1, 0x0, 0xd}, 0x20) [ 129.604338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.605140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:02:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x1, 0x0, 0xd}, 0x20) [ 129.749140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.749754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:02:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) [ 129.821928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.822532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:02:21 executing program 3: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r0, 0x0) shmdt(r1) shmat(0xffffffffffffffff, &(0x7f0000dbd000/0x1000)=nil, 0x0) [ 129.951168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.952151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.069291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.070018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.157849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.158453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.254561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.256067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.309990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.310719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.341037] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.376235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.377037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.430321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.431000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.471251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.471879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.525379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.526722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.975442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.976106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.022074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.022727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:02:22 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADTOCENTRY(r0, 0x127c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @lba}) 12:02:22 executing program 7: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r0, 0x0) shmdt(r1) shmat(0xffffffffffffffff, &(0x7f0000dbd000/0x1000)=nil, 0x0) 12:02:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/1, 0x1) 12:02:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') pread64(r0, &(0x7f0000000140)=""/154, 0x9a, 0x4) 12:02:22 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='($},\x99-)&\xef~\x00') 12:02:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0xa00000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) close(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000) 12:02:22 executing program 3: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r0, 0x0) shmdt(r1) shmat(0xffffffffffffffff, &(0x7f0000dbd000/0x1000)=nil, 0x0) 12:02:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000580)={&(0x7f0000000040)=@in={0x2, 0x4e24, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[@mark={{0x14, 0x1, 0xc}}], 0x18}, 0x0) [ 131.163706] audit: type=1400 audit(1756728142.298:10): avc: denied { write } for pid=3919 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:02:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') pread64(r0, &(0x7f0000000140)=""/154, 0x9a, 0x4) 12:02:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000580)={&(0x7f0000000040)=@in={0x2, 0x4e24, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[@mark={{0x14, 0x1, 0xc}}], 0x18}, 0x0) 12:02:22 executing program 6: utime(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0) 12:02:22 executing program 7: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r0, 0x0) shmdt(r1) shmat(0xffffffffffffffff, &(0x7f0000dbd000/0x1000)=nil, 0x0) 12:02:22 executing program 3: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r0, 0x0) shmdt(r1) shmat(0xffffffffffffffff, &(0x7f0000dbd000/0x1000)=nil, 0x0) 12:02:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/1, 0x1) 12:02:22 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADTOCENTRY(r0, 0x127c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @lba}) 12:02:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/1, 0x1) 12:02:22 executing program 6: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:02:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') pread64(r0, &(0x7f0000000140)=""/154, 0x9a, 0x4) 12:02:22 executing program 7: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r0, 0x0) shmdt(r1) shmat(0xffffffffffffffff, &(0x7f0000dbd000/0x1000)=nil, 0x0) 12:02:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0xa00000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) close(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000) 12:02:22 executing program 3: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r0, 0x0) shmdt(r1) shmat(0xffffffffffffffff, &(0x7f0000dbd000/0x1000)=nil, 0x0) 12:02:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000580)={&(0x7f0000000040)=@in={0x2, 0x4e24, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[@mark={{0x14, 0x1, 0xc}}], 0x18}, 0x0) [ 131.420319] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 131.421295] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 131.421906] CPU: 1 UID: 0 PID: 3958 Comm: syz-executor.7 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 131.426362] Tainted: [W]=WARN [ 131.426614] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 131.427259] RIP: 0010:perf_tp_event+0x175/0xe70 [ 131.427645] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 131.429075] RSP: 0018:ffff88804799f800 EFLAGS: 00010212 [ 131.429494] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90003a16000 [ 131.430052] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 131.430609] RBP: ffff88804799fa70 R08: ffff88806cf31340 R09: ffffe8ffffd16240 [ 131.431166] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 131.431731] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 131.432294] FS: 00007fd57ac33700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 131.432937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.433397] CR2: 00007fefc2bb0018 CR3: 0000000046451000 CR4: 0000000000350ef0 [ 131.433955] Call Trace: [ 131.434163] [ 131.434347] ? vma_set_page_prot+0xa5/0x120 [ 131.434704] ? __mmap_region+0xbbe/0x2670 [ 131.435045] ? __pfx_perf_tp_event+0x10/0x10 [ 131.435401] ? __pfx___mmap_region+0x10/0x10 [ 131.435761] ? perf_trace_lock+0xb5/0x5d0 [ 131.436102] ? lock_acquire+0x15e/0x2f0 [ 131.436429] ? __is_insn_slot_addr+0x2e/0x290 [ 131.436796] ? find_held_lock+0x2b/0x80 [ 131.437119] ? __is_insn_slot_addr+0x136/0x290 [ 131.437497] ? kernel_text_address+0x5b/0xc0 [ 131.437864] ? perf_trace_run_bpf_submit+0xef/0x180 [ 131.438265] perf_trace_run_bpf_submit+0xef/0x180 [ 131.438655] perf_trace_lock+0x337/0x5d0 [ 131.438988] ? __pfx_perf_trace_lock+0x10/0x10 [ 131.439358] ? lock_acquire+0x15e/0x2f0 [ 131.439677] ? futex_ref_get+0x48/0x300 [ 131.439995] ? futex_ref_get+0x114/0x300 [ 131.440319] ? futex_hash+0x15c/0x390 [ 131.440631] lock_release+0x1ab/0x290 [ 131.440941] ? futex_hash+0x15c/0x390 [ 131.441247] futex_ref_get+0x119/0x300 [ 131.441562] ? futex_hash+0x15c/0x390 [ 131.441870] futex_hash+0x70/0x390 [ 131.442160] futex_wake+0x143/0x540 [ 131.442461] ? __pfx_futex_wake+0x10/0x10 [ 131.442795] ? find_held_lock+0x2b/0x80 [ 131.443118] ? lock_release+0xc8/0x290 [ 131.443435] do_futex+0x26d/0x370 [ 131.443723] ? __pfx_do_futex+0x10/0x10 [ 131.444048] __x64_sys_futex+0x1c9/0x4d0 [ 131.444382] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 131.444847] ? __pfx___x64_sys_futex+0x10/0x10 [ 131.445214] ? __x64_sys_shmat+0xf0/0x160 [ 131.445550] ? xfd_validate_state+0x55/0x180 [ 131.445911] ? __pfx___x64_sys_shmat+0x10/0x10 [ 131.446285] do_syscall_64+0xbf/0x360 [ 131.446595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.447003] RIP: 0033:0x7fd57d6bdb19 [ 131.447297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 131.448726] RSP: 002b:00007fd57ac33218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 131.449325] RAX: ffffffffffffffda RBX: 00007fd57d7d0f68 RCX: 00007fd57d6bdb19 [ 131.449886] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd57d7d0f6c [ 131.450443] RBP: 00007fd57d7d0f60 R08: 000000000000000e R09: 0000000000000000 [ 131.450998] R10: 0000000020ffa000 R11: 0000000000000246 R12: 00007fd57d7d0f6c [ 131.451557] R13: 00007ffffbb38fef R14: 00007fd57ac33300 R15: 0000000000022000 [ 131.452125] [ 131.452314] Modules linked in: [ 131.452586] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI [ 131.453500] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 131.454186] CPU: 0 UID: 0 PID: 3963 Comm: syz-executor.3 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 131.455130] Tainted: [D]=DIE, [W]=WARN [ 131.455435] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 131.456081] RIP: 0010:perf_tp_event+0x175/0xe70 [ 131.456472] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 131.457901] RSP: 0018:ffff8880456d7780 EFLAGS: 00010012 [ 131.458322] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc9000682d000 [ 131.458882] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 131.459448] RBP: ffff8880456d79f0 R08: ffff88806ce31340 R09: ffffe8ffffc15d58 [ 131.460013] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 131.460584] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000 [ 131.461148] FS: 00007f07321f7700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 131.461783] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.462248] CR2: 00007f0734d95018 CR3: 000000001eda0000 CR4: 0000000000350ef0 [ 131.462809] Call Trace: [ 131.463018] [ 131.463207] ? __pfx_perf_tp_event+0x10/0x10 [ 131.463570] ? do_raw_spin_lock+0x123/0x260 [ 131.463923] ? __create_object+0x59/0x80 [ 131.464260] ? lock_release+0x1c7/0x290 [ 131.464589] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 131.465008] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 131.465427] ? __create_object+0x59/0x80 [ 131.465762] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 131.466153] ? kmem_cache_alloc_noprof+0x264/0x690 [ 131.466564] ? radix_tree_node_alloc.constprop.0+0x1e3/0x310 [ 131.467040] ? __alloc_object+0x2b/0x2c0 [ 131.467382] ? perf_trace_run_bpf_submit+0xef/0x180 [ 131.467799] perf_trace_run_bpf_submit+0xef/0x180 [ 131.468206] perf_trace_preemptirq_template+0x259/0x430 [ 131.468644] ? idr_alloc_u32+0x1f1/0x2d0 [ 131.468977] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 131.469454] ? delete_node+0x20e/0x730 [ 131.469778] ? perf_trace_lock+0xb5/0x5d0 [ 131.470122] ? perf_trace_lock+0xb5/0x5d0 [ 131.470462] ? perf_trace_lock+0xb5/0x5d0 [ 131.470803] ? _raw_spin_lock_irqsave+0x53/0x60 [ 131.471190] trace_irq_disable.constprop.0+0xa6/0x100 [ 131.471614] _raw_spin_lock_irqsave+0x53/0x60 [ 131.471985] try_to_wake_up+0xa0/0x11d0 [ 131.472319] ? futex_ref_get+0x114/0x300 [ 131.472663] ? futex_hash+0x15c/0x390 [ 131.472975] ? __pfx_try_to_wake_up+0x10/0x10 [ 131.473356] ? plist_del+0x122/0x270 [ 131.473666] ? futex_wake+0x474/0x540 [ 131.473984] wake_up_q+0xa1/0x130 [ 131.474277] futex_wake+0x47e/0x540 [ 131.474584] ? __pfx_futex_wake+0x10/0x10 [ 131.474927] ? lock_release+0x1c7/0x290 [ 131.475258] ? up_write+0x195/0x520 [ 131.475559] ? __pfx___handle_mm_fault+0x10/0x10 [ 131.475959] do_futex+0x26d/0x370 [ 131.476253] ? __pfx_do_futex+0x10/0x10 [ 131.476589] ? __pfx_perf_trace_lock+0x10/0x10 [ 131.476967] ? handle_mm_fault+0x590/0x9b0 [ 131.477325] __x64_sys_futex+0x1c9/0x4d0 [ 131.477660] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 131.478135] ? __pfx___x64_sys_futex+0x10/0x10 [ 131.478516] ? __x64_sys_shmget+0x13b/0x1b0 [ 131.478876] ? __pfx___x64_sys_shmget+0x10/0x10 [ 131.479279] do_syscall_64+0xbf/0x360 [ 131.479595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.480016] RIP: 0033:0x7f0734c81b19 [ 131.480318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 131.481798] RSP: 002b:00007f07321f7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 131.482411] RAX: ffffffffffffffda RBX: 00007f0734d94f68 RCX: 00007f0734c81b19 [ 131.482987] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0734d94f6c [ 131.483560] RBP: 00007f0734d94f60 R08: 000000000000000e R09: 0000000000000000 [ 131.484131] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f0734d94f6c [ 131.484716] R13: 00007ffc9dc880af R14: 00007f07321f7300 R15: 0000000000022000 [ 131.485299] [ 131.485494] Modules linked in: [ 131.485761] ---[ end trace 0000000000000000 ]--- [ 131.485762] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#3] SMP KASAN NOPTI [ 131.486140] RIP: 0010:perf_tp_event+0x175/0xe70 [ 131.487020] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 131.487397] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 131.488000] CPU: 1 UID: 0 PID: 3958 Comm: syz-executor.7 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 131.489456] RSP: 0018:ffff88804799f800 EFLAGS: 00010212 [ 131.490395] Tainted: [D]=DIE, [W]=WARN [ 131.490825] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90003a16000 [ 131.491134] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 131.491704] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 131.492368] RIP: 0010:perf_tp_event+0x175/0xe70 [ 131.492941] RBP: ffff88804799fa70 R08: ffff88806cf31340 R09: ffffe8ffffd16240 [ 131.493312] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 131.493875] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 131.495321] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012 [ 131.495887] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 131.496310] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 131.496892] FS: 00007f07321f7700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 131.497454] RDX: ffff88801603b700 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 131.498111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.498673] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd16240 [ 131.499139] CR2: 00007f0734d95018 CR3: 000000001eda0000 CR4: 0000000000350ef0 [ 131.499705] R10: 0000000000000000 R11: ffff88806cf37018 R12: dffffc0000000000 [ 131.500279] note: syz-executor.3[3963] exited with irqs disabled [ 131.500846] R13: 0000000000000024 R14: ffff88806cf31490 R15: dffffc0000000000 [ 131.501364] note: syz-executor.3[3963] exited with preempt_count 2 [ 131.501894] FS: 00007fd57ac33700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 131.501907] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.501915] CR2: 00007fefc2bb0018 CR3: 0000000046451000 CR4: 0000000000350ef0 [ 131.501923] Call Trace: [ 131.501927] [ 131.501937] ? __pfx_perf_tp_event+0x10/0x10 [ 131.501956] ? trace_pelt_se_tp+0xdf/0x130 [ 131.501970] ? __update_load_avg_se+0x428/0xa40 [ 131.501988] ? lock_is_held_type+0x9e/0x120 [ 131.502008] ? perf_trace_lock+0xb5/0x5d0 [ 131.502020] ? perf_trace_lock+0xb5/0x5d0 [ 131.502035] ? __pfx_perf_trace_lock+0x10/0x10 [ 131.502048] ? __pfx_perf_trace_lock+0x10/0x10 [ 131.502062] ? check_preempt_wakeup_fair+0x406/0x950 [ 131.502080] ? perf_trace_run_bpf_submit+0xef/0x180 [ 131.502096] perf_trace_run_bpf_submit+0xef/0x180 [ 131.502115] perf_trace_lock+0x337/0x5d0 [ 131.502129] ? place_entity+0x1c/0x410 [ 131.502140] ? kvm_sched_clock_read+0x16/0x30 [ 131.502157] ? __pfx_perf_trace_lock+0x10/0x10 [ 131.502172] ? check_preempt_wakeup_fair+0x6e/0x950 [ 131.502187] ? sched_ttwu_pending+0x2e0/0x4a0 [ 131.502205] lock_release+0x1ab/0x290 [ 131.502217] ? ttwu_do_activate+0x1a4/0x8a0 [ 131.502234] _raw_spin_unlock+0x16/0x40 [ 131.502250] sched_ttwu_pending+0x2e0/0x4a0 [ 131.502269] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 131.502286] ? hrtimer_interrupt+0x652/0x830 [ 131.502301] __flush_smp_call_function_queue+0x434/0x740 [ 131.502322] __sysvec_call_function_single+0x6d/0x370 [ 131.502342] sysvec_call_function_single+0xa1/0xc0 [ 131.502358] [ 131.502362] [ 131.502367] asm_sysvec_call_function_single+0x1a/0x20 [ 131.502380] RIP: 0010:oops_exit+0x0/0x50 [ 131.502396] Code: 00 3a 00 be ff ff ff ff 48 c7 c7 50 b4 43 86 e8 c6 0f f9 ff 5b e9 50 00 3a 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 36 00 3a 00 8b 1d c0 3d 4f 06 31 ff 89 de e8 57 [ 131.502406] RSP: 0018:ffff88804799f690 EFLAGS: 00000202 [ 131.502415] RAX: 000000000002a818 RBX: 0000000000000202 RCX: ffffc90003a16000 [ 131.502423] RDX: 0000000000040000 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 131.502430] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f12690 [ 131.502437] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88804799f758 [ 131.502444] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000 [ 131.502456] ? oops_end+0x4a/0xe0 [ 131.502475] oops_end+0x65/0xe0 [ 131.502492] exc_general_protection+0x1a2/0x330 [ 131.502511] asm_exc_general_protection+0x26/0x30 [ 131.502523] RIP: 0010:perf_tp_event+0x175/0xe70 [ 131.502537] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 131.502548] RSP: 0018:ffff88804799f800 EFLAGS: 00010212 [ 131.502557] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90003a16000 [ 131.502564] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 131.502571] RBP: ffff88804799fa70 R08: ffff88806cf31340 R09: ffffe8ffffd16240 [ 131.502579] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 131.502586] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 131.502598] ? perf_tp_event+0x167/0xe70 [ 131.502615] ? vma_set_page_prot+0xa5/0x120 [ 131.502631] ? __mmap_region+0xbbe/0x2670 [ 131.502649] ? __pfx_perf_tp_event+0x10/0x10 [ 131.502665] ? __pfx___mmap_region+0x10/0x10 [ 131.502682] ? perf_trace_lock+0xb5/0x5d0 [ 131.502700] ? lock_acquire+0x15e/0x2f0 [ 131.502712] ? __is_insn_slot_addr+0x2e/0x290 [ 131.502730] ? find_held_lock+0x2b/0x80 [ 131.502746] ? __is_insn_slot_addr+0x136/0x290 [ 131.502768] ? kernel_text_address+0x5b/0xc0 [ 131.502784] ? perf_trace_run_bpf_submit+0xef/0x180 [ 131.502799] perf_trace_run_bpf_submit+0xef/0x180 [ 131.502818] perf_trace_lock+0x337/0x5d0 [ 131.502834] ? __pfx_perf_trace_lock+0x10/0x10 [ 131.502849] ? lock_acquire+0x15e/0x2f0 [ 131.502861] ? futex_ref_get+0x48/0x300 [ 131.502872] ? futex_ref_get+0x114/0x300 [ 131.502882] ? futex_hash+0x15c/0x390 [ 131.502893] lock_release+0x1ab/0x290 [ 131.502907] ? futex_hash+0x15c/0x390 [ 131.502917] futex_ref_get+0x119/0x300 [ 131.502928] ? futex_hash+0x15c/0x390 [ 131.502938] futex_hash+0x70/0x390 [ 131.502951] futex_wake+0x143/0x540 [ 131.502967] ? __pfx_futex_wake+0x10/0x10 [ 131.502982] ? find_held_lock+0x2b/0x80 [ 131.502999] ? lock_release+0xc8/0x290 [ 131.503015] do_futex+0x26d/0x370 [ 131.503028] ? __pfx_do_futex+0x10/0x10 [ 131.503045] __x64_sys_futex+0x1c9/0x4d0 [ 131.503059] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 131.503072] ? __pfx___x64_sys_futex+0x10/0x10 [ 131.503084] ? __x64_sys_shmat+0xf0/0x160 [ 131.503099] ? xfd_validate_state+0x55/0x180 [ 131.503114] ? __pfx___x64_sys_shmat+0x10/0x10 [ 131.503132] do_syscall_64+0xbf/0x360 [ 131.503145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.503156] RIP: 0033:0x7fd57d6bdb19 [ 131.503164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 131.503174] RSP: 002b:00007fd57ac33218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 131.503185] RAX: ffffffffffffffda RBX: 00007fd57d7d0f68 RCX: 00007fd57d6bdb19 [ 131.503192] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd57d7d0f6c [ 131.503199] RBP: 00007fd57d7d0f60 R08: 000000000000000e R09: 0000000000000000 [ 131.503206] R10: 0000000020ffa000 R11: 0000000000000246 R12: 00007fd57d7d0f6c [ 131.503213] R13: 00007ffffbb38fef R14: 00007fd57ac33300 R15: 0000000000022000 [ 131.503228] [ 131.503232] Modules linked in: [ 131.503240] ---[ end trace 0000000000000000 ]--- [ 131.503241] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#4] SMP KASAN NOPTI [ 131.503246] RIP: 0010:perf_tp_event+0x175/0xe70 [ 131.503257] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 131.503262] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 131.503274] RSP: 0018:ffff88804799f800 EFLAGS: 00010212 [ 131.503272] CPU: 0 UID: 0 PID: 3963 Comm: syz-executor.3 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 131.503281] [ 131.503285] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90003a16000 [ 131.503293] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 131.503295] Tainted: [D]=DIE, [W]=WARN [ 131.503301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 131.503302] RBP: ffff88804799fa70 R08: ffff88806cf31340 R09: ffffe8ffffd16240 [ 131.503311] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 131.503310] RIP: 0010:perf_tp_event+0x175/0xe70 [ 131.503318] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 131.503328] FS: 00007fd57ac33700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 131.503331] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 131.503340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.503345] RSP: 0018:ffff88806ce08b40 EFLAGS: 00010012 [ 131.503348] CR2: 00007fefc2bb0018 CR3: 0000000046451000 CR4: 0000000000350ef0 [ 131.503355] [ 131.503360] Kernel panic - not syncing: Fatal exception in interrupt [ 132.547357] Shutting down cpus with NMI [ 132.547569] Kernel Offset: disabled [ 132.603167] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 12:02:22 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84be3c0e RDX=fffffbfff0f0f609 RSI=0000000000000004 RDI=ffffffff8787b044 RBP=ffffffff8787b044 RSP=ffff8880456d7530 R8 =0000000000000000 R9 =fffffbfff0f0f608 R10=ffffffff8787b047 R11=202c746c75616620 R12=1ffff11008adaea7 R13=0000000000000007 R14=fffffbfff0f0f608 R15=ffff8880456d7568 RIP=ffffffff84be3da0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f07321f7700 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0734d95018 CR3=000000001eda0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f0734d687c000007f0734d687c8 XMM02=00007f0734d687e000007f0734d687c0 XMM03=00007f0734d687c800007f0734d687c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff88804799f160 R8 =0000000000000000 R9 =ffffed1001620046 R10=0000000000000020 R11=552031203a555043 R12=0000000000000020 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0 RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd57ac33700 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fefc2bb0018 CR3=0000000046451000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fd57d7a47c000007fd57d7a47c8 XMM02=00007fd57d7a47e000007fd57d7a47c0 XMM03=00007fd57d7a47c800007fd57d7a47c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000