[ 38.790321] audit: type=1400 audit(1756468990.617:6): avc: denied { checkpoint_restore } for pid=223 comm="agetty" capability=40 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:64149' (ECDSA) to the list of known hosts. 2025/08/29 12:03:14 fuzzer started 2025/08/29 12:03:14 dialing manager at localhost:43077 syzkaller login: [ 42.644072] cgroup: Unknown subsys name 'net' [ 42.693588] cgroup: Unknown subsys name 'cpuset' [ 42.702331] cgroup: Unknown subsys name 'rlimit' 2025/08/29 12:03:23 syscalls: 2214 2025/08/29 12:03:23 code coverage: enabled 2025/08/29 12:03:23 comparison tracing: enabled 2025/08/29 12:03:23 extra coverage: enabled 2025/08/29 12:03:23 setuid sandbox: enabled 2025/08/29 12:03:23 namespace sandbox: enabled 2025/08/29 12:03:23 Android sandbox: enabled 2025/08/29 12:03:23 fault injection: enabled 2025/08/29 12:03:23 leak checking: enabled 2025/08/29 12:03:23 net packet injection: enabled 2025/08/29 12:03:23 net device setup: enabled 2025/08/29 12:03:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 12:03:23 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 12:03:23 USB emulation: enabled 2025/08/29 12:03:23 hci packet injection: enabled 2025/08/29 12:03:23 wifi device emulation: enabled 2025/08/29 12:03:23 802.15.4 emulation: enabled 2025/08/29 12:03:23 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 12:03:23 fetching corpus: 50, signal 20568/24139 (executing program) 2025/08/29 12:03:23 fetching corpus: 100, signal 28648/33750 (executing program) 2025/08/29 12:03:23 fetching corpus: 150, signal 34117/40677 (executing program) 2025/08/29 12:03:23 fetching corpus: 200, signal 41502/49310 (executing program) 2025/08/29 12:03:23 fetching corpus: 250, signal 50966/59772 (executing program) 2025/08/29 12:03:23 fetching corpus: 300, signal 56466/66352 (executing program) 2025/08/29 12:03:23 fetching corpus: 350, signal 59709/70733 (executing program) 2025/08/29 12:03:23 fetching corpus: 400, signal 61757/73951 (executing program) 2025/08/29 12:03:24 fetching corpus: 450, signal 65638/78810 (executing program) 2025/08/29 12:03:24 fetching corpus: 500, signal 69467/83569 (executing program) 2025/08/29 12:03:24 fetching corpus: 550, signal 73153/88046 (executing program) 2025/08/29 12:03:24 fetching corpus: 600, signal 76576/92231 (executing program) 2025/08/29 12:03:24 fetching corpus: 650, signal 78624/95175 (executing program) 2025/08/29 12:03:24 fetching corpus: 700, signal 80805/98230 (executing program) 2025/08/29 12:03:24 fetching corpus: 750, signal 84103/102186 (executing program) 2025/08/29 12:03:24 fetching corpus: 800, signal 86745/105484 (executing program) 2025/08/29 12:03:24 fetching corpus: 850, signal 88926/108374 (executing program) 2025/08/29 12:03:24 fetching corpus: 900, signal 92029/111970 (executing program) 2025/08/29 12:03:25 fetching corpus: 950, signal 93802/114406 (executing program) 2025/08/29 12:03:25 fetching corpus: 1000, signal 95597/116901 (executing program) 2025/08/29 12:03:25 fetching corpus: 1050, signal 97647/119455 (executing program) 2025/08/29 12:03:25 fetching corpus: 1100, signal 99333/121692 (executing program) 2025/08/29 12:03:25 fetching corpus: 1150, signal 100989/123945 (executing program) 2025/08/29 12:03:25 fetching corpus: 1200, signal 103000/126358 (executing program) 2025/08/29 12:03:25 fetching corpus: 1250, signal 104744/128579 (executing program) 2025/08/29 12:03:25 fetching corpus: 1300, signal 106223/130534 (executing program) 2025/08/29 12:03:25 fetching corpus: 1350, signal 107542/132365 (executing program) 2025/08/29 12:03:25 fetching corpus: 1400, signal 109172/134350 (executing program) 2025/08/29 12:03:26 fetching corpus: 1450, signal 110401/136074 (executing program) 2025/08/29 12:03:26 fetching corpus: 1500, signal 111248/137524 (executing program) 2025/08/29 12:03:26 fetching corpus: 1550, signal 112969/139479 (executing program) 2025/08/29 12:03:26 fetching corpus: 1600, signal 113752/140826 (executing program) 2025/08/29 12:03:26 fetching corpus: 1650, signal 115068/142458 (executing program) 2025/08/29 12:03:26 fetching corpus: 1700, signal 116434/144108 (executing program) 2025/08/29 12:03:26 fetching corpus: 1750, signal 117208/145480 (executing program) 2025/08/29 12:03:26 fetching corpus: 1800, signal 118053/146763 (executing program) 2025/08/29 12:03:26 fetching corpus: 1850, signal 119113/148187 (executing program) 2025/08/29 12:03:26 fetching corpus: 1900, signal 120000/149462 (executing program) 2025/08/29 12:03:27 fetching corpus: 1950, signal 120891/150741 (executing program) 2025/08/29 12:03:27 fetching corpus: 2000, signal 121846/152020 (executing program) 2025/08/29 12:03:27 fetching corpus: 2050, signal 122781/153315 (executing program) 2025/08/29 12:03:27 fetching corpus: 2100, signal 123981/154710 (executing program) 2025/08/29 12:03:27 fetching corpus: 2150, signal 125303/156158 (executing program) 2025/08/29 12:03:27 fetching corpus: 2200, signal 125967/157224 (executing program) 2025/08/29 12:03:27 fetching corpus: 2250, signal 127000/158513 (executing program) 2025/08/29 12:03:27 fetching corpus: 2300, signal 128027/159741 (executing program) 2025/08/29 12:03:27 fetching corpus: 2350, signal 129279/161096 (executing program) 2025/08/29 12:03:27 fetching corpus: 2400, signal 130278/162203 (executing program) 2025/08/29 12:03:27 fetching corpus: 2450, signal 130930/163159 (executing program) 2025/08/29 12:03:28 fetching corpus: 2500, signal 131886/164280 (executing program) 2025/08/29 12:03:28 fetching corpus: 2550, signal 132475/165202 (executing program) 2025/08/29 12:03:28 fetching corpus: 2600, signal 133511/166375 (executing program) 2025/08/29 12:03:28 fetching corpus: 2650, signal 134152/167287 (executing program) 2025/08/29 12:03:28 fetching corpus: 2700, signal 134713/168125 (executing program) 2025/08/29 12:03:28 fetching corpus: 2750, signal 135421/168999 (executing program) 2025/08/29 12:03:28 fetching corpus: 2800, signal 135843/169791 (executing program) 2025/08/29 12:03:28 fetching corpus: 2850, signal 136431/170558 (executing program) 2025/08/29 12:03:28 fetching corpus: 2900, signal 137047/171418 (executing program) 2025/08/29 12:03:28 fetching corpus: 2950, signal 138130/172409 (executing program) 2025/08/29 12:03:29 fetching corpus: 3000, signal 139036/173313 (executing program) 2025/08/29 12:03:29 fetching corpus: 3050, signal 139854/174104 (executing program) 2025/08/29 12:03:29 fetching corpus: 3100, signal 140483/174876 (executing program) 2025/08/29 12:03:29 fetching corpus: 3150, signal 141205/175671 (executing program) 2025/08/29 12:03:29 fetching corpus: 3200, signal 141911/176412 (executing program) 2025/08/29 12:03:29 fetching corpus: 3250, signal 142407/177075 (executing program) 2025/08/29 12:03:29 fetching corpus: 3300, signal 143084/177838 (executing program) 2025/08/29 12:03:29 fetching corpus: 3350, signal 143653/178520 (executing program) 2025/08/29 12:03:29 fetching corpus: 3400, signal 144291/179200 (executing program) 2025/08/29 12:03:29 fetching corpus: 3450, signal 144838/179863 (executing program) 2025/08/29 12:03:29 fetching corpus: 3500, signal 145410/180489 (executing program) 2025/08/29 12:03:30 fetching corpus: 3550, signal 146042/181147 (executing program) 2025/08/29 12:03:30 fetching corpus: 3600, signal 146622/181773 (executing program) 2025/08/29 12:03:30 fetching corpus: 3650, signal 146990/182347 (executing program) 2025/08/29 12:03:30 fetching corpus: 3700, signal 147890/183090 (executing program) 2025/08/29 12:03:30 fetching corpus: 3750, signal 148321/183625 (executing program) 2025/08/29 12:03:30 fetching corpus: 3800, signal 148853/184173 (executing program) 2025/08/29 12:03:30 fetching corpus: 3850, signal 149341/184764 (executing program) 2025/08/29 12:03:30 fetching corpus: 3900, signal 149857/185307 (executing program) 2025/08/29 12:03:30 fetching corpus: 3950, signal 150461/185878 (executing program) 2025/08/29 12:03:31 fetching corpus: 4000, signal 151031/186420 (executing program) 2025/08/29 12:03:31 fetching corpus: 4050, signal 151604/187025 (executing program) 2025/08/29 12:03:31 fetching corpus: 4100, signal 152055/187483 (executing program) 2025/08/29 12:03:31 fetching corpus: 4150, signal 154117/188173 (executing program) 2025/08/29 12:03:31 fetching corpus: 4200, signal 154520/188646 (executing program) 2025/08/29 12:03:31 fetching corpus: 4250, signal 154954/189126 (executing program) 2025/08/29 12:03:31 fetching corpus: 4300, signal 155526/189578 (executing program) 2025/08/29 12:03:31 fetching corpus: 4350, signal 155847/190006 (executing program) 2025/08/29 12:03:31 fetching corpus: 4400, signal 156318/190451 (executing program) 2025/08/29 12:03:31 fetching corpus: 4450, signal 156785/190882 (executing program) 2025/08/29 12:03:31 fetching corpus: 4500, signal 157581/191349 (executing program) 2025/08/29 12:03:32 fetching corpus: 4550, signal 158249/191777 (executing program) 2025/08/29 12:03:32 fetching corpus: 4600, signal 158776/192151 (executing program) 2025/08/29 12:03:32 fetching corpus: 4650, signal 159153/192448 (executing program) 2025/08/29 12:03:32 fetching corpus: 4700, signal 159475/192465 (executing program) 2025/08/29 12:03:32 fetching corpus: 4750, signal 160288/192488 (executing program) 2025/08/29 12:03:32 fetching corpus: 4800, signal 160693/192493 (executing program) 2025/08/29 12:03:32 fetching corpus: 4850, signal 161100/192499 (executing program) 2025/08/29 12:03:32 fetching corpus: 4900, signal 161470/192509 (executing program) 2025/08/29 12:03:32 fetching corpus: 4950, signal 161876/192510 (executing program) 2025/08/29 12:03:32 fetching corpus: 5000, signal 162398/192522 (executing program) 2025/08/29 12:03:32 fetching corpus: 5050, signal 163021/192532 (executing program) 2025/08/29 12:03:33 fetching corpus: 5100, signal 163586/192604 (executing program) 2025/08/29 12:03:33 fetching corpus: 5150, signal 164028/192607 (executing program) 2025/08/29 12:03:33 fetching corpus: 5200, signal 164341/192610 (executing program) 2025/08/29 12:03:33 fetching corpus: 5250, signal 164610/192624 (executing program) 2025/08/29 12:03:33 fetching corpus: 5300, signal 165114/192736 (executing program) 2025/08/29 12:03:33 fetching corpus: 5350, signal 165558/192771 (executing program) 2025/08/29 12:03:33 fetching corpus: 5400, signal 166005/192785 (executing program) 2025/08/29 12:03:33 fetching corpus: 5450, signal 166621/192798 (executing program) 2025/08/29 12:03:33 fetching corpus: 5500, signal 166898/192804 (executing program) 2025/08/29 12:03:34 fetching corpus: 5550, signal 167309/192807 (executing program) 2025/08/29 12:03:34 fetching corpus: 5600, signal 167908/192903 (executing program) 2025/08/29 12:03:34 fetching corpus: 5650, signal 168356/192907 (executing program) 2025/08/29 12:03:34 fetching corpus: 5700, signal 168658/192908 (executing program) 2025/08/29 12:03:34 fetching corpus: 5750, signal 169097/192910 (executing program) 2025/08/29 12:03:34 fetching corpus: 5800, signal 169475/192956 (executing program) 2025/08/29 12:03:34 fetching corpus: 5850, signal 169762/192973 (executing program) 2025/08/29 12:03:34 fetching corpus: 5900, signal 170235/192984 (executing program) 2025/08/29 12:03:34 fetching corpus: 5950, signal 170665/192986 (executing program) 2025/08/29 12:03:35 fetching corpus: 6000, signal 171112/193005 (executing program) 2025/08/29 12:03:35 fetching corpus: 6050, signal 171486/193017 (executing program) 2025/08/29 12:03:35 fetching corpus: 6100, signal 171952/193022 (executing program) 2025/08/29 12:03:35 fetching corpus: 6150, signal 172312/193024 (executing program) 2025/08/29 12:03:35 fetching corpus: 6200, signal 172721/193051 (executing program) 2025/08/29 12:03:35 fetching corpus: 6250, signal 173051/193062 (executing program) 2025/08/29 12:03:35 fetching corpus: 6300, signal 173444/193066 (executing program) 2025/08/29 12:03:35 fetching corpus: 6350, signal 173830/193075 (executing program) 2025/08/29 12:03:35 fetching corpus: 6400, signal 174158/193078 (executing program) 2025/08/29 12:03:35 fetching corpus: 6450, signal 174524/193079 (executing program) 2025/08/29 12:03:35 fetching corpus: 6500, signal 175285/193087 (executing program) 2025/08/29 12:03:36 fetching corpus: 6550, signal 176277/193088 (executing program) 2025/08/29 12:03:36 fetching corpus: 6600, signal 176606/193088 (executing program) 2025/08/29 12:03:36 fetching corpus: 6650, signal 176872/193137 (executing program) 2025/08/29 12:03:36 fetching corpus: 6700, signal 177330/193145 (executing program) 2025/08/29 12:03:36 fetching corpus: 6750, signal 177760/193156 (executing program) 2025/08/29 12:03:36 fetching corpus: 6800, signal 178062/193165 (executing program) 2025/08/29 12:03:36 fetching corpus: 6850, signal 178460/193178 (executing program) 2025/08/29 12:03:36 fetching corpus: 6900, signal 178840/193197 (executing program) 2025/08/29 12:03:36 fetching corpus: 6950, signal 179054/193211 (executing program) 2025/08/29 12:03:36 fetching corpus: 7000, signal 179513/193211 (executing program) 2025/08/29 12:03:36 fetching corpus: 7050, signal 179807/193219 (executing program) 2025/08/29 12:03:36 fetching corpus: 7100, signal 180204/193277 (executing program) 2025/08/29 12:03:37 fetching corpus: 7150, signal 180480/193285 (executing program) 2025/08/29 12:03:37 fetching corpus: 7200, signal 180706/193321 (executing program) 2025/08/29 12:03:37 fetching corpus: 7250, signal 181042/193331 (executing program) 2025/08/29 12:03:37 fetching corpus: 7300, signal 181268/193334 (executing program) 2025/08/29 12:03:37 fetching corpus: 7350, signal 181486/193345 (executing program) 2025/08/29 12:03:37 fetching corpus: 7400, signal 181737/193353 (executing program) 2025/08/29 12:03:37 fetching corpus: 7450, signal 182001/193357 (executing program) 2025/08/29 12:03:37 fetching corpus: 7500, signal 182333/193369 (executing program) 2025/08/29 12:03:37 fetching corpus: 7550, signal 182655/193369 (executing program) 2025/08/29 12:03:37 fetching corpus: 7600, signal 182912/193378 (executing program) 2025/08/29 12:03:37 fetching corpus: 7650, signal 183222/193393 (executing program) 2025/08/29 12:03:38 fetching corpus: 7700, signal 183829/193397 (executing program) 2025/08/29 12:03:38 fetching corpus: 7750, signal 184111/193429 (executing program) 2025/08/29 12:03:38 fetching corpus: 7800, signal 184380/193430 (executing program) 2025/08/29 12:03:38 fetching corpus: 7850, signal 184715/193447 (executing program) 2025/08/29 12:03:38 fetching corpus: 7900, signal 184897/193452 (executing program) 2025/08/29 12:03:38 fetching corpus: 7950, signal 185254/193454 (executing program) 2025/08/29 12:03:38 fetching corpus: 8000, signal 185630/193461 (executing program) 2025/08/29 12:03:38 fetching corpus: 8050, signal 185825/193481 (executing program) 2025/08/29 12:03:38 fetching corpus: 8100, signal 186034/193488 (executing program) 2025/08/29 12:03:38 fetching corpus: 8150, signal 186166/193493 (executing program) 2025/08/29 12:03:38 fetching corpus: 8200, signal 186451/193495 (executing program) 2025/08/29 12:03:39 fetching corpus: 8250, signal 186760/193513 (executing program) 2025/08/29 12:03:39 fetching corpus: 8300, signal 186953/193520 (executing program) 2025/08/29 12:03:39 fetching corpus: 8350, signal 187174/193525 (executing program) 2025/08/29 12:03:39 fetching corpus: 8400, signal 187363/193532 (executing program) 2025/08/29 12:03:39 fetching corpus: 8450, signal 187717/193536 (executing program) 2025/08/29 12:03:39 fetching corpus: 8500, signal 187955/193539 (executing program) 2025/08/29 12:03:39 fetching corpus: 8550, signal 188137/193545 (executing program) 2025/08/29 12:03:39 fetching corpus: 8600, signal 188356/193553 (executing program) 2025/08/29 12:03:39 fetching corpus: 8650, signal 188591/193564 (executing program) 2025/08/29 12:03:39 fetching corpus: 8700, signal 188853/193571 (executing program) 2025/08/29 12:03:39 fetching corpus: 8750, signal 189111/193582 (executing program) 2025/08/29 12:03:39 fetching corpus: 8800, signal 189346/193591 (executing program) 2025/08/29 12:03:40 fetching corpus: 8850, signal 189646/193595 (executing program) 2025/08/29 12:03:40 fetching corpus: 8897, signal 190079/193596 (executing program) 2025/08/29 12:03:40 fetching corpus: 8897, signal 190079/193596 (executing program) 2025/08/29 12:03:41 starting 8 fuzzer processes 12:03:41 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x25, &(0x7f0000000000)=0x9, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 12:03:41 executing program 1: syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "912c684f2a808e748e0d03fb3a04dadcd5b61d00", "3e5454d4891c54ecf2f4042ead654623", {"c9df1d92fdba9d2c7fafc401eee65512", "be89216b442023102034790295f5310e"}}}}}}}, 0x0) 12:03:41 executing program 7: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000002a40)=[{}, {r1}], 0x2, 0x40) 12:03:41 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000500)) [ 69.938178] audit: type=1400 audit(1756469021.767:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:03:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r2, 0x425, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:fuse_device_t:s0\x00'}]}, 0x3c}}, 0x0) 12:03:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 12:03:41 executing program 6: msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/44) 12:03:41 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)}, 0x18142) [ 71.130589] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.133453] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.139207] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.140492] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.142646] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.144317] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.149951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.151316] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.154168] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.156082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.160174] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.172090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.188315] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.196470] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.198504] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.261473] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 71.265145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 71.266723] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.277516] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 71.285264] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.288595] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 71.308195] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 71.311521] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.313640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.316161] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 71.323127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.324456] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 71.332222] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 71.341688] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.345026] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 71.345205] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 71.351217] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 71.356994] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.375517] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 71.377106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.392189] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 71.393942] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 71.402141] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.405634] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 71.412594] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.223910] Bluetooth: hci2: command tx timeout [ 73.224602] Bluetooth: hci0: command tx timeout [ 73.225147] Bluetooth: hci1: command tx timeout [ 73.413508] Bluetooth: hci5: command tx timeout [ 73.476865] Bluetooth: hci3: command tx timeout [ 73.477415] Bluetooth: hci6: command tx timeout [ 73.477485] Bluetooth: hci4: command tx timeout [ 73.478774] Bluetooth: hci7: command tx timeout [ 75.268869] Bluetooth: hci1: command tx timeout [ 75.269330] Bluetooth: hci0: command tx timeout [ 75.269717] Bluetooth: hci2: command tx timeout [ 75.460944] Bluetooth: hci5: command tx timeout [ 75.524944] Bluetooth: hci4: command tx timeout [ 75.525374] Bluetooth: hci6: command tx timeout [ 75.525758] Bluetooth: hci3: command tx timeout [ 75.527257] Bluetooth: hci7: command tx timeout [ 77.316891] Bluetooth: hci2: command tx timeout [ 77.317364] Bluetooth: hci0: command tx timeout [ 77.317749] Bluetooth: hci1: command tx timeout [ 77.508839] Bluetooth: hci5: command tx timeout [ 77.572925] Bluetooth: hci3: command tx timeout [ 77.573361] Bluetooth: hci7: command tx timeout [ 77.573742] Bluetooth: hci6: command tx timeout [ 77.574853] Bluetooth: hci4: command tx timeout [ 79.364942] Bluetooth: hci2: command tx timeout [ 79.365412] Bluetooth: hci1: command tx timeout [ 79.366188] Bluetooth: hci0: command tx timeout [ 79.556839] Bluetooth: hci5: command tx timeout [ 79.620934] Bluetooth: hci6: command tx timeout [ 79.621382] Bluetooth: hci3: command tx timeout [ 79.621757] Bluetooth: hci7: command tx timeout [ 79.622298] Bluetooth: hci4: command tx timeout [ 108.026102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.026988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.231958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.232588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.530002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.530618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.673707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.674996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:04:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0) 12:04:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0) 12:04:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0) 12:04:21 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@private}}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0) 12:04:21 executing program 7: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000002a40)=[{}, {r1}], 0x2, 0x40) 12:04:21 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x2092020, &(0x7f0000000500)='huge,never') [ 109.677240] tmpfs: Bad value for 'huge' 12:04:21 executing program 7: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000002a40)=[{}, {r1}], 0x2, 0x40) 12:04:21 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x2092020, &(0x7f0000000500)='huge,never') [ 109.766557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.767206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.825979] tmpfs: Bad value for 'huge' [ 109.855093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.855678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.947818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.948421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.043136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.044212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.222239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.223265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.401491] audit: type=1400 audit(1756469062.230:8): avc: denied { open } for pid=3878 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 110.410933] audit: type=1400 audit(1756469062.231:9): avc: denied { kernel } for pid=3878 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 110.441992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.442887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.536589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.537267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.578156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.578746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.848454] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.852208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.852865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.908112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.908745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.942961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.943520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.967697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.968283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:04:22 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x1c, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 12:04:22 executing program 7: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f0000002a40)=[{}, {r1}], 0x2, 0x40) 12:04:22 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x2092020, &(0x7f0000000500)='huge,never') 12:04:22 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff, 0xcb3}) 12:04:22 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) close(r0) 12:04:22 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000500)) 12:04:22 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 12:04:22 executing program 6: perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2b82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 111.166971] tmpfs: Bad value for 'huge' 12:04:23 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x2092020, &(0x7f0000000500)='huge,never') 12:04:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x3}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}}, 0x0) 12:04:23 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x30, 0x2c, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "ca9d01", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev}}}}}}}, 0x0) 12:04:23 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000500)) 12:04:23 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) close(r0) 12:04:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 111.262356] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 111.270956] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 111.274305] tmpfs: Bad value for 'huge' [ 111.296447] kmemleak: Found object by alias at 0x607f1a634b64 [ 111.296462] CPU: 0 UID: 0 PID: 3947 Comm: syz-executor.4 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 111.296481] Tainted: [W]=WARN [ 111.296484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 111.296491] Call Trace: [ 111.296496] [ 111.296500] dump_stack_lvl+0xca/0x120 [ 111.296530] __lookup_object+0x94/0xb0 [ 111.296547] delete_object_full+0x27/0x70 [ 111.296563] free_percpu+0x30/0x1160 [ 111.296579] ? arch_uprobe_clear_state+0x16/0x140 [ 111.296598] futex_hash_free+0x38/0xc0 [ 111.296613] mmput+0x2d3/0x390 [ 111.296631] do_exit+0x79d/0x2970 [ 111.296649] ? __pfx_do_exit+0x10/0x10 [ 111.296663] ? find_held_lock+0x2b/0x80 [ 111.296680] ? get_signal+0x835/0x2340 [ 111.296700] do_group_exit+0xd3/0x2a0 [ 111.296714] get_signal+0x2315/0x2340 [ 111.296730] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 111.296744] ? __call_rcu_common.constprop.0+0x4c1/0x960 [ 111.296762] ? __pfx_get_signal+0x10/0x10 [ 111.296778] ? __schedule+0xe91/0x3590 [ 111.296798] arch_do_signal_or_restart+0x80/0x790 [ 111.296816] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 111.296831] ? __x64_sys_futex+0x1c9/0x4d0 [ 111.296844] ? __x64_sys_futex+0x1d2/0x4d0 [ 111.296859] ? __pfx___x64_sys_futex+0x10/0x10 [ 111.296877] exit_to_user_mode_loop+0x8b/0x110 [ 111.296889] do_syscall_64+0x2f7/0x360 [ 111.296901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.296914] RIP: 0033:0x7fa12d2e1b19 [ 111.296922] Code: Unable to access opcode bytes at 0x7fa12d2e1aef. [ 111.296928] RSP: 002b:00007fa12a836218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.296938] RAX: 0000000000000001 RBX: 00007fa12d3f5028 RCX: 00007fa12d2e1b19 [ 111.296946] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa12d3f502c [ 111.296953] RBP: 00007fa12d3f5020 R08: 000000000000000e R09: 0000000000000000 [ 111.296960] R10: 0000000000000030 R11: 0000000000000246 R12: 00007fa12d3f502c [ 111.296967] R13: 00007ffc65df8e6f R14: 00007fa12a836300 R15: 0000000000022000 [ 111.296983] [ 111.296987] kmemleak: Object (percpu) 0x607f1a634b60 (size 8): [ 111.296993] kmemleak: comm "syz-executor.1", pid 3942, jiffies 4294778141 [ 111.297000] kmemleak: min_count = 1 [ 111.297004] kmemleak: count = 0 [ 111.297008] kmemleak: flags = 0x21 [ 111.297011] kmemleak: checksum = 0 [ 111.297015] kmemleak: backtrace: [ 111.297018] pcpu_alloc_noprof+0x87a/0x1170 [ 111.297033] alloc_vfsmnt+0x135/0x6e0 [ 111.297046] vfs_create_mount.part.0+0x40/0x440 [ 111.297061] path_mount+0x1637/0x1dd0 [ 111.297072] __x64_sys_mount+0x27b/0x300 [ 111.297083] do_syscall_64+0xbf/0x360 [ 111.297091] entry_SYSCALL_64_after_hwframe+0x77/0x7f 12:04:23 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x109902) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/95, 0x8}], 0x1) 12:04:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 12:04:23 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000500)) 12:04:23 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) close(r0) 12:04:23 executing program 1: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5e9", 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'wlan0\x00'}) 12:04:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r1, 0x201, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) 12:04:23 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) close(r0) 12:04:23 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x30, 0x2c, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "ca9d01", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev}}}}}}}, 0x0) [ 111.435729] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 111.436651] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 111.437266] CPU: 1 UID: 0 PID: 3954 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 111.438507] Tainted: [W]=WARN [ 111.439293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 111.441527] RIP: 0010:perf_tp_event+0x175/0xe70 [ 111.442811] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 111.445854] RSP: 0018:ffff8880458df780 EFLAGS: 00010012 [ 111.446282] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 111.446855] RDX: ffff88804719d280 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 111.447442] RBP: ffff8880458df9f0 R08: ffff88806cf31340 R09: ffffe8ffffd11b60 [ 111.448032] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 111.448616] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 111.449200] FS: 000055557ded3400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 111.449865] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.450349] CR2: 000055557ded4c18 CR3: 000000001d811000 CR4: 0000000000350ef0 [ 111.450938] Call Trace: [ 111.451160] [ 111.451354] ? __pfx_perf_tp_event+0x10/0x10 [ 111.451730] ? arch_scale_cpu_capacity+0x17/0xa0 [ 111.452114] ? cpu_util.constprop.0+0x17d/0x340 [ 111.452491] ? __asan_memset+0x24/0x50 [ 111.452805] ? sched_balance_find_dst_group+0xa9a/0x1c00 [ 111.453233] ? lock_release+0xc8/0x290 [ 111.453547] ? __pfx_sched_balance_find_dst_group+0x10/0x10 [ 111.453991] ? __lock_acquire+0x694/0x1b70 [ 111.454328] ? perf_trace_run_bpf_submit+0xef/0x180 [ 111.454726] perf_trace_run_bpf_submit+0xef/0x180 [ 111.455113] perf_trace_preemptirq_template+0x259/0x430 [ 111.455540] ? __pick_eevdf+0x326/0x570 [ 111.455865] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 111.456330] ? update_curr+0x39e/0x500 [ 111.456642] ? find_held_lock+0x2b/0x80 [ 111.456964] ? try_to_wake_up+0x8ae/0x11d0 [ 111.457303] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 111.457346] kmemleak: Found object by alias at 0x607f1a634b64 [ 111.457364] CPU: 0 UID: 0 PID: 3960 Comm: syz-executor.4 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 111.457382] Tainted: [W]=WARN [ 111.457386] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 111.457393] Call Trace: [ 111.457397] [ 111.457401] dump_stack_lvl+0xca/0x120 [ 111.457425] __lookup_object+0x94/0xb0 [ 111.457441] delete_object_full+0x27/0x70 [ 111.457455] free_percpu+0x30/0x1160 [ 111.457472] ? arch_uprobe_clear_state+0x16/0x140 [ 111.457489] futex_hash_free+0x38/0xc0 [ 111.457503] mmput+0x2d3/0x390 [ 111.457521] do_exit+0x79d/0x2970 [ 111.457534] ? lock_release+0xc8/0x290 [ 111.457549] ? __pfx_do_exit+0x10/0x10 [ 111.457562] ? find_held_lock+0x2b/0x80 [ 111.457578] ? get_signal+0x835/0x2340 [ 111.457597] do_group_exit+0xd3/0x2a0 [ 111.457610] get_signal+0x2315/0x2340 [ 111.457626] ? __fget_files+0x203/0x3b0 [ 111.457639] ? __pfx_get_signal+0x10/0x10 [ 111.457654] ? do_futex+0x135/0x370 [ 111.457666] ? __pfx_do_futex+0x10/0x10 [ 111.457679] arch_do_signal_or_restart+0x80/0x790 [ 111.457696] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 111.457711] ? __x64_sys_futex+0x1c9/0x4d0 [ 111.457723] ? __x64_sys_futex+0x1d2/0x4d0 [ 111.457736] ? __pfx___x64_sys_futex+0x10/0x10 [ 111.457749] ? kcov_ioctl+0x386/0x6c0 [ 111.457764] exit_to_user_mode_loop+0x8b/0x110 [ 111.457781] do_syscall_64+0x2f7/0x360 [ 111.457792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.457804] RIP: 0033:0x7fa12d2e1b19 [ 111.457812] Code: Unable to access opcode bytes at 0x7fa12d2e1aef. [ 111.457817] RSP: 002b:00007fa12a836218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.457828] RAX: fffffffffffffe00 RBX: 00007fa12d3f5028 RCX: 00007fa12d2e1b19 [ 111.457836] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa12d3f5028 [ 111.457843] RBP: 00007fa12d3f5020 R08: 0000000000000000 R09: 0000000000000000 [ 111.457850] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa12d3f502c [ 111.457856] R13: 00007ffc65df8e6f R14: 00007fa12a836300 R15: 0000000000022000 [ 111.457867] [ 111.457870] kmemleak: Object (percpu) 0x607f1a634b60 (size 8): [ 111.457877] kmemleak: comm "syz-executor.7", pid 3963, jiffies 4294778308 [ 111.457884] kmemleak: min_count = 1 [ 111.457887] kmemleak: count = 0 [ 111.457891] kmemleak: flags = 0x21 [ 111.457895] kmemleak: checksum = 0 [ 111.457899] kmemleak: backtrace: [ 111.457902] pcpu_alloc_noprof+0x87a/0x1170 [ 111.457917] perf_trace_event_init+0x366/0xa10 [ 111.457931] perf_trace_init+0x1a4/0x2f0 [ 111.457942] perf_tp_event_init+0xa6/0x120 [ 111.457957] perf_try_init_event+0x140/0x9f0 [ 111.457970] perf_event_alloc.part.0+0x118e/0x45f0 [ 111.457986] __do_sys_perf_event_open+0x719/0x2c20 [ 111.457998] do_syscall_64+0xbf/0x360 [ 111.458006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.478593] trace_irq_enable.constprop.0+0xa6/0x100 [ 111.478996] trace_hardirqs_on+0x26/0x40 [ 111.479317] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 111.479715] try_to_wake_up+0x8ae/0x11d0 [ 111.480042] ? __pfx_try_to_wake_up+0x10/0x10 [ 111.480404] ? plist_del+0x122/0x270 [ 111.480703] ? find_held_lock+0x2b/0x80 [ 111.481024] ? futex_wake+0x474/0x540 [ 111.481333] wake_up_q+0xa1/0x130 [ 111.481619] futex_wake+0x47e/0x540 [ 111.481915] ? __pfx_futex_wake+0x10/0x10 [ 111.482248] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 111.482662] ? finish_task_switch.isra.0+0x206/0x840 [ 111.483071] do_futex+0x26d/0x370 [ 111.483350] ? __pfx_do_futex+0x10/0x10 [ 111.483677] ? __pfx___schedule+0x10/0x10 [ 111.484008] __x64_sys_futex+0x1c9/0x4d0 [ 111.484331] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 111.484797] ? __pfx___x64_sys_futex+0x10/0x10 [ 111.485160] ? xfd_validate_state+0x55/0x180 [ 111.485521] do_syscall_64+0xbf/0x360 [ 111.485822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.486225] RIP: 0033:0x7f4b7fb59b19 [ 111.486519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 111.487939] RSP: 002b:00007ffdae6d9f38 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.488531] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4b7fb59b19 [ 111.489085] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4b7fc6cf68 [ 111.489642] RBP: 00007f4b7fc6cf60 R08: 00007f4b7d0cf700 R09: 0000000000000000 [ 111.490201] R10: 00007f4b7d0cf700 R11: 0000000000000246 R12: 00007f4b7fc71a68 [ 111.490765] R13: 00007ffdae6da040 R14: 00007f4b7fc6cf60 R15: 000000000001b2df [ 111.491326] [ 111.491513] Modules linked in: [ 111.491780] ---[ end trace 0000000000000000 ]--- [ 111.492150] RIP: 0010:perf_tp_event+0x175/0xe70 [ 111.492524] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 111.493935] RSP: 0018:ffff8880458df780 EFLAGS: 00010012 [ 111.494353] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 111.494912] RDX: ffff88804719d280 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 111.495469] RBP: ffff8880458df9f0 R08: ffff88806cf31340 R09: ffffe8ffffd11b60 [ 111.496038] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 111.496594] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 111.497159] FS: 000055557ded3400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 111.497792] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.498250] CR2: 000055557ded4c18 CR3: 000000001d811000 CR4: 0000000000350ef0 [ 111.498809] note: syz-executor.6[3954] exited with irqs disabled [ 111.499340] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 111.500225] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 111.500818] CPU: 1 UID: 0 PID: 3954 Comm: syz-executor.6 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 111.501742] Tainted: [D]=DIE, [W]=WARN [ 111.502044] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 111.502682] RIP: 0010:perf_tp_event+0x175/0xe70 [ 111.503060] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 111.504483] RSP: 0018:ffff88806cf08b80 EFLAGS: 00010012 [ 111.504901] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 111.505441] RDX: ffff88804719d280 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 111.505971] RBP: ffff88806cf08df0 R08: ffff88806cf313e8 R09: ffffe8ffffd11b60 [ 111.506500] R10: 0000000000000000 R11: ffff88800da90c98 R12: dffffc0000000000 [ 111.507028] R13: 0000000000000014 R14: ffff88806cf313e8 R15: dffffc0000000000 [ 111.507557] FS: 000055557ded3400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 111.508162] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.508595] CR2: 000055557ded4c18 CR3: 000000001d811000 CR4: 0000000000350ef0 [ 111.509125] Call Trace: [ 111.509320] [ 111.509490] ? __pfx_perf_tp_event+0x10/0x10 [ 111.509828] ? enqueue_task_fair+0x43a/0x1e00 [ 111.510173] ? check_preempt_wakeup_fair+0x6e/0x950 [ 111.510547] ? wakeup_preempt+0x140/0x2a0 [ 111.510861] ? lock_release+0x1c7/0x290 [ 111.511160] ? lock_release+0x1c7/0x290 [ 111.511460] ? do_raw_spin_unlock+0x53/0x220 [ 111.511803] ? _raw_spin_unlock_irqrestore+0x22/0x50 [ 111.512185] ? try_to_wake_up+0x8ae/0x11d0 [ 111.512507] ? do_raw_spin_lock+0x123/0x260 [ 111.512837] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 111.513189] ? perf_trace_run_bpf_submit+0xef/0x180 [ 111.513564] perf_trace_run_bpf_submit+0xef/0x180 [ 111.513928] perf_trace_preemptirq_template+0x259/0x430 [ 111.514331] ? read_tsc+0x9/0x20 [ 111.514595] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 111.515035] ? clockevents_program_event+0x135/0x360 [ 111.515418] ? tick_program_event+0xac/0x140 [ 111.515757] ? handle_softirqs+0x16e/0x770 [ 111.516083] trace_irq_enable.constprop.0+0xa6/0x100 [ 111.516459] trace_hardirqs_on+0x26/0x40 [ 111.516761] handle_softirqs+0x16e/0x770 [ 111.517072] __irq_exit_rcu+0xc4/0x100 [ 111.517372] irq_exit_rcu+0x9/0x20 [ 111.517643] sysvec_apic_timer_interrupt+0x70/0x80 [ 111.518016] [ 111.518187] [ 111.518360] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 111.518749] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 111.519102] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de [ 111.520431] RSP: 0018:ffff8880458dff28 EFLAGS: 00000246 [ 111.520823] RAX: 0000000000000001 RBX: ffff88804719d280 RCX: ffffffff817c2b86 [ 111.521350] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 111.521877] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 111.522402] R10: ffffffff8643ac57 R11: 0000000000000001 R12: ffff88804719d280 [ 111.522929] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000 [ 111.523458] ? trace_irq_enable.constprop.0+0x26/0x100 [ 111.523854] ? make_task_dead+0x214/0x3b0 [ 111.524171] ? make_task_dead+0x214/0x3b0 [ 111.524482] ? do_syscall_64+0xbf/0x360 [ 111.524779] rewind_stack_and_make_dead+0x16/0x20 [ 111.525143] RIP: 0033:0x7f4b7fb59b19 [ 111.525421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 111.526750] RSP: 002b:00007ffdae6d9f38 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.527316] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4b7fb59b19 [ 111.527851] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4b7fc6cf68 [ 111.528381] RBP: 00007f4b7fc6cf60 R08: 00007f4b7d0cf700 R09: 0000000000000000 [ 111.528912] R10: 00007f4b7d0cf700 R11: 0000000000000246 R12: 00007f4b7fc71a68 [ 111.529442] R13: 00007ffdae6da040 R14: 00007f4b7fc6cf60 R15: 000000000001b2df [ 111.529975] [ 111.530153] Modules linked in: [ 111.530398] ---[ end trace 0000000000000000 ]--- [ 111.530746] RIP: 0010:perf_tp_event+0x175/0xe70 [ 111.531099] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 111.532435] RSP: 0018:ffff8880458df780 EFLAGS: 00010012 [ 111.532832] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 111.533366] RDX: ffff88804719d280 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 111.533896] RBP: ffff8880458df9f0 R08: ffff88806cf31340 R09: ffffe8ffffd11b60 [ 111.534426] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 111.534956] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 111.535486] FS: 000055557ded3400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 111.536093] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.536526] CR2: 000055557ded4c18 CR3: 000000001d811000 CR4: 0000000000350ef0 [ 111.537061] Kernel panic - not syncing: Fatal exception in interrupt [ 111.537727] Kernel Offset: disabled [ 111.538001] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 12:04:23 Registers: info registers vcpu 0 RAX=0000000000000293 RBX=ffff8880458d7f58 RCX=ffffffff81522453 RDX=ffff888047365280 RSI=0000000000000003 RDI=ffff88800946b540 RBP=ffff8880458d7f48 RSP=ffff8880458d7f30 R8 =0000000000000000 R9 =ffffed100128d6a8 R10=ffff88800946b543 R11=0000000000000000 R12=0000000000000000 R13=0000000000000003 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84bb26f7 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555593e56400 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d725000 CR3=00000000440b9000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000ff0000000000 XMM01=00000000000000000000010000000000 XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007fd803af27c800007fd803af27c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff8880458df070 R8 =0000000000000000 R9 =ffffed10016d1046 R10=0000000000000063 R11=0000000065646f43 R12=0000000000000063 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557ded3400 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055557ded4c18 CR3=000000001d811000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f4b7fc407c000007f4b7fc407c8 XMM02=00007f4b7fc407e000007f4b7fc407c0 XMM03=00007f4b7fc407c800007f4b7fc407c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000