Warning: Permanently added '[localhost]:46430' (ECDSA) to the list of known hosts. 2025/08/29 08:08:28 fuzzer started 2025/08/29 08:08:28 dialing manager at localhost:43077 syzkaller login: [ 50.496831] cgroup: Unknown subsys name 'net' [ 50.565225] cgroup: Unknown subsys name 'cpuset' [ 50.587894] cgroup: Unknown subsys name 'rlimit' 2025/08/29 08:08:39 syscalls: 2214 2025/08/29 08:08:39 code coverage: enabled 2025/08/29 08:08:39 comparison tracing: enabled 2025/08/29 08:08:39 extra coverage: enabled 2025/08/29 08:08:39 setuid sandbox: enabled 2025/08/29 08:08:39 namespace sandbox: enabled 2025/08/29 08:08:39 Android sandbox: enabled 2025/08/29 08:08:39 fault injection: enabled 2025/08/29 08:08:39 leak checking: enabled 2025/08/29 08:08:39 net packet injection: enabled 2025/08/29 08:08:39 net device setup: enabled 2025/08/29 08:08:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 08:08:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 08:08:39 USB emulation: enabled 2025/08/29 08:08:39 hci packet injection: enabled 2025/08/29 08:08:39 wifi device emulation: enabled 2025/08/29 08:08:39 802.15.4 emulation: enabled 2025/08/29 08:08:39 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 08:08:39 fetching corpus: 50, signal 23460/26269 (executing program) 2025/08/29 08:08:39 fetching corpus: 100, signal 35091/38421 (executing program) 2025/08/29 08:08:40 fetching corpus: 150, signal 43269/46902 (executing program) 2025/08/29 08:08:40 fetching corpus: 200, signal 48060/51999 (executing program) 2025/08/29 08:08:40 fetching corpus: 250, signal 52268/56397 (executing program) 2025/08/29 08:08:40 fetching corpus: 300, signal 57039/61068 (executing program) 2025/08/29 08:08:40 fetching corpus: 350, signal 60781/64610 (executing program) 2025/08/29 08:08:40 fetching corpus: 399, signal 65541/68809 (executing program) 2025/08/29 08:08:41 fetching corpus: 449, signal 70465/72966 (executing program) 2025/08/29 08:08:41 fetching corpus: 499, signal 73598/75476 (executing program) 2025/08/29 08:08:41 fetching corpus: 549, signal 76535/77740 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/78718 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/78796 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/78868 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/78946 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/79019 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/79079 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/79158 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/79231 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/79312 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/79387 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/79456 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/79526 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/79618 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/79698 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/79779 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/79866 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/79945 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/80041 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/80113 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/80204 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/80291 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/80383 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/80451 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/80536 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/80597 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/80655 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/80731 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/80794 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/80800 (executing program) 2025/08/29 08:08:41 fetching corpus: 589, signal 77791/80800 (executing program) 2025/08/29 08:08:43 starting 8 fuzzer processes 08:08:43 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040), 0x4) 08:08:43 executing program 1: r0 = epoll_create1(0x0) r1 = eventfd(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) read$eventfd(r1, &(0x7f00000010c0), 0x8) 08:08:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$sock(r0, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[@timestamping={{0x18}}], 0x18}}], 0x2, 0x0) [ 65.284008] audit: type=1400 audit(1756454923.644:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:08:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000003c0)={0x0, 0x0, 0x7}) 08:08:43 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000080)='./file0\x00') 08:08:43 executing program 4: keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) getresuid(0x0, 0x0, &(0x7f0000000180)) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f000000d700)='ns/pid\x00') 08:08:43 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 08:08:43 executing program 6: r0 = fork() ptrace(0x10, r0) r1 = fork() kcmp(0x0, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000240)={0x8000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x26}, &(0x7f0000000140)=""/54, 0x36, &(0x7f0000000180)=""/68, &(0x7f0000000200)=[r1], 0x1, {r2}}, 0x58) ptrace(0x8, r0) sched_getscheduler(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x8) [ 66.425757] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.430198] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.435630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.448196] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.454556] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.609853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.621853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.626616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.630094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.633784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.638097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.641612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.644423] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.648682] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.656988] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.673430] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.680334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.697611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.706202] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.708175] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.727281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.732014] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.734279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 66.741826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.741848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 66.749791] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 66.757381] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 66.760843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.761252] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 66.773232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.781760] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 66.786626] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 66.795910] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 66.797994] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 66.803410] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 66.804794] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 66.812857] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 66.828159] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 66.830706] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 66.836941] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 68.513854] Bluetooth: hci0: command tx timeout [ 68.706528] Bluetooth: hci2: command tx timeout [ 68.707131] Bluetooth: hci1: command tx timeout [ 68.770539] Bluetooth: hci4: command tx timeout [ 68.833543] Bluetooth: hci5: command tx timeout [ 68.834037] Bluetooth: hci3: command tx timeout [ 68.898546] Bluetooth: hci7: command tx timeout [ 68.962146] Bluetooth: hci6: command tx timeout [ 70.561682] Bluetooth: hci0: command tx timeout [ 70.753666] Bluetooth: hci1: command tx timeout [ 70.754107] Bluetooth: hci2: command tx timeout [ 70.817492] Bluetooth: hci4: command tx timeout [ 70.881595] Bluetooth: hci3: command tx timeout [ 70.881998] Bluetooth: hci5: command tx timeout [ 70.945657] Bluetooth: hci7: command tx timeout [ 71.009691] Bluetooth: hci6: command tx timeout [ 72.609515] Bluetooth: hci0: command tx timeout [ 72.801618] Bluetooth: hci2: command tx timeout [ 72.802047] Bluetooth: hci1: command tx timeout [ 72.865491] Bluetooth: hci4: command tx timeout [ 72.929559] Bluetooth: hci3: command tx timeout [ 72.929960] Bluetooth: hci5: command tx timeout [ 72.993598] Bluetooth: hci7: command tx timeout [ 73.057659] Bluetooth: hci6: command tx timeout [ 74.657521] Bluetooth: hci0: command tx timeout [ 74.851492] Bluetooth: hci2: command tx timeout [ 74.851907] Bluetooth: hci1: command tx timeout [ 74.913595] Bluetooth: hci4: command tx timeout [ 74.977755] Bluetooth: hci3: command tx timeout [ 74.978140] Bluetooth: hci5: command tx timeout [ 75.041583] Bluetooth: hci7: command tx timeout [ 75.105544] Bluetooth: hci6: command tx timeout [ 103.165652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.166332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.334647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.335282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.556607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.557246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.706510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.707199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:09:22 executing program 1: r0 = epoll_create1(0x0) r1 = eventfd(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) read$eventfd(r1, &(0x7f00000010c0), 0x8) [ 103.856302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.857021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:09:22 executing program 1: r0 = epoll_create1(0x0) r1 = eventfd(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) read$eventfd(r1, &(0x7f00000010c0), 0x8) 08:09:22 executing program 1: r0 = epoll_create1(0x0) r1 = eventfd(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) read$eventfd(r1, &(0x7f00000010c0), 0x8) [ 103.974523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.975114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.087549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.088237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.098196] audit: type=1400 audit(1756454962.457:8): avc: denied { open } for pid=3856 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:09:22 executing program 1: r0 = epoll_create1(0x0) r1 = eventfd(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) read$eventfd(r1, &(0x7f00000010c0), 0x8) [ 104.106681] audit: type=1400 audit(1756454962.457:9): avc: denied { kernel } for pid=3856 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:09:22 executing program 1: r0 = epoll_create1(0x0) r1 = eventfd(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) read$eventfd(r1, &(0x7f00000010c0), 0x8) [ 104.222867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.223496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:09:22 executing program 1: r0 = epoll_create1(0x0) r1 = eventfd(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) read$eventfd(r1, &(0x7f00000010c0), 0x8) 08:09:22 executing program 6: r0 = fork() ptrace(0x10, r0) r1 = fork() kcmp(0x0, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000240)={0x8000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x26}, &(0x7f0000000140)=""/54, 0x36, &(0x7f0000000180)=""/68, &(0x7f0000000200)=[r1], 0x1, {r2}}, 0x58) ptrace(0x8, r0) sched_getscheduler(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x8) [ 104.279839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.280430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:09:22 executing program 1: r0 = fork() ptrace(0x10, r0) r1 = fork() kcmp(0x0, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000240)={0x8000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x26}, &(0x7f0000000140)=""/54, 0x36, &(0x7f0000000180)=""/68, &(0x7f0000000200)=[r1], 0x1, {r2}}, 0x58) ptrace(0x8, r0) sched_getscheduler(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x8) [ 104.366826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.367966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.501782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.502428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.549357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.550101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.577562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.578253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.647133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.647794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.696042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.696700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.716174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.716931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.812736] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 104.813750] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.820082] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.852364] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 104.853281] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 104.853934] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 104.854563] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 06 00 [ 104.855249] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 2 [ 104.856382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 104.857306] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.858192] Buffer I/O error on dev sr0, logical block 0, async page read [ 104.860799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 104.862036] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.863147] Buffer I/O error on dev sr0, logical block 1, async page read [ 104.871005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 104.871763] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.872881] Buffer I/O error on dev sr0, logical block 2, async page read [ 104.879211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 104.879982] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.881106] Buffer I/O error on dev sr0, logical block 3, async page read [ 104.884738] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 104.885744] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.887059] Buffer I/O error on dev sr0, logical block 4, async page read [ 104.892633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 104.893401] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.894708] Buffer I/O error on dev sr0, logical block 5, async page read [ 104.897967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 104.898767] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.899890] Buffer I/O error on dev sr0, logical block 6, async page read [ 104.910872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 104.911677] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.912820] Buffer I/O error on dev sr0, logical block 7, async page read [ 104.974329] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 104.975687] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 104.976698] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 104.977651] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 06 00 [ 104.978710] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 2 08:09:23 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040), 0x4) 08:09:23 executing program 4: keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) getresuid(0x0, 0x0, &(0x7f0000000180)) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f000000d700)='ns/pid\x00') 08:09:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$sock(r0, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[@timestamping={{0x18}}], 0x18}}], 0x2, 0x0) 08:09:23 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 08:09:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000003c0)={0x0, 0x0, 0x7}) 08:09:23 executing program 1: r0 = fork() ptrace(0x10, r0) r1 = fork() kcmp(0x0, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000240)={0x8000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x26}, &(0x7f0000000140)=""/54, 0x36, &(0x7f0000000180)=""/68, &(0x7f0000000200)=[r1], 0x1, {r2}}, 0x58) ptrace(0x8, r0) sched_getscheduler(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x8) 08:09:23 executing program 6: r0 = fork() ptrace(0x10, r0) r1 = fork() kcmp(0x0, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000240)={0x8000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x26}, &(0x7f0000000140)=""/54, 0x36, &(0x7f0000000180)=""/68, &(0x7f0000000200)=[r1], 0x1, {r2}}, 0x58) ptrace(0x8, r0) sched_getscheduler(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x8) 08:09:23 executing program 7: r0 = fork() ptrace(0x10, r0) r1 = fork() kcmp(0x0, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000240)={0x8000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x26}, &(0x7f0000000140)=""/54, 0x36, &(0x7f0000000180)=""/68, &(0x7f0000000200)=[r1], 0x1, {r2}}, 0x58) ptrace(0x8, r0) sched_getscheduler(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x8) [ 105.061817] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 08:09:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000003c0)={0x0, 0x0, 0x7}) 08:09:23 executing program 4: keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) getresuid(0x0, 0x0, &(0x7f0000000180)) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f000000d700)='ns/pid\x00') [ 105.125007] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 105.126428] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 105.127503] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 105.128537] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 06 00 [ 105.136137] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.138958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 105.139839] Buffer I/O error on dev sr0, logical block 0, async page read [ 105.159904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 105.160926] Buffer I/O error on dev sr0, logical block 1, async page read 08:09:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000003c0)={0x0, 0x0, 0x7}) 08:09:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$sock(r0, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[@timestamping={{0x18}}], 0x18}}], 0x2, 0x0) 08:09:23 executing program 4: keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) getresuid(0x0, 0x0, &(0x7f0000000180)) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f000000d700)='ns/pid\x00') [ 105.181772] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 105.193993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 105.202610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 105.207670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 105.214947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 105.227172] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.228777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 105.347089] kmemleak: Found object by alias at 0x607f1a639d2c [ 105.347110] CPU: 1 UID: 0 PID: 3934 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 105.347128] Tainted: [W]=WARN [ 105.347131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 105.347138] Call Trace: [ 105.347142] [ 105.347146] dump_stack_lvl+0xca/0x120 [ 105.347170] __lookup_object+0x94/0xb0 [ 105.347186] delete_object_full+0x27/0x70 [ 105.347201] free_percpu+0x30/0x1160 [ 105.347218] ? arch_uprobe_clear_state+0x16/0x140 [ 105.347238] futex_hash_free+0x38/0xc0 [ 105.347252] mmput+0x2d3/0x390 [ 105.347270] do_exit+0x79d/0x2970 [ 105.347284] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 105.347298] ? __pfx_do_exit+0x10/0x10 [ 105.347316] do_group_exit+0xd3/0x2a0 [ 105.347330] get_signal+0x2315/0x2340 [ 105.347348] ? task_mm_cid_work+0x368/0x840 [ 105.347370] ? __pfx_get_signal+0x10/0x10 [ 105.347385] ? do_futex+0x135/0x370 [ 105.347399] ? __pfx_do_futex+0x10/0x10 [ 105.347413] arch_do_signal_or_restart+0x80/0x790 [ 105.347430] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 105.347450] ? __x64_sys_futex+0x1c9/0x4d0 [ 105.347462] ? __x64_sys_futex+0x1d2/0x4d0 [ 105.347475] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 105.347494] ? __pfx___x64_sys_futex+0x10/0x10 [ 105.347507] ? xfd_validate_state+0x55/0x180 [ 105.347528] exit_to_user_mode_loop+0x8b/0x110 [ 105.347540] do_syscall_64+0x2f7/0x360 [ 105.347552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.347564] RIP: 0033:0x7fdfd444bb19 [ 105.347573] Code: Unable to access opcode bytes at 0x7fdfd444baef. [ 105.347578] RSP: 002b:00007fdfd19c1218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 105.347589] RAX: fffffffffffffe00 RBX: 00007fdfd455ef68 RCX: 00007fdfd444bb19 [ 105.347597] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdfd455ef68 [ 105.347603] RBP: 00007fdfd455ef60 R08: 0000000000000000 R09: 0000000000000000 [ 105.347610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdfd455ef6c [ 105.347616] R13: 00007ffe8d11d48f R14: 00007fdfd19c1300 R15: 0000000000022000 [ 105.347632] [ 105.347636] kmemleak: Object (percpu) 0x607f1a639d28 (size 8): [ 105.347642] kmemleak: comm "syz-executor.1", pid 3932, jiffies 4294772256 [ 105.347649] kmemleak: min_count = 1 [ 105.347653] kmemleak: count = 0 [ 105.347656] kmemleak: flags = 0x21 [ 105.347660] kmemleak: checksum = 0 [ 105.347663] kmemleak: backtrace: [ 105.347667] pcpu_alloc_noprof+0x87a/0x1170 [ 105.347681] perf_trace_event_init+0x366/0xa10 [ 105.347694] perf_trace_init+0x1a4/0x2f0 [ 105.347705] perf_tp_event_init+0xa6/0x120 [ 105.347720] perf_try_init_event+0x140/0x9f0 [ 105.347733] perf_event_alloc.part.0+0x118e/0x45f0 [ 105.347748] __do_sys_perf_event_open+0x719/0x2c20 [ 105.347760] do_syscall_64+0xbf/0x360 [ 105.347769] entry_SYSCALL_64_after_hwframe+0x77/0x7f 08:09:23 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040), 0x4) 08:09:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$sock(r0, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[@timestamping={{0x18}}], 0x18}}], 0x2, 0x0) 08:09:23 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 08:09:23 executing program 7: r0 = fork() ptrace(0x10, r0) r1 = fork() kcmp(0x0, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000240)={0x8000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x26}, &(0x7f0000000140)=""/54, 0x36, &(0x7f0000000180)=""/68, &(0x7f0000000200)=[r1], 0x1, {r2}}, 0x58) ptrace(0x8, r0) sched_getscheduler(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x8) 08:09:23 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 08:09:23 executing program 6: r0 = fork() ptrace(0x10, r0) r1 = fork() kcmp(0x0, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000240)={0x8000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x26}, &(0x7f0000000140)=""/54, 0x36, &(0x7f0000000180)=""/68, &(0x7f0000000200)=[r1], 0x1, {r2}}, 0x58) ptrace(0x8, r0) sched_getscheduler(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x8) 08:09:23 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 08:09:23 executing program 1: r0 = fork() ptrace(0x10, r0) r1 = fork() kcmp(0x0, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000240)={0x8000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x26}, &(0x7f0000000140)=""/54, 0x36, &(0x7f0000000180)=""/68, &(0x7f0000000200)=[r1], 0x1, {r2}}, 0x58) ptrace(0x8, r0) sched_getscheduler(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x8) [ 105.493728] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI [ 105.495218] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 105.496353] CPU: 0 UID: 0 PID: 3959 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 105.500036] Tainted: [W]=WARN [ 105.501194] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 105.504363] RIP: 0010:perf_tp_event+0x175/0xe70 [ 105.506037] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 105.508701] RSP: 0018:ffff888043cf7780 EFLAGS: 00010012 [ 105.509406] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 105.510330] RDX: ffff888017621b80 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 105.511241] RBP: ffff888043cf79f0 R08: ffff88806ce31340 R09: ffffe8ffffc06180 [ 105.512148] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 105.513074] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000 [ 105.513982] FS: 0000555590050400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 105.515007] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.515753] CR2: 000055557a41bc18 CR3: 000000004331c000 CR4: 0000000000350ef0 [ 105.516668] Call Trace: [ 105.517018] [ 105.517319] ? __pfx_perf_tp_event+0x10/0x10 [ 105.517911] ? arch_scale_cpu_capacity+0x17/0xa0 [ 105.518537] ? cpu_util.constprop.0+0x17d/0x340 [ 105.519155] ? __asan_memset+0x24/0x50 [ 105.519670] ? sched_balance_find_dst_group+0xa9a/0x1c00 [ 105.520372] ? lock_release+0xc8/0x290 [ 105.520899] ? __pfx_sched_balance_find_dst_group+0x10/0x10 [ 105.521626] ? __lock_acquire+0x694/0x1b70 [ 105.522180] ? perf_trace_run_bpf_submit+0xef/0x180 [ 105.522836] perf_trace_run_bpf_submit+0xef/0x180 [ 105.523476] perf_trace_preemptirq_template+0x259/0x430 [ 105.524176] ? trace_sched_set_need_resched_tp+0xd4/0x110 [ 105.524905] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 105.525675] ? __pfx___resched_curr+0x10/0x10 [ 105.526273] ? find_held_lock+0x2b/0x80 [ 105.526803] ? try_to_wake_up+0x8ae/0x11d0 [ 105.527363] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 105.528027] trace_irq_enable.constprop.0+0xa6/0x100 [ 105.528684] trace_hardirqs_on+0x26/0x40 [ 105.529222] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 105.529869] try_to_wake_up+0x8ae/0x11d0 [ 105.530409] ? __pfx_try_to_wake_up+0x10/0x10 [ 105.531001] ? plist_del+0x122/0x270 [ 105.531493] ? find_held_lock+0x2b/0x80 [ 105.532021] ? futex_wake+0x474/0x540 [ 105.532529] wake_up_q+0xa1/0x130 [ 105.533006] futex_wake+0x47e/0x540 [ 105.533494] ? __pfx_futex_wake+0x10/0x10 [ 105.534039] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 105.534714] ? finish_task_switch.isra.0+0x206/0x840 [ 105.535383] do_futex+0x26d/0x370 [ 105.535848] ? __pfx_do_futex+0x10/0x10 [ 105.536371] ? __pfx___schedule+0x10/0x10 [ 105.536919] __x64_sys_futex+0x1c9/0x4d0 [ 105.537451] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 105.538206] ? __pfx___x64_sys_futex+0x10/0x10 [ 105.538803] ? xfd_validate_state+0x55/0x180 [ 105.539387] do_syscall_64+0xbf/0x360 [ 105.539880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.540542] RIP: 0033:0x7ff767777b19 [ 105.541031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 105.543313] RSP: 002b:00007ffe055f74d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 105.544277] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff767777b19 [ 105.545185] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff76788af68 [ 105.546092] RBP: 00007ff76788af60 R08: 00007ff764ced700 R09: 0000000000000000 [ 105.546987] R10: 00007ff764ced700 R11: 0000000000000246 R12: 00007ff76788f060 [ 105.547886] R13: 00007ffe055f75e0 R14: 00007ff76788af60 R15: 0000000000019bad [ 105.548788] [ 105.549102] Modules linked in: [ 105.549524] ---[ end trace 0000000000000000 ]--- [ 105.550119] RIP: 0010:perf_tp_event+0x175/0xe70 [ 105.550722] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 105.553034] RSP: 0018:ffff888043cf7780 EFLAGS: 00010012 [ 105.553709] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 105.554611] RDX: ffff888017621b80 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 105.555512] RBP: ffff888043cf79f0 R08: ffff88806ce31340 R09: ffffe8ffffc06180 [ 105.556414] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 105.557320] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000 [ 105.558224] FS: 0000555590050400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 105.559240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.559978] CR2: 000055557a41bc18 CR3: 000000004331c000 CR4: 0000000000350ef0 [ 105.560888] note: syz-executor.3[3959] exited with irqs disabled [ 105.562699] note: syz-executor.3[3959] exited with preempt_count 3 08:09:24 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 08:09:24 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040), 0x4) 08:09:24 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 08:09:24 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 105.752775] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 105.753696] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 105.754298] CPU: 1 UID: 0 PID: 3986 Comm: syz-executor.1 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 105.755330] Tainted: [D]=DIE, [W]=WARN [ 105.755710] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 105.756357] RIP: 0010:perf_tp_event+0x175/0xe70 [ 105.756740] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 105.758170] RSP: 0018:ffff8880441ef780 EFLAGS: 00010012 [ 105.758589] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90002c05000 [ 105.759149] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 105.759709] RBP: ffff8880441ef9f0 R08: ffff88806cf31340 R09: ffffe8ffffd06180 [ 105.760281] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 105.760838] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 105.761410] FS: 00007fc15baef700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 105.762039] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.762499] CR2: 00007fc15eab2004 CR3: 000000001f59a000 CR4: 0000000000350ef0 [ 105.763056] Call Trace: [ 105.763263] [ 105.763447] ? __pfx_perf_tp_event+0x10/0x10 [ 105.763817] ? perf_trace_run_bpf_submit+0xef/0x180 [ 105.764219] perf_trace_run_bpf_submit+0xef/0x180 [ 105.764609] perf_trace_preemptirq_template+0x259/0x430 [ 105.765054] ? trace_sched_set_need_resched_tp+0xd4/0x110 [ 105.765495] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 105.765967] ? __pfx___resched_curr+0x10/0x10 [ 105.766333] ? check_preempt_wakeup_fair+0x406/0x950 [ 105.766740] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 105.767145] trace_irq_enable.constprop.0+0xa6/0x100 [ 105.767546] trace_hardirqs_on+0x26/0x40 [ 105.767867] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 105.768259] try_to_wake_up+0x8ae/0x11d0 [ 105.768588] ? __pfx_try_to_wake_up+0x10/0x10 [ 105.768958] ? plist_del+0x122/0x270 [ 105.769263] ? __futex_unqueue+0xda/0x1c0 [ 105.769597] wake_up_q+0xa1/0x130 [ 105.769882] futex_wake+0x47e/0x540 [ 105.770181] ? __pfx_futex_wake+0x10/0x10 [ 105.770517] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 105.770933] ? do_vfs_ioctl+0x125/0x1470 [ 105.771268] do_futex+0x26d/0x370 [ 105.771549] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 105.772040] ? __pfx_do_futex+0x10/0x10 [ 105.772357] ? __radix_tree_lookup+0x1f7/0x290 [ 105.772726] __x64_sys_futex+0x1c9/0x4d0 [ 105.773055] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 105.773525] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 105.773934] ? __pfx___x64_sys_futex+0x10/0x10 [ 105.774299] ? __pfx___do_sys_kcmp+0x10/0x10 [ 105.774653] do_syscall_64+0xbf/0x360 [ 105.774962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.775368] RIP: 0033:0x7fc15e59ab19 [ 105.775662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 105.777077] RSP: 002b:00007fc15baef218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 105.777669] RAX: ffffffffffffffda RBX: 00007fc15e6ae028 RCX: 00007fc15e59ab19 [ 105.778248] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc15e6ae02c [ 105.778808] RBP: 00007fc15e6ae020 R08: 0000000000000003 R09: 0000000000000000 [ 105.779359] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fc15e6ae02c [ 105.779916] R13: 00007ffc5959e77f R14: 00007fc15baef300 R15: 0000000000022000 [ 105.780473] [ 105.780661] Modules linked in: [ 105.780933] ---[ end trace 0000000000000000 ]--- [ 105.781299] RIP: 0010:perf_tp_event+0x175/0xe70 [ 105.781674] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 105.783093] RSP: 0018:ffff888043cf7780 EFLAGS: 00010012 [ 105.783514] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 105.784072] RDX: ffff888017621b80 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 105.784633] RBP: ffff888043cf79f0 R08: ffff88806ce31340 R09: ffffe8ffffc06180 [ 105.785200] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 105.785755] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000 [ 105.786315] FS: 00007fc15baef700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 105.786951] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.787410] CR2: 00007fc15eab2004 CR3: 000000001f59a000 CR4: 0000000000350ef0 [ 105.787969] note: syz-executor.1[3986] exited with irqs disabled [ 105.788500] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#3] SMP KASAN NOPTI [ 105.789373] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 105.789970] CPU: 1 UID: 0 PID: 3986 Comm: syz-executor.1 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 105.790905] Tainted: [D]=DIE, [W]=WARN [ 105.791209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 105.791850] RIP: 0010:perf_tp_event+0x175/0xe70 [ 105.792240] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 105.793655] RSP: 0018:ffff88806cf08b80 EFLAGS: 00010012 [ 105.794079] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 105.794629] RDX: ffff8880441e0000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 105.795189] RBP: ffff88806cf08df0 R08: ffff88806cf313e8 R09: ffffe8ffffd06180 [ 105.795740] R10: 0000000000000000 R11: ffff88801c4b1898 R12: dffffc0000000000 [ 105.796294] R13: 0000000000000014 R14: ffff88806cf313e8 R15: dffffc0000000000 [ 105.796856] FS: 00007fc15baef700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 105.797494] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.797949] CR2: 00007fc15eab2004 CR3: 000000001f59a000 CR4: 0000000000350ef0 [ 105.798509] Call Trace: [ 105.798712] [ 105.798889] ? __pfx_perf_tp_event+0x10/0x10 [ 105.799242] ? trace_pelt_se_tp+0xdf/0x130 [ 105.799581] ? do_raw_spin_lock+0x123/0x260 [ 105.799926] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 105.800299] ? lock_acquire+0x18c/0x2f0 [ 105.800619] ? update_cfs_group+0x11d/0x260 [ 105.800966] ? lock_release+0x1c7/0x290 [ 105.801280] ? do_raw_spin_unlock+0x53/0x220 [ 105.801633] ? _raw_spin_unlock_irqrestore+0x22/0x50 [ 105.802041] ? try_to_wake_up+0x128/0x11d0 [ 105.802381] ? do_raw_spin_lock+0x123/0x260 [ 105.802722] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 105.803097] ? perf_trace_run_bpf_submit+0xef/0x180 [ 105.803498] perf_trace_run_bpf_submit+0xef/0x180 [ 105.803881] perf_trace_preemptirq_template+0x259/0x430 [ 105.804304] ? read_tsc+0x9/0x20 [ 105.804579] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 105.805052] ? clockevents_program_event+0x135/0x360 [ 105.805457] ? tick_program_event+0xac/0x140 [ 105.805804] ? handle_softirqs+0x16e/0x770 [ 105.806144] trace_irq_enable.constprop.0+0xa6/0x100 [ 105.806541] trace_hardirqs_on+0x26/0x40 [ 105.806860] handle_softirqs+0x16e/0x770 [ 105.807187] __irq_exit_rcu+0xc4/0x100 [ 105.807503] irq_exit_rcu+0x9/0x20 [ 105.807787] sysvec_apic_timer_interrupt+0x70/0x80 [ 105.808176] [ 105.808357] [ 105.808539] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 105.808955] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 105.809327] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de [ 105.810741] RSP: 0018:ffff8880441eff28 EFLAGS: 00000246 [ 105.811167] RAX: 0000000000000001 RBX: ffff8880441e0000 RCX: ffffffff817c2b86 [ 105.811728] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 105.812288] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 105.812844] R10: ffffffff8643ac57 R11: 0000000000000001 R12: ffff8880441e0000 [ 105.813404] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000 [ 105.813963] ? trace_irq_enable.constprop.0+0x26/0x100 [ 105.814373] ? make_task_dead+0x214/0x3b0 [ 105.814702] ? make_task_dead+0x214/0x3b0 [ 105.815029] ? do_syscall_64+0xbf/0x360 [ 105.815344] rewind_stack_and_make_dead+0x16/0x20 [ 105.815728] RIP: 0033:0x7fc15e59ab19 [ 105.816025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 105.817433] RSP: 002b:00007fc15baef218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 105.818022] RAX: ffffffffffffffda RBX: 00007fc15e6ae028 RCX: 00007fc15e59ab19 [ 105.818575] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc15e6ae02c [ 105.819124] RBP: 00007fc15e6ae020 R08: 0000000000000003 R09: 0000000000000000 [ 105.819678] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fc15e6ae02c [ 105.820230] R13: 00007ffc5959e77f R14: 00007fc15baef300 R15: 0000000000022000 [ 105.820787] [ 105.820981] Modules linked in: [ 105.821237] ---[ end trace 0000000000000000 ]--- [ 105.821601] RIP: 0010:perf_tp_event+0x175/0xe70 [ 105.821979] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 105.823381] RSP: 0018:ffff888043cf7780 EFLAGS: 00010012 [ 105.823796] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 105.824346] RDX: ffff888017621b80 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 105.824908] RBP: ffff888043cf79f0 R08: ffff88806ce31340 R09: ffffe8ffffc06180 [ 105.825461] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 105.826017] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000 [ 105.826576] FS: 00007fc15baef700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 105.827199] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.827656] CR2: 00007fc15eab2004 CR3: 000000001f59a000 CR4: 0000000000350ef0 [ 105.828214] Kernel panic - not syncing: Fatal exception in interrupt [ 105.828946] Kernel Offset: disabled [ 105.829234] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 08:09:24 Registers: info registers vcpu 0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888043cf7118 R8 =0000000000000000 R9 =ffffed10013ff046 R10=0000000000000061 R11=6572617764726148 R12=0000000000000061 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555590050400 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055557a41bc18 CR3=000000004331c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007ff76785e7c000007ff76785e7c8 XMM02=00007ff76785e7e000007ff76785e7c0 XMM03=00007ff76785e7c800007ff76785e7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce3de00 RCX=ffffffff816880fc RDX=ffff888019179b80 RSI=ffffffff816880d6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88804405f988 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=1ffff1100d9e6bb1 R12=ffffed100d9c7bc1 R13=ffff88806ce3de08 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff816880d8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556ff3400 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2cc23000 CR3=000000001fb09000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffff812c8387ffffffff812c8313 XMM01=ffffffff81b382b0ffffffff812c8387 XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007f31e40f67c800007f31e40f67c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000