Warning: Permanently added '[localhost]:19853' (ECDSA) to the list of known hosts. 2025/08/29 08:39:51 fuzzer started 2025/08/29 08:39:52 dialing manager at localhost:43077 syzkaller login: [ 51.195223] cgroup: Unknown subsys name 'net' [ 51.270884] cgroup: Unknown subsys name 'cpuset' [ 51.285175] cgroup: Unknown subsys name 'rlimit' 2025/08/29 08:40:03 syscalls: 2214 2025/08/29 08:40:03 code coverage: enabled 2025/08/29 08:40:03 comparison tracing: enabled 2025/08/29 08:40:03 extra coverage: enabled 2025/08/29 08:40:03 setuid sandbox: enabled 2025/08/29 08:40:03 namespace sandbox: enabled 2025/08/29 08:40:03 Android sandbox: enabled 2025/08/29 08:40:03 fault injection: enabled 2025/08/29 08:40:03 leak checking: enabled 2025/08/29 08:40:03 net packet injection: enabled 2025/08/29 08:40:03 net device setup: enabled 2025/08/29 08:40:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 08:40:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 08:40:03 USB emulation: enabled 2025/08/29 08:40:03 hci packet injection: enabled 2025/08/29 08:40:03 wifi device emulation: enabled 2025/08/29 08:40:03 802.15.4 emulation: enabled 2025/08/29 08:40:03 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 08:40:03 fetching corpus: 37, signal 16310/19731 (executing program) 2025/08/29 08:40:03 fetching corpus: 87, signal 32660/36942 (executing program) 2025/08/29 08:40:03 fetching corpus: 137, signal 40361/45513 (executing program) 2025/08/29 08:40:03 fetching corpus: 187, signal 45745/51732 (executing program) 2025/08/29 08:40:03 fetching corpus: 237, signal 51688/58262 (executing program) 2025/08/29 08:40:03 fetching corpus: 287, signal 56708/63751 (executing program) 2025/08/29 08:40:04 fetching corpus: 337, signal 59884/67450 (executing program) 2025/08/29 08:40:04 fetching corpus: 387, signal 64839/72565 (executing program) 2025/08/29 08:40:04 fetching corpus: 437, signal 67778/75857 (executing program) 2025/08/29 08:40:04 fetching corpus: 487, signal 71012/79316 (executing program) 2025/08/29 08:40:04 fetching corpus: 537, signal 74074/82472 (executing program) 2025/08/29 08:40:04 fetching corpus: 587, signal 76384/84982 (executing program) 2025/08/29 08:40:04 fetching corpus: 637, signal 80132/88508 (executing program) 2025/08/29 08:40:04 fetching corpus: 687, signal 83240/91378 (executing program) 2025/08/29 08:40:04 fetching corpus: 737, signal 85154/93303 (executing program) 2025/08/29 08:40:04 fetching corpus: 787, signal 86899/95031 (executing program) 2025/08/29 08:40:05 fetching corpus: 837, signal 88535/96621 (executing program) 2025/08/29 08:40:05 fetching corpus: 887, signal 90366/98364 (executing program) 2025/08/29 08:40:05 fetching corpus: 937, signal 92431/100118 (executing program) 2025/08/29 08:40:05 fetching corpus: 987, signal 95634/102531 (executing program) 2025/08/29 08:40:05 fetching corpus: 1037, signal 97528/103991 (executing program) 2025/08/29 08:40:05 fetching corpus: 1087, signal 99916/105896 (executing program) 2025/08/29 08:40:06 fetching corpus: 1137, signal 101586/107143 (executing program) 2025/08/29 08:40:06 fetching corpus: 1187, signal 103174/108244 (executing program) 2025/08/29 08:40:06 fetching corpus: 1237, signal 104539/109224 (executing program) 2025/08/29 08:40:06 fetching corpus: 1287, signal 105447/109895 (executing program) 2025/08/29 08:40:06 fetching corpus: 1337, signal 106853/110750 (executing program) 2025/08/29 08:40:06 fetching corpus: 1387, signal 108086/111501 (executing program) 2025/08/29 08:40:06 fetching corpus: 1437, signal 110733/113282 (executing program) 2025/08/29 08:40:06 fetching corpus: 1487, signal 112241/114066 (executing program) 2025/08/29 08:40:07 fetching corpus: 1537, signal 113302/114577 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/114611 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/114660 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/114695 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/114731 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/114775 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/114822 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/114858 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/114899 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/114925 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/114975 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/115012 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/115060 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/115102 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/115144 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/115181 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/115215 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/115266 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/115310 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/115338 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/115382 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/115423 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/115467 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/115509 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/115543 (executing program) 2025/08/29 08:40:07 fetching corpus: 1539, signal 113306/115543 (executing program) 2025/08/29 08:40:09 starting 8 fuzzer processes 08:40:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x28, 0x2a, 0xffffffffffffffff, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x28}], 0x1}, 0x0) 08:40:09 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) mount$bind(0x0, &(0x7f00000026c0)='./file0\x00', 0x0, 0x22, 0x0) 08:40:09 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x17) 08:40:09 executing program 2: r0 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) [ 67.771695] audit: type=1400 audit(1756456809.377:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:40:09 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 08:40:09 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@phonet={0x23, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d88a8", 0x36}], 0x1}}], 0x1, 0x0) 08:40:09 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@generic={0x88f7}}}, 0x0) 08:40:09 executing program 6: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000100)=[{0x0, 0xff81}], 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) [ 68.900931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.903275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.905296] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.909010] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.912807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.966440] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.968980] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.970727] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.974312] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.977555] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.099210] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.109131] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.111813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.114770] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.124020] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.125445] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 69.131213] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.135056] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.136732] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.138775] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 69.146227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.147844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 69.149398] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.154877] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 69.160451] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.160524] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 69.165709] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.167074] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 69.171266] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.172910] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 69.185745] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 69.187965] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 69.189865] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 69.196249] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 69.201872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.204109] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.209792] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 69.217089] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 69.232052] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 69.236245] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 70.991988] Bluetooth: hci0: command tx timeout [ 71.055581] Bluetooth: hci1: command tx timeout [ 71.247921] Bluetooth: hci3: command tx timeout [ 71.249773] Bluetooth: hci2: command tx timeout [ 71.249835] Bluetooth: hci5: command tx timeout [ 71.250872] Bluetooth: hci6: command tx timeout [ 71.311581] Bluetooth: hci4: command tx timeout [ 71.375608] Bluetooth: hci7: command tx timeout [ 73.040565] Bluetooth: hci0: command tx timeout [ 73.103684] Bluetooth: hci1: command tx timeout [ 73.295625] Bluetooth: hci5: command tx timeout [ 73.295797] Bluetooth: hci3: command tx timeout [ 73.296096] Bluetooth: hci2: command tx timeout [ 73.296818] Bluetooth: hci6: command tx timeout [ 73.359563] Bluetooth: hci4: command tx timeout [ 73.423570] Bluetooth: hci7: command tx timeout [ 75.088146] Bluetooth: hci0: command tx timeout [ 75.151541] Bluetooth: hci1: command tx timeout [ 75.343632] Bluetooth: hci2: command tx timeout [ 75.344112] Bluetooth: hci6: command tx timeout [ 75.344696] Bluetooth: hci3: command tx timeout [ 75.344742] Bluetooth: hci5: command tx timeout [ 75.407604] Bluetooth: hci4: command tx timeout [ 75.473579] Bluetooth: hci7: command tx timeout [ 77.135552] Bluetooth: hci0: command tx timeout [ 77.199711] Bluetooth: hci1: command tx timeout [ 77.391701] Bluetooth: hci6: command tx timeout [ 77.392175] Bluetooth: hci5: command tx timeout [ 77.393349] Bluetooth: hci3: command tx timeout [ 77.393358] Bluetooth: hci2: command tx timeout [ 77.455575] Bluetooth: hci4: command tx timeout [ 77.519570] Bluetooth: hci7: command tx timeout [ 105.701855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.702654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.908813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.909437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:40:47 executing program 2: r0 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) 08:40:48 executing program 2: r0 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) 08:40:48 executing program 2: r0 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) 08:40:48 executing program 2: r0 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) 08:40:48 executing program 2: r0 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) 08:40:48 executing program 2: r0 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) [ 107.078434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.079379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:40:48 executing program 2: syslog(0x4, &(0x7f0000000080), 0x0) [ 107.228106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.228791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:40:48 executing program 2: syslog(0x4, &(0x7f0000000080), 0x0) [ 107.357089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.357737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.455075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.455916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.563407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.564191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.677567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.678202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.730526] audit: type=1400 audit(1756456849.338:8): avc: denied { open } for pid=3889 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 107.732250] audit: type=1400 audit(1756456849.339:9): avc: denied { kernel } for pid=3889 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 107.736333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.737505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.759463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.759524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.806137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.806849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.887941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.889372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.934084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.934728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.969294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.969883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.021437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.022439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.075104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.076614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.198118] loop1: detected capacity change from 0 to 6 [ 108.210381] FAT-fs (loop1): Directory bread(block 6) failed [ 108.210971] FAT-fs (loop1): Directory bread(block 7) failed [ 108.211888] FAT-fs (loop1): Directory bread(block 8) failed [ 108.212365] FAT-fs (loop1): Directory bread(block 9) failed 08:40:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x28, 0x2a, 0xffffffffffffffff, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x28}], 0x1}, 0x0) 08:40:49 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@phonet={0x23, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d88a8", 0x36}], 0x1}}], 0x1, 0x0) 08:40:49 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x17) 08:40:49 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@generic={0x88f7}}}, 0x0) 08:40:49 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) mount$bind(0x0, &(0x7f00000026c0)='./file0\x00', 0x0, 0x22, 0x0) 08:40:49 executing program 6: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000100)=[{0x0, 0xff81}], 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 08:40:49 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 08:40:49 executing program 2: syslog(0x4, &(0x7f0000000080), 0x0) 08:40:49 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@phonet={0x23, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d88a8", 0x36}], 0x1}}], 0x1, 0x0) [ 108.373061] loop1: detected capacity change from 0 to 6 [ 108.399363] FAT-fs (loop1): Directory bread(block 6) failed [ 108.399921] FAT-fs (loop1): Directory bread(block 7) failed [ 108.400591] FAT-fs (loop1): Directory bread(block 8) failed [ 108.401043] FAT-fs (loop1): Directory bread(block 9) failed 08:40:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x28, 0x2a, 0xffffffffffffffff, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x28}], 0x1}, 0x0) 08:40:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) mount$bind(0x0, &(0x7f00000026c0)='./file0\x00', 0x0, 0x22, 0x0) 08:40:50 executing program 2: syslog(0x4, &(0x7f0000000080), 0x0) 08:40:50 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@generic={0x88f7}}}, 0x0) 08:40:50 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 08:40:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x17) 08:40:50 executing program 6: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000100)=[{0x0, 0xff81}], 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 08:40:50 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@phonet={0x23, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d88a8", 0x36}], 0x1}}], 0x1, 0x0) [ 108.474864] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI [ 108.475896] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 108.476652] CPU: 1 UID: 0 PID: 3942 Comm: syz-executor.7 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 108.478545] Tainted: [W]=WARN [ 108.479132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 108.480298] RIP: 0010:perf_tp_event+0x175/0xe70 [ 108.481050] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 108.483529] RSP: 0018:ffff888045f77800 EFLAGS: 00010212 [ 108.484287] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc900029ee000 [ 108.485327] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 108.486743] RBP: ffff888045f77a70 R08: ffff88806cf31340 R09: ffffe8ffffd15eb8 [ 108.487791] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 108.488853] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 108.489862] FS: 00007fced9e62700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 108.491032] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.491904] CR2: 00007fcedca00018 CR3: 0000000009bbd000 CR4: 0000000000350ef0 [ 108.493100] Call Trace: [ 108.493340] [ 108.493562] ? __pfx_perf_tp_event+0x10/0x10 [ 108.493973] ? lock_is_held_type+0x9e/0x120 [ 108.494372] ? lock_is_held_type+0x9e/0x120 [ 108.494771] ? perf_trace_lock+0xb5/0x5d0 [ 108.495151] ? perf_trace_lock+0xb5/0x5d0 [ 108.495532] ? __pfx_perf_trace_lock+0x10/0x10 [ 108.495956] ? __pfx_perf_trace_lock+0x10/0x10 [ 108.496380] ? find_held_lock+0x2b/0x80 [ 108.496754] ? find_held_lock+0x2b/0x80 [ 108.497134] ? __perf_install_in_context+0x503/0xb90 [ 108.497590] ? lock_release+0xc8/0x290 [ 108.497952] ? do_raw_spin_unlock+0x53/0x220 [ 108.498358] ? perf_trace_run_bpf_submit+0xef/0x180 [ 108.498817] perf_trace_run_bpf_submit+0xef/0x180 [ 108.499258] perf_trace_lock+0x337/0x5d0 [ 108.499635] ? __pfx_perf_trace_lock+0x10/0x10 [ 108.500053] ? lock_acquire+0x15e/0x2f0 [ 108.500421] ? futex_ref_get+0x48/0x300 [ 108.500783] ? futex_ref_get+0x114/0x300 [ 108.501157] ? futex_hash+0x15c/0x390 [ 108.501503] lock_release+0x1ab/0x290 [ 108.501857] ? futex_hash+0x15c/0x390 [ 108.502202] futex_ref_get+0x119/0x300 [ 108.502566] ? futex_hash+0x15c/0x390 [ 108.502916] futex_hash+0x70/0x390 [ 108.503250] futex_wake+0x143/0x540 [ 108.503586] ? __pfx_perf_trace_lock+0x10/0x10 [ 108.504011] ? __pfx_futex_wake+0x10/0x10 [ 108.504390] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 108.504858] ? lock_release+0xc8/0x290 [ 108.505228] do_futex+0x26d/0x370 [ 108.505557] ? __pfx_do_futex+0x10/0x10 [ 108.505919] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 108.506404] ? find_held_lock+0x2b/0x80 [ 108.506778] __x64_sys_futex+0x1c9/0x4d0 [ 108.507156] ? __pfx___x64_sys_futex+0x10/0x10 [ 108.507574] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 108.508049] do_syscall_64+0xbf/0x360 [ 108.508395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.508868] RIP: 0033:0x7fcedc8ecb19 [ 108.509214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 108.510843] RSP: 002b:00007fced9e62218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 108.511520] RAX: ffffffffffffffda RBX: 00007fcedc9fff68 RCX: 00007fcedc8ecb19 [ 108.512163] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcedc9fff6c [ 108.512804] RBP: 00007fcedc9fff60 R08: 000000000000000e R09: 0000000000000000 [ 108.513453] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fcedc9fff6c [ 108.514091] R13: 00007fff40bcb19f R14: 00007fced9e62300 R15: 0000000000022000 [ 108.514737] [ 108.514949] Modules linked in: [ 108.515280] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI [ 108.516265] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 108.517039] CPU: 1 UID: 0 PID: 3942 Comm: syz-executor.7 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 108.518084] Tainted: [D]=DIE, [W]=WARN [ 108.518430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 108.519159] RIP: 0010:perf_tp_event+0x175/0xe70 [ 108.519584] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 108.521170] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012 [ 108.521569] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 108.522087] RDX: ffff888015d50000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 108.522605] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd15eb8 [ 108.523123] R10: 0000000000000000 R11: ffff88806cf37018 R12: dffffc0000000000 [ 108.523640] R13: 0000000000000024 R14: ffff88806cf31490 R15: dffffc0000000000 [ 108.524159] FS: 00007fced9e62700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 108.524742] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.525176] CR2: 00007fcedca00018 CR3: 0000000009bbd000 CR4: 0000000000350ef0 [ 108.525700] Call Trace: [ 108.525893] [ 108.526063] ? __pfx_perf_tp_event+0x10/0x10 [ 108.526396] ? stack_depot_save_flags+0x2c/0xa20 [ 108.526757] ? kasan_save_stack+0x34/0x50 [ 108.527068] ? kasan_save_stack+0x24/0x50 [ 108.527379] ? kasan_save_track+0x14/0x30 [ 108.527693] ? __kasan_save_free_info+0x3a/0x60 [ 108.528038] ? __kasan_slab_free+0x3f/0x50 [ 108.528353] ? kmem_cache_free+0x2a1/0x540 [ 108.528664] ? rcu_core+0x7c8/0x1800 [ 108.528948] ? handle_softirqs+0x1b1/0x770 [ 108.529276] ? __irq_exit_rcu+0xc4/0x100 [ 108.529587] ? irq_exit_rcu+0x9/0x20 [ 108.529864] ? sysvec_apic_timer_interrupt+0x70/0x80 [ 108.530241] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 108.530638] ? smp_call_function_many_cond+0xa38/0x1110 [ 108.531035] ? on_each_cpu_cond_mask+0x57/0xa0 [ 108.531378] ? smp_text_poke_batch_finish+0x36b/0xb50 [ 108.531762] ? __static_call_transform+0x337/0x740 [ 108.532124] ? arch_static_call_transform+0x6d/0xd0 [ 108.532497] ? __static_call_update+0x406/0x630 [ 108.532846] ? tracepoint_add_func+0xab9/0xec0 [ 108.533193] ? tracepoint_probe_register+0xa4/0xf0 [ 108.533555] ? trace_event_reg+0x297/0x350 [ 108.533874] ? kvm_sched_clock_read+0x16/0x30 [ 108.534210] ? sched_clock+0x37/0x60 [ 108.534492] ? sched_clock_cpu+0x6c/0x4e0 [ 108.534811] ? perf_trace_run_bpf_submit+0xef/0x180 [ 108.535182] perf_trace_run_bpf_submit+0xef/0x180 [ 108.535546] perf_trace_lock+0x337/0x5d0 [ 108.535849] ? update_cfs_group+0x11d/0x260 [ 108.536170] ? kvm_sched_clock_read+0x16/0x30 [ 108.536508] ? __pfx_perf_trace_lock+0x10/0x10 [ 108.536849] ? check_preempt_wakeup_fair+0x6e/0x950 [ 108.537230] ? sched_ttwu_pending+0x2e0/0x4a0 [ 108.537573] lock_release+0x1ab/0x290 [ 108.537858] ? ttwu_do_activate+0x1a4/0x8a0 [ 108.538180] _raw_spin_unlock+0x16/0x40 [ 108.538480] sched_ttwu_pending+0x2e0/0x4a0 [ 108.538805] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 108.539165] ? flush_tlb_func+0x24d/0x560 [ 108.539477] __flush_smp_call_function_queue+0x434/0x740 [ 108.539881] __sysvec_call_function_single+0x6d/0x370 [ 108.540268] sysvec_call_function_single+0xa1/0xc0 [ 108.540633] [ 108.540803] [ 108.540974] asm_sysvec_call_function_single+0x1a/0x20 [ 108.541371] RIP: 0010:oops_exit+0x0/0x50 [ 108.541677] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27 [ 108.542987] RSP: 0018:ffff888045f77690 EFLAGS: 00000202 [ 108.543377] RAX: 000000000002d066 RBX: 0000000000000216 RCX: ffffc900029ee000 [ 108.543894] RDX: 0000000000040000 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 108.544412] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90 [ 108.544928] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888045f77758 [ 108.545453] R13: 0000000000000000 R14: dffffc0020000032 R15: 0000000000000000 [ 108.545975] ? oops_end+0x4a/0xe0 [ 108.546247] oops_end+0x65/0xe0 [ 108.546503] exc_general_protection+0x1a2/0x330 [ 108.546855] asm_exc_general_protection+0x26/0x30 [ 108.547210] RIP: 0010:perf_tp_event+0x175/0xe70 [ 108.547557] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 108.548872] RSP: 0018:ffff888045f77800 EFLAGS: 00010212 [ 108.549267] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc900029ee000 [ 108.549785] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 108.550302] RBP: ffff888045f77a70 R08: ffff88806cf31340 R09: ffffe8ffffd15eb8 [ 108.550820] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 108.551336] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 108.551858] ? perf_tp_event+0x167/0xe70 [ 108.552169] ? __pfx_perf_tp_event+0x10/0x10 [ 108.552501] ? lock_is_held_type+0x9e/0x120 [ 108.552824] ? lock_is_held_type+0x9e/0x120 [ 108.553152] ? perf_trace_lock+0xb5/0x5d0 [ 108.553462] ? perf_trace_lock+0xb5/0x5d0 [ 108.553771] ? __pfx_perf_trace_lock+0x10/0x10 [ 108.554112] ? __pfx_perf_trace_lock+0x10/0x10 [ 108.554458] ? find_held_lock+0x2b/0x80 [ 108.554759] ? find_held_lock+0x2b/0x80 [ 108.555059] ? __perf_install_in_context+0x503/0xb90 [ 108.555433] ? lock_release+0xc8/0x290 [ 108.555724] ? do_raw_spin_unlock+0x53/0x220 [ 108.556057] ? perf_trace_run_bpf_submit+0xef/0x180 [ 108.556427] perf_trace_run_bpf_submit+0xef/0x180 [ 108.556790] perf_trace_lock+0x337/0x5d0 [ 108.557101] ? __pfx_perf_trace_lock+0x10/0x10 [ 108.557444] ? lock_acquire+0x15e/0x2f0 [ 108.557744] ? futex_ref_get+0x48/0x300 [ 108.558039] ? futex_ref_get+0x114/0x300 [ 108.558338] ? futex_hash+0x15c/0x390 [ 108.558622] lock_release+0x1ab/0x290 [ 108.558908] ? futex_hash+0x15c/0x390 [ 108.559191] futex_ref_get+0x119/0x300 [ 108.559480] ? futex_hash+0x15c/0x390 [ 108.559763] futex_hash+0x70/0x390 [ 108.560030] futex_wake+0x143/0x540 [ 108.560305] ? __pfx_perf_trace_lock+0x10/0x10 [ 108.560647] ? __pfx_futex_wake+0x10/0x10 [ 108.560958] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 108.561338] ? lock_release+0xc8/0x290 [ 108.561633] do_futex+0x26d/0x370 [ 108.561899] ? __pfx_do_futex+0x10/0x10 [ 108.562196] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 108.562588] ? find_held_lock+0x2b/0x80 [ 108.562889] __x64_sys_futex+0x1c9/0x4d0 [ 108.563198] ? __pfx___x64_sys_futex+0x10/0x10 [ 108.563541] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 108.563932] do_syscall_64+0xbf/0x360 [ 108.564217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.564600] RIP: 0033:0x7fcedc8ecb19 [ 108.564878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 108.566205] RSP: 002b:00007fced9e62218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 108.566761] RAX: ffffffffffffffda RBX: 00007fcedc9fff68 RCX: 00007fcedc8ecb19 [ 108.567283] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcedc9fff6c [ 108.567804] RBP: 00007fcedc9fff60 R08: 000000000000000e R09: 0000000000000000 [ 108.568329] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fcedc9fff6c [ 108.568849] R13: 00007fff40bcb19f R14: 00007fced9e62300 R15: 0000000000022000 [ 108.569390] [ 108.569568] Modules linked in: [ 108.569811] ---[ end trace 0000000000000000 ]--- [ 108.570158] RIP: 0010:perf_tp_event+0x175/0xe70 [ 108.570507] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 108.571824] RSP: 0018:ffff888045f77800 EFLAGS: 00010212 [ 108.572214] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc900029ee000 [ 108.572734] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 108.573261] RBP: ffff888045f77a70 R08: ffff88806cf31340 R09: ffffe8ffffd15eb8 [ 108.573781] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 108.574302] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 108.574823] FS: 00007fced9e62700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 108.575413] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.575843] CR2: 00007fcedca00018 CR3: 0000000009bbd000 CR4: 0000000000350ef0 [ 108.576369] Kernel panic - not syncing: Fatal exception in interrupt [ 108.577032] Kernel Offset: disabled [ 108.577306] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 08:40:50 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffea0000ceba00 RCX=ffffffff81a280d1 RDX=ffff88800f30d280 RSI=0000000000000004 RDI=0000000000000001 RBP=0000000000000001 RSP=ffff88804438f628 R8 =0000000000000000 R9 =fffff9400019d740 R10=0000000000000000 R11=1ffff1100d9c6f7b R12=ffffea0000ceba00 R13=0000000000000000 R14=ffff88800e2bb500 R15=ffffea0000ceba30 RIP=ffffffff81a280e4 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020000100 CR3=0000000035cee000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888045f77170 R8 =0000000000000000 R9 =ffffed10014ee046 R10=0000000000000030 R11=3030303030302043 R12=0000000000000030 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fced9e62700 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcedca00018 CR3=0000000009bbd000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fcedc9d37c000007fcedc9d37c8 XMM02=00007fcedc9d37e000007fcedc9d37c0 XMM03=00007fcedc9d37c800007fcedc9d37c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000