Warning: Permanently added '[localhost]:3265' (ECDSA) to the list of known hosts. 2025/08/29 08:50:00 fuzzer started 2025/08/29 08:50:01 dialing manager at localhost:43077 syzkaller login: [ 58.567992] cgroup: Unknown subsys name 'net' [ 58.626074] cgroup: Unknown subsys name 'cpuset' [ 58.635011] cgroup: Unknown subsys name 'rlimit' 2025/08/29 08:50:10 syscalls: 2214 2025/08/29 08:50:10 code coverage: enabled 2025/08/29 08:50:10 comparison tracing: enabled 2025/08/29 08:50:10 extra coverage: enabled 2025/08/29 08:50:10 setuid sandbox: enabled 2025/08/29 08:50:10 namespace sandbox: enabled 2025/08/29 08:50:10 Android sandbox: enabled 2025/08/29 08:50:10 fault injection: enabled 2025/08/29 08:50:10 leak checking: enabled 2025/08/29 08:50:10 net packet injection: enabled 2025/08/29 08:50:10 net device setup: enabled 2025/08/29 08:50:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 08:50:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 08:50:10 USB emulation: enabled 2025/08/29 08:50:10 hci packet injection: enabled 2025/08/29 08:50:10 wifi device emulation: enabled 2025/08/29 08:50:10 802.15.4 emulation: enabled 2025/08/29 08:50:10 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 08:50:10 fetching corpus: 49, signal 21403/24681 (executing program) 2025/08/29 08:50:10 fetching corpus: 99, signal 33863/38120 (executing program) 2025/08/29 08:50:10 fetching corpus: 149, signal 40828/46091 (executing program) 2025/08/29 08:50:11 fetching corpus: 199, signal 45952/52064 (executing program) 2025/08/29 08:50:11 fetching corpus: 249, signal 53971/60483 (executing program) 2025/08/29 08:50:11 fetching corpus: 299, signal 58454/65525 (executing program) 2025/08/29 08:50:11 fetching corpus: 349, signal 62503/70044 (executing program) 2025/08/29 08:50:11 fetching corpus: 399, signal 67052/74810 (executing program) 2025/08/29 08:50:11 fetching corpus: 449, signal 69605/77796 (executing program) 2025/08/29 08:50:11 fetching corpus: 499, signal 73480/81790 (executing program) 2025/08/29 08:50:11 fetching corpus: 549, signal 75973/84482 (executing program) 2025/08/29 08:50:12 fetching corpus: 599, signal 80112/88416 (executing program) 2025/08/29 08:50:12 fetching corpus: 649, signal 82411/90799 (executing program) 2025/08/29 08:50:12 fetching corpus: 699, signal 84387/92828 (executing program) 2025/08/29 08:50:12 fetching corpus: 749, signal 86176/94695 (executing program) 2025/08/29 08:50:12 fetching corpus: 799, signal 88411/96888 (executing program) 2025/08/29 08:50:12 fetching corpus: 849, signal 90735/99061 (executing program) 2025/08/29 08:50:12 fetching corpus: 899, signal 93254/101228 (executing program) 2025/08/29 08:50:13 fetching corpus: 949, signal 94684/102601 (executing program) 2025/08/29 08:50:13 fetching corpus: 999, signal 95620/103619 (executing program) 2025/08/29 08:50:13 fetching corpus: 1049, signal 97278/105075 (executing program) 2025/08/29 08:50:13 fetching corpus: 1099, signal 99932/107113 (executing program) 2025/08/29 08:50:13 fetching corpus: 1149, signal 101395/108316 (executing program) 2025/08/29 08:50:13 fetching corpus: 1199, signal 102736/109398 (executing program) 2025/08/29 08:50:13 fetching corpus: 1249, signal 104235/110659 (executing program) 2025/08/29 08:50:14 fetching corpus: 1299, signal 106643/112349 (executing program) 2025/08/29 08:50:14 fetching corpus: 1349, signal 108521/113547 (executing program) 2025/08/29 08:50:14 fetching corpus: 1399, signal 109487/114249 (executing program) 2025/08/29 08:50:14 fetching corpus: 1449, signal 110810/115067 (executing program) 2025/08/29 08:50:14 fetching corpus: 1499, signal 112151/116031 (executing program) 2025/08/29 08:50:14 fetching corpus: 1549, signal 113193/116654 (executing program) 2025/08/29 08:50:14 fetching corpus: 1599, signal 114164/117182 (executing program) 2025/08/29 08:50:14 fetching corpus: 1649, signal 115751/117940 (executing program) 2025/08/29 08:50:15 fetching corpus: 1699, signal 116815/118434 (executing program) 2025/08/29 08:50:15 fetching corpus: 1718, signal 117169/118613 (executing program) 2025/08/29 08:50:15 fetching corpus: 1718, signal 117169/118654 (executing program) 2025/08/29 08:50:15 fetching corpus: 1718, signal 117169/118688 (executing program) 2025/08/29 08:50:15 fetching corpus: 1718, signal 117169/118722 (executing program) 2025/08/29 08:50:15 fetching corpus: 1718, signal 117169/118764 (executing program) 2025/08/29 08:50:15 fetching corpus: 1718, signal 117169/118799 (executing program) 2025/08/29 08:50:15 fetching corpus: 1718, signal 117169/118842 (executing program) 2025/08/29 08:50:15 fetching corpus: 1718, signal 117169/118878 (executing program) 2025/08/29 08:50:15 fetching corpus: 1718, signal 117169/118923 (executing program) 2025/08/29 08:50:15 fetching corpus: 1718, signal 117169/118960 (executing program) 2025/08/29 08:50:15 fetching corpus: 1718, signal 117169/118992 (executing program) 2025/08/29 08:50:15 fetching corpus: 1718, signal 117169/119032 (executing program) 2025/08/29 08:50:15 fetching corpus: 1718, signal 117169/119062 (executing program) 2025/08/29 08:50:15 fetching corpus: 1718, signal 117169/119102 (executing program) 2025/08/29 08:50:15 fetching corpus: 1718, signal 117169/119134 (executing program) 2025/08/29 08:50:15 fetching corpus: 1718, signal 117169/119172 (executing program) 2025/08/29 08:50:15 fetching corpus: 1718, signal 117169/119207 (executing program) 2025/08/29 08:50:15 fetching corpus: 1718, signal 117169/119259 (executing program) 2025/08/29 08:50:15 fetching corpus: 1718, signal 117169/119297 (executing program) 2025/08/29 08:50:15 fetching corpus: 1718, signal 117169/119339 (executing program) 2025/08/29 08:50:15 fetching corpus: 1718, signal 117169/119376 (executing program) 2025/08/29 08:50:15 fetching corpus: 1718, signal 117169/119419 (executing program) 2025/08/29 08:50:15 fetching corpus: 1718, signal 117169/119452 (executing program) 2025/08/29 08:50:15 fetching corpus: 1718, signal 117169/119452 (executing program) 2025/08/29 08:50:17 starting 8 fuzzer processes 08:50:17 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0) syz_io_uring_complete(0x0) pipe2$9p(&(0x7f0000000080), 0x80800) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:50:17 executing program 1: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@assoc_req={@wo_ht={{}, {}, @device_a, @broadcast, @from_mac=@device_b}, 0x0, 0x0, {}, @val, @void}, 0x20) 08:50:17 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "650ac59d7fd48f6fb115f9bd9fe8adbf9b6e0725db8f79217e7bbab7e87db2bfb12f6f64867713e21aaf1095236a7fe5bd0439a1f8fe215a2a012ef944793617bd809fd54e0b17ea2da7c0321d5cd9f5"}, 0xd8) 08:50:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pread64(r0, 0x0, 0x0, 0x0) 08:50:17 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)) 08:50:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x2, @le_create_cis={{0x2064, 0x1}}}, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) shutdown(r1, 0x0) [ 75.293975] audit: type=1400 audit(1756457417.896:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:50:17 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 08:50:17 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5c000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="01434430303101004c494e08000000000000002020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200174f", 0xa0, 0x8000}], 0x0, &(0x7f0000000400)) [ 76.412991] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.415548] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.417452] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.422274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.424935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.481022] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.484646] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.486392] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.491517] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.500850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.548327] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.551276] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.553548] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.556108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.559025] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.563014] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.569553] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.571855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.573246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.575338] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.581824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.585029] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.613105] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 76.617907] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.631655] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 76.637016] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 76.641069] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.644538] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 76.657321] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 76.663094] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 76.664575] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 76.665761] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.670127] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 76.672591] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 76.676991] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 76.690124] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 76.690187] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 76.707993] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 76.709689] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 76.716871] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 78.443139] Bluetooth: hci0: command tx timeout [ 78.571287] Bluetooth: hci1: command tx timeout [ 78.634827] Bluetooth: hci3: command tx timeout [ 78.636033] Bluetooth: hci2: command tx timeout [ 78.762952] Bluetooth: hci5: command tx timeout [ 78.763981] Bluetooth: hci7: command tx timeout [ 78.765675] Bluetooth: hci4: command tx timeout [ 78.827829] Bluetooth: hci6: command tx timeout [ 80.491851] Bluetooth: hci0: command tx timeout [ 80.618896] Bluetooth: hci1: command tx timeout [ 80.683769] Bluetooth: hci3: command tx timeout [ 80.684199] Bluetooth: hci2: command tx timeout [ 80.812738] Bluetooth: hci5: command tx timeout [ 80.813172] Bluetooth: hci7: command tx timeout [ 80.813552] Bluetooth: hci4: command tx timeout [ 80.874761] Bluetooth: hci6: command tx timeout [ 82.538771] Bluetooth: hci0: command tx timeout [ 82.667746] Bluetooth: hci1: command tx timeout [ 82.730769] Bluetooth: hci2: command tx timeout [ 82.731202] Bluetooth: hci3: command tx timeout [ 82.859935] Bluetooth: hci4: command tx timeout [ 82.860388] Bluetooth: hci7: command tx timeout [ 82.861562] Bluetooth: hci5: command tx timeout [ 82.923834] Bluetooth: hci6: command tx timeout [ 84.587781] Bluetooth: hci0: command tx timeout [ 84.714817] Bluetooth: hci1: command tx timeout [ 84.779805] Bluetooth: hci3: command tx timeout [ 84.780228] Bluetooth: hci2: command tx timeout [ 84.907830] Bluetooth: hci5: command tx timeout [ 84.907919] Bluetooth: hci7: command tx timeout [ 84.908271] Bluetooth: hci4: command tx timeout [ 84.970766] Bluetooth: hci6: command tx timeout [ 114.514945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.516248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.667081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.668592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.857245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.858540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.046100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.047721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.270947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.271577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.364860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.365485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.445624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.446265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.509482] loop5: detected capacity change from 0 to 736 [ 115.517904] audit: type=1400 audit(1756457458.117:8): avc: denied { open } for pid=3860 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 115.519651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.521108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.531887] audit: type=1400 audit(1756457458.117:9): avc: denied { kernel } for pid=3860 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 115.642488] ISOFS: unable to read i-node block [ 115.643115] isofs_fill_super: get root inode failed [ 115.656386] loop5: detected capacity change from 0 to 736 [ 115.658675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.659476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.694181] ISOFS: unable to read i-node block [ 115.694612] isofs_fill_super: get root inode failed [ 115.780976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.781598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.826805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.827438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.921947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.922584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.972664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.973812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.028934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.034453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.035191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.132033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.133203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.266315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.267804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.336638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:50:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)) 08:50:59 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5c000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="01434430303101004c494e08000000000000002020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200174f", 0xa0, 0x8000}], 0x0, &(0x7f0000000400)) 08:50:59 executing program 1: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@assoc_req={@wo_ht={{}, {}, @device_a, @broadcast, @from_mac=@device_b}, 0x0, 0x0, {}, @val, @void}, 0x20) 08:50:59 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x2, @le_create_cis={{0x2064, 0x1}}}, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) shutdown(r1, 0x0) 08:50:59 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "650ac59d7fd48f6fb115f9bd9fe8adbf9b6e0725db8f79217e7bbab7e87db2bfb12f6f64867713e21aaf1095236a7fe5bd0439a1f8fe215a2a012ef944793617bd809fd54e0b17ea2da7c0321d5cd9f5"}, 0xd8) 08:50:59 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 08:50:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pread64(r0, 0x0, 0x0, 0x0) 08:50:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0) syz_io_uring_complete(0x0) pipe2$9p(&(0x7f0000000080), 0x80800) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:50:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pread64(r0, 0x0, 0x0, 0x0) 08:50:59 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "650ac59d7fd48f6fb115f9bd9fe8adbf9b6e0725db8f79217e7bbab7e87db2bfb12f6f64867713e21aaf1095236a7fe5bd0439a1f8fe215a2a012ef944793617bd809fd54e0b17ea2da7c0321d5cd9f5"}, 0xd8) [ 116.595530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.608405] loop5: detected capacity change from 0 to 736 08:50:59 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x2, @le_create_cis={{0x2064, 0x1}}}, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) shutdown(r1, 0x0) 08:50:59 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "650ac59d7fd48f6fb115f9bd9fe8adbf9b6e0725db8f79217e7bbab7e87db2bfb12f6f64867713e21aaf1095236a7fe5bd0439a1f8fe215a2a012ef944793617bd809fd54e0b17ea2da7c0321d5cd9f5"}, 0xd8) 08:50:59 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x2, @le_create_cis={{0x2064, 0x1}}}, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) shutdown(r1, 0x0) 08:50:59 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 116.715215] ISOFS: unable to read i-node block [ 116.715649] isofs_fill_super: get root inode failed 08:50:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pread64(r0, 0x0, 0x0, 0x0) 08:50:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)) 08:50:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0) syz_io_uring_complete(0x0) pipe2$9p(&(0x7f0000000080), 0x80800) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:50:59 executing program 1: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@assoc_req={@wo_ht={{}, {}, @device_a, @broadcast, @from_mac=@device_b}, 0x0, 0x0, {}, @val, @void}, 0x20) 08:50:59 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0) syz_io_uring_complete(0x0) pipe2$9p(&(0x7f0000000080), 0x80800) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:50:59 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0) syz_io_uring_complete(0x0) pipe2$9p(&(0x7f0000000080), 0x80800) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:50:59 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5c000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="01434430303101004c494e08000000000000002020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200174f", 0xa0, 0x8000}], 0x0, &(0x7f0000000400)) 08:50:59 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 116.971379] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 116.972305] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 116.972941] CPU: 1 UID: 0 PID: 3929 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 116.975156] Tainted: [W]=WARN [ 116.975912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 116.977764] RIP: 0010:perf_tp_event+0x175/0xe70 [ 116.979220] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 116.983332] RSP: 0018:ffff888045e17780 EFLAGS: 00010012 [ 116.983755] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90002a16000 [ 116.984321] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 116.984892] RBP: ffff888045e179f0 R08: ffff88806cf31340 R09: ffffe8ffffd15d30 [ 116.985431] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 116.985957] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 116.986488] FS: 00007f2b02090700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 116.987095] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.987527] CR2: 00007f2b04c2e018 CR3: 000000001a39f000 CR4: 0000000000350ef0 [ 116.988059] Call Trace: [ 116.988253] [ 116.988429] ? __pfx_perf_tp_event+0x10/0x10 [ 116.988768] ? visit_groups_merge.constprop.0.isra.0+0x6e7/0x1150 [ 116.989232] ? lock_acquire+0x15e/0x2f0 [ 116.989539] ? __pfx_visit_groups_merge.constprop.0.isra.0+0x10/0x10 [ 116.990015] ? lock_is_held_type+0x9e/0x120 [ 116.990348] ? lock_is_held_type+0x9e/0x120 [ 116.990675] ? ctx_sched_in+0x134/0x9b0 [ 116.990974] ? __pfx_ctx_sched_in+0x10/0x10 [ 116.991303] ? arch_stack_walk+0x9c/0xf0 [ 116.991610] ? find_held_lock+0x2b/0x80 [ 116.991919] ? perf_trace_run_bpf_submit+0xef/0x180 [ 116.992303] ? lock_release+0xc8/0x290 [ 116.992601] perf_trace_run_bpf_submit+0xef/0x180 [ 116.992970] perf_trace_preemptirq_template+0x259/0x430 [ 116.993376] ? mark_held_locks+0x49/0x80 [ 116.993685] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 116.994131] ? _raw_spin_lock_irqsave+0x53/0x60 [ 116.994485] trace_irq_disable.constprop.0+0xa6/0x100 [ 116.994871] _raw_spin_lock_irqsave+0x53/0x60 [ 116.995217] try_to_wake_up+0xa0/0x11d0 [ 116.995524] ? __pfx_try_to_wake_up+0x10/0x10 [ 116.995866] ? plist_del+0x122/0x270 [ 116.996152] ? find_held_lock+0x2b/0x80 [ 116.996455] ? futex_wake+0x474/0x540 [ 116.996749] wake_up_q+0xa1/0x130 [ 116.997022] futex_wake+0x47e/0x540 [ 116.997303] ? __pfx_futex_wake+0x10/0x10 [ 116.997617] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 116.998000] ? lock_release+0xc8/0x290 [ 116.998302] do_futex+0x26d/0x370 [ 116.998568] ? __pfx_do_futex+0x10/0x10 [ 116.998869] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 116.999274] ? find_held_lock+0x2b/0x80 [ 116.999580] __x64_sys_futex+0x1c9/0x4d0 [ 116.999888] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 117.000328] ? __pfx___x64_sys_futex+0x10/0x10 [ 117.000676] do_syscall_64+0xbf/0x360 [ 117.000964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.001349] RIP: 0033:0x7f2b04b1ab19 [ 117.001628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 117.002959] RSP: 002b:00007f2b02090218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 117.003529] RAX: ffffffffffffffda RBX: 00007f2b04c2df68 RCX: 00007f2b04b1ab19 [ 117.004053] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2b04c2df6c [ 117.004577] RBP: 00007f2b04c2df60 R08: 000000000000000e R09: 0000000000000000 [ 117.005102] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f2b04c2df6c [ 117.005626] R13: 00007ffc1e18b85f R14: 00007f2b02090300 R15: 0000000000022000 [ 117.006153] [ 117.006331] Modules linked in: [ 117.006575] ---[ end trace 0000000000000000 ]--- [ 117.006923] RIP: 0010:perf_tp_event+0x175/0xe70 [ 117.007282] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 117.008610] RSP: 0018:ffff888045e17780 EFLAGS: 00010012 [ 117.009004] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90002a16000 [ 117.009526] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 117.010050] RBP: ffff888045e179f0 R08: ffff88806cf31340 R09: ffffe8ffffd15d30 [ 117.010574] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 117.011105] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 117.011630] FS: 00007f2b02090700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 117.012220] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.012649] CR2: 00007f2b04c2e018 CR3: 000000001a39f000 CR4: 0000000000350ef0 [ 117.013176] note: syz-executor.0[3929] exited with irqs disabled [ 117.013681] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 117.014499] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 117.015063] CPU: 1 UID: 0 PID: 3929 Comm: syz-executor.0 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 117.015935] Tainted: [D]=DIE, [W]=WARN [ 117.016219] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 117.016821] RIP: 0010:perf_tp_event+0x175/0xe70 [ 117.017176] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 117.018497] RSP: 0018:ffff88806cf08ac0 EFLAGS: 00010012 [ 117.018890] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 117.019420] RDX: ffff888043499b80 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 117.019941] RBP: ffff88806cf08d30 R08: ffff88806cf313e8 R09: ffffe8ffffd15d30 [ 117.020463] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 117.020984] R13: 0000000000000014 R14: ffff88806cf313e8 R15: dffffc0000000000 [ 117.021507] FS: 00007f2b02090700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 117.022096] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.022525] CR2: 00007f2b04c2e018 CR3: 000000001a39f000 CR4: 0000000000350ef0 [ 117.023059] Call Trace: [ 117.023255] [ 117.023424] ? __pfx_perf_tp_event+0x10/0x10 [ 117.023760] ? trace_pelt_se_tp+0xdf/0x130 [ 117.024077] ? __update_load_avg_se+0x428/0xa40 [ 117.024433] ? __cgroup_account_cputime+0x30/0xc0 [ 117.024802] ? update_load_avg+0x17d/0x1ef0 [ 117.025125] ? update_cfs_group+0x11d/0x260 [ 117.025452] ? kvm_sched_clock_read+0x16/0x30 [ 117.025794] ? enqueue_task_fair+0xded/0x1e00 [ 117.026134] ? check_preempt_wakeup_fair+0x6e/0x950 [ 117.026508] ? wakeup_preempt+0x140/0x2a0 [ 117.026820] ? lock_release+0x1c7/0x290 [ 117.027128] ? lock_release+0x1c7/0x290 [ 117.027448] ? perf_trace_run_bpf_submit+0xef/0x180 [ 117.027848] perf_trace_run_bpf_submit+0xef/0x180 [ 117.028242] perf_trace_preemptirq_template+0x259/0x430 [ 117.028675] ? lock_release+0x1c7/0x290 [ 117.029004] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 117.029481] ? lock_acquire+0x18c/0x2f0 [ 117.029809] ? irqentry_enter+0x2a/0x60 [ 117.030145] trace_irq_disable.constprop.0+0xa6/0x100 [ 117.030559] irqentry_enter+0x2a/0x60 [ 117.030871] sysvec_call_function_single+0x18/0xc0 [ 117.031277] asm_sysvec_call_function_single+0x1a/0x20 [ 117.031700] RIP: 0010:handle_softirqs+0x174/0x770 [ 117.032100] Code: c8 83 83 3c 0a 00 00 01 c7 44 24 20 0a 00 00 00 48 89 44 24 18 65 66 c7 05 0f 84 48 06 00 00 e8 42 80 40 00 fb bb ff ff ff ff <48> c7 c5 c0 c0 a0 85 41 0f bc de 83 c3 01 0f 85 9b 00 00 00 e9 8d [ 117.033526] RSP: 0018:ffff88806cf08f78 EFLAGS: 00000246 [ 117.033950] RAX: 0000000000000001 RBX: 00000000ffffffff RCX: ffffffff817c2b86 [ 117.034517] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813bac2e [ 117.035088] RBP: ffff888045e17e78 R08: 0000000000000000 R09: 0000000000000000 [ 117.035650] R10: ffffffff8643ac57 R11: ffff88801e7dc498 R12: 0000000000000000 [ 117.036212] R13: 0000000000000000 R14: 0000000000000182 R15: 0000000000000000 [ 117.036778] ? trace_irq_enable.constprop.0+0x26/0x100 [ 117.037196] ? handle_softirqs+0x16e/0x770 [ 117.037550] ? handle_softirqs+0x16e/0x770 [ 117.037903] __irq_exit_rcu+0xc4/0x100 [ 117.038218] irq_exit_rcu+0x9/0x20 [ 117.038507] sysvec_apic_timer_interrupt+0x70/0x80 [ 117.038908] [ 117.039102] [ 117.039289] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 117.039709] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 117.040089] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de [ 117.041525] RSP: 0018:ffff888045e17f28 EFLAGS: 00000246 [ 117.041951] RAX: 0000000000000001 RBX: ffff888043499b80 RCX: ffffffff817c2b86 [ 117.042519] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 117.043092] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 117.043654] R10: ffffffff8643ac57 R11: 0000000000000001 R12: ffff888043499b80 [ 117.044225] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000 [ 117.044800] ? trace_irq_enable.constprop.0+0x26/0x100 [ 117.045222] ? make_task_dead+0x214/0x3b0 [ 117.045567] ? make_task_dead+0x214/0x3b0 [ 117.045904] ? do_syscall_64+0xbf/0x360 [ 117.046223] rewind_stack_and_make_dead+0x16/0x20 [ 117.046620] RIP: 0033:0x7f2b04b1ab19 [ 117.046923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 117.048385] RSP: 002b:00007f2b02090218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 117.048995] RAX: ffffffffffffffda RBX: 00007f2b04c2df68 RCX: 00007f2b04b1ab19 [ 117.049566] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2b04c2df6c [ 117.050131] RBP: 00007f2b04c2df60 R08: 000000000000000e R09: 0000000000000000 [ 117.050696] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f2b04c2df6c [ 117.051285] R13: 00007ffc1e18b85f R14: 00007f2b02090300 R15: 0000000000022000 [ 117.051851] [ 117.052042] Modules linked in: [ 117.052301] ---[ end trace 0000000000000000 ]--- [ 117.052672] RIP: 0010:perf_tp_event+0x175/0xe70 [ 117.053048] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 117.054457] RSP: 0018:ffff888045e17780 EFLAGS: 00010012 [ 117.054875] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90002a16000 [ 117.055438] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 117.055997] RBP: ffff888045e179f0 R08: ffff88806cf31340 R09: ffffe8ffffd15d30 [ 117.056553] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 117.057110] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 117.057666] FS: 00007f2b02090700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 117.058295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.058750] CR2: 00007f2b04c2e018 CR3: 000000001a39f000 CR4: 0000000000350ef0 [ 117.059311] Kernel panic - not syncing: Fatal exception in interrupt [ 117.060043] Kernel Offset: disabled [ 117.060334] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 08:50:59 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=dffffc0000000000 RCX=ffffffff819e40ef RDX=8000000032516007 RSI=00007fc155e5f000 RDI=ffff88800e11b000 RBP=1ffff11002f33ec5 RSP=ffff88801799f628 R8 =0000000000000000 R9 =fffff940001928a8 R10=0000000000000001 R11=0000000000000000 R12=8000000032516007 R13=ffff88800e11b000 R14=00007fc155e5f000 R15=dffffc0000000000 RIP=ffffffff819cd623 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555580c0c400 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc158d8e3a4 CR3=000000003277d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff828e3230 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888045e17018 R8 =0000000000000000 R9 =ffffed1001349046 R10=00000000000fe503 R11=0000000065646f43 R12=0000000000000823 R13=0000000000000020 R14=fffffbfff10e4882 R15=dffffc0000000000 RIP=ffffffff828e3285 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2b02090700 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2b04c2e018 CR3=000000001a39f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f2b04c017c000007f2b04c017c8 XMM02=00007f2b04c017e000007f2b04c017c0 XMM03=00007f2b04c017c800007f2b04c017c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000