Warning: Permanently added '[localhost]:29905' (ECDSA) to the list of known hosts. 2025/09/01 12:07:16 fuzzer started 2025/09/01 12:07:16 dialing manager at localhost:35473 syzkaller login: [ 51.876447] cgroup: Unknown subsys name 'net' [ 51.958725] cgroup: Unknown subsys name 'cpuset' [ 51.972857] cgroup: Unknown subsys name 'rlimit' 2025/09/01 12:07:27 syscalls: 2214 2025/09/01 12:07:27 code coverage: enabled 2025/09/01 12:07:27 comparison tracing: enabled 2025/09/01 12:07:27 extra coverage: enabled 2025/09/01 12:07:27 setuid sandbox: enabled 2025/09/01 12:07:27 namespace sandbox: enabled 2025/09/01 12:07:27 Android sandbox: enabled 2025/09/01 12:07:27 fault injection: enabled 2025/09/01 12:07:27 leak checking: enabled 2025/09/01 12:07:27 net packet injection: enabled 2025/09/01 12:07:27 net device setup: enabled 2025/09/01 12:07:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 12:07:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 12:07:27 USB emulation: enabled 2025/09/01 12:07:27 hci packet injection: enabled 2025/09/01 12:07:27 wifi device emulation: enabled 2025/09/01 12:07:27 802.15.4 emulation: enabled 2025/09/01 12:07:27 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 12:07:27 fetching corpus: 50, signal 18670/22272 (executing program) 2025/09/01 12:07:28 fetching corpus: 100, signal 31591/36616 (executing program) 2025/09/01 12:07:28 fetching corpus: 150, signal 41278/47547 (executing program) 2025/09/01 12:07:28 fetching corpus: 200, signal 49643/57037 (executing program) 2025/09/01 12:07:28 fetching corpus: 250, signal 55276/63808 (executing program) 2025/09/01 12:07:28 fetching corpus: 300, signal 60255/69871 (executing program) 2025/09/01 12:07:28 fetching corpus: 350, signal 64241/74915 (executing program) 2025/09/01 12:07:28 fetching corpus: 400, signal 66697/78484 (executing program) 2025/09/01 12:07:28 fetching corpus: 450, signal 70377/83124 (executing program) 2025/09/01 12:07:28 fetching corpus: 500, signal 73159/86901 (executing program) 2025/09/01 12:07:28 fetching corpus: 550, signal 75027/89751 (executing program) 2025/09/01 12:07:28 fetching corpus: 600, signal 77621/93225 (executing program) 2025/09/01 12:07:29 fetching corpus: 650, signal 79386/95934 (executing program) 2025/09/01 12:07:29 fetching corpus: 700, signal 82402/99642 (executing program) 2025/09/01 12:07:29 fetching corpus: 750, signal 84160/102321 (executing program) 2025/09/01 12:07:29 fetching corpus: 800, signal 86706/105533 (executing program) 2025/09/01 12:07:29 fetching corpus: 850, signal 88699/108303 (executing program) 2025/09/01 12:07:29 fetching corpus: 900, signal 91543/111670 (executing program) 2025/09/01 12:07:29 fetching corpus: 950, signal 93565/114382 (executing program) 2025/09/01 12:07:29 fetching corpus: 1000, signal 95784/117200 (executing program) 2025/09/01 12:07:29 fetching corpus: 1050, signal 97474/119566 (executing program) 2025/09/01 12:07:29 fetching corpus: 1100, signal 98817/121581 (executing program) 2025/09/01 12:07:29 fetching corpus: 1150, signal 100343/123707 (executing program) 2025/09/01 12:07:30 fetching corpus: 1200, signal 101896/125820 (executing program) 2025/09/01 12:07:30 fetching corpus: 1250, signal 104293/128519 (executing program) 2025/09/01 12:07:30 fetching corpus: 1300, signal 105408/130243 (executing program) 2025/09/01 12:07:30 fetching corpus: 1350, signal 106478/131949 (executing program) 2025/09/01 12:07:30 fetching corpus: 1400, signal 108007/133957 (executing program) 2025/09/01 12:07:30 fetching corpus: 1450, signal 110201/136429 (executing program) 2025/09/01 12:07:30 fetching corpus: 1500, signal 111568/138256 (executing program) 2025/09/01 12:07:30 fetching corpus: 1550, signal 112536/139770 (executing program) 2025/09/01 12:07:30 fetching corpus: 1600, signal 114562/141962 (executing program) 2025/09/01 12:07:30 fetching corpus: 1650, signal 116067/143774 (executing program) 2025/09/01 12:07:31 fetching corpus: 1700, signal 117627/145612 (executing program) 2025/09/01 12:07:31 fetching corpus: 1750, signal 118537/146981 (executing program) 2025/09/01 12:07:31 fetching corpus: 1800, signal 119450/148316 (executing program) 2025/09/01 12:07:31 fetching corpus: 1850, signal 120304/149612 (executing program) 2025/09/01 12:07:31 fetching corpus: 1900, signal 121338/151008 (executing program) 2025/09/01 12:07:31 fetching corpus: 1950, signal 122543/152423 (executing program) 2025/09/01 12:07:31 fetching corpus: 2000, signal 123469/153707 (executing program) 2025/09/01 12:07:31 fetching corpus: 2050, signal 124241/154906 (executing program) 2025/09/01 12:07:31 fetching corpus: 2100, signal 124948/156056 (executing program) 2025/09/01 12:07:31 fetching corpus: 2150, signal 125749/157227 (executing program) 2025/09/01 12:07:31 fetching corpus: 2200, signal 126532/158396 (executing program) 2025/09/01 12:07:31 fetching corpus: 2250, signal 127288/159508 (executing program) 2025/09/01 12:07:32 fetching corpus: 2300, signal 128126/160671 (executing program) 2025/09/01 12:07:32 fetching corpus: 2350, signal 129378/161975 (executing program) 2025/09/01 12:07:32 fetching corpus: 2400, signal 130571/163250 (executing program) 2025/09/01 12:07:32 fetching corpus: 2450, signal 131708/164454 (executing program) 2025/09/01 12:07:32 fetching corpus: 2500, signal 132834/165625 (executing program) 2025/09/01 12:07:32 fetching corpus: 2550, signal 133862/166720 (executing program) 2025/09/01 12:07:32 fetching corpus: 2600, signal 135157/167921 (executing program) 2025/09/01 12:07:32 fetching corpus: 2650, signal 135861/168862 (executing program) 2025/09/01 12:07:32 fetching corpus: 2700, signal 136641/169789 (executing program) 2025/09/01 12:07:32 fetching corpus: 2750, signal 137527/170765 (executing program) 2025/09/01 12:07:32 fetching corpus: 2800, signal 138215/171610 (executing program) 2025/09/01 12:07:32 fetching corpus: 2850, signal 138910/172475 (executing program) 2025/09/01 12:07:33 fetching corpus: 2900, signal 139755/173443 (executing program) 2025/09/01 12:07:33 fetching corpus: 2950, signal 140428/174284 (executing program) 2025/09/01 12:07:33 fetching corpus: 3000, signal 141021/175128 (executing program) 2025/09/01 12:07:33 fetching corpus: 3050, signal 141667/175920 (executing program) 2025/09/01 12:07:33 fetching corpus: 3100, signal 142130/176636 (executing program) 2025/09/01 12:07:33 fetching corpus: 3150, signal 142723/177396 (executing program) 2025/09/01 12:07:33 fetching corpus: 3200, signal 143483/178199 (executing program) 2025/09/01 12:07:33 fetching corpus: 3250, signal 143991/178882 (executing program) 2025/09/01 12:07:33 fetching corpus: 3300, signal 144530/179536 (executing program) 2025/09/01 12:07:33 fetching corpus: 3350, signal 145013/180197 (executing program) 2025/09/01 12:07:33 fetching corpus: 3400, signal 145460/180836 (executing program) 2025/09/01 12:07:34 fetching corpus: 3450, signal 145899/181500 (executing program) 2025/09/01 12:07:34 fetching corpus: 3500, signal 146600/182239 (executing program) 2025/09/01 12:07:34 fetching corpus: 3550, signal 147047/182849 (executing program) 2025/09/01 12:07:34 fetching corpus: 3600, signal 147558/183462 (executing program) 2025/09/01 12:07:34 fetching corpus: 3650, signal 148115/184112 (executing program) 2025/09/01 12:07:34 fetching corpus: 3700, signal 148527/184698 (executing program) 2025/09/01 12:07:34 fetching corpus: 3750, signal 149280/185343 (executing program) 2025/09/01 12:07:34 fetching corpus: 3800, signal 150036/185983 (executing program) 2025/09/01 12:07:34 fetching corpus: 3850, signal 150664/186593 (executing program) 2025/09/01 12:07:34 fetching corpus: 3900, signal 151107/187161 (executing program) 2025/09/01 12:07:34 fetching corpus: 3950, signal 151506/187733 (executing program) 2025/09/01 12:07:35 fetching corpus: 4000, signal 151981/188294 (executing program) 2025/09/01 12:07:35 fetching corpus: 4050, signal 152690/188840 (executing program) 2025/09/01 12:07:35 fetching corpus: 4100, signal 153346/189365 (executing program) 2025/09/01 12:07:35 fetching corpus: 4150, signal 154045/189978 (executing program) 2025/09/01 12:07:35 fetching corpus: 4200, signal 154579/190494 (executing program) 2025/09/01 12:07:35 fetching corpus: 4250, signal 154862/190983 (executing program) 2025/09/01 12:07:35 fetching corpus: 4300, signal 155974/191499 (executing program) 2025/09/01 12:07:35 fetching corpus: 4350, signal 156431/191911 (executing program) 2025/09/01 12:07:35 fetching corpus: 4400, signal 156781/192325 (executing program) 2025/09/01 12:07:35 fetching corpus: 4450, signal 157291/192754 (executing program) 2025/09/01 12:07:35 fetching corpus: 4500, signal 157723/193187 (executing program) 2025/09/01 12:07:35 fetching corpus: 4550, signal 159347/193674 (executing program) 2025/09/01 12:07:36 fetching corpus: 4600, signal 159811/194056 (executing program) 2025/09/01 12:07:36 fetching corpus: 4650, signal 160268/194406 (executing program) 2025/09/01 12:07:36 fetching corpus: 4700, signal 160618/194775 (executing program) 2025/09/01 12:07:36 fetching corpus: 4750, signal 161001/195124 (executing program) 2025/09/01 12:07:36 fetching corpus: 4800, signal 161351/195230 (executing program) 2025/09/01 12:07:36 fetching corpus: 4850, signal 161853/195302 (executing program) 2025/09/01 12:07:36 fetching corpus: 4900, signal 162151/195302 (executing program) 2025/09/01 12:07:36 fetching corpus: 4950, signal 162606/195309 (executing program) 2025/09/01 12:07:36 fetching corpus: 5000, signal 162928/195326 (executing program) 2025/09/01 12:07:36 fetching corpus: 5050, signal 163320/195328 (executing program) 2025/09/01 12:07:37 fetching corpus: 5100, signal 163787/195329 (executing program) 2025/09/01 12:07:37 fetching corpus: 5150, signal 164215/195341 (executing program) 2025/09/01 12:07:37 fetching corpus: 5200, signal 164729/195345 (executing program) 2025/09/01 12:07:37 fetching corpus: 5250, signal 165134/195366 (executing program) 2025/09/01 12:07:37 fetching corpus: 5300, signal 165490/195370 (executing program) 2025/09/01 12:07:37 fetching corpus: 5350, signal 165817/195392 (executing program) 2025/09/01 12:07:37 fetching corpus: 5400, signal 166138/195404 (executing program) 2025/09/01 12:07:37 fetching corpus: 5450, signal 166583/195405 (executing program) 2025/09/01 12:07:37 fetching corpus: 5500, signal 166974/195408 (executing program) 2025/09/01 12:07:37 fetching corpus: 5550, signal 167288/195421 (executing program) 2025/09/01 12:07:37 fetching corpus: 5600, signal 167825/195435 (executing program) 2025/09/01 12:07:38 fetching corpus: 5650, signal 168075/195435 (executing program) 2025/09/01 12:07:38 fetching corpus: 5700, signal 168650/195456 (executing program) 2025/09/01 12:07:38 fetching corpus: 5750, signal 168924/195477 (executing program) 2025/09/01 12:07:38 fetching corpus: 5800, signal 169391/195497 (executing program) 2025/09/01 12:07:38 fetching corpus: 5850, signal 169731/195505 (executing program) 2025/09/01 12:07:38 fetching corpus: 5900, signal 170167/195506 (executing program) 2025/09/01 12:07:38 fetching corpus: 5950, signal 170441/195515 (executing program) 2025/09/01 12:07:38 fetching corpus: 6000, signal 170873/195530 (executing program) 2025/09/01 12:07:38 fetching corpus: 6050, signal 171337/195551 (executing program) 2025/09/01 12:07:38 fetching corpus: 6100, signal 171823/195578 (executing program) 2025/09/01 12:07:38 fetching corpus: 6150, signal 172169/195585 (executing program) 2025/09/01 12:07:38 fetching corpus: 6200, signal 172487/195597 (executing program) 2025/09/01 12:07:39 fetching corpus: 6250, signal 173166/195620 (executing program) 2025/09/01 12:07:39 fetching corpus: 6300, signal 173728/195664 (executing program) 2025/09/01 12:07:39 fetching corpus: 6350, signal 174044/195666 (executing program) 2025/09/01 12:07:39 fetching corpus: 6400, signal 174420/195666 (executing program) 2025/09/01 12:07:39 fetching corpus: 6450, signal 174749/195675 (executing program) 2025/09/01 12:07:39 fetching corpus: 6500, signal 175247/195688 (executing program) 2025/09/01 12:07:39 fetching corpus: 6550, signal 175503/195689 (executing program) 2025/09/01 12:07:39 fetching corpus: 6600, signal 175858/195704 (executing program) 2025/09/01 12:07:39 fetching corpus: 6650, signal 176173/195715 (executing program) 2025/09/01 12:07:39 fetching corpus: 6700, signal 176517/195716 (executing program) 2025/09/01 12:07:39 fetching corpus: 6750, signal 177051/195717 (executing program) 2025/09/01 12:07:40 fetching corpus: 6800, signal 177307/195721 (executing program) 2025/09/01 12:07:40 fetching corpus: 6850, signal 177676/195721 (executing program) 2025/09/01 12:07:40 fetching corpus: 6900, signal 177961/195724 (executing program) 2025/09/01 12:07:40 fetching corpus: 6950, signal 178232/195725 (executing program) 2025/09/01 12:07:40 fetching corpus: 7000, signal 178846/195727 (executing program) 2025/09/01 12:07:40 fetching corpus: 7050, signal 179042/195736 (executing program) 2025/09/01 12:07:40 fetching corpus: 7100, signal 179301/195743 (executing program) 2025/09/01 12:07:40 fetching corpus: 7150, signal 179697/195750 (executing program) 2025/09/01 12:07:40 fetching corpus: 7200, signal 180128/195773 (executing program) 2025/09/01 12:07:40 fetching corpus: 7250, signal 180493/195788 (executing program) 2025/09/01 12:07:40 fetching corpus: 7300, signal 180814/195792 (executing program) 2025/09/01 12:07:40 fetching corpus: 7350, signal 181118/195793 (executing program) 2025/09/01 12:07:41 fetching corpus: 7400, signal 181372/195796 (executing program) 2025/09/01 12:07:41 fetching corpus: 7450, signal 181706/195801 (executing program) 2025/09/01 12:07:41 fetching corpus: 7500, signal 182120/195819 (executing program) 2025/09/01 12:07:41 fetching corpus: 7550, signal 182380/195824 (executing program) 2025/09/01 12:07:41 fetching corpus: 7600, signal 182572/195829 (executing program) 2025/09/01 12:07:41 fetching corpus: 7650, signal 182966/195857 (executing program) 2025/09/01 12:07:41 fetching corpus: 7700, signal 183123/195860 (executing program) 2025/09/01 12:07:41 fetching corpus: 7750, signal 183377/195871 (executing program) 2025/09/01 12:07:41 fetching corpus: 7800, signal 183748/195921 (executing program) 2025/09/01 12:07:41 fetching corpus: 7850, signal 184228/195988 (executing program) 2025/09/01 12:07:41 fetching corpus: 7900, signal 185752/195989 (executing program) 2025/09/01 12:07:41 fetching corpus: 7950, signal 186108/195990 (executing program) 2025/09/01 12:07:42 fetching corpus: 8000, signal 186382/195992 (executing program) 2025/09/01 12:07:42 fetching corpus: 8050, signal 186821/196018 (executing program) 2025/09/01 12:07:42 fetching corpus: 8100, signal 186997/196034 (executing program) 2025/09/01 12:07:42 fetching corpus: 8150, signal 187335/196052 (executing program) 2025/09/01 12:07:42 fetching corpus: 8200, signal 187660/196053 (executing program) 2025/09/01 12:07:42 fetching corpus: 8250, signal 187894/196057 (executing program) 2025/09/01 12:07:42 fetching corpus: 8300, signal 188098/196059 (executing program) 2025/09/01 12:07:42 fetching corpus: 8350, signal 188342/196062 (executing program) 2025/09/01 12:07:42 fetching corpus: 8400, signal 188611/196073 (executing program) 2025/09/01 12:07:42 fetching corpus: 8450, signal 188819/196077 (executing program) 2025/09/01 12:07:42 fetching corpus: 8500, signal 189033/196080 (executing program) 2025/09/01 12:07:43 fetching corpus: 8550, signal 189271/196080 (executing program) 2025/09/01 12:07:43 fetching corpus: 8600, signal 189480/196083 (executing program) 2025/09/01 12:07:43 fetching corpus: 8650, signal 189712/196084 (executing program) 2025/09/01 12:07:43 fetching corpus: 8700, signal 189872/196093 (executing program) 2025/09/01 12:07:43 fetching corpus: 8750, signal 190235/196112 (executing program) 2025/09/01 12:07:43 fetching corpus: 8800, signal 190600/196122 (executing program) 2025/09/01 12:07:43 fetching corpus: 8850, signal 190823/196126 (executing program) 2025/09/01 12:07:43 fetching corpus: 8900, signal 191079/196134 (executing program) 2025/09/01 12:07:43 fetching corpus: 8950, signal 191285/196136 (executing program) 2025/09/01 12:07:43 fetching corpus: 9000, signal 191545/196137 (executing program) 2025/09/01 12:07:43 fetching corpus: 9050, signal 191781/196141 (executing program) 2025/09/01 12:07:43 fetching corpus: 9100, signal 192106/196164 (executing program) 2025/09/01 12:07:44 fetching corpus: 9150, signal 192326/196184 (executing program) 2025/09/01 12:07:44 fetching corpus: 9200, signal 192589/196191 (executing program) 2025/09/01 12:07:44 fetching corpus: 9250, signal 192806/196208 (executing program) 2025/09/01 12:07:44 fetching corpus: 9300, signal 193017/196213 (executing program) 2025/09/01 12:07:44 fetching corpus: 9301, signal 193021/196213 (executing program) 2025/09/01 12:07:44 fetching corpus: 9301, signal 193021/196213 (executing program) 2025/09/01 12:07:46 starting 8 fuzzer processes 12:07:46 executing program 6: set_mempolicy(0x1, &(0x7f0000000000)=0xc2, 0xa7) 12:07:46 executing program 0: clone3(&(0x7f0000002c40)={0x210000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:07:46 executing program 7: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x800049) creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 12:07:46 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000000c0)=""/146) 12:07:46 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x14}, {0x6}]}) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:07:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_ZONE={0x6}]}, 0x28}}, 0x0) 12:07:46 executing program 4: unshare(0x18010800) 12:07:46 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 81.184442] audit: type=1400 audit(1756728466.320:7): avc: denied { execmem } for pid=273 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 82.243105] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.247437] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.249034] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.253109] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.255723] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.434912] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.439407] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.441177] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.442783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.447425] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.450584] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.458761] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.460202] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.462148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.466682] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.510953] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.514376] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.515785] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 82.517273] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.519539] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.522806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.525532] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 82.526735] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.528588] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 82.529696] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.531102] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.532414] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.533410] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.534590] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.535791] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 82.544916] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 82.546106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.547204] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.554415] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.557046] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 82.561742] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 82.567628] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 82.569154] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 82.576115] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 82.590099] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.274022] Bluetooth: hci0: command tx timeout [ 84.529761] Bluetooth: hci2: command tx timeout [ 84.529913] Bluetooth: hci1: command tx timeout [ 84.593401] Bluetooth: hci6: command tx timeout [ 84.593734] Bluetooth: hci5: command tx timeout [ 84.594121] Bluetooth: hci4: command tx timeout [ 84.596148] Bluetooth: hci3: command tx timeout [ 84.657538] Bluetooth: hci7: command tx timeout [ 86.321921] Bluetooth: hci0: command tx timeout [ 86.577409] Bluetooth: hci2: command tx timeout [ 86.578510] Bluetooth: hci1: command tx timeout [ 86.641399] Bluetooth: hci5: command tx timeout [ 86.642088] Bluetooth: hci6: command tx timeout [ 86.642765] Bluetooth: hci3: command tx timeout [ 86.643185] Bluetooth: hci4: command tx timeout [ 86.706681] Bluetooth: hci7: command tx timeout [ 88.370358] Bluetooth: hci0: command tx timeout [ 88.625699] Bluetooth: hci2: command tx timeout [ 88.626230] Bluetooth: hci1: command tx timeout [ 88.690364] Bluetooth: hci3: command tx timeout [ 88.690867] Bluetooth: hci5: command tx timeout [ 88.692387] Bluetooth: hci4: command tx timeout [ 88.692511] Bluetooth: hci6: command tx timeout [ 88.753347] Bluetooth: hci7: command tx timeout [ 90.417604] Bluetooth: hci0: command tx timeout [ 90.675417] Bluetooth: hci1: command tx timeout [ 90.676247] Bluetooth: hci2: command tx timeout [ 90.737392] Bluetooth: hci6: command tx timeout [ 90.738377] Bluetooth: hci5: command tx timeout [ 90.739140] Bluetooth: hci4: command tx timeout [ 90.739209] Bluetooth: hci3: command tx timeout [ 90.803351] Bluetooth: hci7: command tx timeout [ 124.009761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.011173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.206179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.206832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:08:29 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) [ 124.739608] audit: type=1400 audit(1756728509.951:8): avc: denied { open } for pid=3755 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 124.745843] audit: type=1400 audit(1756728509.951:9): avc: denied { kernel } for pid=3755 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:08:30 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x9) 12:08:30 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x9) 12:08:30 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x9) 12:08:30 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x9) 12:08:30 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x1c, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='R']}, 0x14}], 0x1}, 0x0) [ 125.469245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.470098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:08:30 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/kexec_crash_size', 0x28001, 0x0) write$tcp_mem(r0, &(0x7f0000000280), 0x48) [ 125.563481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.564075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:08:30 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffc, r0, 0x0) [ 125.639614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.640220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.752466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.753095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.847051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.847737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.928167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.929010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.028775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.029616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.109034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.109753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.173881] audit: type=1326 audit(1756728511.386:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3879 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19bad0ab19 code=0x0 [ 126.197818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.198492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.293860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.294622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.392589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.393210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.497453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.498105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.636265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.636910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.675169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.675853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.002877] audit: type=1326 audit(1756728512.215:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3879 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19bad0ab19 code=0x0 12:08:32 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 12:08:32 executing program 7: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x800049) creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 12:08:32 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffc, r0, 0x0) 12:08:32 executing program 1: keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) 12:08:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000440)=0x7, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000008e80)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x1e19, @empty, 0x2}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000000c0)="c58836d3cf18879c51c1e47407e3ba01f5193f097a076e123b96cf1c0b82a7a2e307f55a9786372e2f6eceae9d4e483dcbfab5fa8696984c82704fe82379052096b623bee859fee5e30044", 0x4b}, {&(0x7f0000000140)="aa693ced6001b93696877926e084b90250ffb0a1b0a5a6ab6814d278fc4ea1bf62c1176d618372b63019155dc767627e5a84eea89f29a87d4ba649d8f1d0f4a386650093eb721d581d3befac2852e4bd725d8e3a380ed9de347d6219ccc7c98bf2d8714b3b1b9f03be5e83a5aeaa67e1e31e7b61198244a7998c2293f5365d37ca9610095ef6aaa67c39f8a22c7508131dcca12374dc72e011b55debe8c4fc1b1214f79ac7e1b270a91a00884bc070af517c474d0b2b3ef486bf28", 0xbb}, {&(0x7f0000000200)="a54c77915d59cf2d59a2ea83238dce5c27c5e5173a779160fec32f737b2fb348d362bc0c062c0771e39d0ee4752d7f5703ad165bdf14f306be8769979d2ee86309471e711e8b8108579d78ab37a00221e701800ee894cf23ef9ab3d9efa45e2eb7d9ec05640ba1966d65153b48573683c0a59634edcb2ab5090df359d3de23b51423107ec3b466349a6eac5f6536a02392cf250ea9646402ec", 0x99}, {&(0x7f0000000780)="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", 0x2a2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 12:08:32 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_ZONE={0x6}]}, 0x28}}, 0x0) 12:08:32 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 12:08:32 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r0, 0xfffffffffffff05a, 0x0) 12:08:32 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_ZONE={0x6}]}, 0x28}}, 0x0) 12:08:32 executing program 1: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) 12:08:32 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 12:08:32 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffc, r0, 0x0) 12:08:32 executing program 2: pkey_free(0xffffffffffffffff) 12:08:32 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 12:08:32 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) sendmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 12:08:32 executing program 7: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x800049) creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 127.316261] ------------[ cut here ]------------ [ 127.318164] WARNING: fs/namespace.c:1434 at mntput_no_expire+0x78e/0xbe0, CPU#1: syz-executor.4/288 [ 127.318935] Modules linked in: [ 127.319261] CPU: 1 UID: 0 PID: 288 Comm: syz-executor.4 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 127.321125] Tainted: [W]=WARN [ 127.321816] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 127.323350] RIP: 0010:mntput_no_expire+0x78e/0xbe0 [ 127.324379] Code: 05 d6 30 81 04 01 e8 71 df 91 ff e9 41 fc ff ff e8 27 47 b4 ff 31 ff 44 89 ee e8 4d 42 b4 ff 45 85 ed 79 09 e8 13 47 b4 ff 90 <0f> 0b 90 e8 0a 47 b4 ff e8 b5 2d fc 02 31 ff 89 c5 89 c6 e8 2a 42 [ 127.328422] RSP: 0018:ffff8880167f7ce0 EFLAGS: 00010293 [ 127.328848] RAX: 0000000000000000 RBX: 1ffff11002cfefa1 RCX: ffffffff81bfaf93 [ 127.329430] RDX: ffff88800f013700 RSI: ffffffff81bfaf9d RDI: 0000000000000005 [ 127.329990] RBP: ffff888015e43a40 R08: 0000000000000001 R09: 0000000000000000 [ 127.330592] R10: 00000000ffffffff R11: 0000000000000001 R12: ffff8880167f7d48 [ 127.331153] R13: 00000000ffffffff R14: ffff888015e43a40 R15: ffff888015e43b28 [ 127.331723] FS: 000055556e731400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 127.332377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.332841] CR2: 00007ffc84017e38 CR3: 000000004561c000 CR4: 0000000000350ef0 [ 127.333420] Call Trace: [ 127.333634] [ 127.333822] ? __pfx_mntput_no_expire+0x10/0x10 [ 127.334208] ? dput.part.0+0xce/0x930 [ 127.334537] ? lock_release+0xc8/0x290 [ 127.334863] path_umount+0x6e0/0x1100 [ 127.335172] ? kmem_cache_free+0x2a1/0x540 [ 127.335529] ? __pfx_path_umount+0x10/0x10 [ 127.335873] ? putname.part.0+0x11b/0x160 [ 127.336216] __x64_sys_umount+0x15c/0x190 [ 127.336561] ? __pfx___x64_sys_umount+0x10/0x10 [ 127.336935] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 127.337368] do_syscall_64+0xbf/0x360 [ 127.337679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.338089] RIP: 0033:0x7f3f38245f87 [ 127.338424] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 127.339870] RSP: 002b:00007ffc84018578 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 127.340488] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f3f38245f87 [ 127.341050] RDX: 00007ffc84018649 RSI: 000000000000000a RDI: 00007ffc84018640 [ 127.341628] RBP: 00007ffc84018640 R08: 00000000ffffffff R09: 00007ffc84018410 [ 127.342197] R10: 000055556e732c7b R11: 0000000000000246 R12: 00007f3f3829e105 [ 127.342776] R13: 00007ffc84019700 R14: 000055556e732c20 R15: 00007ffc84019740 [ 127.343411] [ 127.343610] irq event stamp: 162009 [ 127.343898] hardirqs last enabled at (162017): [] __up_console_sem+0x78/0x80 [ 127.344597] hardirqs last disabled at (162026): [] __up_console_sem+0x5d/0x80 [ 127.345363] softirqs last enabled at (162040): [] handle_softirqs+0x50c/0x770 [ 127.346061] softirqs last disabled at (162035): [] __irq_exit_rcu+0xc4/0x100 [ 127.346769] ---[ end trace 0000000000000000 ]--- 12:08:32 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12:08:32 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r0, 0x29, 0x7, &(0x7f00000006c0)={@ipv4={""/10, ""/2, @dev}}, &(0x7f0000000940)=0x14) 12:08:32 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) sendmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 12:08:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x19, 0x0, 0x8000000000000) 12:08:32 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 12:08:32 executing program 7: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x800049) creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 12:08:32 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffc, r0, 0x0) 12:08:32 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_ZONE={0x6}]}, 0x28}}, 0x0) [ 127.443328] random: crng reseeded on system resumption [ 127.455771] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 127.456676] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 127.457270] CPU: 1 UID: 0 PID: 3960 Comm: syz-executor.2 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 127.458210] Tainted: [W]=WARN [ 127.458462] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 127.459105] RIP: 0010:perf_tp_event+0x175/0xe70 [ 127.459487] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 127.460903] RSP: 0018:ffff888048097780 EFLAGS: 00010012 [ 127.461327] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90004e2c000 [ 127.461891] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 127.462463] RBP: ffff8880480979f0 R08: ffff88806cf31340 R09: ffffe8ffffd0e498 [ 127.463021] R10: 0000000000000000 R11: ffff88806cf37018 R12: dffffc0000000000 [ 127.463577] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 127.464135] FS: 00007f19b8280700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 127.464766] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.465219] CR2: 00007f3f382c4544 CR3: 000000000d2ab000 CR4: 0000000000350ef0 [ 127.465778] Call Trace: [ 127.465988] [ 127.466174] ? __pfx_perf_tp_event+0x10/0x10 [ 127.466542] ? lock_acquire+0x15e/0x2f0 [ 127.466866] ? __is_insn_slot_addr+0x2e/0x290 [ 127.467243] ? find_held_lock+0x2b/0x80 [ 127.467575] ? __is_insn_slot_addr+0x136/0x290 [ 127.467950] ? lock_release+0xc8/0x290 [ 127.468265] ? kvm_sched_clock_read+0x16/0x30 [ 127.468627] ? sched_clock+0x37/0x60 [ 127.468929] ? sched_clock_cpu+0x6c/0x4e0 [ 127.469265] ? lock_is_held_type+0x9e/0x120 [ 127.469625] ? perf_trace_run_bpf_submit+0xef/0x180 [ 127.470035] ? lock_is_held_type+0x9e/0x120 [ 127.470411] perf_trace_run_bpf_submit+0xef/0x180 [ 127.470811] perf_trace_preemptirq_template+0x259/0x430 [ 127.471233] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 127.471689] ? lock_is_held_type+0x9e/0x120 [ 127.472036] ? find_held_lock+0x2b/0x80 [ 127.472373] ? try_to_wake_up+0x8ae/0x11d0 [ 127.472727] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 127.473150] trace_irq_enable.constprop.0+0xa6/0x100 [ 127.473563] trace_hardirqs_on+0x26/0x40 [ 127.473888] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 127.474298] try_to_wake_up+0x8ae/0x11d0 [ 127.474627] ? __pfx_try_to_wake_up+0x10/0x10 [ 127.474989] ? plist_del+0x122/0x270 [ 127.475294] ? find_held_lock+0x2b/0x80 [ 127.475617] ? futex_wake+0x474/0x540 [ 127.475929] wake_up_q+0xa1/0x130 [ 127.476215] futex_wake+0x47e/0x540 [ 127.476513] ? __pfx_futex_wake+0x10/0x10 [ 127.476847] ? kmem_cache_free+0x2a1/0x540 [ 127.477185] ? fd_install+0x1d8/0x660 [ 127.477501] ? putname.part.0+0x11b/0x160 [ 127.477846] do_futex+0x26d/0x370 [ 127.478132] ? __pfx_do_futex+0x10/0x10 [ 127.478462] ? __pfx___schedule+0x10/0x10 [ 127.478798] __x64_sys_futex+0x1c9/0x4d0 [ 127.479123] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 127.479591] ? __x64_sys_openat+0x142/0x200 [ 127.479946] ? __pfx___x64_sys_futex+0x10/0x10 [ 127.480321] ? xfd_validate_state+0x55/0x180 [ 127.480688] do_syscall_64+0xbf/0x360 [ 127.480997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.481405] RIP: 0033:0x7f19bad0ab19 [ 127.481702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 127.483128] RSP: 002b:00007f19b8280218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 127.483738] RAX: ffffffffffffffda RBX: 00007f19bae1df68 RCX: 00007f19bad0ab19 [ 127.484309] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f19bae1df6c [ 127.484866] RBP: 00007f19bae1df60 R08: 000000000000000e R09: 0000000000000000 [ 127.485427] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f19bae1df6c [ 127.485985] R13: 00007fff377f249f R14: 00007f19b8280300 R15: 0000000000022000 [ 127.486569] [ 127.486759] Modules linked in: [ 127.487028] ---[ end trace 0000000000000000 ]--- [ 127.487408] RIP: 0010:perf_tp_event+0x175/0xe70 [ 127.487786] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 127.489208] RSP: 0018:ffff888048097780 EFLAGS: 00010012 [ 127.489634] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90004e2c000 [ 127.490202] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 127.490764] RBP: ffff8880480979f0 R08: ffff88806cf31340 R09: ffffe8ffffd0e498 [ 127.491328] R10: 0000000000000000 R11: ffff88806cf37018 R12: dffffc0000000000 [ 127.491898] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 127.492470] FS: 00007f19b8280700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 127.493105] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.493564] CR2: 00007f3f382c4544 CR3: 000000000d2ab000 CR4: 0000000000350ef0 [ 127.494137] note: syz-executor.2[3960] exited with irqs disabled [ 127.494692] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 127.495566] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 127.496159] CPU: 1 UID: 0 PID: 3960 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 127.497096] Tainted: [D]=DIE, [W]=WARN [ 127.497398] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 127.498052] RIP: 0010:perf_tp_event+0x175/0xe70 [ 127.498437] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 127.499859] RSP: 0018:ffff88806cf08b80 EFLAGS: 00010012 [ 127.500279] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 127.500836] RDX: ffff888016a2b700 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 127.501391] RBP: ffff88806cf08df0 R08: ffff88806cf313e8 R09: ffffe8ffffd0e498 [ 127.501958] R10: 0000000000000000 R11: ffff8880135ab898 R12: dffffc0000000000 [ 127.502537] R13: 0000000000000014 R14: ffff88806cf313e8 R15: dffffc0000000000 [ 127.503098] FS: 00007f19b8280700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 127.503729] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.504187] CR2: 00007f3f382c4544 CR3: 000000000d2ab000 CR4: 0000000000350ef0 [ 127.504747] Call Trace: [ 127.504954] [ 127.505133] ? __pfx_perf_tp_event+0x10/0x10 [ 127.505491] ? enqueue_task_fair+0xded/0x1e00 [ 127.505858] ? do_raw_spin_lock+0x123/0x260 [ 127.506219] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 127.506601] ? lock_acquire+0x18c/0x2f0 [ 127.506929] ? lock_release+0x1c7/0x290 [ 127.507258] ? do_raw_spin_unlock+0x53/0x220 [ 127.507632] ? _raw_spin_unlock_irqrestore+0x22/0x50 [ 127.508061] ? try_to_wake_up+0x128/0x11d0 [ 127.508418] ? do_raw_spin_lock+0x123/0x260 [ 127.508776] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 127.509167] ? perf_trace_run_bpf_submit+0xef/0x180 [ 127.509590] perf_trace_run_bpf_submit+0xef/0x180 [ 127.509999] perf_trace_preemptirq_template+0x259/0x430 [ 127.510445] ? read_tsc+0x9/0x20 [ 127.510735] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 127.511219] ? clockevents_program_event+0x135/0x360 [ 127.511644] ? tick_program_event+0xac/0x140 [ 127.512013] ? handle_softirqs+0x16e/0x770 [ 127.512370] trace_irq_enable.constprop.0+0xa6/0x100 [ 127.512795] trace_hardirqs_on+0x26/0x40 [ 127.513137] handle_softirqs+0x16e/0x770 [ 127.513486] __irq_exit_rcu+0xc4/0x100 [ 127.513817] irq_exit_rcu+0x9/0x20 [ 127.514114] sysvec_apic_timer_interrupt+0x70/0x80 [ 127.514537] [ 127.514729] [ 127.514917] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 127.515353] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 127.515747] Code: 38 00 85 db 0f 84 21 01 00 00 e8 09 a6 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 57 a1 38 00 48 85 db 0f 84 17 01 00 00 e9 a5 38 00 31 ff 65 8b 1d 60 2f 49 06 81 e3 ff ff ff 7f 89 de [ 127.517234] RSP: 0018:ffff888048097f28 EFLAGS: 00000246 [ 127.517676] RAX: 0000000000000001 RBX: ffff888016a2b700 RCX: ffffffff817c3ab6 [ 127.518258] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 127.518846] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 127.519429] R10: ffffffff8643b457 R11: 0000000000000001 R12: ffff888016a2b700 [ 127.520011] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000 [ 127.520594] ? trace_irq_enable.constprop.0+0x26/0x100 [ 127.521028] ? make_task_dead+0x214/0x3b0 [ 127.521382] ? make_task_dead+0x214/0x3b0 [ 127.521733] ? do_syscall_64+0xbf/0x360 [ 127.522053] rewind_stack_and_make_dead+0x16/0x20 [ 127.522446] RIP: 0033:0x7f19bad0ab19 [ 127.522733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 127.524217] RSP: 002b:00007f19b8280218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 127.524837] RAX: ffffffffffffffda RBX: 00007f19bae1df68 RCX: 00007f19bad0ab19 [ 127.525365] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f19bae1df6c [ 127.525890] RBP: 00007f19bae1df60 R08: 000000000000000e R09: 0000000000000000 [ 127.526420] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f19bae1df6c [ 127.526940] R13: 00007fff377f249f R14: 00007f19b8280300 R15: 0000000000022000 [ 127.527466] [ 127.527643] Modules linked in: [ 127.527886] ---[ end trace 0000000000000000 ]--- [ 127.528236] RIP: 0010:perf_tp_event+0x175/0xe70 [ 127.528593] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 127.529908] RSP: 0018:ffff888048097780 EFLAGS: 00010012 [ 127.530309] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90004e2c000 [ 127.530828] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 127.531346] RBP: ffff8880480979f0 R08: ffff88806cf31340 R09: ffffe8ffffd0e498 [ 127.531871] R10: 0000000000000000 R11: ffff88806cf37018 R12: dffffc0000000000 [ 127.532389] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 127.532909] FS: 00007f19b8280700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 127.533494] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.533921] CR2: 00007f3f382c4544 CR3: 000000000d2ab000 CR4: 0000000000350ef0 [ 127.534453] Kernel panic - not syncing: Fatal exception in interrupt [ 127.535114] Kernel Offset: disabled [ 127.535385] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 12:08:32 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000100 RCX=ffffffff81b98698 RDX=ffff88801528b700 RSI=ffffffff81b98663 RDI=0000000000000001 RBP=ffff88801c817af0 RSP=ffff88801c817a60 R8 =0000000000000001 R9 =ffffffff81b97d93 R10=0000000000000001 R11=0000000000000001 R12=ffff88801c817bcc R13=0000000000000883 R14=ffff88801c817b90 R15=0000000000000001 RIP=ffffffff81b98665 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556ca36400 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055556ca47c98 CR3=000000003fb09000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff8880167f75b0 R8 =0000000000000000 R9 =ffffed10014fd046 R10=0000000000000065 R11=0000000000000001 R12=0000000000000065 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0 RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556e731400 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc84017e38 CR3=000000004561c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=33706f6f6c2f6b636f6c622f6c617574 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000559b95130e400000559b95105400 XMM06=0000559b951015500000000000000000 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000