Warning: Permanently added '[localhost]:14677' (ECDSA) to the list of known hosts.
2025/09/01 08:06:56 fuzzer started
2025/09/01 08:06:56 dialing manager at localhost:35473
syzkaller login: [   51.345978] cgroup: Unknown subsys name 'net'
[   51.418273] cgroup: Unknown subsys name 'cpuset'
[   51.432528] cgroup: Unknown subsys name 'rlimit'
2025/09/01 08:07:07 syscalls: 2214
2025/09/01 08:07:07 code coverage: enabled
2025/09/01 08:07:07 comparison tracing: enabled
2025/09/01 08:07:07 extra coverage: enabled
2025/09/01 08:07:07 setuid sandbox: enabled
2025/09/01 08:07:07 namespace sandbox: enabled
2025/09/01 08:07:07 Android sandbox: enabled
2025/09/01 08:07:07 fault injection: enabled
2025/09/01 08:07:07 leak checking: enabled
2025/09/01 08:07:07 net packet injection: enabled
2025/09/01 08:07:07 net device setup: enabled
2025/09/01 08:07:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/09/01 08:07:07 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/09/01 08:07:07 USB emulation: enabled
2025/09/01 08:07:07 hci packet injection: enabled
2025/09/01 08:07:07 wifi device emulation: enabled
2025/09/01 08:07:07 802.15.4 emulation: enabled
2025/09/01 08:07:07 fetching corpus: 0, signal 0/2000 (executing program)
2025/09/01 08:07:07 fetching corpus: 50, signal 33102/34664 (executing program)
2025/09/01 08:07:07 fetching corpus: 100, signal 44948/45949 (executing program)
2025/09/01 08:07:07 fetching corpus: 150, signal 51582/51877 (executing program)
2025/09/01 08:07:07 fetching corpus: 159, signal 52439/52645 (executing program)
2025/09/01 08:07:07 fetching corpus: 159, signal 52439/52679 (executing program)
2025/09/01 08:07:08 fetching corpus: 159, signal 52439/52719 (executing program)
2025/09/01 08:07:08 fetching corpus: 159, signal 52439/52753 (executing program)
2025/09/01 08:07:08 fetching corpus: 159, signal 52439/52791 (executing program)
2025/09/01 08:07:08 fetching corpus: 159, signal 52439/52825 (executing program)
2025/09/01 08:07:08 fetching corpus: 159, signal 52439/52862 (executing program)
2025/09/01 08:07:08 fetching corpus: 159, signal 52439/52904 (executing program)
2025/09/01 08:07:08 fetching corpus: 159, signal 52439/52938 (executing program)
2025/09/01 08:07:08 fetching corpus: 159, signal 52439/52979 (executing program)
2025/09/01 08:07:08 fetching corpus: 159, signal 52439/53017 (executing program)
2025/09/01 08:07:08 fetching corpus: 159, signal 52439/53056 (executing program)
2025/09/01 08:07:08 fetching corpus: 159, signal 52439/53105 (executing program)
2025/09/01 08:07:08 fetching corpus: 159, signal 52439/53141 (executing program)
2025/09/01 08:07:08 fetching corpus: 159, signal 52439/53178 (executing program)
2025/09/01 08:07:08 fetching corpus: 159, signal 52439/53223 (executing program)
2025/09/01 08:07:08 fetching corpus: 159, signal 52439/53269 (executing program)
2025/09/01 08:07:08 fetching corpus: 159, signal 52439/53312 (executing program)
2025/09/01 08:07:08 fetching corpus: 159, signal 52439/53356 (executing program)
2025/09/01 08:07:08 fetching corpus: 159, signal 52439/53386 (executing program)
2025/09/01 08:07:08 fetching corpus: 159, signal 52439/53433 (executing program)
2025/09/01 08:07:08 fetching corpus: 159, signal 52439/53462 (executing program)
2025/09/01 08:07:08 fetching corpus: 159, signal 52439/53480 (executing program)
2025/09/01 08:07:08 fetching corpus: 159, signal 52439/53480 (executing program)
2025/09/01 08:07:10 starting 8 fuzzer processes
08:07:10 executing program 0:
syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b1000", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x600, {0x0, 0x6, "825915", 0x0, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [@dstopts]}}}}}}}, 0x0)

08:07:10 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:07:10 executing program 4:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
write$P9_RSTAT(r1, &(0x7f0000000080)=ANY=[], 0xffd3)
readv(r0, &(0x7f00000014c0)=[{&(0x7f00000004c0)=""/4096, 0xfffffdef}], 0x1)

08:07:10 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:07:10 executing program 5:
capget(0x0, &(0x7f0000000040))

08:07:10 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00')
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)

08:07:10 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040), 0x0, 0x2103, 0x0)

[   65.135818] audit: type=1400 audit(1756714030.453:7): avc:  denied  { execmem } for  pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
08:07:10 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x7, 0x0, 0x788, "60c6aedeefb878"})

[   66.303510] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.306236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.310144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.315248] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.318509] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.497652] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.500214] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.503458] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.506391] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.508455] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.510458] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.514221] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.517766] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.520093] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.528143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.568166] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   66.574083] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   66.579226] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   66.581338] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   66.584074] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   66.584766] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   66.588023] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   66.596112] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   66.596696] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   66.600499] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   66.605252] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   66.607197] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   66.611136] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   66.611201] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   66.612764] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   66.618498] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   66.620452] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   66.625670] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   66.631957] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   66.644938] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   66.650072] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   66.650150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   66.663006] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   66.664568] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   66.682762] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   68.399425] Bluetooth: hci0: command tx timeout
[   68.591044] Bluetooth: hci1: command tx timeout
[   68.591661] Bluetooth: hci2: command tx timeout
[   68.719132] Bluetooth: hci5: command tx timeout
[   68.719617] Bluetooth: hci3: command tx timeout
[   68.720207] Bluetooth: hci6: command tx timeout
[   68.782979] Bluetooth: hci4: command tx timeout
[   68.783475] Bluetooth: hci7: command tx timeout
[   70.446854] Bluetooth: hci0: command tx timeout
[   70.640835] Bluetooth: hci2: command tx timeout
[   70.641312] Bluetooth: hci1: command tx timeout
[   70.767483] Bluetooth: hci3: command tx timeout
[   70.768805] Bluetooth: hci5: command tx timeout
[   70.768847] Bluetooth: hci6: command tx timeout
[   70.830965] Bluetooth: hci7: command tx timeout
[   70.831443] Bluetooth: hci4: command tx timeout
[   72.494965] Bluetooth: hci0: command tx timeout
[   72.687839] Bluetooth: hci1: command tx timeout
[   72.688549] Bluetooth: hci2: command tx timeout
[   72.815049] Bluetooth: hci3: command tx timeout
[   72.815711] Bluetooth: hci5: command tx timeout
[   72.816651] Bluetooth: hci6: command tx timeout
[   72.878962] Bluetooth: hci4: command tx timeout
[   72.879205] Bluetooth: hci7: command tx timeout
[   74.542835] Bluetooth: hci0: command tx timeout
[   74.736186] Bluetooth: hci2: command tx timeout
[   74.736244] Bluetooth: hci1: command tx timeout
[   74.863963] Bluetooth: hci6: command tx timeout
[   74.863988] Bluetooth: hci5: command tx timeout
[   74.864424] Bluetooth: hci3: command tx timeout
[   74.927571] Bluetooth: hci7: command tx timeout
[   74.928065] Bluetooth: hci4: command tx timeout
[  103.469737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.470454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.586588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.587236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.829233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.830840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.870385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.871016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.120409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.121238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.186709] audit: type=1400 audit(1756714069.502:8): avc:  denied  { open } for  pid=3803 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  104.206889] audit: type=1400 audit(1756714069.502:9): avc:  denied  { kernel } for  pid=3803 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  104.238119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.238729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:07:49 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:07:49 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00')
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)

08:07:49 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00')
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)

08:07:49 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  104.425739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.426356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:07:49 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  104.531053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.531663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:07:49 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00')
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)

08:07:49 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00')
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)

[  104.663762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.665245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.725560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.726190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.874218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.874843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.928415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.929745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.015376] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  105.219173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.219827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.242474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.243080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.566842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.567464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.583198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.583936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:07:50 executing program 4:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
write$P9_RSTAT(r1, &(0x7f0000000080)=ANY=[], 0xffd3)
readv(r0, &(0x7f00000014c0)=[{&(0x7f00000004c0)=""/4096, 0xfffffdef}], 0x1)

08:07:51 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00')
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)

08:07:51 executing program 0:
syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b1000", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x600, {0x0, 0x6, "825915", 0x0, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [@dstopts]}}}}}}}, 0x0)

08:07:51 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x7, 0x0, 0x788, "60c6aedeefb878"})

08:07:51 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040), 0x0, 0x2103, 0x0)

08:07:51 executing program 5:
capget(0x0, &(0x7f0000000040))

08:07:51 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:07:51 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  105.744582] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO
08:07:51 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:07:51 executing program 4:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
write$P9_RSTAT(r1, &(0x7f0000000080)=ANY=[], 0xffd3)
readv(r0, &(0x7f00000014c0)=[{&(0x7f00000004c0)=""/4096, 0xfffffdef}], 0x1)

08:07:51 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:07:51 executing program 0:
syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b1000", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x600, {0x0, 0x6, "825915", 0x0, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [@dstopts]}}}}}}}, 0x0)

08:07:51 executing program 5:
capget(0x0, &(0x7f0000000040))

08:07:51 executing program 5:
capget(0x0, &(0x7f0000000040))

08:07:51 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00')
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)

08:07:51 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:07:51 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x7, 0x0, 0x788, "60c6aedeefb878"})

08:07:51 executing program 0:
syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b1000", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x600, {0x0, 0x6, "825915", 0x0, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [@dstopts]}}}}}}}, 0x0)

08:07:51 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040), 0x0, 0x2103, 0x0)

08:07:51 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:07:51 executing program 4:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
write$P9_RSTAT(r1, &(0x7f0000000080)=ANY=[], 0xffd3)
readv(r0, &(0x7f00000014c0)=[{&(0x7f00000004c0)=""/4096, 0xfffffdef}], 0x1)

[  105.903999] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI
[  105.904936] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[  105.905645] CPU: 1 UID: 0 PID: 3939 Comm: syz-executor.6 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  105.907962] Tainted: [W]=WARN
[  105.908607] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  105.910289] RIP: 0010:perf_tp_event+0x175/0xe70
[  105.911424] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  105.914297] RSP: 0018:ffff88801b47f800 EFLAGS: 00010212
[  105.914732] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90005c0f000
[  105.915311] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000100000190
[  105.915888] RBP: ffff88801b47fa70 R08: ffff88806cf31340 R09: ffffe8ffffd15b38
[  105.916478] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000
[  105.917057] R13: 0000000000000024 R14: ffff88806cf31340 R15: dffffc0000000000
[  105.917645] FS:  00007f5e0c639700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  105.918292] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  105.918762] CR2: 00007f61166f9004 CR3: 0000000041164000 CR4: 0000000000350ef0
[  105.919351] Call Trace:
[  105.919561]  <TASK>
[  105.919756]  ? __pfx_perf_tp_event+0x10/0x10
[  105.920133]  ? lock_is_held_type+0x9e/0x120
[  105.920482]  ? lock_is_held_type+0x9e/0x120
[  105.920849]  ? ctx_sched_in+0x134/0x9b0
[  105.921183]  ? __pfx_ctx_sched_in+0x10/0x10
[  105.921527]  ? arch_stack_walk+0x9c/0xf0
[  105.921863]  ? find_held_lock+0x2b/0x80
[  105.922188]  ? find_held_lock+0x2b/0x80
[  105.922509]  ? __perf_install_in_context+0x503/0xb90
[  105.922911]  ? lock_release+0xc8/0x290
[  105.923226]  ? do_raw_spin_unlock+0x53/0x220
[  105.923583]  ? perf_trace_run_bpf_submit+0xef/0x180
[  105.923986]  perf_trace_run_bpf_submit+0xef/0x180
[  105.924375]  perf_trace_lock_acquire+0x3c2/0x700
[  105.924761]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  105.925179]  ? futex_ref_get+0x48/0x300
[  105.925500]  ? find_held_lock+0x2b/0x80
[  105.925834]  lock_acquire+0xc5/0x2f0
[  105.926136]  ? futex_wake+0x228/0x540
[  105.926450]  _raw_spin_lock+0x2b/0x40
[  105.926761]  ? futex_wake+0x228/0x540
[  105.927075]  futex_wake+0x228/0x540
[  105.927375]  ? __pfx_futex_wake+0x10/0x10
[  105.927710]  ? __do_sys_perf_event_open+0x44d/0x2c20
[  105.928114]  ? lock_release+0xc8/0x290
[  105.928430]  do_futex+0x26d/0x370
[  105.928714]  ? __pfx_do_futex+0x10/0x10
[  105.929033]  ? __pfx___do_sys_perf_event_open+0x10/0x10
[  105.929454]  ? find_held_lock+0x2b/0x80
[  105.929788]  __x64_sys_futex+0x1c9/0x4d0
[  105.930119]  ? __pfx___x64_sys_futex+0x10/0x10
[  105.930484]  ? xfd_validate_state+0x55/0x180
[  105.930850]  do_syscall_64+0xbf/0x360
[  105.931157]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.931563] RIP: 0033:0x7f5e0f0c3b19
[  105.931859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  105.933277] RSP: 002b:00007f5e0c639218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  105.933882] RAX: ffffffffffffffda RBX: 00007f5e0f1d6f68 RCX: 00007f5e0f0c3b19
[  105.934439] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5e0f1d6f6c
[  105.934996] RBP: 00007f5e0f1d6f60 R08: 000000000000000e R09: 0000000000000000
[  105.935567] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f5e0f1d6f6c
[  105.936137] R13: 00007ffd2ffabd3f R14: 00007f5e0c639300 R15: 0000000000022000
[  105.936704]  </TASK>
[  105.936891] Modules linked in:
[  105.937184] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI
[  105.938060] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[  105.938747] CPU: 1 UID: 0 PID: 3939 Comm: syz-executor.6 Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  105.939694] Tainted: [D]=DIE, [W]=WARN
[  105.939996] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  105.940636] RIP: 0010:perf_tp_event+0x175/0xe70
[  105.941013] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  105.942459] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012
[  105.942887] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[  105.943457] RDX: ffff888042138000 RSI: ffffffff8189a4e7 RDI: 0000000100000190
[  105.943995] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd15b38
[  105.944514] R10: 0000000000000000 R11: 000000000000002c R12: dffffc0000000000
[  105.945032] R13: 000000000000002c R14: ffff88806cf31490 R15: dffffc0000000000
[  105.945551] FS:  00007f5e0c639700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  105.946143] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  105.946572] CR2: 00007f61166f9004 CR3: 0000000041164000 CR4: 0000000000350ef0
[  105.947090] Call Trace:
[  105.947284]  <IRQ>
[  105.947454]  ? __pfx_perf_tp_event+0x10/0x10
[  105.947790]  ? stack_depot_save_flags+0x2c/0xa20
[  105.948146]  ? kasan_save_stack+0x34/0x50
[  105.948457]  ? kasan_save_stack+0x24/0x50
[  105.948766]  ? kasan_save_track+0x14/0x30
[  105.949077]  ? __kasan_save_free_info+0x3a/0x60
[  105.949422]  ? __kasan_slab_free+0x3f/0x50
[  105.949765]  ? kmem_cache_free+0x2a1/0x540
[  105.950119]  ? rcu_core+0x7c8/0x1800
[  105.950427]  ? handle_softirqs+0x1b1/0x770
[  105.950772]  ? __irq_exit_rcu+0xc4/0x100
[  105.951104]  ? irq_exit_rcu+0x9/0x20
[  105.951410]  ? sysvec_apic_timer_interrupt+0x70/0x80
[  105.951826]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  105.952258]  ? __orc_find+0x8f/0xf0
[  105.952563]  ? unwind_next_frame+0x2f9/0x2540
[  105.952934]  ? arch_stack_walk+0x86/0xf0
[  105.953264]  ? stack_trace_save+0x8e/0xc0
[  105.953605]  ? kasan_save_stack+0x24/0x50
[  105.953950]  ? kasan_save_track+0x14/0x30
[  105.954290]  ? __kasan_slab_alloc+0x59/0x70
[  105.954640]  ? kmem_cache_alloc_noprof+0x205/0x690
[  105.955035]  ? __alloc_object+0x2b/0x2c0
[  105.955376]  ? __create_object+0x1d/0x80
[  105.955710]  ? kmem_cache_alloc_noprof+0x414/0x690
[  105.956106]  ? ptlock_alloc+0x21/0x70
[  105.956415]  ? pte_alloc_one+0x86/0x360
[  105.956745]  ? __pte_alloc+0x6c/0x360
[  105.957061]  ? __handle_mm_fault+0x2606/0x3260
[  105.957438]  ? handle_mm_fault+0x2c3/0x9b0
[  105.957793]  ? do_user_addr_fault+0x4fa/0xeb0
[  105.958164]  ? exc_page_fault+0xb0/0x180
[  105.958499]  ? asm_exc_page_fault+0x26/0x30
[  105.958855]  ? perf_trace_run_bpf_submit+0xef/0x180
[  105.959260]  perf_trace_run_bpf_submit+0xef/0x180
[  105.959656]  perf_trace_lock_acquire+0x3c2/0x700
[  105.960045]  ? update_curr+0x71/0x500
[  105.960359]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  105.960786]  ? find_held_lock+0x2b/0x80
[  105.961116]  ? sched_ttwu_pending+0x2e0/0x4a0
[  105.961490]  lock_acquire+0xc5/0x2f0
[  105.961801]  ? hrtimer_interrupt+0xd6/0x830
[  105.962147]  ? _raw_spin_unlock+0x1e/0x40
[  105.962486]  ? sched_ttwu_pending+0x2e0/0x4a0
[  105.962857]  _raw_spin_lock_irqsave+0x3a/0x60
[  105.963227]  ? hrtimer_interrupt+0xd6/0x830
[  105.963571]  hrtimer_interrupt+0xd6/0x830
[  105.963911]  ? __pfx_do_flush_tlb_all+0x10/0x10
[  105.964293]  ? trace_csd_function_exit+0x134/0x190
[  105.964689]  ? __flush_smp_call_function_queue+0x28c/0x740
[  105.965138]  __sysvec_apic_timer_interrupt+0xbb/0x330
[  105.965545]  sysvec_apic_timer_interrupt+0x6b/0x80
[  105.965941]  </IRQ>
[  105.966127]  <TASK>
[  105.966310]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  105.966723] RIP: 0010:oops_exit+0x0/0x50
[  105.967047] Code: 00 3a 00 be ff ff ff ff 48 c7 c7 50 b4 43 86 e8 c6 0f f9 ff 5b e9 50 00 3a 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 36 00 3a 00 8b 1d c0 3d 4f 06 31 ff 89 de e8 57
[  105.968453] RSP: 0018:ffff88801b47f690 EFLAGS: 00000202
[  105.968870] RAX: 000000000002b6e1 RBX: 0000000000000212 RCX: ffffc90005c0f000
[  105.969426] RDX: 0000000000040000 RSI: ffffffff812a3dca RDI: 0000000000000007
[  105.969986] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f12690
[  105.970544] R10: 0000000000000000 R11: 000000000000002c R12: ffff88801b47f758
[  105.971102] R13: 0000000000000000 R14: dffffc0020000032 R15: 0000000000000000
[  105.971661]  ? oops_end+0x4a/0xe0
[  105.971951]  oops_end+0x65/0xe0
[  105.972224]  exc_general_protection+0x1a2/0x330
[  105.972600]  asm_exc_general_protection+0x26/0x30
[  105.972981] RIP: 0010:perf_tp_event+0x175/0xe70
[  105.973354] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  105.974773] RSP: 0018:ffff88801b47f800 EFLAGS: 00010212
[  105.975188] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90005c0f000
[  105.975743] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000100000190
[  105.976300] RBP: ffff88801b47fa70 R08: ffff88806cf31340 R09: ffffe8ffffd15b38
[  105.976854] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000
[  105.977410] R13: 0000000000000024 R14: ffff88806cf31340 R15: dffffc0000000000
[  105.977980]  ? perf_tp_event+0x167/0xe70
[  105.978312]  ? __pfx_perf_tp_event+0x10/0x10
[  105.978667]  ? lock_is_held_type+0x9e/0x120
[  105.979013]  ? lock_is_held_type+0x9e/0x120
[  105.979362]  ? ctx_sched_in+0x134/0x9b0
[  105.979679]  ? __pfx_ctx_sched_in+0x10/0x10
[  105.980016]  ? arch_stack_walk+0x9c/0xf0
[  105.980339]  ? find_held_lock+0x2b/0x80
[  105.980661]  ? find_held_lock+0x2b/0x80
[  105.980982]  ? __perf_install_in_context+0x503/0xb90
[  105.981385]  ? lock_release+0xc8/0x290
[  105.981699]  ? do_raw_spin_unlock+0x53/0x220
[  105.982064]  ? perf_trace_run_bpf_submit+0xef/0x180
[  105.982464]  perf_trace_run_bpf_submit+0xef/0x180
[  105.982853]  perf_trace_lock_acquire+0x3c2/0x700
[  105.983235]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  105.983651]  ? futex_ref_get+0x48/0x300
[  105.983966]  ? find_held_lock+0x2b/0x80
[  105.984289]  lock_acquire+0xc5/0x2f0
[  105.984591]  ? futex_wake+0x228/0x540
[  105.984904]  _raw_spin_lock+0x2b/0x40
[  105.985211]  ? futex_wake+0x228/0x540
[  105.985521]  futex_wake+0x228/0x540
[  105.985823]  ? __pfx_futex_wake+0x10/0x10
[  105.986159]  ? __do_sys_perf_event_open+0x44d/0x2c20
[  105.986562]  ? lock_release+0xc8/0x290
[  105.986877]  do_futex+0x26d/0x370
[  105.987161]  ? __pfx_do_futex+0x10/0x10
[  105.987481]  ? __pfx___do_sys_perf_event_open+0x10/0x10
[  105.987902]  ? find_held_lock+0x2b/0x80
[  105.988227]  __x64_sys_futex+0x1c9/0x4d0
[  105.988554]  ? __pfx___x64_sys_futex+0x10/0x10
[  105.988919]  ? xfd_validate_state+0x55/0x180
[  105.989281]  do_syscall_64+0xbf/0x360
[  105.989587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.990002] RIP: 0033:0x7f5e0f0c3b19
[  105.990298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  105.991707] RSP: 002b:00007f5e0c639218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  105.992300] RAX: ffffffffffffffda RBX: 00007f5e0f1d6f68 RCX: 00007f5e0f0c3b19
[  105.992857] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5e0f1d6f6c
[  105.993410] RBP: 00007f5e0f1d6f60 R08: 000000000000000e R09: 0000000000000000
[  105.993976] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f5e0f1d6f6c
[  105.994531] R13: 00007ffd2ffabd3f R14: 00007f5e0c639300 R15: 0000000000022000
[  105.995094]  </TASK>
[  105.995284] Modules linked in:
[  105.995540] ---[ end trace 0000000000000000 ]---
[  105.995907] RIP: 0010:perf_tp_event+0x175/0xe70
[  105.996280] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  105.997689] RSP: 0018:ffff88801b47f800 EFLAGS: 00010212
[  105.998113] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90005c0f000
[  105.998669] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000100000190
[  105.999225] RBP: ffff88801b47fa70 R08: ffff88806cf31340 R09: ffffe8ffffd15b38
[  105.999780] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000
[  106.000335] R13: 0000000000000024 R14: ffff88806cf31340 R15: dffffc0000000000
[  106.000892] FS:  00007f5e0c639700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  106.001521] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  106.001984] CR2: 00007f61166f9004 CR3: 0000000041164000 CR4: 0000000000350ef0
[  106.002546] Kernel panic - not syncing: Fatal exception in interrupt
[  106.003129] Kernel Offset: disabled
[  106.003419] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---

VM DIAGNOSIS:
08:07:51  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=1ffff1100863aeb5 RCX=0000000000000000 RDX=1ffffffff0992794
RSI=ffffffff85c1c760 RDI=ffffffff84c93ca0 RBP=ffffffff84c93ca0 RSP=ffff8880431d7540
R8 =0000000000000002 R9 =0000000000000000 R10=ffffffff85b23640 R11=0000000000024afb
R12=ffffffff85c1c778 R13=ffff8880431d7628 R14=0000000000000000 R15=ffff8880431d7758
RIP=ffffffff84b7f412 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f82a3561700 00000000 00000000
GS =0000 ffff8880e55d8000 00000000 00000000
LDT=0000 fffffe5300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f82a60ff018 CR3=000000001f66a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f82a60d27c000007f82a60d27c8
XMM02=00007f82a60d27e000007f82a60d27c0 XMM03=00007f82a60d27c800007f82a60d27c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff88801b47f0f0
R8 =0000000000000000 R9 =ffffed1001800046 R10=0000000000000066 R11=000000000000002c
R12=0000000000000066 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0
RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f5e0c639700 00000000 00000000
GS =0000 ffff8880e56d8000 00000000 00000000
LDT=0000 fffffe4500000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f61166f9004 CR3=0000000041164000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f5e0f1aa7c000007f5e0f1aa7c8
XMM02=00007f5e0f1aa7e000007f5e0f1aa7c0 XMM03=00007f5e0f1aa7c800007f5e0f1aa7c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000