Warning: Permanently added '[localhost]:49767' (ECDSA) to the list of known hosts.
2025/08/29 10:23:17 fuzzer started
2025/08/29 10:23:18 dialing manager at localhost:43077
syzkaller login: [   58.493593] cgroup: Unknown subsys name 'net'
[   58.554264] cgroup: Unknown subsys name 'cpuset'
[   58.564437] cgroup: Unknown subsys name 'rlimit'
2025/08/29 10:23:28 syscalls: 2214
2025/08/29 10:23:28 code coverage: enabled
2025/08/29 10:23:28 comparison tracing: enabled
2025/08/29 10:23:28 extra coverage: enabled
2025/08/29 10:23:28 setuid sandbox: enabled
2025/08/29 10:23:28 namespace sandbox: enabled
2025/08/29 10:23:28 Android sandbox: enabled
2025/08/29 10:23:28 fault injection: enabled
2025/08/29 10:23:28 leak checking: enabled
2025/08/29 10:23:28 net packet injection: enabled
2025/08/29 10:23:28 net device setup: enabled
2025/08/29 10:23:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/29 10:23:28 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/29 10:23:28 USB emulation: enabled
2025/08/29 10:23:28 hci packet injection: enabled
2025/08/29 10:23:28 wifi device emulation: enabled
2025/08/29 10:23:28 802.15.4 emulation: enabled
2025/08/29 10:23:28 fetching corpus: 0, signal 0/2000 (executing program)
2025/08/29 10:23:28 fetching corpus: 50, signal 24145/27564 (executing program)
2025/08/29 10:23:28 fetching corpus: 100, signal 35834/40574 (executing program)
2025/08/29 10:23:28 fetching corpus: 150, signal 44351/50238 (executing program)
2025/08/29 10:23:28 fetching corpus: 200, signal 51569/58499 (executing program)
2025/08/29 10:23:28 fetching corpus: 250, signal 55730/63748 (executing program)
2025/08/29 10:23:28 fetching corpus: 300, signal 58001/67195 (executing program)
2025/08/29 10:23:29 fetching corpus: 350, signal 63811/73797 (executing program)
2025/08/29 10:23:29 fetching corpus: 400, signal 66078/77097 (executing program)
2025/08/29 10:23:29 fetching corpus: 450, signal 70023/81816 (executing program)
2025/08/29 10:23:29 fetching corpus: 500, signal 73418/85984 (executing program)
2025/08/29 10:23:29 fetching corpus: 550, signal 75821/89236 (executing program)
2025/08/29 10:23:29 fetching corpus: 600, signal 77802/92076 (executing program)
2025/08/29 10:23:29 fetching corpus: 650, signal 79346/94464 (executing program)
2025/08/29 10:23:29 fetching corpus: 700, signal 81453/97315 (executing program)
2025/08/29 10:23:29 fetching corpus: 750, signal 85185/101359 (executing program)
2025/08/29 10:23:29 fetching corpus: 800, signal 89621/106066 (executing program)
2025/08/29 10:23:29 fetching corpus: 850, signal 91318/108431 (executing program)
2025/08/29 10:23:30 fetching corpus: 900, signal 92995/110690 (executing program)
2025/08/29 10:23:30 fetching corpus: 950, signal 95081/113263 (executing program)
2025/08/29 10:23:30 fetching corpus: 1000, signal 97029/115655 (executing program)
2025/08/29 10:23:30 fetching corpus: 1050, signal 99259/118179 (executing program)
2025/08/29 10:23:30 fetching corpus: 1100, signal 100749/120170 (executing program)
2025/08/29 10:23:30 fetching corpus: 1150, signal 101979/121867 (executing program)
2025/08/29 10:23:30 fetching corpus: 1200, signal 103195/123591 (executing program)
2025/08/29 10:23:30 fetching corpus: 1250, signal 104674/125443 (executing program)
2025/08/29 10:23:30 fetching corpus: 1300, signal 105978/127110 (executing program)
2025/08/29 10:23:30 fetching corpus: 1350, signal 107410/128836 (executing program)
2025/08/29 10:23:31 fetching corpus: 1400, signal 108423/130309 (executing program)
2025/08/29 10:23:31 fetching corpus: 1450, signal 109305/131675 (executing program)
2025/08/29 10:23:31 fetching corpus: 1500, signal 110324/133099 (executing program)
2025/08/29 10:23:31 fetching corpus: 1550, signal 111354/134547 (executing program)
2025/08/29 10:23:31 fetching corpus: 1600, signal 113206/136415 (executing program)
2025/08/29 10:23:31 fetching corpus: 1650, signal 114604/137967 (executing program)
2025/08/29 10:23:31 fetching corpus: 1700, signal 115497/139180 (executing program)
2025/08/29 10:23:31 fetching corpus: 1750, signal 116395/140393 (executing program)
2025/08/29 10:23:31 fetching corpus: 1800, signal 117139/141509 (executing program)
2025/08/29 10:23:31 fetching corpus: 1850, signal 118128/142699 (executing program)
2025/08/29 10:23:31 fetching corpus: 1900, signal 118918/143845 (executing program)
2025/08/29 10:23:32 fetching corpus: 1950, signal 120099/145150 (executing program)
2025/08/29 10:23:32 fetching corpus: 2000, signal 120743/146126 (executing program)
2025/08/29 10:23:32 fetching corpus: 2050, signal 122368/147598 (executing program)
2025/08/29 10:23:32 fetching corpus: 2100, signal 123406/148723 (executing program)
2025/08/29 10:23:32 fetching corpus: 2150, signal 124317/149767 (executing program)
2025/08/29 10:23:32 fetching corpus: 2200, signal 125148/150752 (executing program)
2025/08/29 10:23:32 fetching corpus: 2250, signal 125887/151701 (executing program)
2025/08/29 10:23:32 fetching corpus: 2300, signal 126830/152707 (executing program)
2025/08/29 10:23:32 fetching corpus: 2350, signal 128033/153860 (executing program)
2025/08/29 10:23:33 fetching corpus: 2400, signal 128702/154752 (executing program)
2025/08/29 10:23:33 fetching corpus: 2450, signal 129324/155552 (executing program)
2025/08/29 10:23:33 fetching corpus: 2500, signal 130015/156390 (executing program)
2025/08/29 10:23:33 fetching corpus: 2550, signal 131100/157434 (executing program)
2025/08/29 10:23:33 fetching corpus: 2600, signal 131853/158217 (executing program)
2025/08/29 10:23:33 fetching corpus: 2650, signal 132557/158977 (executing program)
2025/08/29 10:23:33 fetching corpus: 2700, signal 133591/160023 (executing program)
2025/08/29 10:23:33 fetching corpus: 2750, signal 134612/160881 (executing program)
2025/08/29 10:23:33 fetching corpus: 2800, signal 135376/161624 (executing program)
2025/08/29 10:23:33 fetching corpus: 2850, signal 135893/162321 (executing program)
2025/08/29 10:23:34 fetching corpus: 2900, signal 136884/163053 (executing program)
2025/08/29 10:23:34 fetching corpus: 2950, signal 139812/164467 (executing program)
2025/08/29 10:23:34 fetching corpus: 3000, signal 140851/165153 (executing program)
2025/08/29 10:23:34 fetching corpus: 3050, signal 141372/165702 (executing program)
2025/08/29 10:23:34 fetching corpus: 3100, signal 142211/166340 (executing program)
2025/08/29 10:23:34 fetching corpus: 3150, signal 142969/166900 (executing program)
2025/08/29 10:23:34 fetching corpus: 3200, signal 143500/167400 (executing program)
2025/08/29 10:23:34 fetching corpus: 3250, signal 143972/167876 (executing program)
2025/08/29 10:23:34 fetching corpus: 3300, signal 144744/168379 (executing program)
2025/08/29 10:23:34 fetching corpus: 3350, signal 145304/168869 (executing program)
2025/08/29 10:23:35 fetching corpus: 3400, signal 146173/169368 (executing program)
2025/08/29 10:23:35 fetching corpus: 3450, signal 146550/169774 (executing program)
2025/08/29 10:23:35 fetching corpus: 3500, signal 147145/170262 (executing program)
2025/08/29 10:23:35 fetching corpus: 3550, signal 147856/170746 (executing program)
2025/08/29 10:23:35 fetching corpus: 3600, signal 148404/171151 (executing program)
2025/08/29 10:23:35 fetching corpus: 3650, signal 149466/171683 (executing program)
2025/08/29 10:23:35 fetching corpus: 3700, signal 149910/172056 (executing program)
2025/08/29 10:23:35 fetching corpus: 3750, signal 150763/172479 (executing program)
2025/08/29 10:23:35 fetching corpus: 3800, signal 151198/172851 (executing program)
2025/08/29 10:23:35 fetching corpus: 3850, signal 151883/173209 (executing program)
2025/08/29 10:23:36 fetching corpus: 3900, signal 152320/173578 (executing program)
2025/08/29 10:23:36 fetching corpus: 3950, signal 152691/173887 (executing program)
2025/08/29 10:23:36 fetching corpus: 4000, signal 153252/174173 (executing program)
2025/08/29 10:23:36 fetching corpus: 4050, signal 153806/174472 (executing program)
2025/08/29 10:23:36 fetching corpus: 4100, signal 154400/174760 (executing program)
2025/08/29 10:23:36 fetching corpus: 4150, signal 155014/175021 (executing program)
2025/08/29 10:23:36 fetching corpus: 4200, signal 155570/175323 (executing program)
2025/08/29 10:23:36 fetching corpus: 4250, signal 156016/175371 (executing program)
2025/08/29 10:23:36 fetching corpus: 4300, signal 156528/175383 (executing program)
2025/08/29 10:23:36 fetching corpus: 4350, signal 156884/175402 (executing program)
2025/08/29 10:23:37 fetching corpus: 4400, signal 157342/175509 (executing program)
2025/08/29 10:23:37 fetching corpus: 4450, signal 157870/175514 (executing program)
2025/08/29 10:23:37 fetching corpus: 4500, signal 158198/175518 (executing program)
2025/08/29 10:23:37 fetching corpus: 4550, signal 158739/175526 (executing program)
2025/08/29 10:23:37 fetching corpus: 4600, signal 159093/175527 (executing program)
2025/08/29 10:23:37 fetching corpus: 4650, signal 159600/175538 (executing program)
2025/08/29 10:23:37 fetching corpus: 4700, signal 160176/175567 (executing program)
2025/08/29 10:23:37 fetching corpus: 4750, signal 160928/175585 (executing program)
2025/08/29 10:23:37 fetching corpus: 4800, signal 161383/175587 (executing program)
2025/08/29 10:23:37 fetching corpus: 4850, signal 161852/175633 (executing program)
2025/08/29 10:23:38 fetching corpus: 4900, signal 162223/175634 (executing program)
2025/08/29 10:23:38 fetching corpus: 4950, signal 162760/175647 (executing program)
2025/08/29 10:23:38 fetching corpus: 5000, signal 163081/175654 (executing program)
2025/08/29 10:23:38 fetching corpus: 5050, signal 163590/175691 (executing program)
2025/08/29 10:23:38 fetching corpus: 5100, signal 163830/175691 (executing program)
2025/08/29 10:23:38 fetching corpus: 5150, signal 164317/175700 (executing program)
2025/08/29 10:23:38 fetching corpus: 5200, signal 164613/175700 (executing program)
2025/08/29 10:23:38 fetching corpus: 5250, signal 164870/175701 (executing program)
2025/08/29 10:23:38 fetching corpus: 5300, signal 165315/175706 (executing program)
2025/08/29 10:23:38 fetching corpus: 5350, signal 165735/175729 (executing program)
2025/08/29 10:23:38 fetching corpus: 5400, signal 166028/175747 (executing program)
2025/08/29 10:23:39 fetching corpus: 5450, signal 166495/175754 (executing program)
2025/08/29 10:23:39 fetching corpus: 5500, signal 166909/175759 (executing program)
2025/08/29 10:23:39 fetching corpus: 5550, signal 167405/175767 (executing program)
2025/08/29 10:23:39 fetching corpus: 5600, signal 167727/175776 (executing program)
2025/08/29 10:23:39 fetching corpus: 5650, signal 168306/175776 (executing program)
2025/08/29 10:23:39 fetching corpus: 5700, signal 168642/175783 (executing program)
2025/08/29 10:23:39 fetching corpus: 5750, signal 168959/175879 (executing program)
2025/08/29 10:23:39 fetching corpus: 5800, signal 169403/175879 (executing program)
2025/08/29 10:23:39 fetching corpus: 5850, signal 170003/175879 (executing program)
2025/08/29 10:23:39 fetching corpus: 5900, signal 170310/175879 (executing program)
2025/08/29 10:23:39 fetching corpus: 5950, signal 170652/175890 (executing program)
2025/08/29 10:23:40 fetching corpus: 6000, signal 171407/175896 (executing program)
2025/08/29 10:23:40 fetching corpus: 6050, signal 171672/175897 (executing program)
2025/08/29 10:23:40 fetching corpus: 6100, signal 172005/175898 (executing program)
2025/08/29 10:23:40 fetching corpus: 6150, signal 172366/175902 (executing program)
2025/08/29 10:23:40 fetching corpus: 6200, signal 172680/175909 (executing program)
2025/08/29 10:23:40 fetching corpus: 6250, signal 172951/175911 (executing program)
2025/08/29 10:23:40 fetching corpus: 6300, signal 173272/175928 (executing program)
2025/08/29 10:23:40 fetching corpus: 6350, signal 173538/175935 (executing program)
2025/08/29 10:23:40 fetching corpus: 6356, signal 173597/175935 (executing program)
2025/08/29 10:23:40 fetching corpus: 6356, signal 173597/175935 (executing program)
2025/08/29 10:23:42 starting 8 fuzzer processes
10:23:42 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000010d00)=ANY=[])
statfs(&(0x7f0000000140)='./file0\x00', 0x0)

10:23:42 executing program 4:
syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00))
chmod(&(0x7f0000000040)='./file0\x00', 0x0)

10:23:42 executing program 2:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40086806, 0x4000)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f0000000100)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0)

10:23:42 executing program 0:
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x88})
r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x17, &(0x7f00000000c0)=[{0x0}], 0x1)

10:23:42 executing program 3:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)

10:23:42 executing program 7:
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2f2802", 0x0, 0x2c, 0x0, @local, @local}}}}, 0x0)

[   82.596384] audit: type=1400 audit(1756463022.357:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
10:23:42 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x900, 0x6aa0})

10:23:42 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r1, 0xf1b5a43ca6b9a97}, 0x14}}, 0x0)

[   83.744191] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   83.748852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   83.751411] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   83.757639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   83.761546] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   83.856944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   83.862744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   83.864013] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   83.865882] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   83.867858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   83.870947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   83.872981] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   83.878523] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   83.881470] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   83.886849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   83.920694] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   83.942886] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   83.947619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   83.949272] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   83.951275] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   83.953408] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   83.953458] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   83.958399] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   83.963416] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   83.973820] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   83.987763] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   83.987897] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   83.991586] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   83.992560] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   83.992870] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   83.996948] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   84.008353] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   84.009069] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   84.012308] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   84.013370] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   84.015570] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   84.022341] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   84.030616] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   84.038328] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   84.046370] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   85.828928] Bluetooth: hci0: command tx timeout
[   85.956262] Bluetooth: hci1: command tx timeout
[   85.957453] Bluetooth: hci2: command tx timeout
[   86.020235] Bluetooth: hci5: command tx timeout
[   86.085061] Bluetooth: hci6: command tx timeout
[   86.086421] Bluetooth: hci3: command tx timeout
[   86.148938] Bluetooth: hci7: command tx timeout
[   86.150231] Bluetooth: hci4: command tx timeout
[   87.877212] Bluetooth: hci0: command tx timeout
[   88.005185] Bluetooth: hci1: command tx timeout
[   88.005624] Bluetooth: hci2: command tx timeout
[   88.069155] Bluetooth: hci5: command tx timeout
[   88.134221] Bluetooth: hci6: command tx timeout
[   88.135017] Bluetooth: hci3: command tx timeout
[   88.196278] Bluetooth: hci7: command tx timeout
[   88.197322] Bluetooth: hci4: command tx timeout
[   89.925564] Bluetooth: hci0: command tx timeout
[   90.052181] Bluetooth: hci2: command tx timeout
[   90.052669] Bluetooth: hci1: command tx timeout
[   90.117193] Bluetooth: hci5: command tx timeout
[   90.182135] Bluetooth: hci3: command tx timeout
[   90.182653] Bluetooth: hci6: command tx timeout
[   90.245223] Bluetooth: hci7: command tx timeout
[   90.245676] Bluetooth: hci4: command tx timeout
[   91.973435] Bluetooth: hci0: command tx timeout
[   92.101268] Bluetooth: hci1: command tx timeout
[   92.101729] Bluetooth: hci2: command tx timeout
[   92.165177] Bluetooth: hci5: command tx timeout
[   92.229787] Bluetooth: hci6: command tx timeout
[   92.230842] Bluetooth: hci3: command tx timeout
[   92.293175] Bluetooth: hci4: command tx timeout
[   92.293618] Bluetooth: hci7: command tx timeout
[  126.558631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.559487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.820897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.821869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.985531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.986162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.109645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.110398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.186209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.186815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.268011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.269204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:24:27 executing program 7:
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2f2802", 0x0, 0x2c, 0x0, @local, @local}}}}, 0x0)

10:24:27 executing program 7:
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2f2802", 0x0, 0x2c, 0x0, @local, @local}}}}, 0x0)

[  127.432587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.433207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:24:27 executing program 7:
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2f2802", 0x0, 0x2c, 0x0, @local, @local}}}}, 0x0)

10:24:27 executing program 7:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x3a, 0x0, &(0x7f0000001180))

[  127.562321] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
10:24:27 executing program 7:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x3a, 0x0, &(0x7f0000001180))

[  127.592513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.593050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:24:27 executing program 7:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x3a, 0x0, &(0x7f0000001180))

[  127.645601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.646413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:24:27 executing program 7:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x3a, 0x0, &(0x7f0000001180))

10:24:27 executing program 0:
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x88})
r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x17, &(0x7f00000000c0)=[{0x0}], 0x1)

[  127.721781] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  127.728639] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  127.729380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.729415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.785795] audit: type=1400 audit(1756463067.546:8): avc:  denied  { open } for  pid=3891 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  127.788609] audit: type=1400 audit(1756463067.546:9): avc:  denied  { kernel } for  pid=3891 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  127.827158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.827732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.885408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.887552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.928619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.929245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.961098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.961724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.035966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.036597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.058688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.059273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.163061] loop1: detected capacity change from 0 to 1
[  128.167050] FAT-fs (loop1): Directory bread(block 3) failed
[  128.168415] FAT-fs (loop1): Directory bread(block 4) failed
[  128.168883] FAT-fs (loop1): Directory bread(block 5) failed
[  128.169421] FAT-fs (loop1): Directory bread(block 6) failed
[  128.169917] FAT-fs (loop1): Directory bread(block 7) failed
[  128.170847] FAT-fs (loop1): Directory bread(block 8) failed
[  128.171372] FAT-fs (loop1): Directory bread(block 9) failed
[  128.173906] FAT-fs (loop1): FAT read failed (blocknr 1)
[  128.176051] FAT-fs (loop1): FAT read failed (blocknr 1)
10:24:27 executing program 0:
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x88})
r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x17, &(0x7f00000000c0)=[{0x0}], 0x1)

10:24:27 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000010d00)=ANY=[])
statfs(&(0x7f0000000140)='./file0\x00', 0x0)

10:24:27 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setitimer(0x0, 0x0, 0x0)

10:24:27 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x900, 0x6aa0})

10:24:27 executing program 2:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40086806, 0x4000)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f0000000100)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0)

10:24:27 executing program 3:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)

10:24:27 executing program 4:
syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00))
chmod(&(0x7f0000000040)='./file0\x00', 0x0)

10:24:27 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r1, 0xf1b5a43ca6b9a97}, 0x14}}, 0x0)

[  128.237180] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  128.247505] syz-executor.7 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  128.252711] loop1: detected capacity change from 0 to 1
[  128.262372] FAT-fs (loop1): Directory bread(block 3) failed
[  128.265162] FAT-fs (loop1): Directory bread(block 4) failed
[  128.265642] FAT-fs (loop1): Directory bread(block 5) failed
[  128.269825] FAT-fs (loop1): Directory bread(block 6) failed
[  128.273081] FAT-fs (loop1): Directory bread(block 7) failed
[  128.273731] FAT-fs (loop1): Directory bread(block 8) failed
[  128.277146] FAT-fs (loop1): Directory bread(block 9) failed
[  128.288294] FAT-fs (loop1): FAT read failed (blocknr 1)
10:24:28 executing program 0:
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x88})
r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x17, &(0x7f00000000c0)=[{0x0}], 0x1)

10:24:28 executing program 2:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40086806, 0x4000)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f0000000100)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0)

10:24:28 executing program 4:
syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00))
chmod(&(0x7f0000000040)='./file0\x00', 0x0)

10:24:28 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x900, 0x6aa0})

10:24:28 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setitimer(0x0, 0x0, 0x0)

10:24:28 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r1, 0xf1b5a43ca6b9a97}, 0x14}}, 0x0)

10:24:28 executing program 3:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)

10:24:28 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000010d00)=ANY=[])
statfs(&(0x7f0000000140)='./file0\x00', 0x0)

[  128.389084] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  128.410708] loop1: detected capacity change from 0 to 1
[  128.424092] kmemleak: Found object by alias at 0x607f1a62acd4
10:24:28 executing program 4:
syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00))
chmod(&(0x7f0000000040)='./file0\x00', 0x0)

[  128.424112] CPU: 0 UID: 0 PID: 3943 Comm: syz-executor.5 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  128.424130] Tainted: [W]=WARN
[  128.424134] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  128.424141] Call Trace:
[  128.424145]  <TASK>
[  128.424149]  dump_stack_lvl+0xca/0x120
[  128.424175]  __lookup_object+0x94/0xb0
[  128.424192]  delete_object_full+0x27/0x70
[  128.424208]  free_percpu+0x30/0x1160
[  128.424225]  ? arch_uprobe_clear_state+0x16/0x140
[  128.424245]  futex_hash_free+0x38/0xc0
[  128.424265]  mmput+0x2d3/0x390
[  128.424284]  do_exit+0x79d/0x2970
[  128.424297]  ? lock_release+0xc8/0x290
[  128.424314]  ? __pfx_do_exit+0x10/0x10
[  128.424328]  ? find_held_lock+0x2b/0x80
[  128.424345]  ? get_signal+0x835/0x2340
[  128.424364]  do_group_exit+0xd3/0x2a0
[  128.424379]  get_signal+0x2315/0x2340
[  128.424401]  ? __pfx_get_signal+0x10/0x10
[  128.424417]  ? do_futex+0x135/0x370
[  128.424431]  ? __pfx_do_futex+0x10/0x10
[  128.424445]  arch_do_signal_or_restart+0x80/0x790
[  128.424463]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  128.424479]  ? __x64_sys_futex+0x1c9/0x4d0
[  128.424491]  ? __x64_sys_futex+0x1d2/0x4d0
[  128.424505]  ? __pfx___x64_sys_futex+0x10/0x10
[  128.424518]  ? selinux_file_ioctl+0xb9/0x280
[  128.424533]  ? xfd_validate_state+0x55/0x180
[  128.424554]  exit_to_user_mode_loop+0x8b/0x110
[  128.424567]  do_syscall_64+0x2f7/0x360
[  128.424579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.424591] RIP: 0033:0x7fb5f1b0fb19
[  128.424599] Code: Unable to access opcode bytes at 0x7fb5f1b0faef.
[  128.424604] RSP: 002b:00007fb5ef085218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  128.424616] RAX: fffffffffffffe00 RBX: 00007fb5f1c22f68 RCX: 00007fb5f1b0fb19
[  128.424624] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb5f1c22f68
[  128.424630] RBP: 00007fb5f1c22f60 R08: 0000000000000000 R09: 0000000000000000
[  128.424638] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb5f1c22f6c
[  128.424644] R13: 00007ffe20f27c3f R14: 00007fb5ef085300 R15: 0000000000022000
[  128.424660]  </TASK>
[  128.424664] kmemleak: Object (percpu) 0x607f1a62acd0 (size 8):
[  128.424670] kmemleak:   comm "syz-executor.3", pid 3941, jiffies 4294795206
[  128.424677] kmemleak:   min_count = 1
[  128.424681] kmemleak:   count = 0
[  128.424685] kmemleak:   flags = 0x21
[  128.424689] kmemleak:   checksum = 0
[  128.424692] kmemleak:   backtrace:
[  128.424695]  pcpu_alloc_noprof+0x87a/0x1170
[  128.424710]  perf_trace_event_init+0x366/0xa10
[  128.424723]  perf_trace_init+0x1a4/0x2f0
[  128.424735]  perf_tp_event_init+0xa6/0x120
[  128.424750]  perf_try_init_event+0x140/0x9f0
[  128.424763]  perf_event_alloc.part.0+0x118e/0x45f0
[  128.424779]  __do_sys_perf_event_open+0x719/0x2c20
[  128.424791]  do_syscall_64+0xbf/0x360
[  128.424800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.447203] kmemleak: Cannot insert 0x607f1a62acd4 into the object search tree (overlaps existing)
[  128.447217] CPU: 0 UID: 0 PID: 3944 Comm: syz-executor.1 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  128.447235] Tainted: [W]=WARN
[  128.447239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  128.447245] Call Trace:
[  128.447248]  <TASK>
[  128.447253]  dump_stack_lvl+0xca/0x120
[  128.447271]  __link_object+0x190/0x210
[  128.447287]  __create_object+0x48/0x80
[  128.447305]  pcpu_alloc_noprof+0x87a/0x1170
[  128.447327]  __percpu_init_rwsem+0x2d/0x160
[  128.447343]  ? security_sb_alloc+0x75/0x140
[  128.447360]  alloc_super+0x29e/0xb80
[  128.447374]  ? __pfx_super_s_dev_test+0x10/0x10
[  128.447392]  sget_fc+0xfe/0xb80
[  128.447403]  ? __pfx_super_s_dev_set+0x10/0x10
[  128.447421]  get_tree_bdev_flags+0x1b8/0x620
[  128.447432]  ? __pfx_vfat_fill_super+0x10/0x10
[  128.447445]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  128.447458]  ? cap_capable+0xdb/0x3b0
[  128.447475]  ? security_capable+0x2f/0x90
[  128.447491]  vfs_get_tree+0x93/0x340
[  128.447509]  path_mount+0x132d/0x1dd0
[  128.447523]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  128.447538]  ? __pfx_path_mount+0x10/0x10
[  128.447551]  ? kmem_cache_free+0x2a1/0x540
[  128.447562]  ? putname.part.0+0x11b/0x160
[  128.447579]  ? getname_flags.part.0+0x1c6/0x540
[  128.447597]  ? putname.part.0+0x11b/0x160
[  128.447615]  __x64_sys_mount+0x27b/0x300
[  128.447628]  ? __pfx___x64_sys_mount+0x10/0x10
[  128.447647]  do_syscall_64+0xbf/0x360
[  128.447658]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.447669] RIP: 0033:0x7f991da4d04a
[  128.447678] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  128.447690] RSP: 002b:00007f991afc0fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  128.447701] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f991da4d04a
[  128.447709] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f991afc1000
[  128.447717] RBP: 00007f991afc1040 R08: 00007f991afc1040 R09: 0000000020000000
[  128.447724] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[  128.447731] R13: 0000000020000100 R14: 00007f991afc1000 R15: 0000000020010d00
[  128.447747]  </TASK>
[  128.448217] kmemleak: Kernel memory leak detector disabled
[  128.448222] kmemleak: Object (percpu) 0x607f1a62acd0 (size 8):
[  128.448228] kmemleak:   comm "syz-executor.3", pid 3941, jiffies 4294795206
[  128.448236] kmemleak:   min_count = 1
[  128.448240] kmemleak:   count = 0
[  128.448243] kmemleak:   flags = 0x21
[  128.448247] kmemleak:   checksum = 0
[  128.448258] kmemleak:   backtrace:
[  128.448261]  pcpu_alloc_noprof+0x87a/0x1170
[  128.448277]  perf_trace_event_init+0x366/0xa10
[  128.448289]  perf_trace_init+0x1a4/0x2f0
[  128.448301]  perf_tp_event_init+0xa6/0x120
[  128.448316]  perf_try_init_event+0x140/0x9f0
[  128.448329]  perf_event_alloc.part.0+0x118e/0x45f0
[  128.448346]  __do_sys_perf_event_open+0x719/0x2c20
[  128.448358]  do_syscall_64+0xbf/0x360
[  128.448367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.478592] FAT-fs (loop1): Directory bread(block 3) failed
[  128.481079] FAT-fs (loop1): Directory bread(block 4) failed
[  128.483136] FAT-fs (loop1): Directory bread(block 5) failed
[  128.483590] FAT-fs (loop1): Directory bread(block 6) failed
[  128.484049] FAT-fs (loop1): Directory bread(block 7) failed
[  128.487996] FAT-fs (loop1): Directory bread(block 8) failed
[  128.488501] FAT-fs (loop1): Directory bread(block 9) failed
[  128.507854] FAT-fs (loop1): FAT read failed (blocknr 1)
10:24:28 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000010d00)=ANY=[])
statfs(&(0x7f0000000140)='./file0\x00', 0x0)

10:24:28 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setitimer(0x0, 0x0, 0x0)

10:24:28 executing program 2:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40086806, 0x4000)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f0000000100)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0)

10:24:28 executing program 3:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)

10:24:28 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x900, 0x6aa0})

10:24:28 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setitimer(0x0, 0x0, 0x0)

10:24:28 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r1, 0xf1b5a43ca6b9a97}, 0x14}}, 0x0)

[  128.534647] Oops: general protection fault, probably for non-canonical address 0xf9fffc0000000032: 0000 [#1] SMP KASAN NOPTI
[  128.535533] KASAN: maybe wild-memory-access in range [0xd000000000000190-0xd000000000000197]
[  128.536211] CPU: 0 UID: 0 PID: 3949 Comm: syz-executor.2 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  128.537695] Tainted: [W]=WARN
[  128.538491] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  128.540335] RIP: 0010:perf_tp_event+0x175/0xe70
[  128.541359] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  128.545632] RSP: 0018:ffff88804708f800 EFLAGS: 00010212
[  128.546052] RAX: 1a00000000000032 RBX: cfffffffffffffa0 RCX: ffffc9000584d000
[  128.546607] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: d000000000000190
[  128.547166] RBP: ffff88804708fa70 R08: ffff88806ce31340 R09: ffffe8ffffc07cd0
[  128.547718] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  128.548281] R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000
[  128.548837] FS:  00007f9152b06700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  128.549462] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  128.549915] CR2: 00007fb5f2b619d8 CR3: 0000000019d9b000 CR4: 0000000000350ef0
[  128.550469] Call Trace:
[  128.550674]  <TASK>
[  128.550854]  ? perf_swevent_event+0x63/0x3f0
[  128.551212]  ? __pfx_perf_tp_event+0x10/0x10
[  128.551566]  ? tracing_gen_ctx_irq_test+0x167/0x1f0
[  128.551960]  ? tracing_gen_ctx_irq_test+0x167/0x1f0
[  128.552361]  ? perf_swevent_event+0x63/0x3f0
[  128.552714]  ? perf_tp_event+0x807/0xe70
[  128.553042]  ? __pfx_perf_tp_event+0x10/0x10
[  128.553394]  ? __perf_install_in_context+0x503/0xb90
[  128.553795]  ? do_raw_spin_unlock+0x53/0x220
[  128.554151]  ? perf_trace_run_bpf_submit+0xef/0x180
[  128.554550]  perf_trace_run_bpf_submit+0xef/0x180
[  128.554937]  perf_trace_lock+0x337/0x5d0
[  128.555265]  ? __pfx_perf_trace_lock+0x10/0x10
[  128.555630]  ? lock_acquire+0x15e/0x2f0
[  128.555950]  ? futex_ref_get+0x48/0x300
[  128.556278]  ? futex_ref_get+0x114/0x300
[  128.556597]  ? futex_hash+0x15c/0x390
[  128.556899]  lock_release+0x1ab/0x290
[  128.557204]  ? futex_hash+0x15c/0x390
[  128.557507]  futex_ref_get+0x119/0x300
[  128.557816]  ? futex_hash+0x15c/0x390
[  128.558120]  futex_hash+0x70/0x390
[  128.558405]  futex_wake+0x143/0x540
[  128.558699]  ? __pfx_perf_trace_lock+0x10/0x10
[  128.559065]  ? __pfx_futex_wake+0x10/0x10
[  128.559404]  ? __do_sys_perf_event_open+0x44d/0x2c20
[  128.559804]  ? lock_release+0xc8/0x290
[  128.560118]  do_futex+0x26d/0x370
[  128.560406]  ? __pfx_do_futex+0x10/0x10
[  128.560722]  ? __pfx___do_sys_perf_event_open+0x10/0x10
[  128.561138]  ? find_held_lock+0x2b/0x80
[  128.561461]  __x64_sys_futex+0x1c9/0x4d0
[  128.561786]  ? __pfx___x64_sys_futex+0x10/0x10
[  128.562146]  ? selinux_file_ioctl+0xb9/0x280
[  128.562497]  ? xfd_validate_state+0x55/0x180
[  128.562858]  do_syscall_64+0xbf/0x360
[  128.563161]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.563564] RIP: 0033:0x7f9155590b19
[  128.563858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  128.565264] RSP: 002b:00007f9152b06218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  128.565856] RAX: ffffffffffffffda RBX: 00007f91556a3f68 RCX: 00007f9155590b19
[  128.566411] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f91556a3f6c
[  128.566963] RBP: 00007f91556a3f60 R08: 000000000000000e R09: 0000000000000000
[  128.567514] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f91556a3f6c
[  128.568069] R13: 00007fff1ce42c8f R14: 00007f9152b06300 R15: 0000000000022000
[  128.568634]  </TASK>
[  128.568822] Modules linked in:
[  128.569112] Oops: general protection fault, probably for non-canonical address 0xf9fffc0000000032: 0000 [#2] SMP KASAN NOPTI
[  128.569959] KASAN: maybe wild-memory-access in range [0xd000000000000190-0xd000000000000197]
[  128.570602] CPU: 0 UID: 0 PID: 3949 Comm: syz-executor.2 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  128.571512] Tainted: [D]=DIE, [W]=WARN
[  128.571809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  128.572447] RIP: 0010:perf_tp_event+0x175/0xe70
[  128.572812] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  128.574199] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012
[  128.574610] RAX: 1a00000000000032 RBX: cfffffffffffffa0 RCX: ffffffff81898973
[  128.575154] RDX: ffff888019ee8000 RSI: ffffffff818995b7 RDI: d000000000000190
[  128.575699] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc07cd0
[  128.576243] R10: 0000000000000000 R11: ffff88806ce37018 R12: dffffc0000000000
[  128.576795] R13: 0000000000000000 R14: ffff88806ce31490 R15: dffffc0000000000
[  128.577343] FS:  00007f9152b06700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  128.577957] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  128.578409] CR2: 00007fb5f2b619d8 CR3: 0000000019d9b000 CR4: 0000000000350ef0
[  128.578956] Call Trace:
[  128.579162]  <IRQ>
[  128.579348]  ? __pfx_perf_tp_event+0x10/0x10
[  128.579703]  ? kasan_save_stack+0x34/0x50
[  128.580029]  ? kasan_save_stack+0x24/0x50
[  128.580358]  ? kasan_save_track+0x14/0x30
[  128.580681]  ? __kasan_save_free_info+0x3a/0x60
[  128.581043]  ? __kasan_slab_free+0x3f/0x50
[  128.581381]  ? kmem_cache_free+0x2a1/0x540
[  128.581708]  ? rcu_core+0x7c8/0x1800
[  128.582005]  ? handle_softirqs+0x1b1/0x770
[  128.582344]  ? __irq_exit_rcu+0xc4/0x100
[  128.582664]  ? irq_exit_rcu+0x9/0x20
[  128.582955]  ? sysvec_apic_timer_interrupt+0x70/0x80
[  128.583355]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  128.583771]  ? __sanitizer_cov_trace_const_cmp4+0x8/0x20
[  128.584194]  ? vm_normal_page+0xd4/0x270
[  128.584523]  ? copy_page_range+0xdf5/0x5140
[  128.584860]  ? dup_mmap+0xd2f/0x1d10
[  128.585155]  ? copy_process+0x3ad5/0x73c0
[  128.585478]  ? kernel_clone+0xea/0x7f0
[  128.585782]  ? __do_sys_clone+0xce/0x120
[  128.586098]  ? do_syscall_64+0xbf/0x360
[  128.586409]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.586823]  ? __lock_acquire+0xc65/0x1b70
[  128.587158]  ? perf_trace_run_bpf_submit+0xef/0x180
[  128.587549]  perf_trace_run_bpf_submit+0xef/0x180
[  128.587930]  perf_trace_lock+0x337/0x5d0
[  128.588251]  ? place_entity+0x1c/0x410
[  128.588566]  ? kvm_sched_clock_read+0x16/0x30
[  128.588924]  ? __pfx_perf_trace_lock+0x10/0x10
[  128.589286]  ? check_preempt_wakeup_fair+0x6e/0x950
[  128.589675]  ? sched_ttwu_pending+0x2e0/0x4a0
[  128.590031]  lock_release+0x1ab/0x290
[  128.590331]  ? ttwu_do_activate+0x1a4/0x8a0
[  128.590670]  _raw_spin_unlock+0x16/0x40
[  128.590985]  sched_ttwu_pending+0x2e0/0x4a0
[  128.591325]  ? __pfx_sched_ttwu_pending+0x10/0x10
[  128.591707]  __flush_smp_call_function_queue+0x434/0x740
[  128.592134]  __sysvec_call_function_single+0x6d/0x370
[  128.592550]  sysvec_call_function_single+0xa1/0xc0
[  128.592933]  </IRQ>
[  128.593113]  <TASK>
[  128.593295]  asm_sysvec_call_function_single+0x1a/0x20
[  128.593701] RIP: 0010:oops_exit+0x0/0x50
[  128.594019] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27
[  128.595402] RSP: 0018:ffff88804708f690 EFLAGS: 00000202
[  128.595816] RAX: 000000000002bb0a RBX: 0000000000000212 RCX: ffffc9000584d000
[  128.596372] RDX: 0000000000040000 RSI: ffffffff812a3dca RDI: 0000000000000007
[  128.596922] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90
[  128.597468] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88804708f758
[  128.598017] R13: 0000000000000000 R14: f9fffc0000000032 R15: 0000000000000000
[  128.598569]  ? oops_end+0x4a/0xe0
[  128.598854]  oops_end+0x65/0xe0
[  128.599121]  exc_general_protection+0x1a2/0x330
[  128.599489]  asm_exc_general_protection+0x26/0x30
[  128.599862] RIP: 0010:perf_tp_event+0x175/0xe70
[  128.600230] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  128.601618] RSP: 0018:ffff88804708f800 EFLAGS: 00010212
[  128.602028] RAX: 1a00000000000032 RBX: cfffffffffffffa0 RCX: ffffc9000584d000
[  128.602572] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: d000000000000190
[  128.603116] RBP: ffff88804708fa70 R08: ffff88806ce31340 R09: ffffe8ffffc07cd0
[  128.603659] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  128.604204] R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000
[  128.604764]  ? perf_tp_event+0x167/0xe70
[  128.605087]  ? perf_swevent_event+0x63/0x3f0
[  128.605438]  ? __pfx_perf_tp_event+0x10/0x10
[  128.605786]  ? tracing_gen_ctx_irq_test+0x167/0x1f0
[  128.606179]  ? tracing_gen_ctx_irq_test+0x167/0x1f0
[  128.606566]  ? perf_swevent_event+0x63/0x3f0
[  128.606914]  ? perf_tp_event+0x807/0xe70
[  128.607236]  ? __pfx_perf_tp_event+0x10/0x10
[  128.607584]  ? __perf_install_in_context+0x503/0xb90
[  128.607980]  ? do_raw_spin_unlock+0x53/0x220
[  128.608338]  ? perf_trace_run_bpf_submit+0xef/0x180
[  128.608727]  perf_trace_run_bpf_submit+0xef/0x180
[  128.609111]  perf_trace_lock+0x337/0x5d0
[  128.609433]  ? __pfx_perf_trace_lock+0x10/0x10
[  128.609794]  ? lock_acquire+0x15e/0x2f0
[  128.610106]  ? futex_ref_get+0x48/0x300
[  128.610415]  ? futex_ref_get+0x114/0x300
[  128.610730]  ? futex_hash+0x15c/0x390
[  128.611029]  lock_release+0x1ab/0x290
[  128.611333]  ? futex_hash+0x15c/0x390
[  128.611632]  futex_ref_get+0x119/0x300
[  128.611940]  ? futex_hash+0x15c/0x390
[  128.612238]  futex_hash+0x70/0x390
[  128.612523]  futex_wake+0x143/0x540
[  128.612811]  ? __pfx_perf_trace_lock+0x10/0x10
[  128.613172]  ? __pfx_futex_wake+0x10/0x10
[  128.613500]  ? __do_sys_perf_event_open+0x44d/0x2c20
[  128.613897]  ? lock_release+0xc8/0x290
[  128.614206]  do_futex+0x26d/0x370
[  128.614483]  ? __pfx_do_futex+0x10/0x10
[  128.614797]  ? __pfx___do_sys_perf_event_open+0x10/0x10
[  128.615209]  ? find_held_lock+0x2b/0x80
[  128.615525]  __x64_sys_futex+0x1c9/0x4d0
[  128.615848]  ? __pfx___x64_sys_futex+0x10/0x10
[  128.616210]  ? selinux_file_ioctl+0xb9/0x280
[  128.616559]  ? xfd_validate_state+0x55/0x180
[  128.616911]  do_syscall_64+0xbf/0x360
[  128.617209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.617608] RIP: 0033:0x7f9155590b19
[  128.617898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  128.619279] RSP: 002b:00007f9152b06218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  128.619859] RAX: ffffffffffffffda RBX: 00007f91556a3f68 RCX: 00007f9155590b19
[  128.620411] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f91556a3f6c
[  128.620956] RBP: 00007f91556a3f60 R08: 000000000000000e R09: 0000000000000000
[  128.621503] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f91556a3f6c
[  128.622051] R13: 00007fff1ce42c8f R14: 00007f9152b06300 R15: 0000000000022000
[  128.622605]  </TASK>
[  128.622792] Modules linked in:
[  128.623048] ---[ end trace 0000000000000000 ]---
[  128.623410] RIP: 0010:perf_tp_event+0x175/0xe70
[  128.623778] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  128.625169] RSP: 0018:ffff88804708f800 EFLAGS: 00010212
[  128.625579] RAX: 1a00000000000032 RBX: cfffffffffffffa0 RCX: ffffc9000584d000
[  128.626129] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: d000000000000190
[  128.626676] RBP: ffff88804708fa70 R08: ffff88806ce31340 R09: ffffe8ffffc07cd0
[  128.627224] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  128.627777] R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000
[  128.628335] FS:  00007f9152b06700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  128.628959] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  128.629409] CR2: 00007fb5f2b619d8 CR3: 0000000019d9b000 CR4: 0000000000350ef0
[  128.629964] Kernel panic - not syncing: Fatal exception in interrupt
[  128.630539] Kernel Offset: disabled
[  128.630824] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---

VM DIAGNOSIS:
10:24:28  Registers:
info registers vcpu 0
RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=ffffffff828e3230 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff88804708f0f8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000065646f43
R12=00000000000000d7 R13=ffffffff88724190 R14=ffffffff88724140 R15=ffffffff88724400
RIP=ffffffff828e3285 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f9152b06700 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe6d00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb5f2b619d8 CR3=0000000019d9b000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f91556777c000007f91556777c8
XMM02=00007f91556777e000007f91556777c0 XMM03=00007f91556777c800007f91556777c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000021149 RBX=ffff88806ce3de00 RCX=ffffc90000825000 RDX=0000000000040000
RSI=ffffffff816880d6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88804723f418
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffffed100d9c7bc1 R13=ffff88806ce3de08 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff816880d8 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f855e02e700 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe3300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8560bcc018 CR3=000000001d065000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f8560b9f7c000007f8560b9f7c8
XMM02=00007f8560b9f7e000007f8560b9f7c0 XMM03=00007f8560b9f7c800007f8560b9f7c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000