Warning: Permanently added '[localhost]:35743' (ECDSA) to the list of known hosts.
2025/08/29 10:44:22 fuzzer started
2025/08/29 10:44:23 dialing manager at localhost:43077
syzkaller login: [   50.345608] cgroup: Unknown subsys name 'net'
[   50.389884] cgroup: Unknown subsys name 'cpuset'
[   50.402745] cgroup: Unknown subsys name 'rlimit'
2025/08/29 10:44:33 syscalls: 2214
2025/08/29 10:44:33 code coverage: enabled
2025/08/29 10:44:33 comparison tracing: enabled
2025/08/29 10:44:33 extra coverage: enabled
2025/08/29 10:44:33 setuid sandbox: enabled
2025/08/29 10:44:33 namespace sandbox: enabled
2025/08/29 10:44:33 Android sandbox: enabled
2025/08/29 10:44:33 fault injection: enabled
2025/08/29 10:44:33 leak checking: enabled
2025/08/29 10:44:33 net packet injection: enabled
2025/08/29 10:44:33 net device setup: enabled
2025/08/29 10:44:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/29 10:44:33 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/29 10:44:33 USB emulation: enabled
2025/08/29 10:44:33 hci packet injection: enabled
2025/08/29 10:44:33 wifi device emulation: enabled
2025/08/29 10:44:33 802.15.4 emulation: enabled
2025/08/29 10:44:33 fetching corpus: 0, signal 0/2000 (executing program)
2025/08/29 10:44:33 fetching corpus: 50, signal 19664/23196 (executing program)
2025/08/29 10:44:33 fetching corpus: 100, signal 32244/37162 (executing program)
2025/08/29 10:44:34 fetching corpus: 150, signal 42763/48856 (executing program)
2025/08/29 10:44:34 fetching corpus: 200, signal 47468/54809 (executing program)
2025/08/29 10:44:34 fetching corpus: 250, signal 53019/61424 (executing program)
2025/08/29 10:44:34 fetching corpus: 300, signal 57644/67094 (executing program)
2025/08/29 10:44:34 fetching corpus: 350, signal 63695/73906 (executing program)
2025/08/29 10:44:34 fetching corpus: 400, signal 67049/78224 (executing program)
2025/08/29 10:44:34 fetching corpus: 450, signal 71119/83093 (executing program)
2025/08/29 10:44:34 fetching corpus: 500, signal 75109/87814 (executing program)
2025/08/29 10:44:34 fetching corpus: 550, signal 78856/92215 (executing program)
2025/08/29 10:44:35 fetching corpus: 600, signal 83124/97065 (executing program)
2025/08/29 10:44:35 fetching corpus: 650, signal 85359/99980 (executing program)
2025/08/29 10:44:35 fetching corpus: 700, signal 88380/103531 (executing program)
2025/08/29 10:44:35 fetching corpus: 750, signal 90135/105953 (executing program)
2025/08/29 10:44:35 fetching corpus: 800, signal 92147/108551 (executing program)
2025/08/29 10:44:35 fetching corpus: 850, signal 94379/111297 (executing program)
2025/08/29 10:44:35 fetching corpus: 900, signal 95608/113239 (executing program)
2025/08/29 10:44:35 fetching corpus: 950, signal 97373/115479 (executing program)
2025/08/29 10:44:35 fetching corpus: 1000, signal 98666/117361 (executing program)
2025/08/29 10:44:35 fetching corpus: 1050, signal 100213/119391 (executing program)
2025/08/29 10:44:36 fetching corpus: 1100, signal 101574/121283 (executing program)
2025/08/29 10:44:36 fetching corpus: 1150, signal 104535/124304 (executing program)
2025/08/29 10:44:36 fetching corpus: 1200, signal 106007/126208 (executing program)
2025/08/29 10:44:36 fetching corpus: 1250, signal 107856/128277 (executing program)
2025/08/29 10:44:36 fetching corpus: 1300, signal 109168/129960 (executing program)
2025/08/29 10:44:36 fetching corpus: 1350, signal 110640/131721 (executing program)
2025/08/29 10:44:36 fetching corpus: 1400, signal 112489/133727 (executing program)
2025/08/29 10:44:36 fetching corpus: 1450, signal 113342/135020 (executing program)
2025/08/29 10:44:36 fetching corpus: 1500, signal 115041/136898 (executing program)
2025/08/29 10:44:36 fetching corpus: 1550, signal 116379/138451 (executing program)
2025/08/29 10:44:37 fetching corpus: 1600, signal 117294/139769 (executing program)
2025/08/29 10:44:37 fetching corpus: 1650, signal 118472/141229 (executing program)
2025/08/29 10:44:37 fetching corpus: 1700, signal 120337/143015 (executing program)
2025/08/29 10:44:37 fetching corpus: 1750, signal 121597/144427 (executing program)
2025/08/29 10:44:37 fetching corpus: 1800, signal 122369/145490 (executing program)
2025/08/29 10:44:37 fetching corpus: 1850, signal 123711/146920 (executing program)
2025/08/29 10:44:37 fetching corpus: 1900, signal 124792/148233 (executing program)
2025/08/29 10:44:37 fetching corpus: 1950, signal 125438/149178 (executing program)
2025/08/29 10:44:37 fetching corpus: 2000, signal 126156/150167 (executing program)
2025/08/29 10:44:37 fetching corpus: 2050, signal 127831/151627 (executing program)
2025/08/29 10:44:38 fetching corpus: 2100, signal 128822/152743 (executing program)
2025/08/29 10:44:38 fetching corpus: 2150, signal 129404/153635 (executing program)
2025/08/29 10:44:38 fetching corpus: 2200, signal 130638/154748 (executing program)
2025/08/29 10:44:38 fetching corpus: 2250, signal 131215/155586 (executing program)
2025/08/29 10:44:38 fetching corpus: 2300, signal 131776/156348 (executing program)
2025/08/29 10:44:38 fetching corpus: 2350, signal 133010/157398 (executing program)
2025/08/29 10:44:38 fetching corpus: 2400, signal 133795/158267 (executing program)
2025/08/29 10:44:38 fetching corpus: 2450, signal 134467/159073 (executing program)
2025/08/29 10:44:38 fetching corpus: 2500, signal 134954/159758 (executing program)
2025/08/29 10:44:38 fetching corpus: 2550, signal 136166/160711 (executing program)
2025/08/29 10:44:38 fetching corpus: 2600, signal 137158/161576 (executing program)
2025/08/29 10:44:39 fetching corpus: 2650, signal 137792/162294 (executing program)
2025/08/29 10:44:39 fetching corpus: 2700, signal 138325/162944 (executing program)
2025/08/29 10:44:39 fetching corpus: 2750, signal 139025/163654 (executing program)
2025/08/29 10:44:39 fetching corpus: 2800, signal 139869/164420 (executing program)
2025/08/29 10:44:39 fetching corpus: 2850, signal 140582/165085 (executing program)
2025/08/29 10:44:39 fetching corpus: 2900, signal 141243/165729 (executing program)
2025/08/29 10:44:39 fetching corpus: 2950, signal 141975/166402 (executing program)
2025/08/29 10:44:39 fetching corpus: 3000, signal 142730/167018 (executing program)
2025/08/29 10:44:39 fetching corpus: 3050, signal 143436/167614 (executing program)
2025/08/29 10:44:39 fetching corpus: 3100, signal 143855/168161 (executing program)
2025/08/29 10:44:39 fetching corpus: 3150, signal 144483/168742 (executing program)
2025/08/29 10:44:40 fetching corpus: 3200, signal 145162/169341 (executing program)
2025/08/29 10:44:40 fetching corpus: 3250, signal 145725/169864 (executing program)
2025/08/29 10:44:40 fetching corpus: 3300, signal 146292/170411 (executing program)
2025/08/29 10:44:40 fetching corpus: 3350, signal 146642/170859 (executing program)
2025/08/29 10:44:40 fetching corpus: 3400, signal 146987/171292 (executing program)
2025/08/29 10:44:40 fetching corpus: 3450, signal 147614/171769 (executing program)
2025/08/29 10:44:40 fetching corpus: 3500, signal 148116/172232 (executing program)
2025/08/29 10:44:40 fetching corpus: 3550, signal 148714/172711 (executing program)
2025/08/29 10:44:40 fetching corpus: 3600, signal 149468/173124 (executing program)
2025/08/29 10:44:41 fetching corpus: 3650, signal 150068/173552 (executing program)
2025/08/29 10:44:41 fetching corpus: 3700, signal 150645/173932 (executing program)
2025/08/29 10:44:41 fetching corpus: 3750, signal 151118/174292 (executing program)
2025/08/29 10:44:41 fetching corpus: 3800, signal 151844/174730 (executing program)
2025/08/29 10:44:41 fetching corpus: 3850, signal 152661/175091 (executing program)
2025/08/29 10:44:41 fetching corpus: 3900, signal 153233/175455 (executing program)
2025/08/29 10:44:41 fetching corpus: 3950, signal 153775/175781 (executing program)
2025/08/29 10:44:41 fetching corpus: 4000, signal 154461/176124 (executing program)
2025/08/29 10:44:42 fetching corpus: 4050, signal 155012/176438 (executing program)
2025/08/29 10:44:42 fetching corpus: 4100, signal 155417/176791 (executing program)
2025/08/29 10:44:42 fetching corpus: 4150, signal 155838/177095 (executing program)
2025/08/29 10:44:42 fetching corpus: 4200, signal 156402/177374 (executing program)
2025/08/29 10:44:42 fetching corpus: 4250, signal 156951/177617 (executing program)
2025/08/29 10:44:42 fetching corpus: 4300, signal 157360/177788 (executing program)
2025/08/29 10:44:42 fetching corpus: 4350, signal 157763/177788 (executing program)
2025/08/29 10:44:42 fetching corpus: 4400, signal 158237/177827 (executing program)
2025/08/29 10:44:42 fetching corpus: 4450, signal 158654/177860 (executing program)
2025/08/29 10:44:42 fetching corpus: 4500, signal 159074/177878 (executing program)
2025/08/29 10:44:43 fetching corpus: 4550, signal 159517/177920 (executing program)
2025/08/29 10:44:43 fetching corpus: 4600, signal 160091/177936 (executing program)
2025/08/29 10:44:43 fetching corpus: 4650, signal 160434/177995 (executing program)
2025/08/29 10:44:43 fetching corpus: 4700, signal 160779/178019 (executing program)
2025/08/29 10:44:43 fetching corpus: 4750, signal 161165/178025 (executing program)
2025/08/29 10:44:43 fetching corpus: 4800, signal 161994/178141 (executing program)
2025/08/29 10:44:43 fetching corpus: 4850, signal 162402/178164 (executing program)
2025/08/29 10:44:43 fetching corpus: 4900, signal 162696/178197 (executing program)
2025/08/29 10:44:43 fetching corpus: 4950, signal 162981/178203 (executing program)
2025/08/29 10:44:43 fetching corpus: 5000, signal 163334/178241 (executing program)
2025/08/29 10:44:43 fetching corpus: 5050, signal 163548/178244 (executing program)
2025/08/29 10:44:44 fetching corpus: 5100, signal 163938/178266 (executing program)
2025/08/29 10:44:44 fetching corpus: 5150, signal 164266/178267 (executing program)
2025/08/29 10:44:44 fetching corpus: 5200, signal 164772/178274 (executing program)
2025/08/29 10:44:44 fetching corpus: 5250, signal 165214/178289 (executing program)
2025/08/29 10:44:44 fetching corpus: 5300, signal 165659/178320 (executing program)
2025/08/29 10:44:44 fetching corpus: 5350, signal 165957/178325 (executing program)
2025/08/29 10:44:44 fetching corpus: 5400, signal 166345/178336 (executing program)
2025/08/29 10:44:44 fetching corpus: 5450, signal 166792/178344 (executing program)
2025/08/29 10:44:44 fetching corpus: 5500, signal 167401/178464 (executing program)
2025/08/29 10:44:44 fetching corpus: 5550, signal 167772/178474 (executing program)
2025/08/29 10:44:44 fetching corpus: 5600, signal 168049/178496 (executing program)
2025/08/29 10:44:45 fetching corpus: 5650, signal 168373/178503 (executing program)
2025/08/29 10:44:45 fetching corpus: 5700, signal 168577/178517 (executing program)
2025/08/29 10:44:45 fetching corpus: 5750, signal 169038/178518 (executing program)
2025/08/29 10:44:45 fetching corpus: 5800, signal 169409/178558 (executing program)
2025/08/29 10:44:45 fetching corpus: 5850, signal 169872/178589 (executing program)
2025/08/29 10:44:45 fetching corpus: 5900, signal 170253/178604 (executing program)
2025/08/29 10:44:46 fetching corpus: 5950, signal 170562/178605 (executing program)
2025/08/29 10:44:46 fetching corpus: 6000, signal 170925/178615 (executing program)
2025/08/29 10:44:46 fetching corpus: 6050, signal 171497/178619 (executing program)
2025/08/29 10:44:46 fetching corpus: 6100, signal 171823/178636 (executing program)
2025/08/29 10:44:46 fetching corpus: 6150, signal 172140/178642 (executing program)
2025/08/29 10:44:46 fetching corpus: 6200, signal 172394/178647 (executing program)
2025/08/29 10:44:46 fetching corpus: 6250, signal 172706/178650 (executing program)
2025/08/29 10:44:46 fetching corpus: 6300, signal 173055/178654 (executing program)
2025/08/29 10:44:46 fetching corpus: 6350, signal 173547/178670 (executing program)
2025/08/29 10:44:46 fetching corpus: 6400, signal 173885/178670 (executing program)
2025/08/29 10:44:46 fetching corpus: 6450, signal 174146/178672 (executing program)
2025/08/29 10:44:47 fetching corpus: 6500, signal 174443/178679 (executing program)
2025/08/29 10:44:47 fetching corpus: 6550, signal 174682/178681 (executing program)
2025/08/29 10:44:47 fetching corpus: 6600, signal 174992/178688 (executing program)
2025/08/29 10:44:47 fetching corpus: 6650, signal 175247/178697 (executing program)
2025/08/29 10:44:47 fetching corpus: 6700, signal 175711/178748 (executing program)
2025/08/29 10:44:47 fetching corpus: 6745, signal 176006/178751 (executing program)
2025/08/29 10:44:47 fetching corpus: 6745, signal 176006/178751 (executing program)
2025/08/29 10:44:49 starting 8 fuzzer processes
10:44:49 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x31, &(0x7f0000000900)={@private1}, 0x14)

10:44:49 executing program 1:
semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f00000000c0))

10:44:49 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f00000082c0)=[{{&(0x7f0000002580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000037c0)=[@dstopts={{0x18}}, @dstopts={{0x18}}], 0x30}}], 0x1, 0x0)

[   76.972609] audit: type=1400 audit(1756464289.790:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
10:44:49 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)

10:44:49 executing program 2:
clock_getres(0x2, 0x0)

10:44:49 executing program 4:
iopl(0x19)

10:44:49 executing program 7:
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

10:44:49 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00')
write$P9_RRENAME(r0, 0x0, 0x0)

[   78.162507] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.165266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.167485] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.174542] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.179345] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.276711] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.281187] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.286845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.292142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.295242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.339797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   78.344771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   78.347648] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   78.353126] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   78.362564] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   78.478986] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   78.481701] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   78.487257] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   78.490317] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   78.491679] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   78.494863] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   78.502333] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   78.504640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   78.509894] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   78.512751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   78.515884] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   78.518808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   78.524325] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   78.529198] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   78.546761] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   78.549797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   78.551661] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   78.552789] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   78.553280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   78.560789] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   78.568454] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   78.569798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   78.619578] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   78.621296] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   78.628218] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   80.240457] Bluetooth: hci0: command tx timeout
[   80.368184] Bluetooth: hci1: command tx timeout
[   80.431073] Bluetooth: hci2: command tx timeout
[   80.623664] Bluetooth: hci3: command tx timeout
[   80.624426] Bluetooth: hci6: command tx timeout
[   80.687069] Bluetooth: hci7: command tx timeout
[   80.687648] Bluetooth: hci5: command tx timeout
[   80.687687] Bluetooth: hci4: command tx timeout
[   82.287091] Bluetooth: hci0: command tx timeout
[   82.416997] Bluetooth: hci1: command tx timeout
[   82.480051] Bluetooth: hci2: command tx timeout
[   82.672997] Bluetooth: hci3: command tx timeout
[   82.673395] Bluetooth: hci6: command tx timeout
[   82.735086] Bluetooth: hci4: command tx timeout
[   82.736220] Bluetooth: hci7: command tx timeout
[   82.736401] Bluetooth: hci5: command tx timeout
[   84.335125] Bluetooth: hci0: command tx timeout
[   84.463156] Bluetooth: hci1: command tx timeout
[   84.527015] Bluetooth: hci2: command tx timeout
[   84.719156] Bluetooth: hci6: command tx timeout
[   84.719574] Bluetooth: hci3: command tx timeout
[   84.783204] Bluetooth: hci5: command tx timeout
[   84.785072] Bluetooth: hci7: command tx timeout
[   84.785105] Bluetooth: hci4: command tx timeout
[   86.385010] Bluetooth: hci0: command tx timeout
[   86.511110] Bluetooth: hci1: command tx timeout
[   86.576988] Bluetooth: hci2: command tx timeout
[   86.767056] Bluetooth: hci3: command tx timeout
[   86.767513] Bluetooth: hci6: command tx timeout
[   86.831056] Bluetooth: hci4: command tx timeout
[   86.831494] Bluetooth: hci7: command tx timeout
[   86.831868] Bluetooth: hci5: command tx timeout
[  113.952535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.953901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.233584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.234817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:45:27 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00')
write$P9_RRENAME(r0, 0x0, 0x0)

10:45:27 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00')
write$P9_RRENAME(r0, 0x0, 0x0)

[  115.131010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.132016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:45:27 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00')
write$P9_RRENAME(r0, 0x0, 0x0)

[  115.240884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.242082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:45:28 executing program 6:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setresuid(0x0, 0xee01, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8927, &(0x7f0000000000)={'bridge0\x00'})

[  115.363786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.364112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.364508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.365211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:45:28 executing program 6:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setresuid(0x0, 0xee01, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8927, &(0x7f0000000000)={'bridge0\x00'})

10:45:28 executing program 6:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setresuid(0x0, 0xee01, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8927, &(0x7f0000000000)={'bridge0\x00'})

10:45:28 executing program 6:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setresuid(0x0, 0xee01, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8927, &(0x7f0000000000)={'bridge0\x00'})

[  115.496182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.498325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.506518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.507740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:45:28 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x5, &(0x7f0000000500)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f00000108c0)="ff07", 0x2, 0x4c00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}, {&(0x7f0000000140)="c94e71feffcd", 0x6, 0x1000}], 0x0, &(0x7f0000000240)=ANY=[])
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0)

[  115.543058] loop6: detected capacity change from 0 to 140
[  115.554751] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  115.556155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.556876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.567995] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  115.596758] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.612263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.612832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.613954] EXT4-fs error (device loop6): ext4_validate_block_bitmap:431: comm syz-executor.6: bg 0: block 3: invalid block bitmap
[  115.626938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.627588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.648858] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.656505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.657228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.777896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.778596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.813975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.814579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.850608] audit: type=1400 audit(1756464328.668:8): avc:  denied  { open } for  pid=3895 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  115.858076] audit: type=1400 audit(1756464328.668:9): avc:  denied  { kernel } for  pid=3895 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  115.882922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.883516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.947341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.948014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:45:29 executing program 4:
iopl(0x19)

10:45:29 executing program 1:
semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f00000000c0))

10:45:29 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f00000082c0)=[{{&(0x7f0000002580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000037c0)=[@dstopts={{0x18}}, @dstopts={{0x18}}], 0x30}}], 0x1, 0x0)

10:45:29 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x5, &(0x7f0000000500)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f00000108c0)="ff07", 0x2, 0x4c00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}, {&(0x7f0000000140)="c94e71feffcd", 0x6, 0x1000}], 0x0, &(0x7f0000000240)=ANY=[])
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0)

10:45:29 executing program 2:
clock_getres(0x2, 0x0)

10:45:29 executing program 7:
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

10:45:29 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x31, &(0x7f0000000900)={@private1}, 0x14)

10:45:29 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x5, &(0x7f0000000500)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f00000108c0)="ff07", 0x2, 0x4c00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}, {&(0x7f0000000140)="c94e71feffcd", 0x6, 0x1000}], 0x0, &(0x7f0000000240)=ANY=[])
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0)

[  116.795616] loop6: detected capacity change from 0 to 140
10:45:29 executing program 1:
semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f00000000c0))

[  116.817501] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  116.824516] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.826898] loop5: detected capacity change from 0 to 140
[  116.840442] EXT4-fs error (device loop6): ext4_validate_block_bitmap:431: comm syz-executor.6: bg 0: block 3: invalid block bitmap
[  116.855077] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  116.893194] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.914090] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.919852] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz-executor.5: bg 0: block 3: invalid block bitmap
[  116.962518] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
10:45:29 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x5, &(0x7f0000000500)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f00000108c0)="ff07", 0x2, 0x4c00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}, {&(0x7f0000000140)="c94e71feffcd", 0x6, 0x1000}], 0x0, &(0x7f0000000240)=ANY=[])
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0)

10:45:29 executing program 4:
iopl(0x19)

10:45:29 executing program 7:
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

10:45:29 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x31, &(0x7f0000000900)={@private1}, 0x14)

10:45:29 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f00000082c0)=[{{&(0x7f0000002580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000037c0)=[@dstopts={{0x18}}, @dstopts={{0x18}}], 0x30}}], 0x1, 0x0)

10:45:29 executing program 2:
clock_getres(0x2, 0x0)

10:45:29 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x5, &(0x7f0000000500)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f00000108c0)="ff07", 0x2, 0x4c00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}, {&(0x7f0000000140)="c94e71feffcd", 0x6, 0x1000}], 0x0, &(0x7f0000000240)=ANY=[])
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0)

10:45:29 executing program 1:
semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f00000000c0))

[  116.993799] loop5: detected capacity change from 0 to 140
[  117.002935] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  117.018203] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.033097] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz-executor.5: bg 0: block 3: invalid block bitmap
[  117.040649] loop6: detected capacity change from 0 to 140
[  117.071253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
10:45:29 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x5, &(0x7f0000000500)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f00000108c0)="ff07", 0x2, 0x4c00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}, {&(0x7f0000000140)="c94e71feffcd", 0x6, 0x1000}], 0x0, &(0x7f0000000240)=ANY=[])
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0)

10:45:29 executing program 7:
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  117.129551] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  117.131793] loop5: detected capacity change from 0 to 140
[  117.139917] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  117.144867] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.145608] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.159588] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz-executor.5: bg 0: block 3: invalid block bitmap
[  117.186111] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.204624] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
10:45:30 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x31, &(0x7f0000000900)={@private1}, 0x14)

10:45:30 executing program 2:
clock_getres(0x2, 0x0)

10:45:30 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f00000082c0)=[{{&(0x7f0000002580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000037c0)=[@dstopts={{0x18}}, @dstopts={{0x18}}], 0x30}}], 0x1, 0x0)

10:45:30 executing program 4:
iopl(0x19)

10:45:30 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x5, &(0x7f0000000500)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005", 0x2f, 0x7e0}, {&(0x7f00000108c0)="ff07", 0x2, 0x4c00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}, {&(0x7f0000000140)="c94e71feffcd", 0x6, 0x1000}], 0x0, &(0x7f0000000240)=ANY=[])
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0)

[  117.285224] loop6: detected capacity change from 0 to 140
[  117.292666] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  117.298092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.303927] EXT4-fs error (device loop6): ext4_validate_block_bitmap:431: comm syz-executor.6: bg 0: block 3: invalid block bitmap
[  117.335292] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
10:45:30 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0)
ioctl$VT_ACTIVATE(r0, 0x125d, 0x4000000000000)

10:45:30 executing program 0:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10:45:30 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000008700)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x0, @loopback}, 0xf, 0x0, 0x0, &(0x7f0000001640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @broadcast}}}], 0x20}}], 0x2, 0x0)

10:45:30 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setresuid(0x0, r1, 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x4b40, &(0x7f0000000140))

10:45:30 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
rmdir(&(0x7f0000000180)='./file0\x00')
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

10:45:30 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000001700)=0x9, 0x4)

10:45:30 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syslog(0x2, &(0x7f0000000100)=""/39, 0x27)

10:45:30 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000008700)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x0, @loopback}, 0xf, 0x0, 0x0, &(0x7f0000001640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @broadcast}}}], 0x20}}], 0x2, 0x0)

[  117.473599] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI
[  117.474651] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[  117.475396] CPU: 0 UID: 0 PID: 3984 Comm: syz-executor.5 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  117.476681] Tainted: [W]=WARN
[  117.477454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  117.479529] RIP: 0010:perf_tp_event+0x175/0xe70
[  117.480709] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  117.485076] RSP: 0018:ffff888045917800 EFLAGS: 00010212
[  117.485508] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[  117.486078] RDX: ffff88801724d280 RSI: ffffffff818995b7 RDI: 0000000100000190
[  117.486645] RBP: ffff888045917a70 R08: ffff88806ce31340 R09: ffffe8ffffc15b08
[  117.487231] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  117.487812] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[  117.488381] FS:  000055558dd82400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  117.489019] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  117.489486] CR2: 00007f980f16c718 CR3: 000000001f68f000 CR4: 0000000000350ef0
[  117.490059] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  117.490627] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  117.491196] Call Trace:
[  117.491428]  <TASK>
[  117.491618]  ? perf_trace_lock+0xb5/0x5d0
[  117.491959]  ? __pfx_perf_tp_event+0x10/0x10
[  117.492324]  ? lock_acquire+0x15e/0x2f0
[  117.492652]  ? __is_insn_slot_addr+0x2e/0x290
[  117.493023]  ? find_held_lock+0x2b/0x80
[  117.493351]  ? __is_insn_slot_addr+0x136/0x290
[  117.493728]  ? lock_release+0xc8/0x290
[  117.494049]  ? __is_insn_slot_addr+0x140/0x290
[  117.494428]  ? kernel_text_address+0x5b/0xc0
[  117.494788]  ? __kernel_text_address+0xd/0x40
[  117.495153]  ? unwind_get_return_address+0x59/0xa0
[  117.495584]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  117.496023]  ? arch_stack_walk+0x9c/0xf0
[  117.496359]  ? perf_trace_run_bpf_submit+0xef/0x180
[  117.496762]  perf_trace_run_bpf_submit+0xef/0x180
[  117.497174]  perf_trace_lock+0x337/0x5d0
[  117.497526]  ? __pfx_perf_trace_lock+0x10/0x10
[  117.497916]  ? lock_acquire+0x15e/0x2f0
[  117.498247]  ? futex_ref_get+0x48/0x300
[  117.498592]  ? futex_ref_get+0x114/0x300
[  117.498932]  ? futex_hash+0x15c/0x390
[  117.499269]  lock_release+0x1ab/0x290
[  117.499598]  ? futex_hash+0x15c/0x390
[  117.499919]  futex_ref_get+0x119/0x300
[  117.500252]  ? futex_hash+0x15c/0x390
[  117.500573]  futex_hash+0x70/0x390
[  117.500889]  futex_wake+0x143/0x540
[  117.501206]  ? lock_release+0xc8/0x290
[  117.501533]  ? __pfx_futex_wake+0x10/0x10
[  117.501892]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  117.502332]  ? __call_rcu_common.constprop.0+0x4c1/0x960
[  117.502780]  do_futex+0x26d/0x370
[  117.503081]  ? __pfx_do_futex+0x10/0x10
[  117.503427]  ? __pfx_perf_trace_lock+0x10/0x10
[  117.503817]  __x64_sys_futex+0x1c9/0x4d0
[  117.504158]  ? __pfx___x64_sys_futex+0x10/0x10
[  117.504542]  ? lock_release+0xc8/0x290
[  117.504871]  ? do_raw_spin_unlock+0x53/0x220
[  117.505247]  ? _raw_spin_unlock+0x1e/0x40
[  117.505611]  ? file_close_fd+0x63/0x80
[  117.505942]  do_syscall_64+0xbf/0x360
[  117.506278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.506704] RIP: 0033:0x7fc9bc84fb19
[  117.507020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  117.508501] RSP: 002b:00007fffb416d4d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  117.509124] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc9bc84fb19
[  117.509706] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc9bc962f68
[  117.510289] RBP: 00007fc9bc962f60 R08: 0000001b2d221bac R09: 0000000000000000
[  117.510871] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9bc9670a8
[  117.511468] R13: 00007fffb416d5e0 R14: 00007fc9bc962f60 R15: 000000000001ca22
[  117.512064]  </TASK>
[  117.512273] Modules linked in:
10:45:30 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0)
syz_io_uring_submit(r1, 0x0, 0x0, 0x0)

[  117.512583] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI
[  117.513567] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[  117.514287] CPU: 0 UID: 0 PID: 3984 Comm: syz-executor.5 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  117.515272] Tainted: [D]=DIE, [W]=WARN
[  117.515585] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  117.516252] RIP: 0010:perf_tp_event+0x175/0xe70
[  117.516659] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  117.518156] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012
[  117.518597] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[  117.519184] RDX: ffff88801724d280 RSI: ffffffff818995b7 RDI: 0000000100000190
[  117.519774] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc15b08
[  117.520362] R10: 0000000000000000 R11: ffff88806ce37018 R12: dffffc0000000000
[  117.520950] R13: 0000000000000024 R14: ffff88806ce31490 R15: dffffc0000000000
[  117.521541] FS:  000055558dd82400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  117.522212] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  117.522693] CR2: 00007f980f16c718 CR3: 000000001f68f000 CR4: 0000000000350ef0
[  117.523304] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  117.523884] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  117.524474] Call Trace:
[  117.524701]  <IRQ>
[  117.524890]  ? __virt_addr_valid+0x2e8/0x5d0
[  117.525283]  ? __pfx_perf_tp_event+0x10/0x10
[  117.525651]  ? __pfx_css_rstat_updated+0x10/0x10
[  117.526054]  ? lock_is_held_type+0x9e/0x120
[  117.526437]  ? trace_pelt_se_tp+0xdf/0x130
[  117.526792]  ? __update_load_avg_se+0x428/0xa40
[  117.527191]  ? lock_is_held_type+0x9e/0x120
[  117.527563]  ? perf_trace_lock+0xb5/0x5d0
[  117.527906]  ? perf_trace_lock+0xb5/0x5d0
[  117.528260]  ? __pfx_perf_trace_lock+0x10/0x10
[  117.528650]  ? __pfx___resched_curr+0x10/0x10
[  117.529032]  ? perf_trace_run_bpf_submit+0xef/0x180
[  117.529446]  perf_trace_run_bpf_submit+0xef/0x180
[  117.529848]  perf_trace_lock+0x337/0x5d0
[  117.530189]  ? update_cfs_group+0x11d/0x260
[  117.530549]  ? kvm_sched_clock_read+0x16/0x30
[  117.530929]  ? __pfx_perf_trace_lock+0x10/0x10
[  117.531322]  ? check_preempt_wakeup_fair+0x6e/0x950
[  117.531734]  ? sched_ttwu_pending+0x2e0/0x4a0
[  117.532116]  lock_release+0x1ab/0x290
[  117.532441]  ? ttwu_do_activate+0x1a4/0x8a0
[  117.532806]  _raw_spin_unlock+0x16/0x40
[  117.533141]  sched_ttwu_pending+0x2e0/0x4a0
[  117.533506]  ? __pfx_sched_ttwu_pending+0x10/0x10
[  117.533916]  ? flush_tlb_func+0x24d/0x560
[  117.534265]  __flush_smp_call_function_queue+0x434/0x740
[  117.534721]  __sysvec_call_function_single+0x6d/0x370
[  117.535158]  sysvec_call_function_single+0xa1/0xc0
[  117.535584]  </IRQ>
[  117.535777]  <TASK>
[  117.535967]  asm_sysvec_call_function_single+0x1a/0x20
[  117.536400] RIP: 0010:oops_exit+0x0/0x50
[  117.536744] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27
[  117.538245] RSP: 0018:ffff888045917690 EFLAGS: 00000202
[  117.538685] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff8139f06f
[  117.539276] RDX: ffff88801724d280 RSI: ffffffff812a3dca RDI: 0000000000000007
[  117.539862] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90
[  117.540448] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888045917758
[  117.541028] R13: 0000000000000000 R14: dffffc0020000032 R15: 0000000000000000
[  117.541617]  ? add_taint+0x5f/0xd0
[  117.541934]  ? oops_end+0x4a/0xe0
[  117.542236]  oops_end+0x65/0xe0
[  117.542520]  exc_general_protection+0x1a2/0x330
[  117.542918]  asm_exc_general_protection+0x26/0x30
[  117.543344] RIP: 0010:perf_tp_event+0x175/0xe70
[  117.543735] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  117.545219] RSP: 0018:ffff888045917800 EFLAGS: 00010212
[  117.545667] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[  117.546261] RDX: ffff88801724d280 RSI: ffffffff818995b7 RDI: 0000000100000190
[  117.546857] RBP: ffff888045917a70 R08: ffff88806ce31340 R09: ffffe8ffffc15b08
[  117.547468] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  117.548052] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[  117.548638]  ? perf_tp_event+0x167/0xe70
[  117.548982]  ? perf_trace_lock+0xb5/0x5d0
[  117.549329]  ? __pfx_perf_tp_event+0x10/0x10
[  117.549707]  ? lock_acquire+0x15e/0x2f0
[  117.550046]  ? __is_insn_slot_addr+0x2e/0x290
[  117.550428]  ? find_held_lock+0x2b/0x80
[  117.550768]  ? __is_insn_slot_addr+0x136/0x290
[  117.551160]  ? lock_release+0xc8/0x290
[  117.551496]  ? __is_insn_slot_addr+0x140/0x290
[  117.551886]  ? kernel_text_address+0x5b/0xc0
[  117.552253]  ? __kernel_text_address+0xd/0x40
[  117.552629]  ? unwind_get_return_address+0x59/0xa0
[  117.553044]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  117.553491]  ? arch_stack_walk+0x9c/0xf0
[  117.553838]  ? perf_trace_run_bpf_submit+0xef/0x180
[  117.554253]  perf_trace_run_bpf_submit+0xef/0x180
[  117.554660]  perf_trace_lock+0x337/0x5d0
[  117.554999]  ? __pfx_perf_trace_lock+0x10/0x10
[  117.555390]  ? lock_acquire+0x15e/0x2f0
[  117.555718]  ? futex_ref_get+0x48/0x300
[  117.556060]  ? futex_ref_get+0x114/0x300
[  117.556401]  ? futex_hash+0x15c/0x390
[  117.556718]  lock_release+0x1ab/0x290
[  117.557046]  ? futex_hash+0x15c/0x390
[  117.557362]  futex_ref_get+0x119/0x300
[  117.557684]  ? futex_hash+0x15c/0x390
[  117.557999]  futex_hash+0x70/0x390
[  117.558302]  futex_wake+0x143/0x540
[  117.558610]  ? lock_release+0xc8/0x290
[  117.558942]  ? __pfx_futex_wake+0x10/0x10
[  117.559304]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  117.559746]  ? __call_rcu_common.constprop.0+0x4c1/0x960
[  117.560197]  do_futex+0x26d/0x370
[  117.560501]  ? __pfx_do_futex+0x10/0x10
[  117.560831]  ? __pfx_perf_trace_lock+0x10/0x10
[  117.561213]  __x64_sys_futex+0x1c9/0x4d0
[  117.561554]  ? __pfx___x64_sys_futex+0x10/0x10
[  117.561946]  ? lock_release+0xc8/0x290
[  117.562277]  ? do_raw_spin_unlock+0x53/0x220
[  117.562649]  ? _raw_spin_unlock+0x1e/0x40
[  117.563007]  ? file_close_fd+0x63/0x80
[  117.563347]  do_syscall_64+0xbf/0x360
[  117.563666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.564089] RIP: 0033:0x7fc9bc84fb19
[  117.564401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  117.565892] RSP: 002b:00007fffb416d4d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  117.566529] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc9bc84fb19
[  117.567109] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc9bc962f68
[  117.567705] RBP: 00007fc9bc962f60 R08: 0000001b2d221bac R09: 0000000000000000
[  117.568302] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9bc9670a8
[  117.568895] R13: 00007fffb416d5e0 R14: 00007fc9bc962f60 R15: 000000000001ca22
[  117.569491]  </TASK>
[  117.569689] Modules linked in:
[  117.569963] ---[ end trace 0000000000000000 ]---
[  117.570346] RIP: 0010:perf_tp_event+0x175/0xe70
[  117.570738] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  117.572240] RSP: 0018:ffff888045917800 EFLAGS: 00010212
[  117.572678] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[  117.573256] RDX: ffff88801724d280 RSI: ffffffff818995b7 RDI: 0000000100000190
[  117.573837] RBP: ffff888045917a70 R08: ffff88806ce31340 R09: ffffe8ffffc15b08
[  117.574418] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  117.575000] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[  117.575594] FS:  000055558dd82400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  117.576284] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  117.576787] CR2: 00007f980f16c718 CR3: 000000001f68f000 CR4: 0000000000350ef0
[  117.577403] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  117.578014] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  117.578631] Kernel panic - not syncing: Fatal exception in interrupt
[  118.621877] Shutting down cpus with NMI
[  118.622342] Kernel Offset: disabled
[  118.622641] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---

VM DIAGNOSIS:
10:45:30  Registers:
info registers vcpu 0
RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff8880459170f0
R8 =0000000000000000 R9 =ffffed1001493046 R10=0000000000000037 R11=0000000065646f43
R12=0000000000000037 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0
RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055558dd82400 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f980f16c718 CR3=000000001f68f000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000ff000000000000000000 XMM01=ff000000000001000000000000000000
XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007fc9bc9367c800007fc9bc9367c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff85c1c760 RBP=ffffffff85c1c760 RSP=ffff8880458f7578
R8 =0000000000000000 R9 =0000000000000000 R10=000000000003be53 R11=000000000003e5e5
R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff8880458f7660
RIP=ffffffff8151dc57 RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00005555842e0400 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe2800000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3024890547 CR3=000000001ecb8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000