Warning: Permanently added '[localhost]:30343' (ECDSA) to the list of known hosts.
2025/08/29 11:54:06 fuzzer started
2025/08/29 11:54:06 dialing manager at localhost:43077
syzkaller login: [ 51.418951] cgroup: Unknown subsys name 'net'
[ 51.468145] cgroup: Unknown subsys name 'cpuset'
[ 51.478111] cgroup: Unknown subsys name 'rlimit'
2025/08/29 11:54:16 syscalls: 2214
2025/08/29 11:54:16 code coverage: enabled
2025/08/29 11:54:16 comparison tracing: enabled
2025/08/29 11:54:16 extra coverage: enabled
2025/08/29 11:54:16 setuid sandbox: enabled
2025/08/29 11:54:16 namespace sandbox: enabled
2025/08/29 11:54:16 Android sandbox: enabled
2025/08/29 11:54:16 fault injection: enabled
2025/08/29 11:54:16 leak checking: enabled
2025/08/29 11:54:16 net packet injection: enabled
2025/08/29 11:54:16 net device setup: enabled
2025/08/29 11:54:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/29 11:54:16 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/29 11:54:16 USB emulation: enabled
2025/08/29 11:54:16 hci packet injection: enabled
2025/08/29 11:54:16 wifi device emulation: enabled
2025/08/29 11:54:16 802.15.4 emulation: enabled
2025/08/29 11:54:16 fetching corpus: 0, signal 0/2000 (executing program)
2025/08/29 11:54:16 fetching corpus: 50, signal 27150/30577 (executing program)
2025/08/29 11:54:16 fetching corpus: 100, signal 36824/41695 (executing program)
2025/08/29 11:54:16 fetching corpus: 150, signal 42271/48524 (executing program)
2025/08/29 11:54:16 fetching corpus: 200, signal 46587/54186 (executing program)
2025/08/29 11:54:16 fetching corpus: 250, signal 53639/62297 (executing program)
2025/08/29 11:54:17 fetching corpus: 300, signal 57673/67479 (executing program)
2025/08/29 11:54:17 fetching corpus: 350, signal 60565/71532 (executing program)
2025/08/29 11:54:17 fetching corpus: 400, signal 63357/75437 (executing program)
2025/08/29 11:54:17 fetching corpus: 450, signal 65650/78801 (executing program)
2025/08/29 11:54:17 fetching corpus: 500, signal 69431/83420 (executing program)
2025/08/29 11:54:17 fetching corpus: 550, signal 72068/86977 (executing program)
2025/08/29 11:54:17 fetching corpus: 600, signal 74650/90464 (executing program)
2025/08/29 11:54:17 fetching corpus: 650, signal 76478/93262 (executing program)
2025/08/29 11:54:17 fetching corpus: 700, signal 78410/96114 (executing program)
2025/08/29 11:54:17 fetching corpus: 750, signal 81354/99797 (executing program)
2025/08/29 11:54:17 fetching corpus: 800, signal 82891/102232 (executing program)
2025/08/29 11:54:17 fetching corpus: 850, signal 83919/104228 (executing program)
2025/08/29 11:54:17 fetching corpus: 900, signal 85522/106630 (executing program)
2025/08/29 11:54:17 fetching corpus: 950, signal 87957/109646 (executing program)
2025/08/29 11:54:18 fetching corpus: 1000, signal 90057/112390 (executing program)
2025/08/29 11:54:18 fetching corpus: 1050, signal 91482/114545 (executing program)
2025/08/29 11:54:18 fetching corpus: 1100, signal 93310/117032 (executing program)
2025/08/29 11:54:18 fetching corpus: 1150, signal 95263/119493 (executing program)
2025/08/29 11:54:18 fetching corpus: 1200, signal 97716/122260 (executing program)
2025/08/29 11:54:18 fetching corpus: 1250, signal 99458/124518 (executing program)
2025/08/29 11:54:18 fetching corpus: 1300, signal 100950/126599 (executing program)
2025/08/29 11:54:18 fetching corpus: 1350, signal 102172/128430 (executing program)
2025/08/29 11:54:18 fetching corpus: 1400, signal 103921/130666 (executing program)
2025/08/29 11:54:18 fetching corpus: 1450, signal 105382/132537 (executing program)
2025/08/29 11:54:18 fetching corpus: 1500, signal 106844/134440 (executing program)
2025/08/29 11:54:19 fetching corpus: 1550, signal 107752/135897 (executing program)
2025/08/29 11:54:19 fetching corpus: 1600, signal 108626/137388 (executing program)
2025/08/29 11:54:19 fetching corpus: 1650, signal 110405/139414 (executing program)
2025/08/29 11:54:19 fetching corpus: 1700, signal 111616/141088 (executing program)
2025/08/29 11:54:19 fetching corpus: 1750, signal 113016/142854 (executing program)
2025/08/29 11:54:19 fetching corpus: 1800, signal 114353/144502 (executing program)
2025/08/29 11:54:19 fetching corpus: 1850, signal 115121/145725 (executing program)
2025/08/29 11:54:19 fetching corpus: 1900, signal 117632/148056 (executing program)
2025/08/29 11:54:19 fetching corpus: 1950, signal 118595/149396 (executing program)
2025/08/29 11:54:19 fetching corpus: 2000, signal 119407/150626 (executing program)
2025/08/29 11:54:20 fetching corpus: 2050, signal 121359/152472 (executing program)
2025/08/29 11:54:20 fetching corpus: 2100, signal 122362/153775 (executing program)
2025/08/29 11:54:20 fetching corpus: 2150, signal 122980/154810 (executing program)
2025/08/29 11:54:20 fetching corpus: 2200, signal 124071/156071 (executing program)
2025/08/29 11:54:20 fetching corpus: 2250, signal 125171/157335 (executing program)
2025/08/29 11:54:20 fetching corpus: 2300, signal 126097/158546 (executing program)
2025/08/29 11:54:20 fetching corpus: 2350, signal 126886/159639 (executing program)
2025/08/29 11:54:20 fetching corpus: 2400, signal 127933/160859 (executing program)
2025/08/29 11:54:20 fetching corpus: 2450, signal 128681/161866 (executing program)
2025/08/29 11:54:20 fetching corpus: 2500, signal 129416/162943 (executing program)
2025/08/29 11:54:21 fetching corpus: 2550, signal 130463/164025 (executing program)
2025/08/29 11:54:21 fetching corpus: 2600, signal 131175/165006 (executing program)
2025/08/29 11:54:21 fetching corpus: 2650, signal 131966/166016 (executing program)
2025/08/29 11:54:21 fetching corpus: 2700, signal 133013/167052 (executing program)
2025/08/29 11:54:21 fetching corpus: 2750, signal 133672/167916 (executing program)
2025/08/29 11:54:21 fetching corpus: 2800, signal 134396/168816 (executing program)
2025/08/29 11:54:21 fetching corpus: 2850, signal 135467/169861 (executing program)
2025/08/29 11:54:21 fetching corpus: 2900, signal 136050/170704 (executing program)
2025/08/29 11:54:21 fetching corpus: 2950, signal 136738/171556 (executing program)
2025/08/29 11:54:21 fetching corpus: 3000, signal 137532/172460 (executing program)
2025/08/29 11:54:21 fetching corpus: 3050, signal 138187/173278 (executing program)
2025/08/29 11:54:21 fetching corpus: 3100, signal 138827/174075 (executing program)
2025/08/29 11:54:22 fetching corpus: 3150, signal 139511/174884 (executing program)
2025/08/29 11:54:22 fetching corpus: 3200, signal 140175/175672 (executing program)
2025/08/29 11:54:22 fetching corpus: 3250, signal 141106/176550 (executing program)
2025/08/29 11:54:22 fetching corpus: 3300, signal 141634/177219 (executing program)
2025/08/29 11:54:22 fetching corpus: 3350, signal 142335/177959 (executing program)
2025/08/29 11:54:22 fetching corpus: 3400, signal 142990/178687 (executing program)
2025/08/29 11:54:22 fetching corpus: 3450, signal 143762/179445 (executing program)
2025/08/29 11:54:22 fetching corpus: 3500, signal 144805/180203 (executing program)
2025/08/29 11:54:22 fetching corpus: 3550, signal 145387/180885 (executing program)
2025/08/29 11:54:22 fetching corpus: 3600, signal 146160/181577 (executing program)
2025/08/29 11:54:23 fetching corpus: 3650, signal 146828/182185 (executing program)
2025/08/29 11:54:23 fetching corpus: 3700, signal 147360/182784 (executing program)
2025/08/29 11:54:23 fetching corpus: 3750, signal 147796/183424 (executing program)
2025/08/29 11:54:23 fetching corpus: 3800, signal 148367/184101 (executing program)
2025/08/29 11:54:23 fetching corpus: 3850, signal 148824/184662 (executing program)
2025/08/29 11:54:23 fetching corpus: 3900, signal 149373/185218 (executing program)
2025/08/29 11:54:23 fetching corpus: 3950, signal 149833/185705 (executing program)
2025/08/29 11:54:23 fetching corpus: 4000, signal 150184/186196 (executing program)
2025/08/29 11:54:23 fetching corpus: 4050, signal 150730/186716 (executing program)
2025/08/29 11:54:23 fetching corpus: 4100, signal 151413/187243 (executing program)
2025/08/29 11:54:23 fetching corpus: 4150, signal 152137/187766 (executing program)
2025/08/29 11:54:23 fetching corpus: 4200, signal 152557/188267 (executing program)
2025/08/29 11:54:24 fetching corpus: 4250, signal 153225/188735 (executing program)
2025/08/29 11:54:24 fetching corpus: 4300, signal 153583/189189 (executing program)
2025/08/29 11:54:24 fetching corpus: 4350, signal 154243/189653 (executing program)
2025/08/29 11:54:24 fetching corpus: 4400, signal 154717/190087 (executing program)
2025/08/29 11:54:24 fetching corpus: 4450, signal 155173/190519 (executing program)
2025/08/29 11:54:24 fetching corpus: 4500, signal 155656/190949 (executing program)
2025/08/29 11:54:24 fetching corpus: 4550, signal 156126/191340 (executing program)
2025/08/29 11:54:24 fetching corpus: 4600, signal 156519/191763 (executing program)
2025/08/29 11:54:24 fetching corpus: 4650, signal 157159/191991 (executing program)
2025/08/29 11:54:24 fetching corpus: 4700, signal 157442/192024 (executing program)
2025/08/29 11:54:24 fetching corpus: 4750, signal 157963/192058 (executing program)
2025/08/29 11:54:24 fetching corpus: 4800, signal 158284/192120 (executing program)
2025/08/29 11:54:25 fetching corpus: 4850, signal 159076/192213 (executing program)
2025/08/29 11:54:25 fetching corpus: 4900, signal 159396/192216 (executing program)
2025/08/29 11:54:25 fetching corpus: 4950, signal 159836/192231 (executing program)
2025/08/29 11:54:25 fetching corpus: 5000, signal 160256/192264 (executing program)
2025/08/29 11:54:25 fetching corpus: 5050, signal 160674/192274 (executing program)
2025/08/29 11:54:25 fetching corpus: 5100, signal 161159/192307 (executing program)
2025/08/29 11:54:25 fetching corpus: 5150, signal 161548/192351 (executing program)
2025/08/29 11:54:25 fetching corpus: 5200, signal 162153/192379 (executing program)
2025/08/29 11:54:25 fetching corpus: 5250, signal 162466/192389 (executing program)
2025/08/29 11:54:25 fetching corpus: 5300, signal 163105/192395 (executing program)
2025/08/29 11:54:26 fetching corpus: 5350, signal 164934/192421 (executing program)
2025/08/29 11:54:26 fetching corpus: 5400, signal 165222/192466 (executing program)
2025/08/29 11:54:26 fetching corpus: 5450, signal 165720/192473 (executing program)
2025/08/29 11:54:26 fetching corpus: 5500, signal 166080/192480 (executing program)
2025/08/29 11:54:26 fetching corpus: 5550, signal 166376/192498 (executing program)
2025/08/29 11:54:26 fetching corpus: 5600, signal 166654/192508 (executing program)
2025/08/29 11:54:26 fetching corpus: 5650, signal 167314/192521 (executing program)
2025/08/29 11:54:26 fetching corpus: 5700, signal 167998/192574 (executing program)
2025/08/29 11:54:26 fetching corpus: 5750, signal 168455/192582 (executing program)
2025/08/29 11:54:26 fetching corpus: 5800, signal 168762/192656 (executing program)
2025/08/29 11:54:26 fetching corpus: 5850, signal 169030/192672 (executing program)
2025/08/29 11:54:26 fetching corpus: 5900, signal 169711/192685 (executing program)
2025/08/29 11:54:27 fetching corpus: 5950, signal 170012/192689 (executing program)
2025/08/29 11:54:27 fetching corpus: 6000, signal 170353/192690 (executing program)
2025/08/29 11:54:27 fetching corpus: 6050, signal 170636/192694 (executing program)
2025/08/29 11:54:27 fetching corpus: 6100, signal 170955/192703 (executing program)
2025/08/29 11:54:27 fetching corpus: 6150, signal 171325/192712 (executing program)
2025/08/29 11:54:27 fetching corpus: 6200, signal 171783/192721 (executing program)
2025/08/29 11:54:27 fetching corpus: 6250, signal 172301/192791 (executing program)
2025/08/29 11:54:27 fetching corpus: 6300, signal 172581/192793 (executing program)
2025/08/29 11:54:27 fetching corpus: 6350, signal 172875/192796 (executing program)
2025/08/29 11:54:27 fetching corpus: 6400, signal 173126/192810 (executing program)
2025/08/29 11:54:27 fetching corpus: 6450, signal 173496/192831 (executing program)
2025/08/29 11:54:28 fetching corpus: 6500, signal 173720/192855 (executing program)
2025/08/29 11:54:28 fetching corpus: 6550, signal 174159/192870 (executing program)
2025/08/29 11:54:28 fetching corpus: 6600, signal 174697/192876 (executing program)
2025/08/29 11:54:28 fetching corpus: 6650, signal 174943/192882 (executing program)
2025/08/29 11:54:28 fetching corpus: 6700, signal 175305/192884 (executing program)
2025/08/29 11:54:28 fetching corpus: 6750, signal 175671/192893 (executing program)
2025/08/29 11:54:28 fetching corpus: 6800, signal 176159/192984 (executing program)
2025/08/29 11:54:28 fetching corpus: 6850, signal 176429/192985 (executing program)
2025/08/29 11:54:28 fetching corpus: 6900, signal 176809/192986 (executing program)
2025/08/29 11:54:29 fetching corpus: 6950, signal 177149/193026 (executing program)
2025/08/29 11:54:29 fetching corpus: 7000, signal 177446/193046 (executing program)
2025/08/29 11:54:29 fetching corpus: 7050, signal 177860/193053 (executing program)
2025/08/29 11:54:29 fetching corpus: 7100, signal 178265/193054 (executing program)
2025/08/29 11:54:29 fetching corpus: 7150, signal 178654/193067 (executing program)
2025/08/29 11:54:29 fetching corpus: 7200, signal 179021/193077 (executing program)
2025/08/29 11:54:29 fetching corpus: 7250, signal 179403/193082 (executing program)
2025/08/29 11:54:29 fetching corpus: 7300, signal 179751/193089 (executing program)
2025/08/29 11:54:29 fetching corpus: 7350, signal 180096/193114 (executing program)
2025/08/29 11:54:29 fetching corpus: 7400, signal 180401/193118 (executing program)
2025/08/29 11:54:29 fetching corpus: 7450, signal 180728/193122 (executing program)
2025/08/29 11:54:29 fetching corpus: 7500, signal 181056/193130 (executing program)
2025/08/29 11:54:30 fetching corpus: 7550, signal 181390/193134 (executing program)
2025/08/29 11:54:30 fetching corpus: 7600, signal 181662/193135 (executing program)
2025/08/29 11:54:30 fetching corpus: 7650, signal 182346/193136 (executing program)
2025/08/29 11:54:30 fetching corpus: 7700, signal 183287/193142 (executing program)
2025/08/29 11:54:30 fetching corpus: 7750, signal 183547/193142 (executing program)
2025/08/29 11:54:30 fetching corpus: 7800, signal 183865/193191 (executing program)
2025/08/29 11:54:30 fetching corpus: 7850, signal 184193/193199 (executing program)
2025/08/29 11:54:30 fetching corpus: 7900, signal 184558/193210 (executing program)
2025/08/29 11:54:30 fetching corpus: 7950, signal 184786/193219 (executing program)
2025/08/29 11:54:31 fetching corpus: 8000, signal 185167/193232 (executing program)
2025/08/29 11:54:31 fetching corpus: 8050, signal 185494/193234 (executing program)
2025/08/29 11:54:31 fetching corpus: 8100, signal 185697/193246 (executing program)
2025/08/29 11:54:31 fetching corpus: 8150, signal 186089/193246 (executing program)
2025/08/29 11:54:31 fetching corpus: 8200, signal 186378/193248 (executing program)
2025/08/29 11:54:31 fetching corpus: 8250, signal 186734/193307 (executing program)
2025/08/29 11:54:31 fetching corpus: 8300, signal 186973/193315 (executing program)
2025/08/29 11:54:31 fetching corpus: 8350, signal 187176/193347 (executing program)
2025/08/29 11:54:31 fetching corpus: 8400, signal 187440/193359 (executing program)
2025/08/29 11:54:31 fetching corpus: 8450, signal 187638/193361 (executing program)
2025/08/29 11:54:31 fetching corpus: 8500, signal 187827/193373 (executing program)
2025/08/29 11:54:31 fetching corpus: 8550, signal 188051/193376 (executing program)
2025/08/29 11:54:31 fetching corpus: 8600, signal 188291/193378 (executing program)
2025/08/29 11:54:32 fetching corpus: 8650, signal 188581/193389 (executing program)
2025/08/29 11:54:32 fetching corpus: 8700, signal 188837/193389 (executing program)
2025/08/29 11:54:32 fetching corpus: 8750, signal 189067/193391 (executing program)
2025/08/29 11:54:32 fetching corpus: 8800, signal 189309/193391 (executing program)
2025/08/29 11:54:32 fetching corpus: 8850, signal 189882/193395 (executing program)
2025/08/29 11:54:32 fetching corpus: 8868, signal 189990/193425 (executing program)
2025/08/29 11:54:32 fetching corpus: 8868, signal 189990/193425 (executing program)
2025/08/29 11:54:34 starting 8 fuzzer processes
11:54:34 executing program 0:
ioperm(0x0, 0x7, 0x1)
clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
11:54:34 executing program 1:
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58)
11:54:34 executing program 7:
prctl$PR_SET_MM(0x25, 0xf0ff1f00000000, &(0x7f0000ffc000/0x2000)=nil)
11:54:34 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
11:54:34 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xcc0c2, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4)
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
madvise(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1)
mlock2(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0)
[ 79.538474] audit: type=1400 audit(1756468474.948:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
11:54:34 executing program 4:
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed}}}, 0x9)
11:54:34 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000500)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb03", 0x21, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000240)=ANY=[])
11:54:35 executing program 6:
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e365d99dfc335cf588132eba1a51d12f95180d319ee1e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab32e07ac5000000000000000032", 0x51)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'})
ioctl$TUNSETOFFLOAD(r0, 0x800454e0, 0x0)
[ 80.692662] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 80.695300] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 80.697812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 80.703911] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 80.712491] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 80.812942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 80.816353] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 80.817948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 80.829263] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 80.833212] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 80.880941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 80.886027] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 80.888004] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 80.892838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 80.894537] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 80.903894] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 80.904912] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 80.905552] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 80.906492] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 80.907220] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 80.911407] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 80.912865] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 80.917398] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 80.919542] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 80.922580] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 80.925364] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 80.927376] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 80.928581] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 80.933403] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 80.934003] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 80.936751] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 80.942436] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 80.949017] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 80.950835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 80.955483] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 80.960423] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 80.964672] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 80.972930] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 80.980007] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 80.983336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 82.787558] Bluetooth: hci0: command tx timeout
[ 82.850172] Bluetooth: hci1: command tx timeout
[ 82.979272] Bluetooth: hci2: command tx timeout
[ 83.043195] Bluetooth: hci6: command tx timeout
[ 83.043327] Bluetooth: hci7: command tx timeout
[ 83.043895] Bluetooth: hci3: command tx timeout
[ 83.106695] Bluetooth: hci5: command tx timeout
[ 83.107424] Bluetooth: hci4: command tx timeout
[ 84.834145] Bluetooth: hci0: command tx timeout
[ 84.898142] Bluetooth: hci1: command tx timeout
[ 85.027206] Bluetooth: hci2: command tx timeout
[ 85.092089] Bluetooth: hci3: command tx timeout
[ 85.092132] Bluetooth: hci7: command tx timeout
[ 85.092793] Bluetooth: hci6: command tx timeout
[ 85.154234] Bluetooth: hci4: command tx timeout
[ 85.155445] Bluetooth: hci5: command tx timeout
[ 86.882258] Bluetooth: hci0: command tx timeout
[ 86.947241] Bluetooth: hci1: command tx timeout
[ 87.074274] Bluetooth: hci2: command tx timeout
[ 87.138175] Bluetooth: hci7: command tx timeout
[ 87.140069] Bluetooth: hci6: command tx timeout
[ 87.140463] Bluetooth: hci3: command tx timeout
[ 87.203177] Bluetooth: hci5: command tx timeout
[ 87.203618] Bluetooth: hci4: command tx timeout
[ 88.931219] Bluetooth: hci0: command tx timeout
[ 88.995192] Bluetooth: hci1: command tx timeout
[ 89.123077] Bluetooth: hci2: command tx timeout
[ 89.187110] Bluetooth: hci3: command tx timeout
[ 89.187539] Bluetooth: hci6: command tx timeout
[ 89.187919] Bluetooth: hci7: command tx timeout
[ 89.251154] Bluetooth: hci4: command tx timeout
[ 89.251782] Bluetooth: hci5: command tx timeout
[ 124.269176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 124.269851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 124.434396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 124.435000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 124.849126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 124.849737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
11:55:20 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xcc0c2, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4)
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
madvise(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1)
mlock2(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0)
11:55:20 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xcc0c2, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4)
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
madvise(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1)
mlock2(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0)
[ 124.949395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 124.950406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
11:55:20 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xcc0c2, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4)
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
madvise(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1)
mlock2(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0)
11:55:20 executing program 3:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
getsockopt$sock_int(r0, 0x1, 0x3d, 0x0, &(0x7f0000000080))
[ 125.059697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.060559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 125.087809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.088580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
11:55:20 executing program 3:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
getsockopt$sock_int(r0, 0x1, 0x3d, 0x0, &(0x7f0000000080))
11:55:20 executing program 3:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
getsockopt$sock_int(r0, 0x1, 0x3d, 0x0, &(0x7f0000000080))
[ 125.158766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.159400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
11:55:20 executing program 3:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
getsockopt$sock_int(r0, 0x1, 0x3d, 0x0, &(0x7f0000000080))
[ 125.251437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.252154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
11:55:20 executing program 3:
r0 = memfd_create(&(0x7f0000000000)='{{*\x00', 0x0)
write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0x649)
r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0)
r2 = dup2(r0, r1)
ftruncate(r2, 0x0)
write$binfmt_aout(r0, &(0x7f0000000680), 0x20)
[ 125.333509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.334182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 125.392272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.392900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 125.429223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.429847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 125.516347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.516951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 125.555853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.556446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 125.603737] loop5: detected capacity change from 0 to 140
[ 125.620218] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)!
[ 125.620988] EXT4-fs (loop5): group descriptors corrupted!
[ 125.627207] loop5: detected capacity change from 0 to 140
[ 125.630968] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)!
[ 125.631838] EXT4-fs (loop5): group descriptors corrupted!
[ 125.633558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.634256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 125.700632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.701303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 125.737954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.738645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
11:55:21 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000000000/0x2000)=nil, 0x2000)
get_mempolicy(&(0x7f0000000040), 0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, 0x2)
11:55:21 executing program 3:
r0 = memfd_create(&(0x7f0000000000)='{{*\x00', 0x0)
write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0x649)
r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0)
r2 = dup2(r0, r1)
ftruncate(r2, 0x0)
write$binfmt_aout(r0, &(0x7f0000000680), 0x20)
11:55:21 executing program 1:
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58)
11:55:21 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000500)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb03", 0x21, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000240)=ANY=[])
11:55:21 executing program 7:
r0 = syz_io_uring_setup(0x757c, &(0x7f0000003a00), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0], 0x1)
11:55:21 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
11:55:21 executing program 6:
msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
11:55:21 executing program 0:
ioperm(0x0, 0x7, 0x1)
clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
[ 126.025486] loop5: detected capacity change from 0 to 140
[ 126.032906] audit: type=1400 audit(1756468521.443:8): avc: denied { open } for pid=3917 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 126.038206] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)!
[ 126.038953] EXT4-fs (loop5): group descriptors corrupted!
[ 126.039488] audit: type=1400 audit(1756468521.443:9): avc: denied { kernel } for pid=3917 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
11:55:21 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4}, 0x1c)
11:55:21 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000500)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb03", 0x21, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000240)=ANY=[])
[ 126.168695] loop5: detected capacity change from 0 to 140
[ 126.181469] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)!
[ 126.182368] EXT4-fs (loop5): group descriptors corrupted!
11:55:21 executing program 3:
r0 = memfd_create(&(0x7f0000000000)='{{*\x00', 0x0)
write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0x649)
r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0)
r2 = dup2(r0, r1)
ftruncate(r2, 0x0)
write$binfmt_aout(r0, &(0x7f0000000680), 0x20)
11:55:21 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
11:55:21 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev}, 0x10)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000640)={@multicast2, @dev}, 0x8)
11:55:21 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
11:55:21 executing program 6:
msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
11:55:21 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000500)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb03", 0x21, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000240)=ANY=[])
11:55:21 executing program 7:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x5387, &(0x7f0000000000)={"0359f93ed59ada90d094df2f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
11:55:21 executing program 1:
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58)
11:55:21 executing program 3:
r0 = memfd_create(&(0x7f0000000000)='{{*\x00', 0x0)
write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0x649)
r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0)
r2 = dup2(r0, r1)
ftruncate(r2, 0x0)
write$binfmt_aout(r0, &(0x7f0000000680), 0x20)
11:55:21 executing program 0:
ioperm(0x0, 0x7, 0x1)
clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
[ 126.415327] loop5: detected capacity change from 0 to 140
[ 126.423971] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)!
[ 126.424839] EXT4-fs (loop5): group descriptors corrupted!
[ 126.435658] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI
[ 126.437237] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 126.438505] CPU: 1 UID: 0 PID: 3944 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 126.442055] Tainted: [W]=WARN
[ 126.443000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 126.445608] RIP: 0010:perf_tp_event+0x175/0xe70
[ 126.446733] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 126.450688] RSP: 0018:ffff888017f67780 EFLAGS: 00010012
[ 126.451967] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 126.452953] RDX: ffff888046c79b80 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 126.453945] RBP: ffff888017f679f0 R08: ffff88806cf31340 R09: ffffe8ffffd16998
[ 126.454922] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 126.455898] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000
[ 126.456885] FS: 000055555bec4400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[ 126.457997] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 126.458799] CR2: 00007fc849c74ad0 CR3: 000000001f6c0000 CR4: 0000000000350ef0
[ 126.459789] Call Trace:
[ 126.460155]
[ 126.460477] ? __ext4_journal_stop+0xe2/0x1f0
[ 126.461111] ? ext4_dirty_inode+0xf1/0x130
[ 126.461718] ? __mark_inode_dirty+0x1b7/0xd00
[ 126.462359] ? do_user_addr_fault+0x4fa/0xeb0
[ 126.462994] ? __pfx_perf_tp_event+0x10/0x10
[ 126.463620] ? lock_acquire+0x15e/0x2f0
[ 126.464182] ? __virt_addr_valid+0x1c6/0x5d0
[ 126.464812] ? find_held_lock+0x2b/0x80
[ 126.465390] ? __virt_addr_valid+0x2e8/0x5d0
[ 126.466033] ? lock_release+0xc8/0x290
[ 126.466591] ? css_rstat_updated+0x1b8/0x4d0
[ 126.467228] ? __pfx_css_rstat_updated+0x10/0x10
[ 126.467895] ? lock_is_held_type+0x9e/0x120
[ 126.468517] ? perf_trace_run_bpf_submit+0xef/0x180
[ 126.469216] ? lock_is_held_type+0x9e/0x120
[ 126.469834] perf_trace_run_bpf_submit+0xef/0x180
[ 126.470512] perf_trace_preemptirq_template+0x259/0x430
[ 126.471266] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 126.472086] ? lock_is_held_type+0x9e/0x120
[ 126.472763] ? find_held_lock+0x2b/0x80
[ 126.473463] ? try_to_wake_up+0x8ae/0x11d0
[ 126.474189] ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 126.475071] trace_irq_enable.constprop.0+0xa6/0x100
[ 126.475959] trace_hardirqs_on+0x26/0x40
[ 126.476678] _raw_spin_unlock_irqrestore+0x2c/0x50
[ 126.477562] try_to_wake_up+0x8ae/0x11d0
[ 126.478293] ? __pfx_try_to_wake_up+0x10/0x10
[ 126.479093] ? plist_del+0x122/0x270
[ 126.479694] ? find_held_lock+0x2b/0x80
[ 126.480374] ? futex_wake+0x474/0x540
[ 126.480985] wake_up_q+0xa1/0x130
[ 126.481571] futex_wake+0x47e/0x540
[ 126.482192] ? __pfx_futex_wake+0x10/0x10
[ 126.482933] ? __pfx_hrtimer_wakeup+0x10/0x10
[ 126.483692] ? lock_release+0xc8/0x290
[ 126.484324] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 126.485292] do_futex+0x26d/0x370
[ 126.485886] ? __pfx_do_futex+0x10/0x10
[ 126.486536] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 126.487384] ? read_tsc+0x9/0x20
[ 126.487980] __x64_sys_futex+0x1c9/0x4d0
[ 126.488691] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 126.489693] ? __pfx___x64_sys_futex+0x10/0x10
[ 126.490468] ? xfd_validate_state+0x55/0x180
[ 126.491214] do_syscall_64+0xbf/0x360
[ 126.491859] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 126.492713] RIP: 0033:0x7f3b84d41b19
[ 126.493336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 126.496299] RSP: 002b:00007ffd4d0c0dc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 126.497405] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3b84d41b19
[ 126.498437] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3b84e54f68
[ 126.499470] RBP: 00007f3b84e54f60 R08: 0000000000000000 R09: 0000000000000000
[ 126.500499] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3b84e59698
[ 126.501548] R13: 00007ffd4d0c0ed0 R14: 00007f3b84e54f60 R15: 000000000001ecfe
[ 126.502594]
[ 126.502943] Modules linked in:
[ 126.503426] ---[ end trace 0000000000000000 ]---
[ 126.503432] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI
[ 126.504084] RIP: 0010:perf_tp_event+0x175/0xe70
[ 126.504979] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[ 126.505631] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 126.506309] CPU: 0 UID: 0 PID: 3948 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 126.508777] RSP: 0018:ffff888017f67780 EFLAGS: 00010012
[ 126.509715] Tainted: [D]=DIE, [W]=WARN
[ 126.509715]
[ 126.510131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 126.510141] RIP: 0010:perf_tp_event+0x175/0xe70
[ 126.510667] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 126.510806] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 126.511934] RDX: ffff888046c79b80 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 126.512299] RSP: 0018:ffff88800ddbf780 EFLAGS: 00010012
[ 126.513283] RBP: ffff888017f679f0 R08: ffff88806cf31340 R09: ffffe8ffffd16998
[ 126.514709] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90005413000
[ 126.515705] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 126.516116] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190
[ 126.517087] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000
[ 126.517649] RBP: ffff88800ddbf9f0 R08: ffff88806ce31340 R09: ffffe8ffffc16998
[ 126.518630] FS: 000055555bec4400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[ 126.519182] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[ 126.519191] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000
[ 126.520153] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 126.520708] FS: 00007f307a763700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 126.521814] CR2: 00007fc849c74ad0 CR3: 000000001f6c0000 CR4: 0000000000350ef0
[ 126.522373] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 126.523353] note: syz-executor.1[3944] exited with irqs disabled
[ 126.523800] CR2: 0000001b2ce26000 CR3: 0000000013fe1000 CR4: 0000000000350ef0
[ 126.526939] Call Trace:
[ 126.527151]
[ 126.527338] ? lock_acquire+0x18c/0x2f0
[ 126.527665] ? __pfx_perf_tp_event+0x10/0x10
[ 126.528022] ? lock_release+0x1c7/0x290
[ 126.528346] ? __is_insn_slot_addr+0x140/0x290
[ 126.528720] ? kernel_text_address+0x5b/0xc0
[ 126.529076] ? lock_release+0x1c7/0x290
[ 126.529401] ? __kernel_text_address+0xd/0x40
[ 126.529773] ? unwind_get_return_address+0x59/0xa0
[ 126.530173] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 126.530612] ? lock_acquire+0x18c/0x2f0
[ 126.530933] ? lock_release+0x1c7/0x290
[ 126.531255] ? lock_acquire+0x18c/0x2f0
[ 126.531584] ? lock_acquire+0x18c/0x2f0
[ 126.531909] ? lock_release+0x1c7/0x290
[ 126.532229] ? css_rstat_updated+0x1b8/0x4d0
[ 126.532591] ? __pfx_css_rstat_updated+0x10/0x10
[ 126.532977] ? trace_pelt_se_tp+0xdf/0x130
[ 126.533316] ? perf_trace_run_bpf_submit+0xef/0x180
[ 126.533733] perf_trace_run_bpf_submit+0xef/0x180
[ 126.534125] perf_trace_preemptirq_template+0x259/0x430
[ 126.534557] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 126.535028] ? check_preempt_wakeup_fair+0x406/0x950
[ 126.535450] ? wakeup_preempt+0x140/0x2a0
[ 126.535796] ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 126.536222] trace_irq_enable.constprop.0+0xa6/0x100
[ 126.536643] trace_hardirqs_on+0x26/0x40
[ 126.536981] _raw_spin_unlock_irqrestore+0x2c/0x50
[ 126.537392] try_to_wake_up+0x8ae/0x11d0
[ 126.537742] ? __pfx_try_to_wake_up+0x10/0x10
[ 126.538116] ? plist_del+0x122/0x270
[ 126.538431] ? __futex_unqueue+0xda/0x1c0
[ 126.538778] wake_up_q+0xa1/0x130
[ 126.539076] futex_wake+0x47e/0x540
[ 126.539387] ? __pfx_futex_wake+0x10/0x10
[ 126.539738] ? __call_rcu_common.constprop.0+0x4c1/0x960
[ 126.540187] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 126.540622] ? __call_rcu_common.constprop.0+0x4c1/0x960
[ 126.541076] do_futex+0x26d/0x370
[ 126.541370] ? __fput+0x67b/0xb50
[ 126.541678] ? __pfx_do_futex+0x10/0x10
[ 126.542015] ? __fput+0x67b/0xb50
[ 126.542314] __x64_sys_futex+0x1c9/0x4d0
[ 126.542656] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 126.543150] ? fput_close_sync+0x114/0x240
[ 126.543505] ? __pfx___x64_sys_futex+0x10/0x10
[ 126.543876] ? __pfx_fput_close_sync+0x10/0x10
[ 126.544243] ? dnotify_flush+0x79/0x4c0
[ 126.544555] ? xfd_validate_state+0x55/0x180
[ 126.544914] do_syscall_64+0xbf/0x360
[ 126.545217] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 126.545632] RIP: 0033:0x7f307d1edb19
[ 126.545928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 126.547329] RSP: 002b:00007f307a763218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 126.547920] RAX: ffffffffffffffda RBX: 00007f307d300f68 RCX: 00007f307d1edb19
[ 126.548475] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f307d300f6c
[ 126.549026] RBP: 00007f307d300f60 R08: 0000000000000075 R09: 0000000000000000
[ 126.549590] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f307d300f6c
[ 126.550142] R13: 00007ffd6096462f R14: 00007f307a763300 R15: 0000000000022000
[ 126.550703]
[ 126.550891] Modules linked in:
[ 126.551154] ---[ end trace 0000000000000000 ]---
[ 126.551156] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#3] SMP KASAN NOPTI
[ 126.551519] RIP: 0010:perf_tp_event+0x175/0xe70
[ 126.553105] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 126.553465] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 126.554549] CPU: 1 UID: 0 PID: 3944 Comm: syz-executor.1 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 126.555938] RSP: 0018:ffff888017f67780 EFLAGS: 00010012
[ 126.557636] Tainted: [D]=DIE, [W]=WARN
[ 126.558039] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 126.558595] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 126.559139] RDX: ffff888046c79b80 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 126.560305] RIP: 0010:perf_tp_event+0x175/0xe70
[ 126.560854] RBP: ffff888017f679f0 R08: ffff88806cf31340 R09: ffffe8ffffd16998
[ 126.561523] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 126.562070] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 126.564675] RSP: 0018:ffff88806cf08b80 EFLAGS: 00010012
[ 126.565236] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000
[ 126.565240]
[ 126.565249] FS: 00007f307a763700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 126.566031] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 126.566591] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 126.566846] RDX: ffff888046c79b80 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 126.567476] CR2: 0000001b2ce26000 CR3: 0000000013fe1000 CR4: 0000000000350ef0
[ 126.568486] RBP: ffff88806cf08df0 R08: ffff88806cf313e8 R09: ffffe8ffffd16998
[ 126.568945] note: syz-executor.5[3948] exited with irqs disabled
[ 126.569965] R10: 0000000000000000 R11: ffff88801423b498 R12: dffffc0000000000
[ 126.573419] R13: 0000000000000014 R14: ffff88806cf313e8 R15: dffffc0000000000
[ 126.574491] FS: 000055555bec4400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[ 126.575660] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 126.576540] CR2: 00007fc849c74ad0 CR3: 000000001f6c0000 CR4: 0000000000350ef0
[ 126.577595] Call Trace:
[ 126.577982]
[ 126.578319] ? __pfx_perf_tp_event+0x10/0x10
[ 126.578982] ? enqueue_task_fair+0xded/0x1e00
[ 126.579637] ? check_preempt_wakeup_fair+0x6e/0x950
[ 126.580355] ? wakeup_preempt+0x140/0x2a0
[ 126.580951] ? lock_release+0x1c7/0x290
[ 126.581531] ? lock_release+0x1c7/0x290
[ 126.582116] ? do_raw_spin_unlock+0x53/0x220
[ 126.582759] ? _raw_spin_unlock_irqrestore+0x22/0x50
[ 126.583487] ? try_to_wake_up+0x8ae/0x11d0
[ 126.584100] ? do_raw_spin_lock+0x123/0x260
[ 126.584725] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 126.585401] ? perf_trace_run_bpf_submit+0xef/0x180
[ 126.586137] perf_trace_run_bpf_submit+0xef/0x180
[ 126.586840] perf_trace_preemptirq_template+0x259/0x430
[ 126.587610] ? read_tsc+0x9/0x20
[ 126.588108] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 126.588951] ? clockevents_program_event+0x135/0x360
[ 126.589692] ? tick_program_event+0xac/0x140
[ 126.590327] ? handle_softirqs+0x16e/0x770
[ 126.590950] trace_irq_enable.constprop.0+0xa6/0x100
[ 126.591677] trace_hardirqs_on+0x26/0x40
[ 126.592257] handle_softirqs+0x16e/0x770
[ 126.592852] __irq_exit_rcu+0xc4/0x100
[ 126.593426] irq_exit_rcu+0x9/0x20
[ 126.593945] sysvec_apic_timer_interrupt+0x70/0x80
[ 126.594656]
[ 126.594987]
[ 126.595310] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 126.596028] RIP: 0010:make_task_dead+0xa2/0x3b0
[ 126.596702] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de
[ 126.599589] RSP: 0018:ffff888017f67f28 EFLAGS: 00000246
[ 126.600456] RAX: 0000000000000001 RBX: ffff888046c79b80 RCX: ffffffff817c2b86
[ 126.601616] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234
[ 126.602766] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000
[ 126.603922] R10: ffffffff8643ac57 R11: 30303020203a5346 R12: ffff888046c79b80
[ 126.605085] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000
[ 126.606260] ? trace_irq_enable.constprop.0+0x26/0x100
[ 126.607112] ? make_task_dead+0x214/0x3b0
[ 126.607798] ? make_task_dead+0x214/0x3b0
[ 126.608484] ? do_syscall_64+0xbf/0x360
[ 126.609136] rewind_stack_and_make_dead+0x16/0x20
[ 126.609950] RIP: 0033:0x7f3b84d41b19
[ 126.610562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 126.613483] RSP: 002b:00007ffd4d0c0dc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 126.614716] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3b84d41b19
[ 126.615860] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3b84e54f68
[ 126.616993] RBP: 00007f3b84e54f60 R08: 0000000000000000 R09: 0000000000000000
[ 126.618140] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3b84e59698
[ 126.619279] R13: 00007ffd4d0c0ed0 R14: 00007f3b84e54f60 R15: 000000000001ecfe
[ 126.620425]
[ 126.620810] Modules linked in:
[ 126.621345] ---[ end trace 0000000000000000 ]---
[ 126.621348] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#4] SMP KASAN NOPTI
[ 126.622105] RIP: 0010:perf_tp_event+0x175/0xe70
[ 126.622985] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[ 126.623728] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 126.624402] CPU: 0 UID: 0 PID: 3948 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 126.627308] RSP: 0018:ffff888017f67780 EFLAGS: 00010012
[ 126.628227] Tainted: [D]=DIE, [W]=WARN
[ 126.628229]
[ 126.628239] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 126.628644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 126.628653] RIP: 0010:perf_tp_event+0x175/0xe70
[ 126.629266] RDX: ffff888046c79b80 RSI: ffffffff818995b7 RDI: 0000000000000191
[ 126.629404] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 126.630556] RBP: ffff888017f679f0 R08: ffff88806cf31340 R09: ffffe8ffffd16998
[ 126.631192] RSP: 0018:ffff88806ce08b80 EFLAGS: 00010012
[ 126.631934] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 126.632487] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[ 126.632497] RDX: ffff8880199b5280 RSI: ffffffff818995b7 RDI: 0000000100000190
[ 126.635392] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000
[ 126.635945] RBP: ffff88806ce08df0 R08: ffff88806ce313e8 R09: ffffe8ffffc16998
[ 126.635955] R10: 0000000000000000 R11: ffff888014238498 R12: dffffc0000000000
[ 126.636786] FS: 000055555bec4400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[ 126.637335] R13: 0000000000000014 R14: ffff88806ce313e8 R15: dffffc0000000000
[ 126.637347] FS: 00007f307a763700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[ 126.638484] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 126.639036] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 126.640173] CR2: 00007fc849c74ad0 CR3: 000000001f6c0000 CR4: 0000000000350ef0
[ 126.640727] CR2: 0000001b2ce26000 CR3: 0000000013fe1000 CR4: 0000000000350ef0
[ 126.641821] Kernel panic - not syncing: Fatal exception in interrupt
[ 127.752437] Shutting down cpus with NMI
[ 127.760022] Kernel Offset: disabled
[ 127.760546] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---
VM DIAGNOSIS:
11:55:22 Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84bdec0e RDX=fffffbfff0f0ec09
RSI=0000000000000004 RDI=ffffffff87876044 RBP=ffffffff87876044 RSP=ffff88800ddbf530
R8 =0000000000000000 R9 =fffffbfff0f0ec08 R10=ffffffff87876047 R11=202c746c75616620
R12=1ffff11001bb7ea7 R13=0000000000000007 R14=fffffbfff0f0ec08 R15=ffff88800ddbf568
RIP=ffffffff84bdeda0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f307a763700 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2ce26000 CR3=0000000013fe1000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=65756e69746e6f633d73726f7272652c XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=ffffffffffffffffffffffffffffffff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888017f670f0
R8 =0000000000000000 R9 =ffffed1001804046 R10=0000000000000031 R11=313030203a505352
R12=0000000000000031 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0
RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055555bec4400 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe0600000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc849c74ad0 CR3=000000001f6c0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff000000000000ff0000000000ff00 XMM01=630033656e6f6c6300656e6f6c630065
XMM02=00010000000000000000000000000000 XMM03=00007f3b84e287c800007f3b84e287c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000