Warning: Permanently added '[localhost]:4268' (ECDSA) to the list of known hosts. 2025/08/29 12:10:46 fuzzer started 2025/08/29 12:10:46 dialing manager at localhost:43077 syzkaller login: [ 55.904384] cgroup: Unknown subsys name 'net' [ 56.110482] cgroup: Unknown subsys name 'cpuset' [ 56.150623] cgroup: Unknown subsys name 'rlimit' 2025/08/29 12:10:57 syscalls: 2214 2025/08/29 12:10:57 code coverage: enabled 2025/08/29 12:10:57 comparison tracing: enabled 2025/08/29 12:10:57 extra coverage: enabled 2025/08/29 12:10:57 setuid sandbox: enabled 2025/08/29 12:10:57 namespace sandbox: enabled 2025/08/29 12:10:57 Android sandbox: enabled 2025/08/29 12:10:57 fault injection: enabled 2025/08/29 12:10:57 leak checking: enabled 2025/08/29 12:10:57 net packet injection: enabled 2025/08/29 12:10:57 net device setup: enabled 2025/08/29 12:10:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 12:10:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 12:10:57 USB emulation: enabled 2025/08/29 12:10:57 hci packet injection: enabled 2025/08/29 12:10:57 wifi device emulation: enabled 2025/08/29 12:10:57 802.15.4 emulation: enabled 2025/08/29 12:10:57 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 12:10:57 fetching corpus: 50, signal 22456/25984 (executing program) 2025/08/29 12:10:57 fetching corpus: 100, signal 29343/34407 (executing program) 2025/08/29 12:10:57 fetching corpus: 150, signal 38859/45232 (executing program) 2025/08/29 12:10:58 fetching corpus: 200, signal 50184/57552 (executing program) 2025/08/29 12:10:58 fetching corpus: 250, signal 54622/63186 (executing program) 2025/08/29 12:10:58 fetching corpus: 300, signal 58769/68486 (executing program) 2025/08/29 12:10:58 fetching corpus: 350, signal 65400/75966 (executing program) 2025/08/29 12:10:58 fetching corpus: 400, signal 69941/81400 (executing program) 2025/08/29 12:10:58 fetching corpus: 450, signal 73559/85902 (executing program) 2025/08/29 12:10:58 fetching corpus: 500, signal 75779/89153 (executing program) 2025/08/29 12:10:58 fetching corpus: 550, signal 78136/92454 (executing program) 2025/08/29 12:10:58 fetching corpus: 600, signal 80486/95682 (executing program) 2025/08/29 12:10:58 fetching corpus: 650, signal 83650/99558 (executing program) 2025/08/29 12:10:59 fetching corpus: 700, signal 84913/101745 (executing program) 2025/08/29 12:10:59 fetching corpus: 750, signal 87330/104898 (executing program) 2025/08/29 12:10:59 fetching corpus: 800, signal 88150/106647 (executing program) 2025/08/29 12:10:59 fetching corpus: 850, signal 90278/109471 (executing program) 2025/08/29 12:10:59 fetching corpus: 900, signal 92152/112020 (executing program) 2025/08/29 12:10:59 fetching corpus: 950, signal 93614/114255 (executing program) 2025/08/29 12:10:59 fetching corpus: 1000, signal 94768/116197 (executing program) 2025/08/29 12:10:59 fetching corpus: 1050, signal 96212/118317 (executing program) 2025/08/29 12:10:59 fetching corpus: 1100, signal 97333/120180 (executing program) 2025/08/29 12:10:59 fetching corpus: 1150, signal 99062/122466 (executing program) 2025/08/29 12:10:59 fetching corpus: 1200, signal 99835/124007 (executing program) 2025/08/29 12:11:00 fetching corpus: 1250, signal 100813/125730 (executing program) 2025/08/29 12:11:00 fetching corpus: 1300, signal 102025/127520 (executing program) 2025/08/29 12:11:00 fetching corpus: 1350, signal 103354/129409 (executing program) 2025/08/29 12:11:00 fetching corpus: 1400, signal 104940/131395 (executing program) 2025/08/29 12:11:00 fetching corpus: 1450, signal 106022/133015 (executing program) 2025/08/29 12:11:00 fetching corpus: 1500, signal 107613/135000 (executing program) 2025/08/29 12:11:00 fetching corpus: 1550, signal 109422/137079 (executing program) 2025/08/29 12:11:00 fetching corpus: 1600, signal 111494/139288 (executing program) 2025/08/29 12:11:00 fetching corpus: 1650, signal 112826/140973 (executing program) 2025/08/29 12:11:00 fetching corpus: 1700, signal 113817/142427 (executing program) 2025/08/29 12:11:01 fetching corpus: 1750, signal 114838/143868 (executing program) 2025/08/29 12:11:01 fetching corpus: 1800, signal 116870/146046 (executing program) 2025/08/29 12:11:01 fetching corpus: 1850, signal 117560/147235 (executing program) 2025/08/29 12:11:01 fetching corpus: 1900, signal 118890/148832 (executing program) 2025/08/29 12:11:01 fetching corpus: 1950, signal 119641/149992 (executing program) 2025/08/29 12:11:01 fetching corpus: 2000, signal 120358/151132 (executing program) 2025/08/29 12:11:01 fetching corpus: 2050, signal 121467/152486 (executing program) 2025/08/29 12:11:01 fetching corpus: 2100, signal 122395/153766 (executing program) 2025/08/29 12:11:01 fetching corpus: 2150, signal 123250/154976 (executing program) 2025/08/29 12:11:01 fetching corpus: 2200, signal 124416/156349 (executing program) 2025/08/29 12:11:01 fetching corpus: 2250, signal 124958/157336 (executing program) 2025/08/29 12:11:01 fetching corpus: 2300, signal 126111/158600 (executing program) 2025/08/29 12:11:02 fetching corpus: 2350, signal 126828/159674 (executing program) 2025/08/29 12:11:02 fetching corpus: 2400, signal 127627/160762 (executing program) 2025/08/29 12:11:02 fetching corpus: 2450, signal 129232/162231 (executing program) 2025/08/29 12:11:02 fetching corpus: 2500, signal 130085/163304 (executing program) 2025/08/29 12:11:02 fetching corpus: 2550, signal 130677/164202 (executing program) 2025/08/29 12:11:02 fetching corpus: 2600, signal 131614/165304 (executing program) 2025/08/29 12:11:02 fetching corpus: 2650, signal 132602/166376 (executing program) 2025/08/29 12:11:02 fetching corpus: 2700, signal 133405/167358 (executing program) 2025/08/29 12:11:02 fetching corpus: 2750, signal 134152/168329 (executing program) 2025/08/29 12:11:02 fetching corpus: 2800, signal 135124/169341 (executing program) 2025/08/29 12:11:03 fetching corpus: 2850, signal 135828/170216 (executing program) 2025/08/29 12:11:03 fetching corpus: 2900, signal 136530/171085 (executing program) 2025/08/29 12:11:03 fetching corpus: 2950, signal 137251/171921 (executing program) 2025/08/29 12:11:03 fetching corpus: 3000, signal 137980/172794 (executing program) 2025/08/29 12:11:03 fetching corpus: 3050, signal 138646/173584 (executing program) 2025/08/29 12:11:03 fetching corpus: 3100, signal 139645/174484 (executing program) 2025/08/29 12:11:03 fetching corpus: 3150, signal 140190/175235 (executing program) 2025/08/29 12:11:03 fetching corpus: 3200, signal 140762/175928 (executing program) 2025/08/29 12:11:03 fetching corpus: 3250, signal 141568/176723 (executing program) 2025/08/29 12:11:03 fetching corpus: 3300, signal 142182/177476 (executing program) 2025/08/29 12:11:04 fetching corpus: 3350, signal 142674/178152 (executing program) 2025/08/29 12:11:04 fetching corpus: 3400, signal 143311/178860 (executing program) 2025/08/29 12:11:04 fetching corpus: 3450, signal 144055/179633 (executing program) 2025/08/29 12:11:04 fetching corpus: 3500, signal 144661/180301 (executing program) 2025/08/29 12:11:04 fetching corpus: 3550, signal 145274/180976 (executing program) 2025/08/29 12:11:04 fetching corpus: 3600, signal 145848/181614 (executing program) 2025/08/29 12:11:04 fetching corpus: 3650, signal 146652/182298 (executing program) 2025/08/29 12:11:04 fetching corpus: 3700, signal 147147/182918 (executing program) 2025/08/29 12:11:04 fetching corpus: 3750, signal 147745/183510 (executing program) 2025/08/29 12:11:04 fetching corpus: 3800, signal 148283/184066 (executing program) 2025/08/29 12:11:05 fetching corpus: 3850, signal 149075/184735 (executing program) 2025/08/29 12:11:05 fetching corpus: 3900, signal 149754/185302 (executing program) 2025/08/29 12:11:05 fetching corpus: 3950, signal 150407/185906 (executing program) 2025/08/29 12:11:05 fetching corpus: 4000, signal 151004/186447 (executing program) 2025/08/29 12:11:05 fetching corpus: 4050, signal 151546/186948 (executing program) 2025/08/29 12:11:05 fetching corpus: 4100, signal 151986/187444 (executing program) 2025/08/29 12:11:05 fetching corpus: 4150, signal 152429/187949 (executing program) 2025/08/29 12:11:05 fetching corpus: 4200, signal 153052/188593 (executing program) 2025/08/29 12:11:05 fetching corpus: 4250, signal 153486/189027 (executing program) 2025/08/29 12:11:05 fetching corpus: 4300, signal 153981/189457 (executing program) 2025/08/29 12:11:05 fetching corpus: 4350, signal 154428/189876 (executing program) 2025/08/29 12:11:06 fetching corpus: 4400, signal 154793/190334 (executing program) 2025/08/29 12:11:06 fetching corpus: 4450, signal 155210/190771 (executing program) 2025/08/29 12:11:06 fetching corpus: 4500, signal 155826/191206 (executing program) 2025/08/29 12:11:06 fetching corpus: 4550, signal 156608/191642 (executing program) 2025/08/29 12:11:06 fetching corpus: 4600, signal 156996/192052 (executing program) 2025/08/29 12:11:06 fetching corpus: 4650, signal 157557/192316 (executing program) 2025/08/29 12:11:06 fetching corpus: 4700, signal 157897/192317 (executing program) 2025/08/29 12:11:06 fetching corpus: 4750, signal 158459/192333 (executing program) 2025/08/29 12:11:06 fetching corpus: 4800, signal 158970/192333 (executing program) 2025/08/29 12:11:06 fetching corpus: 4850, signal 159384/192335 (executing program) 2025/08/29 12:11:06 fetching corpus: 4900, signal 159870/192375 (executing program) 2025/08/29 12:11:07 fetching corpus: 4950, signal 160265/192381 (executing program) 2025/08/29 12:11:07 fetching corpus: 5000, signal 160678/192419 (executing program) 2025/08/29 12:11:07 fetching corpus: 5050, signal 161186/192420 (executing program) 2025/08/29 12:11:07 fetching corpus: 5100, signal 161512/192457 (executing program) 2025/08/29 12:11:07 fetching corpus: 5150, signal 161970/192487 (executing program) 2025/08/29 12:11:07 fetching corpus: 5200, signal 162309/192553 (executing program) 2025/08/29 12:11:07 fetching corpus: 5250, signal 162884/192553 (executing program) 2025/08/29 12:11:07 fetching corpus: 5300, signal 163292/192648 (executing program) 2025/08/29 12:11:07 fetching corpus: 5350, signal 163695/192661 (executing program) 2025/08/29 12:11:07 fetching corpus: 5400, signal 164069/192665 (executing program) 2025/08/29 12:11:07 fetching corpus: 5450, signal 164431/192695 (executing program) 2025/08/29 12:11:08 fetching corpus: 5500, signal 164936/192709 (executing program) 2025/08/29 12:11:08 fetching corpus: 5550, signal 165272/192738 (executing program) 2025/08/29 12:11:08 fetching corpus: 5600, signal 165702/192769 (executing program) 2025/08/29 12:11:08 fetching corpus: 5650, signal 166155/192793 (executing program) 2025/08/29 12:11:08 fetching corpus: 5700, signal 166608/192799 (executing program) 2025/08/29 12:11:08 fetching corpus: 5750, signal 168515/192820 (executing program) 2025/08/29 12:11:08 fetching corpus: 5800, signal 168808/192839 (executing program) 2025/08/29 12:11:08 fetching corpus: 5850, signal 169187/192876 (executing program) 2025/08/29 12:11:08 fetching corpus: 5900, signal 169639/192882 (executing program) 2025/08/29 12:11:08 fetching corpus: 5950, signal 170013/192886 (executing program) 2025/08/29 12:11:08 fetching corpus: 6000, signal 170273/192900 (executing program) 2025/08/29 12:11:09 fetching corpus: 6050, signal 170785/192904 (executing program) 2025/08/29 12:11:09 fetching corpus: 6100, signal 171267/192951 (executing program) 2025/08/29 12:11:09 fetching corpus: 6150, signal 171770/192954 (executing program) 2025/08/29 12:11:09 fetching corpus: 6200, signal 172316/193031 (executing program) 2025/08/29 12:11:09 fetching corpus: 6250, signal 172540/193047 (executing program) 2025/08/29 12:11:09 fetching corpus: 6300, signal 172827/193055 (executing program) 2025/08/29 12:11:09 fetching corpus: 6350, signal 173437/193062 (executing program) 2025/08/29 12:11:09 fetching corpus: 6400, signal 173764/193066 (executing program) 2025/08/29 12:11:09 fetching corpus: 6450, signal 174034/193069 (executing program) 2025/08/29 12:11:09 fetching corpus: 6500, signal 174294/193078 (executing program) 2025/08/29 12:11:09 fetching corpus: 6550, signal 174650/193081 (executing program) 2025/08/29 12:11:09 fetching corpus: 6600, signal 175013/193090 (executing program) 2025/08/29 12:11:10 fetching corpus: 6650, signal 175378/193099 (executing program) 2025/08/29 12:11:10 fetching corpus: 6700, signal 175821/193169 (executing program) 2025/08/29 12:11:10 fetching corpus: 6750, signal 176131/193171 (executing program) 2025/08/29 12:11:10 fetching corpus: 6800, signal 176375/193177 (executing program) 2025/08/29 12:11:10 fetching corpus: 6850, signal 176648/193188 (executing program) 2025/08/29 12:11:10 fetching corpus: 6900, signal 176890/193206 (executing program) 2025/08/29 12:11:10 fetching corpus: 6950, signal 177262/193236 (executing program) 2025/08/29 12:11:10 fetching corpus: 7000, signal 177642/193240 (executing program) 2025/08/29 12:11:10 fetching corpus: 7050, signal 178085/193250 (executing program) 2025/08/29 12:11:10 fetching corpus: 7100, signal 178345/193250 (executing program) 2025/08/29 12:11:10 fetching corpus: 7150, signal 178648/193259 (executing program) 2025/08/29 12:11:11 fetching corpus: 7200, signal 179140/193350 (executing program) 2025/08/29 12:11:11 fetching corpus: 7250, signal 179475/193353 (executing program) 2025/08/29 12:11:11 fetching corpus: 7300, signal 179737/193354 (executing program) 2025/08/29 12:11:11 fetching corpus: 7350, signal 180138/193355 (executing program) 2025/08/29 12:11:11 fetching corpus: 7400, signal 180495/193403 (executing program) 2025/08/29 12:11:11 fetching corpus: 7450, signal 180683/193416 (executing program) 2025/08/29 12:11:11 fetching corpus: 7500, signal 181197/193422 (executing program) 2025/08/29 12:11:11 fetching corpus: 7550, signal 181485/193427 (executing program) 2025/08/29 12:11:11 fetching corpus: 7600, signal 181865/193440 (executing program) 2025/08/29 12:11:11 fetching corpus: 7650, signal 182141/193448 (executing program) 2025/08/29 12:11:12 fetching corpus: 7700, signal 182592/193453 (executing program) 2025/08/29 12:11:12 fetching corpus: 7750, signal 182847/193469 (executing program) 2025/08/29 12:11:12 fetching corpus: 7800, signal 183154/193480 (executing program) 2025/08/29 12:11:12 fetching corpus: 7850, signal 183530/193529 (executing program) 2025/08/29 12:11:12 fetching corpus: 7900, signal 183890/193533 (executing program) 2025/08/29 12:11:12 fetching corpus: 7950, signal 184227/193542 (executing program) 2025/08/29 12:11:12 fetching corpus: 8000, signal 184472/193545 (executing program) 2025/08/29 12:11:12 fetching corpus: 8050, signal 184759/193545 (executing program) 2025/08/29 12:11:12 fetching corpus: 8100, signal 185585/193553 (executing program) 2025/08/29 12:11:12 fetching corpus: 8150, signal 185932/193554 (executing program) 2025/08/29 12:11:13 fetching corpus: 8200, signal 186217/193555 (executing program) 2025/08/29 12:11:13 fetching corpus: 8250, signal 186511/193604 (executing program) 2025/08/29 12:11:13 fetching corpus: 8300, signal 186811/193611 (executing program) 2025/08/29 12:11:13 fetching corpus: 8350, signal 187157/193624 (executing program) 2025/08/29 12:11:13 fetching corpus: 8400, signal 187424/193630 (executing program) 2025/08/29 12:11:13 fetching corpus: 8450, signal 187779/193643 (executing program) 2025/08/29 12:11:13 fetching corpus: 8500, signal 188093/193655 (executing program) 2025/08/29 12:11:13 fetching corpus: 8550, signal 188271/193658 (executing program) 2025/08/29 12:11:13 fetching corpus: 8600, signal 188640/193658 (executing program) 2025/08/29 12:11:13 fetching corpus: 8650, signal 188989/193679 (executing program) 2025/08/29 12:11:13 fetching corpus: 8700, signal 189241/193722 (executing program) 2025/08/29 12:11:13 fetching corpus: 8750, signal 189437/193730 (executing program) 2025/08/29 12:11:13 fetching corpus: 8800, signal 189654/193768 (executing program) 2025/08/29 12:11:14 fetching corpus: 8850, signal 189900/193775 (executing program) 2025/08/29 12:11:14 fetching corpus: 8900, signal 190114/193778 (executing program) 2025/08/29 12:11:14 fetching corpus: 8927, signal 190195/193780 (executing program) 2025/08/29 12:11:14 fetching corpus: 8927, signal 190195/193780 (executing program) 2025/08/29 12:11:16 starting 8 fuzzer processes 12:11:16 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 12:11:16 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "4aafb8b83ce97b77240249d9efbf08a3ff8fafa9f335ad896c4bc6a76001f63a17723116a74d"}, 0x31) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x161c03, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)=0x800) openat(0xffffffffffffffff, 0x0, 0x674000, 0xa7) 12:11:16 executing program 6: ptrace$setsig(0x4203, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0) read(r0, &(0x7f00000012c0)=""/210, 0xd2) 12:11:16 executing program 7: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) ptrace(0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [{0x2, 0x85d1a4c154d6ab04}]}, 0x2c, 0x0) 12:11:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x7}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @loopback}, 0x1c) 12:11:16 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040), 0x4) [ 85.465538] audit: type=1400 audit(1756469476.715:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:11:16 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$packet(0x11, 0x3, 0x300) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@caif=@rfm={0x25, 0x1, "9f3f952710bf57983b69a979e373131f"}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="30a26aa0f33dc3cc3952c16405fd", 0x1000e}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="d8"], 0xd8}, 0x0) recvmmsg(r0, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) 12:11:16 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) [ 86.669151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.671994] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.676142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.681128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.685275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.731527] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.733754] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.736426] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.740705] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.743428] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.800608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.802718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.813319] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.823449] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.829379] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.874693] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.880186] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.886184] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.891195] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.892637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.893835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.898279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.901149] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.917167] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.924609] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 86.924706] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.927842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 86.928390] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.930882] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 86.936814] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 86.941829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.943825] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 86.943851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.945761] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.989060] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 86.991645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.995216] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.008172] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.024056] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.045356] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.701332] Bluetooth: hci0: command tx timeout [ 88.766552] Bluetooth: hci1: command tx timeout [ 88.893129] Bluetooth: hci2: command tx timeout [ 88.957073] Bluetooth: hci7: command tx timeout [ 89.021035] Bluetooth: hci3: command tx timeout [ 89.021396] Bluetooth: hci4: command tx timeout [ 89.022199] Bluetooth: hci5: command tx timeout [ 89.150175] Bluetooth: hci6: command tx timeout [ 90.750958] Bluetooth: hci0: command tx timeout [ 90.813979] Bluetooth: hci1: command tx timeout [ 90.941964] Bluetooth: hci2: command tx timeout [ 91.004956] Bluetooth: hci7: command tx timeout [ 91.069139] Bluetooth: hci4: command tx timeout [ 91.070582] Bluetooth: hci5: command tx timeout [ 91.070604] Bluetooth: hci3: command tx timeout [ 91.197996] Bluetooth: hci6: command tx timeout [ 92.796965] Bluetooth: hci0: command tx timeout [ 92.861015] Bluetooth: hci1: command tx timeout [ 92.989070] Bluetooth: hci2: command tx timeout [ 93.053340] Bluetooth: hci7: command tx timeout [ 93.116961] Bluetooth: hci5: command tx timeout [ 93.116980] Bluetooth: hci4: command tx timeout [ 93.117994] Bluetooth: hci3: command tx timeout [ 93.246054] Bluetooth: hci6: command tx timeout [ 94.846086] Bluetooth: hci0: command tx timeout [ 94.910017] Bluetooth: hci1: command tx timeout [ 95.038064] Bluetooth: hci2: command tx timeout [ 95.102118] Bluetooth: hci7: command tx timeout [ 95.165016] Bluetooth: hci5: command tx timeout [ 95.165043] Bluetooth: hci3: command tx timeout [ 95.165453] Bluetooth: hci4: command tx timeout [ 95.293080] Bluetooth: hci6: command tx timeout [ 124.785360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.786570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.056966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.057827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.262558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.263229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.465772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.466531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.599599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.600881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.652412] audit: type=1400 audit(1756469516.904:8): avc: denied { open } for pid=3792 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.656263] audit: type=1400 audit(1756469516.905:9): avc: denied { kernel } for pid=3792 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.725157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.725757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:11:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)=ANY=[]) [ 125.782691] EXT4-fs warning (device sda): ext4_block_to_path:105: block 1768304430 > max in inode 15981 [ 125.784478] EXT4-fs warning (device sda): ext4_block_to_path:105: block 1768304430 > max in inode 15981 12:11:57 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@subsystem='devices'}, {@name={'name', 0x3d, 'tmpfs\x00'}}]}) 12:11:57 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="bbb2066b091d42e0", 0x8, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) [ 125.853003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.853581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:11:57 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="bbb2066b091d42e0", 0x8, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 12:11:57 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="bbb2066b091d42e0", 0x8, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) [ 126.007953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.008519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:11:57 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="bbb2066b091d42e0", 0x8, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 12:11:57 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="bbb2066b091d42e0", 0x8, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 12:11:57 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="bbb2066b091d42e0", 0x8, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) [ 126.154944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.155511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.248947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.249505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.334043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.334630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.418941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.419597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.887839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.888461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.921688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.922429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.281517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.282251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.302671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.303281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:11:58 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, &(0x7f0000000640)=ANY=[]) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0}) 12:11:58 executing program 6: ptrace$setsig(0x4203, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0) read(r0, &(0x7f00000012c0)=""/210, 0xd2) 12:11:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x7}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @loopback}, 0x1c) 12:11:58 executing program 1: setresuid(0xee01, 0xee00, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x80801) 12:11:58 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) 12:11:58 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$packet(0x11, 0x3, 0x300) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@caif=@rfm={0x25, 0x1, "9f3f952710bf57983b69a979e373131f"}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="30a26aa0f33dc3cc3952c16405fd", 0x1000e}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="d8"], 0xd8}, 0x0) recvmmsg(r0, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) 12:11:58 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="bbb2066b091d42e0", 0x8, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 12:11:58 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5c000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000040)="88e167e388ed00170000000000fa1600080000000008007809140b2a3a08020000010000013059747c4d168d8c6aba3f6b81ff", 0x33, 0xb800}], 0x0, &(0x7f0000000400)) [ 127.539393] loop3: detected capacity change from 0 to 736 12:11:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1=0xe0000002, @local, @local}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@multicast2, @dev, @local}, 0xc) 12:11:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x7}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @loopback}, 0x1c) 12:11:58 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$packet(0x11, 0x3, 0x300) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@caif=@rfm={0x25, 0x1, "9f3f952710bf57983b69a979e373131f"}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="30a26aa0f33dc3cc3952c16405fd", 0x1000e}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="d8"], 0xd8}, 0x0) recvmmsg(r0, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) [ 127.608619] isofs_fill_super: root inode is not a directory. Corrupted media? 12:11:58 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) 12:11:58 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000180), 0x24, 0x0) 12:11:59 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5c000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000040)="88e167e388ed00170000000000fa1600080000000008007809140b2a3a08020000010000013059747c4d168d8c6aba3f6b81ff", 0x33, 0xb800}], 0x0, &(0x7f0000000400)) 12:11:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1=0xe0000002, @local, @local}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@multicast2, @dev, @local}, 0xc) 12:11:59 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$packet(0x11, 0x3, 0x300) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@caif=@rfm={0x25, 0x1, "9f3f952710bf57983b69a979e373131f"}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="30a26aa0f33dc3cc3952c16405fd", 0x1000e}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="d8"], 0xd8}, 0x0) recvmmsg(r0, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) 12:11:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1=0xe0000002, @local, @local}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@multicast2, @dev, @local}, 0xc) 12:11:59 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, &(0x7f0000000640)=ANY=[]) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0}) 12:11:59 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) 12:11:59 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0xc0189436, &(0x7f0000000280)={'wpan1\x00'}) 12:11:59 executing program 4: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x2840, 0x0) ioctl$CDROMRESUME(r0, 0x5319) 12:11:59 executing program 6: ptrace$setsig(0x4203, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0) read(r0, &(0x7f00000012c0)=""/210, 0xd2) 12:11:59 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5c000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000040)="88e167e388ed00170000000000fa1600080000000008007809140b2a3a08020000010000013059747c4d168d8c6aba3f6b81ff", 0x33, 0xb800}], 0x0, &(0x7f0000000400)) 12:11:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x7}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @loopback}, 0x1c) [ 128.488254] loop3: detected capacity change from 0 to 736 [ 128.526782] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 128.527673] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 128.528242] CPU: 0 UID: 0 PID: 3970 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 128.529142] Tainted: [W]=WARN [ 128.529382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 128.533589] RIP: 0010:perf_trace_add+0x21b/0x340 [ 128.533962] Code: 00 0f 85 3a 01 00 00 4c 89 75 00 4d 85 ed 74 2a e8 da b2 f5 ff 49 8d 7d 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 df 00 00 00 4d 89 75 08 eb 03 45 31 e4 e8 ad b2 [ 128.535307] RSP: 0018:ffff8880484a6e68 EFLAGS: 00010057 [ 128.535707] RAX: dffffc0000000000 RBX: ffff888009648640 RCX: ffffffff817e33ce [ 128.536239] RDX: 0000000000000000 RSI: ffffffff817e34a6 RDI: 0000000000000007 [ 128.536768] RBP: ffffe8ffffc16618 R08: ffffffff85ca3e40 R09: ffffed1009094e14 [ 128.537296] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 128.537832] R13: ffffffffffffffff R14: ffff8880096486a0 R15: ffff8880096486d8 [ 128.538363] FS: 00007fcb5194d700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 128.538964] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.539399] CR2: 0000001b2d421000 CR3: 0000000046dcb000 CR4: 0000000000350ef0 [ 128.539933] Call Trace: [ 128.540130] [ 128.540305] event_sched_in+0x446/0xb60 [ 128.540618] merge_sched_in+0xb4d/0x1810 [ 128.540938] visit_groups_merge.constprop.0.isra.0+0x8d1/0x1150 [ 128.541392] ? __pfx_visit_groups_merge.constprop.0.isra.0+0x10/0x10 [ 128.541885] ? lock_is_held_type+0x9e/0x120 [ 128.542221] ctx_sched_in+0x579/0x9b0 [ 128.542515] ? __pfx_ctx_sched_in+0x10/0x10 [ 128.542841] perf_event_sched_in+0x5d/0x90 [ 128.543161] __perf_event_task_sched_in+0x2ec/0x5e0 [ 128.543537] ? __pfx___perf_event_task_sched_in+0x10/0x10 [ 128.543947] ? lock_is_held_type+0x9e/0x120 [ 128.544274] ? __pfx___perf_event_task_sched_out+0x10/0x10 [ 128.544691] ? xfd_validate_state+0x55/0x180 [ 128.545036] finish_task_switch.isra.0+0x410/0x840 [ 128.545417] __schedule+0xe86/0x3590 [ 128.545715] ? __pfx___schedule+0x10/0x10 [ 128.546031] ? __blk_flush_plug+0x28b/0x460 [ 128.546353] ? lock_acquire+0x15e/0x2f0 [ 128.546662] ? find_held_lock+0x2b/0x80 [ 128.546971] ? schedule+0x2c7/0x390 [ 128.547249] ? lock_release+0xc8/0x290 [ 128.547547] schedule+0xdb/0x390 [ 128.547807] io_schedule+0xbf/0x130 [ 128.548089] blk_mq_get_tag+0x568/0xaa0 [ 128.548392] ? __pfx_blk_mq_get_tag+0x10/0x10 [ 128.548730] ? __pfx_dd_request_merge+0x10/0x10 [ 128.549088] ? __pfx_autoremove_wake_function+0x10/0x10 [ 128.549493] ? blk_mq_sched_try_merge+0xb5/0x5e0 [ 128.549867] __blk_mq_alloc_requests+0x6ed/0x15a0 [ 128.550245] ? __pfx_dd_bio_merge+0x10/0x10 [ 128.550574] ? __pfx___blk_mq_alloc_requests+0x10/0x10 [ 128.550975] ? __pfx_dd_bio_merge+0x10/0x10 [ 128.551310] ? blk_mq_sched_bio_merge+0x244/0x320 [ 128.551677] ? blk_attempt_plug_merge+0x167/0x270 [ 128.552042] blk_mq_submit_bio+0x168d/0x2220 [ 128.552377] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 128.552734] ? perf_trace_lock_acquire+0xc9/0x700 [ 128.553109] ? __pfx_css_rstat_updated+0x10/0x10 [ 128.553478] ? bio_associate_blkg_from_css+0x4fe/0x1380 [ 128.553891] ? lock_release+0xc8/0x290 [ 128.554186] __submit_bio+0x17f/0x5b0 [ 128.554476] ? __pfx___submit_bio+0x10/0x10 [ 128.554801] ? find_held_lock+0x2b/0x80 [ 128.555110] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 128.555493] ? lock_release+0xc8/0x290 [ 128.555792] submit_bio_noacct_nocheck+0x68e/0xcb0 [ 128.556170] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 128.556581] submit_bio_noacct+0x359/0x1350 [ 128.556909] write_dirty_buffer+0xca/0x170 [ 128.557232] __flush_batch+0x107/0x2d0 [ 128.557530] ? __pfx___flush_batch+0x10/0x10 [ 128.557868] ? jbd2_log_do_checkpoint+0x473/0xb20 [ 128.558236] ? lock_release+0xc8/0x290 [ 128.558535] jbd2_log_do_checkpoint+0x810/0xb20 [ 128.558889] ? __pfx_jbd2_log_do_checkpoint+0x10/0x10 [ 128.559279] ? lock_release+0xc8/0x290 [ 128.559580] jbd2_journal_flush+0x1a8/0xc20 [ 128.559908] ? jbd2_journal_lock_updates+0x15c/0x360 [ 128.560300] ? __pfx_ext4_group_extend+0x10/0x10 [ 128.560659] ? __pfx_jbd2_journal_flush+0x10/0x10 [ 128.561023] ? lock_is_held_type+0x9e/0x120 [ 128.561356] ? mnt_get_write_access_file+0x11f/0x180 [ 128.561757] __ext4_ioctl+0x2d2e/0x38b0 [ 128.562070] ? __pfx___ext4_ioctl+0x10/0x10 [ 128.562397] ? find_held_lock+0x2b/0x80 [ 128.562708] ? perf_trace_lock_acquire+0xc9/0x700 [ 128.563078] ? lock_release+0xc8/0x290 [ 128.563375] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 128.563767] ? do_vfs_ioctl+0x125/0x1470 [ 128.564082] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 128.564411] ? ioctl_has_perm.constprop.0.isra.0+0x331/0x4e0 [ 128.564845] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 128.565305] ? __pfx_debug_mutex_unlock+0x7/0x10 [ 128.565674] ? __fget_files+0x34/0x3b0 [ 128.565967] ? find_held_lock+0x2b/0x80 [ 128.566276] ? __fget_files+0x203/0x3b0 [ 128.566577] ? lock_release+0xc8/0x290 [ 128.566876] ? selinux_file_ioctl+0xb9/0x280 [ 128.567215] ? __pfx_ext4_ioctl+0x10/0x10 [ 128.567531] __x64_sys_ioctl+0x18f/0x210 [ 128.567847] do_syscall_64+0xbf/0x360 [ 128.568136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.568524] RIP: 0033:0x7fcb543d7b19 [ 128.568805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.570155] RSP: 002b:00007fcb5194d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.570728] RAX: ffffffffffffffda RBX: 00007fcb544eaf60 RCX: 00007fcb543d7b19 [ 128.571254] RDX: 0000000020000640 RSI: 0000000040086607 RDI: 0000000000000004 [ 128.571787] RBP: 00007fcb54431f6d R08: 0000000000000000 R09: 0000000000000000 [ 128.572315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.572841] R13: 00007fff83b400ef R14: 00007fcb5194d300 R15: 0000000000022000 [ 128.573373] [ 128.573551] Modules linked in: [ 128.573803] ---[ end trace 0000000000000000 ]--- [ 128.574155] RIP: 0010:perf_trace_add+0x21b/0x340 [ 128.574518] Code: 00 0f 85 3a 01 00 00 4c 89 75 00 4d 85 ed 74 2a e8 da b2 f5 ff 49 8d 7d 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 df 00 00 00 4d 89 75 08 eb 03 45 31 e4 e8 ad b2 [ 128.575864] RSP: 0018:ffff8880484a6e68 EFLAGS: 00010057 [ 128.576261] RAX: dffffc0000000000 RBX: ffff888009648640 RCX: ffffffff817e33ce [ 128.576788] RDX: 0000000000000000 RSI: ffffffff817e34a6 RDI: 0000000000000007 [ 128.577318] RBP: ffffe8ffffc16618 R08: ffffffff85ca3e40 R09: ffffed1009094e14 [ 128.577854] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 128.578382] R13: ffffffffffffffff R14: ffff8880096486a0 R15: ffff8880096486d8 [ 128.578912] FS: 00007fcb5194d700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 128.579509] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.579944] CR2: 0000001b2d421000 CR3: 0000000046dcb000 CR4: 0000000000350ef0 [ 128.580474] note: syz-executor.0[3970] exited with irqs disabled VM DIAGNOSIS: 12:11:59 Registers: info registers vcpu 0 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff8880484a67f8 R8 =0000000000000000 R9 =ffffed100166a046 R10=0000000000000074 R11=6572617764726148 R12=0000000000000074 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fcb5194d700 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d421000 CR3=0000000046dcb000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88804798f868 RCX=ffffffff8689611c RDX=ffff888047990001 RSI=ffffffff81358702 RDI=ffffffff85c1c760 RBP=ffff888047988000 RSP=ffff88804798f488 R8 =ffffffff86896120 R9 =ffff88804798f558 R10=000000000003be53 R11=0000000000024ac7 R12=ffff88804798f501 R13=ffff88804798f560 R14=ffff88804798f868 R15=ffff88804798f518 RIP=ffffffff8151d8ca RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7e34875700 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055558ddb1c58 CR3=000000000e7ce000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000