Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:27722' (ECDSA) to the list of known hosts. 2025/08/29 08:25:37 fuzzer started 2025/08/29 08:25:38 dialing manager at localhost:43077 syzkaller login: [ 51.462093] cgroup: Unknown subsys name 'net' [ 51.537294] cgroup: Unknown subsys name 'cpuset' [ 51.555544] cgroup: Unknown subsys name 'rlimit' 2025/08/29 08:25:48 syscalls: 2214 2025/08/29 08:25:48 code coverage: enabled 2025/08/29 08:25:48 comparison tracing: enabled 2025/08/29 08:25:48 extra coverage: enabled 2025/08/29 08:25:48 setuid sandbox: enabled 2025/08/29 08:25:48 namespace sandbox: enabled 2025/08/29 08:25:48 Android sandbox: enabled 2025/08/29 08:25:48 fault injection: enabled 2025/08/29 08:25:48 leak checking: enabled 2025/08/29 08:25:48 net packet injection: enabled 2025/08/29 08:25:48 net device setup: enabled 2025/08/29 08:25:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 08:25:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 08:25:48 USB emulation: enabled 2025/08/29 08:25:48 hci packet injection: enabled 2025/08/29 08:25:48 wifi device emulation: enabled 2025/08/29 08:25:48 802.15.4 emulation: enabled 2025/08/29 08:25:48 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 08:25:49 fetching corpus: 50, signal 18692/21834 (executing program) 2025/08/29 08:25:49 fetching corpus: 100, signal 37233/40740 (executing program) 2025/08/29 08:25:49 fetching corpus: 150, signal 46018/49846 (executing program) 2025/08/29 08:25:49 fetching corpus: 200, signal 53553/57555 (executing program) 2025/08/29 08:25:49 fetching corpus: 250, signal 56714/61113 (executing program) 2025/08/29 08:25:49 fetching corpus: 300, signal 59756/64378 (executing program) 2025/08/29 08:25:49 fetching corpus: 350, signal 63726/68389 (executing program) 2025/08/29 08:25:50 fetching corpus: 400, signal 67200/71768 (executing program) 2025/08/29 08:25:50 fetching corpus: 450, signal 71724/75809 (executing program) 2025/08/29 08:25:50 fetching corpus: 500, signal 74243/78165 (executing program) 2025/08/29 08:25:50 fetching corpus: 550, signal 76579/80257 (executing program) 2025/08/29 08:25:50 fetching corpus: 600, signal 78219/81721 (executing program) 2025/08/29 08:25:50 fetching corpus: 650, signal 80706/83900 (executing program) 2025/08/29 08:25:51 fetching corpus: 700, signal 82658/85407 (executing program) 2025/08/29 08:25:51 fetching corpus: 750, signal 84365/86661 (executing program) 2025/08/29 08:25:51 fetching corpus: 800, signal 86298/87997 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/88337 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/88424 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/88521 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/88613 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/88695 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/88797 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/88873 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/88969 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/89054 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/89157 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/89240 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/89332 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/89429 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/89513 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/89605 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/89710 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/89807 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/89898 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/89997 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/90101 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/90176 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/90262 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/90355 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/90457 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/90543 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/90639 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/90720 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/90726 (executing program) 2025/08/29 08:25:51 fetching corpus: 815, signal 86729/90726 (executing program) 2025/08/29 08:25:53 starting 8 fuzzer processes 08:25:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) 08:25:53 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000500)) 08:25:53 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:25:53 executing program 2: madvise(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x18) 08:25:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000180)) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x2}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r1, r0, 0x0) 08:25:53 executing program 4: r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x7) ftruncate(r0, 0x8800000) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/40, 0x28}], 0x1, 0xfffffffa, 0x0) 08:25:53 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) [ 66.834469] audit: type=1400 audit(1756455953.908:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:25:53 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 68.033315] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.035685] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.037730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.041572] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.045485] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.101761] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.114232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.116883] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.119569] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 68.120827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.123037] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.126476] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.127859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.129377] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.130714] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 68.134189] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.135817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.139410] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.142640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.145464] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 68.149263] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.149719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.150681] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.153343] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 68.156483] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 68.164656] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.166649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.166733] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.173713] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 68.179270] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 68.202550] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.207981] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 68.209392] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.230571] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 68.235706] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 68.238305] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 68.247821] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 68.249492] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 68.266185] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 68.274588] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 70.064195] Bluetooth: hci0: command tx timeout [ 70.190653] Bluetooth: hci3: command tx timeout [ 70.192148] Bluetooth: hci1: command tx timeout [ 70.254122] Bluetooth: hci5: command tx timeout [ 70.254639] Bluetooth: hci4: command tx timeout [ 70.255149] Bluetooth: hci2: command tx timeout [ 70.318228] Bluetooth: hci6: command tx timeout [ 70.318723] Bluetooth: hci7: command tx timeout [ 72.110487] Bluetooth: hci0: command tx timeout [ 72.238179] Bluetooth: hci3: command tx timeout [ 72.238731] Bluetooth: hci1: command tx timeout [ 72.302198] Bluetooth: hci2: command tx timeout [ 72.302687] Bluetooth: hci4: command tx timeout [ 72.303183] Bluetooth: hci5: command tx timeout [ 72.366219] Bluetooth: hci7: command tx timeout [ 72.366633] Bluetooth: hci6: command tx timeout [ 74.158153] Bluetooth: hci0: command tx timeout [ 74.286145] Bluetooth: hci1: command tx timeout [ 74.286621] Bluetooth: hci3: command tx timeout [ 74.350190] Bluetooth: hci5: command tx timeout [ 74.350625] Bluetooth: hci4: command tx timeout [ 74.351015] Bluetooth: hci2: command tx timeout [ 74.414130] Bluetooth: hci7: command tx timeout [ 74.414563] Bluetooth: hci6: command tx timeout [ 76.206162] Bluetooth: hci0: command tx timeout [ 76.334175] Bluetooth: hci3: command tx timeout [ 76.334894] Bluetooth: hci1: command tx timeout [ 76.398219] Bluetooth: hci2: command tx timeout [ 76.398889] Bluetooth: hci4: command tx timeout [ 76.399587] Bluetooth: hci5: command tx timeout [ 76.462201] Bluetooth: hci6: command tx timeout [ 76.462930] Bluetooth: hci7: command tx timeout [ 106.112276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.112956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.248981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.249795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.580720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.581275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.581571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.582020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.676424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.677144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.882431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.883411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.970197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.970828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.030701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.031370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.159492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.160206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.312277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.312887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.448546] audit: type=1400 audit(1756455994.522:8): avc: denied { open } for pid=3870 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 107.455133] audit: type=1400 audit(1756455994.522:9): avc: denied { kernel } for pid=3870 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 107.700454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.701103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.710695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.711389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.734874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.735637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.786788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.787582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.813398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.814017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.894284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.894907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.149483] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 08:26:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) 08:26:35 executing program 2: madvise(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x18) 08:26:35 executing program 4: r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x7) ftruncate(r0, 0x8800000) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/40, 0x28}], 0x1, 0xfffffffa, 0x0) 08:26:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 08:26:35 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000500)) 08:26:35 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:26:35 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 08:26:35 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000180)) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x2}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r1, r0, 0x0) [ 108.296661] BUG: unable to handle page fault for address: ffffed10212c91ce [ 108.297264] #PF: supervisor read access in kernel mode [ 108.297669] #PF: error_code(0x0000) - not-present page [ 108.298077] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 [ 108.299599] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 108.300603] CPU: 0 UID: 0 PID: 3909 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 108.303376] Tainted: [W]=WARN [ 108.303985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 108.305615] RIP: 0010:perf_tp_event+0x175/0xe70 [ 108.306406] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 108.307849] RSP: 0018:ffff88804359f800 EFLAGS: 00010212 [ 108.308270] RAX: 1ffff110212c91ce RBX: ffff888109648c80 RCX: ffffc9000e3fb000 [ 108.308839] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff888109648e70 [ 108.309407] RBP: ffff88804359fa70 R08: ffff88806ce31340 R09: ffffe8ffffc169d0 [ 108.309974] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000 [ 108.310549] R13: 0000000000000024 R14: ffff88806ce31340 R15: dffffc0000000000 [ 108.311133] FS: 00007f270088e700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 108.311781] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.312251] CR2: ffffed10212c91ce CR3: 000000000e2b1000 CR4: 0000000000350ef0 [ 108.312815] Call Trace: [ 108.313027] [ 108.313210] ? __pfx_perf_tp_event+0x10/0x10 [ 108.313549] ? perf_tp_event+0x807/0xe70 [ 108.313859] ? lock_is_held_type+0x9e/0x120 [ 108.314195] ? __pfx_perf_tp_event+0x10/0x10 [ 108.314532] ? __pfx_perf_trace_lock+0x10/0x10 [ 108.314886] ? find_held_lock+0x2b/0x80 [ 108.315205] ? perf_trace_run_bpf_submit+0xef/0x180 [ 108.315587] ? perf_trace_run_bpf_submit+0xef/0x180 [ 108.315970] ? perf_trace_run_bpf_submit+0xef/0x180 [ 108.316348] perf_trace_run_bpf_submit+0xef/0x180 [ 108.316717] perf_trace_lock_acquire+0x3c2/0x700 [ 108.317084] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 108.317506] ? __pfx_perf_trace_lock+0x10/0x10 [ 108.317888] ? futex_ref_get+0x48/0x300 [ 108.318218] ? find_held_lock+0x2b/0x80 [ 108.318547] lock_acquire+0xc5/0x2f0 [ 108.318850] ? futex_wake+0x228/0x540 [ 108.319176] _raw_spin_lock+0x2b/0x40 [ 108.319487] ? futex_wake+0x228/0x540 [ 108.319797] futex_wake+0x228/0x540 [ 108.320100] ? __pfx_perf_trace_lock+0x10/0x10 [ 108.320477] ? __pfx_futex_wake+0x10/0x10 [ 108.320817] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 108.321232] ? lock_release+0xc8/0x290 [ 108.321552] do_futex+0x26d/0x370 [ 108.321840] ? __pfx_do_futex+0x10/0x10 [ 108.322165] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 108.322590] ? find_held_lock+0x2b/0x80 [ 108.322921] __x64_sys_futex+0x1c9/0x4d0 [ 108.323262] ? __pfx___x64_sys_futex+0x10/0x10 [ 108.323631] ? xfd_validate_state+0x55/0x180 [ 108.324006] do_syscall_64+0xbf/0x360 [ 108.324315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.324728] RIP: 0033:0x7f2703318b19 [ 108.325016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 108.326344] RSP: 002b:00007f270088e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 108.326904] RAX: ffffffffffffffda RBX: 00007f270342bf68 RCX: 00007f2703318b19 [ 108.327443] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f270342bf6c [ 108.327967] RBP: 00007f270342bf60 R08: 000000000000000e R09: 0000000000000000 [ 108.328490] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f270342bf6c [ 108.329012] R13: 00007ffdd49a27ef R14: 00007f270088e300 R15: 0000000000022000 [ 108.329545] [ 108.329724] Modules linked in: [ 108.329972] CR2: ffffed10212c91ce [ 108.330230] ---[ end trace 0000000000000000 ]--- [ 108.330579] RIP: 0010:perf_tp_event+0x175/0xe70 [ 108.330940] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 108.332376] RSP: 0018:ffff88804359f800 EFLAGS: 00010212 [ 108.332803] RAX: 1ffff110212c91ce RBX: ffff888109648c80 RCX: ffffc9000e3fb000 [ 108.333373] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff888109648e70 [ 108.333941] RBP: ffff88804359fa70 R08: ffff88806ce31340 R09: ffffe8ffffc169d0 [ 108.334517] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000 [ 108.335089] R13: 0000000000000024 R14: ffff88806ce31340 R15: dffffc0000000000 [ 108.335651] FS: 00007f270088e700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 108.336286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.336753] CR2: ffffed10212c91ce CR3: 000000000e2b1000 CR4: 0000000000350ef0 [ 108.337327] note: syz-executor.6[3909] exited with irqs disabled [ 108.337829] BUG: unable to handle page fault for address: ffffed10212c91ce [ 108.338373] #PF: supervisor read access in kernel mode [ 108.338781] #PF: error_code(0x0000) - not-present page [ 108.339195] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 [ 108.339638] Oops: Oops: 0000 [#2] SMP KASAN NOPTI [ 108.340023] CPU: 0 UID: 0 PID: 3909 Comm: syz-executor.6 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 108.340944] Tainted: [D]=DIE, [W]=WARN [ 108.341247] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 108.341880] RIP: 0010:perf_tp_event+0x175/0xe70 [ 108.342247] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 108.343641] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012 [ 108.344053] RAX: 1ffff110212c91ce RBX: ffff888109648c80 RCX: 0000000000000002 [ 108.344601] RDX: ffff888013d18000 RSI: ffffffff818995b7 RDI: ffff888109648e70 [ 108.345149] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc169d0 [ 108.345699] R10: 0000000000000000 R11: 000000000000002c R12: dffffc0000000000 [ 108.346256] R13: 000000000000002c R14: ffff88806ce31490 R15: dffffc0000000000 [ 108.346804] FS: 00007f270088e700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 108.347430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.347879] CR2: ffffed10212c91ce CR3: 000000000e2b1000 CR4: 0000000000350ef0 [ 108.348430] Call Trace: [ 108.348634] [ 108.348814] ? __pfx_perf_tp_event+0x10/0x10 [ 108.349173] ? stack_depot_save_flags+0x2c/0xa20 [ 108.349544] ? stack_depot_save_flags+0x2c/0xa20 [ 108.349914] ? kasan_save_stack+0x34/0x50 [ 108.350240] ? kasan_save_stack+0x24/0x50 [ 108.350564] ? kasan_save_track+0x14/0x30 [ 108.350890] ? __kasan_save_free_info+0x3a/0x60 [ 108.351262] ? __kasan_slab_free+0x3f/0x50 [ 108.351592] ? kmem_cache_free+0x2a1/0x540 [ 108.351925] ? rcu_core+0x7c8/0x1800 [ 108.352222] ? handle_softirqs+0x1b1/0x770 [ 108.352559] ? __irq_exit_rcu+0xc4/0x100 [ 108.352885] ? irq_exit_rcu+0x9/0x20 [ 108.353178] ? sysvec_apic_timer_interrupt+0x70/0x80 [ 108.353573] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 108.353994] ? __orc_find+0x9f/0xf0 [ 108.354284] ? unwind_next_frame+0x2f9/0x2540 [ 108.354640] ? arch_stack_walk+0x86/0xf0 [ 108.354965] ? stack_trace_save+0x8e/0xc0 [ 108.355291] ? kasan_save_stack+0x24/0x50 [ 108.355617] ? kasan_save_track+0x14/0x30 [ 108.355950] ? __kasan_slab_alloc+0x59/0x70 [ 108.356295] ? kmem_cache_alloc_noprof+0x205/0x690 [ 108.356685] ? __alloc_object+0x2b/0x2c0 [ 108.357014] ? __create_object+0x1d/0x80 [ 108.357340] ? __kmalloc_cache_noprof+0x42a/0x690 [ 108.357727] ? find_get_pmu_context+0x90/0x9d0 [ 108.358098] ? __do_sys_perf_event_open+0x1529/0x2c20 [ 108.358500] ? do_syscall_64+0xbf/0x360 [ 108.358811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.359239] ? find_get_pmu_context+0x90/0x9d0 [ 108.359597] ? __do_sys_perf_event_open+0x1529/0x2c20 [ 108.360001] ? do_syscall_64+0xbf/0x360 [ 108.360313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.360724] ? __lock_acquire+0xc65/0x1b70 [ 108.361059] ? perf_trace_run_bpf_submit+0xef/0x180 [ 108.361452] perf_trace_run_bpf_submit+0xef/0x180 [ 108.361838] perf_trace_lock_acquire+0x3c2/0x700 [ 108.362215] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 108.362630] ? trace_rcu_utilization+0x26/0x190 [ 108.363012] lock_acquire+0xc5/0x2f0 [ 108.363308] ? hrtimer_interrupt+0xd6/0x830 [ 108.363644] ? __pfx_rcu_core+0x10/0x10 [ 108.363959] _raw_spin_lock_irqsave+0x3a/0x60 [ 108.364312] ? hrtimer_interrupt+0xd6/0x830 [ 108.364648] hrtimer_interrupt+0xd6/0x830 [ 108.364974] ? __pfx_do_sync_core+0x10/0x10 [ 108.365319] ? trace_csd_function_exit+0x134/0x190 [ 108.365713] ? __flush_smp_call_function_queue+0x28c/0x740 [ 108.366161] __sysvec_apic_timer_interrupt+0xbb/0x330 [ 108.366574] sysvec_apic_timer_interrupt+0x6b/0x80 [ 108.366981] [ 108.367169] [ 108.367354] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 108.367768] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 108.368144] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de [ 108.369567] RSP: 0018:ffff88804359ff28 EFLAGS: 00000246 [ 108.369987] RAX: 0000000000000001 RBX: ffff888013d18000 RCX: ffffffff817c2b86 [ 108.370542] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 108.371111] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 108.371671] R10: ffffffff8643ac57 R11: 0000000000000001 R12: ffff888013d18000 [ 108.372238] R13: 0000000000000009 R14: ffff88804359f7e0 R15: 0000000000000000 [ 108.372800] ? trace_irq_enable.constprop.0+0x26/0x100 [ 108.373220] ? make_task_dead+0x214/0x3b0 [ 108.373553] ? make_task_dead+0x214/0x3b0 [ 108.373888] ? do_syscall_64+0xbf/0x360 [ 108.374207] rewind_stack_and_make_dead+0x16/0x20 [ 108.374591] RIP: 0033:0x7f2703318b19 [ 108.374890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 108.376322] RSP: 002b:00007f270088e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 108.376925] RAX: ffffffffffffffda RBX: 00007f270342bf68 RCX: 00007f2703318b19 [ 108.377486] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f270342bf6c [ 108.378046] RBP: 00007f270342bf60 R08: 000000000000000e R09: 0000000000000000 [ 108.378602] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f270342bf6c [ 108.379181] R13: 00007ffdd49a27ef R14: 00007f270088e300 R15: 0000000000022000 [ 108.379750] [ 108.379942] Modules linked in: [ 108.380201] CR2: ffffed10212c91ce [ 108.380474] ---[ end trace 0000000000000000 ]--- [ 108.380848] RIP: 0010:perf_tp_event+0x175/0xe70 [ 108.381225] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 108.382650] RSP: 0018:ffff88804359f800 EFLAGS: 00010212 [ 108.383080] RAX: 1ffff110212c91ce RBX: ffff888109648c80 RCX: ffffc9000e3fb000 [ 108.383653] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff888109648e70 [ 108.384219] RBP: ffff88804359fa70 R08: ffff88806ce31340 R09: ffffe8ffffc169d0 [ 108.384780] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000 [ 108.385344] R13: 0000000000000024 R14: ffff88806ce31340 R15: dffffc0000000000 [ 108.385906] FS: 00007f270088e700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 108.386533] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.387005] CR2: ffffed10212c91ce CR3: 000000000e2b1000 CR4: 0000000000350ef0 [ 108.387568] Kernel panic - not syncing: Fatal exception in interrupt [ 108.388312] Kernel Offset: disabled [ 108.388602] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 08:26:35 Registers: info registers vcpu 0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff88804359f010 R8 =0000000000000000 R9 =ffffed10016c5046 R10=000000000000002d R11=000000000000002c R12=000000000000002d R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f270088e700 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=ffffed10212c91ce CR3=000000000e2b1000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f27033ff7c000007f27033ff7c8 XMM02=00007f27033ff7e000007f27033ff7c0 XMM03=00007f27033ff7c800007f27033ff7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff888041c23000 RCX=0000000000000104 RDX=0000000000000000 RSI=0000000000000001 RDI=ffff888041c237e0 RBP=ffffea00010708c0 RSP=ffff8880171a78a8 R8 =0000000000001000 R9 =0000000000000000 R10=ffffed1008384600 R11=0000000000000000 R12=fffffbfff0b0924c R13=fffffbfff0b0924a R14=ffffea0001070900 R15=ffff88807ffdcb40 RIP=ffffffff84ba523b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555578606400 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9dc72ac004 CR3=000000000e069000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f9dc6e7b7c000007f9dc6e7b7c8 XMM02=00007f9dc6e7b7e000007f9dc6e7b7c0 XMM03=00007f9dc6e7b7c800007f9dc6e7b7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000