Warning: Permanently added '[localhost]:65122' (ECDSA) to the list of known hosts. 2025/09/01 12:05:27 fuzzer started 2025/09/01 12:05:27 dialing manager at localhost:35473 syzkaller login: [ 59.443980] cgroup: Unknown subsys name 'net' [ 59.490469] cgroup: Unknown subsys name 'cpuset' [ 59.499684] cgroup: Unknown subsys name 'rlimit' 2025/09/01 12:05:37 syscalls: 2214 2025/09/01 12:05:37 code coverage: enabled 2025/09/01 12:05:37 comparison tracing: enabled 2025/09/01 12:05:37 extra coverage: enabled 2025/09/01 12:05:37 setuid sandbox: enabled 2025/09/01 12:05:37 namespace sandbox: enabled 2025/09/01 12:05:37 Android sandbox: enabled 2025/09/01 12:05:37 fault injection: enabled 2025/09/01 12:05:37 leak checking: enabled 2025/09/01 12:05:37 net packet injection: enabled 2025/09/01 12:05:37 net device setup: enabled 2025/09/01 12:05:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 12:05:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 12:05:37 USB emulation: enabled 2025/09/01 12:05:37 hci packet injection: enabled 2025/09/01 12:05:37 wifi device emulation: enabled 2025/09/01 12:05:37 802.15.4 emulation: enabled 2025/09/01 12:05:37 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 12:05:37 fetching corpus: 50, signal 11828/15587 (executing program) 2025/09/01 12:05:37 fetching corpus: 100, signal 22296/27617 (executing program) 2025/09/01 12:05:37 fetching corpus: 150, signal 31974/38656 (executing program) 2025/09/01 12:05:37 fetching corpus: 200, signal 40865/48736 (executing program) 2025/09/01 12:05:38 fetching corpus: 250, signal 47072/56117 (executing program) 2025/09/01 12:05:38 fetching corpus: 300, signal 53001/63156 (executing program) 2025/09/01 12:05:38 fetching corpus: 350, signal 58260/69409 (executing program) 2025/09/01 12:05:38 fetching corpus: 400, signal 66057/77807 (executing program) 2025/09/01 12:05:38 fetching corpus: 450, signal 68919/81735 (executing program) 2025/09/01 12:05:38 fetching corpus: 500, signal 71404/85301 (executing program) 2025/09/01 12:05:38 fetching corpus: 550, signal 74121/88963 (executing program) 2025/09/01 12:05:38 fetching corpus: 600, signal 77097/92783 (executing program) 2025/09/01 12:05:38 fetching corpus: 650, signal 78751/95416 (executing program) 2025/09/01 12:05:38 fetching corpus: 700, signal 81834/99236 (executing program) 2025/09/01 12:05:38 fetching corpus: 750, signal 84338/102528 (executing program) 2025/09/01 12:05:39 fetching corpus: 800, signal 85590/104661 (executing program) 2025/09/01 12:05:39 fetching corpus: 850, signal 87783/107579 (executing program) 2025/09/01 12:05:39 fetching corpus: 900, signal 90759/111060 (executing program) 2025/09/01 12:05:39 fetching corpus: 950, signal 92768/113693 (executing program) 2025/09/01 12:05:39 fetching corpus: 1000, signal 94670/116264 (executing program) 2025/09/01 12:05:39 fetching corpus: 1050, signal 96915/118996 (executing program) 2025/09/01 12:05:39 fetching corpus: 1100, signal 99019/121597 (executing program) 2025/09/01 12:05:39 fetching corpus: 1150, signal 100756/123884 (executing program) 2025/09/01 12:05:39 fetching corpus: 1200, signal 102476/126150 (executing program) 2025/09/01 12:05:39 fetching corpus: 1250, signal 103925/128205 (executing program) 2025/09/01 12:05:40 fetching corpus: 1300, signal 104974/129873 (executing program) 2025/09/01 12:05:40 fetching corpus: 1350, signal 106269/131711 (executing program) 2025/09/01 12:05:40 fetching corpus: 1400, signal 107862/133786 (executing program) 2025/09/01 12:05:40 fetching corpus: 1450, signal 108995/135497 (executing program) 2025/09/01 12:05:40 fetching corpus: 1500, signal 110108/137105 (executing program) 2025/09/01 12:05:40 fetching corpus: 1550, signal 110830/138509 (executing program) 2025/09/01 12:05:40 fetching corpus: 1600, signal 111777/140007 (executing program) 2025/09/01 12:05:40 fetching corpus: 1650, signal 113280/141863 (executing program) 2025/09/01 12:05:40 fetching corpus: 1700, signal 114375/143478 (executing program) 2025/09/01 12:05:40 fetching corpus: 1750, signal 115317/144905 (executing program) 2025/09/01 12:05:40 fetching corpus: 1800, signal 116520/146444 (executing program) 2025/09/01 12:05:41 fetching corpus: 1850, signal 117654/147946 (executing program) 2025/09/01 12:05:41 fetching corpus: 1900, signal 119048/149558 (executing program) 2025/09/01 12:05:41 fetching corpus: 1950, signal 120296/151073 (executing program) 2025/09/01 12:05:41 fetching corpus: 2000, signal 121176/152361 (executing program) 2025/09/01 12:05:41 fetching corpus: 2050, signal 122829/154057 (executing program) 2025/09/01 12:05:41 fetching corpus: 2100, signal 124123/155499 (executing program) 2025/09/01 12:05:41 fetching corpus: 2150, signal 124949/156652 (executing program) 2025/09/01 12:05:41 fetching corpus: 2200, signal 126057/157983 (executing program) 2025/09/01 12:05:41 fetching corpus: 2250, signal 126829/159089 (executing program) 2025/09/01 12:05:41 fetching corpus: 2300, signal 127490/160135 (executing program) 2025/09/01 12:05:41 fetching corpus: 2350, signal 128738/161427 (executing program) 2025/09/01 12:05:42 fetching corpus: 2400, signal 129361/162402 (executing program) 2025/09/01 12:05:42 fetching corpus: 2450, signal 130167/163467 (executing program) 2025/09/01 12:05:42 fetching corpus: 2500, signal 130956/164522 (executing program) 2025/09/01 12:05:42 fetching corpus: 2550, signal 131723/165504 (executing program) 2025/09/01 12:05:42 fetching corpus: 2600, signal 132536/166530 (executing program) 2025/09/01 12:05:42 fetching corpus: 2650, signal 133269/167505 (executing program) 2025/09/01 12:05:42 fetching corpus: 2700, signal 133863/168396 (executing program) 2025/09/01 12:05:42 fetching corpus: 2750, signal 134473/169303 (executing program) 2025/09/01 12:05:42 fetching corpus: 2800, signal 134996/170123 (executing program) 2025/09/01 12:05:42 fetching corpus: 2850, signal 135505/170971 (executing program) 2025/09/01 12:05:42 fetching corpus: 2900, signal 136042/171817 (executing program) 2025/09/01 12:05:42 fetching corpus: 2950, signal 136874/172757 (executing program) 2025/09/01 12:05:43 fetching corpus: 3000, signal 137550/173629 (executing program) 2025/09/01 12:05:43 fetching corpus: 3050, signal 138200/174458 (executing program) 2025/09/01 12:05:43 fetching corpus: 3100, signal 139056/175342 (executing program) 2025/09/01 12:05:43 fetching corpus: 3150, signal 139498/176070 (executing program) 2025/09/01 12:05:43 fetching corpus: 3200, signal 140328/176948 (executing program) 2025/09/01 12:05:43 fetching corpus: 3250, signal 140968/177711 (executing program) 2025/09/01 12:05:43 fetching corpus: 3300, signal 141963/178574 (executing program) 2025/09/01 12:05:43 fetching corpus: 3350, signal 142365/179260 (executing program) 2025/09/01 12:05:43 fetching corpus: 3400, signal 142885/179968 (executing program) 2025/09/01 12:05:43 fetching corpus: 3450, signal 143351/180606 (executing program) 2025/09/01 12:05:43 fetching corpus: 3500, signal 144020/181345 (executing program) 2025/09/01 12:05:43 fetching corpus: 3550, signal 144773/182032 (executing program) 2025/09/01 12:05:44 fetching corpus: 3600, signal 145413/182795 (executing program) 2025/09/01 12:05:44 fetching corpus: 3650, signal 146267/183563 (executing program) 2025/09/01 12:05:44 fetching corpus: 3700, signal 146981/184245 (executing program) 2025/09/01 12:05:44 fetching corpus: 3750, signal 148126/185019 (executing program) 2025/09/01 12:05:44 fetching corpus: 3800, signal 148650/185632 (executing program) 2025/09/01 12:05:44 fetching corpus: 3850, signal 149028/186159 (executing program) 2025/09/01 12:05:44 fetching corpus: 3900, signal 149513/186765 (executing program) 2025/09/01 12:05:44 fetching corpus: 3950, signal 150123/187340 (executing program) 2025/09/01 12:05:44 fetching corpus: 4000, signal 151634/188095 (executing program) 2025/09/01 12:05:44 fetching corpus: 4050, signal 152430/188628 (executing program) 2025/09/01 12:05:44 fetching corpus: 4100, signal 152889/189114 (executing program) 2025/09/01 12:05:44 fetching corpus: 4150, signal 153295/189627 (executing program) 2025/09/01 12:05:44 fetching corpus: 4200, signal 153771/190122 (executing program) 2025/09/01 12:05:45 fetching corpus: 4250, signal 154080/190621 (executing program) 2025/09/01 12:05:45 fetching corpus: 4300, signal 154607/191167 (executing program) 2025/09/01 12:05:45 fetching corpus: 4350, signal 155084/191613 (executing program) 2025/09/01 12:05:45 fetching corpus: 4400, signal 155597/192085 (executing program) 2025/09/01 12:05:45 fetching corpus: 4450, signal 155893/192525 (executing program) 2025/09/01 12:05:45 fetching corpus: 4500, signal 156398/192952 (executing program) 2025/09/01 12:05:45 fetching corpus: 4550, signal 156932/193396 (executing program) 2025/09/01 12:05:45 fetching corpus: 4600, signal 157353/193844 (executing program) 2025/09/01 12:05:45 fetching corpus: 4650, signal 157834/194256 (executing program) 2025/09/01 12:05:45 fetching corpus: 4700, signal 158313/194667 (executing program) 2025/09/01 12:05:45 fetching corpus: 4750, signal 158730/195063 (executing program) 2025/09/01 12:05:46 fetching corpus: 4800, signal 159070/195176 (executing program) 2025/09/01 12:05:46 fetching corpus: 4850, signal 159443/195189 (executing program) 2025/09/01 12:05:46 fetching corpus: 4900, signal 159852/195189 (executing program) 2025/09/01 12:05:46 fetching corpus: 4950, signal 160366/195192 (executing program) 2025/09/01 12:05:46 fetching corpus: 5000, signal 160704/195206 (executing program) 2025/09/01 12:05:46 fetching corpus: 5050, signal 161217/195220 (executing program) 2025/09/01 12:05:46 fetching corpus: 5100, signal 161593/195220 (executing program) 2025/09/01 12:05:46 fetching corpus: 5150, signal 162165/195241 (executing program) 2025/09/01 12:05:46 fetching corpus: 5200, signal 162482/195261 (executing program) 2025/09/01 12:05:46 fetching corpus: 5250, signal 162977/195277 (executing program) 2025/09/01 12:05:46 fetching corpus: 5300, signal 163318/195291 (executing program) 2025/09/01 12:05:46 fetching corpus: 5350, signal 163716/195291 (executing program) 2025/09/01 12:05:47 fetching corpus: 5400, signal 165271/195302 (executing program) 2025/09/01 12:05:47 fetching corpus: 5450, signal 165596/195317 (executing program) 2025/09/01 12:05:47 fetching corpus: 5500, signal 166199/195338 (executing program) 2025/09/01 12:05:47 fetching corpus: 5550, signal 166762/195365 (executing program) 2025/09/01 12:05:47 fetching corpus: 5600, signal 167196/195372 (executing program) 2025/09/01 12:05:47 fetching corpus: 5650, signal 167547/195384 (executing program) 2025/09/01 12:05:47 fetching corpus: 5700, signal 168229/195407 (executing program) 2025/09/01 12:05:47 fetching corpus: 5750, signal 168712/195451 (executing program) 2025/09/01 12:05:47 fetching corpus: 5800, signal 169077/195453 (executing program) 2025/09/01 12:05:47 fetching corpus: 5850, signal 169502/195453 (executing program) 2025/09/01 12:05:48 fetching corpus: 5900, signal 169817/195461 (executing program) 2025/09/01 12:05:48 fetching corpus: 5950, signal 170308/195476 (executing program) 2025/09/01 12:05:48 fetching corpus: 6000, signal 170645/195479 (executing program) 2025/09/01 12:05:48 fetching corpus: 6050, signal 171034/195494 (executing program) 2025/09/01 12:05:48 fetching corpus: 6100, signal 171372/195503 (executing program) 2025/09/01 12:05:48 fetching corpus: 6150, signal 171703/195506 (executing program) 2025/09/01 12:05:48 fetching corpus: 6200, signal 172108/195507 (executing program) 2025/09/01 12:05:48 fetching corpus: 6250, signal 172554/195511 (executing program) 2025/09/01 12:05:48 fetching corpus: 6300, signal 172929/195512 (executing program) 2025/09/01 12:05:48 fetching corpus: 6350, signal 173221/195515 (executing program) 2025/09/01 12:05:48 fetching corpus: 6400, signal 173556/195516 (executing program) 2025/09/01 12:05:49 fetching corpus: 6450, signal 174166/195518 (executing program) 2025/09/01 12:05:49 fetching corpus: 6500, signal 174399/195524 (executing program) 2025/09/01 12:05:49 fetching corpus: 6550, signal 174614/195529 (executing program) 2025/09/01 12:05:49 fetching corpus: 6600, signal 175079/195541 (executing program) 2025/09/01 12:05:49 fetching corpus: 6650, signal 175485/195541 (executing program) 2025/09/01 12:05:49 fetching corpus: 6700, signal 175873/195579 (executing program) 2025/09/01 12:05:49 fetching corpus: 6750, signal 176230/195582 (executing program) 2025/09/01 12:05:49 fetching corpus: 6800, signal 176639/195584 (executing program) 2025/09/01 12:05:49 fetching corpus: 6850, signal 176932/195587 (executing program) 2025/09/01 12:05:49 fetching corpus: 6900, signal 177262/195592 (executing program) 2025/09/01 12:05:49 fetching corpus: 6950, signal 177715/195610 (executing program) 2025/09/01 12:05:50 fetching corpus: 7000, signal 177944/195610 (executing program) 2025/09/01 12:05:50 fetching corpus: 7050, signal 178208/195620 (executing program) 2025/09/01 12:05:50 fetching corpus: 7100, signal 178487/195648 (executing program) 2025/09/01 12:05:50 fetching corpus: 7150, signal 178776/195651 (executing program) 2025/09/01 12:05:50 fetching corpus: 7200, signal 179029/195662 (executing program) 2025/09/01 12:05:50 fetching corpus: 7250, signal 179431/195712 (executing program) 2025/09/01 12:05:50 fetching corpus: 7300, signal 179881/195779 (executing program) 2025/09/01 12:05:50 fetching corpus: 7350, signal 180193/195780 (executing program) 2025/09/01 12:05:50 fetching corpus: 7400, signal 181895/195781 (executing program) 2025/09/01 12:05:50 fetching corpus: 7450, signal 182175/195783 (executing program) 2025/09/01 12:05:50 fetching corpus: 7500, signal 182613/195809 (executing program) 2025/09/01 12:05:50 fetching corpus: 7550, signal 182820/195825 (executing program) 2025/09/01 12:05:51 fetching corpus: 7600, signal 183148/195828 (executing program) 2025/09/01 12:05:51 fetching corpus: 7650, signal 183535/195844 (executing program) 2025/09/01 12:05:51 fetching corpus: 7700, signal 183778/195848 (executing program) 2025/09/01 12:05:51 fetching corpus: 7750, signal 183978/195850 (executing program) 2025/09/01 12:05:51 fetching corpus: 7800, signal 184245/195853 (executing program) 2025/09/01 12:05:51 fetching corpus: 7850, signal 184506/195864 (executing program) 2025/09/01 12:05:51 fetching corpus: 7900, signal 184726/195868 (executing program) 2025/09/01 12:05:51 fetching corpus: 7950, signal 184973/195871 (executing program) 2025/09/01 12:05:51 fetching corpus: 8000, signal 185188/195871 (executing program) 2025/09/01 12:05:51 fetching corpus: 8050, signal 185438/195874 (executing program) 2025/09/01 12:05:51 fetching corpus: 8100, signal 185657/195876 (executing program) 2025/09/01 12:05:52 fetching corpus: 8150, signal 185836/195885 (executing program) 2025/09/01 12:05:52 fetching corpus: 8200, signal 186197/195904 (executing program) 2025/09/01 12:05:52 fetching corpus: 8250, signal 186536/195930 (executing program) 2025/09/01 12:05:52 fetching corpus: 8300, signal 186845/195939 (executing program) 2025/09/01 12:05:52 fetching corpus: 8350, signal 187111/195949 (executing program) 2025/09/01 12:05:52 fetching corpus: 8400, signal 187341/195957 (executing program) 2025/09/01 12:05:52 fetching corpus: 8450, signal 187609/195958 (executing program) 2025/09/01 12:05:52 fetching corpus: 8500, signal 187826/195962 (executing program) 2025/09/01 12:05:52 fetching corpus: 8550, signal 188159/195985 (executing program) 2025/09/01 12:05:52 fetching corpus: 8600, signal 188413/196005 (executing program) 2025/09/01 12:05:52 fetching corpus: 8650, signal 188680/196011 (executing program) 2025/09/01 12:05:53 fetching corpus: 8700, signal 188898/196028 (executing program) 2025/09/01 12:05:53 fetching corpus: 8750, signal 189090/196028 (executing program) 2025/09/01 12:05:53 fetching corpus: 8800, signal 189395/196056 (executing program) 2025/09/01 12:05:53 fetching corpus: 8850, signal 189671/196056 (executing program) 2025/09/01 12:05:53 fetching corpus: 8900, signal 190410/196064 (executing program) 2025/09/01 12:05:53 fetching corpus: 8950, signal 190680/196064 (executing program) 2025/09/01 12:05:53 fetching corpus: 9000, signal 191001/196070 (executing program) 2025/09/01 12:05:53 fetching corpus: 9050, signal 191301/196081 (executing program) 2025/09/01 12:05:53 fetching corpus: 9100, signal 191730/196087 (executing program) 2025/09/01 12:05:53 fetching corpus: 9150, signal 192056/196088 (executing program) 2025/09/01 12:05:53 fetching corpus: 9200, signal 192309/196099 (executing program) 2025/09/01 12:05:53 fetching corpus: 9250, signal 192765/196114 (executing program) 2025/09/01 12:05:53 fetching corpus: 9285, signal 192945/196117 (executing program) 2025/09/01 12:05:53 fetching corpus: 9285, signal 192945/196117 (executing program) 2025/09/01 12:05:56 starting 8 fuzzer processes 12:05:56 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 12:05:56 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1) fallocate(r1, 0x20, 0x0, 0x100000000) fallocate(r0, 0x8, 0x0, 0x100000000) 12:05:56 executing program 2: munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2) 12:05:56 executing program 6: set_mempolicy(0x2, &(0x7f0000001780)=0x6, 0x40) 12:05:56 executing program 3: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000008180)={0x0, 0x0, 0x40}) 12:05:56 executing program 7: prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 12:05:56 executing program 4: perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:05:56 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) fallocate(r0, 0x20, 0x0, 0x100000000) [ 88.102228] audit: type=1400 audit(1756728356.434:7): avc: denied { execmem } for pid=273 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 89.325833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.328557] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.330973] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.335848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.338216] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.403951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.413126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.415852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.425787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.427267] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.428470] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.429864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.435931] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.437197] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.440056] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.443102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.452262] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.456178] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.462941] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.465168] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.466924] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.468551] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.472120] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.478069] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.483918] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.488723] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.494542] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.496468] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.499921] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.515953] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.524293] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.527161] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.528626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.539547] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.541937] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.546322] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.549878] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.552968] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.554527] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.610026] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.418114] Bluetooth: hci0: command tx timeout [ 91.608810] Bluetooth: hci5: command tx timeout [ 91.608864] Bluetooth: hci1: command tx timeout [ 91.609511] Bluetooth: hci3: command tx timeout [ 91.610457] Bluetooth: hci4: command tx timeout [ 91.610806] Bluetooth: hci2: command tx timeout [ 91.675672] Bluetooth: hci7: command tx timeout [ 91.676221] Bluetooth: hci6: command tx timeout [ 93.465656] Bluetooth: hci0: command tx timeout [ 93.657671] Bluetooth: hci3: command tx timeout [ 93.658131] Bluetooth: hci2: command tx timeout [ 93.658511] Bluetooth: hci4: command tx timeout [ 93.659313] Bluetooth: hci1: command tx timeout [ 93.659754] Bluetooth: hci5: command tx timeout [ 93.722598] Bluetooth: hci6: command tx timeout [ 93.723040] Bluetooth: hci7: command tx timeout [ 95.512726] Bluetooth: hci0: command tx timeout [ 95.704927] Bluetooth: hci2: command tx timeout [ 95.705387] Bluetooth: hci3: command tx timeout [ 95.706275] Bluetooth: hci4: command tx timeout [ 95.706683] Bluetooth: hci1: command tx timeout [ 95.707063] Bluetooth: hci5: command tx timeout [ 95.769625] Bluetooth: hci7: command tx timeout [ 95.770043] Bluetooth: hci6: command tx timeout [ 97.560644] Bluetooth: hci0: command tx timeout [ 97.752822] Bluetooth: hci1: command tx timeout [ 97.753283] Bluetooth: hci3: command tx timeout [ 97.753829] Bluetooth: hci4: command tx timeout [ 97.754209] Bluetooth: hci2: command tx timeout [ 97.754718] Bluetooth: hci5: command tx timeout [ 97.816615] Bluetooth: hci6: command tx timeout [ 97.817025] Bluetooth: hci7: command tx timeout [ 127.683715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.684382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.829976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.830925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:06:36 executing program 7: prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 12:06:36 executing program 7: prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 12:06:36 executing program 7: prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 12:06:36 executing program 7: timer_create(0x0, 0x0, &(0x7f00000020c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) timer_gettime(0x0, &(0x7f0000000040)) [ 128.663744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.664337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:06:37 executing program 7: timer_create(0x0, 0x0, &(0x7f00000020c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) timer_gettime(0x0, &(0x7f0000000040)) [ 128.801526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.803285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:06:37 executing program 7: timer_create(0x0, 0x0, &(0x7f00000020c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) timer_gettime(0x0, &(0x7f0000000040)) [ 128.860129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.860793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:06:37 executing program 7: timer_create(0x0, 0x0, &(0x7f00000020c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) timer_gettime(0x0, &(0x7f0000000040)) [ 128.930711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.931306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:06:37 executing program 7: io_setup(0x1, &(0x7f0000000040)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() waitid(0x1, r0, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) [ 128.991789] audit: type=1400 audit(1756728397.323:8): avc: denied { open } for pid=3881 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.993916] audit: type=1400 audit(1756728397.323:9): avc: denied { kernel } for pid=3881 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 129.042010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.042665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.119122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.119767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.195174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.196367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.233661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.234232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.298012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.298981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.361905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.362488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.421214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.421867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.457171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.457902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.544281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.545268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.583431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.584258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:06:38 executing program 6: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') close_range(r0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000240)=""/42, 0xff30, 0xfffffffeffc) 12:06:38 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) fallocate(r0, 0x20, 0x0, 0x100000000) 12:06:38 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 12:06:38 executing program 3: io_setup(0x1, &(0x7f0000000040)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() waitid(0x1, r0, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) 12:06:38 executing program 7: io_setup(0x1, &(0x7f0000000040)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() waitid(0x1, r0, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) 12:06:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:06:38 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5) 12:06:38 executing program 1: io_setup(0x1, &(0x7f0000000040)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() waitid(0x1, r0, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) [ 129.782368] audit: type=1326 audit(1756728398.114:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3928 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f035b19 code=0x0 [ 130.606006] audit: type=1326 audit(1756728398.938:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3928 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f035b19 code=0x0 12:06:38 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) fallocate(r0, 0x20, 0x0, 0x100000000) 12:06:38 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 12:06:38 executing program 7: io_setup(0x1, &(0x7f0000000040)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() waitid(0x1, r0, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) 12:06:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:06:38 executing program 1: io_setup(0x1, &(0x7f0000000040)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() waitid(0x1, r0, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) 12:06:38 executing program 3: io_setup(0x1, &(0x7f0000000040)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() waitid(0x1, r0, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) 12:06:38 executing program 6: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') close_range(r0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000240)=""/42, 0xff30, 0xfffffffeffc) 12:06:38 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5) [ 130.697949] audit: type=1326 audit(1756728399.029:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3953 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f035b19 code=0x0 12:06:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:06:39 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) fallocate(r0, 0x20, 0x0, 0x100000000) [ 130.767509] kmemleak: Found object by alias at 0x607f1a63e34c [ 130.767534] CPU: 0 UID: 0 PID: 3960 Comm: syz-executor.0 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 130.767566] Tainted: [W]=WARN [ 130.767571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 130.767582] Call Trace: [ 130.767587] [ 130.767594] dump_stack_lvl+0xca/0x120 [ 130.767630] __lookup_object+0x94/0xb0 [ 130.767655] delete_object_full+0x27/0x70 [ 130.767679] free_percpu+0x30/0x1160 [ 130.767704] ? arch_uprobe_clear_state+0x16/0x140 [ 130.767734] futex_hash_free+0x38/0xc0 [ 130.767755] mmput+0x2d3/0x390 [ 130.767783] do_exit+0x79d/0x2970 [ 130.767807] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 130.767828] ? __pfx_do_exit+0x10/0x10 [ 130.767849] ? find_held_lock+0x2b/0x80 [ 130.767876] ? get_signal+0x835/0x2340 [ 130.767905] do_group_exit+0xd3/0x2a0 [ 130.767928] get_signal+0x2315/0x2340 [ 130.767964] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 130.767988] ? __pfx_get_signal+0x10/0x10 [ 130.768013] ? __schedule+0xe91/0x3590 [ 130.768044] arch_do_signal_or_restart+0x80/0x790 [ 130.768070] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 130.768096] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 130.768115] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 130.768133] ? kernel_mbind+0x154/0x200 [ 130.768152] ? __pfx___x64_sys_futex+0x10/0x10 [ 130.768172] ? xfd_validate_state+0x55/0x180 [ 130.768204] exit_to_user_mode_loop+0x8b/0x110 [ 130.768223] do_syscall_64+0x2f7/0x360 [ 130.768242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.768260] RIP: 0033:0x7f4fa08ccb19 [ 130.768272] Code: Unable to access opcode bytes at 0x7f4fa08ccaef. [ 130.768280] RSP: 002b:00007f4f9de42218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.768298] RAX: 0000000000000001 RBX: 00007f4fa09dff68 RCX: 00007f4fa08ccb19 [ 130.768309] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4fa09dff6c [ 130.768320] RBP: 00007f4fa09dff60 R08: 000000000000000e R09: 0000000000000000 [ 130.768330] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4fa09dff6c [ 130.768340] R13: 00007fffe22ae47f R14: 00007f4f9de42300 R15: 0000000000022000 12:06:39 executing program 1: io_setup(0x1, &(0x7f0000000040)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() waitid(0x1, r0, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) [ 130.768364] [ 130.768370] kmemleak: Object (percpu) 0x607f1a63e340 (size 16): [ 130.768380] kmemleak: comm "syz-executor.0", pid 282, jiffies 4294797432 [ 130.768390] kmemleak: min_count = 1 [ 130.768396] kmemleak: count = 0 [ 130.768401] kmemleak: flags = 0x21 [ 130.768407] kmemleak: checksum = 0 [ 130.768412] kmemleak: backtrace: [ 130.768418] pcpu_alloc_noprof+0x87a/0x1170 [ 130.768441] mm_init+0x99b/0x1170 [ 130.768453] copy_process+0x3ab7/0x73c0 [ 130.768469] kernel_clone+0xea/0x7f0 [ 130.768484] __do_sys_clone+0xce/0x120 [ 130.768499] do_syscall_64+0xbf/0x360 [ 130.768513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.771710] kmemleak: Found object by alias at 0x607f1a63e348 [ 130.771722] CPU: 1 UID: 0 PID: 3948 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 130.771740] Tainted: [W]=WARN [ 130.771743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 130.771750] Call Trace: [ 130.771753] [ 130.771757] dump_stack_lvl+0xca/0x120 [ 130.771778] __lookup_object+0x94/0xb0 [ 130.771793] delete_object_full+0x27/0x70 [ 130.771810] free_percpu+0x30/0x1160 [ 130.771825] ? arch_uprobe_clear_state+0x16/0x140 [ 130.771844] futex_hash_free+0x38/0xc0 [ 130.771857] mmput+0x2d3/0x390 [ 130.771875] do_exit+0x79d/0x2970 [ 130.771889] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 130.771902] ? zap_other_threads+0x2b9/0x3a0 [ 130.771919] ? __pfx_do_exit+0x10/0x10 [ 130.771932] ? do_group_exit+0x1c3/0x2a0 [ 130.771955] ? _raw_spin_unlock_irq+0x23/0x40 [ 130.771974] do_group_exit+0xd3/0x2a0 [ 130.771989] __x64_sys_exit_group+0x3e/0x50 [ 130.772003] x64_sys_call+0x18c5/0x18d0 [ 130.772019] do_syscall_64+0xbf/0x360 [ 130.772031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.772043] RIP: 0033:0x7f46d1297b19 [ 130.772052] Code: Unable to access opcode bytes at 0x7f46d1297aef. [ 130.772057] RSP: 002b:00007ffec3dd0498 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 130.772068] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f46d1297b19 [ 130.772076] RDX: 00007f46d124a72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 130.772083] RBP: 0000000000000000 R08: 0000001b2cf293d0 R09: 0000000000000000 [ 130.772090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.772097] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffec3dd0580 [ 130.772113] [ 130.772117] kmemleak: Object (percpu) 0x607f1a63e340 (size 16): [ 130.772123] kmemleak: comm "syz-executor.0", pid 282, jiffies 4294797432 [ 130.772130] kmemleak: min_count = 1 [ 130.772134] kmemleak: count = 0 [ 130.772138] kmemleak: flags = 0x21 [ 130.772142] kmemleak: checksum = 0 [ 130.772146] kmemleak: backtrace: [ 130.772149] pcpu_alloc_noprof+0x87a/0x1170 [ 130.772164] mm_init+0x99b/0x1170 [ 130.772173] copy_process+0x3ab7/0x73c0 [ 130.772183] kernel_clone+0xea/0x7f0 [ 130.772193] __do_sys_clone+0xce/0x120 [ 130.772204] do_syscall_64+0xbf/0x360 [ 130.772216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.811381] kmemleak: Cannot insert 0x607f1a63e348 into the object search tree (overlaps existing) [ 130.811394] CPU: 1 UID: 0 PID: 3966 Comm: syz-executor.4 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 130.811411] Tainted: [W]=WARN [ 130.811415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 130.811421] Call Trace: [ 130.811425] [ 130.811430] dump_stack_lvl+0xca/0x120 [ 130.811450] __link_object+0x190/0x210 [ 130.811467] __create_object+0x48/0x80 [ 130.811485] pcpu_alloc_noprof+0x87a/0x1170 [ 130.811509] alloc_trace_kprobe+0xc9/0x560 [ 130.811525] ? do_one_initcall+0xa0/0x630 [ 130.811540] ? do_one_initcall+0xa0/0x630 [ 130.811560] ? do_one_initcall+0xa0/0x630 [ 130.811575] ? do_one_initcall+0xa0/0x630 [ 130.811590] create_local_trace_kprobe+0x73/0x410 [ 130.811610] perf_kprobe_init+0x119/0x210 [ 130.811626] perf_kprobe_event_init+0xfc/0x1d0 [ 130.811641] perf_try_init_event+0x140/0x9f0 [ 130.811659] perf_event_alloc.part.0+0x118e/0x45f0 [ 130.811678] ? perf_event_alloc.part.0+0x1074/0x45f0 [ 130.811699] ? __fget_files+0x203/0x3b0 [ 130.811715] ? __pfx_perf_event_alloc.part.0+0x10/0x10 [ 130.811734] ? find_held_lock+0x2b/0x80 [ 130.811751] ? __do_sys_perf_event_open+0x11df/0x2c20 [ 130.811770] __do_sys_perf_event_open+0x719/0x2c20 [ 130.811790] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 130.811804] ? find_held_lock+0x2b/0x80 [ 130.811824] ? do_one_initcall+0xa0/0x630 [ 130.811849] do_syscall_64+0xbf/0x360 [ 130.811862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.811873] RIP: 0033:0x7f7d673e1b19 [ 130.811882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 130.811893] RSP: 002b:00007f7d64957188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 130.811904] RAX: ffffffffffffffda RBX: 00007f7d674f4f60 RCX: 00007f7d673e1b19 [ 130.811912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 130.811919] RBP: 00007f7d6743bf6d R08: 0000000000000000 R09: 0000000000000000 [ 130.811926] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 130.811933] R13: 00007ffd2766c92f R14: 00007f7d64957300 R15: 0000000000022000 [ 130.811960] [ 130.812494] kmemleak: Kernel memory leak detector disabled [ 130.812498] kmemleak: Object (percpu) 0x607f1a63e340 (size 16): [ 130.812505] kmemleak: comm "syz-executor.0", pid 282, jiffies 4294797432 [ 130.812512] kmemleak: min_count = 1 [ 130.812516] kmemleak: count = 0 [ 130.812519] kmemleak: flags = 0x21 [ 130.812523] kmemleak: checksum = 0 [ 130.812527] kmemleak: backtrace: [ 130.812530] pcpu_alloc_noprof+0x87a/0x1170 [ 130.812546] mm_init+0x99b/0x1170 [ 130.812554] copy_process+0x3ab7/0x73c0 [ 130.812565] kernel_clone+0xea/0x7f0 [ 130.812575] __do_sys_clone+0xce/0x120 [ 130.812585] do_syscall_64+0xbf/0x360 [ 130.812595] entry_SYSCALL_64_after_hwframe+0x77/0x7f 12:06:39 executing program 6: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') close_range(r0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000240)=""/42, 0xff30, 0xfffffffeffc) 12:06:39 executing program 6: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') close_range(r0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000240)=""/42, 0xff30, 0xfffffffeffc) 12:06:39 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000040)=ANY=[]) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) 12:06:39 executing program 7: io_setup(0x1, &(0x7f0000000040)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() waitid(0x1, r0, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) [ 130.968156] loop5: detected capacity change from 0 to 64 12:06:39 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) [ 130.995583] ------------[ cut here ]------------ [ 130.996315] percpu ref (free_ioctx_users) <= 0 (-262782791584511) after switching to atomic [ 130.996634] WARNING: lib/percpu-refcount.c:197 at percpu_ref_switch_to_atomic_rcu+0x3cc/0x480, CPU#0: syz-executor.7/3981 [ 130.998887] Modules linked in: [ 130.999315] CPU: 0 UID: 0 PID: 3981 Comm: syz-executor.7 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 131.004272] Tainted: [W]=WARN [ 131.004668] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 131.005639] RIP: 0010:percpu_ref_switch_to_atomic_rcu+0x3cc/0x480 [ 131.006364] Code: 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 9e 00 00 00 49 8b 75 e8 48 c7 c7 c0 99 e2 84 e8 25 ac e9 fe 90 <0f> 0b 90 90 e9 2b ff ff ff e8 56 de 5f ff e9 9e fe ff ff e8 dc de [ 131.008483] RSP: 0018:ffff88806ce08e20 EFLAGS: 00010286 [ 131.009140] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8139de70 [ 131.009994] RDX: ffff8880473a1b80 RSI: ffffffff8139de7e RDI: 0000000000000001 [ 131.010841] RBP: 7fff11001d0df500 R08: 0000000000000001 R09: ffffed100d9c4801 [ 131.011694] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888009d42900 [ 131.012525] R13: ffff888009d42920 R14: 0000000000000002 R15: 0000000000000003 [ 131.013391] FS: 00007efd64bb3700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 131.014352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.015062] CR2: 00007f45bc8eaff8 CR3: 000000000e1f9000 CR4: 0000000000350ef0 [ 131.015917] Call Trace: [ 131.016234] [ 131.016502] ? rcu_core+0x7c3/0x1800 [ 131.016976] rcu_core+0x7c8/0x1800 [ 131.017420] ? __pfx_rcu_core+0x10/0x10 [ 131.017916] ? clockevents_program_event+0x135/0x360 [ 131.018528] ? mark_held_locks+0x49/0x80 [ 131.019041] handle_softirqs+0x1b1/0x770 [ 131.019543] __irq_exit_rcu+0xc4/0x100 [ 131.020053] irq_exit_rcu+0x9/0x20 [ 131.020480] sysvec_apic_timer_interrupt+0x70/0x80 [ 131.021095] [ 131.021372] [ 131.021670] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 131.022292] RIP: 0010:__sanitizer_cov_trace_pc+0x60/0x80 [ 131.022961] Code: 8b 82 14 15 00 00 85 c0 75 05 e9 0b 60 4a 03 8b 82 f0 14 00 00 83 f8 02 75 f0 48 8b 8a f8 14 00 00 8b 92 f4 14 00 00 48 8b 01 <48> 83 c0 01 48 39 c2 76 d7 48 89 01 48 89 34 c1 e9 db 5f 4a 03 66 [ 131.025070] RSP: 0018:ffff88804838f6e0 EFLAGS: 00000246 [ 131.025723] RAX: 00000000000201a0 RBX: 0000000000000008 RCX: ffffc90006c47000 [ 131.026578] RDX: 0000000000040000 RSI: ffffffff819e593d RDI: 0000000000000005 [ 131.027416] RBP: 00007efd65fb5000 R08: 0000000000000000 R09: fffff9400020f878 [ 131.028274] R10: 0000000000000018 R11: 0000000000000001 R12: 0000000000000008 [ 131.029132] R13: ffffea000107c3c0 R14: 0000000000000018 R15: dffffc0000000000 [ 131.029989] ? copy_page_range+0xd7d/0x5140 [ 131.030515] copy_page_range+0xd7d/0x5140 [ 131.031076] ? __pfx_copy_page_range+0x10/0x10 [ 131.031659] ? mas_destroy+0x5ce/0x9c0 [ 131.032150] ? lock_acquire+0x15e/0x2f0 [ 131.032654] ? dup_mmap+0xc95/0x1d10 [ 131.033118] ? find_held_lock+0x2b/0x80 [ 131.033631] ? dup_mmap+0xce8/0x1d10 [ 131.034097] ? lock_release+0xc8/0x290 [ 131.034587] ? down_write+0x119/0x1f0 [ 131.035047] ? up_write+0x195/0x520 [ 131.035485] ? lock_is_held_type+0x9e/0x120 [ 131.036042] dup_mmap+0xd2f/0x1d10 [ 131.036490] ? __pfx_dup_mmap+0x10/0x10 [ 131.036991] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 131.037629] ? lock_is_held_type+0x9e/0x120 [ 131.038156] copy_process+0x3ad5/0x73c0 [ 131.038674] ? __pfx_copy_process+0x10/0x10 [ 131.039197] ? futex_wait+0x10e/0x380 [ 131.039689] kernel_clone+0xea/0x7f0 [ 131.040155] ? __pfx_kernel_clone+0x10/0x10 [ 131.040697] ? lock_release+0xc8/0x290 [ 131.041178] ? perf_trace_run_bpf_submit+0xef/0x180 [ 131.041820] __do_sys_fork+0x94/0xd0 [ 131.042281] ? __pfx___do_sys_fork+0x10/0x10 [ 131.042829] ? perf_trace_preemptirq_template+0x259/0x430 [ 131.043502] ? do_syscall_64+0x85/0x360 [ 131.044019] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 131.044669] do_syscall_64+0xbf/0x360 [ 131.045130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.045768] RIP: 0033:0x7efd6763db19 [ 131.046220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 131.048402] RSP: 002b:00007efd64bb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 131.049300] RAX: ffffffffffffffda RBX: 00007efd67750f60 RCX: 00007efd6763db19 [ 131.050159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.051027] RBP: 00007efd67697f6d R08: 0000000000000000 R09: 0000000000000000 [ 131.051880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.052747] R13: 00007ffceba20d5f R14: 00007efd64bb3300 R15: 0000000000022000 [ 131.053611] [ 131.053897] irq event stamp: 1236 [ 131.054308] hardirqs last enabled at (1244): [] __up_console_sem+0x78/0x80 [ 131.054577] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 131.055320] hardirqs last disabled at (1251): [] sysvec_apic_timer_interrupt+0xf/0x80 [ 131.057169] softirqs last enabled at (316): [] handle_softirqs+0x50c/0x770 [ 131.058200] softirqs last disabled at (459): [] __irq_exit_rcu+0xc4/0x100 [ 131.059206] ---[ end trace 0000000000000000 ]--- [ 131.059779] percpu_ref_switch_to_atomic_rcu: percpu_ref_switch_to_atomic_rcu(): percpu_ref underflow slab kmalloc-64 start ffff888009d42900 pointer offset 0 size 64 [ 131.068699] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 131.070020] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 131.070904] CPU: 0 UID: 0 PID: 3889 Comm: systemd-udevd Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 131.072292] Tainted: [W]=WARN [ 131.072660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 131.073620] RIP: 0010:__queue_work+0x202/0x1240 [ 131.074184] Code: 48 8b 6d 00 e8 4f ee 79 03 31 ff 41 89 c5 89 c6 e8 c3 02 32 00 45 85 ed 0f 85 e1 05 00 00 e8 85 07 32 00 48 89 e8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 a0 0e 00 00 4c 8b 75 00 48 89 df 4c 89 34 24 [ 131.076307] RSP: 0018:ffff88800efa7238 EFLAGS: 00010056 [ 131.076924] RAX: 0000000000000000 RBX: ffff8880474f6518 RCX: ffffffff8141f51d [ 131.077764] RDX: ffff888013790000 RSI: ffffffff8141ef2b RDI: 0000000000000005 [ 131.078605] RBP: 0000000000000001 R08: 0000000000000001 R09: fffffbfff0f128f4 [ 131.079444] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 131.080295] R13: 0000000000000001 R14: 0000000000000000 R15: ffff888048460800 [ 131.081135] FS: 00007fd8313238c0(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 131.082082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.082781] CR2: 00007f4fa09dff64 CR3: 000000000eb68000 CR4: 0000000000350ef0 [ 131.083620] Call Trace: [ 131.083929] [ 131.084215] ? find_held_lock+0x2b/0x80 [ 131.084702] queue_work_on+0xd0/0xe0 [ 131.085151] loop_queue_rq+0x5c8/0x1180 [ 131.085635] __blk_mq_issue_directly+0xd5/0x260 [ 131.086207] ? __pfx___blk_mq_issue_directly+0x10/0x10 [ 131.086838] ? bdev_count_inflight_rw.part.0+0x5f/0x380 [ 131.087463] blk_mq_request_issue_directly+0x11c/0x1e0 [ 131.088084] blk_mq_issue_direct+0x192/0x640 [ 131.088611] blk_mq_dispatch_queue_requests+0x4b0/0x7c0 [ 131.089231] blk_mq_flush_plug_list+0x1ec/0x5b0 [ 131.089802] ? read_tsc+0x9/0x20 [ 131.090221] ? ktime_get+0x16d/0x270 [ 131.090674] ? trace_block_plug+0x149/0x1b0 [ 131.091189] ? blk_add_rq_to_plug+0x234/0x550 [ 131.091715] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 131.092328] ? blk_mq_submit_bio+0x4fd/0x2220 [ 131.092855] __blk_flush_plug+0x25c/0x460 [ 131.093342] ? __pfx___blk_flush_plug+0x10/0x10 [ 131.093887] ? bio_associate_blkg_from_css+0x4fe/0x1380 [ 131.094529] __submit_bio+0x480/0x5b0 [ 131.094982] ? __pfx___submit_bio+0x10/0x10 [ 131.095499] ? read_tsc+0x9/0x20 [ 131.095915] ? ktime_get+0x16d/0x270 [ 131.096381] submit_bio_noacct_nocheck+0x68e/0xcb0 [ 131.096966] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 131.097604] submit_bio_noacct+0x359/0x1350 [ 131.098117] block_read_full_folio+0x405/0x760 [ 131.098662] ? __pfx_blkdev_get_block+0x10/0x10 [ 131.099215] ? lock_acquire+0x15e/0x2f0 [ 131.099688] ? __pfx_blkdev_read_folio+0x10/0x10 [ 131.100259] filemap_read_folio+0x4a/0x1e0 [ 131.100773] filemap_get_pages+0x1133/0x18e0 [ 131.101296] ? __kernel_text_address+0xd/0x40 [ 131.101834] ? __pfx_filemap_get_pages+0x10/0x10 [ 131.102394] ? arch_stack_walk+0x9c/0xf0 [ 131.102871] ? lock_is_held_type+0x9e/0x120 [ 131.103389] filemap_read+0x388/0xcf0 [ 131.103844] ? __pfx_filemap_read+0x10/0x10 [ 131.104353] ? srso_alias_untrain_ret+0x1/0x10 [ 131.104894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.105512] ? lock_acquire+0x15e/0x2f0 [ 131.105981] ? blkdev_read_iter+0x195/0x510 [ 131.106491] ? down_read+0x1b1/0x470 [ 131.106932] ? __pfx_down_read+0x10/0x10 [ 131.107404] ? __virt_addr_valid+0x1c6/0x5d0 [ 131.107935] ? avc_policy_seqno+0x9/0x20 [ 131.108419] ? selinux_file_permission+0x99/0x600 [ 131.108988] blkdev_read_iter+0x1a3/0x510 [ 131.109477] vfs_read+0x868/0xc70 [ 131.109891] ? __pfx_vfs_read+0x10/0x10 [ 131.110361] ? __seccomp_filter+0x535/0xfa0 [ 131.110879] ksys_read+0x121/0x240 [ 131.111298] ? __pfx_ksys_read+0x10/0x10 [ 131.111780] ? __secure_computing+0x18d/0x290 [ 131.112323] do_syscall_64+0xbf/0x360 [ 131.112777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.113373] RIP: 0033:0x7fd8318bc04e [ 131.113808] Code: 0f 1f 40 00 48 8b 15 79 9f 00 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 0f 05 <48> 3d 00 f0 ff ff 77 5a c3 66 0f 1f 84 00 00 00 00 00 48 83 ec 28 [ 131.115882] RSP: 002b:00007ffd089425d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.116760] RAX: ffffffffffffffda RBX: 000055ba8288cfa8 RCX: 00007fd8318bc04e [ 131.117582] RDX: 0000000000000400 RSI: 000055ba8288cfb8 RDI: 0000000000000010 [ 131.118410] RBP: 000055ba82868df0 R08: 000055ba8288cf90 R09: 00007fd8318a2be0 [ 131.119230] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 131.120075] R13: 0000000000000400 R14: 000055ba8288cf90 R15: 000055ba82868e40 [ 131.120921] [ 131.121197] Modules linked in: [ 131.121577] ---[ end trace 0000000000000000 ]--- [ 131.122126] RIP: 0010:__queue_work+0x202/0x1240 [ 131.122685] Code: 48 8b 6d 00 e8 4f ee 79 03 31 ff 41 89 c5 89 c6 e8 c3 02 32 00 45 85 ed 0f 85 e1 05 00 00 e8 85 07 32 00 48 89 e8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 a0 0e 00 00 4c 8b 75 00 48 89 df 4c 89 34 24 [ 131.124826] RSP: 0018:ffff88800efa7238 EFLAGS: 00010056 [ 131.125452] RAX: 0000000000000000 RBX: ffff8880474f6518 RCX: ffffffff8141f51d [ 131.126284] RDX: ffff888013790000 RSI: ffffffff8141ef2b RDI: 0000000000000005 [ 131.127124] RBP: 0000000000000001 R08: 0000000000000001 R09: fffffbfff0f128f4 [ 131.127953] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 131.128771] R13: 0000000000000001 R14: 0000000000000000 R15: ffff888048460800 [ 131.129589] FS: 00007fd8313238c0(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 131.130516] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.131187] CR2: 00007f4fa09dff64 CR3: 000000000eb68000 CR4: 0000000000350ef0 [ 131.132020] note: systemd-udevd[3889] exited with irqs disabled [ 131.133216] note: systemd-udevd[3889] exited with preempt_count 1 [ 131.134443] ------------[ cut here ]------------ [ 131.135019] WARNING: kernel/exit.c:898 at do_exit+0x1c36/0x2970, CPU#0: systemd-udevd/3889 [ 131.136011] Modules linked in: [ 131.136404] CPU: 0 UID: 0 PID: 3889 Comm: systemd-udevd Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 131.137790] Tainted: [D]=DIE, [W]=WARN [ 131.138240] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 131.139211] RIP: 0010:do_exit+0x1c36/0x2970 [ 131.139743] Code: 96 0a 00 00 c7 43 18 00 00 00 00 e9 21 e6 ff ff e8 ef b3 38 00 bf 02 24 00 00 e8 f5 ab 0b 00 e9 41 ff ff ff e8 db b3 38 00 90 <0f> 0b 90 e9 87 e4 ff ff e8 cd b3 38 00 4c 89 e6 bf 05 06 00 00 e8 [ 131.141843] RSP: 0018:ffff88800efa7e40 EFLAGS: 00010293 [ 131.142463] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffffffff813b2727 [ 131.143315] RDX: ffff888013790000 RSI: ffffffff813b42d5 RDI: ffff8880137911e8 [ 131.144172] RBP: ffff888013790000 R08: 0000000000000001 R09: fffffbfff0f126d8 [ 131.145028] R10: 0000000000000200 R11: 0000000000000001 R12: 000000000000000b [ 131.145878] R13: 0000000000002710 R14: dffffc0000000000 R15: 0000000000000000 [ 131.146731] FS: 00007fd8313238c0(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 131.147685] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.148384] CR2: 00007f4fa09dff64 CR3: 000000000eb68000 CR4: 0000000000350ef0 [ 131.149241] Call Trace: [ 131.149555] [ 131.149849] ? _printk+0xbe/0xf0 [ 131.150261] ? __pfx__printk+0x10/0x10 [ 131.150761] ? __pfx_do_exit+0x10/0x10 [ 131.151235] make_task_dead+0x174/0x3b0 [ 131.151735] ? do_syscall_64+0xbf/0x360 [ 131.152234] rewind_stack_and_make_dead+0x16/0x20 [ 131.152844] RIP: 0033:0x7fd8318bc04e [ 131.153282] Code: 0f 1f 40 00 48 8b 15 79 9f 00 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 0f 05 <48> 3d 00 f0 ff ff 77 5a c3 66 0f 1f 84 00 00 00 00 00 48 83 ec 28 [ 131.155424] RSP: 002b:00007ffd089425d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.156589] RAX: ffffffffffffffda RBX: 000055ba8288cfa8 RCX: 00007fd8318bc04e [ 131.157552] RDX: 0000000000000400 RSI: 000055ba8288cfb8 RDI: 0000000000000010 [ 131.158477] RBP: 000055ba82868df0 R08: 000055ba8288cf90 R09: 00007fd8318a2be0 [ 131.159439] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 131.160305] R13: 0000000000000400 R14: 000055ba8288cf90 R15: 000055ba82868e40 [ 131.161167] [ 131.161451] irq event stamp: 40196 [ 131.161885] hardirqs last enabled at (40195): [] ktime_get+0x1c7/0x270 [ 131.162967] hardirqs last disabled at (40196): [] _raw_spin_lock_irq+0x42/0x50 [ 131.164187] softirqs last enabled at (39992): [] handle_softirqs+0x50c/0x770 [ 131.165374] softirqs last disabled at (39979): [] __irq_exit_rcu+0xc4/0x100 [ 131.166534] ---[ end trace 0000000000000000 ]--- [ 131.167106] BUG: sleeping function called from invalid context at ./include/linux/percpu-rwsem.h:51 [ 131.168341] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 3889, name: systemd-udevd [ 131.169503] preempt_count: 0, expected: 0 [ 131.170136] RCU nest depth: 2, expected: 0 [ 131.170658] INFO: lockdep is turned off. [ 131.171138] CPU: 0 UID: 0 PID: 3889 Comm: systemd-udevd Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 131.171166] Tainted: [D]=DIE, [W]=WARN [ 131.171172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 131.171182] Call Trace: [ 131.171188] [ 131.171194] dump_stack_lvl+0xfa/0x120 [ 131.171228] __might_resched+0x2f3/0x510 [ 131.171248] exit_signals+0x25/0x940 [ 131.171276] do_exit+0x2db/0x2970 [ 131.171295] ? _printk+0xbe/0xf0 [ 131.171314] ? __pfx__printk+0x10/0x10 [ 131.171334] ? __pfx_do_exit+0x10/0x10 [ 131.171357] make_task_dead+0x174/0x3b0 [ 131.171377] ? do_syscall_64+0xbf/0x360 [ 131.171393] rewind_stack_and_make_dead+0x16/0x20 [ 131.171417] RIP: 0033:0x7fd8318bc04e [ 131.171429] Code: 0f 1f 40 00 48 8b 15 79 9f 00 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 0f 05 <48> 3d 00 f0 ff ff 77 5a c3 66 0f 1f 84 00 00 00 00 00 48 83 ec 28 [ 131.171445] RSP: 002b:00007ffd089425d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.171461] RAX: ffffffffffffffda RBX: 000055ba8288cfa8 RCX: 00007fd8318bc04e [ 131.171473] RDX: 0000000000000400 RSI: 000055ba8288cfb8 RDI: 0000000000000010 [ 131.171484] RBP: 000055ba82868df0 R08: 000055ba8288cf90 R09: 00007fd8318a2be0 [ 131.171495] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 131.171505] R13: 0000000000000400 R14: 000055ba8288cf90 R15: 000055ba82868e40 [ 131.171522] [ 131.329646] kmemleak: Automatic memory scanning thread ended VM DIAGNOSIS: 12:06:39 Registers: info registers vcpu 0 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff88806ce08760 R8 =0000000000000000 R9 =ffffed10013aa046 R10=0000000000000065 R11=0000000000000001 R12=0000000000000065 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0 RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007efd64bb3700 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f45bc8eaff8 CR3=000000000e1f9000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffff81209610ffffffff812095ec XMM01=ffffffff812c82a8ffffffff812c825f XMM02=ffffffff812c835effffffff812c8313 XMM03=ffffffff812c82b4ffffffff812c82a8 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88801343cc48 RCX=ffffffff822784bc RDX=ffff88800f59d280 RSI=fffffffffffff000 RDI=0000000000000007 RBP=ffff88800f59d280 RSP=ffff8880155ef898 R8 =0000000000000001 R9 =ffffed10011fbb36 R10=ffff88801343cc48 R11=0000000000000001 R12=ffff88800e13e200 R13=0000000000000001 R14=0000000000000001 R15=ffff888013abac72 RIP=ffffffff8173f6b4 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd8313238c0 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe1900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd43ae57000 CR3=000000000af14000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=35706f6f6c2f6b636f6c622f6c617574 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055ba828aa560000055ba8285c310 XMM06=000055ba828651500000000000000002 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000