Warning: Permanently added '[localhost]:58832' (ECDSA) to the list of known hosts. 2025/09/01 08:50:12 fuzzer started 2025/09/01 08:50:12 dialing manager at localhost:35473 syzkaller login: [ 50.919518] cgroup: Unknown subsys name 'net' [ 50.995056] cgroup: Unknown subsys name 'cpuset' [ 51.017358] cgroup: Unknown subsys name 'rlimit' 2025/09/01 08:50:24 syscalls: 2214 2025/09/01 08:50:24 code coverage: enabled 2025/09/01 08:50:24 comparison tracing: enabled 2025/09/01 08:50:24 extra coverage: enabled 2025/09/01 08:50:24 setuid sandbox: enabled 2025/09/01 08:50:24 namespace sandbox: enabled 2025/09/01 08:50:24 Android sandbox: enabled 2025/09/01 08:50:24 fault injection: enabled 2025/09/01 08:50:24 leak checking: enabled 2025/09/01 08:50:24 net packet injection: enabled 2025/09/01 08:50:24 net device setup: enabled 2025/09/01 08:50:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 08:50:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 08:50:24 USB emulation: enabled 2025/09/01 08:50:24 hci packet injection: enabled 2025/09/01 08:50:24 wifi device emulation: enabled 2025/09/01 08:50:24 802.15.4 emulation: enabled 2025/09/01 08:50:24 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 08:50:24 fetching corpus: 50, signal 18505/21956 (executing program) 2025/09/01 08:50:24 fetching corpus: 100, signal 36250/40601 (executing program) 2025/09/01 08:50:24 fetching corpus: 150, signal 42936/48344 (executing program) 2025/09/01 08:50:24 fetching corpus: 200, signal 47552/53969 (executing program) 2025/09/01 08:50:25 fetching corpus: 250, signal 53581/60744 (executing program) 2025/09/01 08:50:25 fetching corpus: 300, signal 60951/68599 (executing program) 2025/09/01 08:50:25 fetching corpus: 350, signal 65106/73324 (executing program) 2025/09/01 08:50:25 fetching corpus: 400, signal 67187/76126 (executing program) 2025/09/01 08:50:25 fetching corpus: 450, signal 70654/80115 (executing program) 2025/09/01 08:50:25 fetching corpus: 500, signal 73699/83625 (executing program) 2025/09/01 08:50:25 fetching corpus: 550, signal 76016/86429 (executing program) 2025/09/01 08:50:26 fetching corpus: 600, signal 79937/90559 (executing program) 2025/09/01 08:50:26 fetching corpus: 650, signal 82328/93242 (executing program) 2025/09/01 08:50:26 fetching corpus: 700, signal 83738/95063 (executing program) 2025/09/01 08:50:26 fetching corpus: 750, signal 88862/99743 (executing program) 2025/09/01 08:50:26 fetching corpus: 800, signal 91797/102672 (executing program) 2025/09/01 08:50:26 fetching corpus: 850, signal 94056/104963 (executing program) 2025/09/01 08:50:26 fetching corpus: 900, signal 95540/106670 (executing program) 2025/09/01 08:50:27 fetching corpus: 950, signal 97345/108511 (executing program) 2025/09/01 08:50:27 fetching corpus: 1000, signal 98494/109903 (executing program) 2025/09/01 08:50:27 fetching corpus: 1050, signal 99441/111108 (executing program) 2025/09/01 08:50:27 fetching corpus: 1100, signal 102057/113424 (executing program) 2025/09/01 08:50:27 fetching corpus: 1150, signal 104307/115383 (executing program) 2025/09/01 08:50:27 fetching corpus: 1200, signal 105975/116901 (executing program) 2025/09/01 08:50:27 fetching corpus: 1250, signal 107000/117969 (executing program) 2025/09/01 08:50:27 fetching corpus: 1300, signal 108440/119258 (executing program) 2025/09/01 08:50:28 fetching corpus: 1350, signal 109621/120350 (executing program) 2025/09/01 08:50:28 fetching corpus: 1400, signal 112562/122440 (executing program) 2025/09/01 08:50:28 fetching corpus: 1450, signal 114841/124004 (executing program) 2025/09/01 08:50:28 fetching corpus: 1500, signal 115750/124800 (executing program) 2025/09/01 08:50:28 fetching corpus: 1550, signal 118013/126294 (executing program) 2025/09/01 08:50:28 fetching corpus: 1600, signal 118828/126959 (executing program) 2025/09/01 08:50:28 fetching corpus: 1650, signal 119825/127732 (executing program) 2025/09/01 08:50:28 fetching corpus: 1700, signal 120969/128517 (executing program) 2025/09/01 08:50:29 fetching corpus: 1750, signal 122101/129283 (executing program) 2025/09/01 08:50:29 fetching corpus: 1800, signal 123211/129976 (executing program) 2025/09/01 08:50:29 fetching corpus: 1850, signal 124063/130553 (executing program) 2025/09/01 08:50:29 fetching corpus: 1900, signal 124921/131087 (executing program) 2025/09/01 08:50:29 fetching corpus: 1950, signal 126188/131783 (executing program) 2025/09/01 08:50:29 fetching corpus: 2000, signal 127094/132263 (executing program) 2025/09/01 08:50:29 fetching corpus: 2050, signal 128066/132796 (executing program) 2025/09/01 08:50:29 fetching corpus: 2100, signal 128878/133185 (executing program) 2025/09/01 08:50:29 fetching corpus: 2150, signal 129473/133482 (executing program) 2025/09/01 08:50:30 fetching corpus: 2200, signal 130122/133790 (executing program) 2025/09/01 08:50:30 fetching corpus: 2250, signal 130876/134195 (executing program) 2025/09/01 08:50:30 fetching corpus: 2300, signal 131688/134521 (executing program) 2025/09/01 08:50:30 fetching corpus: 2350, signal 132612/134856 (executing program) 2025/09/01 08:50:30 fetching corpus: 2355, signal 133140/135031 (executing program) 2025/09/01 08:50:30 fetching corpus: 2355, signal 133140/135062 (executing program) 2025/09/01 08:50:30 fetching corpus: 2355, signal 133140/135110 (executing program) 2025/09/01 08:50:30 fetching corpus: 2355, signal 133140/135143 (executing program) 2025/09/01 08:50:30 fetching corpus: 2355, signal 133140/135184 (executing program) 2025/09/01 08:50:30 fetching corpus: 2355, signal 133140/135221 (executing program) 2025/09/01 08:50:30 fetching corpus: 2355, signal 133140/135259 (executing program) 2025/09/01 08:50:30 fetching corpus: 2355, signal 133140/135295 (executing program) 2025/09/01 08:50:30 fetching corpus: 2355, signal 133140/135328 (executing program) 2025/09/01 08:50:30 fetching corpus: 2355, signal 133140/135365 (executing program) 2025/09/01 08:50:30 fetching corpus: 2355, signal 133140/135409 (executing program) 2025/09/01 08:50:30 fetching corpus: 2355, signal 133140/135448 (executing program) 2025/09/01 08:50:30 fetching corpus: 2355, signal 133140/135491 (executing program) 2025/09/01 08:50:30 fetching corpus: 2355, signal 133140/135524 (executing program) 2025/09/01 08:50:30 fetching corpus: 2355, signal 133140/135579 (executing program) 2025/09/01 08:50:30 fetching corpus: 2355, signal 133140/135623 (executing program) 2025/09/01 08:50:30 fetching corpus: 2355, signal 133140/135656 (executing program) 2025/09/01 08:50:30 fetching corpus: 2355, signal 133140/135709 (executing program) 2025/09/01 08:50:30 fetching corpus: 2355, signal 133140/135740 (executing program) 2025/09/01 08:50:30 fetching corpus: 2355, signal 133140/135740 (executing program) 2025/09/01 08:50:32 starting 8 fuzzer processes 08:50:32 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 08:50:32 executing program 1: r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140), 0x0) 08:50:32 executing program 7: openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) 08:50:32 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) 08:50:32 executing program 3: getpriority(0x1, 0xffffffffffffffff) [ 70.400689] audit: type=1400 audit(1756716632.588:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:50:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x1a, 0x0, &(0x7f00000023c0)) 08:50:32 executing program 5: geteuid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) epoll_create(0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 08:50:32 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xb, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) symlinkat(&(0x7f0000000040)='./file0/file0\x00', r0, &(0x7f0000000200)='./file0\x00') utimensat(r0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={{0x77359400}, {0x0, 0x2710}}, 0x100) [ 71.568747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.572362] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.574981] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.579191] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.583049] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.696529] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.699681] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.703631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.707888] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.712510] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.773737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.776656] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.784425] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.788053] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.790059] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.792323] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.797341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.800492] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.803986] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.808224] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 71.814459] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 71.814589] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 71.817922] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 71.818435] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.823576] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 71.827183] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.828315] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.829238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.830113] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 71.835567] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.838872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.841195] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 71.843363] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 71.845014] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 71.854395] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 71.858135] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 71.864402] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 71.882011] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 71.901899] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 71.936122] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 73.602964] Bluetooth: hci0: command tx timeout [ 73.729011] Bluetooth: hci1: command tx timeout [ 73.920845] Bluetooth: hci4: command tx timeout [ 73.921474] Bluetooth: hci2: command tx timeout [ 73.922067] Bluetooth: hci3: command tx timeout [ 73.985106] Bluetooth: hci7: command tx timeout [ 73.985584] Bluetooth: hci6: command tx timeout [ 73.986270] Bluetooth: hci5: command tx timeout [ 75.648942] Bluetooth: hci0: command tx timeout [ 75.776883] Bluetooth: hci1: command tx timeout [ 75.970019] Bluetooth: hci3: command tx timeout [ 75.970441] Bluetooth: hci2: command tx timeout [ 75.970467] Bluetooth: hci4: command tx timeout [ 76.034865] Bluetooth: hci5: command tx timeout [ 76.034909] Bluetooth: hci6: command tx timeout [ 76.035381] Bluetooth: hci7: command tx timeout [ 77.697868] Bluetooth: hci0: command tx timeout [ 77.826872] Bluetooth: hci1: command tx timeout [ 78.016826] Bluetooth: hci4: command tx timeout [ 78.018207] Bluetooth: hci3: command tx timeout [ 78.018599] Bluetooth: hci2: command tx timeout [ 78.080876] Bluetooth: hci7: command tx timeout [ 78.081916] Bluetooth: hci5: command tx timeout [ 78.081955] Bluetooth: hci6: command tx timeout [ 79.745883] Bluetooth: hci0: command tx timeout [ 79.872841] Bluetooth: hci1: command tx timeout [ 80.064933] Bluetooth: hci2: command tx timeout [ 80.064994] Bluetooth: hci3: command tx timeout [ 80.065437] Bluetooth: hci4: command tx timeout [ 80.128887] Bluetooth: hci6: command tx timeout [ 80.129943] Bluetooth: hci5: command tx timeout [ 80.130385] Bluetooth: hci7: command tx timeout [ 107.600606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.601283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.778821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.779417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.151060] audit: type=1400 audit(1756716670.338:8): avc: denied { open } for pid=3734 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 108.156968] audit: type=1400 audit(1756716670.339:9): avc: denied { kernel } for pid=3734 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 108.214085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.214722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:51:10 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) [ 108.322477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.323643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:51:10 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) [ 108.503783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.504383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:51:10 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) [ 108.646135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.646691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:51:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2201, &(0x7f0000000000)) 08:51:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2201, &(0x7f0000000000)) 08:51:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2201, &(0x7f0000000000)) 08:51:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2201, &(0x7f0000000000)) 08:51:11 executing program 2: creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB=',version=9']) [ 109.116606] 9pnet: Unknown protocol version 9 [ 109.801148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.801947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.883026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.883644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.907831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.908406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.960288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.961042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.020719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.021455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.077242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.078121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.116438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.117421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.198203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.199093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.247312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.248469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.297643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.298575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.404993] tmpfs: Unknown parameter './file0/file0' 08:51:12 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 08:51:12 executing program 7: geteuid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) epoll_create(0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 08:51:12 executing program 3: getpriority(0x1, 0xffffffffffffffff) 08:51:12 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xb, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) symlinkat(&(0x7f0000000040)='./file0/file0\x00', r0, &(0x7f0000000200)='./file0\x00') utimensat(r0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={{0x77359400}, {0x0, 0x2710}}, 0x100) 08:51:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x1a, 0x0, &(0x7f00000023c0)) 08:51:12 executing program 1: r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140), 0x0) 08:51:12 executing program 2: creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB=',version=9']) 08:51:12 executing program 5: geteuid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) epoll_create(0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) [ 110.483466] 9pnet: Unknown protocol version 9 08:51:12 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 08:51:12 executing program 2: creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB=',version=9']) 08:51:12 executing program 7: geteuid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) epoll_create(0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 08:51:12 executing program 3: getpriority(0x1, 0xffffffffffffffff) 08:51:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x1a, 0x0, &(0x7f00000023c0)) 08:51:12 executing program 5: geteuid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) epoll_create(0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 08:51:12 executing program 1: r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140), 0x0) 08:51:12 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xb, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) symlinkat(&(0x7f0000000040)='./file0/file0\x00', r0, &(0x7f0000000200)='./file0\x00') utimensat(r0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={{0x77359400}, {0x0, 0x2710}}, 0x100) [ 110.609691] 9pnet: Unknown protocol version 9 08:51:12 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 08:51:12 executing program 3: getpriority(0x1, 0xffffffffffffffff) 08:51:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x1a, 0x0, &(0x7f00000023c0)) [ 110.649897] kmemleak: Found object by alias at 0x607f1a63d334 [ 110.649917] CPU: 1 UID: 0 PID: 3934 Comm: syz-executor.7 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 110.649936] Tainted: [W]=WARN [ 110.649940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 110.649948] Call Trace: [ 110.649952] [ 110.649957] dump_stack_lvl+0xca/0x120 [ 110.649989] __lookup_object+0x94/0xb0 [ 110.650007] delete_object_full+0x27/0x70 [ 110.650024] free_percpu+0x30/0x1160 [ 110.650041] ? arch_uprobe_clear_state+0x16/0x140 [ 110.650062] futex_hash_free+0x38/0xc0 [ 110.650078] mmput+0x2d3/0x390 [ 110.650097] do_exit+0x79d/0x2970 [ 110.650115] ? __pfx_do_exit+0x10/0x10 [ 110.650129] ? find_held_lock+0x2b/0x80 [ 110.650148] ? get_signal+0x835/0x2340 [ 110.650168] do_group_exit+0xd3/0x2a0 [ 110.650184] get_signal+0x2315/0x2340 [ 110.650202] ? put_task_stack+0xd2/0x240 [ 110.650216] ? __pfx_get_signal+0x10/0x10 [ 110.650233] ? __schedule+0xe91/0x3590 [ 110.650254] arch_do_signal_or_restart+0x80/0x790 [ 110.650273] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 110.650290] ? __x64_sys_futex+0x1c9/0x4d0 [ 110.650306] ? __x64_sys_futex+0x1d2/0x4d0 [ 110.650321] ? __x64_sys_openat+0x142/0x200 [ 110.650338] ? __pfx___x64_sys_futex+0x10/0x10 [ 110.650357] exit_to_user_mode_loop+0x8b/0x110 [ 110.650371] do_syscall_64+0x2f7/0x360 [ 110.650384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.650397] RIP: 0033:0x7fb4ea469b19 [ 110.650405] Code: Unable to access opcode bytes at 0x7fb4ea469aef. [ 110.650411] RSP: 002b:00007fb4e79df218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 110.650423] RAX: 0000000000000001 RBX: 00007fb4ea57cf68 RCX: 00007fb4ea469b19 [ 110.650431] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb4ea57cf6c [ 110.650438] RBP: 00007fb4ea57cf60 R08: 0000000000000018 R09: 0000000000000000 [ 110.650445] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fb4ea57cf6c [ 110.650453] R13: 00007ffc1cc0798f R14: 00007fb4e79df300 R15: 0000000000022000 [ 110.650469] [ 110.650473] kmemleak: Object (percpu) 0x607f1a63d328 (size 16): [ 110.650479] kmemleak: comm "syz-executor.3", pid 288, jiffies 4294777443 [ 110.650487] kmemleak: min_count = 1 [ 110.650491] kmemleak: count = 0 [ 110.650495] kmemleak: flags = 0x21 [ 110.650499] kmemleak: checksum = 0 [ 110.650502] kmemleak: backtrace: [ 110.650506] pcpu_alloc_noprof+0x87a/0x1170 [ 110.650523] mm_init+0x99b/0x1170 [ 110.650531] copy_process+0x3ab7/0x73c0 [ 110.650542] kernel_clone+0xea/0x7f0 [ 110.650552] __do_sys_clone+0xce/0x120 [ 110.650562] do_syscall_64+0xbf/0x360 [ 110.650572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.651628] kmemleak: Found object by alias at 0x607f1a63d32c [ 110.651647] CPU: 0 UID: 0 PID: 3936 Comm: syz-executor.2 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 110.651666] Tainted: [W]=WARN [ 110.651670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 110.651677] Call Trace: [ 110.651682] [ 110.651687] dump_stack_lvl+0xca/0x120 [ 110.651713] __lookup_object+0x94/0xb0 [ 110.651730] delete_object_full+0x27/0x70 [ 110.651747] free_percpu+0x30/0x1160 [ 110.651770] ? arch_uprobe_clear_state+0x16/0x140 [ 110.651791] futex_hash_free+0x38/0xc0 [ 110.651806] mmput+0x2d3/0x390 [ 110.651825] do_exit+0x79d/0x2970 [ 110.651844] ? __pfx_do_exit+0x10/0x10 [ 110.651858] ? find_held_lock+0x2b/0x80 [ 110.651876] ? get_signal+0x835/0x2340 [ 110.651897] do_group_exit+0xd3/0x2a0 [ 110.651912] get_signal+0x2315/0x2340 [ 110.651930] ? put_task_stack+0xd2/0x240 [ 110.651945] ? __pfx_get_signal+0x10/0x10 [ 110.651963] ? __schedule+0xe91/0x3590 [ 110.651988] arch_do_signal_or_restart+0x80/0x790 [ 110.652006] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 110.652022] ? __x64_sys_futex+0x1c9/0x4d0 [ 110.652035] ? __x64_sys_futex+0x1d2/0x4d0 [ 110.652050] ? __pfx___x64_sys_futex+0x10/0x10 [ 110.652064] ? xfd_validate_state+0x55/0x180 [ 110.652085] exit_to_user_mode_loop+0x8b/0x110 [ 110.652099] do_syscall_64+0x2f7/0x360 [ 110.652112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.652124] RIP: 0033:0x7f71bd0eeb19 [ 110.652132] Code: Unable to access opcode bytes at 0x7f71bd0eeaef. [ 110.652138] RSP: 002b:00007f71ba664218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 110.652150] RAX: 0000000000000001 RBX: 00007f71bd201f68 RCX: 00007f71bd0eeb19 [ 110.652157] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f71bd201f6c [ 110.652164] RBP: 00007f71bd201f60 R08: 0000000000000016 R09: 0000000000000000 [ 110.652171] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f71bd201f6c [ 110.652179] R13: 00007ffe664cf3bf R14: 00007f71ba664300 R15: 0000000000022000 [ 110.652194] [ 110.652198] kmemleak: Object (percpu) 0x607f1a63d328 (size 16): [ 110.652205] kmemleak: comm "syz-executor.3", pid 288, jiffies 4294777443 [ 110.652212] kmemleak: min_count = 1 [ 110.652216] kmemleak: count = 0 [ 110.652220] kmemleak: flags = 0x21 [ 110.652223] kmemleak: checksum = 0 [ 110.652227] kmemleak: backtrace: [ 110.652231] pcpu_alloc_noprof+0x87a/0x1170 [ 110.652250] mm_init+0x99b/0x1170 [ 110.652261] copy_process+0x3ab7/0x73c0 [ 110.652274] kernel_clone+0xea/0x7f0 [ 110.652287] __do_sys_clone+0xce/0x120 [ 110.652301] do_syscall_64+0xbf/0x360 [ 110.652313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.664492] kmemleak: Cannot insert 0x607f1a63d32c into the object search tree (overlaps existing) [ 110.664510] CPU: 0 UID: 0 PID: 3940 Comm: syz-executor.6 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 110.664534] Tainted: [W]=WARN [ 110.664539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 110.664547] Call Trace: [ 110.664551] [ 110.664556] dump_stack_lvl+0xca/0x120 [ 110.664584] __link_object+0x190/0x210 [ 110.664607] __create_object+0x48/0x80 [ 110.664632] pcpu_alloc_noprof+0x87a/0x1170 [ 110.664664] __percpu_init_rwsem+0x2d/0x160 [ 110.664686] ? security_sb_alloc+0x75/0x140 [ 110.664710] alloc_super+0x29e/0xb80 [ 110.664729] sget_fc+0xfe/0xb80 [ 110.664744] ? __pfx_set_anon_super_fc+0x10/0x10 [ 110.664777] ? __pfx_ramfs_fill_super+0x10/0x10 [ 110.664799] get_tree_nodev+0x28/0x190 [ 110.664817] vfs_get_tree+0x93/0x340 [ 110.664842] path_mount+0x132d/0x1dd0 [ 110.664862] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 110.664881] ? __pfx_path_mount+0x10/0x10 [ 110.664900] ? kmem_cache_free+0x2a1/0x540 [ 110.664915] ? putname.part.0+0x11b/0x160 [ 110.664938] ? getname_flags.part.0+0x1c6/0x540 [ 110.664964] ? putname.part.0+0x11b/0x160 [ 110.664989] __x64_sys_mount+0x27b/0x300 [ 110.665008] ? __pfx___x64_sys_mount+0x10/0x10 [ 110.665035] do_syscall_64+0xbf/0x360 [ 110.665051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.665067] RIP: 0033:0x7f489ae70b19 [ 110.665079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 110.665094] RSP: 002b:00007f48983e6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 110.665109] RAX: ffffffffffffffda RBX: 00007f489af83f60 RCX: 00007f489ae70b19 [ 110.665119] RDX: 0000000020000180 RSI: 00000000200000c0 RDI: 0000000000000000 [ 110.665129] RBP: 00007f489aecaf6d R08: 0000000000000000 R09: 0000000000000000 [ 110.665138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.665148] R13: 00007ffc766307af R14: 00007f48983e6300 R15: 0000000000022000 [ 110.665170] [ 110.665856] kmemleak: Kernel memory leak detector disabled [ 110.665861] kmemleak: Object (percpu) 0x607f1a63d328 (size 16): [ 110.665871] kmemleak: comm "syz-executor.3", pid 288, jiffies 4294777443 [ 110.665880] kmemleak: min_count = 1 [ 110.665885] kmemleak: count = 0 [ 110.665890] kmemleak: flags = 0x21 [ 110.665895] kmemleak: checksum = 0 [ 110.665900] kmemleak: backtrace: [ 110.665903] pcpu_alloc_noprof+0x87a/0x1170 [ 110.665926] mm_init+0x99b/0x1170 [ 110.665937] copy_process+0x3ab7/0x73c0 [ 110.665951] kernel_clone+0xea/0x7f0 [ 110.665965] __do_sys_clone+0xce/0x120 [ 110.665979] do_syscall_64+0xbf/0x360 [ 110.665992] entry_SYSCALL_64_after_hwframe+0x77/0x7f 08:51:12 executing program 2: creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB=',version=9']) 08:51:12 executing program 7: geteuid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) epoll_create(0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 08:51:12 executing program 1: r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140), 0x0) [ 110.742520] 9pnet: Unknown protocol version 9 08:51:12 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xb, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) symlinkat(&(0x7f0000000040)='./file0/file0\x00', r0, &(0x7f0000000200)='./file0\x00') utimensat(r0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={{0x77359400}, {0x0, 0x2710}}, 0x100) 08:51:12 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0xeb, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:51:12 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xb, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) symlinkat(&(0x7f0000000040)='./file0/file0\x00', r0, &(0x7f0000000200)='./file0\x00') utimensat(r0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={{0x77359400}, {0x0, 0x2710}}, 0x100) 08:51:12 executing program 5: geteuid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) epoll_create(0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) [ 110.800464] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI [ 110.801385] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 110.802075] CPU: 1 UID: 0 PID: 3954 Comm: syz-executor.7 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 110.803990] Tainted: [W]=WARN [ 110.804906] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 110.807206] RIP: 0010:perf_tp_event+0x175/0xe70 [ 110.808197] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 110.810706] RSP: 0018:ffff88804562f800 EFLAGS: 00010212 [ 110.811127] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc900040aa000 [ 110.811683] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 110.812237] RBP: ffff88804562fa70 R08: ffff88806cf31340 R09: ffffe8ffffd15330 [ 110.812803] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 110.813365] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 110.813930] FS: 00007fb4e79df700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 110.814561] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.815021] CR2: 0000555570794c98 CR3: 0000000043fda000 CR4: 0000000000350ef0 [ 110.815587] Call Trace: [ 110.815796] [ 110.815985] ? __pfx_perf_tp_event+0x10/0x10 [ 110.816345] ? lock_is_held_type+0x9e/0x120 [ 110.816708] ? lock_is_held_type+0x9e/0x120 [ 110.817058] ? perf_trace_lock+0xb5/0x5d0 [ 110.817396] ? perf_trace_lock+0xb5/0x5d0 [ 110.817729] ? __pfx_perf_trace_lock+0x10/0x10 [ 110.818102] ? __pfx_perf_trace_lock+0x10/0x10 [ 110.818474] ? find_held_lock+0x2b/0x80 [ 110.818802] ? find_held_lock+0x2b/0x80 [ 110.819126] ? __perf_install_in_context+0x503/0xb90 [ 110.819534] ? lock_release+0xc8/0x290 [ 110.819849] ? do_raw_spin_unlock+0x53/0x220 [ 110.820208] ? perf_trace_run_bpf_submit+0xef/0x180 [ 110.820619] perf_trace_run_bpf_submit+0xef/0x180 [ 110.821014] perf_trace_lock+0x337/0x5d0 [ 110.821346] ? __pfx_perf_trace_lock+0x10/0x10 [ 110.821716] ? lock_acquire+0x15e/0x2f0 [ 110.822041] ? futex_ref_get+0x48/0x300 [ 110.822366] ? futex_ref_get+0x114/0x300 [ 110.822695] ? futex_hash+0x15c/0x390 [ 110.823008] lock_release+0x1ab/0x290 [ 110.823321] ? futex_hash+0x15c/0x390 [ 110.823627] futex_ref_get+0x119/0x300 [ 110.823940] ? futex_hash+0x15c/0x390 [ 110.824247] futex_hash+0x70/0x390 [ 110.824544] futex_wake+0x143/0x540 [ 110.824844] ? __pfx_perf_trace_lock+0x10/0x10 [ 110.825215] ? __pfx_futex_wake+0x10/0x10 [ 110.825548] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 110.825961] ? lock_release+0xc8/0x290 [ 110.826279] do_futex+0x26d/0x370 [ 110.826566] ? __pfx_do_futex+0x10/0x10 [ 110.826890] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 110.827316] __x64_sys_futex+0x1c9/0x4d0 [ 110.827647] ? __pfx___x64_sys_futex+0x10/0x10 [ 110.828014] ? from_kuid_munged+0xaa/0x130 [ 110.828358] ? xfd_validate_state+0x55/0x180 [ 110.828730] ? __pfx_from_kuid_munged+0x10/0x10 [ 110.829110] do_syscall_64+0xbf/0x360 [ 110.829419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.829830] RIP: 0033:0x7fb4ea469b19 [ 110.830127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 110.831554] RSP: 002b:00007fb4e79df218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 110.832149] RAX: ffffffffffffffda RBX: 00007fb4ea57cf68 RCX: 00007fb4ea469b19 [ 110.832718] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb4ea57cf6c [ 110.833274] RBP: 00007fb4ea57cf60 R08: 000000000000000e R09: 0000000000000000 [ 110.833836] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fb4ea57cf6c [ 110.834404] R13: 00007ffc1cc0798f R14: 00007fb4e79df300 R15: 0000000000022000 [ 110.834974] [ 110.835168] Modules linked in: [ 110.835455] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI [ 110.836321] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 110.837007] CPU: 1 UID: 0 PID: 3954 Comm: syz-executor.7 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 110.837940] Tainted: [D]=DIE, [W]=WARN [ 110.838242] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 110.838886] RIP: 0010:perf_tp_event+0x175/0xe70 [ 110.839265] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 110.840696] RSP: 0018:ffff88806cf08b40 EFLAGS: 00010012 [ 110.841116] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 110.841674] RDX: ffff888015ee9b80 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 110.842232] RBP: ffff88806cf08db0 R08: ffff88806cf31490 R09: ffffe8ffffd15330 [ 110.842790] R10: 0000000000000000 R11: ffff88806cf08ff8 R12: dffffc0000000000 [ 110.843349] R13: 0000000000000024 R14: ffff88806cf31490 R15: dffffc0000000000 [ 110.843910] FS: 00007fb4e79df700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 110.844551] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.845007] CR2: 0000555570794c98 CR3: 0000000043fda000 CR4: 0000000000350ef0 [ 110.845559] Call Trace: [ 110.845763] [ 110.845940] ? __pfx_perf_tp_event+0x10/0x10 [ 110.846301] ? mark_held_locks+0x49/0x80 [ 110.846623] ? _raw_spin_unlock_irq+0x23/0x40 [ 110.846981] ? tmigr_handle_remote_up+0x1fa/0xa10 [ 110.847366] ? __lock_acquire+0xc65/0x1b70 [ 110.847703] ? perf_trace_run_bpf_submit+0xef/0x180 [ 110.848099] perf_trace_run_bpf_submit+0xef/0x180 [ 110.848491] perf_trace_lock+0x337/0x5d0 [ 110.848816] ? __pfx_perf_trace_lock+0x10/0x10 [ 110.849177] ? lock_acquire+0x18c/0x2f0 [ 110.849494] ? __flush_smp_call_function_queue+0x38b/0x740 [ 110.849935] lock_release+0x1ab/0x290 [ 110.850241] _raw_spin_unlock_irqrestore+0x1a/0x50 [ 110.850632] ? __pfx_rcu_exp_handler+0x10/0x10 [ 110.850999] __flush_smp_call_function_queue+0x38b/0x740 [ 110.851428] __sysvec_call_function_single+0x6d/0x370 [ 110.851840] sysvec_call_function_single+0xa1/0xc0 [ 110.852227] [ 110.852407] [ 110.852593] asm_sysvec_call_function_single+0x1a/0x20 [ 110.853005] RIP: 0010:oops_exit+0x0/0x50 [ 110.853330] Code: 00 3a 00 be ff ff ff ff 48 c7 c7 50 b4 43 86 e8 c6 0f f9 ff 5b e9 50 00 3a 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 36 00 3a 00 8b 1d c0 3d 4f 06 31 ff 89 de e8 57 [ 110.854725] RSP: 0018:ffff88804562f690 EFLAGS: 00000202 [ 110.855138] RAX: 000000000002d303 RBX: 0000000000000212 RCX: ffffc900040aa000 [ 110.855690] RDX: 0000000000040000 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 110.856242] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f12690 [ 110.856795] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88804562f758 [ 110.857344] R13: 0000000000000000 R14: dffffc0020000032 R15: 0000000000000000 [ 110.857897] ? oops_end+0x4a/0xe0 [ 110.858183] oops_end+0x65/0xe0 [ 110.858456] exc_general_protection+0x1a2/0x330 [ 110.858829] asm_exc_general_protection+0x26/0x30 [ 110.859208] RIP: 0010:perf_tp_event+0x175/0xe70 [ 110.859577] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 110.860969] RSP: 0018:ffff88804562f800 EFLAGS: 00010212 [ 110.861381] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc900040aa000 [ 110.861933] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 110.862481] RBP: ffff88804562fa70 R08: ffff88806cf31340 R09: ffffe8ffffd15330 [ 110.863028] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 110.863582] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 110.864135] ? perf_tp_event+0x167/0xe70 [ 110.864475] ? __pfx_perf_tp_event+0x10/0x10 [ 110.864829] ? lock_is_held_type+0x9e/0x120 [ 110.865172] ? lock_is_held_type+0x9e/0x120 [ 110.865518] ? perf_trace_lock+0xb5/0x5d0 [ 110.865846] ? perf_trace_lock+0xb5/0x5d0 [ 110.866175] ? __pfx_perf_trace_lock+0x10/0x10 [ 110.866544] ? __pfx_perf_trace_lock+0x10/0x10 [ 110.866907] ? find_held_lock+0x2b/0x80 [ 110.867225] ? find_held_lock+0x2b/0x80 [ 110.867544] ? __perf_install_in_context+0x503/0xb90 [ 110.867940] ? lock_release+0xc8/0x290 [ 110.868251] ? do_raw_spin_unlock+0x53/0x220 [ 110.868613] ? perf_trace_run_bpf_submit+0xef/0x180 [ 110.869008] perf_trace_run_bpf_submit+0xef/0x180 [ 110.869394] perf_trace_lock+0x337/0x5d0 [ 110.869719] ? __pfx_perf_trace_lock+0x10/0x10 [ 110.870082] ? lock_acquire+0x15e/0x2f0 [ 110.870395] ? futex_ref_get+0x48/0x300 [ 110.870708] ? futex_ref_get+0x114/0x300 [ 110.871025] ? futex_hash+0x15c/0x390 [ 110.871325] lock_release+0x1ab/0x290 [ 110.871628] ? futex_hash+0x15c/0x390 [ 110.871927] futex_ref_get+0x119/0x300 [ 110.872234] ? futex_hash+0x15c/0x390 [ 110.872540] futex_hash+0x70/0x390 [ 110.872824] futex_wake+0x143/0x540 [ 110.873115] ? __pfx_perf_trace_lock+0x10/0x10 [ 110.873480] ? __pfx_futex_wake+0x10/0x10 [ 110.873812] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 110.874212] ? lock_release+0xc8/0x290 [ 110.874526] do_futex+0x26d/0x370 [ 110.874806] ? __pfx_do_futex+0x10/0x10 [ 110.875121] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 110.875541] __x64_sys_futex+0x1c9/0x4d0 [ 110.875862] ? __pfx___x64_sys_futex+0x10/0x10 [ 110.876223] ? from_kuid_munged+0xaa/0x130 [ 110.876562] ? xfd_validate_state+0x55/0x180 [ 110.876913] ? __pfx_from_kuid_munged+0x10/0x10 [ 110.877284] do_syscall_64+0xbf/0x360 [ 110.877585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.877984] RIP: 0033:0x7fb4ea469b19 [ 110.878275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 110.879664] RSP: 002b:00007fb4e79df218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 110.880251] RAX: ffffffffffffffda RBX: 00007fb4ea57cf68 RCX: 00007fb4ea469b19 [ 110.880806] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb4ea57cf6c [ 110.881356] RBP: 00007fb4ea57cf60 R08: 000000000000000e R09: 0000000000000000 [ 110.881904] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fb4ea57cf6c [ 110.882458] R13: 00007ffc1cc0798f R14: 00007fb4e79df300 R15: 0000000000022000 [ 110.883013] [ 110.883204] Modules linked in: [ 110.883462] ---[ end trace 0000000000000000 ]--- [ 110.883826] RIP: 0010:perf_tp_event+0x175/0xe70 [ 110.884195] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 110.885593] RSP: 0018:ffff88804562f800 EFLAGS: 00010212 [ 110.886007] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc900040aa000 [ 110.886555] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 110.887104] RBP: ffff88804562fa70 R08: ffff88806cf31340 R09: ffffe8ffffd15330 [ 110.887653] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 110.888199] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 110.888759] FS: 00007fb4e79df700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 110.889376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.889826] CR2: 0000555570794c98 CR3: 0000000043fda000 CR4: 0000000000350ef0 [ 110.890379] Kernel panic - not syncing: Fatal exception in interrupt [ 111.935324] Shutting down cpus with NMI [ 111.935867] Kernel Offset: disabled [ 111.936169] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 08:51:13 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888015017f30 RCX=000000000000000d RDX=1ffffd1ffff82a66 RSI=ffffffff85c1c760 RDI=ffffffff85b23608 RBP=ffffffff85c1c760 RSP=ffff8880150178a0 R8 =ffffffff84c93ca0 R9 =ffff888015017998 R10=000000000003bea3 R11=000000000002638c R12=ffffffff81358702 R13=ffff8880150179a0 R14=ffff888015017f00 R15=ffff888015017958 RIP=ffffffff8151d8f2 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f402f2c3900 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f402e7594f0 CR3=000000000bd44000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=30306234386136303638616663356134 XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=fbb65103b8560cd30000000000168580 XMM05=d3fdd5f48436fbd700000000000aead0 XMM06=9ae8a5464daafda900000000000ae988 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00200000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff88804562f0f0 R8 =0000000000000000 R9 =ffffed10014f0046 R10=0000000000000031 R11=0000000065646f43 R12=0000000000000031 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0 RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb4e79df700 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555570794c98 CR3=0000000043fda000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fb4ea5507c000007fb4ea5507c8 XMM02=00007fb4ea5507e000007fb4ea5507c0 XMM03=00007fb4ea5507c800007fb4ea5507c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000