Warning: Permanently added '[localhost]:51614' (ECDSA) to the list of known hosts. 2025/09/01 08:55:18 fuzzer started 2025/09/01 08:55:18 dialing manager at localhost:35473 syzkaller login: [ 59.725172] cgroup: Unknown subsys name 'net' [ 59.777386] cgroup: Unknown subsys name 'cpuset' [ 59.786459] cgroup: Unknown subsys name 'rlimit' 2025/09/01 08:55:28 syscalls: 2214 2025/09/01 08:55:28 code coverage: enabled 2025/09/01 08:55:28 comparison tracing: enabled 2025/09/01 08:55:28 extra coverage: enabled 2025/09/01 08:55:28 setuid sandbox: enabled 2025/09/01 08:55:28 namespace sandbox: enabled 2025/09/01 08:55:28 Android sandbox: enabled 2025/09/01 08:55:28 fault injection: enabled 2025/09/01 08:55:28 leak checking: enabled 2025/09/01 08:55:28 net packet injection: enabled 2025/09/01 08:55:28 net device setup: enabled 2025/09/01 08:55:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 08:55:28 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 08:55:28 USB emulation: enabled 2025/09/01 08:55:28 hci packet injection: enabled 2025/09/01 08:55:28 wifi device emulation: enabled 2025/09/01 08:55:28 802.15.4 emulation: enabled 2025/09/01 08:55:28 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 08:55:28 fetching corpus: 50, signal 25068/28354 (executing program) 2025/09/01 08:55:28 fetching corpus: 100, signal 39664/43946 (executing program) 2025/09/01 08:55:28 fetching corpus: 150, signal 50595/55633 (executing program) 2025/09/01 08:55:28 fetching corpus: 200, signal 53947/59978 (executing program) 2025/09/01 08:55:28 fetching corpus: 250, signal 57177/64143 (executing program) 2025/09/01 08:55:29 fetching corpus: 300, signal 64947/72295 (executing program) 2025/09/01 08:55:29 fetching corpus: 350, signal 68313/76323 (executing program) 2025/09/01 08:55:29 fetching corpus: 400, signal 71397/80002 (executing program) 2025/09/01 08:55:29 fetching corpus: 450, signal 73803/82939 (executing program) 2025/09/01 08:55:29 fetching corpus: 500, signal 76408/86045 (executing program) 2025/09/01 08:55:29 fetching corpus: 550, signal 78395/88586 (executing program) 2025/09/01 08:55:29 fetching corpus: 600, signal 81886/92279 (executing program) 2025/09/01 08:55:29 fetching corpus: 650, signal 85129/95695 (executing program) 2025/09/01 08:55:29 fetching corpus: 700, signal 87186/98047 (executing program) 2025/09/01 08:55:30 fetching corpus: 750, signal 88670/99944 (executing program) 2025/09/01 08:55:30 fetching corpus: 800, signal 91242/102546 (executing program) 2025/09/01 08:55:30 fetching corpus: 850, signal 93118/104619 (executing program) 2025/09/01 08:55:30 fetching corpus: 900, signal 94866/106527 (executing program) 2025/09/01 08:55:30 fetching corpus: 950, signal 96749/108427 (executing program) 2025/09/01 08:55:30 fetching corpus: 1000, signal 98263/110059 (executing program) 2025/09/01 08:55:30 fetching corpus: 1050, signal 100085/111849 (executing program) 2025/09/01 08:55:30 fetching corpus: 1100, signal 102713/114199 (executing program) 2025/09/01 08:55:30 fetching corpus: 1150, signal 104090/115553 (executing program) 2025/09/01 08:55:31 fetching corpus: 1200, signal 106356/117475 (executing program) 2025/09/01 08:55:31 fetching corpus: 1250, signal 108703/119379 (executing program) 2025/09/01 08:55:31 fetching corpus: 1300, signal 109812/120510 (executing program) 2025/09/01 08:55:31 fetching corpus: 1350, signal 110794/121497 (executing program) 2025/09/01 08:55:31 fetching corpus: 1400, signal 112759/123007 (executing program) 2025/09/01 08:55:31 fetching corpus: 1450, signal 114553/124368 (executing program) 2025/09/01 08:55:31 fetching corpus: 1500, signal 115554/125241 (executing program) 2025/09/01 08:55:31 fetching corpus: 1550, signal 116930/126290 (executing program) 2025/09/01 08:55:32 fetching corpus: 1600, signal 117781/126983 (executing program) 2025/09/01 08:55:32 fetching corpus: 1650, signal 118624/127671 (executing program) 2025/09/01 08:55:32 fetching corpus: 1700, signal 119694/128469 (executing program) 2025/09/01 08:55:32 fetching corpus: 1750, signal 120577/129101 (executing program) 2025/09/01 08:55:32 fetching corpus: 1800, signal 121498/129787 (executing program) 2025/09/01 08:55:32 fetching corpus: 1850, signal 122528/130489 (executing program) 2025/09/01 08:55:32 fetching corpus: 1900, signal 123549/131126 (executing program) 2025/09/01 08:55:32 fetching corpus: 1950, signal 125315/132107 (executing program) 2025/09/01 08:55:32 fetching corpus: 2000, signal 126029/132648 (executing program) 2025/09/01 08:55:33 fetching corpus: 2050, signal 126864/133179 (executing program) 2025/09/01 08:55:33 fetching corpus: 2100, signal 127636/133685 (executing program) 2025/09/01 08:55:33 fetching corpus: 2150, signal 129215/134350 (executing program) 2025/09/01 08:55:33 fetching corpus: 2200, signal 130060/134809 (executing program) 2025/09/01 08:55:33 fetching corpus: 2250, signal 130610/135092 (executing program) 2025/09/01 08:55:33 fetching corpus: 2300, signal 132674/135851 (executing program) 2025/09/01 08:55:33 fetching corpus: 2350, signal 133483/136164 (executing program) 2025/09/01 08:55:33 fetching corpus: 2400, signal 134164/136402 (executing program) 2025/09/01 08:55:33 fetching corpus: 2445, signal 134785/136583 (executing program) 2025/09/01 08:55:33 fetching corpus: 2445, signal 134785/136624 (executing program) 2025/09/01 08:55:33 fetching corpus: 2445, signal 134785/136660 (executing program) 2025/09/01 08:55:33 fetching corpus: 2445, signal 134785/136693 (executing program) 2025/09/01 08:55:33 fetching corpus: 2445, signal 134785/136720 (executing program) 2025/09/01 08:55:33 fetching corpus: 2445, signal 134785/136747 (executing program) 2025/09/01 08:55:33 fetching corpus: 2445, signal 134785/136792 (executing program) 2025/09/01 08:55:33 fetching corpus: 2445, signal 134785/136832 (executing program) 2025/09/01 08:55:34 fetching corpus: 2445, signal 134785/136858 (executing program) 2025/09/01 08:55:34 fetching corpus: 2445, signal 134785/136894 (executing program) 2025/09/01 08:55:34 fetching corpus: 2445, signal 134785/136921 (executing program) 2025/09/01 08:55:34 fetching corpus: 2445, signal 134785/136962 (executing program) 2025/09/01 08:55:34 fetching corpus: 2445, signal 134785/136999 (executing program) 2025/09/01 08:55:34 fetching corpus: 2445, signal 134785/137031 (executing program) 2025/09/01 08:55:34 fetching corpus: 2445, signal 134785/137072 (executing program) 2025/09/01 08:55:34 fetching corpus: 2445, signal 134785/137107 (executing program) 2025/09/01 08:55:34 fetching corpus: 2445, signal 134785/137147 (executing program) 2025/09/01 08:55:34 fetching corpus: 2445, signal 134785/137194 (executing program) 2025/09/01 08:55:34 fetching corpus: 2445, signal 134785/137216 (executing program) 2025/09/01 08:55:34 fetching corpus: 2445, signal 134785/137216 (executing program) 2025/09/01 08:55:35 starting 8 fuzzer processes 08:55:35 executing program 0: add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r1, &(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, r0) 08:55:35 executing program 1: futex(0x0, 0x85, 0x0, 0x0, &(0x7f00000006c0), 0x0) 08:55:35 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x54, 0x0, 0x0) 08:55:35 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 77.320293] audit: type=1400 audit(1756716936.002:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:55:36 executing program 3: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9, 0x0, 0x4c}) 08:55:36 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mq_notify(0xffffffffffffffff, 0x0) 08:55:36 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) symlinkat(&(0x7f0000005dc0)='./file0\x00', r0, &(0x7f0000005e00)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) faccessat2(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x300) 08:55:36 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0xffffffb8}) [ 78.415458] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.416791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.417998] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.420376] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.422197] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.610096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.612151] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.614139] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.615440] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.616349] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.617188] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.619042] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.620056] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.621098] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.627222] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.629349] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.631017] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.632007] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.639727] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.642568] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.680518] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.684042] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.702404] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.707239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 78.709067] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 78.711163] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 78.716519] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 78.722214] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.723994] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.724641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 78.730548] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 78.745858] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 78.747433] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 78.748390] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 78.748925] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 78.753345] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 78.757029] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 78.759983] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 78.764410] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 78.770283] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 80.453214] Bluetooth: hci0: command tx timeout [ 80.646792] Bluetooth: hci3: command tx timeout [ 80.647286] Bluetooth: hci2: command tx timeout [ 80.709828] Bluetooth: hci1: command tx timeout [ 80.774880] Bluetooth: hci4: command tx timeout [ 80.836851] Bluetooth: hci7: command tx timeout [ 80.837345] Bluetooth: hci5: command tx timeout [ 80.838301] Bluetooth: hci6: command tx timeout [ 82.500840] Bluetooth: hci0: command tx timeout [ 82.692934] Bluetooth: hci3: command tx timeout [ 82.693379] Bluetooth: hci2: command tx timeout [ 82.757330] Bluetooth: hci1: command tx timeout [ 82.820897] Bluetooth: hci4: command tx timeout [ 82.885894] Bluetooth: hci7: command tx timeout [ 82.885927] Bluetooth: hci6: command tx timeout [ 82.886376] Bluetooth: hci5: command tx timeout [ 84.549815] Bluetooth: hci0: command tx timeout [ 84.741890] Bluetooth: hci2: command tx timeout [ 84.742304] Bluetooth: hci3: command tx timeout [ 84.804822] Bluetooth: hci1: command tx timeout [ 84.868798] Bluetooth: hci4: command tx timeout [ 84.932807] Bluetooth: hci5: command tx timeout [ 84.933214] Bluetooth: hci7: command tx timeout [ 84.935767] Bluetooth: hci6: command tx timeout [ 86.596801] Bluetooth: hci0: command tx timeout [ 86.788879] Bluetooth: hci3: command tx timeout [ 86.789280] Bluetooth: hci2: command tx timeout [ 86.852793] Bluetooth: hci1: command tx timeout [ 86.916796] Bluetooth: hci4: command tx timeout [ 86.982775] Bluetooth: hci6: command tx timeout [ 86.983196] Bluetooth: hci5: command tx timeout [ 86.983607] Bluetooth: hci7: command tx timeout [ 114.099855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.100520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.325836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.326465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.566677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.567311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.672368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.673307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:56:13 executing program 1: futex(0x0, 0x85, 0x0, 0x0, &(0x7f00000006c0), 0x0) [ 114.791806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.792384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:56:13 executing program 1: futex(0x0, 0x85, 0x0, 0x0, &(0x7f00000006c0), 0x0) [ 114.945634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.946277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:56:13 executing program 1: futex(0x0, 0x85, 0x0, 0x0, &(0x7f00000006c0), 0x0) 08:56:13 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001f40), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001f80)='cachetag', 0x0, 0xffffffffffffffff) [ 115.061379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.062316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:56:13 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001f40), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001f80)='cachetag', 0x0, 0xffffffffffffffff) 08:56:13 executing program 3: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9, 0x0, 0x4c}) [ 115.206284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.207081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:56:13 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001f40), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001f80)='cachetag', 0x0, 0xffffffffffffffff) 08:56:13 executing program 3: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9, 0x0, 0x4c}) [ 115.361092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.361696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.463626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.464267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.607116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.607703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.632018] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.653530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.654792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.689006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.689561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.714351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.714942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.736307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.736888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.769410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.770627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.899374] audit: type=1400 audit(1756716974.580:8): avc: denied { open } for pid=3907 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 115.903354] audit: type=1400 audit(1756716974.580:9): avc: denied { kernel } for pid=3907 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 115.930039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.245223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:56:14 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0xffffffb8}) 08:56:14 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) symlinkat(&(0x7f0000005dc0)='./file0\x00', r0, &(0x7f0000005e00)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) faccessat2(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x300) 08:56:14 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001f40), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000001f80)='cachetag', 0x0, 0xffffffffffffffff) 08:56:14 executing program 3: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9, 0x0, 0x4c}) 08:56:14 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mq_notify(0xffffffffffffffff, 0x0) 08:56:14 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x54, 0x0, 0x0) 08:56:14 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:56:14 executing program 0: add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r1, &(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, r0) [ 116.304663] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.342232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:56:15 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mq_notify(0xffffffffffffffff, 0x0) 08:56:15 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x54, 0x0, 0x0) 08:56:15 executing program 1: add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r1, &(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, r0) 08:56:15 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) symlinkat(&(0x7f0000005dc0)='./file0\x00', r0, &(0x7f0000005e00)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) faccessat2(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x300) [ 116.419486] kmemleak: Found object by alias at 0x607f1a63e97c [ 116.419506] CPU: 0 UID: 0 PID: 3932 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 116.419525] Tainted: [W]=WARN [ 116.419529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 116.419537] Call Trace: [ 116.419541] [ 116.419546] dump_stack_lvl+0xca/0x120 [ 116.419572] __lookup_object+0x94/0xb0 [ 116.419590] delete_object_full+0x27/0x70 [ 116.419607] free_percpu+0x30/0x1160 [ 116.419625] ? arch_uprobe_clear_state+0x16/0x140 [ 116.419646] futex_hash_free+0x38/0xc0 [ 116.419661] mmput+0x2d3/0x390 [ 116.419680] do_exit+0x79d/0x2970 [ 116.419695] ? signal_wake_up_state+0x85/0x120 [ 116.419711] ? zap_other_threads+0x2b9/0x3a0 [ 116.419727] ? __pfx_do_exit+0x10/0x10 [ 116.419746] ? do_group_exit+0x1c3/0x2a0 [ 116.419760] ? lock_release+0xc8/0x290 [ 116.419778] do_group_exit+0xd3/0x2a0 [ 116.419793] __x64_sys_exit_group+0x3e/0x50 [ 116.419807] x64_sys_call+0x18c5/0x18d0 [ 116.419824] do_syscall_64+0xbf/0x360 [ 116.419838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.419850] RIP: 0033:0x7f1151bdbb19 [ 116.419859] Code: Unable to access opcode bytes at 0x7f1151bdbaef. [ 116.419864] RSP: 002b:00007ffddef29ba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 116.419876] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f1151bdbb19 [ 116.419884] RDX: 00007f1151b8e72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 116.419891] RBP: 0000000000000000 R08: 0000001b2d4272ac R09: 0000000000000000 [ 116.419898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.419905] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffddef29c90 [ 116.419920] [ 116.419924] kmemleak: Object (percpu) 0x607f1a63e978 (size 8): [ 116.419930] kmemleak: comm "syz-executor.3", pid 3935, jiffies 4294783015 [ 116.419938] kmemleak: min_count = 1 [ 116.419942] kmemleak: count = 0 [ 116.419945] kmemleak: flags = 0x21 [ 116.419949] kmemleak: checksum = 0 [ 116.419953] kmemleak: backtrace: [ 116.419956] pcpu_alloc_noprof+0x87a/0x1170 [ 116.419972] alloc_vfsmnt+0x135/0x6e0 [ 116.419987] vfs_create_mount.part.0+0x40/0x440 [ 116.420002] path_mount+0x1637/0x1dd0 [ 116.420014] __x64_sys_mount+0x27b/0x300 [ 116.420026] do_syscall_64+0xbf/0x360 [ 116.420035] entry_SYSCALL_64_after_hwframe+0x77/0x7f 08:56:15 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0xffffffb8}) 08:56:15 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mq_notify(0xffffffffffffffff, 0x0) 08:56:15 executing program 1: add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r1, &(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, r0) 08:56:15 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x54, 0x0, 0x0) 08:56:15 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) symlinkat(&(0x7f0000005dc0)='./file0\x00', r0, &(0x7f0000005e00)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) faccessat2(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x300) 08:56:15 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) symlinkat(&(0x7f0000005dc0)='./file0\x00', r0, &(0x7f0000005e00)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) faccessat2(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x300) 08:56:15 executing program 0: add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r1, &(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, r0) 08:56:15 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 116.702810] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO 08:56:15 executing program 7: rt_sigaction(0x2c, &(0x7f0000000200)={&(0x7f0000000040)="0f38cc93000060ff66450f1bf9c4c1f812d0c4c19d61d1c443b9484702000fa45b0400c4e1fde949fe6440834405fb6f41df5395c4c2a502c8", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000300)) 08:56:15 executing program 0: add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r1, &(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, r0) [ 116.739774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:56:15 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) symlinkat(&(0x7f0000005dc0)='./file0\x00', r0, &(0x7f0000005e00)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) faccessat2(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x300) 08:56:15 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0xffffffb8}) 08:56:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000076000102000000000000", @ANYRES32], 0x18}], 0x1}, 0x0) [ 116.792470] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO 08:56:15 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) symlinkat(&(0x7f0000005dc0)='./file0\x00', r0, &(0x7f0000005e00)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) faccessat2(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x300) 08:56:15 executing program 1: add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r1, &(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, r0) 08:56:15 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x17}, './file0\x00'}) 08:56:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000076000102000000000000", @ANYRES32], 0x18}], 0x1}, 0x0) 08:56:15 executing program 7: rt_sigaction(0x2c, &(0x7f0000000200)={&(0x7f0000000040)="0f38cc93000060ff66450f1bf9c4c1f812d0c4c19d61d1c443b9484702000fa45b0400c4e1fde949fe6440834405fb6f41df5395c4c2a502c8", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000300)) 08:56:15 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38}, 0x4b}}, 0x0) 08:56:15 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:56:15 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000003c0)=ANY=[], 0x0) [ 117.113445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.114841] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 117.115713] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 117.116308] CPU: 1 UID: 0 PID: 3969 Comm: syz-executor.2 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 117.117224] Tainted: [W]=WARN [ 117.117979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 117.119748] RIP: 0010:perf_tp_event+0x175/0xe70 [ 117.120800] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 117.125068] RSP: 0018:ffff888045cef800 EFLAGS: 00010212 [ 117.125912] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 117.126478] RDX: ffff888042349b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 117.127035] RBP: ffff888045cefa70 R08: ffff88806cf31340 R09: ffffe8ffffd16058 [ 117.127585] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 117.128139] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 117.128696] FS: 000055559533a400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 117.129315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.129764] CR2: 000055559533bc18 CR3: 0000000042225000 CR4: 0000000000350ef0 [ 117.130323] Call Trace: [ 117.130529] [ 117.130716] ? arch_scale_cpu_capacity+0x17/0xa0 [ 117.131100] ? __pfx_perf_tp_event+0x10/0x10 [ 117.131450] ? __asan_memset+0x24/0x50 [ 117.131775] ? perf_trace_lock+0xb5/0x5d0 [ 117.132106] ? kvm_sched_clock_read+0x16/0x30 [ 117.132467] ? sched_clock+0x37/0x60 [ 117.132770] ? sched_clock_cpu+0x6c/0x4e0 [ 117.133100] ? lock_is_held_type+0x9e/0x120 [ 117.133446] ? perf_trace_run_bpf_submit+0xef/0x180 [ 117.133840] perf_trace_run_bpf_submit+0xef/0x180 [ 117.134230] perf_trace_lock+0x337/0x5d0 [ 117.134555] ? __pfx_perf_trace_lock+0x10/0x10 [ 117.134920] ? lock_acquire+0x15e/0x2f0 [ 117.135235] ? futex_ref_get+0x48/0x300 [ 117.135549] ? futex_ref_get+0x114/0x300 [ 117.135867] ? futex_hash+0x15c/0x390 [ 117.136169] lock_release+0x1ab/0x290 [ 117.136471] ? futex_hash+0x15c/0x390 [ 117.136772] futex_ref_get+0x119/0x300 [ 117.137078] ? futex_hash+0x15c/0x390 [ 117.137379] futex_hash+0x70/0x390 [ 117.137663] futex_wake+0x143/0x540 [ 117.137957] ? put_pid+0x1f/0x30 [ 117.138234] ? kernel_clone+0x204/0x7f0 [ 117.138550] ? __pfx_futex_wake+0x10/0x10 [ 117.138885] ? __pfx_kernel_clone+0x10/0x10 [ 117.139225] ? perf_trace_lock+0xb5/0x5d0 [ 117.139555] do_futex+0x26d/0x370 [ 117.139836] ? __pfx_do_futex+0x10/0x10 [ 117.140153] ? __pfx___do_sys_clone+0x10/0x10 [ 117.140507] ? find_held_lock+0x2b/0x80 [ 117.140827] __x64_sys_futex+0x1c9/0x4d0 [ 117.141151] ? __pfx___x64_sys_futex+0x10/0x10 [ 117.141515] ? xfd_validate_state+0x55/0x180 [ 117.141880] do_syscall_64+0xbf/0x360 [ 117.142187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.142594] RIP: 0033:0x7fd206d99b19 [ 117.142885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 117.144281] RSP: 002b:00007ffccc2ce688 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 117.144874] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd206d99b19 [ 117.145426] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd206eacf68 [ 117.145974] RBP: 00007fd206eacf60 R08: 00007fd20430f700 R09: 0000000000000000 [ 117.146534] R10: 00007fd20430f700 R11: 0000000000000246 R12: 00007fd206eb1a68 [ 117.147083] R13: 00007ffccc2ce790 R14: 00007fd206eacf60 R15: 000000000001c8bb [ 117.147642] [ 117.147835] Modules linked in: [ 117.148094] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI [ 117.149004] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 117.149691] CPU: 0 UID: 0 PID: 3971 Comm: syz-executor.4 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 117.150631] Tainted: [D]=DIE, [W]=WARN [ 117.150977] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 117.151622] RIP: 0010:perf_tp_event+0x175/0xe70 [ 117.152005] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 117.153432] RSP: 0018:ffff88804527f800 EFLAGS: 00010212 [ 117.153856] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 117.154423] RDX: ffff888017073700 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 117.154991] RBP: ffff88804527fa70 R08: ffff88806ce31340 R09: ffffe8ffffc16058 [ 117.155552] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 117.156112] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 117.156677] FS: 00005555932c0400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 117.157311] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.157770] CR2: 00007ff489a2b000 CR3: 000000000e497000 CR4: 0000000000350ef0 [ 117.158336] Call Trace: [ 117.158548] [ 117.158733] ? arch_scale_cpu_capacity+0x17/0xa0 [ 117.159126] ? __pfx_perf_tp_event+0x10/0x10 [ 117.159480] ? __asan_memset+0x24/0x50 [ 117.159807] ? __pfx_perf_trace_lock+0x10/0x10 [ 117.160176] ? __pfx___mutex_lock+0x10/0x10 [ 117.160530] ? perf_trace_lock+0xb5/0x5d0 [ 117.160865] ? kvm_sched_clock_read+0x16/0x30 [ 117.161234] ? sched_clock+0x37/0x60 [ 117.161541] ? sched_clock_cpu+0x6c/0x4e0 [ 117.161882] ? perf_trace_run_bpf_submit+0xef/0x180 [ 117.162301] perf_trace_run_bpf_submit+0xef/0x180 [ 117.162690] perf_trace_lock+0x337/0x5d0 [ 117.163017] ? __pfx_perf_trace_lock+0x10/0x10 [ 117.163388] ? __pfx_perf_trace_lock+0x10/0x10 [ 117.163762] ? get_futex_key+0x592/0x14a0 [ 117.164095] ? futex_ref_get+0x114/0x300 [ 117.164419] ? futex_hash+0x15c/0x390 [ 117.164723] lock_release+0x1ab/0x290 [ 117.165033] ? futex_hash+0x15c/0x390 [ 117.165338] futex_ref_get+0x119/0x300 [ 117.165651] ? futex_hash+0x15c/0x390 [ 117.165957] futex_hash+0x70/0x390 [ 117.166255] futex_wake+0x143/0x540 [ 117.166556] ? put_pid+0x1f/0x30 [ 117.166831] ? kernel_clone+0x204/0x7f0 [ 117.167149] ? __pfx_futex_wake+0x10/0x10 [ 117.167482] ? __pfx_kernel_clone+0x10/0x10 [ 117.167830] ? perf_trace_lock+0xb5/0x5d0 [ 117.168166] do_futex+0x26d/0x370 [ 117.168453] ? __pfx_do_futex+0x10/0x10 [ 117.168775] ? __pfx___do_sys_clone+0x10/0x10 [ 117.169135] ? find_held_lock+0x2b/0x80 [ 117.169463] __x64_sys_futex+0x1c9/0x4d0 [ 117.169792] ? __pfx___x64_sys_futex+0x10/0x10 [ 117.170168] ? xfd_validate_state+0x55/0x180 [ 117.170537] do_syscall_64+0xbf/0x360 [ 117.170844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.171254] RIP: 0033:0x7f37c88e9b19 [ 117.171551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 117.172965] RSP: 002b:00007ffeaffb8fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 117.173562] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f37c88e9b19 [ 117.174123] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f37c89fcf68 [ 117.174691] RBP: 00007f37c89fcf60 R08: 00007f37c5e5f700 R09: 0000000000000000 [ 117.175249] R10: 00007f37c5e5f700 R11: 0000000000000246 R12: 00007f37c8a01060 [ 117.175806] R13: 00007ffeaffb90f0 R14: 00007f37c89fcf60 R15: 000000000001c8b8 [ 117.176370] [ 117.176560] Modules linked in: [ 117.176819] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#3] SMP KASAN NOPTI [ 117.177675] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 117.178267] CPU: 1 UID: 0 PID: 3969 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 117.179186] Tainted: [D]=DIE, [W]=WARN [ 117.179484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 117.180117] RIP: 0010:perf_tp_event+0x175/0xe70 [ 117.180488] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 117.181887] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012 [ 117.182309] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 117.182858] RDX: ffff888042349b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 117.183407] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd16058 [ 117.183957] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000 [ 117.184507] R13: 000000000000002c R14: ffff88806cf31490 R15: dffffc0000000000 [ 117.185057] FS: 000055559533a400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 117.185672] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.186126] CR2: 000055559533bc18 CR3: 0000000042225000 CR4: 0000000000350ef0 [ 117.186682] Call Trace: [ 117.186887] [ 117.187062] ? perf_trace_lock+0xb5/0x5d0 [ 117.187391] ? __pfx_perf_tp_event+0x10/0x10 [ 117.187742] ? __wake_up+0x3f/0x60 [ 117.188026] ? find_held_lock+0x2b/0x80 [ 117.188343] ? ep_poll_callback+0x9ae/0xc50 [ 117.188688] ? perf_trace_lock+0xb5/0x5d0 [ 117.189018] ? __pfx_perf_trace_lock+0x10/0x10 [ 117.189386] ? find_held_lock+0x2b/0x80 [ 117.189702] ? tmigr_handle_remote_up+0x832/0xa10 [ 117.190088] ? lock_release+0xc8/0x290 [ 117.190403] ? perf_trace_run_bpf_submit+0xef/0x180 [ 117.190796] perf_trace_run_bpf_submit+0xef/0x180 [ 117.191181] perf_trace_lock+0x337/0x5d0 [ 117.191504] ? __pfx_perf_trace_lock+0x10/0x10 [ 117.191869] ? hrtimer_interrupt+0x114/0x830 [ 117.192217] lock_release+0x1ab/0x290 [ 117.192520] ktime_get_update_offsets_now+0xab/0x3c0 [ 117.192919] ? hrtimer_interrupt+0x114/0x830 [ 117.193268] hrtimer_interrupt+0x114/0x830 [ 117.193599] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 117.193984] ? trace_csd_function_exit+0x134/0x190 [ 117.194376] ? __flush_smp_call_function_queue+0x443/0x740 [ 117.194820] __sysvec_apic_timer_interrupt+0xbb/0x330 [ 117.195228] sysvec_apic_timer_interrupt+0x6b/0x80 [ 117.195616] [ 117.195794] [ 117.195975] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 117.196383] RIP: 0010:oops_exit+0x0/0x50 [ 117.196704] Code: 00 3a 00 be ff ff ff ff 48 c7 c7 50 b4 43 86 e8 c6 0f f9 ff 5b e9 50 00 3a 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 36 00 3a 00 8b 1d c0 3d 4f 06 31 ff 89 de e8 57 [ 117.198096] RSP: 0018:ffff888045cef690 EFLAGS: 00000202 [ 117.198514] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff8139f06f [ 117.199060] RDX: ffff888042349b80 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 117.199609] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f12690 [ 117.200155] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888045cef758 [ 117.200702] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000 [ 117.201255] ? add_taint+0x5f/0xd0 [ 117.201540] ? oops_end+0x4a/0xe0 [ 117.201826] oops_end+0x65/0xe0 [ 117.202095] exc_general_protection+0x1a2/0x330 [ 117.202473] asm_exc_general_protection+0x26/0x30 [ 117.202852] RIP: 0010:perf_tp_event+0x175/0xe70 [ 117.203222] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 117.204615] RSP: 0018:ffff888045cef800 EFLAGS: 00010212 [ 117.205032] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 117.205581] RDX: ffff888042349b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 117.206128] RBP: ffff888045cefa70 R08: ffff88806cf31340 R09: ffffe8ffffd16058 [ 117.206682] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 117.207229] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 117.207781] ? perf_tp_event+0x167/0xe70 [ 117.208109] ? arch_scale_cpu_capacity+0x17/0xa0 [ 117.208485] ? __pfx_perf_tp_event+0x10/0x10 [ 117.208832] ? __asan_memset+0x24/0x50 [ 117.209150] ? perf_trace_lock+0xb5/0x5d0 [ 117.209477] ? kvm_sched_clock_read+0x16/0x30 [ 117.209834] ? sched_clock+0x37/0x60 [ 117.210132] ? sched_clock_cpu+0x6c/0x4e0 [ 117.210463] ? lock_is_held_type+0x9e/0x120 [ 117.210812] ? perf_trace_run_bpf_submit+0xef/0x180 [ 117.211207] perf_trace_run_bpf_submit+0xef/0x180 [ 117.211591] perf_trace_lock+0x337/0x5d0 [ 117.211914] ? __pfx_perf_trace_lock+0x10/0x10 [ 117.212276] ? lock_acquire+0x15e/0x2f0 [ 117.212589] ? futex_ref_get+0x48/0x300 [ 117.212899] ? futex_ref_get+0x114/0x300 [ 117.213216] ? futex_hash+0x15c/0x390 [ 117.213518] lock_release+0x1ab/0x290 [ 117.213827] ? futex_hash+0x15c/0x390 [ 117.214125] futex_ref_get+0x119/0x300 [ 117.214436] ? futex_hash+0x15c/0x390 [ 117.214733] futex_hash+0x70/0x390 [ 117.215016] futex_wake+0x143/0x540 [ 117.215305] ? put_pid+0x1f/0x30 [ 117.215572] ? kernel_clone+0x204/0x7f0 [ 117.215883] ? __pfx_futex_wake+0x10/0x10 [ 117.216213] ? __pfx_kernel_clone+0x10/0x10 [ 117.216550] ? perf_trace_lock+0xb5/0x5d0 [ 117.216878] do_futex+0x26d/0x370 [ 117.217157] ? __pfx_do_futex+0x10/0x10 [ 117.217471] ? __pfx___do_sys_clone+0x10/0x10 [ 117.217828] ? find_held_lock+0x2b/0x80 [ 117.218147] __x64_sys_futex+0x1c9/0x4d0 [ 117.218482] ? __pfx___x64_sys_futex+0x10/0x10 [ 117.218841] ? xfd_validate_state+0x55/0x180 [ 117.219195] do_syscall_64+0xbf/0x360 [ 117.219496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.219893] RIP: 0033:0x7fd206d99b19 [ 117.220186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 117.221580] RSP: 002b:00007ffccc2ce688 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 117.222170] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd206d99b19 [ 117.222717] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd206eacf68 [ 117.223267] RBP: 00007fd206eacf60 R08: 00007fd20430f700 R09: 0000000000000000 [ 117.223814] R10: 00007fd20430f700 R11: 0000000000000246 R12: 00007fd206eb1a68 [ 117.224363] R13: 00007ffccc2ce790 R14: 00007fd206eacf60 R15: 000000000001c8bb [ 117.224917] [ 117.225104] Modules linked in: [ 117.225359] ---[ end trace 0000000000000000 ]--- [ 117.225360] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#4] SMP KASAN NOPTI [ 117.225726] RIP: 0010:perf_tp_event+0x175/0xe70 [ 117.226583] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 117.226945] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 117.227613] CPU: 0 UID: 0 PID: 3971 Comm: syz-executor.4 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 117.228988] RSP: 0018:ffff888045cef800 EFLAGS: 00010212 [ 117.229903] Tainted: [D]=DIE, [W]=WARN [ 117.230312] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 117.230612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 117.231156] RDX: ffff888042349b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 117.231795] RIP: 0010:perf_tp_event+0x175/0xe70 [ 117.232340] RBP: ffff888045cefa70 R08: ffff88806cf31340 R09: ffffe8ffffd16058 [ 117.232700] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 117.233247] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 117.234665] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012 [ 117.235206] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 117.235620] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 117.236165] FS: 000055559533a400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 117.236713] RDX: ffff888017073700 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 117.237325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.237874] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc16058 [ 117.238327] CR2: 000055559533bc18 CR3: 0000000042225000 CR4: 0000000000350ef0 [ 117.238876] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000 [ 117.239422] Kernel panic - not syncing: Fatal exception in interrupt [ 118.283155] Shutting down cpus with NMI [ 118.284046] Kernel Offset: disabled [ 118.284332] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 08:56:16 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84be3c0e RDX=fffffbfff0f0f609 RSI=0000000000000004 RDI=ffffffff8787b044 RBP=ffffffff8787b044 RSP=ffff88804527f5b0 R8 =0000000000000000 R9 =fffffbfff0f0f608 R10=ffffffff8787b047 R11=202c746c75616620 R12=1ffff11008a4feb7 R13=0000000000000007 R14=fffffbfff0f0f608 R15=ffff88804527f5e8 RIP=ffffffff84be3da0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555932c0400 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff489a2b000 CR3=000000000e497000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f37c89d07c000007f37c89d07c8 XMM02=00007f37c89d07e000007f37c89d07c0 XMM03=00007f37c89d07c800007f37c89d07c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff828e5070 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff888045cef178 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=313030203a505352 R12=000000000000003b R13=ffffffff88729290 R14=ffffffff88729240 R15=ffffffff88729500 RIP=ffffffff828e50c5 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055559533a400 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055559533bc18 CR3=0000000042225000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fd206e807c000007fd206e807c8 XMM02=00007fd206e807e000007fd206e807c0 XMM03=00007fd206e807c800007fd206e807c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000