Warning: Permanently added '[localhost]:50366' (ECDSA) to the list of known hosts.
2025/09/01 11:09:03 fuzzer started
2025/09/01 11:09:04 dialing manager at localhost:35473
syzkaller login: [ 52.007405] cgroup: Unknown subsys name 'net'
[ 52.077307] cgroup: Unknown subsys name 'cpuset'
[ 52.089962] cgroup: Unknown subsys name 'rlimit'
2025/09/01 11:09:15 syscalls: 2214
2025/09/01 11:09:15 code coverage: enabled
2025/09/01 11:09:15 comparison tracing: enabled
2025/09/01 11:09:15 extra coverage: enabled
2025/09/01 11:09:15 setuid sandbox: enabled
2025/09/01 11:09:15 namespace sandbox: enabled
2025/09/01 11:09:15 Android sandbox: enabled
2025/09/01 11:09:15 fault injection: enabled
2025/09/01 11:09:15 leak checking: enabled
2025/09/01 11:09:15 net packet injection: enabled
2025/09/01 11:09:15 net device setup: enabled
2025/09/01 11:09:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/09/01 11:09:15 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/09/01 11:09:15 USB emulation: enabled
2025/09/01 11:09:15 hci packet injection: enabled
2025/09/01 11:09:15 wifi device emulation: enabled
2025/09/01 11:09:15 802.15.4 emulation: enabled
2025/09/01 11:09:15 fetching corpus: 0, signal 0/2000 (executing program)
2025/09/01 11:09:15 fetching corpus: 50, signal 16893/20474 (executing program)
2025/09/01 11:09:15 fetching corpus: 100, signal 33710/38569 (executing program)
2025/09/01 11:09:15 fetching corpus: 150, signal 39959/46182 (executing program)
2025/09/01 11:09:16 fetching corpus: 200, signal 46040/53542 (executing program)
2025/09/01 11:09:16 fetching corpus: 250, signal 50373/59144 (executing program)
2025/09/01 11:09:16 fetching corpus: 300, signal 53956/63961 (executing program)
2025/09/01 11:09:16 fetching corpus: 350, signal 57599/68698 (executing program)
2025/09/01 11:09:16 fetching corpus: 400, signal 61507/73701 (executing program)
2025/09/01 11:09:16 fetching corpus: 450, signal 66788/79782 (executing program)
2025/09/01 11:09:16 fetching corpus: 500, signal 69373/83368 (executing program)
2025/09/01 11:09:16 fetching corpus: 550, signal 72079/87034 (executing program)
2025/09/01 11:09:16 fetching corpus: 600, signal 75705/91374 (executing program)
2025/09/01 11:09:16 fetching corpus: 650, signal 77229/93879 (executing program)
2025/09/01 11:09:16 fetching corpus: 700, signal 80079/97417 (executing program)
2025/09/01 11:09:17 fetching corpus: 750, signal 83818/101714 (executing program)
2025/09/01 11:09:17 fetching corpus: 800, signal 86328/104876 (executing program)
2025/09/01 11:09:17 fetching corpus: 850, signal 88589/107762 (executing program)
2025/09/01 11:09:17 fetching corpus: 900, signal 90359/110219 (executing program)
2025/09/01 11:09:17 fetching corpus: 950, signal 92338/112806 (executing program)
2025/09/01 11:09:17 fetching corpus: 1000, signal 93659/114824 (executing program)
2025/09/01 11:09:17 fetching corpus: 1050, signal 95433/117206 (executing program)
2025/09/01 11:09:17 fetching corpus: 1100, signal 97284/119569 (executing program)
2025/09/01 11:09:17 fetching corpus: 1150, signal 99246/121975 (executing program)
2025/09/01 11:09:17 fetching corpus: 1200, signal 100932/124123 (executing program)
2025/09/01 11:09:17 fetching corpus: 1250, signal 102909/126468 (executing program)
2025/09/01 11:09:17 fetching corpus: 1300, signal 104516/128553 (executing program)
2025/09/01 11:09:18 fetching corpus: 1350, signal 106662/130920 (executing program)
2025/09/01 11:09:18 fetching corpus: 1400, signal 108268/132888 (executing program)
2025/09/01 11:09:18 fetching corpus: 1450, signal 109416/134545 (executing program)
2025/09/01 11:09:18 fetching corpus: 1500, signal 110207/135934 (executing program)
2025/09/01 11:09:18 fetching corpus: 1550, signal 111547/137647 (executing program)
2025/09/01 11:09:18 fetching corpus: 1600, signal 112926/139336 (executing program)
2025/09/01 11:09:18 fetching corpus: 1650, signal 113795/140753 (executing program)
2025/09/01 11:09:18 fetching corpus: 1700, signal 115484/142650 (executing program)
2025/09/01 11:09:18 fetching corpus: 1750, signal 116639/144149 (executing program)
2025/09/01 11:09:18 fetching corpus: 1800, signal 118040/145703 (executing program)
2025/09/01 11:09:18 fetching corpus: 1850, signal 119347/147205 (executing program)
2025/09/01 11:09:19 fetching corpus: 1900, signal 120191/148439 (executing program)
2025/09/01 11:09:19 fetching corpus: 1950, signal 120983/149648 (executing program)
2025/09/01 11:09:19 fetching corpus: 2000, signal 121880/150847 (executing program)
2025/09/01 11:09:19 fetching corpus: 2050, signal 122331/151821 (executing program)
2025/09/01 11:09:19 fetching corpus: 2100, signal 123323/153027 (executing program)
2025/09/01 11:09:19 fetching corpus: 2150, signal 124168/154167 (executing program)
2025/09/01 11:09:19 fetching corpus: 2200, signal 124783/155185 (executing program)
2025/09/01 11:09:19 fetching corpus: 2250, signal 125545/156236 (executing program)
2025/09/01 11:09:19 fetching corpus: 2300, signal 126045/157132 (executing program)
2025/09/01 11:09:19 fetching corpus: 2350, signal 127324/158482 (executing program)
2025/09/01 11:09:19 fetching corpus: 2400, signal 128162/159524 (executing program)
2025/09/01 11:09:20 fetching corpus: 2450, signal 129041/160568 (executing program)
2025/09/01 11:09:20 fetching corpus: 2500, signal 130063/161631 (executing program)
2025/09/01 11:09:20 fetching corpus: 2550, signal 130623/162526 (executing program)
2025/09/01 11:09:20 fetching corpus: 2600, signal 131252/163451 (executing program)
2025/09/01 11:09:20 fetching corpus: 2650, signal 131997/164364 (executing program)
2025/09/01 11:09:20 fetching corpus: 2700, signal 132687/165274 (executing program)
2025/09/01 11:09:20 fetching corpus: 2750, signal 133199/166054 (executing program)
2025/09/01 11:09:20 fetching corpus: 2800, signal 134485/167136 (executing program)
2025/09/01 11:09:20 fetching corpus: 2850, signal 135147/168008 (executing program)
2025/09/01 11:09:20 fetching corpus: 2900, signal 137311/169302 (executing program)
2025/09/01 11:09:21 fetching corpus: 2950, signal 137903/170047 (executing program)
2025/09/01 11:09:21 fetching corpus: 3000, signal 138709/170887 (executing program)
2025/09/01 11:09:21 fetching corpus: 3050, signal 139275/171615 (executing program)
2025/09/01 11:09:21 fetching corpus: 3100, signal 139812/172284 (executing program)
2025/09/01 11:09:21 fetching corpus: 3150, signal 140642/173045 (executing program)
2025/09/01 11:09:21 fetching corpus: 3200, signal 141285/173752 (executing program)
2025/09/01 11:09:21 fetching corpus: 3250, signal 141687/174379 (executing program)
2025/09/01 11:09:21 fetching corpus: 3300, signal 142224/175095 (executing program)
2025/09/01 11:09:21 fetching corpus: 3350, signal 143110/175870 (executing program)
2025/09/01 11:09:21 fetching corpus: 3400, signal 143681/176498 (executing program)
2025/09/01 11:09:22 fetching corpus: 3450, signal 144166/177078 (executing program)
2025/09/01 11:09:22 fetching corpus: 3500, signal 145025/177759 (executing program)
2025/09/01 11:09:22 fetching corpus: 3550, signal 145566/178334 (executing program)
2025/09/01 11:09:22 fetching corpus: 3600, signal 145994/178939 (executing program)
2025/09/01 11:09:22 fetching corpus: 3650, signal 146448/179452 (executing program)
2025/09/01 11:09:22 fetching corpus: 3700, signal 146806/179934 (executing program)
2025/09/01 11:09:22 fetching corpus: 3750, signal 147220/180452 (executing program)
2025/09/01 11:09:22 fetching corpus: 3800, signal 148187/181027 (executing program)
2025/09/01 11:09:22 fetching corpus: 3850, signal 149557/181682 (executing program)
2025/09/01 11:09:22 fetching corpus: 3900, signal 150050/182231 (executing program)
2025/09/01 11:09:22 fetching corpus: 3950, signal 150604/182773 (executing program)
2025/09/01 11:09:23 fetching corpus: 4000, signal 151041/183251 (executing program)
2025/09/01 11:09:23 fetching corpus: 4050, signal 151580/183688 (executing program)
2025/09/01 11:09:23 fetching corpus: 4100, signal 151873/184103 (executing program)
2025/09/01 11:09:23 fetching corpus: 4150, signal 152389/184525 (executing program)
2025/09/01 11:09:23 fetching corpus: 4200, signal 152792/184985 (executing program)
2025/09/01 11:09:23 fetching corpus: 4250, signal 153382/185409 (executing program)
2025/09/01 11:09:23 fetching corpus: 4300, signal 154025/185853 (executing program)
2025/09/01 11:09:23 fetching corpus: 4350, signal 154443/186250 (executing program)
2025/09/01 11:09:23 fetching corpus: 4400, signal 155047/186719 (executing program)
2025/09/01 11:09:23 fetching corpus: 4450, signal 155484/187098 (executing program)
2025/09/01 11:09:24 fetching corpus: 4500, signal 156406/187481 (executing program)
2025/09/01 11:09:24 fetching corpus: 4550, signal 156866/187817 (executing program)
2025/09/01 11:09:24 fetching corpus: 4600, signal 157347/188059 (executing program)
2025/09/01 11:09:24 fetching corpus: 4650, signal 158211/188094 (executing program)
2025/09/01 11:09:24 fetching corpus: 4700, signal 158560/188113 (executing program)
2025/09/01 11:09:24 fetching corpus: 4750, signal 159071/188120 (executing program)
2025/09/01 11:09:24 fetching corpus: 4800, signal 159555/188123 (executing program)
2025/09/01 11:09:24 fetching corpus: 4850, signal 160185/188177 (executing program)
2025/09/01 11:09:24 fetching corpus: 4900, signal 160862/188291 (executing program)
2025/09/01 11:09:24 fetching corpus: 4950, signal 161298/188294 (executing program)
2025/09/01 11:09:25 fetching corpus: 5000, signal 161625/188304 (executing program)
2025/09/01 11:09:25 fetching corpus: 5050, signal 161984/188313 (executing program)
2025/09/01 11:09:25 fetching corpus: 5100, signal 162490/188317 (executing program)
2025/09/01 11:09:25 fetching corpus: 5150, signal 162884/188320 (executing program)
2025/09/01 11:09:25 fetching corpus: 5200, signal 163232/188345 (executing program)
2025/09/01 11:09:25 fetching corpus: 5250, signal 163662/188345 (executing program)
2025/09/01 11:09:25 fetching corpus: 5300, signal 163962/188360 (executing program)
2025/09/01 11:09:25 fetching corpus: 5350, signal 164391/188361 (executing program)
2025/09/01 11:09:25 fetching corpus: 5400, signal 164698/188369 (executing program)
2025/09/01 11:09:25 fetching corpus: 5450, signal 165075/188377 (executing program)
2025/09/01 11:09:25 fetching corpus: 5500, signal 165340/188377 (executing program)
2025/09/01 11:09:26 fetching corpus: 5550, signal 165719/188389 (executing program)
2025/09/01 11:09:26 fetching corpus: 5600, signal 166078/188406 (executing program)
2025/09/01 11:09:26 fetching corpus: 5650, signal 166406/188425 (executing program)
2025/09/01 11:09:26 fetching corpus: 5700, signal 166679/188445 (executing program)
2025/09/01 11:09:26 fetching corpus: 5750, signal 167200/188474 (executing program)
2025/09/01 11:09:26 fetching corpus: 5800, signal 167612/188576 (executing program)
2025/09/01 11:09:26 fetching corpus: 5850, signal 167956/188580 (executing program)
2025/09/01 11:09:26 fetching corpus: 5900, signal 168268/188580 (executing program)
2025/09/01 11:09:26 fetching corpus: 5950, signal 168861/188585 (executing program)
2025/09/01 11:09:26 fetching corpus: 6000, signal 169155/188600 (executing program)
2025/09/01 11:09:26 fetching corpus: 6050, signal 169524/188636 (executing program)
2025/09/01 11:09:26 fetching corpus: 6100, signal 170187/188636 (executing program)
2025/09/01 11:09:27 fetching corpus: 6150, signal 171138/188691 (executing program)
2025/09/01 11:09:27 fetching corpus: 6200, signal 171535/188692 (executing program)
2025/09/01 11:09:27 fetching corpus: 6250, signal 171794/188692 (executing program)
2025/09/01 11:09:27 fetching corpus: 6300, signal 172015/188696 (executing program)
2025/09/01 11:09:27 fetching corpus: 6350, signal 172278/188723 (executing program)
2025/09/01 11:09:27 fetching corpus: 6400, signal 172769/188728 (executing program)
2025/09/01 11:09:27 fetching corpus: 6450, signal 173190/188728 (executing program)
2025/09/01 11:09:27 fetching corpus: 6500, signal 173515/188753 (executing program)
2025/09/01 11:09:27 fetching corpus: 6550, signal 173884/188755 (executing program)
2025/09/01 11:09:27 fetching corpus: 6600, signal 174262/188761 (executing program)
2025/09/01 11:09:27 fetching corpus: 6650, signal 174541/188762 (executing program)
2025/09/01 11:09:27 fetching corpus: 6700, signal 176493/188767 (executing program)
2025/09/01 11:09:28 fetching corpus: 6750, signal 176800/188769 (executing program)
2025/09/01 11:09:28 fetching corpus: 6800, signal 177056/188777 (executing program)
2025/09/01 11:09:28 fetching corpus: 6850, signal 177303/188783 (executing program)
2025/09/01 11:09:28 fetching corpus: 6900, signal 177722/188787 (executing program)
2025/09/01 11:09:28 fetching corpus: 6950, signal 178095/188787 (executing program)
2025/09/01 11:09:28 fetching corpus: 7000, signal 178444/188830 (executing program)
2025/09/01 11:09:28 fetching corpus: 7050, signal 178827/188832 (executing program)
2025/09/01 11:09:28 fetching corpus: 7100, signal 179119/188832 (executing program)
2025/09/01 11:09:28 fetching corpus: 7150, signal 179386/188836 (executing program)
2025/09/01 11:09:28 fetching corpus: 7200, signal 179669/188841 (executing program)
2025/09/01 11:09:28 fetching corpus: 7250, signal 179962/188842 (executing program)
2025/09/01 11:09:28 fetching corpus: 7300, signal 180204/188847 (executing program)
2025/09/01 11:09:29 fetching corpus: 7350, signal 180545/188847 (executing program)
2025/09/01 11:09:29 fetching corpus: 7400, signal 180858/188850 (executing program)
2025/09/01 11:09:29 fetching corpus: 7450, signal 181128/188850 (executing program)
2025/09/01 11:09:29 fetching corpus: 7500, signal 181437/188914 (executing program)
2025/09/01 11:09:29 fetching corpus: 7550, signal 181742/188920 (executing program)
2025/09/01 11:09:29 fetching corpus: 7600, signal 182029/188931 (executing program)
2025/09/01 11:09:29 fetching corpus: 7650, signal 182389/188931 (executing program)
2025/09/01 11:09:29 fetching corpus: 7700, signal 182754/188966 (executing program)
2025/09/01 11:09:29 fetching corpus: 7750, signal 183228/188969 (executing program)
2025/09/01 11:09:29 fetching corpus: 7800, signal 183553/188978 (executing program)
2025/09/01 11:09:29 fetching corpus: 7850, signal 184486/188982 (executing program)
2025/09/01 11:09:29 fetching corpus: 7900, signal 184737/188999 (executing program)
2025/09/01 11:09:29 fetching corpus: 7950, signal 184939/188999 (executing program)
2025/09/01 11:09:30 fetching corpus: 8000, signal 185339/189003 (executing program)
2025/09/01 11:09:30 fetching corpus: 8050, signal 185562/189004 (executing program)
2025/09/01 11:09:30 fetching corpus: 8100, signal 185809/189007 (executing program)
2025/09/01 11:09:30 fetching corpus: 8150, signal 186088/189010 (executing program)
2025/09/01 11:09:30 fetching corpus: 8200, signal 186254/189016 (executing program)
2025/09/01 11:09:30 fetching corpus: 8244, signal 186499/189021 (executing program)
2025/09/01 11:09:30 fetching corpus: 8244, signal 186499/189021 (executing program)
2025/09/01 11:09:32 starting 8 fuzzer processes
11:09:32 executing program 0:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1}, 0x6e)
bind$unix(r0, &(0x7f0000000100)=@abs={0x1}, 0x6e)
11:09:32 executing program 4:
r0 = memfd_create(&(0x7f0000001b80)='(\xc8\xf5\x82j\xca', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x1c00, 0x46})
11:09:32 executing program 1:
r0 = io_uring_setup(0x7e28, &(0x7f0000000000))
syz_io_uring_setup(0x3d70, &(0x7f0000000080)={0x0, 0xa594, 0x2b, 0x0, 0x0, 0x0, r0}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000eff000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))
11:09:32 executing program 7:
r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="106c", 0x2, r0)
11:09:32 executing program 2:
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
fremovexattr(r1, &(0x7f0000000000)=@known='trusted.overlay.opaque\x00')
11:09:32 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
getgroups(0x1, &(0x7f0000000480)=[0xee00])
11:09:32 executing program 5:
move_pages(0x0, 0x24, &(0x7f0000000040)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0], 0x0)
11:09:32 executing program 6:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c)
umount2(&(0x7f0000000180)='./file0\x00', 0x0)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
[ 80.127431] audit: type=1400 audit(1756724972.403:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[ 81.330285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 81.332091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 81.334480] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 81.336630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 81.337678] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 81.338348] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 81.341420] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 81.347169] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 81.349075] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 81.352175] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 81.356433] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 81.358413] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 81.362157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 81.373146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 81.382744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 81.384657] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 81.389667] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 81.394022] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 81.401059] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 81.413100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 81.438941] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 81.441935] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 81.444438] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 81.447890] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 81.450208] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 81.495477] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 81.502504] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 81.503222] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 81.510411] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 81.511624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 81.517328] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 81.528569] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 81.533238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 81.534124] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 81.551496] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 81.552632] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 81.561080] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 81.573205] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 81.593370] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 81.597722] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 83.408702] Bluetooth: hci2: command tx timeout
[ 83.409828] Bluetooth: hci0: command tx timeout
[ 83.410413] Bluetooth: hci1: command tx timeout
[ 83.472698] Bluetooth: hci3: command tx timeout
[ 83.473204] Bluetooth: hci4: command tx timeout
[ 83.601138] Bluetooth: hci5: command tx timeout
[ 83.665217] Bluetooth: hci7: command tx timeout
[ 83.665763] Bluetooth: hci6: command tx timeout
[ 85.456093] Bluetooth: hci0: command tx timeout
[ 85.456121] Bluetooth: hci1: command tx timeout
[ 85.456569] Bluetooth: hci2: command tx timeout
[ 85.520037] Bluetooth: hci3: command tx timeout
[ 85.521050] Bluetooth: hci4: command tx timeout
[ 85.648122] Bluetooth: hci5: command tx timeout
[ 85.712054] Bluetooth: hci7: command tx timeout
[ 85.713159] Bluetooth: hci6: command tx timeout
[ 87.505037] Bluetooth: hci1: command tx timeout
[ 87.505505] Bluetooth: hci0: command tx timeout
[ 87.505902] Bluetooth: hci2: command tx timeout
[ 87.569346] Bluetooth: hci4: command tx timeout
[ 87.569437] Bluetooth: hci3: command tx timeout
[ 87.697093] Bluetooth: hci5: command tx timeout
[ 87.761064] Bluetooth: hci6: command tx timeout
[ 87.761104] Bluetooth: hci7: command tx timeout
[ 89.552079] Bluetooth: hci2: command tx timeout
[ 89.552572] Bluetooth: hci1: command tx timeout
[ 89.553228] Bluetooth: hci0: command tx timeout
[ 89.616216] Bluetooth: hci3: command tx timeout
[ 89.616689] Bluetooth: hci4: command tx timeout
[ 89.745022] Bluetooth: hci5: command tx timeout
[ 89.808061] Bluetooth: hci7: command tx timeout
[ 89.809015] Bluetooth: hci6: command tx timeout
[ 120.035277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 120.035924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 120.234414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 120.235044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 120.395010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 120.395602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 120.600733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 120.601378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 120.760273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 120.760885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
11:10:13 executing program 2:
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
fremovexattr(r1, &(0x7f0000000000)=@known='trusted.overlay.opaque\x00')
[ 120.850612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 120.851254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
11:10:13 executing program 2:
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
fremovexattr(r1, &(0x7f0000000000)=@known='trusted.overlay.opaque\x00')
11:10:13 executing program 2:
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
fremovexattr(r1, &(0x7f0000000000)=@known='trusted.overlay.opaque\x00')
[ 120.968999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 120.969591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
11:10:13 executing program 5:
move_pages(0x0, 0x24, &(0x7f0000000040)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0], 0x0)
11:10:13 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
setresuid(0x0, 0xee01, 0x0)
ioctl$VT_SETMODE(r0, 0x5602, 0x0)
[ 121.061037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.061596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
11:10:13 executing program 5:
move_pages(0x0, 0x24, &(0x7f0000000040)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0], 0x0)
11:10:13 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
setresuid(0x0, 0xee01, 0x0)
ioctl$VT_SETMODE(r0, 0x5602, 0x0)
[ 121.116233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.116824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.159777] kmemleak: Found object by alias at 0x607f1a63e934
[ 121.159796] CPU: 0 UID: 0 PID: 3860 Comm: syz-executor.2 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
[ 121.159814] Tainted: [W]=WARN
[ 121.159818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 121.159825] Call Trace:
[ 121.159829]
[ 121.159834] dump_stack_lvl+0xca/0x120
[ 121.159859] __lookup_object+0x94/0xb0
[ 121.159876] delete_object_full+0x27/0x70
[ 121.159893] free_percpu+0x30/0x1160
[ 121.159910] ? arch_uprobe_clear_state+0x16/0x140
[ 121.159931] futex_hash_free+0x38/0xc0
[ 121.159946] mmput+0x2d3/0x390
[ 121.159970] do_exit+0x79d/0x2970
[ 121.159984] ? signal_wake_up_state+0x85/0x120
[ 121.160000] ? zap_other_threads+0x2b9/0x3a0
[ 121.160016] ? __pfx_do_exit+0x10/0x10
[ 121.160029] ? do_group_exit+0x1c3/0x2a0
[ 121.160043] ? lock_release+0xc8/0x290
[ 121.160060] do_group_exit+0xd3/0x2a0
[ 121.160075] __x64_sys_exit_group+0x3e/0x50
[ 121.160090] x64_sys_call+0x18c5/0x18d0
[ 121.160106] do_syscall_64+0xbf/0x360
[ 121.160118] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.160130] RIP: 0033:0x7f79c5dfbb19
[ 121.160139] Code: Unable to access opcode bytes at 0x7f79c5dfbaef.
[ 121.160144] RSP: 002b:00007ffce1ce0bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 121.160155] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f79c5dfbb19
[ 121.160163] RDX: 00007f79c5dae72b RSI: ffffffffffffffbc RDI: 0000000000000000
[ 121.160171] RBP: 0000000000000000 R08: 0000001b2d8236b0 R09: 0000000000000000
[ 121.160177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 121.160184] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffce1ce0cc0
[ 121.160199]
[ 121.160203] kmemleak: Object (percpu) 0x607f1a63e930 (size 8):
[ 121.160210] kmemleak: comm "syz-executor.3", pid 280, jiffies 4294787908
[ 121.160218] kmemleak: min_count = 1
[ 121.160221] kmemleak: count = 0
[ 121.160225] kmemleak: flags = 0x21
[ 121.160229] kmemleak: checksum = 0
[ 121.160233] kmemleak: backtrace:
[ 121.160236] pcpu_alloc_noprof+0x87a/0x1170
[ 121.160252] __alloc_workqueue+0x74b/0x1820
[ 121.160270] alloc_workqueue_noprof+0xc7/0x200
[ 121.160279] ieee80211_register_hw+0x1ec5/0x3e00
[ 121.160292] mac80211_hwsim_new_radio+0x2758/0x4ef0
[ 121.160306] hwsim_new_radio_nl+0xb0d/0x1250
[ 121.160318] genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 121.160330] genl_rcv_msg+0x532/0x7e0
[ 121.160340] netlink_rcv_skb+0x147/0x430
[ 121.160357] genl_rcv+0x28/0x40
[ 121.160366] netlink_unicast+0x5a7/0x870
[ 121.160382] netlink_sendmsg+0x8ac/0xd80
[ 121.160398] __sys_sendto+0x506/0x570
[ 121.160413] __x64_sys_sendto+0xe1/0x1c0
[ 121.160427] do_syscall_64+0xbf/0x360
[ 121.160436] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.170029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.181892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
11:10:13 executing program 5:
move_pages(0x0, 0x24, &(0x7f0000000040)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0], 0x0)
[ 121.261146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.261743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.365316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.365958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.389242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.389855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.457583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.458852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.578417] audit: type=1400 audit(1756725013.854:8): avc: denied { watch_reads } for pid=3889 comm="syz-executor.6" path="/syzkaller-testdir353484252/syzkaller.OCO8E4/0/file0" dev="hugetlbfs" ino=5428 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:hugetlbfs_t:s0 tclass=dir permissive=1
[ 121.589135] audit: type=1400 audit(1756725013.864:9): avc: denied { watch_reads } for pid=3889 comm="syz-executor.6" path="/syzkaller-testdir353484252/syzkaller.OCO8E4/0/file0" dev="sda" ino=15981 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1
[ 121.615426] audit: type=1400 audit(1756725013.889:10): avc: denied { open } for pid=3892 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 121.617905] audit: type=1400 audit(1756725013.890:11): avc: denied { kernel } for pid=3892 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 121.836090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.836718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.866786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.867429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
11:10:14 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000400)=@secondary)
add_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be581124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be5899540513dce650871a83fc7df830259651ee4c7d0f3f82b3127ccaef79e1a79c09db55847ceb270b5229b15fa13ba107400", 0xc5, r0)
11:10:14 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
getgroups(0x1, &(0x7f0000000480)=[0xee00])
11:10:14 executing program 6:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c)
umount2(&(0x7f0000000180)='./file0\x00', 0x0)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
11:10:14 executing program 1:
r0 = io_uring_setup(0x7e28, &(0x7f0000000000))
syz_io_uring_setup(0x3d70, &(0x7f0000000080)={0x0, 0xa594, 0x2b, 0x0, 0x0, 0x0, r0}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000eff000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))
11:10:14 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x60801)
write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "69cc63bd80cc03f0520ff03946da8b611a770cfd2ed7e77f3499adb63794d3"}, 0x2a)
11:10:14 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
setresuid(0x0, 0xee01, 0x0)
ioctl$VT_SETMODE(r0, 0x5602, 0x0)
11:10:14 executing program 7:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000180)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
11:10:14 executing program 4:
r0 = memfd_create(&(0x7f0000001b80)='(\xc8\xf5\x82j\xca', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x1c00, 0x46})
11:10:14 executing program 1:
r0 = io_uring_setup(0x7e28, &(0x7f0000000000))
syz_io_uring_setup(0x3d70, &(0x7f0000000080)={0x0, 0xa594, 0x2b, 0x0, 0x0, 0x0, r0}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000eff000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))
[ 122.059871] kmemleak: Found object by alias at 0x607f1a63e934
[ 122.059889] CPU: 0 UID: 60929 PID: 3922 Comm: syz-executor.2 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
[ 122.059908] Tainted: [W]=WARN
[ 122.059912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 122.059919] Call Trace:
[ 122.059923]
[ 122.059928] dump_stack_lvl+0xca/0x120
[ 122.059953] __lookup_object+0x94/0xb0
[ 122.059975] delete_object_full+0x27/0x70
[ 122.059992] free_percpu+0x30/0x1160
[ 122.060009] ? arch_uprobe_clear_state+0x16/0x140
[ 122.060029] futex_hash_free+0x38/0xc0
[ 122.060044] mmput+0x2d3/0x390
[ 122.060063] do_exit+0x79d/0x2970
[ 122.060079] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 122.060094] ? __pfx_do_exit+0x10/0x10
[ 122.060108] ? find_held_lock+0x2b/0x80
[ 122.060126] ? get_signal+0x835/0x2340
[ 122.060147] do_group_exit+0xd3/0x2a0
[ 122.060162] get_signal+0x2315/0x2340
[ 122.060180] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 122.060196] ? __pfx_get_signal+0x10/0x10
[ 122.060213] ? __schedule+0xe91/0x3590
[ 122.060234] arch_do_signal_or_restart+0x80/0x790
[ 122.060252] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 122.060269] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 122.060282] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 122.060295] ? __pfx___x64_sys_futex+0x10/0x10
[ 122.060308] ? selinux_file_ioctl+0xb9/0x280
[ 122.060329] exit_to_user_mode_loop+0x8b/0x110
[ 122.060342] do_syscall_64+0x2f7/0x360
[ 122.060356] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.060368] RIP: 0033:0x7f79c5dfbb19
[ 122.060377] Code: Unable to access opcode bytes at 0x7f79c5dfbaef.
[ 122.060382] RSP: 002b:00007f79c3371218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 122.060394] RAX: 0000000000000001 RBX: 00007f79c5f0ef68 RCX: 00007f79c5dfbb19
[ 122.060401] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f79c5f0ef6c
[ 122.060408] RBP: 00007f79c5f0ef60 R08: 0000000000000001 R09: 0000000000000000
[ 122.060415] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f79c5f0ef6c
[ 122.060422] R13: 00007ffce1ce09af R14: 00007f79c3371300 R15: 0000000000022000
[ 122.060438]
[ 122.060442] kmemleak: Object (percpu) 0x607f1a63e930 (size 8):
[ 122.060449] kmemleak: comm "syz-executor.7", pid 283, jiffies 4294788052
[ 122.060456] kmemleak: min_count = 1
[ 122.060460] kmemleak: count = 0
[ 122.060463] kmemleak: flags = 0x21
[ 122.060467] kmemleak: checksum = 0
[ 122.060471] kmemleak: backtrace:
[ 122.060475] pcpu_alloc_noprof+0x87a/0x1170
[ 122.060490] percpu_ref_init+0x37/0x400
[ 122.060501] cgroup_apply_control_enable+0x4a6/0x9f0
[ 122.060514] cgroup_mkdir+0x86e/0x1110
[ 122.060527] kernfs_iop_mkdir+0x111/0x190
[ 122.060543] vfs_mkdir+0x59a/0x8d0
[ 122.060559] do_mkdirat+0x19f/0x3d0
[ 122.060570] __x64_sys_mkdir+0xf3/0x140
[ 122.060581] do_syscall_64+0xbf/0x360
[ 122.060591] entry_SYSCALL_64_after_hwframe+0x77/0x7f
11:10:14 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003640)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000038c0)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x0)
11:10:14 executing program 6:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c)
umount2(&(0x7f0000000180)='./file0\x00', 0x0)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
11:10:14 executing program 4:
r0 = memfd_create(&(0x7f0000001b80)='(\xc8\xf5\x82j\xca', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x1c00, 0x46})
11:10:14 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x60801)
write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "69cc63bd80cc03f0520ff03946da8b611a770cfd2ed7e77f3499adb63794d3"}, 0x2a)
11:10:14 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
getgroups(0x1, &(0x7f0000000480)=[0xee00])
11:10:14 executing program 1:
r0 = io_uring_setup(0x7e28, &(0x7f0000000000))
syz_io_uring_setup(0x3d70, &(0x7f0000000080)={0x0, 0xa594, 0x2b, 0x0, 0x0, 0x0, r0}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000eff000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))
11:10:14 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/123, 0x7b}], 0x1, 0x0, 0x0)
11:10:14 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x60801)
write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "69cc63bd80cc03f0520ff03946da8b611a770cfd2ed7e77f3499adb63794d3"}, 0x2a)
11:10:14 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
setresuid(0x0, 0xee01, 0x0)
ioctl$VT_SETMODE(r0, 0x5602, 0x0)
11:10:14 executing program 4:
r0 = memfd_create(&(0x7f0000001b80)='(\xc8\xf5\x82j\xca', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x1c00, 0x46})
11:10:14 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003640)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000038c0)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x0)
11:10:14 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x60801)
write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "69cc63bd80cc03f0520ff03946da8b611a770cfd2ed7e77f3499adb63794d3"}, 0x2a)
11:10:14 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
getgroups(0x1, &(0x7f0000000480)=[0xee00])
11:10:14 executing program 6:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c)
umount2(&(0x7f0000000180)='./file0\x00', 0x0)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
[ 122.283578] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI
[ 122.284516] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 122.285129] CPU: 0 UID: 0 PID: 3952 Comm: syz-executor.5 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
[ 122.286484] Tainted: [W]=WARN
[ 122.287466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 122.289495] RIP: 0010:perf_tp_event+0x175/0xe70
[ 122.291145] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 122.294547] RSP: 0018:ffff8880469bf600 EFLAGS: 00010212
[ 122.294974] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc900029fa000
[ 122.295546] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[ 122.296117] RBP: ffff8880469bf870 R08: ffff88806ce31340 R09: ffffe8ffffc16930
[ 122.296683] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 122.297253] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[ 122.297825] FS: 00007efd078ee700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[ 122.298470] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 122.298933] CR2: 00007fbd99750f64 CR3: 000000001f052000 CR4: 0000000000350ef0
[ 122.299502] Call Trace:
[ 122.299714]
[ 122.299909] ? __pfx_perf_tp_event+0x10/0x10
[ 122.300308] ? perf_trace_run_bpf_submit+0xef/0x180
[ 122.300718] perf_trace_run_bpf_submit+0xef/0x180
[ 122.301120] perf_trace_lock+0x337/0x5d0
[ 122.301458] ? __pfx_perf_trace_lock+0x10/0x10
[ 122.301832] ? lock_acquire+0x15e/0x2f0
[ 122.302163] ? futex_ref_get+0x48/0x300
[ 122.302485] ? futex_ref_get+0x114/0x300
[ 122.302810] ? futex_hash+0x15c/0x390
[ 122.303121] lock_release+0x1ab/0x290
[ 122.303435] ? futex_hash+0x15c/0x390
[ 122.303744] futex_ref_get+0x119/0x300
[ 122.304062] ? futex_hash+0x15c/0x390
[ 122.304372] futex_hash+0x70/0x390
[ 122.304666] futex_wait_setup+0xae/0x550
[ 122.305006] __futex_wait+0x151/0x300
[ 122.305322] ? __pfx___futex_wait+0x10/0x10
[ 122.305680] ? __pfx_futex_wake_mark+0x10/0x10
[ 122.306071] futex_wait+0xde/0x380
[ 122.306376] ? __pfx_futex_wait+0x10/0x10
[ 122.306715] ? perf_trace_lock+0xb5/0x5d0
[ 122.307059] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 122.307485] do_futex+0x2ee/0x370
[ 122.307775] ? __pfx_do_futex+0x10/0x10
[ 122.308102] ? do_raw_spin_lock+0x123/0x260
[ 122.308459] __x64_sys_futex+0x1c9/0x4d0
[ 122.308791] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 122.309213] ? __pfx___x64_sys_futex+0x10/0x10
[ 122.309587] ? kcov_ioctl+0x386/0x6c0
[ 122.309901] ? fput+0x6a/0x100
[ 122.310187] do_syscall_64+0xbf/0x360
[ 122.310501] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.310915] RIP: 0033:0x7efd0a378b19
[ 122.311218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 122.312658] RSP: 002b:00007efd078ee218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 122.313259] RAX: ffffffffffffffda RBX: 00007efd0a48bf68 RCX: 00007efd0a378b19
[ 122.313826] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efd0a48bf68
[ 122.314398] RBP: 00007efd0a48bf60 R08: 00007efd078ee700 R09: 0000000000000000
[ 122.314965] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efd0a48bf6c
[ 122.315540] R13: 00007ffd9a1ba96f R14: 00007efd078ee300 R15: 0000000000022000
[ 122.316115]
[ 122.316305] Modules linked in:
[ 122.316686] ---[ end trace 0000000000000000 ]---
[ 122.317164] RIP: 0010:perf_tp_event+0x175/0xe70
[ 122.317557] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 122.319010] RSP: 0018:ffff8880469bf600 EFLAGS: 00010212
[ 122.319437] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc900029fa000
[ 122.320045] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[ 122.320610] RBP: ffff8880469bf870 R08: ffff88806ce31340 R09: ffffe8ffffc16930
[ 122.321189] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 122.321760] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[ 122.322362] FS: 00007efd078ee700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[ 122.323021] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 122.323487] CR2: 00007fbd99750f64 CR3: 000000001f052000 CR4: 0000000000350ef0
[ 122.324075] note: syz-executor.5[3952] exited with preempt_count 1
[ 122.324572] BUG: sleeping function called from invalid context at ./include/linux/percpu-rwsem.h:51
[ 122.325296] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 3952, name: syz-executor.5
[ 122.325989] preempt_count: 0, expected: 0
[ 122.326326] RCU nest depth: 2, expected: 0
[ 122.326663] INFO: lockdep is turned off.
[ 122.327002] CPU: 0 UID: 0 PID: 3952 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
[ 122.327022] Tainted: [D]=DIE, [W]=WARN
[ 122.327026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 122.327032] Call Trace:
[ 122.327036]
[ 122.327041] dump_stack_lvl+0xfa/0x120
[ 122.327066] __might_resched+0x2f3/0x510
[ 122.327080] exit_signals+0x25/0x940
[ 122.327099] do_exit+0x2db/0x2970
[ 122.327114] ? _printk+0xbe/0xf0
[ 122.327127] ? __pfx__printk+0x10/0x10
[ 122.327139] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 122.327152] ? __pfx_do_exit+0x10/0x10
[ 122.327165] ? kcov_ioctl+0x386/0x6c0
[ 122.327179] make_task_dead+0x174/0x3b0
[ 122.327193] ? do_syscall_64+0xbf/0x360
[ 122.327204] rewind_stack_and_make_dead+0x16/0x20
[ 122.327220] RIP: 0033:0x7efd0a378b19
[ 122.327232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 122.327242] RSP: 002b:00007efd078ee218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 122.327253] RAX: ffffffffffffffda RBX: 00007efd0a48bf68 RCX: 00007efd0a378b19
[ 122.327262] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efd0a48bf68
[ 122.327269] RBP: 00007efd0a48bf60 R08: 00007efd078ee700 R09: 0000000000000000
[ 122.327276] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efd0a48bf6c
[ 122.327283] R13: 00007ffd9a1ba96f R14: 00007efd078ee300 R15: 0000000000022000
[ 122.327294]
[ 122.390161] kmemleak: Found object by alias at 0x607f1a63e934
[ 122.390174] CPU: 0 UID: 0 PID: 3946 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
[ 122.390193] Tainted: [D]=DIE, [W]=WARN
[ 122.390197] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 122.390204] Call Trace:
[ 122.390207]
[ 122.390211] dump_stack_lvl+0xca/0x120
[ 122.390230] __lookup_object+0x94/0xb0
[ 122.390246] delete_object_full+0x27/0x70
[ 122.390261] free_percpu+0x30/0x1160
[ 122.390278] ? arch_uprobe_clear_state+0x16/0x140
[ 122.390296] futex_hash_free+0x38/0xc0
[ 122.390309] mmput+0x2d3/0x390
[ 122.390327] do_exit+0x79d/0x2970
[ 122.390340] ? signal_wake_up_state+0x85/0x120
11:10:14 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x880000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0))
[ 122.390354] ? zap_other_threads+0x2b9/0x3a0
[ 122.390369] ? __pfx_do_exit+0x10/0x10
[ 122.390382] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 122.390397] ? lock_release+0x1c7/0x290
[ 122.390411] do_group_exit+0xd3/0x2a0
[ 122.390425] __x64_sys_exit_group+0x3e/0x50
[ 122.390439] x64_sys_call+0x18c5/0x18d0
[ 122.390454] do_syscall_64+0xbf/0x360
[ 122.390465] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.390476] RIP: 0033:0x7f79c5dfbb19
[ 122.390485] Code: Unable to access opcode bytes at 0x7f79c5dfbaef.
[ 122.390490] RSP: 002b:00007ffce1ce0bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 122.390501] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f79c5dfbb19
[ 122.390508] RDX: 00007f79c5dae72b RSI: ffffffffffffffbc RDI: 0000000000000000
[ 122.390516] RBP: 0000000000000000 R08: 0000001b2d8236b4 R09: 0000000000000000
[ 122.390523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 122.390530] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffce1ce0cc0
[ 122.390541]
[ 122.390545] kmemleak: Object (percpu) 0x607f1a63e930 (size 8):
[ 122.390551] kmemleak: comm "syz-executor.0", pid 3949, jiffies 4294789077
[ 122.390558] kmemleak: min_count = 1
[ 122.390562] kmemleak: count = 0
[ 122.390566] kmemleak: flags = 0x21
[ 122.390570] kmemleak: checksum = 0
[ 122.390574] kmemleak: backtrace:
[ 122.390578] pcpu_alloc_noprof+0x87a/0x1170
[ 122.390594] perf_trace_event_init+0x366/0xa10
[ 122.390607] perf_trace_init+0x1a4/0x2f0
[ 122.390620] perf_tp_event_init+0xa6/0x120
[ 122.390636] perf_try_init_event+0x140/0x9f0
[ 122.390650] perf_event_alloc.part.0+0x118e/0x45f0
[ 122.390667] __do_sys_perf_event_open+0x719/0x2c20
[ 122.390680] do_syscall_64+0xbf/0x360
[ 122.390689] entry_SYSCALL_64_after_hwframe+0x77/0x7f
11:10:14 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x2, 0x6}, 0x10)
[ 122.457812] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI
[ 122.458740] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 122.459528] CPU: 1 UID: 0 PID: 3945 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
[ 122.460724] Tainted: [D]=DIE, [W]=WARN
[ 122.461108] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 122.462008] RIP: 0010:perf_tp_event+0x175/0xe70
[ 122.462522] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 122.464342] RSP: 0018:ffff88801986f800 EFLAGS: 00010212
[ 122.464834] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 122.465587] RDX: ffff888016eab700 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[ 122.466284] RBP: ffff88801986fa70 R08: ffff88806cf31340 R09: ffffe8ffffd16930
[ 122.467049] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[ 122.467744] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[ 122.468445] FS: 000055555cd8b400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[ 122.469126] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 122.469724] CR2: 00007efd0a48c024 CR3: 000000001f052000 CR4: 0000000000350ef0
[ 122.470490] Call Trace:
[ 122.470733]
[ 122.470966] ? __pfx_native_flush_tlb_one_user+0x10/0x10
[ 122.471549] ? __pfx_perf_tp_event+0x10/0x10
[ 122.472037] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 122.472531] ? __pfx_flush_tlb_func+0x10/0x10
[ 122.473006] ? __pfx_flush_tlb_func+0x10/0x10
[ 122.473442] ? smp_call_function_many_cond+0x332/0x1110
[ 122.474000] ? __pfx_should_flush_tlb+0x10/0x10
[ 122.474521] ? __pfx_flush_tlb_func+0x10/0x10
[ 122.474948] ? __pfx_smp_call_function_many_cond+0x10/0x10
[ 122.475546] ? propagate_protected_usage+0x1bc/0x340
[ 122.476095] ? __pfx_flush_tlb_func+0x10/0x10
[ 122.476547] ? perf_trace_lock+0xb5/0x5d0
[ 122.477006] ? perf_trace_lock+0xb5/0x5d0
[ 122.477392] ? css_rstat_updated+0x1b8/0x4d0
[ 122.477863] ? perf_trace_run_bpf_submit+0xef/0x180
[ 122.478400] perf_trace_run_bpf_submit+0xef/0x180
[ 122.478875] perf_trace_lock+0x337/0x5d0
[ 122.479335] ? __pfx_lru_add+0x10/0x10
[ 122.479725] ? __pfx_perf_trace_lock+0x10/0x10
[ 122.480216] ? do_wp_page+0xb30/0x3430
[ 122.480630] ? get_futex_key+0x592/0x14a0
[ 122.481010] ? futex_ref_get+0x114/0x300
[ 122.481449] ? futex_hash+0x15c/0x390
[ 122.481858] lock_release+0x1ab/0x290
[ 122.482252] ? futex_hash+0x15c/0x390
[ 122.482646] futex_ref_get+0x119/0x300
[ 122.483062] ? futex_hash+0x15c/0x390
[ 122.483413] futex_hash+0x70/0x390
[ 122.483788] futex_wake+0x143/0x540
[ 122.484168] ? ___pte_offset_map+0x176/0x370
[ 122.484594] ? __pfx_futex_wake+0x10/0x10
[ 122.485038] ? __handle_mm_fault+0x753/0x3260
[ 122.485501] ? perf_trace_lock+0xb5/0x5d0
[ 122.485942] ? __pfx___handle_mm_fault+0x10/0x10
[ 122.486429] do_futex+0x26d/0x370
[ 122.486819] ? __pfx_do_futex+0x10/0x10
[ 122.487205] ? __pfx_perf_trace_lock+0x10/0x10
[ 122.487715] ? handle_mm_fault+0x590/0x9b0
[ 122.488120] __x64_sys_futex+0x1c9/0x4d0
[ 122.488542] ? __pfx___x64_sys_futex+0x10/0x10
[ 122.489027] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 122.489541] do_syscall_64+0xbf/0x360
[ 122.489962] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.490434] RIP: 0033:0x7efd0a378b19
[ 122.490837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 122.492649] RSP: 002b:00007ffd9a1ba9e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 122.493392] RAX: ffffffffffffffda RBX: 00007efd0a48c02c RCX: 00007efd0a378b19
[ 122.494138] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efd0a48c02c
[ 122.494821] RBP: 00007efd0a48c020 R08: 00007efd0a468000 R09: 0000000000000000
[ 122.495590] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efd0a490af8
[ 122.496300] R13: 00007ffd9a1baaf0 R14: 00007efd0a48bf60 R15: 0000000000000001
[ 122.497024]
[ 122.497256] Modules linked in:
[ 122.497635] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#3] SMP KASAN NOPTI
[ 122.498753] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[ 122.499543] CPU: 1 UID: 0 PID: 3945 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary)
[ 122.500743] Tainted: [D]=DIE, [W]=WARN
[ 122.501110] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 122.501967] RIP: 0010:perf_tp_event+0x175/0xe70
[ 122.502436] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 122.504258] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012
[ 122.504823] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 122.505402] RDX: ffff888016eab700 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[ 122.506099] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd16930
[ 122.506807] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000
[ 122.507577] R13: 000000000000002c R14: ffff88806cf31490 R15: dffffc0000000000
[ 122.508280] FS: 000055555cd8b400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[ 122.509031] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 122.509651] CR2: 00007efd0a48c024 CR3: 000000001f052000 CR4: 0000000000350ef0
[ 122.510399] Call Trace:
[ 122.510609]
[ 122.510795] ? __pfx_perf_tp_event+0x10/0x10
[ 122.511229] ? sched_clock_cpu+0x6c/0x4e0
[ 122.511667] ? trace_pelt_se_tp+0xdf/0x130
[ 122.512095] ? __update_load_avg_se+0x428/0xa40
[ 122.512583] ? cpuacct_charge+0xbb/0x330
[ 122.512983] ? perf_trace_lock+0xb5/0x5d0
[ 122.513384] ? perf_trace_lock+0xb5/0x5d0
[ 122.513826] ? perf_trace_lock+0xb5/0x5d0
[ 122.514279] ? __pfx_perf_trace_lock+0x10/0x10
[ 122.514653] ? __pfx_perf_trace_lock+0x10/0x10
[ 122.515022] ? check_preempt_wakeup_fair+0x406/0x950
[ 122.515438] ? perf_trace_run_bpf_submit+0xef/0x180
[ 122.515844] perf_trace_run_bpf_submit+0xef/0x180
[ 122.516240] perf_trace_lock+0x337/0x5d0
[ 122.516572] ? __pfx_perf_trace_lock+0x10/0x10
[ 122.516939] ? check_preempt_wakeup_fair+0x406/0x950
[ 122.517351] ? hrtimer_interrupt+0x114/0x830
[ 122.517709] lock_release+0x1ab/0x290
[ 122.518022] ktime_get_update_offsets_now+0xab/0x3c0
[ 122.518441] ? hrtimer_interrupt+0x114/0x830
[ 122.518799] hrtimer_interrupt+0x114/0x830
[ 122.519139] ? __pfx_sched_ttwu_pending+0x10/0x10
[ 122.519532] ? trace_csd_function_exit+0x134/0x190
[ 122.519934] ? __flush_smp_call_function_queue+0x443/0x740
[ 122.520387] __sysvec_apic_timer_interrupt+0xbb/0x330
[ 122.520810] sysvec_apic_timer_interrupt+0x6b/0x80
[ 122.521211]
[ 122.521393]
[ 122.521576] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 122.521998] RIP: 0010:oops_exit+0x0/0x50
[ 122.522336] Code: 00 3a 00 be ff ff ff ff 48 c7 c7 50 b4 43 86 e8 c6 0f f9 ff 5b e9 50 00 3a 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 36 00 3a 00 8b 1d c0 3d 4f 06 31 ff 89 de e8 57
[ 122.523775] RSP: 0018:ffff88801986f690 EFLAGS: 00000202
[ 122.524198] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff8139f06f
[ 122.524762] RDX: ffff888016eab700 RSI: ffffffff812a3dca RDI: 0000000000000007
[ 122.525328] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f12690
[ 122.525895] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801986f758
[ 122.526469] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000
[ 122.527039] ? add_taint+0x5f/0xd0
[ 122.527330] ? oops_end+0x4a/0xe0
[ 122.527620] oops_end+0x65/0xe0
[ 122.527895] exc_general_protection+0x1a2/0x330
[ 122.528278] asm_exc_general_protection+0x26/0x30
[ 122.528665] RIP: 0010:perf_tp_event+0x175/0xe70
[ 122.529042] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 122.530482] RSP: 0018:ffff88801986f800 EFLAGS: 00010212
[ 122.530903] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[ 122.531470] RDX: ffff888016eab700 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[ 122.532035] RBP: ffff88801986fa70 R08: ffff88806cf31340 R09: ffffe8ffffd16930
[ 122.532600] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[ 122.533128] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[ 122.533655] ? perf_tp_event+0x167/0xe70
[ 122.533965] ? __pfx_native_flush_tlb_one_user+0x10/0x10
[ 122.534376] ? __pfx_perf_tp_event+0x10/0x10
[ 122.534713] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 122.535101] ? __pfx_flush_tlb_func+0x10/0x10
[ 122.535437] ? __pfx_flush_tlb_func+0x10/0x10
[ 122.535773] ? smp_call_function_many_cond+0x332/0x1110
[ 122.536174] ? __pfx_should_flush_tlb+0x10/0x10
[ 122.536527] ? __pfx_flush_tlb_func+0x10/0x10
[ 122.536868] ? __pfx_smp_call_function_many_cond+0x10/0x10
[ 122.537288] ? propagate_protected_usage+0x1bc/0x340
[ 122.537670] ? __pfx_flush_tlb_func+0x10/0x10
[ 122.538010] ? perf_trace_lock+0xb5/0x5d0
[ 122.538327] ? perf_trace_lock+0xb5/0x5d0
[ 122.538637] ? css_rstat_updated+0x1b8/0x4d0
[ 122.538974] ? perf_trace_run_bpf_submit+0xef/0x180
[ 122.539347] perf_trace_run_bpf_submit+0xef/0x180
[ 122.539712] perf_trace_lock+0x337/0x5d0
[ 122.540019] ? __pfx_lru_add+0x10/0x10
[ 122.540317] ? __pfx_perf_trace_lock+0x10/0x10
[ 122.540661] ? do_wp_page+0xb30/0x3430
[ 122.540958] ? get_futex_key+0x592/0x14a0
[ 122.541268] ? futex_ref_get+0x114/0x300
[ 122.541570] ? futex_hash+0x15c/0x390
[ 122.541855] lock_release+0x1ab/0x290
[ 122.542151] ? futex_hash+0x15c/0x390
[ 122.542438] futex_ref_get+0x119/0x300
[ 122.542729] ? futex_hash+0x15c/0x390
[ 122.543014] futex_hash+0x70/0x390
[ 122.543285] futex_wake+0x143/0x540
[ 122.543561] ? ___pte_offset_map+0x176/0x370
[ 122.543893] ? __pfx_futex_wake+0x10/0x10
[ 122.544207] ? __handle_mm_fault+0x753/0x3260
[ 122.544549] ? perf_trace_lock+0xb5/0x5d0
[ 122.544859] ? __pfx___handle_mm_fault+0x10/0x10
[ 122.545220] do_futex+0x26d/0x370
[ 122.545486] ? __pfx_do_futex+0x10/0x10
[ 122.545785] ? __pfx_perf_trace_lock+0x10/0x10
[ 122.546136] ? handle_mm_fault+0x590/0x9b0
[ 122.546458] __x64_sys_futex+0x1c9/0x4d0
[ 122.546767] ? __pfx___x64_sys_futex+0x10/0x10
[ 122.547114] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 122.547504] do_syscall_64+0xbf/0x360
[ 122.547792] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.548174] RIP: 0033:0x7efd0a378b19
[ 122.548451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 122.549774] RSP: 002b:00007ffd9a1ba9e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 122.550336] RAX: ffffffffffffffda RBX: 00007efd0a48c02c RCX: 00007efd0a378b19
[ 122.550858] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efd0a48c02c
[ 122.551380] RBP: 00007efd0a48c020 R08: 00007efd0a468000 R09: 0000000000000000
[ 122.551901] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efd0a490af8
[ 122.552422] R13: 00007ffd9a1baaf0 R14: 00007efd0a48bf60 R15: 0000000000000001
[ 122.552951]
[ 122.553130] Modules linked in:
[ 122.553374] ---[ end trace 0000000000000000 ]---
[ 122.553721] RIP: 0010:perf_tp_event+0x175/0xe70
[ 122.554073] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 122.555398] RSP: 0018:ffff8880469bf600 EFLAGS: 00010212
[ 122.555790] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc900029fa000
[ 122.556315] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[ 122.556836] RBP: ffff8880469bf870 R08: ffff88806ce31340 R09: ffffe8ffffc16930
[ 122.557361] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 122.557882] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[ 122.558416] FS: 000055555cd8b400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[ 122.559008] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 122.559439] CR2: 00007efd0a48c024 CR3: 000000001f052000 CR4: 0000000000350ef0
[ 122.559964] Kernel panic - not syncing: Fatal exception in interrupt
[ 122.560534] Kernel Offset: disabled
[ 122.560805] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---
VM DIAGNOSIS:
11:10:14 Registers:
info registers vcpu 0
RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff8880469bef58
R8 =0000000000000000 R9 =ffffed10016cd046 R10=000000000000003a R11=30376578302f4952
R12=000000000000003a R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0
RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007efd078ee700 00000000 00000000
GS =0000 ffff8880e55d8000 00000000 00000000
LDT=0000 fffffe3d00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbd99750f64 CR3=000000001f052000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007efd0a45f7c000007efd0a45f7c8
XMM02=00007efd0a45f7e000007efd0a45f7c0 XMM03=00007efd0a45f7c800007efd0a45f7c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff88806ce3de20 RCX=ffffffff816880fc RDX=ffff8880458d0000
RSI=ffffffff816880d6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff888046a1f988
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=1ffff1100d9e6bb1
R12=ffffed100d9c7bc5 R13=ffff88806ce3de28 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff816880d8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555562c9f400 00000000 00000000
GS =0000 ffff8880e56d8000 00000000 00000000
LDT=0000 fffffe4c00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2cd22000 CR3=000000001e33d000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff00000000000000ff000000000000 XMM01=00010000000000000001000000000000
XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007f9de731e7c800007f9de731e7c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000