Warning: Permanently added '[localhost]:36147' (ECDSA) to the list of known hosts. 2025/09/01 11:13:30 fuzzer started 2025/09/01 11:13:30 dialing manager at localhost:35473 syzkaller login: [ 52.048527] cgroup: Unknown subsys name 'net' [ 52.107021] cgroup: Unknown subsys name 'cpuset' [ 52.117859] cgroup: Unknown subsys name 'rlimit' 2025/09/01 11:13:40 syscalls: 2214 2025/09/01 11:13:40 code coverage: enabled 2025/09/01 11:13:40 comparison tracing: enabled 2025/09/01 11:13:40 extra coverage: enabled 2025/09/01 11:13:40 setuid sandbox: enabled 2025/09/01 11:13:40 namespace sandbox: enabled 2025/09/01 11:13:40 Android sandbox: enabled 2025/09/01 11:13:40 fault injection: enabled 2025/09/01 11:13:40 leak checking: enabled 2025/09/01 11:13:40 net packet injection: enabled 2025/09/01 11:13:40 net device setup: enabled 2025/09/01 11:13:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 11:13:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 11:13:40 USB emulation: enabled 2025/09/01 11:13:40 hci packet injection: enabled 2025/09/01 11:13:40 wifi device emulation: enabled 2025/09/01 11:13:40 802.15.4 emulation: enabled 2025/09/01 11:13:40 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 11:13:40 fetching corpus: 49, signal 18711/22294 (executing program) 2025/09/01 11:13:40 fetching corpus: 99, signal 31800/36761 (executing program) 2025/09/01 11:13:40 fetching corpus: 149, signal 42986/49207 (executing program) 2025/09/01 11:13:40 fetching corpus: 199, signal 46803/54327 (executing program) 2025/09/01 11:13:41 fetching corpus: 249, signal 51060/59827 (executing program) 2025/09/01 11:13:41 fetching corpus: 299, signal 54302/64303 (executing program) 2025/09/01 11:13:41 fetching corpus: 349, signal 60933/71771 (executing program) 2025/09/01 11:13:41 fetching corpus: 399, signal 65424/77192 (executing program) 2025/09/01 11:13:41 fetching corpus: 449, signal 69732/82329 (executing program) 2025/09/01 11:13:41 fetching corpus: 499, signal 72563/86055 (executing program) 2025/09/01 11:13:41 fetching corpus: 549, signal 74276/88800 (executing program) 2025/09/01 11:13:41 fetching corpus: 599, signal 76344/91733 (executing program) 2025/09/01 11:13:42 fetching corpus: 649, signal 81162/97016 (executing program) 2025/09/01 11:13:42 fetching corpus: 699, signal 83640/100252 (executing program) 2025/09/01 11:13:42 fetching corpus: 749, signal 85423/102862 (executing program) 2025/09/01 11:13:42 fetching corpus: 799, signal 87305/105492 (executing program) 2025/09/01 11:13:42 fetching corpus: 849, signal 89732/108495 (executing program) 2025/09/01 11:13:42 fetching corpus: 899, signal 90976/110517 (executing program) 2025/09/01 11:13:42 fetching corpus: 949, signal 94182/114060 (executing program) 2025/09/01 11:13:42 fetching corpus: 999, signal 96094/116522 (executing program) 2025/09/01 11:13:42 fetching corpus: 1049, signal 97583/118650 (executing program) 2025/09/01 11:13:43 fetching corpus: 1099, signal 99464/121001 (executing program) 2025/09/01 11:13:43 fetching corpus: 1149, signal 101058/123174 (executing program) 2025/09/01 11:13:43 fetching corpus: 1199, signal 102323/125061 (executing program) 2025/09/01 11:13:43 fetching corpus: 1249, signal 103526/126868 (executing program) 2025/09/01 11:13:43 fetching corpus: 1299, signal 104675/128592 (executing program) 2025/09/01 11:13:43 fetching corpus: 1349, signal 105916/130347 (executing program) 2025/09/01 11:13:43 fetching corpus: 1399, signal 107794/132525 (executing program) 2025/09/01 11:13:43 fetching corpus: 1449, signal 108745/134009 (executing program) 2025/09/01 11:13:43 fetching corpus: 1499, signal 110040/135739 (executing program) 2025/09/01 11:13:44 fetching corpus: 1549, signal 111003/137239 (executing program) 2025/09/01 11:13:44 fetching corpus: 1599, signal 112938/139311 (executing program) 2025/09/01 11:13:44 fetching corpus: 1649, signal 114274/141019 (executing program) 2025/09/01 11:13:44 fetching corpus: 1699, signal 115340/142460 (executing program) 2025/09/01 11:13:44 fetching corpus: 1749, signal 116322/143863 (executing program) 2025/09/01 11:13:44 fetching corpus: 1799, signal 120463/147185 (executing program) 2025/09/01 11:13:44 fetching corpus: 1849, signal 121577/148556 (executing program) 2025/09/01 11:13:44 fetching corpus: 1899, signal 122766/150031 (executing program) 2025/09/01 11:13:44 fetching corpus: 1949, signal 124619/151820 (executing program) 2025/09/01 11:13:44 fetching corpus: 1999, signal 126408/153512 (executing program) 2025/09/01 11:13:44 fetching corpus: 2049, signal 127218/154632 (executing program) 2025/09/01 11:13:44 fetching corpus: 2099, signal 128553/155992 (executing program) 2025/09/01 11:13:45 fetching corpus: 2149, signal 129248/156999 (executing program) 2025/09/01 11:13:45 fetching corpus: 2199, signal 129970/158010 (executing program) 2025/09/01 11:13:45 fetching corpus: 2249, signal 130613/158995 (executing program) 2025/09/01 11:13:45 fetching corpus: 2299, signal 131316/159980 (executing program) 2025/09/01 11:13:45 fetching corpus: 2349, signal 132150/161067 (executing program) 2025/09/01 11:13:45 fetching corpus: 2399, signal 132684/161940 (executing program) 2025/09/01 11:13:45 fetching corpus: 2449, signal 133519/162928 (executing program) 2025/09/01 11:13:45 fetching corpus: 2499, signal 134352/163957 (executing program) 2025/09/01 11:13:45 fetching corpus: 2549, signal 135355/164949 (executing program) 2025/09/01 11:13:45 fetching corpus: 2599, signal 136129/165857 (executing program) 2025/09/01 11:13:46 fetching corpus: 2649, signal 137017/166796 (executing program) 2025/09/01 11:13:46 fetching corpus: 2699, signal 137709/167661 (executing program) 2025/09/01 11:13:46 fetching corpus: 2749, signal 138198/168374 (executing program) 2025/09/01 11:13:46 fetching corpus: 2799, signal 138875/169176 (executing program) 2025/09/01 11:13:46 fetching corpus: 2849, signal 139362/169894 (executing program) 2025/09/01 11:13:46 fetching corpus: 2899, signal 140092/170714 (executing program) 2025/09/01 11:13:46 fetching corpus: 2949, signal 140831/171571 (executing program) 2025/09/01 11:13:46 fetching corpus: 2999, signal 141361/172280 (executing program) 2025/09/01 11:13:46 fetching corpus: 3049, signal 142056/173042 (executing program) 2025/09/01 11:13:46 fetching corpus: 3099, signal 142608/173721 (executing program) 2025/09/01 11:13:47 fetching corpus: 3149, signal 143904/174693 (executing program) 2025/09/01 11:13:47 fetching corpus: 3199, signal 144559/175362 (executing program) 2025/09/01 11:13:47 fetching corpus: 3249, signal 145208/175998 (executing program) 2025/09/01 11:13:47 fetching corpus: 3299, signal 145832/176671 (executing program) 2025/09/01 11:13:47 fetching corpus: 3349, signal 146584/177343 (executing program) 2025/09/01 11:13:47 fetching corpus: 3399, signal 147008/177958 (executing program) 2025/09/01 11:13:47 fetching corpus: 3449, signal 147468/178544 (executing program) 2025/09/01 11:13:47 fetching corpus: 3499, signal 147935/179113 (executing program) 2025/09/01 11:13:47 fetching corpus: 3549, signal 148473/179703 (executing program) 2025/09/01 11:13:47 fetching corpus: 3599, signal 149001/180265 (executing program) 2025/09/01 11:13:48 fetching corpus: 3649, signal 149465/180798 (executing program) 2025/09/01 11:13:48 fetching corpus: 3699, signal 149920/181383 (executing program) 2025/09/01 11:13:48 fetching corpus: 3749, signal 150357/181947 (executing program) 2025/09/01 11:13:48 fetching corpus: 3799, signal 150755/182395 (executing program) 2025/09/01 11:13:48 fetching corpus: 3849, signal 151258/182932 (executing program) 2025/09/01 11:13:48 fetching corpus: 3899, signal 151857/183402 (executing program) 2025/09/01 11:13:48 fetching corpus: 3949, signal 152229/183836 (executing program) 2025/09/01 11:13:48 fetching corpus: 3999, signal 152865/184343 (executing program) 2025/09/01 11:13:48 fetching corpus: 4049, signal 153371/184817 (executing program) 2025/09/01 11:13:48 fetching corpus: 4099, signal 153907/185241 (executing program) 2025/09/01 11:13:48 fetching corpus: 4149, signal 154477/185700 (executing program) 2025/09/01 11:13:49 fetching corpus: 4199, signal 154872/186101 (executing program) 2025/09/01 11:13:49 fetching corpus: 4249, signal 155307/186525 (executing program) 2025/09/01 11:13:49 fetching corpus: 4299, signal 155753/186886 (executing program) 2025/09/01 11:13:49 fetching corpus: 4349, signal 156177/187270 (executing program) 2025/09/01 11:13:49 fetching corpus: 4399, signal 156780/187696 (executing program) 2025/09/01 11:13:49 fetching corpus: 4449, signal 157184/188083 (executing program) 2025/09/01 11:13:49 fetching corpus: 4499, signal 157463/188449 (executing program) 2025/09/01 11:13:49 fetching corpus: 4549, signal 157926/188801 (executing program) 2025/09/01 11:13:49 fetching corpus: 4599, signal 158439/189144 (executing program) 2025/09/01 11:13:49 fetching corpus: 4649, signal 158794/189228 (executing program) 2025/09/01 11:13:49 fetching corpus: 4699, signal 159526/189235 (executing program) 2025/09/01 11:13:50 fetching corpus: 4749, signal 159951/189248 (executing program) 2025/09/01 11:13:50 fetching corpus: 4799, signal 160601/189271 (executing program) 2025/09/01 11:13:50 fetching corpus: 4849, signal 161043/189276 (executing program) 2025/09/01 11:13:50 fetching corpus: 4899, signal 161424/189291 (executing program) 2025/09/01 11:13:50 fetching corpus: 4949, signal 162461/189297 (executing program) 2025/09/01 11:13:50 fetching corpus: 4999, signal 162899/189311 (executing program) 2025/09/01 11:13:50 fetching corpus: 5049, signal 163268/189313 (executing program) 2025/09/01 11:13:50 fetching corpus: 5099, signal 163998/189316 (executing program) 2025/09/01 11:13:50 fetching corpus: 5149, signal 164311/189322 (executing program) 2025/09/01 11:13:50 fetching corpus: 5199, signal 164906/189330 (executing program) 2025/09/01 11:13:50 fetching corpus: 5249, signal 165393/189330 (executing program) 2025/09/01 11:13:51 fetching corpus: 5299, signal 165718/189370 (executing program) 2025/09/01 11:13:51 fetching corpus: 5349, signal 165994/189407 (executing program) 2025/09/01 11:13:51 fetching corpus: 5399, signal 166630/189412 (executing program) 2025/09/01 11:13:51 fetching corpus: 5449, signal 166927/189442 (executing program) 2025/09/01 11:13:51 fetching corpus: 5499, signal 167447/189483 (executing program) 2025/09/01 11:13:51 fetching corpus: 5549, signal 167879/189493 (executing program) 2025/09/01 11:13:51 fetching corpus: 5599, signal 168237/189509 (executing program) 2025/09/01 11:13:51 fetching corpus: 5649, signal 168683/189512 (executing program) 2025/09/01 11:13:51 fetching corpus: 5699, signal 168981/189516 (executing program) 2025/09/01 11:13:51 fetching corpus: 5749, signal 169502/189547 (executing program) 2025/09/01 11:13:52 fetching corpus: 5799, signal 169795/189550 (executing program) 2025/09/01 11:13:52 fetching corpus: 5849, signal 170508/189558 (executing program) 2025/09/01 11:13:52 fetching corpus: 5899, signal 170806/189563 (executing program) 2025/09/01 11:13:52 fetching corpus: 5949, signal 171148/189592 (executing program) 2025/09/01 11:13:52 fetching corpus: 5999, signal 171522/189599 (executing program) 2025/09/01 11:13:52 fetching corpus: 6049, signal 171886/189663 (executing program) 2025/09/01 11:13:52 fetching corpus: 6099, signal 172107/189667 (executing program) 2025/09/01 11:13:52 fetching corpus: 6149, signal 172360/189709 (executing program) 2025/09/01 11:13:52 fetching corpus: 6197, signal 172731/189728 (executing program) 2025/09/01 11:13:52 fetching corpus: 6247, signal 173155/189752 (executing program) 2025/09/01 11:13:52 fetching corpus: 6297, signal 173392/189755 (executing program) 2025/09/01 11:13:52 fetching corpus: 6347, signal 173670/189757 (executing program) 2025/09/01 11:13:53 fetching corpus: 6397, signal 173980/189764 (executing program) 2025/09/01 11:13:53 fetching corpus: 6447, signal 174524/189770 (executing program) 2025/09/01 11:13:53 fetching corpus: 6497, signal 174981/189770 (executing program) 2025/09/01 11:13:53 fetching corpus: 6547, signal 175394/189779 (executing program) 2025/09/01 11:13:53 fetching corpus: 6597, signal 175760/189782 (executing program) 2025/09/01 11:13:53 fetching corpus: 6647, signal 176107/189802 (executing program) 2025/09/01 11:13:53 fetching corpus: 6697, signal 176416/189811 (executing program) 2025/09/01 11:13:53 fetching corpus: 6747, signal 176712/189811 (executing program) 2025/09/01 11:13:53 fetching corpus: 6797, signal 176980/189819 (executing program) 2025/09/01 11:13:53 fetching corpus: 6847, signal 177213/189838 (executing program) 2025/09/01 11:13:53 fetching corpus: 6897, signal 177491/189841 (executing program) 2025/09/01 11:13:53 fetching corpus: 6947, signal 178057/189844 (executing program) 2025/09/01 11:13:54 fetching corpus: 6997, signal 178306/189847 (executing program) 2025/09/01 11:13:54 fetching corpus: 7047, signal 178552/189854 (executing program) 2025/09/01 11:13:54 fetching corpus: 7097, signal 178873/189858 (executing program) 2025/09/01 11:13:54 fetching corpus: 7147, signal 179218/189862 (executing program) 2025/09/01 11:13:54 fetching corpus: 7197, signal 179612/189872 (executing program) 2025/09/01 11:13:54 fetching corpus: 7247, signal 179854/189876 (executing program) 2025/09/01 11:13:54 fetching corpus: 7297, signal 180200/189880 (executing program) 2025/09/01 11:13:54 fetching corpus: 7347, signal 180518/189885 (executing program) 2025/09/01 11:13:54 fetching corpus: 7397, signal 180830/189887 (executing program) 2025/09/01 11:13:54 fetching corpus: 7447, signal 181062/189896 (executing program) 2025/09/01 11:13:54 fetching corpus: 7497, signal 181499/189897 (executing program) 2025/09/01 11:13:55 fetching corpus: 7547, signal 181654/189897 (executing program) 2025/09/01 11:13:55 fetching corpus: 7597, signal 181861/189903 (executing program) 2025/09/01 11:13:55 fetching corpus: 7647, signal 182085/189911 (executing program) 2025/09/01 11:13:55 fetching corpus: 7697, signal 182356/189911 (executing program) 2025/09/01 11:13:55 fetching corpus: 7747, signal 182756/189915 (executing program) 2025/09/01 11:13:55 fetching corpus: 7797, signal 183258/189945 (executing program) 2025/09/01 11:13:55 fetching corpus: 7847, signal 183568/189979 (executing program) 2025/09/01 11:13:55 fetching corpus: 7897, signal 183844/189986 (executing program) 2025/09/01 11:13:55 fetching corpus: 7947, signal 184023/189993 (executing program) 2025/09/01 11:13:55 fetching corpus: 7997, signal 184168/190002 (executing program) 2025/09/01 11:13:55 fetching corpus: 8047, signal 184455/190005 (executing program) 2025/09/01 11:13:55 fetching corpus: 8097, signal 184757/190012 (executing program) 2025/09/01 11:13:55 fetching corpus: 8147, signal 185369/190013 (executing program) 2025/09/01 11:13:55 fetching corpus: 8197, signal 185789/190016 (executing program) 2025/09/01 11:13:56 fetching corpus: 8247, signal 186190/190067 (executing program) 2025/09/01 11:13:56 fetching corpus: 8297, signal 186589/190073 (executing program) 2025/09/01 11:13:56 fetching corpus: 8347, signal 186883/190079 (executing program) 2025/09/01 11:13:56 fetching corpus: 8397, signal 187388/190108 (executing program) 2025/09/01 11:13:56 fetching corpus: 8415, signal 187528/190187 (executing program) 2025/09/01 11:13:56 fetching corpus: 8415, signal 187528/190187 (executing program) 11:13:58 executing program 0: fsetxattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'trusted.', '/dev/rfkill\x00'}, &(0x7f0000000180)='w%!\x00\xc7\xf2\xf8N\x9d$\xf1sN\xe7\xf5\x8dz\xd4(M\xe8s\xb3Qj\x9c\xdb\xf2\xb7\x82\xa8WEu\xf9\xd3\\\x90\xf9\xf7\xd9\x8b_\xe9%\x97m-\xa20', 0xffffffffffffff18, 0x0) 2025/09/01 11:13:58 starting 8 fuzzer processes 11:13:58 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000140)={0x0, "f732c5f93176549f6c4038b34d83b69b440cb2f7277d36801d4617cf7a1deca6a9ded7f58d753b4e9847864f29d4fa6e13bbe9c88cd72540be8e3f79aef507a4"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xfffffffffffffffb, 0x0) 11:13:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2203, 0x0) 11:13:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) signalfd4(r0, &(0x7f0000000080), 0x8, 0x0) 11:13:58 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c) inotify_rm_watch(r0, r1) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 11:13:58 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)='\'', 0x1}], 0x1}}], 0x1, 0x1) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 11:13:58 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01ff07000000000000001f"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) 11:13:58 executing program 6: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) ioctl$CDROM_MEDIA_CHANGED(0xffffffffffffffff, 0x5325, 0x2) r1 = io_uring_setup(0x2605, &(0x7f0000000080)={0x0, 0xde78, 0x8, 0x1, 0x30a}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x34040, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001480)={0x0, 0x1, 0xafe, 0x1}) [ 79.460661] audit: type=1400 audit(1756725238.346:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 80.611717] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.616214] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.620467] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.630400] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.633973] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.736448] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.752021] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.754777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.760599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.762450] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.764509] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.766467] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.767954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.770345] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.774632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.778493] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.780867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.782026] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.784381] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.789191] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.817242] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.821420] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.823214] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.830244] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.832596] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.835902] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.863954] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.875378] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.879867] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 80.900460] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 80.905440] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 80.906766] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 80.909491] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 80.910718] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 80.913758] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.917435] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.920469] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 80.936334] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 80.940628] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 80.943444] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 82.704785] Bluetooth: hci0: command tx timeout [ 82.898113] Bluetooth: hci1: command tx timeout [ 82.898788] Bluetooth: hci5: command tx timeout [ 82.899636] Bluetooth: hci2: command tx timeout [ 82.900137] Bluetooth: hci3: command tx timeout [ 82.960132] Bluetooth: hci6: command tx timeout [ 83.024229] Bluetooth: hci7: command tx timeout [ 83.024863] Bluetooth: hci4: command tx timeout [ 84.752126] Bluetooth: hci0: command tx timeout [ 84.944644] Bluetooth: hci5: command tx timeout [ 84.945226] Bluetooth: hci1: command tx timeout [ 84.945610] Bluetooth: hci2: command tx timeout [ 84.945991] Bluetooth: hci3: command tx timeout [ 85.010094] Bluetooth: hci6: command tx timeout [ 85.072130] Bluetooth: hci4: command tx timeout [ 85.072552] Bluetooth: hci7: command tx timeout [ 86.800698] Bluetooth: hci0: command tx timeout [ 86.993455] Bluetooth: hci5: command tx timeout [ 86.994365] Bluetooth: hci3: command tx timeout [ 86.995189] Bluetooth: hci2: command tx timeout [ 86.995877] Bluetooth: hci1: command tx timeout [ 87.056163] Bluetooth: hci6: command tx timeout [ 87.122336] Bluetooth: hci7: command tx timeout [ 87.124472] Bluetooth: hci4: command tx timeout [ 88.848142] Bluetooth: hci0: command tx timeout [ 89.040376] Bluetooth: hci1: command tx timeout [ 89.041028] Bluetooth: hci2: command tx timeout [ 89.042155] Bluetooth: hci3: command tx timeout [ 89.042737] Bluetooth: hci5: command tx timeout [ 89.104139] Bluetooth: hci6: command tx timeout [ 89.168163] Bluetooth: hci4: command tx timeout [ 89.168742] Bluetooth: hci7: command tx timeout [ 118.313368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.313995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.539653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.540254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.667704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.668327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.775514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.776571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.990573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.991248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:14:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2203, 0x0) [ 119.131192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.131749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:14:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2203, 0x0) [ 119.232568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.233292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:14:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2203, 0x0) 11:14:38 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0x7, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) [ 119.353412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.354141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.373291] audit: type=1400 audit(1756725278.258:8): avc: denied { watch_reads } for pid=3853 comm="syz-executor.3" path="/syzkaller-testdir511053915/syzkaller.pktrde/0/file0" dev="tmpfs" ino=1 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir permissive=1 [ 119.399013] audit: type=1400 audit(1756725278.284:9): avc: denied { open } for pid=3857 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.404382] audit: type=1400 audit(1756725278.284:10): avc: denied { kernel } for pid=3857 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.468110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.468766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.563153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.563854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.638878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.639493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.689379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.689992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.745385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.745972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.835590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.836413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.004238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.004836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.045547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.046214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:14:39 executing program 0: fsetxattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'trusted.', '/dev/rfkill\x00'}, &(0x7f0000000180)='w%!\x00\xc7\xf2\xf8N\x9d$\xf1sN\xe7\xf5\x8dz\xd4(M\xe8s\xb3Qj\x9c\xdb\xf2\xb7\x82\xa8WEu\xf9\xd3\\\x90\xf9\xf7\xd9\x8b_\xe9%\x97m-\xa20', 0xffffffffffffff18, 0x0) 11:14:39 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c) inotify_rm_watch(r0, r1) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 11:14:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) 11:14:39 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) 11:14:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01ff07000000000000001f"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) 11:14:39 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000001080)=0x2000005, 0x2f) 11:14:39 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='security.selinux\x00', &(0x7f00000001c0)='\x00', 0x700, 0x0) 11:14:39 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) signalfd4(r0, &(0x7f0000000080), 0x8, 0x0) [ 120.238493] SELinux: Context is not valid (left unmapped). 11:14:39 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01ff07000000000000001f"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) 11:14:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) 11:14:39 executing program 0: fsetxattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'trusted.', '/dev/rfkill\x00'}, &(0x7f0000000180)='w%!\x00\xc7\xf2\xf8N\x9d$\xf1sN\xe7\xf5\x8dz\xd4(M\xe8s\xb3Qj\x9c\xdb\xf2\xb7\x82\xa8WEu\xf9\xd3\\\x90\xf9\xf7\xd9\x8b_\xe9%\x97m-\xa20', 0xffffffffffffff18, 0x0) 11:14:39 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c) inotify_rm_watch(r0, r1) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 11:14:39 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000001080)=0x2000005, 0x2f) [ 120.352007] kmemleak: Found object by alias at 0x607f1a63db24 [ 120.352028] CPU: 1 UID: 0 PID: 3910 Comm: syz-executor.5 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 120.352046] Tainted: [W]=WARN [ 120.352054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 120.352061] Call Trace: [ 120.352066] [ 120.352071] dump_stack_lvl+0xca/0x120 [ 120.352104] __lookup_object+0x94/0xb0 [ 120.352122] delete_object_full+0x27/0x70 [ 120.352139] free_percpu+0x30/0x1160 [ 120.352156] ? arch_uprobe_clear_state+0x16/0x140 [ 120.352177] futex_hash_free+0x38/0xc0 [ 120.352193] mmput+0x2d3/0x390 [ 120.352212] do_exit+0x79d/0x2970 [ 120.352226] ? signal_wake_up_state+0x85/0x120 [ 120.352243] ? zap_other_threads+0x2b9/0x3a0 [ 120.352259] ? __pfx_do_exit+0x10/0x10 [ 120.352273] ? do_group_exit+0x1c3/0x2a0 [ 120.352287] ? lock_release+0xc8/0x290 [ 120.352305] do_group_exit+0xd3/0x2a0 [ 120.352320] __x64_sys_exit_group+0x3e/0x50 [ 120.352335] x64_sys_call+0x18c5/0x18d0 [ 120.352351] do_syscall_64+0xbf/0x360 [ 120.352364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.352377] RIP: 0033:0x7f83774ddb19 [ 120.352386] Code: Unable to access opcode bytes at 0x7f83774ddaef. [ 120.352391] RSP: 002b:00007ffca27b9838 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 120.352403] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f83774ddb19 [ 120.352411] RDX: 00007f837749072b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 120.352419] RBP: 0000000000000000 R08: 0000001b2ce27f2c R09: 0000000000000000 [ 120.352426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.352434] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffca27b9920 [ 120.352449] [ 120.352453] kmemleak: Object (percpu) 0x607f1a63db20 (size 8): [ 120.352461] kmemleak: comm "syz-executor.1", pid 3923, jiffies 4294787128 [ 120.352468] kmemleak: min_count = 1 [ 120.352472] kmemleak: count = 0 [ 120.352476] kmemleak: flags = 0x21 [ 120.352480] kmemleak: checksum = 0 [ 120.352484] kmemleak: backtrace: [ 120.352488] pcpu_alloc_noprof+0x87a/0x1170 [ 120.352504] perf_trace_event_init+0x366/0xa10 [ 120.352518] perf_trace_init+0x1a4/0x2f0 [ 120.352530] perf_tp_event_init+0xa6/0x120 [ 120.352547] perf_try_init_event+0x140/0x9f0 [ 120.352561] perf_event_alloc.part.0+0x118e/0x45f0 [ 120.352578] __do_sys_perf_event_open+0x719/0x2c20 [ 120.352592] do_syscall_64+0xbf/0x360 [ 120.352601] entry_SYSCALL_64_after_hwframe+0x77/0x7f 11:14:39 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) signalfd4(r0, &(0x7f0000000080), 0x8, 0x0) 11:14:39 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) signalfd4(r0, &(0x7f0000000080), 0x8, 0x0) 11:14:39 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c) inotify_rm_watch(r0, r1) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 11:14:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01ff07000000000000001f"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) 11:14:39 executing program 0: fsetxattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'trusted.', '/dev/rfkill\x00'}, &(0x7f0000000180)='w%!\x00\xc7\xf2\xf8N\x9d$\xf1sN\xe7\xf5\x8dz\xd4(M\xe8s\xb3Qj\x9c\xdb\xf2\xb7\x82\xa8WEu\xf9\xd3\\\x90\xf9\xf7\xd9\x8b_\xe9%\x97m-\xa20', 0xffffffffffffff18, 0x0) 11:14:39 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000001080)=0x2000005, 0x2f) 11:14:39 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01ff07000000000000001f"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) 11:14:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) [ 120.456041] Oops: general protection fault, probably for non-canonical address 0xe3fffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 120.456981] KASAN: maybe wild-memory-access in range [0x2000000000000190-0x2000000000000197] [ 120.457614] CPU: 0 UID: 0 PID: 3939 Comm: syz-executor.6 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 120.458966] Tainted: [W]=WARN [ 120.459623] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 120.461456] RIP: 0010:perf_tp_event+0x175/0xe70 [ 120.462476] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 120.466366] RSP: 0018:ffff888047307780 EFLAGS: 00010012 [ 120.467418] RAX: 0400000000000032 RBX: 1fffffffffffffa0 RCX: ffffc900064bc000 [ 120.468428] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 2000000000000190 [ 120.468960] RBP: ffff8880473079f0 R08: ffff88806ce31340 R09: ffffe8ffffc15b20 [ 120.469485] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 120.470009] R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 [ 120.470545] FS: 00007f950af1a700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 120.471138] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.471570] CR2: 00007f950dab8018 CR3: 000000000df0b000 CR4: 0000000000350ef0 [ 120.472099] Call Trace: [ 120.472296] [ 120.472472] ? __pfx_perf_tp_event+0x10/0x10 [ 120.472814] ? __asan_memcpy+0x3d/0x60 [ 120.473115] ? __pfx_visit_groups_merge.constprop.0.isra.0+0x10/0x10 [ 120.473595] ? lock_is_held_type+0x9e/0x120 [ 120.473927] ? ctx_sched_in+0x134/0x9b0 [ 120.474226] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 120.474610] ? perf_swevent_event+0x63/0x3f0 [ 120.474952] ? perf_tp_event+0x807/0xe70 [ 120.475261] ? perf_trace_run_bpf_submit+0xef/0x180 [ 120.475638] ? perf_trace_run_bpf_submit+0xef/0x180 [ 120.476016] perf_trace_run_bpf_submit+0xef/0x180 [ 120.476384] perf_trace_preemptirq_template+0x259/0x430 [ 120.476782] ? trace_sched_set_need_resched_tp+0xd4/0x110 [ 120.477201] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 120.477635] ? __pfx___resched_curr+0x10/0x10 [ 120.478001] ? find_held_lock+0x2b/0x80 [ 120.478330] ? try_to_wake_up+0x8ae/0x11d0 [ 120.478682] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 120.479093] trace_irq_enable.constprop.0+0xa6/0x100 [ 120.479503] trace_hardirqs_on+0x26/0x40 [ 120.479826] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 120.480222] try_to_wake_up+0x8ae/0x11d0 [ 120.480555] ? __pfx_try_to_wake_up+0x10/0x10 [ 120.480917] ? plist_del+0x122/0x270 [ 120.481219] ? find_held_lock+0x2b/0x80 [ 120.481545] ? futex_wake+0x474/0x540 [ 120.481859] wake_up_q+0xa1/0x130 [ 120.482146] futex_wake+0x47e/0x540 [ 120.482453] ? __pfx_futex_wake+0x10/0x10 [ 120.482791] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 120.483195] ? lock_release+0xc8/0x290 [ 120.483515] do_futex+0x26d/0x370 [ 120.483802] ? __pfx_do_futex+0x10/0x10 [ 120.484125] __x64_sys_futex+0x1c9/0x4d0 [ 120.484453] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 120.484915] ? __pfx___x64_sys_futex+0x10/0x10 [ 120.485285] do_syscall_64+0xbf/0x360 [ 120.485592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.486002] RIP: 0033:0x7f950d9a4b19 [ 120.486300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 120.487734] RSP: 002b:00007f950af1a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.488331] RAX: ffffffffffffffda RBX: 00007f950dab7f68 RCX: 00007f950d9a4b19 [ 120.488902] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f950dab7f6c [ 120.489464] RBP: 00007f950dab7f60 R08: 000000000000000e R09: 0000000000000000 [ 120.490027] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f950dab7f6c [ 120.490600] R13: 00007ffdc7561fef R14: 00007f950af1a300 R15: 0000000000022000 [ 120.491171] [ 120.491361] Modules linked in: [ 120.491628] ---[ end trace 0000000000000000 ]--- [ 120.492002] RIP: 0010:perf_tp_event+0x175/0xe70 [ 120.492378] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 120.493808] RSP: 0018:ffff888047307780 EFLAGS: 00010012 [ 120.494230] RAX: 0400000000000032 RBX: 1fffffffffffffa0 RCX: ffffc900064bc000 [ 120.494802] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 2000000000000190 [ 120.495367] RBP: ffff8880473079f0 R08: ffff88806ce31340 R09: ffffe8ffffc15b20 [ 120.495927] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 120.496487] R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 [ 120.497048] FS: 00007f950af1a700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 120.497682] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.498142] CR2: 00007f950dab8018 CR3: 000000000df0b000 CR4: 0000000000350ef0 [ 120.498717] note: syz-executor.6[3939] exited with irqs disabled [ 120.499258] Oops: general protection fault, probably for non-canonical address 0xe3fffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 120.500137] KASAN: maybe wild-memory-access in range [0x2000000000000190-0x2000000000000197] [ 120.500796] CPU: 0 UID: 0 PID: 3939 Comm: syz-executor.6 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 120.501739] Tainted: [D]=DIE, [W]=WARN [ 120.502044] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 120.502695] RIP: 0010:perf_tp_event+0x175/0xe70 [ 120.503075] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 120.504507] RSP: 0018:ffff88806ce08b80 EFLAGS: 00010012 [ 120.504929] RAX: 0400000000000032 RBX: 1fffffffffffffa0 RCX: ffffffff818998a3 [ 120.505495] RDX: ffff888016b05280 RSI: ffffffff8189a4e7 RDI: 2000000000000190 [ 120.506061] RBP: ffff88806ce08df0 R08: ffff88806ce313e8 R09: ffffe8ffffc15b20 [ 120.506632] R10: 0000000000000000 R11: ffff88801c44dc98 R12: dffffc0000000000 [ 120.507192] R13: 0000000000000000 R14: ffff88806ce313e8 R15: dffffc0000000000 [ 120.507759] FS: 00007f950af1a700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 120.508393] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.508850] CR2: 00007f950dab8018 CR3: 000000000df0b000 CR4: 0000000000350ef0 [ 120.509411] Call Trace: [ 120.509617] [ 120.509797] ? __pfx_perf_tp_event+0x10/0x10 [ 120.510157] ? check_preempt_wakeup_fair+0x6e/0x950 [ 120.510562] ? wakeup_preempt+0x140/0x2a0 [ 120.510894] ? lock_release+0x1c7/0x290 [ 120.511214] ? lock_release+0x1c7/0x290 [ 120.511537] ? do_raw_spin_unlock+0x53/0x220 [ 120.511895] ? _raw_spin_unlock_irqrestore+0x22/0x50 [ 120.512305] ? try_to_wake_up+0x8ae/0x11d0 [ 120.512649] ? do_raw_spin_lock+0x123/0x260 [ 120.512999] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 120.513379] ? perf_trace_run_bpf_submit+0xef/0x180 [ 120.513789] perf_trace_run_bpf_submit+0xef/0x180 [ 120.514181] perf_trace_preemptirq_template+0x259/0x430 [ 120.514612] ? read_tsc+0x9/0x20 [ 120.514893] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 120.515358] ? clockevents_program_event+0x135/0x360 [ 120.515767] ? tick_program_event+0xac/0x140 [ 120.516121] ? handle_softirqs+0x16e/0x770 [ 120.516468] trace_irq_enable.constprop.0+0xa6/0x100 [ 120.516872] trace_hardirqs_on+0x26/0x40 [ 120.517197] handle_softirqs+0x16e/0x770 [ 120.517537] __irq_exit_rcu+0xc4/0x100 [ 120.517856] irq_exit_rcu+0x9/0x20 [ 120.518147] sysvec_apic_timer_interrupt+0x70/0x80 [ 120.518554] [ 120.518737] [ 120.518922] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 120.519343] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 120.519719] Code: 38 00 85 db 0f 84 21 01 00 00 e8 09 a6 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 57 a1 38 00 48 85 db 0f 84 17 01 00 00 e9 a5 38 00 31 ff 65 8b 1d 60 2f 49 06 81 e3 ff ff ff 7f 89 de [ 120.521149] RSP: 0018:ffff888047307f28 EFLAGS: 00000246 [ 120.521572] RAX: 0000000000000001 RBX: ffff888016b05280 RCX: ffffffff817c3ab6 [ 120.522136] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 120.522700] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 120.523260] R10: ffffffff8643b457 R11: 0000000000000001 R12: ffff888016b05280 [ 120.523825] R13: 0000000000000000 R14: e3fffc0000000032 R15: 0000000000000000 [ 120.524388] ? trace_irq_enable.constprop.0+0x26/0x100 [ 120.524803] ? make_task_dead+0x214/0x3b0 [ 120.525139] ? make_task_dead+0x214/0x3b0 [ 120.525471] ? do_syscall_64+0xbf/0x360 [ 120.525791] rewind_stack_and_make_dead+0x16/0x20 [ 120.526182] RIP: 0033:0x7f950d9a4b19 [ 120.526484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 120.527911] RSP: 002b:00007f950af1a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.528508] RAX: ffffffffffffffda RBX: 00007f950dab7f68 RCX: 00007f950d9a4b19 [ 120.529072] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f950dab7f6c [ 120.529628] RBP: 00007f950dab7f60 R08: 000000000000000e R09: 0000000000000000 [ 120.530192] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f950dab7f6c [ 120.530761] R13: 00007ffdc7561fef R14: 00007f950af1a300 R15: 0000000000022000 [ 120.531326] [ 120.531515] Modules linked in: [ 120.531774] ---[ end trace 0000000000000000 ]--- [ 120.532145] RIP: 0010:perf_tp_event+0x175/0xe70 [ 120.532520] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 120.533946] RSP: 0018:ffff888047307780 EFLAGS: 00010012 [ 120.534368] RAX: 0400000000000032 RBX: 1fffffffffffffa0 RCX: ffffc900064bc000 [ 120.534940] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 2000000000000190 [ 120.535500] RBP: ffff8880473079f0 R08: ffff88806ce31340 R09: ffffe8ffffc15b20 [ 120.536060] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 120.536620] R13: 0000000000000000 R14: ffff88806ce31340 R15: dffffc0000000000 [ 120.537179] FS: 00007f950af1a700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 120.537808] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.538264] CR2: 00007f950dab8018 CR3: 000000000df0b000 CR4: 0000000000350ef0 [ 120.538834] Kernel panic - not syncing: Fatal exception in interrupt [ 120.539529] Kernel Offset: disabled [ 120.539816] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 11:14:39 Registers: info registers vcpu 0 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff888047307070 R8 =0000000000000000 R9 =ffffed10016d3046 R10=000000000000002e R11=0000000065646f43 R12=000000000000002e R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0 RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f950af1a700 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f950dab8018 CR3=000000000df0b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f950da8b7c000007f950da8b7c8 XMM02=00007f950da8b7e000007f950da8b7c0 XMM03=00007f950da8b7c800007f950da8b7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88800c22a000 RBX=0000000000000000 RCX=ffffffff81522123 RDX=ffff88800bf95b00 RSI=0000000000000000 RDI=ffff88800c3fa000 RBP=ffff88800c3fa000 RSP=ffff888016bdf5d8 R8 =0000000000000001 R9 =ffffed1002d7beac R10=0000000000000003 R11=0000000000000000 R12=ffff88800d080068 R13=0000000000000246 R14=ffff88800c3fa000 R15=ffffea000030fe80 RIP=ffffffff81b35544 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557dcc8400 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffcfa68ff4 CR3=0000000034752000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=0000000000000000598483e25d52111e XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000