Warning: Permanently added '[localhost]:15909' (ECDSA) to the list of known hosts. 2025/08/29 10:21:38 fuzzer started 2025/08/29 10:21:39 dialing manager at localhost:43077 syzkaller login: [ 51.612131] cgroup: Unknown subsys name 'net' [ 51.735374] cgroup: Unknown subsys name 'cpuset' [ 51.787079] cgroup: Unknown subsys name 'rlimit' 2025/08/29 10:21:50 syscalls: 2214 2025/08/29 10:21:50 code coverage: enabled 2025/08/29 10:21:50 comparison tracing: enabled 2025/08/29 10:21:50 extra coverage: enabled 2025/08/29 10:21:50 setuid sandbox: enabled 2025/08/29 10:21:50 namespace sandbox: enabled 2025/08/29 10:21:50 Android sandbox: enabled 2025/08/29 10:21:50 fault injection: enabled 2025/08/29 10:21:50 leak checking: enabled 2025/08/29 10:21:50 net packet injection: enabled 2025/08/29 10:21:50 net device setup: enabled 2025/08/29 10:21:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 10:21:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 10:21:50 USB emulation: enabled 2025/08/29 10:21:50 hci packet injection: enabled 2025/08/29 10:21:50 wifi device emulation: enabled 2025/08/29 10:21:50 802.15.4 emulation: enabled 2025/08/29 10:21:50 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 10:21:50 fetching corpus: 50, signal 26147/29517 (executing program) 2025/08/29 10:21:50 fetching corpus: 100, signal 32298/37143 (executing program) 2025/08/29 10:21:50 fetching corpus: 150, signal 40008/46152 (executing program) 2025/08/29 10:21:50 fetching corpus: 200, signal 45590/52945 (executing program) 2025/08/29 10:21:50 fetching corpus: 250, signal 50972/59462 (executing program) 2025/08/29 10:21:51 fetching corpus: 300, signal 57261/66704 (executing program) 2025/08/29 10:21:51 fetching corpus: 350, signal 62895/73157 (executing program) 2025/08/29 10:21:51 fetching corpus: 400, signal 64946/76275 (executing program) 2025/08/29 10:21:51 fetching corpus: 450, signal 67332/79644 (executing program) 2025/08/29 10:21:51 fetching corpus: 500, signal 69733/82920 (executing program) 2025/08/29 10:21:51 fetching corpus: 550, signal 72447/86469 (executing program) 2025/08/29 10:21:51 fetching corpus: 600, signal 74522/89401 (executing program) 2025/08/29 10:21:51 fetching corpus: 650, signal 77433/93036 (executing program) 2025/08/29 10:21:51 fetching corpus: 700, signal 79107/95578 (executing program) 2025/08/29 10:21:51 fetching corpus: 750, signal 83187/99969 (executing program) 2025/08/29 10:21:52 fetching corpus: 800, signal 85468/102828 (executing program) 2025/08/29 10:21:52 fetching corpus: 850, signal 87872/105695 (executing program) 2025/08/29 10:21:52 fetching corpus: 900, signal 89935/108306 (executing program) 2025/08/29 10:21:52 fetching corpus: 950, signal 91613/110588 (executing program) 2025/08/29 10:21:52 fetching corpus: 1000, signal 93325/112845 (executing program) 2025/08/29 10:21:52 fetching corpus: 1050, signal 95722/115579 (executing program) 2025/08/29 10:21:52 fetching corpus: 1100, signal 97653/117876 (executing program) 2025/08/29 10:21:52 fetching corpus: 1150, signal 100507/120824 (executing program) 2025/08/29 10:21:52 fetching corpus: 1200, signal 101623/122528 (executing program) 2025/08/29 10:21:53 fetching corpus: 1250, signal 103476/124712 (executing program) 2025/08/29 10:21:53 fetching corpus: 1300, signal 104872/126506 (executing program) 2025/08/29 10:21:53 fetching corpus: 1350, signal 106184/128211 (executing program) 2025/08/29 10:21:53 fetching corpus: 1400, signal 107472/129875 (executing program) 2025/08/29 10:21:53 fetching corpus: 1450, signal 109016/131717 (executing program) 2025/08/29 10:21:53 fetching corpus: 1500, signal 110365/133358 (executing program) 2025/08/29 10:21:53 fetching corpus: 1550, signal 111330/134729 (executing program) 2025/08/29 10:21:53 fetching corpus: 1600, signal 112671/136319 (executing program) 2025/08/29 10:21:54 fetching corpus: 1650, signal 116776/139602 (executing program) 2025/08/29 10:21:54 fetching corpus: 1700, signal 118271/141166 (executing program) 2025/08/29 10:21:54 fetching corpus: 1750, signal 119252/142374 (executing program) 2025/08/29 10:21:54 fetching corpus: 1800, signal 120020/143418 (executing program) 2025/08/29 10:21:54 fetching corpus: 1850, signal 121461/144853 (executing program) 2025/08/29 10:21:54 fetching corpus: 1900, signal 122197/145900 (executing program) 2025/08/29 10:21:54 fetching corpus: 1950, signal 122977/146954 (executing program) 2025/08/29 10:21:54 fetching corpus: 2000, signal 123947/148100 (executing program) 2025/08/29 10:21:54 fetching corpus: 2050, signal 125083/149253 (executing program) 2025/08/29 10:21:54 fetching corpus: 2100, signal 126296/150425 (executing program) 2025/08/29 10:21:54 fetching corpus: 2150, signal 127014/151360 (executing program) 2025/08/29 10:21:55 fetching corpus: 2200, signal 127734/152273 (executing program) 2025/08/29 10:21:55 fetching corpus: 2250, signal 128636/153216 (executing program) 2025/08/29 10:21:55 fetching corpus: 2300, signal 129975/154328 (executing program) 2025/08/29 10:21:55 fetching corpus: 2350, signal 131208/155516 (executing program) 2025/08/29 10:21:55 fetching corpus: 2400, signal 131942/156360 (executing program) 2025/08/29 10:21:55 fetching corpus: 2450, signal 133013/157298 (executing program) 2025/08/29 10:21:55 fetching corpus: 2500, signal 133670/158040 (executing program) 2025/08/29 10:21:55 fetching corpus: 2550, signal 134616/158967 (executing program) 2025/08/29 10:21:55 fetching corpus: 2600, signal 135279/159745 (executing program) 2025/08/29 10:21:55 fetching corpus: 2650, signal 135881/160446 (executing program) 2025/08/29 10:21:56 fetching corpus: 2700, signal 136807/161242 (executing program) 2025/08/29 10:21:56 fetching corpus: 2750, signal 137691/161988 (executing program) 2025/08/29 10:21:56 fetching corpus: 2800, signal 138554/162740 (executing program) 2025/08/29 10:21:56 fetching corpus: 2850, signal 139260/163410 (executing program) 2025/08/29 10:21:56 fetching corpus: 2900, signal 139888/164050 (executing program) 2025/08/29 10:21:56 fetching corpus: 2950, signal 140726/164728 (executing program) 2025/08/29 10:21:56 fetching corpus: 3000, signal 141402/165332 (executing program) 2025/08/29 10:21:56 fetching corpus: 3050, signal 141765/165873 (executing program) 2025/08/29 10:21:56 fetching corpus: 3100, signal 142384/166398 (executing program) 2025/08/29 10:21:57 fetching corpus: 3150, signal 143202/167080 (executing program) 2025/08/29 10:21:57 fetching corpus: 3200, signal 143592/167566 (executing program) 2025/08/29 10:21:57 fetching corpus: 3250, signal 144103/168051 (executing program) 2025/08/29 10:21:57 fetching corpus: 3300, signal 144685/168523 (executing program) 2025/08/29 10:21:57 fetching corpus: 3350, signal 145258/168969 (executing program) 2025/08/29 10:21:57 fetching corpus: 3400, signal 146057/169482 (executing program) 2025/08/29 10:21:57 fetching corpus: 3450, signal 146955/169982 (executing program) 2025/08/29 10:21:57 fetching corpus: 3500, signal 147596/170439 (executing program) 2025/08/29 10:21:57 fetching corpus: 3550, signal 148270/170883 (executing program) 2025/08/29 10:21:57 fetching corpus: 3600, signal 148809/171238 (executing program) 2025/08/29 10:21:58 fetching corpus: 3650, signal 149956/171698 (executing program) 2025/08/29 10:21:58 fetching corpus: 3700, signal 150398/172067 (executing program) 2025/08/29 10:21:58 fetching corpus: 3750, signal 150949/172450 (executing program) 2025/08/29 10:21:58 fetching corpus: 3800, signal 151294/172765 (executing program) 2025/08/29 10:21:58 fetching corpus: 3850, signal 151862/173125 (executing program) 2025/08/29 10:21:58 fetching corpus: 3900, signal 152236/173425 (executing program) 2025/08/29 10:21:58 fetching corpus: 3950, signal 152736/173757 (executing program) 2025/08/29 10:21:58 fetching corpus: 4000, signal 153251/174074 (executing program) 2025/08/29 10:21:58 fetching corpus: 4050, signal 153786/174349 (executing program) 2025/08/29 10:21:58 fetching corpus: 4100, signal 154156/174616 (executing program) 2025/08/29 10:21:58 fetching corpus: 4150, signal 154750/174903 (executing program) 2025/08/29 10:21:59 fetching corpus: 4200, signal 155285/175150 (executing program) 2025/08/29 10:21:59 fetching corpus: 4250, signal 155865/175186 (executing program) 2025/08/29 10:21:59 fetching corpus: 4300, signal 156334/175195 (executing program) 2025/08/29 10:21:59 fetching corpus: 4350, signal 156960/175195 (executing program) 2025/08/29 10:21:59 fetching corpus: 4400, signal 157342/175202 (executing program) 2025/08/29 10:21:59 fetching corpus: 4450, signal 157764/175296 (executing program) 2025/08/29 10:21:59 fetching corpus: 4500, signal 158217/175296 (executing program) 2025/08/29 10:21:59 fetching corpus: 4550, signal 158860/175304 (executing program) 2025/08/29 10:21:59 fetching corpus: 4600, signal 159262/175304 (executing program) 2025/08/29 10:21:59 fetching corpus: 4650, signal 159761/175315 (executing program) 2025/08/29 10:21:59 fetching corpus: 4700, signal 160546/175321 (executing program) 2025/08/29 10:22:00 fetching corpus: 4750, signal 160865/175322 (executing program) 2025/08/29 10:22:00 fetching corpus: 4800, signal 161253/175323 (executing program) 2025/08/29 10:22:00 fetching corpus: 4850, signal 161671/175327 (executing program) 2025/08/29 10:22:00 fetching corpus: 4900, signal 162084/175336 (executing program) 2025/08/29 10:22:00 fetching corpus: 4950, signal 162368/175336 (executing program) 2025/08/29 10:22:00 fetching corpus: 5000, signal 162745/175353 (executing program) 2025/08/29 10:22:00 fetching corpus: 5050, signal 163143/175360 (executing program) 2025/08/29 10:22:00 fetching corpus: 5100, signal 163545/175365 (executing program) 2025/08/29 10:22:00 fetching corpus: 5150, signal 164044/175406 (executing program) 2025/08/29 10:22:00 fetching corpus: 5200, signal 164502/175418 (executing program) 2025/08/29 10:22:00 fetching corpus: 5250, signal 164869/175427 (executing program) 2025/08/29 10:22:01 fetching corpus: 5300, signal 165276/175429 (executing program) 2025/08/29 10:22:01 fetching corpus: 5350, signal 165540/175435 (executing program) 2025/08/29 10:22:01 fetching corpus: 5400, signal 166125/175436 (executing program) 2025/08/29 10:22:01 fetching corpus: 5450, signal 166315/175440 (executing program) 2025/08/29 10:22:01 fetching corpus: 5500, signal 166795/175448 (executing program) 2025/08/29 10:22:01 fetching corpus: 5550, signal 167229/175450 (executing program) 2025/08/29 10:22:01 fetching corpus: 5600, signal 167614/175457 (executing program) 2025/08/29 10:22:01 fetching corpus: 5650, signal 167941/175478 (executing program) 2025/08/29 10:22:01 fetching corpus: 5700, signal 168210/175488 (executing program) 2025/08/29 10:22:01 fetching corpus: 5750, signal 168422/175503 (executing program) 2025/08/29 10:22:01 fetching corpus: 5800, signal 169116/175510 (executing program) 2025/08/29 10:22:01 fetching corpus: 5850, signal 169630/175531 (executing program) 2025/08/29 10:22:02 fetching corpus: 5900, signal 169973/175538 (executing program) 2025/08/29 10:22:02 fetching corpus: 5950, signal 170368/175653 (executing program) 2025/08/29 10:22:02 fetching corpus: 6000, signal 170661/175658 (executing program) 2025/08/29 10:22:02 fetching corpus: 6050, signal 170992/175665 (executing program) 2025/08/29 10:22:02 fetching corpus: 6100, signal 171657/175665 (executing program) 2025/08/29 10:22:02 fetching corpus: 6150, signal 172128/175667 (executing program) 2025/08/29 10:22:02 fetching corpus: 6200, signal 172386/175677 (executing program) 2025/08/29 10:22:02 fetching corpus: 6250, signal 172826/175690 (executing program) 2025/08/29 10:22:03 fetching corpus: 6300, signal 173120/175772 (executing program) 2025/08/29 10:22:03 fetching corpus: 6327, signal 173480/175780 (executing program) 2025/08/29 10:22:03 fetching corpus: 6327, signal 173480/175780 (executing program) 2025/08/29 10:22:05 starting 8 fuzzer processes 10:22:05 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='./file1\x00') lchown(&(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, 0xee01) 10:22:05 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r3, 0x0) 10:22:05 executing program 2: r0 = getpgrp(0x0) r1 = pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) process_mrelease(r2, 0x0) 10:22:05 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040), 0x4) [ 77.927639] audit: type=1400 audit(1756462925.837:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:22:05 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) 10:22:05 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000001140)='./file0\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x4) 10:22:05 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) 10:22:05 executing program 6: r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffa}, 0x0) [ 79.102658] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.108021] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.111153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.117641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.122989] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.293548] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.295525] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.298088] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.305852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.309553] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.423077] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.429148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.434991] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.448606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 79.462580] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 79.464783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.466524] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.470164] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.472086] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 79.473989] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.478968] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.481375] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.483142] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 79.485933] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.486505] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 79.487381] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.492121] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 79.511846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.516044] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 79.517836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 79.536264] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 79.543179] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 79.548052] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.549682] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 79.554098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.557191] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.564343] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 79.566767] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 79.579846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 79.612155] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 81.196150] Bluetooth: hci0: command tx timeout [ 81.326755] Bluetooth: hci1: command tx timeout [ 81.516217] Bluetooth: hci4: command tx timeout [ 81.643996] Bluetooth: hci2: command tx timeout [ 81.644810] Bluetooth: hci6: command tx timeout [ 81.645047] Bluetooth: hci5: command tx timeout [ 81.708943] Bluetooth: hci3: command tx timeout [ 81.710350] Bluetooth: hci7: command tx timeout [ 83.243754] Bluetooth: hci0: command tx timeout [ 83.371798] Bluetooth: hci1: command tx timeout [ 83.564721] Bluetooth: hci4: command tx timeout [ 83.691805] Bluetooth: hci2: command tx timeout [ 83.692261] Bluetooth: hci5: command tx timeout [ 83.692299] Bluetooth: hci6: command tx timeout [ 83.758744] Bluetooth: hci7: command tx timeout [ 83.758785] Bluetooth: hci3: command tx timeout [ 85.291796] Bluetooth: hci0: command tx timeout [ 85.419752] Bluetooth: hci1: command tx timeout [ 85.611851] Bluetooth: hci4: command tx timeout [ 85.739780] Bluetooth: hci6: command tx timeout [ 85.740402] Bluetooth: hci2: command tx timeout [ 85.740489] Bluetooth: hci5: command tx timeout [ 85.803764] Bluetooth: hci7: command tx timeout [ 85.803785] Bluetooth: hci3: command tx timeout [ 87.340817] Bluetooth: hci0: command tx timeout [ 87.467792] Bluetooth: hci1: command tx timeout [ 87.660831] Bluetooth: hci4: command tx timeout [ 87.787818] Bluetooth: hci2: command tx timeout [ 87.787873] Bluetooth: hci6: command tx timeout [ 87.788293] Bluetooth: hci5: command tx timeout [ 87.852727] Bluetooth: hci3: command tx timeout [ 87.853125] Bluetooth: hci7: command tx timeout [ 117.500328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.501047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.728030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.728671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.198394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.199060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.312813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.313461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.510010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.510621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.673188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.673858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.736527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.737610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.832743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.833370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.919349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.919993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.958636] audit: type=1400 audit(1756462966.870:8): avc: denied { open } for pid=3842 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 118.962660] audit: type=1400 audit(1756462966.870:9): avc: denied { kernel } for pid=3842 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.039213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.040032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.192433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.193614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.232625] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 119.233444] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 119.234046] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 119.234580] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 119.235226] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 119.237065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.237611] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.238524] Buffer I/O error on dev sr0, logical block 0, async page read [ 119.253800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.254264] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.255046] Buffer I/O error on dev sr0, logical block 1, async page read [ 119.262376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.262847] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.263498] Buffer I/O error on dev sr0, logical block 2, async page read [ 119.273815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.274276] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.274966] Buffer I/O error on dev sr0, logical block 3, async page read [ 119.281864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.282323] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.283009] Buffer I/O error on dev sr0, logical block 4, async page read [ 119.286304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.286904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.290080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.290521] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.291340] Buffer I/O error on dev sr0, logical block 5, async page read [ 119.301796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.302256] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.302950] Buffer I/O error on dev sr0, logical block 6, async page read [ 119.306105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.306569] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.307352] Buffer I/O error on dev sr0, logical block 7, async page read [ 119.362285] kmemleak: Found object by alias at 0x607f1a6313ec [ 119.362301] CPU: 0 UID: 0 PID: 3860 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 119.362318] Tainted: [W]=WARN [ 119.362322] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 119.362328] Call Trace: [ 119.362332] [ 119.362337] dump_stack_lvl+0xca/0x120 [ 119.362361] __lookup_object+0x94/0xb0 [ 119.362377] delete_object_full+0x27/0x70 [ 119.362392] free_percpu+0x30/0x1160 [ 119.362408] ? arch_uprobe_clear_state+0x16/0x140 [ 119.362427] futex_hash_free+0x38/0xc0 [ 119.362441] mmput+0x2d3/0x390 [ 119.362459] do_exit+0x79d/0x2970 [ 119.362472] ? signal_wake_up_state+0x85/0x120 [ 119.362487] ? zap_other_threads+0x2b9/0x3a0 [ 119.362502] ? __pfx_do_exit+0x10/0x10 [ 119.362515] ? do_group_exit+0x1c3/0x2a0 [ 119.362528] ? lock_release+0xc8/0x290 [ 119.362544] do_group_exit+0xd3/0x2a0 [ 119.362559] __x64_sys_exit_group+0x3e/0x50 [ 119.362572] x64_sys_call+0x18c5/0x18d0 [ 119.362587] do_syscall_64+0xbf/0x360 [ 119.362599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.362610] RIP: 0033:0x7f86df02ab19 [ 119.362618] Code: Unable to access opcode bytes at 0x7f86df02aaef. [ 119.362623] RSP: 002b:00007ffd838e9008 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 119.362634] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f86df02ab19 [ 119.362641] RDX: 00007f86defdd72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 119.362648] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 119.362655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.362661] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffd838e90f0 [ 119.362676] [ 119.362680] kmemleak: Object (percpu) 0x607f1a6313e8 (size 8): [ 119.362691] kmemleak: comm "syz-executor.0", pid 274, jiffies 4294784770 [ 119.362698] kmemleak: min_count = 1 [ 119.362701] kmemleak: count = 0 [ 119.362705] kmemleak: flags = 0x21 [ 119.362709] kmemleak: checksum = 0 [ 119.362712] kmemleak: backtrace: [ 119.362715] pcpu_alloc_noprof+0x87a/0x1170 [ 119.362730] percpu_ref_init+0x37/0x400 [ 119.362747] cgroup_apply_control_enable+0x4a6/0x9f0 [ 119.362760] cgroup_mkdir+0x86e/0x1110 [ 119.362772] kernfs_iop_mkdir+0x111/0x190 [ 119.362786] vfs_mkdir+0x59a/0x8d0 [ 119.362800] do_mkdirat+0x19f/0x3d0 [ 119.362810] __x64_sys_mkdir+0xf3/0x140 [ 119.362820] do_syscall_64+0xbf/0x360 [ 119.362829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.418454] kmemleak: Cannot insert 0x607f1a6313ec into the object search tree (overlaps existing) [ 119.418471] CPU: 1 UID: 0 PID: 287 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 119.418489] Tainted: [W]=WARN [ 119.418493] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 119.418500] Call Trace: [ 119.418504] [ 119.418509] dump_stack_lvl+0xca/0x120 [ 119.418533] __link_object+0x190/0x210 [ 119.418552] __create_object+0x48/0x80 [ 119.418569] pcpu_alloc_noprof+0x87a/0x1170 [ 119.418593] __percpu_counter_init_many+0x44/0x360 [ 119.418611] fprop_global_init+0x5b/0x100 [ 119.418628] mem_cgroup_css_alloc+0x88f/0x15e0 [ 119.418644] ? lock_is_held_type+0x9e/0x120 [ 119.418662] cgroup_apply_control_enable+0x446/0x9f0 [ 119.418689] cgroup_mkdir+0x86e/0x1110 [ 119.418706] ? __pfx_cgroup_mkdir+0x10/0x10 [ 119.418721] kernfs_iop_mkdir+0x111/0x190 [ 119.418739] vfs_mkdir+0x59a/0x8d0 [ 119.418759] do_mkdirat+0x19f/0x3d0 [ 119.418773] ? __pfx_do_mkdirat+0x10/0x10 [ 119.418790] __x64_sys_mkdir+0xf3/0x140 [ 119.418803] do_syscall_64+0xbf/0x360 [ 119.418814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.418826] RIP: 0033:0x7f5c9d480c27 [ 119.418836] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.418847] RSP: 002b:00007fff56893028 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 119.418858] RAX: ffffffffffffffda RBX: 00007fff568930b0 RCX: 00007f5c9d480c27 [ 119.418866] RDX: 00007fff568930c7 RSI: 00000000000001ff RDI: 00007fff568930b0 [ 119.418873] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007fff56892ec0 [ 119.418879] R10: 00007fff56892d77 R11: 0000000000000206 R12: 0000000000000001 [ 119.418886] R13: 00007fff56893330 R14: 0000000000000000 R15: 00000000000000f8 [ 119.418902] [ 119.419428] kmemleak: Kernel memory leak detector disabled [ 119.419432] kmemleak: Object (percpu) 0x607f1a6313e8 (size 8): [ 119.419439] kmemleak: comm "syz-executor.0", pid 274, jiffies 4294784770 [ 119.419446] kmemleak: min_count = 1 [ 119.419449] kmemleak: count = 0 [ 119.419453] kmemleak: flags = 0x21 [ 119.419456] kmemleak: checksum = 0 [ 119.419460] kmemleak: backtrace: [ 119.419463] pcpu_alloc_noprof+0x87a/0x1170 [ 119.419478] percpu_ref_init+0x37/0x400 [ 119.419495] cgroup_apply_control_enable+0x4a6/0x9f0 [ 119.419507] cgroup_mkdir+0x86e/0x1110 [ 119.419519] kernfs_iop_mkdir+0x111/0x190 [ 119.419532] vfs_mkdir+0x59a/0x8d0 [ 119.419546] do_mkdirat+0x19f/0x3d0 [ 119.419556] __x64_sys_mkdir+0xf3/0x140 [ 119.419567] do_syscall_64+0xbf/0x360 [ 119.419575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.534881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.535525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.554233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.554898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.672297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.672940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.686161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.686815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.793116] kmemleak: Automatic memory scanning thread ended 10:22:47 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) 10:22:47 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) 10:22:47 executing program 1: r0 = getpgrp(0x0) r1 = pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) process_mrelease(r2, 0x0) 10:22:47 executing program 2: r0 = getpgrp(0x0) r1 = pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) process_mrelease(r2, 0x0) 10:22:47 executing program 6: r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffa}, 0x0) 10:22:47 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='./file1\x00') lchown(&(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, 0xee01) 10:22:47 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040), 0x4) 10:22:47 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000001140)='./file0\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x4) 10:22:47 executing program 6: r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffa}, 0x0) 10:22:47 executing program 1: r0 = getpgrp(0x0) r1 = pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) process_mrelease(r2, 0x0) 10:22:47 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='./file1\x00') lchown(&(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, 0xee01) 10:22:47 executing program 2: r0 = getpgrp(0x0) r1 = pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) process_mrelease(r2, 0x0) 10:22:47 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) 10:22:47 executing program 6: r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffa}, 0x0) 10:22:47 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000001140)='./file0\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x4) 10:22:47 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) 10:22:47 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040), 0x4) 10:22:47 executing program 2: r0 = getpgrp(0x0) r1 = pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) process_mrelease(r2, 0x0) 10:22:47 executing program 1: r0 = getpgrp(0x0) r1 = pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) process_mrelease(r2, 0x0) 10:22:47 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='./file1\x00') lchown(&(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, 0xee01) 10:22:47 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) [ 120.029832] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 120.030791] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 120.031382] CPU: 1 UID: 0 PID: 3943 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 120.033485] Tainted: [W]=WARN [ 120.034216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 120.036090] RIP: 0010:perf_tp_event+0x175/0xe70 [ 120.037694] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 120.041218] RSP: 0018:ffff8880468c7800 EFLAGS: 00010212 [ 120.041657] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90006417000 [ 120.042241] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 120.042825] RBP: ffff8880468c7a70 R08: ffff88806cf31340 R09: ffffe8ffffd16b50 [ 120.043402] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 120.043982] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 120.044573] FS: 00007f5c9a9f7700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 120.045227] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.045703] CR2: 00007f5c9d595018 CR3: 0000000046470000 CR4: 0000000000350ef0 [ 120.046285] Call Trace: [ 120.046500] [ 120.046693] ? __pfx_perf_tp_event+0x10/0x10 [ 120.047063] ? lock_is_held_type+0x9e/0x120 [ 120.047429] ? lock_is_held_type+0x9e/0x120 [ 120.047794] ? perf_trace_lock+0xb5/0x5d0 [ 120.048142] ? perf_trace_lock+0xb5/0x5d0 [ 120.048493] ? __pfx_perf_trace_lock+0x10/0x10 [ 120.048873] ? __pfx_perf_trace_lock+0x10/0x10 [ 120.049253] ? find_held_lock+0x2b/0x80 [ 120.049588] ? find_held_lock+0x2b/0x80 [ 120.049922] ? __perf_install_in_context+0x503/0xb90 [ 120.050337] ? lock_release+0xc8/0x290 [ 120.050665] ? do_raw_spin_unlock+0x53/0x220 [ 120.051037] ? perf_trace_run_bpf_submit+0xef/0x180 [ 120.051451] perf_trace_run_bpf_submit+0xef/0x180 [ 120.051860] perf_trace_lock+0x337/0x5d0 [ 120.052206] ? __pfx_perf_trace_lock+0x10/0x10 [ 120.052586] ? lock_acquire+0x15e/0x2f0 [ 120.052917] ? futex_ref_get+0x48/0x300 [ 120.053248] ? futex_ref_get+0x114/0x300 [ 120.053581] ? futex_hash+0x15c/0x390 [ 120.053894] lock_release+0x1ab/0x290 [ 120.054212] ? futex_hash+0x15c/0x390 [ 120.054529] futex_ref_get+0x119/0x300 [ 120.054852] ? futex_hash+0x15c/0x390 [ 120.055168] futex_hash+0x70/0x390 [ 120.055466] futex_wake+0x143/0x540 [ 120.055775] ? __pfx_perf_trace_lock+0x10/0x10 [ 120.056156] ? __pfx_futex_wake+0x10/0x10 [ 120.056514] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 120.056932] ? lock_release+0xc8/0x290 [ 120.057260] do_futex+0x26d/0x370 [ 120.057552] ? __pfx_do_futex+0x10/0x10 [ 120.057887] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 120.058322] ? find_held_lock+0x2b/0x80 [ 120.058663] __x64_sys_futex+0x1c9/0x4d0 [ 120.059004] ? __pfx___x64_sys_futex+0x10/0x10 [ 120.059385] ? xfd_validate_state+0x55/0x180 [ 120.059763] do_syscall_64+0xbf/0x360 [ 120.060080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.060529] RIP: 0033:0x7f5c9d481b19 [ 120.060841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 120.062310] RSP: 002b:00007f5c9a9f7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.062928] RAX: ffffffffffffffda RBX: 00007f5c9d594f68 RCX: 00007f5c9d481b19 [ 120.063510] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5c9d594f6c 10:22:47 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) [ 120.064095] RBP: 00007f5c9d594f60 R08: 000000000000000e R09: 0000000000000000 [ 120.064932] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f5c9d594f6c [ 120.065537] R13: 00007fff56892ddf R14: 00007f5c9a9f7300 R15: 0000000000022000 [ 120.066126] [ 120.066319] Modules linked in: 10:22:47 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='./file1\x00') lchown(&(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, 0xee01) [ 120.066697] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 120.067670] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 120.068290] CPU: 1 UID: 0 PID: 3943 Comm: syz-executor.3 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 120.069391] Tainted: [D]=DIE, [W]=WARN [ 120.069708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 120.070652] RIP: 0010:perf_tp_event+0x175/0xe70 [ 120.071040] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 120.072508] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012 [ 120.072942] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 120.073674] RDX: ffff888016658000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 120.074501] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd16b50 [ 120.075210] R10: 0000000000000000 R11: ffff88806cf37018 R12: dffffc0000000000 10:22:47 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='./file1\x00') lchown(&(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, 0xee01) 10:22:47 executing program 1: sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c101, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000) [ 120.075787] R13: 0000000000000024 R14: ffff88806cf31490 R15: dffffc0000000000 [ 120.076522] FS: 00007f5c9a9f7700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 120.077313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.077780] CR2: 00007f5c9d595018 CR3: 0000000046470000 CR4: 0000000000350ef0 [ 120.078456] Call Trace: [ 120.078673] [ 120.078961] ? __pfx_perf_tp_event+0x10/0x10 [ 120.079339] ? perf_trace_lock+0xb5/0x5d0 [ 120.079681] ? __pfx_perf_trace_lock+0x10/0x10 [ 120.080059] ? trace_rcu_utilization+0x26/0x190 [ 120.080450] ? rcu_sched_clock_irq+0x7a0/0x2b40 [ 120.080839] ? perf_trace_lock+0xb5/0x5d0 [ 120.081182] ? trace_sched_set_need_resched_tp+0xd4/0x110 [ 120.081636] ? __resched_curr+0x2a2/0x330 [ 120.081978] ? __pfx___resched_curr+0x10/0x10 [ 120.082353] ? perf_trace_run_bpf_submit+0xef/0x180 [ 120.082760] perf_trace_run_bpf_submit+0xef/0x180 [ 120.083158] perf_trace_lock+0x337/0x5d0 [ 120.083489] ? update_cfs_group+0x11d/0x260 [ 120.083842] ? kvm_sched_clock_read+0x16/0x30 [ 120.084217] ? __pfx_perf_trace_lock+0x10/0x10 [ 120.084595] ? check_preempt_wakeup_fair+0x6e/0x950 [ 120.085005] ? sched_ttwu_pending+0x2e0/0x4a0 [ 120.085378] lock_release+0x1ab/0x290 [ 120.085695] ? ttwu_do_activate+0x1a4/0x8a0 [ 120.086051] _raw_spin_unlock+0x16/0x40 [ 120.086383] sched_ttwu_pending+0x2e0/0x4a0 [ 120.086745] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 120.087145] ? hrtimer_interrupt+0x652/0x830 [ 120.087511] __flush_smp_call_function_queue+0x434/0x740 [ 120.087959] __sysvec_call_function_single+0x6d/0x370 [ 120.088390] sysvec_call_function_single+0xa1/0xc0 [ 120.088792] [ 120.088981] [ 120.089172] asm_sysvec_call_function_single+0x1a/0x20 [ 120.089597] RIP: 0010:oops_exit+0x0/0x50 [ 120.089935] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27 [ 120.091393] RSP: 0018:ffff8880468c7690 EFLAGS: 00000202 [ 120.091824] RAX: 000000000002dbd3 RBX: 0000000000000216 RCX: ffffc90006417000 [ 120.092412] RDX: 0000000000040000 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 120.092989] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90 [ 120.093562] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880468c7758 [ 120.094138] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000 [ 120.094716] ? oops_end+0x4a/0xe0 [ 120.095013] oops_end+0x65/0xe0 [ 120.095292] exc_general_protection+0x1a2/0x330 [ 120.095678] asm_exc_general_protection+0x26/0x30 [ 120.096072] RIP: 0010:perf_tp_event+0x175/0xe70 [ 120.096464] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 120.097930] RSP: 0018:ffff8880468c7800 EFLAGS: 00010212 [ 120.098363] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90006417000 [ 120.098937] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 120.099505] RBP: ffff8880468c7a70 R08: ffff88806cf31340 R09: ffffe8ffffd16b50 [ 120.100071] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 120.100651] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 120.101233] ? perf_tp_event+0x167/0xe70 [ 120.101575] ? __pfx_perf_tp_event+0x10/0x10 [ 120.101940] ? lock_is_held_type+0x9e/0x120 [ 120.102296] ? lock_is_held_type+0x9e/0x120 [ 120.102650] ? perf_trace_lock+0xb5/0x5d0 [ 120.102991] ? perf_trace_lock+0xb5/0x5d0 [ 120.103332] ? __pfx_perf_trace_lock+0x10/0x10 [ 120.103708] ? __pfx_perf_trace_lock+0x10/0x10 [ 120.104087] ? find_held_lock+0x2b/0x80 [ 120.104428] ? find_held_lock+0x2b/0x80 [ 120.104768] ? __perf_install_in_context+0x503/0xb90 [ 120.105219] ? lock_release+0xc8/0x290 [ 120.105564] ? do_raw_spin_unlock+0x53/0x220 [ 120.105954] ? perf_trace_run_bpf_submit+0xef/0x180 [ 120.106397] perf_trace_run_bpf_submit+0xef/0x180 [ 120.106835] perf_trace_lock+0x337/0x5d0 [ 120.107204] ? __pfx_perf_trace_lock+0x10/0x10 [ 120.107618] ? lock_acquire+0x15e/0x2f0 [ 120.107960] ? futex_ref_get+0x48/0x300 [ 120.108318] ? futex_ref_get+0x114/0x300 [ 120.108674] ? futex_hash+0x15c/0x390 [ 120.109007] lock_release+0x1ab/0x290 [ 120.109351] ? futex_hash+0x15c/0x390 [ 120.109686] futex_ref_get+0x119/0x300 [ 120.110034] ? futex_hash+0x15c/0x390 [ 120.110374] futex_hash+0x70/0x390 [ 120.110693] futex_wake+0x143/0x540 [ 120.111023] ? __pfx_perf_trace_lock+0x10/0x10 [ 120.111435] ? __pfx_futex_wake+0x10/0x10 [ 120.111808] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 120.112266] ? lock_release+0xc8/0x290 [ 120.112616] do_futex+0x26d/0x370 [ 120.112924] ? __pfx_do_futex+0x10/0x10 [ 120.113267] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 120.113741] ? find_held_lock+0x2b/0x80 [ 120.114102] __x64_sys_futex+0x1c9/0x4d0 [ 120.114463] ? __pfx___x64_sys_futex+0x10/0x10 [ 120.114868] ? xfd_validate_state+0x55/0x180 [ 120.115270] do_syscall_64+0xbf/0x360 [ 120.115611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.116067] RIP: 0033:0x7f5c9d481b19 [ 120.116389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 120.117987] RSP: 002b:00007f5c9a9f7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.118650] RAX: ffffffffffffffda RBX: 00007f5c9d594f68 RCX: 00007f5c9d481b19 [ 120.119277] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5c9d594f6c [ 120.119904] RBP: 00007f5c9d594f60 R08: 000000000000000e R09: 0000000000000000 [ 120.120519] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f5c9d594f6c [ 120.121150] R13: 00007fff56892ddf R14: 00007f5c9a9f7300 R15: 0000000000022000 [ 120.121786] [ 120.121995] Modules linked in: [ 120.122278] ---[ end trace 0000000000000000 ]--- [ 120.122698] RIP: 0010:perf_tp_event+0x175/0xe70 [ 120.123117] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 120.124702] RSP: 0018:ffff8880468c7800 EFLAGS: 00010212 [ 120.125174] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90006417000 [ 120.125798] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 120.126428] RBP: ffff8880468c7a70 R08: ffff88806cf31340 R09: ffffe8ffffd16b50 [ 120.127054] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 120.127683] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 120.128319] FS: 00007f5c9a9f7700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 120.129031] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.129541] CR2: 00007f5c9d595018 CR3: 0000000046470000 CR4: 0000000000350ef0 [ 120.130169] Kernel panic - not syncing: Fatal exception in interrupt [ 121.174341] Shutting down cpus with NMI [ 121.174861] Kernel Offset: disabled [ 121.175145] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 10:22:48 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffea000108d440 RCX=ffffffff819ce980 RDX=ffff8880463e1b80 RSI=ffffffff819ce9b3 RDI=0000000000000007 RBP=000000000000006a RSP=ffff8880461af878 R8 =0000000000000000 R9 =fffff94000211a86 R10=0000000000000000 R11=1ffff1100d9c6f7b R12=0000000000000000 R13=00007fdbb9f03000 R14=ffff8880461afce0 R15=8000000042351007 RIP=ffffffff8173e788 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020000000 CR3=00000000456a7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff8880468c70f0 R8 =0000000000000000 R9 =ffffed10016c1046 R10=0000000000000034 R11=0000000065646f43 R12=0000000000000034 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5c9a9f7700 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe4c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5c9d595018 CR3=0000000046470000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f5c9d5687c000007f5c9d5687c8 XMM02=00007f5c9d5687e000007f5c9d5687c0 XMM03=00007f5c9d5687c800007f5c9d5687c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000