Warning: Permanently added '[localhost]:49786' (ECDSA) to the list of known hosts.
2025/08/29 08:06:27 fuzzer started
2025/08/29 08:06:28 dialing manager at localhost:43077
syzkaller login: [ 51.873187] cgroup: Unknown subsys name 'net'
[ 51.937579] cgroup: Unknown subsys name 'cpuset'
[ 51.951962] cgroup: Unknown subsys name 'rlimit'
2025/08/29 08:06:39 syscalls: 2214
2025/08/29 08:06:39 code coverage: enabled
2025/08/29 08:06:39 comparison tracing: enabled
2025/08/29 08:06:39 extra coverage: enabled
2025/08/29 08:06:39 setuid sandbox: enabled
2025/08/29 08:06:39 namespace sandbox: enabled
2025/08/29 08:06:39 Android sandbox: enabled
2025/08/29 08:06:39 fault injection: enabled
2025/08/29 08:06:39 leak checking: enabled
2025/08/29 08:06:39 net packet injection: enabled
2025/08/29 08:06:39 net device setup: enabled
2025/08/29 08:06:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/29 08:06:39 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/29 08:06:39 USB emulation: enabled
2025/08/29 08:06:39 hci packet injection: enabled
2025/08/29 08:06:39 wifi device emulation: enabled
2025/08/29 08:06:39 802.15.4 emulation: enabled
2025/08/29 08:06:39 fetching corpus: 0, signal 0/2000 (executing program)
2025/08/29 08:06:39 fetching corpus: 35, signal 15878/19117 (executing program)
2025/08/29 08:06:39 fetching corpus: 80, signal 30707/34439 (executing program)
2025/08/29 08:06:39 fetching corpus: 130, signal 41540/45466 (executing program)
2025/08/29 08:06:39 fetching corpus: 180, signal 48986/52969 (executing program)
2025/08/29 08:06:39 fetching corpus: 230, signal 55408/59212 (executing program)
2025/08/29 08:06:40 fetching corpus: 280, signal 59160/62919 (executing program)
2025/08/29 08:06:40 fetching corpus: 330, signal 61846/65629 (executing program)
2025/08/29 08:06:40 fetching corpus: 380, signal 67969/70756 (executing program)
2025/08/29 08:06:40 fetching corpus: 430, signal 70523/72932 (executing program)
2025/08/29 08:06:40 fetching corpus: 480, signal 73466/75335 (executing program)
2025/08/29 08:06:40 fetching corpus: 530, signal 75722/77098 (executing program)
2025/08/29 08:06:40 fetching corpus: 573, signal 77443/78382 (executing program)
2025/08/29 08:06:40 fetching corpus: 573, signal 77443/78459 (executing program)
2025/08/29 08:06:40 fetching corpus: 573, signal 77443/78540 (executing program)
2025/08/29 08:06:40 fetching corpus: 573, signal 77443/78605 (executing program)
2025/08/29 08:06:40 fetching corpus: 573, signal 77443/78672 (executing program)
2025/08/29 08:06:40 fetching corpus: 573, signal 77443/78742 (executing program)
2025/08/29 08:06:40 fetching corpus: 573, signal 77443/78808 (executing program)
2025/08/29 08:06:40 fetching corpus: 573, signal 77443/78882 (executing program)
2025/08/29 08:06:40 fetching corpus: 573, signal 77443/78959 (executing program)
2025/08/29 08:06:40 fetching corpus: 573, signal 77443/79017 (executing program)
2025/08/29 08:06:40 fetching corpus: 573, signal 77443/79091 (executing program)
2025/08/29 08:06:40 fetching corpus: 573, signal 77443/79156 (executing program)
2025/08/29 08:06:40 fetching corpus: 573, signal 77443/79227 (executing program)
2025/08/29 08:06:40 fetching corpus: 573, signal 77443/79282 (executing program)
2025/08/29 08:06:40 fetching corpus: 573, signal 77443/79357 (executing program)
2025/08/29 08:06:40 fetching corpus: 573, signal 77443/79433 (executing program)
2025/08/29 08:06:40 fetching corpus: 573, signal 77443/79491 (executing program)
2025/08/29 08:06:40 fetching corpus: 573, signal 77443/79559 (executing program)
2025/08/29 08:06:40 fetching corpus: 573, signal 77443/79630 (executing program)
2025/08/29 08:06:41 fetching corpus: 573, signal 77443/79696 (executing program)
2025/08/29 08:06:41 fetching corpus: 573, signal 77443/79770 (executing program)
2025/08/29 08:06:41 fetching corpus: 573, signal 77443/79840 (executing program)
2025/08/29 08:06:41 fetching corpus: 573, signal 77443/79911 (executing program)
2025/08/29 08:06:41 fetching corpus: 573, signal 77443/79976 (executing program)
2025/08/29 08:06:41 fetching corpus: 573, signal 77443/80038 (executing program)
2025/08/29 08:06:41 fetching corpus: 573, signal 77443/80111 (executing program)
2025/08/29 08:06:41 fetching corpus: 573, signal 77443/80190 (executing program)
2025/08/29 08:06:41 fetching corpus: 573, signal 77443/80252 (executing program)
2025/08/29 08:06:41 fetching corpus: 573, signal 77443/80252 (executing program)
2025/08/29 08:06:43 starting 8 fuzzer processes
08:06:43 executing program 0:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0)
08:06:43 executing program 7:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x80, 0x4}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port0\x00'})
08:06:43 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x0)
close_range(r0, r1, 0x0)
08:06:43 executing program 2:
munmap(&(0x7f0000000000/0x2000)=nil, 0x2000)
rt_sigprocmask(0x0, &(0x7f0000000000), 0x0, 0x8)
08:06:43 executing program 3:
r0 = epoll_create1(0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000001, 0x0, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
08:06:43 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000008400)=[{{&(0x7f0000000040)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x4810)
08:06:43 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
semop(0x0, &(0x7f0000000100)=[{}, {0x0, 0x0, 0x1800}], 0x2)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = semget$private(0x0, 0x5, 0x0)
semctl$SEM_STAT(r0, 0x0, 0x10, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0)
setuid(0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
[ 66.504567] audit: type=1400 audit(1756454803.192:7): avc: denied { execmem } for pid=273 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
08:06:43 executing program 6:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
clock_settime(0x0, &(0x7f0000000040)={0x77359400})
[ 67.685738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 67.688573] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 67.692218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 67.696869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 67.700734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 67.753447] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 67.762808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 67.764331] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 67.765748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 67.767538] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 67.769446] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 67.770726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 67.772418] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 67.777285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 67.779870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 67.781834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 67.783220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 67.786397] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 67.787771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 67.816725] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 67.830022] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 67.842437] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 67.872402] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 67.873648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 67.875567] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 67.877938] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 67.883086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 67.885904] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 67.897549] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 67.898400] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 67.902985] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 67.904428] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 67.908381] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 67.914376] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 67.917687] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 67.932593] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 67.934264] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 67.938256] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 67.942420] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 67.970659] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 69.716652] Bluetooth: hci0: command tx timeout
[ 69.844479] Bluetooth: hci3: command tx timeout
[ 69.845443] Bluetooth: hci2: command tx timeout
[ 69.908403] Bluetooth: hci5: command tx timeout
[ 69.910495] Bluetooth: hci1: command tx timeout
[ 70.036243] Bluetooth: hci4: command tx timeout
[ 70.037281] Bluetooth: hci6: command tx timeout
[ 70.100207] Bluetooth: hci7: command tx timeout
[ 71.764247] Bluetooth: hci0: command tx timeout
[ 71.894126] Bluetooth: hci2: command tx timeout
[ 71.894542] Bluetooth: hci3: command tx timeout
[ 71.956276] Bluetooth: hci1: command tx timeout
[ 71.956692] Bluetooth: hci5: command tx timeout
[ 72.084262] Bluetooth: hci6: command tx timeout
[ 72.084676] Bluetooth: hci4: command tx timeout
[ 72.149249] Bluetooth: hci7: command tx timeout
[ 73.813127] Bluetooth: hci0: command tx timeout
[ 73.940151] Bluetooth: hci3: command tx timeout
[ 73.940575] Bluetooth: hci2: command tx timeout
[ 74.004164] Bluetooth: hci5: command tx timeout
[ 74.004573] Bluetooth: hci1: command tx timeout
[ 74.133262] Bluetooth: hci4: command tx timeout
[ 74.133679] Bluetooth: hci6: command tx timeout
[ 74.198150] Bluetooth: hci7: command tx timeout
[ 75.860279] Bluetooth: hci0: command tx timeout
[ 75.988215] Bluetooth: hci2: command tx timeout
[ 75.988633] Bluetooth: hci3: command tx timeout
[ 76.052166] Bluetooth: hci1: command tx timeout
[ 76.052582] Bluetooth: hci5: command tx timeout
[ 76.180244] Bluetooth: hci6: command tx timeout
[ 76.180649] Bluetooth: hci4: command tx timeout
[ 76.244257] Bluetooth: hci7: command tx timeout
[ 104.914585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.915760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.054460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.055118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:07:22 executing program 7:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x80, 0x4}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port0\x00'})
08:07:22 executing program 7:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x80, 0x4}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port0\x00'})
08:07:22 executing program 7:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x80, 0x4}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port0\x00'})
08:07:22 executing program 7:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x80, 0x4}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port0\x00'})
08:07:22 executing program 7:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x80, 0x4}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port0\x00'})
08:07:22 executing program 7:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x80, 0x4}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port0\x00'})
08:07:22 executing program 7:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x80, 0x4}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port0\x00'})
08:07:22 executing program 7:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x80, 0x4}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port0\x00'})
[ 106.613594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.614801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.802274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.802902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.861152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.861789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.935776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.936504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.053729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.054539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.140307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.140916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.409686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.410897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.563473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.564125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.742472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.743115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.773240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.773862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.810630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.811337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.869402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.869984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.975426] audit: type=1400 audit(1756454844.661:8): avc: denied { open } for pid=3900 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 107.981536] audit: type=1400 audit(1756454844.661:9): avc: denied { kernel } for pid=3900 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 107.995361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.997030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.152256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.153391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.860530] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI
[ 108.861894] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[ 108.862879] CPU: 1 UID: 0 PID: 3945 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 108.865636] Tainted: [W]=WARN
[ 108.866352] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 108.867873] RIP: 0010:perf_tp_event+0x175/0xe70
[ 108.868783] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 108.872373] RSP: 0018:ffff8880173c7600 EFLAGS: 00010212
[ 108.873519] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[ 108.874833] RDX: ffff888016621b80 RSI: ffffffff818995b7 RDI: 0000000100000190
[ 108.876192] RBP: ffff8880173c7870 R08: ffff88806cf31340 R09: ffffe8ffffd16160
[ 108.877548] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000
[ 108.879123] R13: 0000000000000024 R14: ffff88806cf31340 R15: dffffc0000000000
[ 108.879938] FS: 000055557a732400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[ 108.880861] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 108.881542] CR2: 00005559e3f65f50 CR3: 000000001eb2d000 CR4: 0000000000350ef0
[ 108.882357] Call Trace:
[ 108.882662]
[ 108.882932] ? perf_trace_lock+0xb5/0x5d0
[ 108.883425] ? __pfx_perf_tp_event+0x10/0x10
[ 108.883942] ? lock_acquire+0x15e/0x2f0
[ 108.884408] ? __is_insn_slot_addr+0x2e/0x290
[ 108.884939] ? find_held_lock+0x2b/0x80
[ 108.885419] ? perf_trace_lock_acquire+0xc9/0x700
[ 108.885978] ? lock_release+0xc8/0x290
[ 108.886444] ? __lock_acquire+0x694/0x1b70
[ 108.886938] ? perf_trace_lock_acquire+0xc9/0x700
[ 108.887505] ? __lock_acquire+0xc65/0x1b70
[ 108.888007] ? perf_trace_run_bpf_submit+0xef/0x180
[ 108.888587] ? lock_acquire+0x15e/0x2f0
[ 108.889048] perf_trace_run_bpf_submit+0xef/0x180
[ 108.889624] perf_trace_lock_acquire+0x3c2/0x700
[ 108.890177] ? __pfx_perf_trace_lock_acquire+0x10/0x10
[ 108.890782] ? futex_ref_get+0x48/0x300
[ 108.891244] ? find_held_lock+0x2b/0x80
[ 108.891716] lock_acquire+0xc5/0x2f0
[ 108.892148] ? futex_wait_setup+0xbe/0x550
[ 108.892646] _raw_spin_lock+0x2b/0x40
[ 108.893090] ? futex_wait_setup+0xbe/0x550
[ 108.893592] futex_wait_setup+0xbe/0x550
[ 108.894071] __futex_wait+0x151/0x300
[ 108.894520] ? __pfx___futex_wait+0x10/0x10
[ 108.895019] ? perf_trace_lock+0xb5/0x5d0
[ 108.895501] ? __pfx_futex_wake_mark+0x10/0x10
[ 108.896034] ? __hrtimer_setup+0x1a4/0x2c0
[ 108.896535] ? ktime_add_safe+0x5f/0x70
[ 108.897000] futex_wait+0xde/0x380
[ 108.897430] ? __pfx_futex_wait+0x10/0x10
[ 108.897916] ? __pfx_hrtimer_wakeup+0x10/0x10
[ 108.898438] ? lock_release+0xc8/0x290
[ 108.898887] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 108.899569] do_futex+0x2ee/0x370
[ 108.899978] ? __pfx_do_futex+0x10/0x10
[ 108.900439] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 108.901034] ? read_tsc+0x9/0x20
[ 108.901447] __x64_sys_futex+0x1c9/0x4d0
[ 108.901922] ? __pfx___x64_sys_futex+0x10/0x10
[ 108.902451] ? xfd_validate_state+0x55/0x180
[ 108.902976] do_syscall_64+0xbf/0x360
[ 108.903416] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.904002] RIP: 0033:0x7fa2857fdb19
[ 108.904426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 108.906458] RSP: 002b:00007ffca1871108 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 108.907311] RAX: ffffffffffffffda RBX: 0000000000000032 RCX: 00007fa2857fdb19
[ 108.908113] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa285910f6c
[ 108.908912] RBP: 00007fa285910f6c R08: 00007fa2858ed000 R09: 0000000000000000
[ 108.909721] R10: 00007ffca18711e0 R11: 0000000000000246 R12: 000000000001a8a3
[ 108.910527] R13: 00000000000003e8 R14: 00007fa285910f60 R15: 000000000001a896
[ 108.911341]
[ 108.911609] Modules linked in:
[ 108.912015] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI
[ 108.913256] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[ 108.914239] CPU: 1 UID: 0 PID: 3945 Comm: syz-executor.3 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
[ 108.915580] Tainted: [D]=DIE, [W]=WARN
[ 108.916017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 108.916933] RIP: 0010:perf_tp_event+0x175/0xe70
[ 108.917474] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 108.919488] RSP: 0018:ffff88806cf08a40 EFLAGS: 00010012
[ 108.920081] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[ 108.920873] RDX: ffff888016621b80 RSI: ffffffff818995b7 RDI: 0000000100000190
[ 108.921679] RBP: ffff88806cf08cb0 R08: ffff88806cf31490 R09: ffffe8ffffd16160
[ 108.922491] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000
[ 108.923288] R13: 0000000000000024 R14: ffff88806cf31490 R15: dffffc0000000000
[ 108.924084] FS: 000055557a732400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[ 108.924979] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 108.925641] CR2: 00005559e3f65f50 CR3: 000000001eb2d000 CR4: 0000000000350ef0
[ 108.926428] Call Trace:
[ 108.926720]
[ 108.926970] ? __kernel_text_address+0xd/0x40
[ 108.927488] ? __pfx_perf_tp_event+0x10/0x10
[ 108.927994] ? __lock_acquire+0x694/0x1b70
[ 108.928477] ? lock_is_held_type+0x9e/0x120
[ 108.928972] ? lock_is_held_type+0x9e/0x120
[ 108.929480] ? __pick_eevdf+0x326/0x570
[ 108.929926] ? update_curr+0x39e/0x500
[ 108.930381] ? perf_trace_run_bpf_submit+0xef/0x180
[ 108.930942] perf_trace_run_bpf_submit+0xef/0x180
[ 108.931503] perf_trace_lock_acquire+0x3c2/0x700
[ 108.932046] ? __pfx_perf_trace_lock_acquire+0x10/0x10
[ 108.932650] lock_acquire+0xc5/0x2f0
[ 108.933075] ? sched_ttwu_pending+0xa1/0x4a0
[ 108.933598] ? lock_release+0xc8/0x290
[ 108.934044] _raw_spin_lock_nested+0x29/0x40
[ 108.934547] ? sched_ttwu_pending+0xa1/0x4a0
[ 108.935050] sched_ttwu_pending+0xa1/0x4a0
[ 108.935530] ? __pfx_lapic_next_deadline+0x10/0x10
[ 108.936076] ? clockevents_program_event+0x135/0x360
[ 108.936647] ? __pfx_sched_ttwu_pending+0x10/0x10
[ 108.937187] ? hrtimer_interrupt+0x652/0x830
[ 108.937695] __flush_smp_call_function_queue+0x434/0x740
[ 108.938309] __sysvec_call_function_single+0x6d/0x370
[ 108.938891] sysvec_call_function_single+0xa1/0xc0
[ 108.939449]
[ 108.939703]
[ 108.939961] asm_sysvec_call_function_single+0x1a/0x20
[ 108.940546] RIP: 0010:oops_exit+0x0/0x50
[ 108.941004] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27
[ 108.943016] RSP: 0018:ffff8880173c7490 EFLAGS: 00000202
[ 108.943602] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff8139f06f
[ 108.944390] RDX: ffff888016621b80 RSI: ffffffff812a3dca RDI: 0000000000000007
[ 108.945176] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90
[ 108.945965] R10: 0000000000000000 R11: 000000000000002c R12: ffff8880173c7558
[ 108.946750] R13: 0000000000000000 R14: dffffc0020000032 R15: 0000000000000000
[ 108.947545] ? add_taint+0x5f/0xd0
[ 108.947953] ? oops_end+0x4a/0xe0
[ 108.948358] oops_end+0x65/0xe0
[ 108.948735] exc_general_protection+0x1a2/0x330
[ 108.949258] asm_exc_general_protection+0x26/0x30
[ 108.949797] RIP: 0010:perf_tp_event+0x175/0xe70
[ 108.950322] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 108.952298] RSP: 0018:ffff8880173c7600 EFLAGS: 00010212
[ 108.952887] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[ 108.953671] RDX: ffff888016621b80 RSI: ffffffff818995b7 RDI: 0000000100000190
[ 108.954448] RBP: ffff8880173c7870 R08: ffff88806cf31340 R09: ffffe8ffffd16160
[ 108.955227] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000
[ 108.955999] R13: 0000000000000024 R14: ffff88806cf31340 R15: dffffc0000000000
[ 108.956789] ? perf_tp_event+0x167/0xe70
[ 108.957253] ? perf_trace_lock+0xb5/0x5d0
[ 108.957728] ? __pfx_perf_tp_event+0x10/0x10
[ 108.958231] ? lock_acquire+0x15e/0x2f0
[ 108.958666] ? __is_insn_slot_addr+0x2e/0x290
[ 108.959174] ? find_held_lock+0x2b/0x80
[ 108.959626] ? perf_trace_lock_acquire+0xc9/0x700
[ 108.960158] ? lock_release+0xc8/0x290
[ 108.960598] ? __lock_acquire+0x694/0x1b70
[ 108.961072] ? perf_trace_lock_acquire+0xc9/0x700
[ 108.961623] ? __lock_acquire+0xc65/0x1b70
[ 108.962103] ? perf_trace_run_bpf_submit+0xef/0x180
[ 108.962653] ? lock_acquire+0x15e/0x2f0
[ 108.963090] perf_trace_run_bpf_submit+0xef/0x180
[ 108.963631] perf_trace_lock_acquire+0x3c2/0x700
[ 108.964158] ? __pfx_perf_trace_lock_acquire+0x10/0x10
[ 108.964731] ? futex_ref_get+0x48/0x300
[ 108.965165] ? find_held_lock+0x2b/0x80
[ 108.965638] lock_acquire+0xc5/0x2f0
[ 108.966057] ? futex_wait_setup+0xbe/0x550
[ 108.966528] _raw_spin_lock+0x2b/0x40
[ 108.966946] ? futex_wait_setup+0xbe/0x550
[ 108.967408] futex_wait_setup+0xbe/0x550
[ 108.967863] __futex_wait+0x151/0x300
[ 108.968284] ? __pfx___futex_wait+0x10/0x10
[ 108.968757] ? perf_trace_lock+0xb5/0x5d0
[ 108.969215] ? __pfx_futex_wake_mark+0x10/0x10
[ 108.969739] ? __hrtimer_setup+0x1a4/0x2c0
[ 108.970208] ? ktime_add_safe+0x5f/0x70
[ 108.970650] futex_wait+0xde/0x380
[ 108.971047] ? __pfx_futex_wait+0x10/0x10
[ 108.971505] ? __pfx_hrtimer_wakeup+0x10/0x10
[ 108.972000] ? lock_release+0xc8/0x290
[ 108.972437] ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 108.973082] do_futex+0x2ee/0x370
[ 108.973479] ? __pfx_do_futex+0x10/0x10
[ 108.973918] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 108.974486] ? read_tsc+0x9/0x20
[ 108.974865] __x64_sys_futex+0x1c9/0x4d0
[ 108.975319] ? __pfx___x64_sys_futex+0x10/0x10
[ 108.975821] ? xfd_validate_state+0x55/0x180
[ 108.976320] do_syscall_64+0xbf/0x360
[ 108.976733] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.977295] RIP: 0033:0x7fa2857fdb19
[ 108.977696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 108.979616] RSP: 002b:00007ffca1871108 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 108.980425] RAX: ffffffffffffffda RBX: 0000000000000032 RCX: 00007fa2857fdb19
[ 108.981183] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa285910f6c
[ 108.981951] RBP: 00007fa285910f6c R08: 00007fa2858ed000 R09: 0000000000000000
[ 108.982723] R10: 00007ffca18711e0 R11: 0000000000000246 R12: 000000000001a8a3
[ 108.983481] R13: 00000000000003e8 R14: 00007fa285910f60 R15: 000000000001a896
[ 108.984249]
[ 108.984508] Modules linked in:
[ 108.984861] ---[ end trace 0000000000000000 ]---
[ 108.985366] RIP: 0010:perf_tp_event+0x175/0xe70
[ 108.985874] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[ 108.987799] RSP: 0018:ffff8880173c7600 EFLAGS: 00010212
[ 108.988366] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[ 108.989123] RDX: ffff888016621b80 RSI: ffffffff818995b7 RDI: 0000000100000190
[ 108.989888] RBP: ffff8880173c7870 R08: ffff88806cf31340 R09: ffffe8ffffd16160
[ 108.990649] R10: 0000000000000000 R11: 0000000000000024 R12: dffffc0000000000
[ 108.991402] R13: 0000000000000024 R14: ffff88806cf31340 R15: dffffc0000000000
[ 108.992156] FS: 000055557a732400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[ 108.993002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 108.993628] CR2: 00005559e3f65f50 CR3: 000000001eb2d000 CR4: 0000000000350ef0
[ 108.994377] Kernel panic - not syncing: Fatal exception in interrupt
[ 108.995249] Kernel Offset: disabled
[ 108.995637] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---
VM DIAGNOSIS:
08:07:25 Registers:
info registers vcpu 0
RAX=fffff940001f3fd6 RBX=fffff940001f3fd7 RCX=ffffffff819e56f3 RDX=0000000000000001
RSI=0000000000000004 RDI=ffffea0000f9feb0 RBP=fffff940001f3fd6 RSP=ffff8880163bf6a0
R8 =0000000000000001 R9 =fffff940001f3fd6 R10=ffffea0000f9feb3 R11=0000000000000000
R12=0000000000000000 R13=ffffea0000f9fe80 R14=ffffea0000f9fe80 R15=dffffc0000000000
RIP=ffffffff81afefd4 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555584fd5400 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe5e00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1e6fd1b3a4 CR3=000000004004e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff8880173c6f70
R8 =0000000000000000 R9 =ffffed10016dd046 R10=0000000000000030 R11=000000000000002c
R12=0000000000000030 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0
RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055557a732400 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00005559e3f65f50 CR3=000000001eb2d000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000ff0000000000000000000000 XMM01=00000000010000000000000000000000
XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007fa2858e47c800007fa2858e47c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000