Warning: Permanently added '[localhost]:19218' (ECDSA) to the list of known hosts.
2025/08/29 11:31:34 fuzzer started
2025/08/29 11:31:34 dialing manager at localhost:43077
syzkaller login: [   52.393896] cgroup: Unknown subsys name 'net'
[   52.485460] cgroup: Unknown subsys name 'cpuset'
[   52.543725] cgroup: Unknown subsys name 'rlimit'
2025/08/29 11:31:46 syscalls: 2214
2025/08/29 11:31:46 code coverage: enabled
2025/08/29 11:31:46 comparison tracing: enabled
2025/08/29 11:31:46 extra coverage: enabled
2025/08/29 11:31:46 setuid sandbox: enabled
2025/08/29 11:31:46 namespace sandbox: enabled
2025/08/29 11:31:46 Android sandbox: enabled
2025/08/29 11:31:46 fault injection: enabled
2025/08/29 11:31:46 leak checking: enabled
2025/08/29 11:31:46 net packet injection: enabled
2025/08/29 11:31:46 net device setup: enabled
2025/08/29 11:31:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/29 11:31:46 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/29 11:31:46 USB emulation: enabled
2025/08/29 11:31:46 hci packet injection: enabled
2025/08/29 11:31:46 wifi device emulation: enabled
2025/08/29 11:31:46 802.15.4 emulation: enabled
2025/08/29 11:31:46 fetching corpus: 0, signal 0/2000 (executing program)
2025/08/29 11:31:46 fetching corpus: 50, signal 20563/24151 (executing program)
2025/08/29 11:31:46 fetching corpus: 100, signal 30648/35679 (executing program)
2025/08/29 11:31:47 fetching corpus: 150, signal 39031/45411 (executing program)
2025/08/29 11:31:47 fetching corpus: 200, signal 49674/57058 (executing program)
2025/08/29 11:31:47 fetching corpus: 250, signal 55831/64297 (executing program)
2025/08/29 11:31:47 fetching corpus: 300, signal 63680/73011 (executing program)
2025/08/29 11:31:47 fetching corpus: 350, signal 68354/78652 (executing program)
2025/08/29 11:31:47 fetching corpus: 400, signal 72545/83715 (executing program)
2025/08/29 11:31:47 fetching corpus: 450, signal 75839/87861 (executing program)
2025/08/29 11:31:47 fetching corpus: 500, signal 78267/91228 (executing program)
2025/08/29 11:31:47 fetching corpus: 550, signal 80657/94519 (executing program)
2025/08/29 11:31:48 fetching corpus: 600, signal 83335/98037 (executing program)
2025/08/29 11:31:48 fetching corpus: 650, signal 85341/100862 (executing program)
2025/08/29 11:31:48 fetching corpus: 700, signal 87269/103617 (executing program)
2025/08/29 11:31:48 fetching corpus: 750, signal 88716/105900 (executing program)
2025/08/29 11:31:48 fetching corpus: 800, signal 91391/109215 (executing program)
2025/08/29 11:31:48 fetching corpus: 850, signal 92877/111466 (executing program)
2025/08/29 11:31:48 fetching corpus: 900, signal 95334/114412 (executing program)
2025/08/29 11:31:48 fetching corpus: 950, signal 97476/117123 (executing program)
2025/08/29 11:31:48 fetching corpus: 1000, signal 98675/119069 (executing program)
2025/08/29 11:31:48 fetching corpus: 1050, signal 99813/120926 (executing program)
2025/08/29 11:31:49 fetching corpus: 1100, signal 101052/122829 (executing program)
2025/08/29 11:31:50 fetching corpus: 1150, signal 102854/125133 (executing program)
2025/08/29 11:31:50 fetching corpus: 1200, signal 104846/127554 (executing program)
2025/08/29 11:31:50 fetching corpus: 1250, signal 106423/129584 (executing program)
2025/08/29 11:31:50 fetching corpus: 1300, signal 108855/132191 (executing program)
2025/08/29 11:31:50 fetching corpus: 1350, signal 109934/133826 (executing program)
2025/08/29 11:31:50 fetching corpus: 1400, signal 111736/135893 (executing program)
2025/08/29 11:31:50 fetching corpus: 1450, signal 112925/137529 (executing program)
2025/08/29 11:31:50 fetching corpus: 1500, signal 113887/138963 (executing program)
2025/08/29 11:31:50 fetching corpus: 1550, signal 114692/140284 (executing program)
2025/08/29 11:31:51 fetching corpus: 1600, signal 116140/142008 (executing program)
2025/08/29 11:31:51 fetching corpus: 1650, signal 117543/143692 (executing program)
2025/08/29 11:31:51 fetching corpus: 1700, signal 118718/145161 (executing program)
2025/08/29 11:31:51 fetching corpus: 1750, signal 120256/146811 (executing program)
2025/08/29 11:31:51 fetching corpus: 1800, signal 121057/148054 (executing program)
2025/08/29 11:31:51 fetching corpus: 1850, signal 122258/149489 (executing program)
2025/08/29 11:31:51 fetching corpus: 1900, signal 123500/151017 (executing program)
2025/08/29 11:31:51 fetching corpus: 1950, signal 124639/152415 (executing program)
2025/08/29 11:31:51 fetching corpus: 2000, signal 125187/153404 (executing program)
2025/08/29 11:31:51 fetching corpus: 2050, signal 126347/154786 (executing program)
2025/08/29 11:31:51 fetching corpus: 2100, signal 127157/155910 (executing program)
2025/08/29 11:31:52 fetching corpus: 2150, signal 128083/157082 (executing program)
2025/08/29 11:31:52 fetching corpus: 2200, signal 128988/158202 (executing program)
2025/08/29 11:31:52 fetching corpus: 2250, signal 130197/159456 (executing program)
2025/08/29 11:31:52 fetching corpus: 2300, signal 131089/160585 (executing program)
2025/08/29 11:31:52 fetching corpus: 2350, signal 131835/161597 (executing program)
2025/08/29 11:31:52 fetching corpus: 2400, signal 132370/162474 (executing program)
2025/08/29 11:31:52 fetching corpus: 2450, signal 133470/163602 (executing program)
2025/08/29 11:31:52 fetching corpus: 2500, signal 134050/164537 (executing program)
2025/08/29 11:31:52 fetching corpus: 2550, signal 134841/165493 (executing program)
2025/08/29 11:31:52 fetching corpus: 2600, signal 135987/166530 (executing program)
2025/08/29 11:31:52 fetching corpus: 2650, signal 136723/167424 (executing program)
2025/08/29 11:31:53 fetching corpus: 2700, signal 137580/168326 (executing program)
2025/08/29 11:31:53 fetching corpus: 2750, signal 138604/169320 (executing program)
2025/08/29 11:31:53 fetching corpus: 2800, signal 139394/170202 (executing program)
2025/08/29 11:31:53 fetching corpus: 2850, signal 139844/170920 (executing program)
2025/08/29 11:31:53 fetching corpus: 2900, signal 140867/171821 (executing program)
2025/08/29 11:31:53 fetching corpus: 2950, signal 141627/172613 (executing program)
2025/08/29 11:31:53 fetching corpus: 3000, signal 142540/173461 (executing program)
2025/08/29 11:31:53 fetching corpus: 3050, signal 143058/174137 (executing program)
2025/08/29 11:31:53 fetching corpus: 3100, signal 143810/174861 (executing program)
2025/08/29 11:31:53 fetching corpus: 3150, signal 144534/175604 (executing program)
2025/08/29 11:31:53 fetching corpus: 3200, signal 145021/176215 (executing program)
2025/08/29 11:31:54 fetching corpus: 3250, signal 145545/176834 (executing program)
2025/08/29 11:31:54 fetching corpus: 3300, signal 146231/177506 (executing program)
2025/08/29 11:31:54 fetching corpus: 3350, signal 146902/178134 (executing program)
2025/08/29 11:31:54 fetching corpus: 3400, signal 147463/178726 (executing program)
2025/08/29 11:31:54 fetching corpus: 3450, signal 147830/179270 (executing program)
2025/08/29 11:31:54 fetching corpus: 3500, signal 149011/179955 (executing program)
2025/08/29 11:31:54 fetching corpus: 3550, signal 149463/180512 (executing program)
2025/08/29 11:31:54 fetching corpus: 3600, signal 149993/181041 (executing program)
2025/08/29 11:31:54 fetching corpus: 3650, signal 150655/181656 (executing program)
2025/08/29 11:31:54 fetching corpus: 3700, signal 151239/182228 (executing program)
2025/08/29 11:31:54 fetching corpus: 3750, signal 151668/182710 (executing program)
2025/08/29 11:31:55 fetching corpus: 3800, signal 152264/183243 (executing program)
2025/08/29 11:31:55 fetching corpus: 3850, signal 152810/183724 (executing program)
2025/08/29 11:31:55 fetching corpus: 3900, signal 153220/184177 (executing program)
2025/08/29 11:31:55 fetching corpus: 3950, signal 153703/184642 (executing program)
2025/08/29 11:31:55 fetching corpus: 4000, signal 154312/185109 (executing program)
2025/08/29 11:31:55 fetching corpus: 4050, signal 154628/185522 (executing program)
2025/08/29 11:31:55 fetching corpus: 4100, signal 155061/185961 (executing program)
2025/08/29 11:31:55 fetching corpus: 4150, signal 155619/186410 (executing program)
2025/08/29 11:31:55 fetching corpus: 4200, signal 156063/186823 (executing program)
2025/08/29 11:31:55 fetching corpus: 4250, signal 156531/187221 (executing program)
2025/08/29 11:31:55 fetching corpus: 4300, signal 157197/187787 (executing program)
2025/08/29 11:31:56 fetching corpus: 4350, signal 157627/188184 (executing program)
2025/08/29 11:31:56 fetching corpus: 4400, signal 158065/188557 (executing program)
2025/08/29 11:31:56 fetching corpus: 4450, signal 158483/188981 (executing program)
2025/08/29 11:31:56 fetching corpus: 4500, signal 158829/189318 (executing program)
2025/08/29 11:31:56 fetching corpus: 4550, signal 159296/189660 (executing program)
2025/08/29 11:31:56 fetching corpus: 4600, signal 159642/189821 (executing program)
2025/08/29 11:31:56 fetching corpus: 4650, signal 160257/189824 (executing program)
2025/08/29 11:31:56 fetching corpus: 4700, signal 160683/189838 (executing program)
2025/08/29 11:31:56 fetching corpus: 4750, signal 161115/189847 (executing program)
2025/08/29 11:31:56 fetching corpus: 4800, signal 161759/189891 (executing program)
2025/08/29 11:31:57 fetching corpus: 4850, signal 162100/189897 (executing program)
2025/08/29 11:31:57 fetching corpus: 4900, signal 162521/189899 (executing program)
2025/08/29 11:31:57 fetching corpus: 4950, signal 162751/189919 (executing program)
2025/08/29 11:31:57 fetching corpus: 5000, signal 163256/189921 (executing program)
2025/08/29 11:31:57 fetching corpus: 5050, signal 163657/189946 (executing program)
2025/08/29 11:31:57 fetching corpus: 5100, signal 163997/189966 (executing program)
2025/08/29 11:31:57 fetching corpus: 5150, signal 164448/190010 (executing program)
2025/08/29 11:31:57 fetching corpus: 5200, signal 164850/190033 (executing program)
2025/08/29 11:31:57 fetching corpus: 5250, signal 165189/190045 (executing program)
2025/08/29 11:31:57 fetching corpus: 5300, signal 165529/190055 (executing program)
2025/08/29 11:31:57 fetching corpus: 5350, signal 165952/190055 (executing program)
2025/08/29 11:31:57 fetching corpus: 5400, signal 166374/190084 (executing program)
2025/08/29 11:31:58 fetching corpus: 5450, signal 166746/190122 (executing program)
2025/08/29 11:31:58 fetching corpus: 5500, signal 167118/190123 (executing program)
2025/08/29 11:31:58 fetching corpus: 5550, signal 167424/190125 (executing program)
2025/08/29 11:31:58 fetching corpus: 5600, signal 167791/190138 (executing program)
2025/08/29 11:31:58 fetching corpus: 5650, signal 168401/190224 (executing program)
2025/08/29 11:31:58 fetching corpus: 5700, signal 168818/190225 (executing program)
2025/08/29 11:31:58 fetching corpus: 5750, signal 169520/190269 (executing program)
2025/08/29 11:31:58 fetching corpus: 5800, signal 169900/190290 (executing program)
2025/08/29 11:31:58 fetching corpus: 5850, signal 170344/190297 (executing program)
2025/08/29 11:31:58 fetching corpus: 5900, signal 170703/190301 (executing program)
2025/08/29 11:31:58 fetching corpus: 5950, signal 171259/190326 (executing program)
2025/08/29 11:31:59 fetching corpus: 6000, signal 171608/190327 (executing program)
2025/08/29 11:31:59 fetching corpus: 6050, signal 171933/190352 (executing program)
2025/08/29 11:31:59 fetching corpus: 6100, signal 172322/190382 (executing program)
2025/08/29 11:31:59 fetching corpus: 6150, signal 172690/190386 (executing program)
2025/08/29 11:31:59 fetching corpus: 6200, signal 173055/190386 (executing program)
2025/08/29 11:31:59 fetching corpus: 6250, signal 173371/190475 (executing program)
2025/08/29 11:31:59 fetching corpus: 6300, signal 173685/190482 (executing program)
2025/08/29 11:31:59 fetching corpus: 6350, signal 173976/190495 (executing program)
2025/08/29 11:31:59 fetching corpus: 6400, signal 174416/190506 (executing program)
2025/08/29 11:31:59 fetching corpus: 6450, signal 174781/190518 (executing program)
2025/08/29 11:32:00 fetching corpus: 6500, signal 175156/190529 (executing program)
2025/08/29 11:32:00 fetching corpus: 6550, signal 175509/190532 (executing program)
2025/08/29 11:32:00 fetching corpus: 6600, signal 175966/190551 (executing program)
2025/08/29 11:32:00 fetching corpus: 6650, signal 176335/190554 (executing program)
2025/08/29 11:32:00 fetching corpus: 6700, signal 176717/190662 (executing program)
2025/08/29 11:32:00 fetching corpus: 6750, signal 177125/190672 (executing program)
2025/08/29 11:32:00 fetching corpus: 6800, signal 177390/190684 (executing program)
2025/08/29 11:32:00 fetching corpus: 6850, signal 177618/190695 (executing program)
2025/08/29 11:32:00 fetching corpus: 6900, signal 177974/190699 (executing program)
2025/08/29 11:32:00 fetching corpus: 6950, signal 178222/190723 (executing program)
2025/08/29 11:32:00 fetching corpus: 7000, signal 178712/190764 (executing program)
2025/08/29 11:32:01 fetching corpus: 7050, signal 179044/190764 (executing program)
2025/08/29 11:32:01 fetching corpus: 7100, signal 179335/190769 (executing program)
2025/08/29 11:32:01 fetching corpus: 7150, signal 179693/190770 (executing program)
2025/08/29 11:32:01 fetching corpus: 7200, signal 179955/190777 (executing program)
2025/08/29 11:32:01 fetching corpus: 7250, signal 180347/190781 (executing program)
2025/08/29 11:32:01 fetching corpus: 7300, signal 180573/190783 (executing program)
2025/08/29 11:32:01 fetching corpus: 7350, signal 180811/190798 (executing program)
2025/08/29 11:32:01 fetching corpus: 7400, signal 181094/190802 (executing program)
2025/08/29 11:32:01 fetching corpus: 7450, signal 181563/190910 (executing program)
2025/08/29 11:32:01 fetching corpus: 7500, signal 181862/190929 (executing program)
2025/08/29 11:32:02 fetching corpus: 7550, signal 182393/190937 (executing program)
2025/08/29 11:32:02 fetching corpus: 7600, signal 182598/190938 (executing program)
2025/08/29 11:32:02 fetching corpus: 7650, signal 182918/190940 (executing program)
2025/08/29 11:32:02 fetching corpus: 7700, signal 183183/190948 (executing program)
2025/08/29 11:32:02 fetching corpus: 7750, signal 183572/190961 (executing program)
2025/08/29 11:32:02 fetching corpus: 7800, signal 183804/190967 (executing program)
2025/08/29 11:32:02 fetching corpus: 7850, signal 184042/190972 (executing program)
2025/08/29 11:32:02 fetching corpus: 7900, signal 184349/190992 (executing program)
2025/08/29 11:32:02 fetching corpus: 7950, signal 184656/190992 (executing program)
2025/08/29 11:32:02 fetching corpus: 8000, signal 184843/190998 (executing program)
2025/08/29 11:32:02 fetching corpus: 8050, signal 185160/191027 (executing program)
2025/08/29 11:32:03 fetching corpus: 8100, signal 185442/191029 (executing program)
2025/08/29 11:32:03 fetching corpus: 8150, signal 185745/191058 (executing program)
2025/08/29 11:32:03 fetching corpus: 8200, signal 186088/191059 (executing program)
2025/08/29 11:32:03 fetching corpus: 8250, signal 186312/191063 (executing program)
2025/08/29 11:32:03 fetching corpus: 8300, signal 186612/191063 (executing program)
2025/08/29 11:32:03 fetching corpus: 8350, signal 186874/191066 (executing program)
2025/08/29 11:32:03 fetching corpus: 8400, signal 187164/191106 (executing program)
2025/08/29 11:32:03 fetching corpus: 8450, signal 187475/191106 (executing program)
2025/08/29 11:32:03 fetching corpus: 8500, signal 187739/191108 (executing program)
2025/08/29 11:32:03 fetching corpus: 8522, signal 187847/191134 (executing program)
2025/08/29 11:32:03 fetching corpus: 8522, signal 187847/191134 (executing program)
2025/08/29 11:32:06 starting 8 fuzzer processes
11:32:06 executing program 0:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x8a802, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x5392, &(0x7f0000000180)={"81eedb02c09860ae3ba8e5b5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11:32:06 executing program 1:
r0 = timerfd_create(0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
timerfd_settime(r0, 0x3, &(0x7f0000000080)={{}, {r1, r2+60000000}}, 0x0)
read(r0, &(0x7f00000000c0)=""/187, 0xbb)

11:32:06 executing program 2:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000004f0200000000024f252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000002880)='\"', 0x1, 0xf000}], 0x0, &(0x7f0000000040)={[{@check_relaxed}]})

11:32:06 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='io\x00')
pread64(r0, &(0x7f0000000100)=""/67, 0x43, 0x0)

11:32:06 executing program 4:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000005780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0)

[   83.686846] audit: type=1400 audit(1756467126.432:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
11:32:06 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0)
pread64(r0, &(0x7f00000000c0)=""/224, 0xe0, 0xe00000000000)

11:32:06 executing program 5:
r0 = io_uring_setup(0x44a, &(0x7f0000000040))
io_uring_enter(r0, 0x0, 0xffffffcb, 0x3, 0x0, 0x0)

11:32:06 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x12, 0x0, &(0x7f00000018c0))

[   84.802327] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   84.804803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   84.806702] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   84.810439] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   84.813010] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   84.919627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   84.922001] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   84.927367] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   84.932547] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   84.935619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.066383] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.080045] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.085512] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   85.099393] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.109427] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   85.129333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.134304] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.147612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   85.151638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   85.152887] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.157923] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.160765] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   85.162701] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   85.191391] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   85.194526] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   85.211147] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   85.215985] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   85.218324] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   85.224194] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   85.227574] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   85.243726] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   85.251220] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   85.252884] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   85.254499] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   85.264309] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   85.275886] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   85.278808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   85.300478] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   85.341432] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   85.349038] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   86.892588] Bluetooth: hci0: command tx timeout
[   86.956132] Bluetooth: hci1: command tx timeout
[   87.148156] Bluetooth: hci2: command tx timeout
[   87.275395] Bluetooth: hci4: command tx timeout
[   87.276782] Bluetooth: hci3: command tx timeout
[   87.340202] Bluetooth: hci5: command tx timeout
[   87.406129] Bluetooth: hci7: command tx timeout
[   87.406848] Bluetooth: hci6: command tx timeout
[   88.939194] Bluetooth: hci0: command tx timeout
[   89.003691] Bluetooth: hci1: command tx timeout
[   89.196233] Bluetooth: hci2: command tx timeout
[   89.323152] Bluetooth: hci4: command tx timeout
[   89.323631] Bluetooth: hci3: command tx timeout
[   89.387244] Bluetooth: hci5: command tx timeout
[   89.452241] Bluetooth: hci6: command tx timeout
[   89.452720] Bluetooth: hci7: command tx timeout
[   90.988122] Bluetooth: hci0: command tx timeout
[   91.051226] Bluetooth: hci1: command tx timeout
[   91.244198] Bluetooth: hci2: command tx timeout
[   91.372166] Bluetooth: hci4: command tx timeout
[   91.372644] Bluetooth: hci3: command tx timeout
[   91.436894] Bluetooth: hci5: command tx timeout
[   91.500131] Bluetooth: hci6: command tx timeout
[   91.500604] Bluetooth: hci7: command tx timeout
[   93.035138] Bluetooth: hci0: command tx timeout
[   93.100188] Bluetooth: hci1: command tx timeout
[   93.291143] Bluetooth: hci2: command tx timeout
[   93.419143] Bluetooth: hci4: command tx timeout
[   93.419619] Bluetooth: hci3: command tx timeout
[   93.484129] Bluetooth: hci5: command tx timeout
[   93.547173] Bluetooth: hci7: command tx timeout
[   93.547658] Bluetooth: hci6: command tx timeout
[  121.495944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.496709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.691387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.692011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.181976] audit: type=1400 audit(1756467164.925:8): avc:  denied  { open } for  pid=3670 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  122.193177] audit: type=1400 audit(1756467164.925:9): avc:  denied  { kernel } for  pid=3670 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
11:32:45 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_create(0x0, 0x800)

11:32:45 executing program 7:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x5396, 0x0)

11:32:45 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000100), 0x4)

11:32:45 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000100), 0x4)

11:32:45 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000100), 0x4)

11:32:45 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000100), 0x4)

11:32:46 executing program 7:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0x5)
setuid(r2)
ioctl$CDROM_SEND_PACKET(r0, 0x401870cc, 0x0)

11:32:46 executing program 7:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0x5)
setuid(r2)
ioctl$CDROM_SEND_PACKET(r0, 0x401870cc, 0x0)

[  123.785606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.786531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.898195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.898817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.119423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.120269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.249003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.249792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.306022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.306922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.412907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.413610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.460355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.460983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.586746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.587399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.646684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.647335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.664619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.665232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.760561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.761181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.814697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.815618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.959301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.959911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.983027] loop2: detected capacity change from 0 to 240
[  125.007817] isofs_fill_super: root inode is not a directory. Corrupted media?
[  125.032379] loop2: detected capacity change from 0 to 240
[  125.039127] isofs_fill_super: root inode is not a directory. Corrupted media?
[  125.045672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.046421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
11:32:47 executing program 0:
clock_gettime(0x2750cefe4ae89e1d, 0x0)

11:32:47 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x37, {0x0, @udp_ip4_spec={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, @ether_spec={@multicast, @multicast}}}})

11:32:47 executing program 1:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0xc02, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f00000000c0)={0x0, 0x1})

11:32:47 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='io\x00')
pread64(r0, &(0x7f0000000100)=""/67, 0x43, 0x0)

11:32:47 executing program 6:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x2, {0x0, @loopback, @multicast2}}}], 0x20}, 0x0)

11:32:47 executing program 4:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000005780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0)

11:32:47 executing program 2:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000004f0200000000024f252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000002880)='\"', 0x1, 0xf000}], 0x0, &(0x7f0000000040)={[{@check_relaxed}]})

11:32:47 executing program 7:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0x5)
setuid(r2)
ioctl$CDROM_SEND_PACKET(r0, 0x401870cc, 0x0)

[  125.191633] loop2: detected capacity change from 0 to 240
[  125.208843] isofs_fill_super: root inode is not a directory. Corrupted media?
11:32:47 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSKBSENT(r0, 0x4b4c, &(0x7f0000000400)={0x0, "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"})

11:32:48 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6, @link_local}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', <r5=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x3, 0x6, @link_local}, 0x10)

11:32:48 executing program 7:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0x5)
setuid(r2)
ioctl$CDROM_SEND_PACKET(r0, 0x401870cc, 0x0)

11:32:48 executing program 4:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000005780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0)

11:32:48 executing program 1:
syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, {0x11, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "6e5dddff"}}}}}, 0x0)

11:32:48 executing program 2:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000004f0200000000024f252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000002880)='\"', 0x1, 0xf000}], 0x0, &(0x7f0000000040)={[{@check_relaxed}]})

11:32:48 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='io\x00')
pread64(r0, &(0x7f0000000100)=""/67, 0x43, 0x0)

11:32:48 executing program 6:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @private}}}}], 0x28}, 0x0)

11:32:48 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSKBSENT(r0, 0x4b4c, &(0x7f0000000400)={0x0, "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"})

[  125.378452] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI
[  125.379356] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  125.379970] CPU: 1 UID: 0 PID: 3941 Comm: syz-executor.3 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  125.381437] Tainted: [W]=WARN
[  125.382161] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  125.383745] RIP: 0010:perf_tp_event+0x175/0xe70
[  125.384712] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  125.388820] RSP: 0018:ffff88804754f800 EFLAGS: 00010212
[  125.389239] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90002a9f000
[  125.389792] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191
[  125.390348] RBP: ffff88804754fa70 R08: ffff88806cf31340 R09: ffffe8ffffd16150
[  125.390899] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  125.391453] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[  125.392006] FS:  00007f6518cdb700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  125.392630] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  125.393086] CR2: 00007f651b879018 CR3: 000000000dcd5000 CR4: 0000000000350ef0
[  125.393639] Call Trace:
[  125.393844]  <TASK>
[  125.394031]  ? __pfx_perf_tp_event+0x10/0x10
[  125.394393]  ? lock_is_held_type+0x9e/0x120
[  125.394744]  ? lock_is_held_type+0x9e/0x120
[  125.395088]  ? perf_trace_lock+0xb5/0x5d0
[  125.395420]  ? perf_trace_lock+0xb5/0x5d0
[  125.395747]  ? __pfx_perf_trace_lock+0x10/0x10
[  125.396109]  ? __pfx_perf_trace_lock+0x10/0x10
[  125.396477]  ? find_held_lock+0x2b/0x80
[  125.396801]  ? find_held_lock+0x2b/0x80
[  125.397121]  ? __perf_install_in_context+0x503/0xb90
[  125.397521]  ? lock_release+0xc8/0x290
[  125.397835]  ? do_raw_spin_unlock+0x53/0x220
[  125.398198]  ? perf_trace_run_bpf_submit+0xef/0x180
[  125.398594]  perf_trace_run_bpf_submit+0xef/0x180
[  125.398983]  perf_trace_lock+0x337/0x5d0
[  125.399308]  ? __pfx_perf_trace_lock+0x10/0x10
[  125.399674]  ? lock_acquire+0x15e/0x2f0
[  125.399993]  ? futex_ref_get+0x48/0x300
[  125.400309]  ? futex_ref_get+0x114/0x300
[  125.400629]  ? futex_hash+0x15c/0x390
[  125.400934]  lock_release+0x1ab/0x290
[  125.401240]  ? futex_hash+0x15c/0x390
[  125.401547]  futex_ref_get+0x119/0x300
[  125.401854]  ? futex_hash+0x15c/0x390
[  125.402162]  futex_hash+0x70/0x390
[  125.402448]  futex_wake+0x143/0x540
[  125.402741]  ? __pfx_perf_trace_lock+0x10/0x10
[  125.403106]  ? __pfx_futex_wake+0x10/0x10
[  125.403440]  ? __do_sys_perf_event_open+0x44d/0x2c20
[  125.403841]  ? lock_release+0xc8/0x290
[  125.404156]  do_futex+0x26d/0x370
[  125.404439]  ? __pfx_do_futex+0x10/0x10
[  125.404760]  ? __pfx___do_sys_perf_event_open+0x10/0x10
[  125.405177]  ? find_held_lock+0x2b/0x80
[  125.405499]  __x64_sys_futex+0x1c9/0x4d0
[  125.405824]  ? __pfx___x64_sys_futex+0x10/0x10
[  125.406199]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  125.406613]  do_syscall_64+0xbf/0x360
[  125.406917]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.407321] RIP: 0033:0x7f651b765b19
[  125.407614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  125.409019] RSP: 002b:00007f6518cdb218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  125.409609] RAX: ffffffffffffffda RBX: 00007f651b878f68 RCX: 00007f651b765b19
[  125.410170] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f651b878f6c
[  125.410723] RBP: 00007f651b878f60 R08: 000000000000000e R09: 0000000000000000
[  125.411276] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f651b878f6c
[  125.411827] R13: 00007ffdbd6ad09f R14: 00007f6518cdb300 R15: 0000000000022000
[  125.412390]  </TASK>
[  125.412577] Modules linked in:
[  125.412840] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI
[  125.413766] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[  125.414458] CPU: 0 UID: 0 PID: 3944 Comm: syz-executor.2 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  125.415398] Tainted: [D]=DIE, [W]=WARN
[  125.415701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  125.416346] RIP: 0010:perf_tp_event+0x175/0xe70
[  125.416730] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  125.418160] RSP: 0018:ffff888047567600 EFLAGS: 00010212
[  125.418588] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc900074c4000
[  125.419151] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190
[  125.419712] RBP: ffff888047567870 R08: ffff88806ce31340 R09: ffffe8ffffc16150
[  125.420271] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[  125.420832] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[  125.421395] FS:  00007fd716080700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  125.422032] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  125.422498] CR2: 000055556792cc18 CR3: 000000001d3ff000 CR4: 0000000000350ef0
[  125.423064] Call Trace:
[  125.423274]  <TASK>
[  125.423466]  ? __pfx_perf_tp_event+0x10/0x10
[  125.423844]  ? perf_trace_run_bpf_submit+0xef/0x180
[  125.424246]  perf_trace_run_bpf_submit+0xef/0x180
[  125.424640]  perf_trace_lock+0x337/0x5d0
[  125.424976]  ? __pfx_perf_trace_lock+0x10/0x10
[  125.425349]  ? get_futex_key+0x592/0x14a0
[  125.425685]  ? futex_ref_get+0x114/0x300
[  125.426008]  ? futex_hash+0x15c/0x390
[  125.426322]  lock_release+0x1ab/0x290
[  125.426634]  ? futex_hash+0x15c/0x390
[  125.426939]  futex_ref_get+0x119/0x300
[  125.427251]  ? futex_hash+0x15c/0x390
[  125.427555]  futex_hash+0x70/0x390
[  125.427845]  futex_wait_setup+0xae/0x550
[  125.428179]  __futex_wait+0x151/0x300
[  125.428489]  ? __pfx___futex_wait+0x10/0x10
[  125.428837]  ? __pfx_futex_wake_mark+0x10/0x10
[  125.429217]  futex_wait+0xde/0x380
[  125.429511]  ? __pfx_futex_wait+0x10/0x10
[  125.429846]  ? perf_trace_lock+0xb5/0x5d0
[  125.430195]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  125.430615]  ? do_vfs_ioctl+0x125/0x1470
[  125.430950]  do_futex+0x2ee/0x370
[  125.431233]  ? __pfx_do_futex+0x10/0x10
[  125.431554]  ? build_sched_domains+0x2744/0x53d0
[  125.431934]  ? do_raw_spin_lock+0x123/0x260
[  125.432286]  __x64_sys_futex+0x1c9/0x4d0
[  125.432615]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  125.433029]  ? __pfx___x64_sys_futex+0x10/0x10
[  125.433398]  ? kcov_ioctl+0x386/0x6c0
[  125.433709]  ? fput+0x6a/0x100
[  125.433981]  do_syscall_64+0xbf/0x360
[  125.434296]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.434706] RIP: 0033:0x7fd718b0ab19
[  125.435004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  125.436426] RSP: 002b:00007fd716080218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  125.437023] RAX: ffffffffffffffda RBX: 00007fd718c1df68 RCX: 00007fd718b0ab19
[  125.437580] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd718c1df68
[  125.438139] RBP: 00007fd718c1df60 R08: 00007fd716080700 R09: 0000000000000000
[  125.438705] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd718c1df6c
[  125.439264] R13: 00007fffc8c438cf R14: 00007fd716080300 R15: 0000000000022000
[  125.439835]  </TASK>
[  125.440025] Modules linked in:
[  125.440293] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#3] SMP KASAN NOPTI
[  125.441154] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  125.441739] CPU: 1 UID: 0 PID: 3941 Comm: syz-executor.3 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  125.442661] Tainted: [D]=DIE, [W]=WARN
[  125.442958] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  125.443589] RIP: 0010:perf_tp_event+0x175/0xe70
[  125.443958] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  125.445346] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012
[  125.445759] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  125.446316] RDX: ffff888045c1d280 RSI: ffffffff818995b7 RDI: 0000000000000191
[  125.446867] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd16150
[  125.447415] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000
[  125.447963] R13: 000000000000002c R14: ffff88806cf31490 R15: dffffc0000000000
[  125.448515] FS:  00007f6518cdb700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  125.449139] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  125.449588] CR2: 00007f651b879018 CR3: 000000000dcd5000 CR4: 0000000000350ef0
[  125.450140] Call Trace:
[  125.450352]  <IRQ>
[  125.450534]  ? __pfx_perf_tp_event+0x10/0x10
[  125.450888]  ? stack_depot_save_flags+0x2c/0xa20
[  125.451265]  ? kasan_save_stack+0x34/0x50
[  125.451593]  ? kasan_save_stack+0x24/0x50
[  125.451918]  ? kasan_save_track+0x14/0x30
[  125.452243]  ? __kasan_save_free_info+0x3a/0x60
[  125.452608]  ? __kasan_slab_free+0x3f/0x50
[  125.452942]  ? kmem_cache_free+0x2a1/0x540
[  125.453271]  ? rcu_core+0x7c8/0x1800
[  125.453570]  ? handle_softirqs+0x1b1/0x770
[  125.453909]  ? __irq_exit_rcu+0xc4/0x100
[  125.454240]  ? irq_exit_rcu+0x9/0x20
[  125.454531]  ? sysvec_apic_timer_interrupt+0x70/0x80
[  125.454930]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  125.455348]  ? memset_orig+0x42/0xb0
[  125.455648]  ? pcpu_alloc_noprof+0xa0e/0x1170
[  125.456008]  ? perf_trace_event_init+0x72d/0xa10
[  125.456382]  ? perf_trace_init+0x1a4/0x2f0
[  125.456716]  ? perf_tp_event_init+0xa6/0x120
[  125.457066]  ? perf_try_init_event+0x140/0x9f0
[  125.457428]  ? perf_event_alloc.part.0+0x118e/0x45f0
[  125.457826]  ? __do_sys_perf_event_open+0x719/0x2c20
[  125.458229]  ? do_syscall_64+0xbf/0x360
[  125.458539]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.458955]  ? lock_acquire+0x15e/0x2f0
[  125.459272]  ? perf_trace_run_bpf_submit+0xef/0x180
[  125.459664]  perf_trace_run_bpf_submit+0xef/0x180
[  125.460049]  perf_trace_lock+0x337/0x5d0
[  125.460369]  ? mark_held_locks+0x49/0x80
[  125.460692]  ? __pfx_perf_trace_lock+0x10/0x10
[  125.461057]  ? mark_held_locks+0x49/0x80
[  125.461376]  ? hrtimer_interrupt+0x114/0x830
[  125.461722]  lock_release+0x1ab/0x290
[  125.462026]  ktime_get_update_offsets_now+0xab/0x3c0
[  125.462433]  ? hrtimer_interrupt+0x114/0x830
[  125.462778]  ? __pfx_rcu_core+0x10/0x10
[  125.463097]  hrtimer_interrupt+0x114/0x830
[  125.463428]  ? __local_bh_enable+0x7b/0x90
[  125.463765]  ? handle_softirqs+0x50c/0x770
[  125.464104]  __sysvec_apic_timer_interrupt+0xbb/0x330
[  125.464510]  sysvec_apic_timer_interrupt+0x6b/0x80
[  125.464895]  </IRQ>
[  125.465076]  <TASK>
[  125.465256]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  125.465663] RIP: 0010:oops_exit+0x0/0x50
[  125.465986] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27
[  125.467381] RSP: 0018:ffff88804754f690 EFLAGS: 00000202
[  125.467793] RAX: 000000000002d145 RBX: 0000000000000212 RCX: ffffc90002a9f000
[  125.468343] RDX: 0000000000040000 RSI: ffffffff812a3dca RDI: 0000000000000007
[  125.468895] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90
[  125.469442] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88804754f758
[  125.469988] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000
[  125.470551]  ? oops_end+0x4a/0xe0
[  125.470839]  oops_end+0x65/0xe0
[  125.471107]  exc_general_protection+0x1a2/0x330
[  125.471478]  asm_exc_general_protection+0x26/0x30
[  125.471864] RIP: 0010:perf_tp_event+0x175/0xe70
[  125.472235] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  125.473650] RSP: 0018:ffff88804754f800 EFLAGS: 00010212
[  125.474070] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90002a9f000
[  125.474632] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191
[  125.475191] RBP: ffff88804754fa70 R08: ffff88806cf31340 R09: ffffe8ffffd16150
[  125.475751] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  125.476310] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[  125.476876]  ? perf_tp_event+0x167/0xe70
[  125.477211]  ? __pfx_perf_tp_event+0x10/0x10
[  125.477566]  ? lock_is_held_type+0x9e/0x120
[  125.477921]  ? lock_is_held_type+0x9e/0x120
[  125.478278]  ? perf_trace_lock+0xb5/0x5d0
[  125.478612]  ? perf_trace_lock+0xb5/0x5d0
[  125.478943]  ? __pfx_perf_trace_lock+0x10/0x10
[  125.479311]  ? __pfx_perf_trace_lock+0x10/0x10
[  125.479682]  ? find_held_lock+0x2b/0x80
[  125.480008]  ? find_held_lock+0x2b/0x80
[  125.480331]  ? __perf_install_in_context+0x503/0xb90
[  125.480732]  ? lock_release+0xc8/0x290
[  125.481047]  ? do_raw_spin_unlock+0x53/0x220
[  125.481406]  ? perf_trace_run_bpf_submit+0xef/0x180
[  125.481806]  perf_trace_run_bpf_submit+0xef/0x180
[  125.482205]  perf_trace_lock+0x337/0x5d0
[  125.482536]  ? __pfx_perf_trace_lock+0x10/0x10
[  125.482904]  ? lock_acquire+0x15e/0x2f0
[  125.483222]  ? futex_ref_get+0x48/0x300
[  125.483540]  ? futex_ref_get+0x114/0x300
[  125.483862]  ? futex_hash+0x15c/0x390
[  125.484169]  lock_release+0x1ab/0x290
[  125.484475]  ? futex_hash+0x15c/0x390
[  125.484781]  futex_ref_get+0x119/0x300
[  125.485094]  ? futex_hash+0x15c/0x390
[  125.485398]  futex_hash+0x70/0x390
[  125.485684]  futex_wake+0x143/0x540
[  125.485980]  ? __pfx_perf_trace_lock+0x10/0x10
[  125.486359]  ? __pfx_futex_wake+0x10/0x10
[  125.486696]  ? __do_sys_perf_event_open+0x44d/0x2c20
[  125.487100]  ? lock_release+0xc8/0x290
[  125.487418]  do_futex+0x26d/0x370
[  125.487699]  ? __pfx_do_futex+0x10/0x10
[  125.488019]  ? __pfx___do_sys_perf_event_open+0x10/0x10
[  125.488441]  ? find_held_lock+0x2b/0x80
[  125.488767]  __x64_sys_futex+0x1c9/0x4d0
[  125.489096]  ? __pfx___x64_sys_futex+0x10/0x10
[  125.489466]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  125.489883]  do_syscall_64+0xbf/0x360
[  125.490192]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.490602] RIP: 0033:0x7f651b765b19
[  125.490899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  125.492308] RSP: 002b:00007f6518cdb218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  125.492912] RAX: ffffffffffffffda RBX: 00007f651b878f68 RCX: 00007f651b765b19
[  125.493476] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f651b878f6c
[  125.494037] RBP: 00007f651b878f60 R08: 000000000000000e R09: 0000000000000000
[  125.494604] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f651b878f6c
[  125.495163] R13: 00007ffdbd6ad09f R14: 00007f6518cdb300 R15: 0000000000022000
[  125.495729]  </TASK>
[  125.495922] Modules linked in:
[  125.496183] ---[ end trace 0000000000000000 ]---
[  125.496184] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#4] SMP KASAN NOPTI
[  125.496554] RIP: 0010:perf_tp_event+0x175/0xe70
[  125.497431] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[  125.497792] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  125.498482] CPU: 0 UID: 0 PID: 3944 Comm: syz-executor.2 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  125.499888] RSP: 0018:ffff88804754f800 EFLAGS: 00010212
[  125.500814] Tainted: [D]=DIE, [W]=WARN
[  125.501223] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90002a9f000
[  125.501527] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  125.502081] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191
[  125.502734] RIP: 0010:perf_tp_event+0x175/0xe70
[  125.503284] RBP: ffff88804754fa70 R08: ffff88806cf31340 R09: ffffe8ffffd16150
[  125.503645] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  125.504194] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  125.505619] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012
[  125.506178] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[  125.506190] FS:  00007f6518cdb700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  125.506593] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[  125.507148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  125.507759] RDX: ffff88800a67d280 RSI: ffffffff818995b7 RDI: 0000000100000190
[  125.508311] CR2: 00007f651b879018 CR3: 000000000dcd5000 CR4: 0000000000350ef0
[  125.508760] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc16150
[  125.509314] Kernel panic - not syncing: Fatal exception in interrupt
[  126.550661] Shutting down cpus with NMI
[  126.552132] Kernel Offset: disabled
[  126.552426] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---

VM DIAGNOSIS:
11:32:48  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84bdec0e RDX=fffffbfff0f0ec09
RSI=0000000000000004 RDI=ffffffff87876044 RBP=ffffffff87876044 RSP=ffff8880475673b0
R8 =0000000000000000 R9 =fffffbfff0f0ec08 R10=ffffffff87876047 R11=202c746c75616620
R12=1ffff11008eace77 R13=0000000000000007 R14=fffffbfff0f0ec08 R15=ffff8880475673e8
RIP=ffffffff84bdeda0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fd716080700 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe3b00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055556792cc18 CR3=000000001d3ff000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fd718bf17c000007fd718bf17c8
XMM02=00007fd718bf17e000007fd718bf17c0 XMM03=00007fd718bf17c800007fd718bf17c0
XMM04=253d7367726100656d6172665f746365 XMM05=1e0022000000001a0000000000000000
XMM06=0000181c0000000000001c0008080001 XMM07=00000101000001000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff88804754f0f0
R8 =0000000000000000 R9 =ffffed100139a046 R10=0000000000000030 R11=0000000065646f43
R12=0000000000000030 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0
RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f6518cdb700 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe2300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f651b879018 CR3=000000000dcd5000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f651b84c7c000007f651b84c7c8
XMM02=00007f651b84c7e000007f651b84c7c0 XMM03=00007f651b84c7c800007f651b84c7c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000