Warning: Permanently added '[localhost]:46122' (ECDSA) to the list of known hosts. 2025/08/29 12:14:14 fuzzer started 2025/08/29 12:14:15 dialing manager at localhost:43077 syzkaller login: [ 51.023736] cgroup: Unknown subsys name 'net' [ 51.100850] cgroup: Unknown subsys name 'cpuset' [ 51.124150] cgroup: Unknown subsys name 'rlimit' 2025/08/29 12:14:25 syscalls: 2214 2025/08/29 12:14:25 code coverage: enabled 2025/08/29 12:14:25 comparison tracing: enabled 2025/08/29 12:14:25 extra coverage: enabled 2025/08/29 12:14:25 setuid sandbox: enabled 2025/08/29 12:14:25 namespace sandbox: enabled 2025/08/29 12:14:25 Android sandbox: enabled 2025/08/29 12:14:25 fault injection: enabled 2025/08/29 12:14:25 leak checking: enabled 2025/08/29 12:14:25 net packet injection: enabled 2025/08/29 12:14:25 net device setup: enabled 2025/08/29 12:14:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 12:14:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 12:14:25 USB emulation: enabled 2025/08/29 12:14:25 hci packet injection: enabled 2025/08/29 12:14:25 wifi device emulation: enabled 2025/08/29 12:14:25 802.15.4 emulation: enabled 2025/08/29 12:14:25 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 12:14:25 fetching corpus: 49, signal 25634/29095 (executing program) 2025/08/29 12:14:26 fetching corpus: 99, signal 37499/42315 (executing program) 2025/08/29 12:14:26 fetching corpus: 149, signal 42973/49168 (executing program) 2025/08/29 12:14:26 fetching corpus: 199, signal 49216/56596 (executing program) 2025/08/29 12:14:26 fetching corpus: 249, signal 54308/62830 (executing program) 2025/08/29 12:14:26 fetching corpus: 299, signal 58702/68335 (executing program) 2025/08/29 12:14:26 fetching corpus: 349, signal 62493/73222 (executing program) 2025/08/29 12:14:26 fetching corpus: 399, signal 68056/79636 (executing program) 2025/08/29 12:14:26 fetching corpus: 449, signal 71667/84186 (executing program) 2025/08/29 12:14:26 fetching corpus: 499, signal 74728/88147 (executing program) 2025/08/29 12:14:26 fetching corpus: 549, signal 77931/92219 (executing program) 2025/08/29 12:14:26 fetching corpus: 599, signal 79984/95197 (executing program) 2025/08/29 12:14:27 fetching corpus: 649, signal 82404/98451 (executing program) 2025/08/29 12:14:27 fetching corpus: 699, signal 84675/101527 (executing program) 2025/08/29 12:14:27 fetching corpus: 749, signal 86646/104323 (executing program) 2025/08/29 12:14:27 fetching corpus: 799, signal 89781/108036 (executing program) 2025/08/29 12:14:27 fetching corpus: 849, signal 91885/110803 (executing program) 2025/08/29 12:14:27 fetching corpus: 899, signal 94194/113693 (executing program) 2025/08/29 12:14:27 fetching corpus: 949, signal 96685/116726 (executing program) 2025/08/29 12:14:27 fetching corpus: 999, signal 98444/119068 (executing program) 2025/08/29 12:14:27 fetching corpus: 1049, signal 100336/121559 (executing program) 2025/08/29 12:14:27 fetching corpus: 1099, signal 101815/123644 (executing program) 2025/08/29 12:14:28 fetching corpus: 1149, signal 103264/125699 (executing program) 2025/08/29 12:14:28 fetching corpus: 1199, signal 104675/127660 (executing program) 2025/08/29 12:14:28 fetching corpus: 1249, signal 106554/129974 (executing program) 2025/08/29 12:14:28 fetching corpus: 1299, signal 108169/132035 (executing program) 2025/08/29 12:14:28 fetching corpus: 1349, signal 109576/133893 (executing program) 2025/08/29 12:14:28 fetching corpus: 1399, signal 110949/135715 (executing program) 2025/08/29 12:14:28 fetching corpus: 1449, signal 111787/137147 (executing program) 2025/08/29 12:14:28 fetching corpus: 1499, signal 112612/138568 (executing program) 2025/08/29 12:14:28 fetching corpus: 1549, signal 113416/139955 (executing program) 2025/08/29 12:14:28 fetching corpus: 1599, signal 115202/141979 (executing program) 2025/08/29 12:14:28 fetching corpus: 1649, signal 116602/143720 (executing program) 2025/08/29 12:14:29 fetching corpus: 1699, signal 117897/145289 (executing program) 2025/08/29 12:14:29 fetching corpus: 1749, signal 118877/146695 (executing program) 2025/08/29 12:14:29 fetching corpus: 1799, signal 119814/148040 (executing program) 2025/08/29 12:14:29 fetching corpus: 1849, signal 120955/149516 (executing program) 2025/08/29 12:14:29 fetching corpus: 1899, signal 122518/151180 (executing program) 2025/08/29 12:14:29 fetching corpus: 1949, signal 123594/152560 (executing program) 2025/08/29 12:14:29 fetching corpus: 1999, signal 124388/153747 (executing program) 2025/08/29 12:14:29 fetching corpus: 2049, signal 125335/155030 (executing program) 2025/08/29 12:14:29 fetching corpus: 2099, signal 126649/156483 (executing program) 2025/08/29 12:14:29 fetching corpus: 2149, signal 127370/157579 (executing program) 2025/08/29 12:14:29 fetching corpus: 2199, signal 128860/159099 (executing program) 2025/08/29 12:14:30 fetching corpus: 2249, signal 129720/160171 (executing program) 2025/08/29 12:14:30 fetching corpus: 2299, signal 130472/161222 (executing program) 2025/08/29 12:14:30 fetching corpus: 2349, signal 131113/162191 (executing program) 2025/08/29 12:14:30 fetching corpus: 2399, signal 132155/163394 (executing program) 2025/08/29 12:14:30 fetching corpus: 2449, signal 132863/164401 (executing program) 2025/08/29 12:14:30 fetching corpus: 2499, signal 133918/165532 (executing program) 2025/08/29 12:14:30 fetching corpus: 2549, signal 135268/166781 (executing program) 2025/08/29 12:14:30 fetching corpus: 2599, signal 135967/167716 (executing program) 2025/08/29 12:14:30 fetching corpus: 2649, signal 136455/168515 (executing program) 2025/08/29 12:14:30 fetching corpus: 2699, signal 137407/169544 (executing program) 2025/08/29 12:14:31 fetching corpus: 2749, signal 138304/170586 (executing program) 2025/08/29 12:14:31 fetching corpus: 2799, signal 138840/171326 (executing program) 2025/08/29 12:14:31 fetching corpus: 2849, signal 139687/172261 (executing program) 2025/08/29 12:14:31 fetching corpus: 2899, signal 140446/173148 (executing program) 2025/08/29 12:14:31 fetching corpus: 2949, signal 141121/173947 (executing program) 2025/08/29 12:14:31 fetching corpus: 2999, signal 141832/174766 (executing program) 2025/08/29 12:14:31 fetching corpus: 3049, signal 142453/175512 (executing program) 2025/08/29 12:14:31 fetching corpus: 3099, signal 143090/176298 (executing program) 2025/08/29 12:14:31 fetching corpus: 3149, signal 143718/177041 (executing program) 2025/08/29 12:14:31 fetching corpus: 3199, signal 144469/177826 (executing program) 2025/08/29 12:14:32 fetching corpus: 3249, signal 145046/178497 (executing program) 2025/08/29 12:14:32 fetching corpus: 3299, signal 145721/179236 (executing program) 2025/08/29 12:14:32 fetching corpus: 3349, signal 146330/179962 (executing program) 2025/08/29 12:14:32 fetching corpus: 3399, signal 146881/180613 (executing program) 2025/08/29 12:14:32 fetching corpus: 3449, signal 147575/181265 (executing program) 2025/08/29 12:14:32 fetching corpus: 3499, signal 148101/181854 (executing program) 2025/08/29 12:14:32 fetching corpus: 3549, signal 149037/182516 (executing program) 2025/08/29 12:14:32 fetching corpus: 3599, signal 150055/183233 (executing program) 2025/08/29 12:14:32 fetching corpus: 3649, signal 151494/184023 (executing program) 2025/08/29 12:14:32 fetching corpus: 3699, signal 152051/184553 (executing program) 2025/08/29 12:14:32 fetching corpus: 3749, signal 152490/185105 (executing program) 2025/08/29 12:14:32 fetching corpus: 3799, signal 153027/185633 (executing program) 2025/08/29 12:14:33 fetching corpus: 3849, signal 153934/186194 (executing program) 2025/08/29 12:14:33 fetching corpus: 3899, signal 154560/186764 (executing program) 2025/08/29 12:14:33 fetching corpus: 3949, signal 155094/187268 (executing program) 2025/08/29 12:14:33 fetching corpus: 3999, signal 155504/187728 (executing program) 2025/08/29 12:14:33 fetching corpus: 4049, signal 155947/188194 (executing program) 2025/08/29 12:14:33 fetching corpus: 4099, signal 156338/188684 (executing program) 2025/08/29 12:14:33 fetching corpus: 4149, signal 156960/189137 (executing program) 2025/08/29 12:14:33 fetching corpus: 4199, signal 157438/189629 (executing program) 2025/08/29 12:14:33 fetching corpus: 4249, signal 158314/190083 (executing program) 2025/08/29 12:14:33 fetching corpus: 4299, signal 158671/190473 (executing program) 2025/08/29 12:14:33 fetching corpus: 4349, signal 159104/190929 (executing program) 2025/08/29 12:14:33 fetching corpus: 4399, signal 159622/191316 (executing program) 2025/08/29 12:14:34 fetching corpus: 4449, signal 160069/191691 (executing program) 2025/08/29 12:14:34 fetching corpus: 4499, signal 160375/192064 (executing program) 2025/08/29 12:14:34 fetching corpus: 4549, signal 160945/192436 (executing program) 2025/08/29 12:14:34 fetching corpus: 4599, signal 161474/192776 (executing program) 2025/08/29 12:14:34 fetching corpus: 4649, signal 161994/193048 (executing program) 2025/08/29 12:14:34 fetching corpus: 4699, signal 162426/193055 (executing program) 2025/08/29 12:14:34 fetching corpus: 4749, signal 162837/193069 (executing program) 2025/08/29 12:14:34 fetching corpus: 4799, signal 163630/193075 (executing program) 2025/08/29 12:14:34 fetching corpus: 4849, signal 164116/193106 (executing program) 2025/08/29 12:14:34 fetching corpus: 4899, signal 164513/193122 (executing program) 2025/08/29 12:14:35 fetching corpus: 4949, signal 164905/193132 (executing program) 2025/08/29 12:14:35 fetching corpus: 4999, signal 165381/193144 (executing program) 2025/08/29 12:14:35 fetching corpus: 5049, signal 165866/193149 (executing program) 2025/08/29 12:14:35 fetching corpus: 5099, signal 166211/193152 (executing program) 2025/08/29 12:14:35 fetching corpus: 5149, signal 166641/193167 (executing program) 2025/08/29 12:14:35 fetching corpus: 5199, signal 166941/193182 (executing program) 2025/08/29 12:14:35 fetching corpus: 5249, signal 167161/193194 (executing program) 2025/08/29 12:14:35 fetching corpus: 5299, signal 167529/193196 (executing program) 2025/08/29 12:14:35 fetching corpus: 5349, signal 167893/193202 (executing program) 2025/08/29 12:14:35 fetching corpus: 5399, signal 168398/193230 (executing program) 2025/08/29 12:14:35 fetching corpus: 5449, signal 168680/193235 (executing program) 2025/08/29 12:14:35 fetching corpus: 5499, signal 169053/193242 (executing program) 2025/08/29 12:14:36 fetching corpus: 5549, signal 169412/193258 (executing program) 2025/08/29 12:14:36 fetching corpus: 5599, signal 169827/193259 (executing program) 2025/08/29 12:14:36 fetching corpus: 5649, signal 170084/193268 (executing program) 2025/08/29 12:14:36 fetching corpus: 5699, signal 170367/193294 (executing program) 2025/08/29 12:14:36 fetching corpus: 5749, signal 170711/193301 (executing program) 2025/08/29 12:14:36 fetching corpus: 5799, signal 170965/193306 (executing program) 2025/08/29 12:14:36 fetching corpus: 5849, signal 171327/193319 (executing program) 2025/08/29 12:14:36 fetching corpus: 5899, signal 171614/193327 (executing program) 2025/08/29 12:14:36 fetching corpus: 5949, signal 171984/193334 (executing program) 2025/08/29 12:14:36 fetching corpus: 5999, signal 172516/193340 (executing program) 2025/08/29 12:14:36 fetching corpus: 6049, signal 173099/193340 (executing program) 2025/08/29 12:14:37 fetching corpus: 6099, signal 173486/193362 (executing program) 2025/08/29 12:14:37 fetching corpus: 6149, signal 173837/193370 (executing program) 2025/08/29 12:14:37 fetching corpus: 6199, signal 174059/193379 (executing program) 2025/08/29 12:14:37 fetching corpus: 6249, signal 174346/193384 (executing program) 2025/08/29 12:14:37 fetching corpus: 6299, signal 174590/193388 (executing program) 2025/08/29 12:14:37 fetching corpus: 6349, signal 174954/193390 (executing program) 2025/08/29 12:14:37 fetching corpus: 6399, signal 175398/193399 (executing program) 2025/08/29 12:14:37 fetching corpus: 6449, signal 175704/193439 (executing program) 2025/08/29 12:14:37 fetching corpus: 6499, signal 175940/193446 (executing program) 2025/08/29 12:14:37 fetching corpus: 6549, signal 176166/193477 (executing program) 2025/08/29 12:14:37 fetching corpus: 6599, signal 176499/193488 (executing program) 2025/08/29 12:14:37 fetching corpus: 6649, signal 176958/193515 (executing program) 2025/08/29 12:14:37 fetching corpus: 6699, signal 177171/193523 (executing program) 2025/08/29 12:14:37 fetching corpus: 6749, signal 177477/193527 (executing program) 2025/08/29 12:14:37 fetching corpus: 6799, signal 177802/193573 (executing program) 2025/08/29 12:14:38 fetching corpus: 6849, signal 178138/193596 (executing program) 2025/08/29 12:14:38 fetching corpus: 6899, signal 178415/193601 (executing program) 2025/08/29 12:14:38 fetching corpus: 6949, signal 179042/193605 (executing program) 2025/08/29 12:14:38 fetching corpus: 6999, signal 179306/193606 (executing program) 2025/08/29 12:14:38 fetching corpus: 7049, signal 179593/193625 (executing program) 2025/08/29 12:14:38 fetching corpus: 7099, signal 180020/193627 (executing program) 2025/08/29 12:14:38 fetching corpus: 7149, signal 180313/193633 (executing program) 2025/08/29 12:14:38 fetching corpus: 7199, signal 180576/193651 (executing program) 2025/08/29 12:14:38 fetching corpus: 7249, signal 180943/193657 (executing program) 2025/08/29 12:14:38 fetching corpus: 7299, signal 181323/193659 (executing program) 2025/08/29 12:14:38 fetching corpus: 7349, signal 181630/193662 (executing program) 2025/08/29 12:14:38 fetching corpus: 7399, signal 181859/193673 (executing program) 2025/08/29 12:14:39 fetching corpus: 7449, signal 182136/193676 (executing program) 2025/08/29 12:14:39 fetching corpus: 7499, signal 182366/193682 (executing program) 2025/08/29 12:14:39 fetching corpus: 7549, signal 182578/193694 (executing program) 2025/08/29 12:14:39 fetching corpus: 7599, signal 182928/193698 (executing program) 2025/08/29 12:14:39 fetching corpus: 7649, signal 183286/193706 (executing program) 2025/08/29 12:14:39 fetching corpus: 7699, signal 183588/193729 (executing program) 2025/08/29 12:14:39 fetching corpus: 7749, signal 183827/193737 (executing program) 2025/08/29 12:14:39 fetching corpus: 7799, signal 184102/193740 (executing program) 2025/08/29 12:14:39 fetching corpus: 7849, signal 184331/193741 (executing program) 2025/08/29 12:14:39 fetching corpus: 7899, signal 184766/193823 (executing program) 2025/08/29 12:14:39 fetching corpus: 7949, signal 185027/193823 (executing program) 2025/08/29 12:14:39 fetching corpus: 7999, signal 185257/193832 (executing program) 2025/08/29 12:14:40 fetching corpus: 8049, signal 185575/193834 (executing program) 2025/08/29 12:14:40 fetching corpus: 8099, signal 185851/193835 (executing program) 2025/08/29 12:14:40 fetching corpus: 8149, signal 186217/193860 (executing program) 2025/08/29 12:14:40 fetching corpus: 8199, signal 186438/193874 (executing program) 2025/08/29 12:14:40 fetching corpus: 8249, signal 186754/193878 (executing program) 2025/08/29 12:14:40 fetching corpus: 8299, signal 187100/193911 (executing program) 2025/08/29 12:14:40 fetching corpus: 8349, signal 187341/193915 (executing program) 2025/08/29 12:14:40 fetching corpus: 8399, signal 187653/193923 (executing program) 2025/08/29 12:14:40 fetching corpus: 8449, signal 187844/193923 (executing program) 2025/08/29 12:14:40 fetching corpus: 8499, signal 188112/193929 (executing program) 2025/08/29 12:14:40 fetching corpus: 8549, signal 188359/193929 (executing program) 2025/08/29 12:14:40 fetching corpus: 8599, signal 188641/193959 (executing program) 2025/08/29 12:14:41 fetching corpus: 8649, signal 188915/193990 (executing program) 2025/08/29 12:14:41 fetching corpus: 8699, signal 189098/193990 (executing program) 2025/08/29 12:14:41 fetching corpus: 8749, signal 189320/193996 (executing program) 2025/08/29 12:14:41 fetching corpus: 8799, signal 189586/194001 (executing program) 2025/08/29 12:14:41 fetching corpus: 8849, signal 189781/194006 (executing program) 2025/08/29 12:14:41 fetching corpus: 8899, signal 190024/194007 (executing program) 2025/08/29 12:14:41 fetching corpus: 8947, signal 190287/194009 (executing program) 2025/08/29 12:14:41 fetching corpus: 8947, signal 190287/194009 (executing program) 2025/08/29 12:14:43 starting 8 fuzzer processes 12:14:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000240)) 12:14:43 executing program 1: io_setup(0xc1d, &(0x7f0000000000)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/freeze_filesystems', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 12:14:44 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) write$binfmt_script(r0, 0x0, 0x20) fallocate(r0, 0x10, 0x0, 0x7fff) 12:14:44 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x7041, 0x0) 12:14:44 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 79.741804] audit: type=1400 audit(1756469684.130:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:14:44 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x1) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000000, &(0x7f0000006040)) 12:14:44 executing program 6: r0 = memfd_create(&(0x7f00000001c0)='_\xb9\x16', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x0) 12:14:44 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x7, 0x0, 0x0) [ 80.947144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.949486] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.951323] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.958259] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.961588] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.963171] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.972199] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.985341] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.993220] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.995656] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.011664] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.015840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.020302] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.031089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.034371] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.038062] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.041541] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.046127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.050296] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.061129] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.137740] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.147187] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.151355] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.154780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.156602] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.159977] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.160034] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.166159] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.187457] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.200775] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 81.207316] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 81.214403] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 81.224268] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.250094] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 81.267754] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 81.269912] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 81.272198] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 81.283187] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 81.300775] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 81.319611] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 83.038557] Bluetooth: hci1: command tx timeout [ 83.039382] Bluetooth: hci0: command tx timeout [ 83.102655] Bluetooth: hci3: command tx timeout [ 83.103215] Bluetooth: hci2: command tx timeout [ 83.230144] Bluetooth: hci4: command tx timeout [ 83.295161] Bluetooth: hci5: command tx timeout [ 83.359071] Bluetooth: hci6: command tx timeout [ 83.422473] Bluetooth: hci7: command tx timeout [ 85.086188] Bluetooth: hci0: command tx timeout [ 85.087692] Bluetooth: hci1: command tx timeout [ 85.152450] Bluetooth: hci3: command tx timeout [ 85.152886] Bluetooth: hci2: command tx timeout [ 85.279167] Bluetooth: hci4: command tx timeout [ 85.343047] Bluetooth: hci5: command tx timeout [ 85.407848] Bluetooth: hci6: command tx timeout [ 85.471594] Bluetooth: hci7: command tx timeout [ 87.134091] Bluetooth: hci1: command tx timeout [ 87.134174] Bluetooth: hci0: command tx timeout [ 87.199052] Bluetooth: hci2: command tx timeout [ 87.199062] Bluetooth: hci3: command tx timeout [ 87.326051] Bluetooth: hci4: command tx timeout [ 87.392035] Bluetooth: hci5: command tx timeout [ 87.454037] Bluetooth: hci6: command tx timeout [ 87.518135] Bluetooth: hci7: command tx timeout [ 89.182090] Bluetooth: hci1: command tx timeout [ 89.185045] Bluetooth: hci0: command tx timeout [ 89.246280] Bluetooth: hci3: command tx timeout [ 89.247126] Bluetooth: hci2: command tx timeout [ 89.375916] Bluetooth: hci4: command tx timeout [ 89.438054] Bluetooth: hci5: command tx timeout [ 89.502054] Bluetooth: hci6: command tx timeout [ 89.566048] Bluetooth: hci7: command tx timeout [ 120.399115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.399734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.542323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.542936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.711537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.712164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.786819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.788030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.927306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.927914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.077031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.077648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.175292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.175882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:15:25 executing program 6: r0 = memfd_create(&(0x7f00000001c0)='_\xb9\x16', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x0) 12:15:25 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x7041, 0x0) [ 121.310477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.311503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:15:25 executing program 6: r0 = memfd_create(&(0x7f00000001c0)='_\xb9\x16', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x0) 12:15:25 executing program 6: r0 = memfd_create(&(0x7f00000001c0)='_\xb9\x16', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x0) 12:15:25 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x7041, 0x0) 12:15:25 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x7041, 0x0) 12:15:25 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x6180}], 0x1, 0x0, 0x0, 0x0) [ 121.548330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.548918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.578695] audit: type=1400 audit(1756469725.965:8): avc: denied { open } for pid=3856 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 121.583455] audit: type=1400 audit(1756469725.966:9): avc: denied { kernel } for pid=3856 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:15:26 executing program 6: openat2(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x600000, 0x2558d82298e0d7c7}, 0x18) [ 121.682863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.683677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.102411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.103269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.124163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.124736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.174485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.175125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.203310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.203916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.299395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.300024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.358452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.359436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:15:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x29, 0x0, 0x0) 12:15:26 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:15:26 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fchown(r0, 0x0, 0x0) 12:15:26 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x2) 12:15:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x18, 0x68, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x18}], 0x1}, 0x0) 12:15:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x3704}) 12:15:26 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 12:15:26 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000001c0)) listen(0xffffffffffffffff, 0x0) [ 122.623660] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.633271] kmemleak: Found object by alias at 0x607f1a6396f4 [ 122.633285] CPU: 1 UID: 0 PID: 3928 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 122.633304] Tainted: [W]=WARN [ 122.633307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 122.633314] Call Trace: [ 122.633318] [ 122.633322] dump_stack_lvl+0xca/0x120 [ 122.633346] __lookup_object+0x94/0xb0 [ 122.633363] delete_object_full+0x27/0x70 [ 122.633378] free_percpu+0x30/0x1160 [ 122.633394] ? arch_uprobe_clear_state+0x16/0x140 [ 122.633414] futex_hash_free+0x38/0xc0 [ 122.633428] mmput+0x2d3/0x390 [ 122.633447] do_exit+0x79d/0x2970 [ 122.633460] ? lock_release+0xc8/0x290 [ 122.633477] ? __pfx_do_exit+0x10/0x10 [ 122.633491] ? find_held_lock+0x2b/0x80 [ 122.633508] ? get_signal+0x835/0x2340 [ 122.633529] do_group_exit+0xd3/0x2a0 [ 122.633543] get_signal+0x2315/0x2340 [ 122.633565] ? __pfx_get_signal+0x10/0x10 [ 122.633581] ? do_futex+0x135/0x370 [ 122.633595] ? __pfx_do_futex+0x10/0x10 [ 122.633609] arch_do_signal_or_restart+0x80/0x790 [ 122.633627] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 122.633643] ? __x64_sys_futex+0x1c9/0x4d0 [ 122.633655] ? __x64_sys_futex+0x1d2/0x4d0 [ 122.633669] ? __pfx___x64_sys_futex+0x10/0x10 [ 122.633687] exit_to_user_mode_loop+0x8b/0x110 [ 122.633700] do_syscall_64+0x2f7/0x360 [ 122.633711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.633723] RIP: 0033:0x7f4930c9eb19 [ 122.633732] Code: Unable to access opcode bytes at 0x7f4930c9eaef. [ 122.633737] RSP: 002b:00007f492e214218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.633748] RAX: fffffffffffffe00 RBX: 00007f4930db1f68 RCX: 00007f4930c9eb19 [ 122.633755] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4930db1f68 [ 122.633762] RBP: 00007f4930db1f60 R08: 0000000000000000 R09: 0000000000000000 [ 122.633769] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4930db1f6c [ 122.633776] R13: 00007ffc0cd0dccf R14: 00007f492e214300 R15: 0000000000022000 [ 122.633792] [ 122.633795] kmemleak: Object (percpu) 0x607f1a6396f0 (size 8): [ 122.633802] kmemleak: comm "syz-executor.1", pid 279, jiffies 4294788783 [ 122.633808] kmemleak: min_count = 1 [ 122.633812] kmemleak: count = 0 [ 122.633816] kmemleak: flags = 0x21 [ 122.633819] kmemleak: checksum = 0 [ 122.633823] kmemleak: backtrace: [ 122.633826] pcpu_alloc_noprof+0x87a/0x1170 [ 122.633841] percpu_ref_init+0x37/0x400 [ 122.633859] cgroup_mkdir+0x28a/0x1110 [ 122.633872] kernfs_iop_mkdir+0x111/0x190 [ 122.633887] vfs_mkdir+0x59a/0x8d0 [ 122.633902] do_mkdirat+0x19f/0x3d0 [ 122.633913] __x64_sys_mkdir+0xf3/0x140 [ 122.633923] do_syscall_64+0xbf/0x360 [ 122.633931] entry_SYSCALL_64_after_hwframe+0x77/0x7f 12:15:27 executing program 1: wait4(0x0, 0x0, 0x0, 0x0) 12:15:27 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x3704}) 12:15:27 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = dup2(r1, r0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000040)=0x1) [ 122.710240] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 12:15:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x18, 0x68, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x18}], 0x1}, 0x0) 12:15:27 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:15:27 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 12:15:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x18, 0x68, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x18}], 0x1}, 0x0) 12:15:27 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x3704}) [ 122.788333] Oops: general protection fault, probably for non-canonical address 0xdffffc0080000032: 0000 [#1] SMP KASAN NOPTI [ 122.789250] KASAN: probably user-memory-access in range [0x0000000400000190-0x0000000400000197] [ 122.789948] CPU: 1 UID: 0 PID: 279 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 122.791526] Tainted: [W]=WARN [ 122.792324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 122.793990] RIP: 0010:perf_tp_event+0x175/0xe70 [ 122.795295] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 122.798911] RSP: 0018:ffff888016a076c0 EFLAGS: 00010212 [ 122.799336] RAX: 0000000080000032 RBX: 00000003ffffffa0 RCX: 0000000000000002 [ 122.799886] RDX: ffff8880159a5280 RSI: ffffffff818995b7 RDI: 0000000400000190 [ 122.800412] RBP: ffff888016a07930 R08: ffff88806cf31340 R09: ffffe8ffffd166f0 [ 122.800951] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 122.801483] R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 [ 122.802008] FS: 000055557f4e9400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 122.802596] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.803026] CR2: 0000001b2d221000 CR3: 000000003587c000 CR4: 0000000000350ef0 [ 122.803553] Call Trace: [ 122.803748] [ 122.803921] ? kasan_save_stack+0x34/0x50 [ 122.804237] ? __do_wait+0x218/0x8f0 [ 122.804524] ? __pfx_perf_tp_event+0x10/0x10 [ 122.804858] ? __lock_acquire+0x694/0x1b70 [ 122.805187] ? lock_acquire+0x15e/0x2f0 [ 122.805487] ? __virt_addr_valid+0x1c6/0x5d0 [ 122.805828] ? find_held_lock+0x2b/0x80 [ 122.806133] ? __virt_addr_valid+0x2e8/0x5d0 [ 122.806473] ? lock_release+0xc8/0x290 [ 122.806765] ? __virt_addr_valid+0x100/0x5d0 [ 122.807101] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 122.807489] ? perf_trace_run_bpf_submit+0xef/0x180 [ 122.807862] perf_trace_run_bpf_submit+0xef/0x180 [ 122.808226] perf_trace_contention_begin+0x235/0x3e0 [ 122.808606] ? __pfx_perf_trace_contention_begin+0x10/0x10 [ 122.809018] ? lock_acquire+0x15e/0x2f0 [ 122.809324] ? anon_pipe_write+0x12a/0x1a80 [ 122.809653] trace_contention_begin+0xae/0x110 [ 122.809997] __mutex_lock+0x14b/0x1020 [ 122.810295] ? anon_pipe_write+0x12a/0x1a80 [ 122.810615] ? anon_pipe_write+0x12a/0x1a80 [ 122.810935] ? avc_has_perm+0x12b/0x1d0 [ 122.811242] ? __pfx___mutex_lock+0x10/0x10 [ 122.811570] ? inode_has_perm+0x170/0x1c0 [ 122.811878] anon_pipe_write+0x12a/0x1a80 [ 122.812188] ? lock_acquire+0x15e/0x2f0 [ 122.812487] ? find_held_lock+0x2b/0x80 [ 122.812789] ? __pfx_anon_pipe_write+0x10/0x10 [ 122.813131] ? selinux_file_permission+0x99/0x600 [ 122.813501] ? security_file_permission+0x22/0x90 [ 122.813867] vfs_write+0xbe9/0x1150 [ 122.814144] ? __pfx_anon_pipe_write+0x10/0x10 [ 122.814484] ? __pfx_vfs_write+0x10/0x10 [ 122.814787] ? __do_sys_wait4+0xb3/0x150 [ 122.815095] ? common_nsleep+0xaa/0xd0 [ 122.815389] ksys_write+0x1ef/0x240 [ 122.815664] ? __pfx_ksys_write+0x10/0x10 [ 122.815984] do_syscall_64+0xbf/0x360 [ 122.816281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.816677] RIP: 0033:0x7fa1a2bf95ff [ 122.816962] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 122.818320] RSP: 002b:00007ffc10875290 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 122.818890] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007fa1a2bf95ff [ 122.819425] RDX: 000000000000000c RSI: 00007ffc10875380 RDI: 00000000000000f8 [ 122.819960] RBP: 00007ffc1087531c R08: 0000000000000000 R09: 00007fa1a2d36000 [ 122.820487] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 122.821010] R13: 000000000001df06 R14: 0000000000000001 R15: 00007ffc10875380 [ 122.821544] [ 122.821722] Modules linked in: [ 122.822035] ---[ end trace 0000000000000000 ]--- [ 122.822394] RIP: 0010:perf_tp_event+0x175/0xe70 [ 122.822745] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 122.824091] RSP: 0018:ffff888016a076c0 EFLAGS: 00010212 [ 122.824486] RAX: 0000000080000032 RBX: 00000003ffffffa0 RCX: 0000000000000002 [ 122.825022] RDX: ffff8880159a5280 RSI: ffffffff818995b7 RDI: 0000000400000190 [ 122.825564] RBP: ffff888016a07930 R08: ffff88806cf31340 R09: ffffe8ffffd166f0 [ 122.826104] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 122.826628] R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000 [ 122.827167] FS: 000055557f4e9400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 122.827755] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.828197] CR2: 0000001b2d221000 CR3: 000000003587c000 CR4: 0000000000350ef0 [ 122.828722] note: syz-executor.1[279] exited with preempt_count 2 [ 122.903452] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.907769] audit: type=1400 audit(1756469727.296:10): avc: denied { write } for pid=3936 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:15:27 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4a, 0x0, &(0x7f0000000140)) 12:15:27 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x3704}) 12:15:27 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 12:15:27 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x8}, 0x0, 0x0, &(0x7f0000000300), 0x0) 12:15:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x18, 0x68, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x18}], 0x1}, 0x0) 12:15:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x29, 0x0, 0x0) 12:15:27 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:15:27 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = dup2(r1, r0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000040)=0x1) [ 123.054368] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 12:15:27 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4a, 0x0, &(0x7f0000000140)) 12:15:27 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x29, 0x0, 0x0) 12:15:27 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed}, 0xe) 12:15:27 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROM_SELECT_SPEED(r0, 0x5322, 0x9) 12:15:27 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendmmsg$inet6(r0, &(0x7f0000006100)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="5c6d24a9aaba88e3", 0x8}], 0x1}}], 0x1, 0x0) 12:15:27 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 12:15:27 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = dup2(r1, r0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000040)=0x1) 12:15:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x29, 0x0, 0x0) 12:15:27 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 12:15:27 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4a, 0x0, &(0x7f0000000140)) 12:15:27 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x29, 0x0, 0x0) 12:15:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x29, 0x0, 0x0) 12:15:27 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendmmsg$inet6(r0, &(0x7f0000006100)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="5c6d24a9aaba88e3", 0x8}], 0x1}}], 0x1, 0x0) 12:15:27 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = dup2(r1, r0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000040)=0x1) 12:15:27 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendmmsg$inet6(r0, &(0x7f0000006100)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="5c6d24a9aaba88e3", 0x8}], 0x1}}], 0x1, 0x0) 12:15:27 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4a, 0x0, &(0x7f0000000140)) [ 125.603765] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.605648] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.610727] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.615717] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.618487] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.646057] Bluetooth: hci0: command tx timeout [ 129.694064] Bluetooth: hci0: command tx timeout [ 131.742068] Bluetooth: hci0: command tx timeout VM DIAGNOSIS: 12:15:27 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88806cf3c300 RCX=ffffffff816880fc RDX=ffff88801a878000 RSI=ffffffff816880d6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88800e487648 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=1ffff1100d9c6bb1 R12=ffffed100d9e7861 R13=ffff88806cf3c308 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff816880d8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f17f7e72542 CR3=0000000005a88000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000ffff00000000000000000000ffff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888016a06fb0 R8 =0000000000000000 R9 =ffffed100165b046 R10=0000000000000038 R11=0000000065646f43 R12=0000000000000038 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557f4e9400 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d221000 CR3=000000003587c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000