Warning: Permanently added '[localhost]:26083' (ECDSA) to the list of known hosts. 2025/08/29 08:54:02 fuzzer started 2025/08/29 08:54:02 dialing manager at localhost:43077 syzkaller login: [ 50.287913] cgroup: Unknown subsys name 'net' [ 50.349870] cgroup: Unknown subsys name 'cpuset' [ 50.364107] cgroup: Unknown subsys name 'rlimit' 2025/08/29 08:54:14 syscalls: 2214 2025/08/29 08:54:14 code coverage: enabled 2025/08/29 08:54:14 comparison tracing: enabled 2025/08/29 08:54:14 extra coverage: enabled 2025/08/29 08:54:14 setuid sandbox: enabled 2025/08/29 08:54:14 namespace sandbox: enabled 2025/08/29 08:54:14 Android sandbox: enabled 2025/08/29 08:54:14 fault injection: enabled 2025/08/29 08:54:14 leak checking: enabled 2025/08/29 08:54:14 net packet injection: enabled 2025/08/29 08:54:14 net device setup: enabled 2025/08/29 08:54:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 08:54:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 08:54:14 USB emulation: enabled 2025/08/29 08:54:14 hci packet injection: enabled 2025/08/29 08:54:14 wifi device emulation: enabled 2025/08/29 08:54:14 802.15.4 emulation: enabled 2025/08/29 08:54:14 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 08:54:14 fetching corpus: 50, signal 22147/25402 (executing program) 2025/08/29 08:54:14 fetching corpus: 100, signal 33582/37875 (executing program) 2025/08/29 08:54:14 fetching corpus: 150, signal 43544/48605 (executing program) 2025/08/29 08:54:14 fetching corpus: 200, signal 51026/56757 (executing program) 2025/08/29 08:54:14 fetching corpus: 250, signal 57015/63269 (executing program) 2025/08/29 08:54:14 fetching corpus: 300, signal 61900/68618 (executing program) 2025/08/29 08:54:14 fetching corpus: 350, signal 66012/73165 (executing program) 2025/08/29 08:54:15 fetching corpus: 400, signal 70442/77816 (executing program) 2025/08/29 08:54:15 fetching corpus: 450, signal 73585/81317 (executing program) 2025/08/29 08:54:15 fetching corpus: 500, signal 76047/84112 (executing program) 2025/08/29 08:54:15 fetching corpus: 550, signal 78666/86967 (executing program) 2025/08/29 08:54:15 fetching corpus: 600, signal 81386/89782 (executing program) 2025/08/29 08:54:15 fetching corpus: 650, signal 85126/93429 (executing program) 2025/08/29 08:54:15 fetching corpus: 700, signal 88426/96532 (executing program) 2025/08/29 08:54:16 fetching corpus: 750, signal 91289/99251 (executing program) 2025/08/29 08:54:16 fetching corpus: 800, signal 92815/100888 (executing program) 2025/08/29 08:54:16 fetching corpus: 850, signal 95181/103009 (executing program) 2025/08/29 08:54:16 fetching corpus: 900, signal 96789/104454 (executing program) 2025/08/29 08:54:16 fetching corpus: 950, signal 97916/105633 (executing program) 2025/08/29 08:54:16 fetching corpus: 1000, signal 99743/107218 (executing program) 2025/08/29 08:54:16 fetching corpus: 1050, signal 101107/108482 (executing program) 2025/08/29 08:54:16 fetching corpus: 1100, signal 103276/110239 (executing program) 2025/08/29 08:54:17 fetching corpus: 1150, signal 104762/111479 (executing program) 2025/08/29 08:54:17 fetching corpus: 1200, signal 106883/113040 (executing program) 2025/08/29 08:54:17 fetching corpus: 1250, signal 108501/114247 (executing program) 2025/08/29 08:54:17 fetching corpus: 1300, signal 109859/115431 (executing program) 2025/08/29 08:54:17 fetching corpus: 1350, signal 110618/116059 (executing program) 2025/08/29 08:54:17 fetching corpus: 1400, signal 111511/116786 (executing program) 2025/08/29 08:54:17 fetching corpus: 1450, signal 112339/117386 (executing program) 2025/08/29 08:54:17 fetching corpus: 1500, signal 113297/118057 (executing program) 2025/08/29 08:54:17 fetching corpus: 1550, signal 114113/118578 (executing program) 2025/08/29 08:54:18 fetching corpus: 1600, signal 115138/119236 (executing program) 2025/08/29 08:54:18 fetching corpus: 1650, signal 116437/120028 (executing program) 2025/08/29 08:54:18 fetching corpus: 1700, signal 117299/120500 (executing program) 2025/08/29 08:54:18 fetching corpus: 1750, signal 119030/121242 (executing program) 2025/08/29 08:54:18 fetching corpus: 1800, signal 119744/121645 (executing program) 2025/08/29 08:54:18 fetching corpus: 1850, signal 120419/121970 (executing program) 2025/08/29 08:54:18 fetching corpus: 1860, signal 120587/122079 (executing program) 2025/08/29 08:54:18 fetching corpus: 1860, signal 120587/122128 (executing program) 2025/08/29 08:54:18 fetching corpus: 1860, signal 120587/122162 (executing program) 2025/08/29 08:54:18 fetching corpus: 1860, signal 120587/122203 (executing program) 2025/08/29 08:54:18 fetching corpus: 1860, signal 120587/122248 (executing program) 2025/08/29 08:54:18 fetching corpus: 1860, signal 120587/122282 (executing program) 2025/08/29 08:54:18 fetching corpus: 1860, signal 120587/122336 (executing program) 2025/08/29 08:54:18 fetching corpus: 1860, signal 120587/122373 (executing program) 2025/08/29 08:54:18 fetching corpus: 1860, signal 120587/122419 (executing program) 2025/08/29 08:54:18 fetching corpus: 1860, signal 120587/122459 (executing program) 2025/08/29 08:54:18 fetching corpus: 1860, signal 120587/122503 (executing program) 2025/08/29 08:54:18 fetching corpus: 1860, signal 120587/122550 (executing program) 2025/08/29 08:54:18 fetching corpus: 1860, signal 120587/122581 (executing program) 2025/08/29 08:54:18 fetching corpus: 1860, signal 120587/122620 (executing program) 2025/08/29 08:54:18 fetching corpus: 1860, signal 120587/122656 (executing program) 2025/08/29 08:54:18 fetching corpus: 1860, signal 120587/122695 (executing program) 2025/08/29 08:54:18 fetching corpus: 1860, signal 120587/122742 (executing program) 2025/08/29 08:54:18 fetching corpus: 1860, signal 120587/122782 (executing program) 2025/08/29 08:54:18 fetching corpus: 1860, signal 120587/122818 (executing program) 2025/08/29 08:54:18 fetching corpus: 1860, signal 120587/122856 (executing program) 2025/08/29 08:54:18 fetching corpus: 1860, signal 120587/122907 (executing program) 2025/08/29 08:54:18 fetching corpus: 1860, signal 120587/122932 (executing program) 2025/08/29 08:54:18 fetching corpus: 1860, signal 120587/122932 (executing program) 2025/08/29 08:54:21 starting 8 fuzzer processes 08:54:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x3}, 0x20) 08:54:21 executing program 1: r0 = getpid() process_vm_writev(r0, &(0x7f0000001440)=[{}, {&(0x7f0000000040)=""/141, 0x8d}, {&(0x7f0000000100)=""/106, 0x6a}, {0x0}], 0x4, &(0x7f0000001980)=[{&(0x7f00000014c0)=""/123, 0x7b}, {&(0x7f0000001540)=""/112, 0x70}, {&(0x7f00000015c0)=""/58, 0x3a}, {&(0x7f0000001600)=""/247, 0xf7}, {&(0x7f0000001700)=""/204, 0xcc}, {&(0x7f0000001800)=""/101, 0x65}, {&(0x7f0000001880)=""/97, 0x61}, {&(0x7f0000001900)=""/96, 0x60}], 0x8, 0x0) fork() 08:54:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 08:54:21 executing program 7: getresgid(&(0x7f0000002880), &(0x7f00000028c0), &(0x7f0000002900)) 08:54:21 executing program 2: r0 = inotify_init() ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0) 08:54:21 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x0) [ 68.839958] audit: type=1400 audit(1756457661.533:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:54:21 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) lseek(r0, 0x0, 0x0) 08:54:21 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3e, 0x0, 0x0) [ 70.038267] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.041021] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.042127] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.044195] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.044669] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.049754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.053114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.056052] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.058228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.058985] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.187068] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.199994] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.207293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.232728] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 70.238015] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 70.246734] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 70.248197] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 70.250932] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 70.255950] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 70.262655] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 70.264309] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.266173] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 70.268154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 70.271765] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.282193] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.286127] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 70.296796] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 70.299936] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 70.304619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.309468] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.313467] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.315797] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 70.320932] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.326189] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 70.336902] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.343223] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 70.371790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.385681] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.388058] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.395600] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.130980] Bluetooth: hci1: command tx timeout [ 72.131795] Bluetooth: hci0: command tx timeout [ 72.386838] Bluetooth: hci7: command tx timeout [ 72.387356] Bluetooth: hci6: command tx timeout [ 72.388009] Bluetooth: hci2: command tx timeout [ 72.450604] Bluetooth: hci4: command tx timeout [ 72.451317] Bluetooth: hci3: command tx timeout [ 72.451802] Bluetooth: hci5: command tx timeout [ 74.178493] Bluetooth: hci0: command tx timeout [ 74.178507] Bluetooth: hci1: command tx timeout [ 74.434575] Bluetooth: hci6: command tx timeout [ 74.434617] Bluetooth: hci2: command tx timeout [ 74.435209] Bluetooth: hci7: command tx timeout [ 74.498575] Bluetooth: hci5: command tx timeout [ 74.498992] Bluetooth: hci3: command tx timeout [ 74.499362] Bluetooth: hci4: command tx timeout [ 76.226470] Bluetooth: hci1: command tx timeout [ 76.227469] Bluetooth: hci0: command tx timeout [ 76.482523] Bluetooth: hci7: command tx timeout [ 76.483581] Bluetooth: hci2: command tx timeout [ 76.484598] Bluetooth: hci6: command tx timeout [ 76.547519] Bluetooth: hci4: command tx timeout [ 76.548273] Bluetooth: hci3: command tx timeout [ 76.549301] Bluetooth: hci5: command tx timeout [ 78.274649] Bluetooth: hci0: command tx timeout [ 78.275276] Bluetooth: hci1: command tx timeout [ 78.530481] Bluetooth: hci6: command tx timeout [ 78.531005] Bluetooth: hci2: command tx timeout [ 78.532183] Bluetooth: hci7: command tx timeout [ 78.594622] Bluetooth: hci3: command tx timeout [ 78.595104] Bluetooth: hci5: command tx timeout [ 78.595636] Bluetooth: hci4: command tx timeout [ 106.610104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.610816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.801918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.802613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.040487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.041132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.267994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.269348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:54:59 executing program 2: r0 = inotify_init() ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0) 08:55:00 executing program 2: r0 = inotify_init() ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0) [ 107.371716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.372346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:55:00 executing program 2: r0 = inotify_init() ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0) 08:55:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_SYNPROXY={0x4}, @CTA_MARK={0x8}]}, 0x28}}, 0x0) [ 107.537039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.537707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:55:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_SYNPROXY={0x4}, @CTA_MARK={0x8}]}, 0x28}}, 0x0) [ 107.632502] audit: type=1400 audit(1756457700.323:8): avc: denied { open } for pid=3863 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 107.640183] audit: type=1400 audit(1756457700.324:9): avc: denied { kernel } for pid=3863 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:55:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_SYNPROXY={0x4}, @CTA_MARK={0x8}]}, 0x28}}, 0x0) [ 107.689430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.690083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.759328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.759993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.852203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.852859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.894673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.895253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.952956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.953643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.027306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.027984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.108869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.109519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.162025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.162673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.211747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.212549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.240216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.240954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:55:01 executing program 1: r0 = getpid() process_vm_writev(r0, &(0x7f0000001440)=[{}, {&(0x7f0000000040)=""/141, 0x8d}, {&(0x7f0000000100)=""/106, 0x6a}, {0x0}], 0x4, &(0x7f0000001980)=[{&(0x7f00000014c0)=""/123, 0x7b}, {&(0x7f0000001540)=""/112, 0x70}, {&(0x7f00000015c0)=""/58, 0x3a}, {&(0x7f0000001600)=""/247, 0xf7}, {&(0x7f0000001700)=""/204, 0xcc}, {&(0x7f0000001800)=""/101, 0x65}, {&(0x7f0000001880)=""/97, 0x61}, {&(0x7f0000001900)=""/96, 0x60}], 0x8, 0x0) fork() 08:55:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_SYNPROXY={0x4}, @CTA_MARK={0x8}]}, 0x28}}, 0x0) 08:55:01 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3e, 0x0, 0x0) 08:55:01 executing program 7: getresgid(&(0x7f0000002880), &(0x7f00000028c0), &(0x7f0000002900)) 08:55:01 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x0) 08:55:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 08:55:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x3}, 0x20) 08:55:01 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) lseek(r0, 0x0, 0x0) 08:55:01 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3e, 0x0, 0x0) 08:55:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x3}, 0x20) 08:55:01 executing program 7: getresgid(&(0x7f0000002880), &(0x7f00000028c0), &(0x7f0000002900)) 08:55:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 08:55:01 executing program 1: r0 = getpid() process_vm_writev(r0, &(0x7f0000001440)=[{}, {&(0x7f0000000040)=""/141, 0x8d}, {&(0x7f0000000100)=""/106, 0x6a}, {0x0}], 0x4, &(0x7f0000001980)=[{&(0x7f00000014c0)=""/123, 0x7b}, {&(0x7f0000001540)=""/112, 0x70}, {&(0x7f00000015c0)=""/58, 0x3a}, {&(0x7f0000001600)=""/247, 0xf7}, {&(0x7f0000001700)=""/204, 0xcc}, {&(0x7f0000001800)=""/101, 0x65}, {&(0x7f0000001880)=""/97, 0x61}, {&(0x7f0000001900)=""/96, 0x60}], 0x8, 0x0) fork() 08:55:01 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) lseek(r0, 0x0, 0x0) 08:55:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x3}, 0x20) 08:55:01 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x0) 08:55:01 executing program 7: getresgid(&(0x7f0000002880), &(0x7f00000028c0), &(0x7f0000002900)) 08:55:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 08:55:01 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3e, 0x0, 0x0) 08:55:01 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) lseek(r0, 0x0, 0x0) 08:55:01 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x0) 08:55:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x3}, 0x20) 08:55:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x3}, 0x20) 08:55:01 executing program 1: r0 = getpid() process_vm_writev(r0, &(0x7f0000001440)=[{}, {&(0x7f0000000040)=""/141, 0x8d}, {&(0x7f0000000100)=""/106, 0x6a}, {0x0}], 0x4, &(0x7f0000001980)=[{&(0x7f00000014c0)=""/123, 0x7b}, {&(0x7f0000001540)=""/112, 0x70}, {&(0x7f00000015c0)=""/58, 0x3a}, {&(0x7f0000001600)=""/247, 0xf7}, {&(0x7f0000001700)=""/204, 0xcc}, {&(0x7f0000001800)=""/101, 0x65}, {&(0x7f0000001880)=""/97, 0x61}, {&(0x7f0000001900)=""/96, 0x60}], 0x8, 0x0) fork() 08:55:01 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) 08:55:01 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) 08:55:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x3}, 0x20) [ 108.881253] kmemleak: Found object by alias at 0x607f1a638cbc [ 108.881276] CPU: 0 UID: 0 PID: 3959 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 108.881295] Tainted: [W]=WARN [ 108.881298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 108.881306] Call Trace: [ 108.881310] [ 108.881315] dump_stack_lvl+0xca/0x120 [ 108.881341] __lookup_object+0x94/0xb0 [ 108.881358] delete_object_full+0x27/0x70 [ 108.881375] free_percpu+0x30/0x1160 [ 108.881396] ? arch_uprobe_clear_state+0x16/0x140 [ 108.881417] futex_hash_free+0x38/0xc0 [ 108.881432] mmput+0x2d3/0x390 [ 108.881451] do_exit+0x79d/0x2970 [ 108.881465] ? signal_wake_up_state+0x85/0x120 [ 108.881481] ? zap_other_threads+0x2b9/0x3a0 [ 108.881497] ? __pfx_do_exit+0x10/0x10 [ 108.881510] ? do_group_exit+0x1c3/0x2a0 [ 108.881523] ? lock_release+0xc8/0x290 [ 108.881541] do_group_exit+0xd3/0x2a0 [ 108.881556] __x64_sys_exit_group+0x3e/0x50 [ 108.881570] x64_sys_call+0x18c5/0x18d0 [ 108.881585] do_syscall_64+0xbf/0x360 [ 108.881597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.881608] RIP: 0033:0x7f0a9ea9ab19 [ 108.881617] Code: Unable to access opcode bytes at 0x7f0a9ea9aaef. [ 108.881622] RSP: 002b:00007fff954afa78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 108.881634] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f0a9ea9ab19 [ 108.881641] RDX: 00007f0a9ea4d72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 108.881648] RBP: 0000000000000000 R08: 0000001b2ce2001c R09: 0000000000000000 [ 108.881655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.881661] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff954afb60 [ 108.881679] [ 108.881682] kmemleak: Object (percpu) 0x607f1a638cb8 (size 8): [ 108.881689] kmemleak: comm "syz-executor.2", pid 3962, jiffies 4294775687 [ 108.881696] kmemleak: min_count = 1 [ 108.881700] kmemleak: count = 0 [ 108.881703] kmemleak: flags = 0x21 [ 108.881707] kmemleak: checksum = 0 [ 108.881710] kmemleak: backtrace: [ 108.881714] pcpu_alloc_noprof+0x87a/0x1170 [ 108.881729] perf_trace_event_init+0x366/0xa10 [ 108.881742] perf_trace_init+0x1a4/0x2f0 [ 108.881753] perf_tp_event_init+0xa6/0x120 [ 108.881770] perf_try_init_event+0x140/0x9f0 [ 108.881782] perf_event_alloc.part.0+0x118e/0x45f0 [ 108.881798] __do_sys_perf_event_open+0x719/0x2c20 [ 108.881810] do_syscall_64+0xbf/0x360 [ 108.881818] entry_SYSCALL_64_after_hwframe+0x77/0x7f 08:55:01 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) 08:55:01 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000140)) 08:55:01 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) 08:55:01 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000100)={0x0, 0x0}, 0x10) 08:55:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0xc, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 08:55:01 executing program 1: semtimedop(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) 08:55:01 executing program 6: prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffeff) nanosleep(&(0x7f0000000000), 0x0) [ 108.975729] kmemleak: Found object by alias at 0x607f1a638cbc [ 108.975752] CPU: 0 UID: 0 PID: 3965 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 108.975772] Tainted: [W]=WARN [ 108.975776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 108.975784] Call Trace: [ 108.975788] [ 108.975793] dump_stack_lvl+0xca/0x120 [ 108.975823] __lookup_object+0x94/0xb0 [ 108.975841] delete_object_full+0x27/0x70 [ 108.975857] free_percpu+0x30/0x1160 [ 108.975878] ? arch_uprobe_clear_state+0x16/0x140 [ 108.975899] futex_hash_free+0x38/0xc0 [ 108.975913] mmput+0x2d3/0x390 [ 108.975932] do_exit+0x79d/0x2970 [ 108.975950] ? __pfx_do_exit+0x10/0x10 [ 108.975964] ? find_held_lock+0x2b/0x80 [ 108.975982] ? get_signal+0x835/0x2340 [ 108.976002] do_group_exit+0xd3/0x2a0 [ 108.976017] get_signal+0x2315/0x2340 [ 108.976034] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 108.976051] ? __pfx_get_signal+0x10/0x10 [ 108.976067] ? __schedule+0xe91/0x3590 [ 108.976087] arch_do_signal_or_restart+0x80/0x790 [ 108.976105] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 108.976121] ? __x64_sys_futex+0x1c9/0x4d0 [ 108.976134] ? __x64_sys_futex+0x1d2/0x4d0 [ 108.976148] ? __x64_sys_openat+0x142/0x200 [ 108.976167] ? __pfx___x64_sys_futex+0x10/0x10 [ 108.976187] exit_to_user_mode_loop+0x8b/0x110 [ 108.976201] do_syscall_64+0x2f7/0x360 [ 108.976213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.976225] RIP: 0033:0x7f0a9ea9ab19 [ 108.976234] Code: Unable to access opcode bytes at 0x7f0a9ea9aaef. [ 108.976239] RSP: 002b:00007f0a9c010218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 108.976251] RAX: 0000000000000001 RBX: 00007f0a9ebadf68 RCX: 00007f0a9ea9ab19 [ 108.976259] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0a9ebadf6c [ 108.976266] RBP: 00007f0a9ebadf60 R08: 000000000000000e R09: 0000000000000000 [ 108.976273] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f0a9ebadf6c [ 108.976280] R13: 00007fff954af84f R14: 00007f0a9c010300 R15: 0000000000022000 [ 108.976296] [ 108.976300] kmemleak: Object (percpu) 0x607f1a638cb8 (size 8): [ 108.976307] kmemleak: comm "syz-executor.7", pid 3966, jiffies 4294775783 [ 108.976314] kmemleak: min_count = 1 [ 108.976318] kmemleak: count = 0 [ 108.976321] kmemleak: flags = 0x21 [ 108.976325] kmemleak: checksum = 0 [ 108.976329] kmemleak: backtrace: [ 108.976333] pcpu_alloc_noprof+0x87a/0x1170 [ 108.976347] perf_trace_event_init+0x366/0xa10 [ 108.976360] perf_trace_init+0x1a4/0x2f0 [ 108.976372] perf_tp_event_init+0xa6/0x120 [ 108.976388] perf_try_init_event+0x140/0x9f0 [ 108.976401] perf_event_alloc.part.0+0x118e/0x45f0 [ 108.976417] __do_sys_perf_event_open+0x719/0x2c20 [ 108.976430] do_syscall_64+0xbf/0x360 [ 108.976438] entry_SYSCALL_64_after_hwframe+0x77/0x7f 08:55:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0xc, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 08:55:01 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc018937e, &(0x7f0000000300)=ANY=[@ANYRESHEX]) 08:55:01 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000100)={0x0, 0x0}, 0x10) 08:55:01 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000140)) 08:55:01 executing program 1: semtimedop(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) 08:55:01 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc018937e, &(0x7f0000000300)=ANY=[@ANYRESHEX]) 08:55:01 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) 08:55:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0xc, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 08:55:02 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000100)={0x0, 0x0}, 0x10) 08:55:02 executing program 6: prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffeff) nanosleep(&(0x7f0000000000), 0x0) 08:55:02 executing program 1: semtimedop(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) 08:55:02 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) 08:55:02 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000044c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}, {&(0x7f0000000400)="9c", 0x1}], 0x3, 0x0, 0xa8}}], 0x1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000000)) 08:55:02 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000140)) 08:55:02 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc018937e, &(0x7f0000000300)=ANY=[@ANYRESHEX]) [ 109.888893] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI [ 109.889812] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 109.890507] CPU: 0 UID: 0 PID: 3999 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 109.891882] Tainted: [W]=WARN [ 109.892683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 109.894442] RIP: 0010:perf_tp_event+0x175/0xe70 [ 109.895431] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 109.899707] RSP: 0018:ffff88801457f800 EFLAGS: 00010212 [ 109.900141] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 109.900710] RDX: ffff888017940000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 109.901270] RBP: ffff88801457fa70 R08: ffff88806ce31340 R09: ffffe8ffffc15cb8 [ 109.901833] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 109.902406] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 109.902971] FS: 00005555594ea400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 109.903600] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.904059] CR2: 00000000200044c0 CR3: 0000000044693000 CR4: 0000000000350ef0 [ 109.904621] Call Trace: [ 109.904831] [ 109.905020] ? __pfx_perf_tp_event+0x10/0x10 [ 109.905375] ? do_raw_spin_unlock+0x53/0x220 [ 109.905737] ? __kasan_unpoison_pages+0x2f/0x40 [ 109.906127] ? get_page_from_freelist+0x194a/0x24b0 [ 109.906536] ? should_fail_alloc_page+0xe8/0x110 [ 109.906921] ? trace_mm_page_alloc+0xfc/0x150 [ 109.907283] ? __alloc_frozen_pages_noprof+0x296/0x1f20 [ 109.907715] ? __lock_acquire+0xc65/0x1b70 [ 109.908055] ? perf_trace_run_bpf_submit+0xef/0x180 [ 109.908454] perf_trace_run_bpf_submit+0xef/0x180 [ 109.908845] perf_trace_lock+0x337/0x5d0 [ 109.909179] ? __pfx_perf_trace_lock+0x10/0x10 [ 109.909546] ? lock_acquire+0x15e/0x2f0 [ 109.909871] ? futex_ref_get+0x48/0x300 [ 109.910201] ? futex_ref_get+0x114/0x300 [ 109.910528] ? futex_hash+0x15c/0x390 [ 109.910835] lock_release+0x1ab/0x290 [ 109.911148] ? futex_hash+0x15c/0x390 [ 109.911452] futex_ref_get+0x119/0x300 [ 109.911767] ? futex_hash+0x15c/0x390 [ 109.912073] futex_hash+0x70/0x390 [ 109.912362] futex_wake+0x143/0x540 [ 109.912665] ? lock_release+0xc8/0x290 [ 109.912980] ? __pfx_futex_wake+0x10/0x10 [ 109.913315] ? __handle_mm_fault+0x753/0x3260 [ 109.913688] ? perf_trace_lock+0xb5/0x5d0 [ 109.914033] do_futex+0x26d/0x370 [ 109.914320] ? __pfx_do_futex+0x10/0x10 [ 109.914638] ? __pfx_perf_trace_lock+0x10/0x10 [ 109.915009] ? find_held_lock+0x2b/0x80 [ 109.915334] __x64_sys_futex+0x1c9/0x4d0 [ 109.915667] ? exc_page_fault+0xb0/0x180 [ 109.916004] ? __pfx___x64_sys_futex+0x10/0x10 [ 109.916379] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 109.916796] do_syscall_64+0xbf/0x360 [ 109.917103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.917510] RIP: 0033:0x7f0a9ea9ab19 [ 109.917805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 109.919235] RSP: 002b:00007fff954af8c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 109.919832] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0a9ea9ab19 [ 109.920392] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0a9ebadf68 [ 109.920955] RBP: 00007f0a9ebadf60 R08: 0000000000000000 R09: 0000000000000000 [ 109.921516] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a9ebb2340 [ 109.922090] R13: 00007fff954af9d0 R14: 00007f0a9ebadf60 R15: 000000000001acbb [ 109.922657] [ 109.922847] Modules linked in: [ 109.923130] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI [ 109.924009] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 109.924694] CPU: 0 UID: 0 PID: 3999 Comm: syz-executor.3 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 109.925642] Tainted: [D]=DIE, [W]=WARN [ 109.925944] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 109.926604] RIP: 0010:perf_tp_event+0x175/0xe70 [ 109.926980] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 109.928424] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012 [ 109.928843] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 109.929403] RDX: ffff888017940000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 109.929960] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc15cb8 [ 109.930551] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000 [ 109.931123] R13: 000000000000002c R14: ffff88806ce31490 R15: dffffc0000000000 [ 109.931693] FS: 00005555594ea400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 109.932334] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.932798] CR2: 00000000200044c0 CR3: 0000000044693000 CR4: 0000000000350ef0 [ 109.933368] Call Trace: [ 109.933579] [ 109.933764] ? __pfx_perf_tp_event+0x10/0x10 [ 109.934134] ? stack_depot_save_flags+0x2c/0xa20 [ 109.934520] ? stack_depot_save_flags+0x2c/0xa20 [ 109.934902] ? kasan_save_stack+0x34/0x50 [ 109.935239] ? kasan_save_stack+0x24/0x50 [ 109.935575] ? kasan_save_track+0x14/0x30 [ 109.935909] ? __kasan_save_free_info+0x3a/0x60 [ 109.936284] ? __kasan_slab_free+0x3f/0x50 [ 109.936629] ? kmem_cache_free+0x2a1/0x540 [ 109.936968] ? rcu_core+0x7c8/0x1800 [ 109.937273] ? handle_softirqs+0x1b1/0x770 [ 109.937622] ? __irq_exit_rcu+0xc4/0x100 [ 109.937952] ? irq_exit_rcu+0x9/0x20 [ 109.938259] ? sysvec_apic_timer_interrupt+0x70/0x80 [ 109.938669] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 109.939102] ? __sanitizer_cov_trace_pc+0x8/0x80 [ 109.939488] ? __tlb_remove_folio_pages_size.constprop.0+0x169/0x560 [ 109.940005] ? unmap_page_range+0xe86/0x36d0 [ 109.940366] ? unmap_single_vma.constprop.0+0x153/0x230 [ 109.940794] ? unmap_vmas+0x1d6/0x430 [ 109.941106] ? exit_mmap+0x181/0xaa0 [ 109.941416] ? mmput+0xd5/0x390 [ 109.941693] ? do_exit+0x79d/0x2970 [ 109.942001] ? do_group_exit+0xd3/0x2a0 [ 109.942323] ? __x64_sys_exit_group+0x3e/0x50 [ 109.942685] ? x64_sys_call+0x18c5/0x18d0 [ 109.943020] ? do_syscall_64+0xbf/0x360 [ 109.943343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.943770] ? x64_sys_call+0x18c5/0x18d0 [ 109.944106] ? do_syscall_64+0xbf/0x360 [ 109.944428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.944854] ? lock_is_held_type+0x9e/0x120 [ 109.945214] ? perf_trace_run_bpf_submit+0xef/0x180 [ 109.945620] ? match_held_lock+0xb0/0xd0 [ 109.945951] perf_trace_run_bpf_submit+0xef/0x180 [ 109.946352] perf_trace_lock+0x337/0x5d0 [ 109.946688] ? __pfx_perf_trace_lock+0x10/0x10 [ 109.947064] ? find_held_lock+0x2b/0x80 [ 109.947391] ? hrtimer_interrupt+0x114/0x830 [ 109.947749] lock_release+0x1ab/0x290 [ 109.948061] ktime_get_update_offsets_now+0xab/0x3c0 [ 109.948474] ? hrtimer_interrupt+0x114/0x830 [ 109.948834] hrtimer_interrupt+0x114/0x830 [ 109.949179] ? __pfx_flush_tlb_func+0x10/0x10 [ 109.949545] ? trace_csd_function_exit+0x134/0x190 [ 109.949943] ? __flush_smp_call_function_queue+0x28c/0x740 [ 109.950416] __sysvec_apic_timer_interrupt+0xbb/0x330 [ 109.950863] sysvec_apic_timer_interrupt+0x6b/0x80 [ 109.951272] [ 109.951458] [ 109.951648] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 109.952089] RIP: 0010:oops_exit+0x0/0x50 [ 109.952445] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27 [ 109.953931] RSP: 0018:ffff88801457f690 EFLAGS: 00000202 [ 109.954373] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff8139f06f [ 109.954963] RDX: ffff888017940000 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 109.955550] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90 [ 109.956132] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801457f758 [ 109.956714] R13: 0000000000000000 R14: dffffc0020000032 R15: 0000000000000000 [ 109.957310] ? add_taint+0x5f/0xd0 [ 109.957617] ? oops_end+0x4a/0xe0 [ 109.957916] oops_end+0x65/0xe0 [ 109.958221] exc_general_protection+0x1a2/0x330 [ 109.958632] asm_exc_general_protection+0x26/0x30 [ 109.959043] RIP: 0010:perf_tp_event+0x175/0xe70 [ 109.959435] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 109.960979] RSP: 0018:ffff88801457f800 EFLAGS: 00010212 [ 109.961423] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 109.962015] RDX: ffff888017940000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 109.962604] RBP: ffff88801457fa70 R08: ffff88806ce31340 R09: ffffe8ffffc15cb8 [ 109.963180] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 109.963751] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 109.964330] ? perf_tp_event+0x167/0xe70 [ 109.964685] ? __pfx_perf_tp_event+0x10/0x10 [ 109.965038] ? do_raw_spin_unlock+0x53/0x220 [ 109.965407] ? __kasan_unpoison_pages+0x2f/0x40 [ 109.965784] ? get_page_from_freelist+0x194a/0x24b0 [ 109.966214] ? should_fail_alloc_page+0xe8/0x110 [ 109.966619] ? trace_mm_page_alloc+0xfc/0x150 [ 109.966997] ? __alloc_frozen_pages_noprof+0x296/0x1f20 [ 109.967431] ? __lock_acquire+0xc65/0x1b70 [ 109.967791] ? perf_trace_run_bpf_submit+0xef/0x180 [ 109.968215] perf_trace_run_bpf_submit+0xef/0x180 [ 109.968630] perf_trace_lock+0x337/0x5d0 [ 109.968969] ? __pfx_perf_trace_lock+0x10/0x10 [ 109.969353] ? lock_acquire+0x15e/0x2f0 [ 109.969687] ? futex_ref_get+0x48/0x300 [ 109.970027] ? futex_ref_get+0x114/0x300 [ 109.970362] ? futex_hash+0x15c/0x390 [ 109.970677] lock_release+0x1ab/0x290 [ 109.970998] ? futex_hash+0x15c/0x390 [ 109.971314] futex_ref_get+0x119/0x300 [ 109.971640] ? futex_hash+0x15c/0x390 [ 109.971954] futex_hash+0x70/0x390 [ 109.972247] futex_wake+0x143/0x540 [ 109.972569] ? lock_release+0xc8/0x290 [ 109.972892] ? __pfx_futex_wake+0x10/0x10 [ 109.973237] ? __handle_mm_fault+0x753/0x3260 [ 109.973622] ? perf_trace_lock+0xb5/0x5d0 [ 109.973973] do_futex+0x26d/0x370 [ 109.974267] ? __pfx_do_futex+0x10/0x10 [ 109.974603] ? __pfx_perf_trace_lock+0x10/0x10 [ 109.974973] ? find_held_lock+0x2b/0x80 [ 109.975311] __x64_sys_futex+0x1c9/0x4d0 [ 109.975636] ? exc_page_fault+0xb0/0x180 [ 109.975974] ? __pfx___x64_sys_futex+0x10/0x10 [ 109.976363] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 109.976791] do_syscall_64+0xbf/0x360 [ 109.977101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.977533] RIP: 0033:0x7f0a9ea9ab19 [ 109.977843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 109.979312] RSP: 002b:00007fff954af8c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 109.979926] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0a9ea9ab19 [ 109.980515] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0a9ebadf68 [ 109.981084] RBP: 00007f0a9ebadf60 R08: 0000000000000000 R09: 0000000000000000 [ 109.981674] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a9ebb2340 [ 109.982266] R13: 00007fff954af9d0 R14: 00007f0a9ebadf60 R15: 000000000001acbb [ 109.982852] [ 109.983041] Modules linked in: [ 109.983316] ---[ end trace 0000000000000000 ]--- [ 109.983699] RIP: 0010:perf_tp_event+0x175/0xe70 [ 109.984083] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 109.985542] RSP: 0018:ffff88801457f800 EFLAGS: 00010212 [ 109.985974] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 109.986558] RDX: ffff888017940000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 109.987134] RBP: ffff88801457fa70 R08: ffff88806ce31340 R09: ffffe8ffffc15cb8 [ 109.987711] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 109.988302] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 109.988895] FS: 00005555594ea400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 109.989552] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.990028] CR2: 00000000200044c0 CR3: 0000000044693000 CR4: 0000000000350ef0 [ 109.990607] Kernel panic - not syncing: Fatal exception in interrupt [ 109.991333] Kernel Offset: disabled [ 109.991634] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 08:55:02 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff88801457f0f0 R8 =0000000000000000 R9 =ffffed100153e046 R10=0000000000000020 R11=0000000065646f43 R12=0000000000000020 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555594ea400 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000200044c0 CR3=0000000044693000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000ff00000000000000000000000000 XMM01=000001000000000000000000000000ff XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007f0a9eb817c800007f0a9eb817c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce3de00 RCX=ffffffff816880fc RDX=ffff88801456d280 RSI=ffffffff816880d6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff8880194c76f8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=1ffff1100d9e6bb1 R12=ffffed100d9c7bc1 R13=ffff88806ce3de08 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff816880d8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555eb8e400 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe3300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020000100 CR3=0000000040d8f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000ff0000 XMM01=6a6e695f31313230385f7a7973006273 XMM02=000000000000000000000000ff000000 XMM03=00007ff40504d7c800007ff40504d7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000