Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:28343' (ECDSA) to the list of known hosts. 2025/08/29 09:13:49 fuzzer started 2025/08/29 09:13:49 dialing manager at localhost:43077 syzkaller login: [ 45.056914] cgroup: Unknown subsys name 'net' [ 45.107366] cgroup: Unknown subsys name 'cpuset' [ 45.125773] cgroup: Unknown subsys name 'rlimit' 2025/08/29 09:14:01 syscalls: 2214 2025/08/29 09:14:01 code coverage: enabled 2025/08/29 09:14:01 comparison tracing: enabled 2025/08/29 09:14:01 extra coverage: enabled 2025/08/29 09:14:01 setuid sandbox: enabled 2025/08/29 09:14:01 namespace sandbox: enabled 2025/08/29 09:14:01 Android sandbox: enabled 2025/08/29 09:14:01 fault injection: enabled 2025/08/29 09:14:01 leak checking: enabled 2025/08/29 09:14:01 net packet injection: enabled 2025/08/29 09:14:01 net device setup: enabled 2025/08/29 09:14:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 09:14:01 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 09:14:01 USB emulation: enabled 2025/08/29 09:14:01 hci packet injection: enabled 2025/08/29 09:14:01 wifi device emulation: enabled 2025/08/29 09:14:01 802.15.4 emulation: enabled 2025/08/29 09:14:01 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 09:14:01 fetching corpus: 50, signal 20864/24253 (executing program) 2025/08/29 09:14:02 fetching corpus: 100, signal 32037/36687 (executing program) 2025/08/29 09:14:02 fetching corpus: 150, signal 42682/48310 (executing program) 2025/08/29 09:14:02 fetching corpus: 200, signal 49868/56446 (executing program) 2025/08/29 09:14:02 fetching corpus: 250, signal 58679/65833 (executing program) 2025/08/29 09:14:02 fetching corpus: 300, signal 61653/69685 (executing program) 2025/08/29 09:14:02 fetching corpus: 350, signal 65109/73959 (executing program) 2025/08/29 09:14:02 fetching corpus: 400, signal 68457/77970 (executing program) 2025/08/29 09:14:02 fetching corpus: 450, signal 71491/81735 (executing program) 2025/08/29 09:14:02 fetching corpus: 500, signal 74645/85509 (executing program) 2025/08/29 09:14:03 fetching corpus: 550, signal 79329/90440 (executing program) 2025/08/29 09:14:03 fetching corpus: 600, signal 82435/93891 (executing program) 2025/08/29 09:14:03 fetching corpus: 650, signal 84544/96484 (executing program) 2025/08/29 09:14:03 fetching corpus: 700, signal 87169/99425 (executing program) 2025/08/29 09:14:03 fetching corpus: 750, signal 90135/102567 (executing program) 2025/08/29 09:14:03 fetching corpus: 800, signal 91893/104673 (executing program) 2025/08/29 09:14:03 fetching corpus: 850, signal 93445/106571 (executing program) 2025/08/29 09:14:03 fetching corpus: 900, signal 96731/109745 (executing program) 2025/08/29 09:14:04 fetching corpus: 950, signal 97902/111298 (executing program) 2025/08/29 09:14:04 fetching corpus: 1000, signal 98889/112632 (executing program) 2025/08/29 09:14:04 fetching corpus: 1050, signal 100352/114312 (executing program) 2025/08/29 09:14:04 fetching corpus: 1100, signal 102444/116370 (executing program) 2025/08/29 09:14:04 fetching corpus: 1150, signal 103836/117853 (executing program) 2025/08/29 09:14:04 fetching corpus: 1200, signal 105290/119420 (executing program) 2025/08/29 09:14:04 fetching corpus: 1250, signal 106826/120991 (executing program) 2025/08/29 09:14:04 fetching corpus: 1300, signal 108000/122249 (executing program) 2025/08/29 09:14:04 fetching corpus: 1350, signal 109873/123902 (executing program) 2025/08/29 09:14:05 fetching corpus: 1400, signal 111110/125132 (executing program) 2025/08/29 09:14:05 fetching corpus: 1450, signal 113036/126727 (executing program) 2025/08/29 09:14:05 fetching corpus: 1500, signal 114053/127759 (executing program) 2025/08/29 09:14:05 fetching corpus: 1550, signal 115091/128797 (executing program) 2025/08/29 09:14:05 fetching corpus: 1600, signal 116187/129834 (executing program) 2025/08/29 09:14:05 fetching corpus: 1650, signal 117318/130852 (executing program) 2025/08/29 09:14:05 fetching corpus: 1700, signal 118466/131877 (executing program) 2025/08/29 09:14:05 fetching corpus: 1750, signal 119570/132793 (executing program) 2025/08/29 09:14:06 fetching corpus: 1800, signal 120470/133584 (executing program) 2025/08/29 09:14:06 fetching corpus: 1850, signal 121261/134300 (executing program) 2025/08/29 09:14:06 fetching corpus: 1900, signal 122327/135161 (executing program) 2025/08/29 09:14:06 fetching corpus: 1950, signal 123267/135887 (executing program) 2025/08/29 09:14:06 fetching corpus: 2000, signal 124430/136676 (executing program) 2025/08/29 09:14:06 fetching corpus: 2050, signal 125448/137452 (executing program) 2025/08/29 09:14:06 fetching corpus: 2100, signal 126439/138111 (executing program) 2025/08/29 09:14:06 fetching corpus: 2150, signal 127189/138666 (executing program) 2025/08/29 09:14:06 fetching corpus: 2200, signal 127982/139240 (executing program) 2025/08/29 09:14:06 fetching corpus: 2250, signal 128631/139737 (executing program) 2025/08/29 09:14:06 fetching corpus: 2300, signal 129712/140434 (executing program) 2025/08/29 09:14:07 fetching corpus: 2350, signal 130740/141014 (executing program) 2025/08/29 09:14:07 fetching corpus: 2400, signal 131417/141439 (executing program) 2025/08/29 09:14:07 fetching corpus: 2450, signal 132149/141863 (executing program) 2025/08/29 09:14:07 fetching corpus: 2500, signal 132826/142291 (executing program) 2025/08/29 09:14:07 fetching corpus: 2550, signal 133882/142758 (executing program) 2025/08/29 09:14:07 fetching corpus: 2600, signal 134803/143184 (executing program) 2025/08/29 09:14:07 fetching corpus: 2650, signal 135387/143538 (executing program) 2025/08/29 09:14:07 fetching corpus: 2700, signal 136135/143833 (executing program) 2025/08/29 09:14:07 fetching corpus: 2750, signal 137018/144169 (executing program) 2025/08/29 09:14:08 fetching corpus: 2800, signal 137697/144471 (executing program) 2025/08/29 09:14:08 fetching corpus: 2850, signal 138346/144696 (executing program) 2025/08/29 09:14:08 fetching corpus: 2900, signal 138888/144882 (executing program) 2025/08/29 09:14:08 fetching corpus: 2950, signal 139457/145105 (executing program) 2025/08/29 09:14:08 fetching corpus: 3000, signal 139896/145283 (executing program) 2025/08/29 09:14:08 fetching corpus: 3050, signal 140399/145427 (executing program) 2025/08/29 09:14:08 fetching corpus: 3100, signal 141131/145607 (executing program) 2025/08/29 09:14:08 fetching corpus: 3150, signal 141780/145764 (executing program) 2025/08/29 09:14:08 fetching corpus: 3200, signal 142294/145924 (executing program) 2025/08/29 09:14:09 fetching corpus: 3250, signal 143040/146045 (executing program) 2025/08/29 09:14:09 fetching corpus: 3300, signal 143723/146151 (executing program) 2025/08/29 09:14:09 fetching corpus: 3350, signal 144141/146222 (executing program) 2025/08/29 09:14:09 fetching corpus: 3359, signal 144261/146267 (executing program) 2025/08/29 09:14:09 fetching corpus: 3359, signal 144261/146291 (executing program) 2025/08/29 09:14:09 fetching corpus: 3359, signal 144261/146316 (executing program) 2025/08/29 09:14:09 fetching corpus: 3359, signal 144261/146316 (executing program) 2025/08/29 09:14:11 starting 8 fuzzer processes 09:14:11 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r1, r0, 0x0, 0x0) 09:14:11 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000002bc0)={0x3, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 09:14:11 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendmmsg$inet6(r0, &(0x7f0000006100)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="5c6d24a9aaba88e3", 0x8}], 0x1}}], 0x1, 0x0) 09:14:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x45, 0x0, &(0x7f0000007dc0)) [ 65.516587] audit: type=1400 audit(1756458851.438:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:14:11 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140181, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000400)='\n', 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) dup2(r1, r0) 09:14:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 09:14:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() pidfd_open(r0, 0x0) perf_event_open(0x0, r0, 0x9, 0xffffffffffffffff, 0x0) 09:14:11 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0xff37, &(0x7f0000000280)=""/37}, &(0x7f00000002c0)="46292ffad3f1", 0x0, 0xfff, 0x0, 0x0, 0x0}) [ 66.650054] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.653450] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.655783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.662974] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.666789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.704647] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.707903] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.710216] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.716392] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.718579] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.841825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.870522] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.874615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.881348] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.882760] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.893498] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.899182] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.900684] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.905286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.906348] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.930054] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.933032] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.936383] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 66.938620] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 66.941762] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 66.943637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.947733] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 66.949369] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 66.952362] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.954885] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 66.958242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.959540] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 66.977297] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 66.983439] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 67.006050] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 67.007388] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 67.011360] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 67.021583] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 67.035377] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 67.035508] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 68.743046] Bluetooth: hci1: command tx timeout [ 68.743062] Bluetooth: hci0: command tx timeout [ 68.997354] Bluetooth: hci2: command tx timeout [ 68.998062] Bluetooth: hci4: command tx timeout [ 69.126284] Bluetooth: hci3: command tx timeout [ 69.126378] Bluetooth: hci6: command tx timeout [ 69.126893] Bluetooth: hci7: command tx timeout [ 69.128094] Bluetooth: hci5: command tx timeout [ 70.789238] Bluetooth: hci0: command tx timeout [ 70.791152] Bluetooth: hci1: command tx timeout [ 71.045246] Bluetooth: hci2: command tx timeout [ 71.047137] Bluetooth: hci4: command tx timeout [ 71.173314] Bluetooth: hci6: command tx timeout [ 71.173721] Bluetooth: hci7: command tx timeout [ 71.174169] Bluetooth: hci3: command tx timeout [ 71.174626] Bluetooth: hci5: command tx timeout [ 72.838219] Bluetooth: hci1: command tx timeout [ 72.838243] Bluetooth: hci0: command tx timeout [ 73.095152] Bluetooth: hci4: command tx timeout [ 73.095172] Bluetooth: hci2: command tx timeout [ 73.222191] Bluetooth: hci3: command tx timeout [ 73.222457] Bluetooth: hci5: command tx timeout [ 73.222648] Bluetooth: hci7: command tx timeout [ 73.223022] Bluetooth: hci6: command tx timeout [ 74.885181] Bluetooth: hci1: command tx timeout [ 74.886262] Bluetooth: hci0: command tx timeout [ 75.141357] Bluetooth: hci2: command tx timeout [ 75.141801] Bluetooth: hci4: command tx timeout [ 75.269352] Bluetooth: hci7: command tx timeout [ 75.270082] Bluetooth: hci5: command tx timeout [ 75.270789] Bluetooth: hci6: command tx timeout [ 75.270834] Bluetooth: hci3: command tx timeout [ 111.106565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.107257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.287656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.288420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.532701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.533561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:14:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x45, 0x0, &(0x7f0000007dc0)) [ 111.699060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.700193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:14:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x45, 0x0, &(0x7f0000007dc0)) 09:14:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x45, 0x0, &(0x7f0000007dc0)) 09:14:57 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') [ 111.892199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.893326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:14:57 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') [ 111.978274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.978892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:14:58 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') [ 112.109534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.110401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:14:58 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 09:14:58 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') [ 112.376159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.376752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.397424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.398696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.552698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.553728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.669877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.670660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.710620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.711254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.742307] audit: type=1400 audit(1756458898.664:8): avc: denied { open } for pid=3889 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 112.751756] audit: type=1400 audit(1756458898.664:9): avc: denied { kernel } for pid=3889 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 112.763040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.763761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.847408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.848019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.965746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.967107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.038666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.039930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:14:59 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r1, r0, 0x0, 0x0) 09:14:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 09:14:59 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendmmsg$inet6(r0, &(0x7f0000006100)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="5c6d24a9aaba88e3", 0x8}], 0x1}}], 0x1, 0x0) 09:14:59 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 09:14:59 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140181, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000400)='\n', 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) dup2(r1, r0) 09:14:59 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0xff37, &(0x7f0000000280)=""/37}, &(0x7f00000002c0)="46292ffad3f1", 0x0, 0xfff, 0x0, 0x0, 0x0}) 09:14:59 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000002bc0)={0x3, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 09:14:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() pidfd_open(r0, 0x0) perf_event_open(0x0, r0, 0x9, 0xffffffffffffffff, 0x0) 09:14:59 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000002bc0)={0x3, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 09:14:59 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 09:14:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() pidfd_open(r0, 0x0) perf_event_open(0x0, r0, 0x9, 0xffffffffffffffff, 0x0) 09:14:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 09:14:59 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendmmsg$inet6(r0, &(0x7f0000006100)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="5c6d24a9aaba88e3", 0x8}], 0x1}}], 0x1, 0x0) 09:14:59 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0xff37, &(0x7f0000000280)=""/37}, &(0x7f00000002c0)="46292ffad3f1", 0x0, 0xfff, 0x0, 0x0, 0x0}) 09:14:59 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r1, r0, 0x0, 0x0) 09:14:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() pidfd_open(r0, 0x0) perf_event_open(0x0, r0, 0x9, 0xffffffffffffffff, 0x0) 09:14:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 09:14:59 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000002bc0)={0x3, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 09:14:59 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendmmsg$inet6(r0, &(0x7f0000006100)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="5c6d24a9aaba88e3", 0x8}], 0x1}}], 0x1, 0x0) 09:14:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() pidfd_open(r0, 0x0) perf_event_open(0x0, r0, 0x9, 0xffffffffffffffff, 0x0) 09:14:59 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0xff37, &(0x7f0000000280)=""/37}, &(0x7f00000002c0)="46292ffad3f1", 0x0, 0xfff, 0x0, 0x0, 0x0}) 09:14:59 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140181, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000400)='\n', 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) dup2(r1, r0) [ 114.107854] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 114.109655] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 114.111876] CPU: 1 UID: 0 PID: 3946 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 114.117997] Tainted: [W]=WARN [ 114.118572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 114.120050] RIP: 0010:perf_tp_event+0x175/0xe70 [ 114.120907] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 114.124121] RSP: 0018:ffff888044667800 EFLAGS: 00010212 [ 114.125082] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 114.126339] RDX: ffff888017011b80 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 114.127610] RBP: ffff888044667a70 R08: ffff88806cf31340 R09: ffffe8ffffd15eb8 [ 114.128895] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 114.130155] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 114.131438] FS: 000055555a49e400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 114.132880] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.133910] CR2: 00007f1189757018 CR3: 000000001ff76000 CR4: 0000000000350ef0 [ 114.135169] Call Trace: [ 114.135655] [ 114.136074] ? arch_scale_cpu_capacity+0x17/0xa0 [ 114.136944] ? __pfx_perf_tp_event+0x10/0x10 [ 114.137756] ? __asan_memset+0x24/0x50 [ 114.138482] ? lock_release+0xc8/0x290 [ 114.139206] ? __pfx_sched_balance_find_dst_group+0x10/0x10 [ 114.140223] ? __lock_acquire+0x694/0x1b70 [ 114.140992] ? trace_sched_set_need_resched_tp+0xd4/0x110 [ 114.141995] ? __resched_curr+0x2a2/0x330 [ 114.142753] ? __pfx___resched_curr+0x10/0x10 [ 114.143580] ? perf_trace_run_bpf_submit+0xef/0x180 [ 114.144498] perf_trace_run_bpf_submit+0xef/0x180 [ 114.145382] perf_trace_lock+0x337/0x5d0 [ 114.146137] ? __pfx_perf_trace_lock+0x10/0x10 [ 114.146966] ? lock_acquire+0x15e/0x2f0 [ 114.147699] ? futex_ref_get+0x48/0x300 [ 114.148418] ? futex_ref_get+0x114/0x300 [ 114.149151] ? futex_hash+0x15c/0x390 [ 114.149841] lock_release+0x1ab/0x290 [ 114.150537] ? futex_hash+0x15c/0x390 [ 114.151210] futex_ref_get+0x119/0x300 [ 114.151993] ? futex_hash+0x15c/0x390 [ 114.152676] futex_hash+0x70/0x390 [ 114.153305] futex_wake+0x143/0x540 [ 114.153950] ? find_held_lock+0x2b/0x80 [ 114.154655] ? __pfx_futex_wake+0x10/0x10 [ 114.155411] do_futex+0x26d/0x370 [ 114.156176] ? __pfx_do_futex+0x10/0x10 [ 114.156805] ? lock_acquire+0x15e/0x2f0 [ 114.157431] __x64_sys_futex+0x1c9/0x4d0 [ 114.158055] ? __might_fault+0xe0/0x190 [ 114.158669] ? __pfx___x64_sys_futex+0x10/0x10 [ 114.159370] ? syscall_trace_enter+0x1cf/0x240 [ 114.160139] ? lock_release+0xc8/0x290 [ 114.160747] do_syscall_64+0xbf/0x360 [ 114.161345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.162127] RIP: 0033:0x7f01e1385b19 [ 114.162696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 114.165437] RSP: 002b:00007ffe5ed6b998 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 114.166580] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f01e1385b19 [ 114.167674] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f01e1498f68 [ 114.168758] RBP: 00007f01e1498f60 R08: 00007f01de8fb700 R09: 0000000000000000 [ 114.169831] R10: 00007f01de8fb700 R11: 0000000000000246 R12: 00007f01e149da68 [ 114.170903] R13: 00007ffe5ed6baa0 R14: 00007f01e1498f60 R15: 000000000001bd3a [ 114.172021] [ 114.172396] Modules linked in: [ 114.172908] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI [ 114.174492] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 114.175714] CPU: 0 UID: 0 PID: 3948 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 114.177343] Tainted: [D]=DIE, [W]=WARN [ 114.177923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 114.179144] RIP: 0010:perf_tp_event+0x175/0xe70 [ 114.179877] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 114.182541] RSP: 0018:ffff888042af7800 EFLAGS: 00010212 [ 114.183330] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 114.184406] RDX: ffff888019323700 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 114.185460] RBP: ffff888042af7a70 R08: ffff88806ce31340 R09: ffffe8ffffc15eb8 [ 114.186514] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 114.187563] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 114.188641] FS: 000055555c3f4400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 114.189828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.190703] CR2: 00007f4fd7ba4000 CR3: 0000000013ce4000 CR4: 0000000000350ef0 [ 114.191764] Call Trace: [ 114.192164] [ 114.192525] ? __pfx_perf_tp_event+0x10/0x10 [ 114.193206] ? perf_trace_lock+0xb5/0x5d0 [ 114.193838] ? __virt_addr_valid+0x100/0x5d0 [ 114.194518] ? perf_trace_lock+0xb5/0x5d0 [ 114.195144] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 114.195984] ? perf_trace_lock+0xb5/0x5d0 [ 114.196610] ? perf_trace_lock+0xb5/0x5d0 [ 114.197245] ? __pfx_perf_trace_lock+0x10/0x10 [ 114.197933] ? page_ref_add_unless.constprop.0+0x118/0x390 [ 114.198772] ? filemap_get_entry+0x1b1/0x3b0 [ 114.199446] ? perf_trace_lock+0xb5/0x5d0 [ 114.200093] ? perf_trace_lock+0xb5/0x5d0 [ 114.200725] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 114.201524] ? css_rstat_updated+0x1b8/0x4d0 [ 114.202203] ? perf_trace_run_bpf_submit+0xef/0x180 [ 114.202955] perf_trace_run_bpf_submit+0xef/0x180 [ 114.203704] perf_trace_lock+0x337/0x5d0 [ 114.204332] ? __pfx_perf_trace_lock+0x10/0x10 [ 114.205017] ? do_wp_page+0xb30/0x3430 [ 114.205623] ? get_futex_key+0x592/0x14a0 [ 114.206249] ? futex_ref_get+0x114/0x300 [ 114.206855] ? futex_hash+0x15c/0x390 [ 114.207432] lock_release+0x1ab/0x290 [ 114.208026] ? futex_hash+0x15c/0x390 [ 114.208606] futex_ref_get+0x119/0x300 [ 114.209194] ? futex_hash+0x15c/0x390 [ 114.209767] futex_hash+0x70/0x390 [ 114.210315] futex_wake+0x143/0x540 [ 114.210882] ? ___pte_offset_map+0x176/0x370 [ 114.211556] ? __pfx_futex_wake+0x10/0x10 [ 114.212198] ? __handle_mm_fault+0x753/0x3260 [ 114.212893] ? perf_trace_lock+0xb5/0x5d0 [ 114.213518] ? __pfx___handle_mm_fault+0x10/0x10 [ 114.214241] do_futex+0x26d/0x370 [ 114.214781] ? __pfx_do_futex+0x10/0x10 [ 114.215386] ? __pfx_perf_trace_lock+0x10/0x10 [ 114.216084] ? handle_mm_fault+0x590/0x9b0 [ 114.216732] __x64_sys_futex+0x1c9/0x4d0 [ 114.217352] ? __might_fault+0xe0/0x190 [ 114.217961] ? __pfx___x64_sys_futex+0x10/0x10 [ 114.218646] ? syscall_trace_enter+0x1cf/0x240 [ 114.219340] ? lock_release+0x1c7/0x290 [ 114.219961] do_syscall_64+0xbf/0x360 [ 114.220548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.221319] RIP: 0033:0x7f4fd7a94b19 [ 114.221880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 114.224530] RSP: 002b:00007ffd3a133c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 114.225642] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4fd7a94b19 [ 114.226690] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4fd7ba7f68 [ 114.227751] RBP: 00007f4fd7ba7f60 R08: 0000001b2d12001c R09: 0000000000000000 [ 114.228794] R10: 00007f4fd7fac000 R11: 0000000000000246 R12: 00007f4fd7baca80 [ 114.229840] R13: 00007ffd3a133d80 R14: 00007f4fd7ba7f60 R15: 000000000001bd37 [ 114.230907] [ 114.231267] Modules linked in: [ 114.231784] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#3] SMP KASAN NOPTI [ 114.233461] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 114.234603] CPU: 1 UID: 0 PID: 3946 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 114.236405] Tainted: [D]=DIE, [W]=WARN [ 114.236990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 114.238226] RIP: 0010:perf_tp_event+0x175/0xe70 [ 114.238953] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 114.241691] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012 [ 114.242496] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 114.243571] RDX: ffff888017011b80 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 114.244667] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd15eb8 [ 114.245737] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000 [ 114.246819] R13: 000000000000002c R14: ffff88806cf31490 R15: dffffc0000000000 [ 114.247947] FS: 000055555a49e400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 114.249154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.250031] CR2: 00007f1189757018 CR3: 000000001ff76000 CR4: 0000000000350ef0 [ 114.251118] Call Trace: [ 114.251526] [ 114.251911] ? __pfx_perf_tp_event+0x10/0x10 [ 114.252605] ? stack_depot_save_flags+0x2c/0xa20 [ 114.253334] ? kasan_save_stack+0x34/0x50 [ 114.253974] ? kasan_save_stack+0x24/0x50 [ 114.254613] ? kasan_save_track+0x14/0x30 [ 114.255254] ? __kasan_save_free_info+0x3a/0x60 [ 114.255999] ? __kasan_slab_free+0x3f/0x50 [ 114.256649] ? kmem_cache_free+0x2a1/0x540 [ 114.257290] ? rcu_core+0x7c8/0x1800 [ 114.257868] ? handle_softirqs+0x1b1/0x770 [ 114.258522] ? __irq_exit_rcu+0xc4/0x100 [ 114.259152] ? irq_exit_rcu+0x9/0x20 [ 114.259743] ? sysvec_apic_timer_interrupt+0x70/0x80 [ 114.260547] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 114.261367] ? __sanitizer_cov_trace_pc+0x70/0x80 [ 114.262111] ? tracing_gen_ctx_irq_test+0xfd/0x1f0 [ 114.262866] ? perf_trace_buf_update+0x37/0x190 [ 114.263580] ? perf_tp_event+0x107/0xe70 [ 114.264229] ? perf_trace_run_bpf_submit+0xef/0x180 [ 114.264996] ? perf_trace_lock+0x337/0x5d0 [ 114.265648] ? lock_release+0x1ab/0x290 [ 114.266258] ? __might_fault+0x151/0x190 [ 114.266886] ? syscall_exit_work+0xca/0x200 [ 114.267542] ? do_syscall_64+0x2e7/0x360 [ 114.268180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.268987] ? __might_fault+0x151/0x190 [ 114.269612] ? syscall_exit_work+0xca/0x200 [ 114.270269] ? do_syscall_64+0x2e7/0x360 [ 114.270901] ? perf_trace_run_bpf_submit+0xef/0x180 [ 114.271684] ? perf_trace_run_bpf_submit+0xef/0x180 [ 114.272459] perf_trace_run_bpf_submit+0xef/0x180 [ 114.273215] perf_trace_lock+0x337/0x5d0 [ 114.273849] ? __pfx_perf_trace_lock+0x10/0x10 [ 114.274560] ? find_held_lock+0x2b/0x80 [ 114.275191] ? hrtimer_interrupt+0x114/0x830 [ 114.275903] lock_release+0x1ab/0x290 [ 114.276498] ktime_get_update_offsets_now+0xab/0x3c0 [ 114.277280] ? hrtimer_interrupt+0x114/0x830 [ 114.277964] hrtimer_interrupt+0x114/0x830 [ 114.278614] ? __local_bh_enable+0x7b/0x90 [ 114.279271] ? handle_softirqs+0x50c/0x770 [ 114.279964] __sysvec_apic_timer_interrupt+0xbb/0x330 [ 114.280758] sysvec_apic_timer_interrupt+0x6b/0x80 [ 114.281512] [ 114.281870] [ 114.282224] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 114.283022] RIP: 0010:oops_exit+0x0/0x50 [ 114.283665] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27 [ 114.286408] RSP: 0018:ffff888044667690 EFLAGS: 00000202 [ 114.287209] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff8139f06f [ 114.288299] RDX: ffff888017011b80 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 114.289376] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90 [ 114.290442] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888044667758 [ 114.291511] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000 [ 114.292610] ? add_taint+0x5f/0xd0 [ 114.293170] ? oops_end+0x4a/0xe0 [ 114.293724] oops_end+0x65/0xe0 [ 114.294253] exc_general_protection+0x1a2/0x330 [ 114.294981] asm_exc_general_protection+0x26/0x30 [ 114.295738] RIP: 0010:perf_tp_event+0x175/0xe70 [ 114.296468] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 114.299199] RSP: 0018:ffff888044667800 EFLAGS: 00010212 [ 114.300029] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 114.301109] RDX: ffff888017011b80 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 114.302181] RBP: ffff888044667a70 R08: ffff88806cf31340 R09: ffffe8ffffd15eb8 [ 114.303260] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 114.304359] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 114.305443] ? perf_tp_event+0x167/0xe70 [ 114.306090] ? arch_scale_cpu_capacity+0x17/0xa0 [ 114.306830] ? __pfx_perf_tp_event+0x10/0x10 [ 114.307514] ? __asan_memset+0x24/0x50 [ 114.308150] ? lock_release+0xc8/0x290 [ 114.308773] ? __pfx_sched_balance_find_dst_group+0x10/0x10 [ 114.309634] ? __lock_acquire+0x694/0x1b70 [ 114.310300] ? trace_sched_set_need_resched_tp+0xd4/0x110 [ 114.311150] ? __resched_curr+0x2a2/0x330 [ 114.311816] ? __pfx___resched_curr+0x10/0x10 [ 114.312532] ? perf_trace_run_bpf_submit+0xef/0x180 [ 114.313299] perf_trace_run_bpf_submit+0xef/0x180 [ 114.314050] perf_trace_lock+0x337/0x5d0 [ 114.314688] ? __pfx_perf_trace_lock+0x10/0x10 [ 114.315397] ? lock_acquire+0x15e/0x2f0 [ 114.316039] ? futex_ref_get+0x48/0x300 [ 114.316653] ? futex_ref_get+0x114/0x300 [ 114.317274] ? futex_hash+0x15c/0x390 [ 114.317858] lock_release+0x1ab/0x290 [ 114.318449] ? futex_hash+0x15c/0x390 [ 114.319034] futex_ref_get+0x119/0x300 [ 114.319632] ? futex_hash+0x15c/0x390 [ 114.320246] futex_hash+0x70/0x390 [ 114.320804] futex_wake+0x143/0x540 [ 114.321382] ? find_held_lock+0x2b/0x80 [ 114.322003] ? __pfx_futex_wake+0x10/0x10 [ 114.322669] do_futex+0x26d/0x370 [ 114.323212] ? __pfx_do_futex+0x10/0x10 [ 114.323865] ? lock_acquire+0x15e/0x2f0 [ 114.324486] __x64_sys_futex+0x1c9/0x4d0 [ 114.325115] ? __might_fault+0xe0/0x190 [ 114.325731] ? __pfx___x64_sys_futex+0x10/0x10 [ 114.326437] ? syscall_trace_enter+0x1cf/0x240 [ 114.327144] ? lock_release+0xc8/0x290 [ 114.327780] do_syscall_64+0xbf/0x360 [ 114.328370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.329161] RIP: 0033:0x7f01e1385b19 [ 114.329733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 114.332495] RSP: 002b:00007ffe5ed6b998 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 114.333637] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f01e1385b19 [ 114.334708] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f01e1498f68 [ 114.335813] RBP: 00007f01e1498f60 R08: 00007f01de8fb700 R09: 0000000000000000 [ 114.336882] R10: 00007f01de8fb700 R11: 0000000000000246 R12: 00007f01e149da68 [ 114.337952] R13: 00007ffe5ed6baa0 R14: 00007f01e1498f60 R15: 000000000001bd3a [ 114.339040] [ 114.339403] Modules linked in: [ 114.339932] ---[ end trace 0000000000000000 ]--- [ 114.339941] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#4] SMP KASAN NOPTI [ 114.340641] RIP: 0010:perf_tp_event+0x175/0xe70 [ 114.342157] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 114.342846] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 114.344044] CPU: 0 UID: 0 PID: 3948 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 114.346727] RSP: 0018:ffff888044667800 EFLAGS: 00010212 [ 114.348334] Tainted: [D]=DIE, [W]=WARN [ 114.348343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 114.349133] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 114.349654] RIP: 0010:perf_tp_event+0x175/0xe70 [ 114.350870] RDX: ffff888017011b80 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 114.351920] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 114.352608] RBP: ffff888044667a70 R08: ffff88806cf31340 R09: ffffe8ffffd15eb8 [ 114.353578] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012 [ 114.356299] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 114.357274] [ 114.358054] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 114.359015] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 114.359280] FS: 000055555a49e400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 114.360260] RDX: ffff888019323700 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 114.361320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.362404] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc15eb8 [ 114.363464] CR2: 00007f1189757018 CR3: 000000001ff76000 CR4: 0000000000350ef0 [ 114.364256] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000 [ 114.365327] Kernel panic - not syncing: Fatal exception in interrupt [ 115.458365] Shutting down cpus with NMI [ 115.461215] Kernel Offset: disabled [ 115.461783] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 09:15:00 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84bdec0e RDX=fffffbfff0f0ec09 RSI=0000000000000004 RDI=ffffffff87876044 RBP=ffffffff87876044 RSP=ffff888042af75b0 R8 =0000000000000000 R9 =fffffbfff0f0ec08 R10=ffffffff87876047 R11=202c746c75616620 R12=1ffff1100855eeb7 R13=0000000000000007 R14=fffffbfff0f0ec08 R15=ffff888042af75e8 RIP=ffffffff84bdeda0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555c3f4400 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4fd7ba4000 CR3=0000000013ce4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000000000ff000000000000 XMM01=00000000000000000001000000000000 XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007f4fd7b7b7c800007f4fd7b7b7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888044667160 R8 =0000000000000000 R9 =ffffed10016c4046 R10=0000000000000030 R11=552031203a555043 R12=0000000000000030 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555a49e400 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1189757018 CR3=000000001ff76000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f01e146c7c000007f01e146c7c8 XMM02=00007f01e146c7e000007f01e146c7c0 XMM03=00007f01e146c7c800007f01e146c7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000