Warning: Permanently added '[localhost]:9110' (ECDSA) to the list of known hosts. 2022/09/14 13:07:18 fuzzer started 2022/09/14 13:07:19 dialing manager at localhost:33849 syzkaller login: [ 36.410275] cgroup: Unknown subsys name 'net' [ 36.533994] cgroup: Unknown subsys name 'rlimit' 2022/09/14 13:07:34 syscalls: 2215 2022/09/14 13:07:34 code coverage: enabled 2022/09/14 13:07:34 comparison tracing: enabled 2022/09/14 13:07:34 extra coverage: enabled 2022/09/14 13:07:34 setuid sandbox: enabled 2022/09/14 13:07:34 namespace sandbox: enabled 2022/09/14 13:07:34 Android sandbox: enabled 2022/09/14 13:07:34 fault injection: enabled 2022/09/14 13:07:34 leak checking: enabled 2022/09/14 13:07:34 net packet injection: enabled 2022/09/14 13:07:34 net device setup: enabled 2022/09/14 13:07:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/14 13:07:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/14 13:07:34 USB emulation: enabled 2022/09/14 13:07:34 hci packet injection: enabled 2022/09/14 13:07:34 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220914) 2022/09/14 13:07:34 802.15.4 emulation: enabled 2022/09/14 13:07:34 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/14 13:07:34 fetching corpus: 37, signal 26830/30388 (executing program) 2022/09/14 13:07:34 fetching corpus: 85, signal 42217/47173 (executing program) 2022/09/14 13:07:35 fetching corpus: 135, signal 50573/56880 (executing program) 2022/09/14 13:07:35 fetching corpus: 185, signal 61677/69135 (executing program) 2022/09/14 13:07:35 fetching corpus: 235, signal 68776/77351 (executing program) 2022/09/14 13:07:35 fetching corpus: 285, signal 74956/84556 (executing program) 2022/09/14 13:07:35 fetching corpus: 335, signal 78671/89340 (executing program) 2022/09/14 13:07:35 fetching corpus: 385, signal 83293/94937 (executing program) 2022/09/14 13:07:35 fetching corpus: 435, signal 86628/99256 (executing program) 2022/09/14 13:07:36 fetching corpus: 485, signal 89279/102942 (executing program) 2022/09/14 13:07:36 fetching corpus: 535, signal 92532/107102 (executing program) 2022/09/14 13:07:36 fetching corpus: 585, signal 95775/111197 (executing program) 2022/09/14 13:07:36 fetching corpus: 635, signal 99513/115673 (executing program) 2022/09/14 13:07:36 fetching corpus: 685, signal 103659/120532 (executing program) 2022/09/14 13:07:36 fetching corpus: 735, signal 109523/126731 (executing program) 2022/09/14 13:07:36 fetching corpus: 785, signal 111962/129878 (executing program) 2022/09/14 13:07:37 fetching corpus: 835, signal 114730/133285 (executing program) 2022/09/14 13:07:37 fetching corpus: 884, signal 117418/136559 (executing program) 2022/09/14 13:07:37 fetching corpus: 934, signal 119407/139181 (executing program) 2022/09/14 13:07:37 fetching corpus: 984, signal 121258/141728 (executing program) 2022/09/14 13:07:37 fetching corpus: 1034, signal 123029/144140 (executing program) 2022/09/14 13:07:37 fetching corpus: 1084, signal 124707/146512 (executing program) 2022/09/14 13:07:37 fetching corpus: 1134, signal 127638/149759 (executing program) 2022/09/14 13:07:37 fetching corpus: 1183, signal 128892/151647 (executing program) 2022/09/14 13:07:38 fetching corpus: 1233, signal 130178/153534 (executing program) 2022/09/14 13:07:38 fetching corpus: 1283, signal 131670/155564 (executing program) 2022/09/14 13:07:38 fetching corpus: 1333, signal 133067/157471 (executing program) 2022/09/14 13:07:38 fetching corpus: 1383, signal 135326/160023 (executing program) 2022/09/14 13:07:38 fetching corpus: 1433, signal 138483/163207 (executing program) 2022/09/14 13:07:38 fetching corpus: 1483, signal 140311/165372 (executing program) 2022/09/14 13:07:38 fetching corpus: 1533, signal 142754/167934 (executing program) 2022/09/14 13:07:39 fetching corpus: 1583, signal 143819/169480 (executing program) 2022/09/14 13:07:39 fetching corpus: 1633, signal 146243/171956 (executing program) 2022/09/14 13:07:39 fetching corpus: 1683, signal 147568/173616 (executing program) 2022/09/14 13:07:39 fetching corpus: 1733, signal 149852/175900 (executing program) 2022/09/14 13:07:39 fetching corpus: 1783, signal 151504/177671 (executing program) 2022/09/14 13:07:39 fetching corpus: 1833, signal 153082/179424 (executing program) 2022/09/14 13:07:40 fetching corpus: 1883, signal 153680/180506 (executing program) 2022/09/14 13:07:40 fetching corpus: 1933, signal 154996/182021 (executing program) 2022/09/14 13:07:40 fetching corpus: 1983, signal 156626/183726 (executing program) 2022/09/14 13:07:40 fetching corpus: 2033, signal 158341/185441 (executing program) 2022/09/14 13:07:40 fetching corpus: 2083, signal 159448/186755 (executing program) 2022/09/14 13:07:40 fetching corpus: 2133, signal 160883/188257 (executing program) 2022/09/14 13:07:40 fetching corpus: 2183, signal 162042/189617 (executing program) 2022/09/14 13:07:41 fetching corpus: 2233, signal 162910/190814 (executing program) 2022/09/14 13:07:41 fetching corpus: 2283, signal 164041/192053 (executing program) 2022/09/14 13:07:41 fetching corpus: 2333, signal 164992/193267 (executing program) 2022/09/14 13:07:41 fetching corpus: 2383, signal 166114/194476 (executing program) 2022/09/14 13:07:41 fetching corpus: 2432, signal 166993/195571 (executing program) 2022/09/14 13:07:41 fetching corpus: 2482, signal 167764/196584 (executing program) 2022/09/14 13:07:41 fetching corpus: 2532, signal 168710/197643 (executing program) 2022/09/14 13:07:41 fetching corpus: 2581, signal 169631/198694 (executing program) 2022/09/14 13:07:42 fetching corpus: 2631, signal 170470/199679 (executing program) 2022/09/14 13:07:42 fetching corpus: 2681, signal 171794/200869 (executing program) 2022/09/14 13:07:42 fetching corpus: 2731, signal 172916/202013 (executing program) 2022/09/14 13:07:42 fetching corpus: 2781, signal 174211/203192 (executing program) 2022/09/14 13:07:42 fetching corpus: 2831, signal 175453/204283 (executing program) 2022/09/14 13:07:42 fetching corpus: 2881, signal 176694/205304 (executing program) 2022/09/14 13:07:42 fetching corpus: 2930, signal 177845/206321 (executing program) 2022/09/14 13:07:43 fetching corpus: 2980, signal 179349/207492 (executing program) 2022/09/14 13:07:43 fetching corpus: 3029, signal 180143/208364 (executing program) 2022/09/14 13:07:43 fetching corpus: 3079, signal 181048/209242 (executing program) 2022/09/14 13:07:43 fetching corpus: 3129, signal 182379/210258 (executing program) 2022/09/14 13:07:43 fetching corpus: 3179, signal 183324/211128 (executing program) 2022/09/14 13:07:43 fetching corpus: 3229, signal 184998/212231 (executing program) 2022/09/14 13:07:43 fetching corpus: 3278, signal 185506/212825 (executing program) 2022/09/14 13:07:44 fetching corpus: 3328, signal 186352/213653 (executing program) 2022/09/14 13:07:44 fetching corpus: 3378, signal 187785/214579 (executing program) 2022/09/14 13:07:44 fetching corpus: 3428, signal 188708/215322 (executing program) 2022/09/14 13:07:44 fetching corpus: 3478, signal 189771/216142 (executing program) 2022/09/14 13:07:44 fetching corpus: 3528, signal 190834/216901 (executing program) 2022/09/14 13:07:44 fetching corpus: 3578, signal 191832/217614 (executing program) 2022/09/14 13:07:44 fetching corpus: 3628, signal 192426/218130 (executing program) 2022/09/14 13:07:45 fetching corpus: 3678, signal 193376/218793 (executing program) 2022/09/14 13:07:45 fetching corpus: 3728, signal 194234/219429 (executing program) 2022/09/14 13:07:45 fetching corpus: 3778, signal 194985/219992 (executing program) 2022/09/14 13:07:45 fetching corpus: 3828, signal 195852/220549 (executing program) 2022/09/14 13:07:45 fetching corpus: 3878, signal 196490/221054 (executing program) 2022/09/14 13:07:45 fetching corpus: 3928, signal 197901/221747 (executing program) 2022/09/14 13:07:45 fetching corpus: 3978, signal 198677/222250 (executing program) 2022/09/14 13:07:46 fetching corpus: 4028, signal 200098/222847 (executing program) 2022/09/14 13:07:46 fetching corpus: 4078, signal 201013/223381 (executing program) 2022/09/14 13:07:46 fetching corpus: 4128, signal 201722/223854 (executing program) 2022/09/14 13:07:46 fetching corpus: 4178, signal 202501/224278 (executing program) 2022/09/14 13:07:46 fetching corpus: 4228, signal 203112/224694 (executing program) 2022/09/14 13:07:46 fetching corpus: 4278, signal 203670/225055 (executing program) 2022/09/14 13:07:47 fetching corpus: 4328, signal 204597/225495 (executing program) 2022/09/14 13:07:47 fetching corpus: 4378, signal 205454/225887 (executing program) 2022/09/14 13:07:47 fetching corpus: 4428, signal 206204/226273 (executing program) 2022/09/14 13:07:47 fetching corpus: 4478, signal 207036/226652 (executing program) 2022/09/14 13:07:47 fetching corpus: 4528, signal 208006/227019 (executing program) 2022/09/14 13:07:47 fetching corpus: 4578, signal 208654/227315 (executing program) 2022/09/14 13:07:47 fetching corpus: 4628, signal 209736/227633 (executing program) 2022/09/14 13:07:48 fetching corpus: 4678, signal 211023/228023 (executing program) 2022/09/14 13:07:48 fetching corpus: 4728, signal 211439/228241 (executing program) 2022/09/14 13:07:48 fetching corpus: 4778, signal 211991/228488 (executing program) 2022/09/14 13:07:48 fetching corpus: 4828, signal 212526/228701 (executing program) 2022/09/14 13:07:48 fetching corpus: 4878, signal 213008/228927 (executing program) 2022/09/14 13:07:48 fetching corpus: 4928, signal 214128/229187 (executing program) 2022/09/14 13:07:48 fetching corpus: 4978, signal 215038/229468 (executing program) 2022/09/14 13:07:48 fetching corpus: 5028, signal 215421/229663 (executing program) 2022/09/14 13:07:49 fetching corpus: 5078, signal 216227/229937 (executing program) 2022/09/14 13:07:49 fetching corpus: 5128, signal 217610/230460 (executing program) 2022/09/14 13:07:49 fetching corpus: 5178, signal 218354/230591 (executing program) 2022/09/14 13:07:49 fetching corpus: 5228, signal 218940/230721 (executing program) 2022/09/14 13:07:49 fetching corpus: 5278, signal 219552/230836 (executing program) 2022/09/14 13:07:49 fetching corpus: 5327, signal 220421/230840 (executing program) 2022/09/14 13:07:49 fetching corpus: 5376, signal 221194/230907 (executing program) 2022/09/14 13:07:50 fetching corpus: 5426, signal 221668/230921 (executing program) 2022/09/14 13:07:50 fetching corpus: 5475, signal 222141/230942 (executing program) 2022/09/14 13:07:50 fetching corpus: 5525, signal 222962/231171 (executing program) 2022/09/14 13:07:50 fetching corpus: 5575, signal 223464/231173 (executing program) 2022/09/14 13:07:50 fetching corpus: 5601, signal 223829/231173 (executing program) 2022/09/14 13:07:50 fetching corpus: 5601, signal 223829/231173 (executing program) 2022/09/14 13:07:53 starting 8 fuzzer processes 13:07:53 executing program 1: fallocate(0xffffffffffffffff, 0x4, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x942, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) splice(r1, 0x0, r2, 0x0, 0x9, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, 0x0, 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) pwrite64(r2, &(0x7f0000000300), 0x0, 0x2) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000200)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) read(r4, &(0x7f0000000000), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 13:07:53 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xa, 0x0, 0x1422}) pipe2$9p(0x0, 0x0) 13:07:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x10}}, [], {0x14}}, 0x28}}, 0x0) 13:07:53 executing program 3: r0 = add_key(&(0x7f0000000300)='id_legacy\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="e2", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) 13:07:53 executing program 0: sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) r0 = getpgid(0x0) syz_open_procfs$userns(r0, 0x0) 13:07:53 executing program 6: ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000600)={{r1}, 0x0, 0x2, @inherit={0x0, 0x0}, @devid}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r0) openat$sr(0xffffffffffffff9c, &(0x7f0000001740), 0x40, 0x0) 13:07:53 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000109000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./fil']) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000018000100000000000000000002"], 0x28}}, 0x0) [ 70.404730] audit: type=1400 audit(1663160873.392:6): avc: denied { execmem } for pid=287 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:07:53 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) [ 71.621909] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.624407] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.625872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.630004] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.632871] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.634211] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.639473] Bluetooth: hci0: HCI_REQ-0x0c1a [ 71.693074] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.695244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.698747] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.701906] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.703758] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.706105] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.708727] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.710069] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.712377] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.714370] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.715785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.733127] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.734624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.737372] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 71.741308] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.742856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 71.744123] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.745525] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.746829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 71.747971] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.749874] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.751156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.752222] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.754359] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.755672] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.760761] Bluetooth: hci3: HCI_REQ-0x0c1a [ 71.766759] Bluetooth: hci2: HCI_REQ-0x0c1a [ 71.767671] Bluetooth: hci1: HCI_REQ-0x0c1a [ 71.769708] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.771413] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.783712] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 71.785686] Bluetooth: hci4: HCI_REQ-0x0c1a [ 71.791885] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 71.796522] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 71.802824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 71.808786] Bluetooth: hci5: HCI_REQ-0x0c1a [ 71.813779] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 71.816817] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 71.820868] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 71.825983] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 71.827286] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 71.854609] Bluetooth: hci6: HCI_REQ-0x0c1a [ 71.875426] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 71.877575] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 71.879121] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 71.881818] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 71.883928] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 71.885316] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 71.889815] Bluetooth: hci7: HCI_REQ-0x0c1a [ 73.702023] Bluetooth: hci0: command 0x0409 tx timeout [ 73.829497] Bluetooth: hci1: command 0x0409 tx timeout [ 73.830516] Bluetooth: hci5: command 0x0409 tx timeout [ 73.830986] Bluetooth: hci4: command 0x0409 tx timeout [ 73.831376] Bluetooth: hci3: command 0x0409 tx timeout [ 73.832002] Bluetooth: hci2: command 0x0409 tx timeout [ 73.893704] Bluetooth: hci7: command 0x0409 tx timeout [ 73.894807] Bluetooth: hci6: command 0x0409 tx timeout [ 75.749507] Bluetooth: hci0: command 0x041b tx timeout [ 75.877564] Bluetooth: hci2: command 0x041b tx timeout [ 75.878102] Bluetooth: hci3: command 0x041b tx timeout [ 75.878897] Bluetooth: hci4: command 0x041b tx timeout [ 75.879332] Bluetooth: hci5: command 0x041b tx timeout [ 75.881318] Bluetooth: hci1: command 0x041b tx timeout [ 75.941498] Bluetooth: hci6: command 0x041b tx timeout [ 75.942022] Bluetooth: hci7: command 0x041b tx timeout [ 77.797488] Bluetooth: hci0: command 0x040f tx timeout [ 77.926574] Bluetooth: hci1: command 0x040f tx timeout [ 77.927127] Bluetooth: hci5: command 0x040f tx timeout [ 77.927929] Bluetooth: hci4: command 0x040f tx timeout [ 77.928373] Bluetooth: hci3: command 0x040f tx timeout [ 77.928933] Bluetooth: hci2: command 0x040f tx timeout [ 77.991009] Bluetooth: hci7: command 0x040f tx timeout [ 77.991810] Bluetooth: hci6: command 0x040f tx timeout [ 79.846543] Bluetooth: hci0: command 0x0419 tx timeout [ 79.973550] Bluetooth: hci2: command 0x0419 tx timeout [ 79.975372] Bluetooth: hci3: command 0x0419 tx timeout [ 79.975939] Bluetooth: hci4: command 0x0419 tx timeout [ 79.976349] Bluetooth: hci5: command 0x0419 tx timeout [ 79.977144] Bluetooth: hci1: command 0x0419 tx timeout [ 80.037484] Bluetooth: hci6: command 0x0419 tx timeout [ 80.037951] Bluetooth: hci7: command 0x0419 tx timeout 13:08:50 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) 13:08:50 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) 13:08:50 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) 13:08:50 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)="01010101", 0x4) read(r0, &(0x7f00000000c0)=""/4, 0x4) close(r0) 13:08:50 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 13:08:50 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="bc0774f1680e0f30fa2f5abbed2a463897bc1b16b746e00eeb589f436a37c8582a462ae92da14ebcf5ac6f2e889ca4923471a581a49463e28b0cd3052b972da754df40c689ce9a7b8bb9534eca4b0a61fee3fe8932d1106e110ec94797d41c4b64f298b42bac50b60c9f5d55d746b33bc92fc03463aea1c51d7cc624f094961557ce0ccaaa2aaf385465a9b04bcfe840110ed0e62624c2ce2a36e216d6ac8907db73f1bcebd90b084d1506d6b1d6125339af8831c82d5a58d882d925a84e1c6fd7ed33a869aab81e2abdbe667b639ea1e39eb61e0cd75ed81af68e3586f5d974d6d40e5422", 0xe5}, {&(0x7f0000000300)="10570415256e75228dd7c0bccb7bd13b03a4aac64608ad6090133982a236284e013c4ad894fd2f1c34c69cafdf3a3b5ef4414bd866a9f82a07ac1b7a17c5bae623b20313144a1e47d76c55d6ac2a942533ed511b91347f0cbff5d5d28473707f5cc1756b2343a7018f9fa22b95d31988c2be2e1f07e117aa7a8ce1bbd9ca97bb03513a4d2452f29e892586b6ca93aa0056d4ae75774d3351ae42c5a2dbc44827545279c7fa08c8ec5d64b5c82ef657fba8", 0xb1}, {&(0x7f00000003c0)="ad7c37f35965fe2616e9774d94ed837508c338e7429a249b22cdbca206d69e0214de5d57558e1f6b1a2577fa45474871949e88c27fe370b92e6905aabd94e80e4a5b9d87525d71ec23372ad98aa77a1430a02fe38296a9cf86847897980a3b47997cbdc0fe014fd36259fb56d2848b", 0x6f}, {&(0x7f0000000440)="549a4274cb8b52a1fa776ac8a0913bda459e4112ab3d8f12cfe37eac4a269a173277e13f876ec6ed59d4962a3164cff26503c524aee1891bc0ab27a8f01374510ab3d8b90e7c2872cbf57d1571b8ae3929640904910b3aa40313b81d791c4a4e19ae6795a39902bad88213a294a484edaa1de5b40fb4571850a0adc50236121bdf67c254c46a363fa7d4332857a55f27b01ccb9e2a3e96c872e2b5fb70ebbab7dd35d658ef31f82657895c5d351b4a240e9ddada4f4f477383c941632b7648c81a278616c28319bceb94770b6c39062ab4df918cae1be3dea2590f664434dd339baf9623439710e605550f6dbe", 0xed}], 0x4, r1) add_key(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x3}, &(0x7f0000000780)="f6abb8e58da26cb109433b8f6eefd8aa55cfad8eac439331", 0x18, 0xfffffffffffffffd) r2 = io_uring_setup(0x454c, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x7ab681, 0x24) write(r4, &(0x7f0000000180)="6ffc25721cc9dc764319d54dac5b2ada2c5f6c9df78c125ee322784fa59e8d9ddc71996c417ec62000b6c3b9988a734588bc9336bd89d9f59d68d93b9a56c910436c7877860f050764a4d278b3711e6a88e58a1b7600a5c401c48b0f1cb5d6144d8e6c3aa7102222684bfc7c14f69dee4ab83475356a51a59b9a155244bb2e1ecab721b8f8e3924b938321b5e4334a44536eacd64ef97c4582005b866e58d9269fcbd907f32a4f7d021580305ced96f841f0c9c745610aea71374ccbd1e3", 0xbe) syz_io_uring_setup(0x22d2, &(0x7f0000000580)={0x0, 0x2799, 0x0, 0x3, 0x13, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600), &(0x7f0000000640)) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, r1) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0) sendfile(r0, r0, 0x0, 0x5f1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r5) [ 128.100932] audit: type=1400 audit(1663160931.087:7): avc: denied { open } for pid=3703 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.102467] audit: type=1400 audit(1663160931.088:8): avc: denied { kernel } for pid=3703 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.129165] ------------[ cut here ]------------ [ 128.129202] [ 128.129207] ====================================================== [ 128.129214] WARNING: possible circular locking dependency detected [ 128.129221] 6.0.0-rc5-next-20220914 #1 Not tainted [ 128.129233] ------------------------------------------------------ [ 128.129239] syz-executor.7/3705 is trying to acquire lock: [ 128.129250] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 128.129316] [ 128.129316] but task is already holding lock: [ 128.129321] ffff88800d2c1020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 128.129370] [ 128.129370] which lock already depends on the new lock. [ 128.129370] [ 128.129376] [ 128.129376] the existing dependency chain (in reverse order) is: [ 128.129382] [ 128.129382] -> #3 (&ctx->lock){....}-{2:2}: [ 128.129407] _raw_spin_lock+0x2a/0x40 [ 128.129442] __perf_event_task_sched_out+0x53b/0x18d0 [ 128.129465] __schedule+0xedd/0x2470 [ 128.129488] schedule+0xda/0x1b0 [ 128.129506] futex_wait_queue+0xf5/0x1e0 [ 128.129527] futex_wait+0x28e/0x690 [ 128.129545] do_futex+0x2ff/0x380 [ 128.129562] __x64_sys_futex+0x1c6/0x4d0 [ 128.129580] do_syscall_64+0x3b/0x90 [ 128.129606] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.129639] [ 128.129639] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 128.129664] _raw_spin_lock_nested+0x30/0x40 [ 128.129692] raw_spin_rq_lock_nested+0x1e/0x30 [ 128.129715] task_fork_fair+0x63/0x4d0 [ 128.129747] sched_cgroup_fork+0x3d0/0x540 [ 128.129773] copy_process+0x4183/0x6e20 [ 128.129792] kernel_clone+0xe7/0x890 [ 128.129809] user_mode_thread+0xad/0xf0 [ 128.129828] rest_init+0x24/0x250 [ 128.129859] arch_call_rest_init+0xf/0x14 [ 128.129880] start_kernel+0x4c1/0x4e6 [ 128.129897] secondary_startup_64_no_verify+0xe0/0xeb [ 128.129923] [ 128.129923] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 128.129948] _raw_spin_lock_irqsave+0x39/0x60 [ 128.129976] try_to_wake_up+0xab/0x1920 [ 128.130001] up+0x75/0xb0 [ 128.130022] __up_console_sem+0x6e/0x80 [ 128.130052] console_unlock+0x46a/0x590 [ 128.130082] vprintk_emit+0x1bd/0x560 [ 128.130113] vprintk+0x84/0xa0 [ 128.130144] _printk+0xba/0xf1 [ 128.130176] kauditd_hold_skb.cold+0x3f/0x4e [ 128.130203] kauditd_send_queue+0x233/0x290 [ 128.130230] kauditd_thread+0x5da/0x9a0 [ 128.130256] kthread+0x2ed/0x3a0 [ 128.130283] ret_from_fork+0x22/0x30 [ 128.130306] [ 128.130306] -> #0 ((console_sem).lock){....}-{2:2}: [ 128.130331] __lock_acquire+0x2a02/0x5e70 [ 128.130362] lock_acquire+0x1a2/0x530 [ 128.130392] _raw_spin_lock_irqsave+0x39/0x60 [ 128.130421] down_trylock+0xe/0x70 [ 128.130444] __down_trylock_console_sem+0x3b/0xd0 [ 128.130474] vprintk_emit+0x16b/0x560 [ 128.130505] vprintk+0x84/0xa0 [ 128.130535] _printk+0xba/0xf1 [ 128.130566] report_bug.cold+0x72/0xab [ 128.130590] handle_bug+0x3c/0x70 [ 128.130636] exc_invalid_op+0x14/0x50 [ 128.130661] asm_exc_invalid_op+0x16/0x20 [ 128.130692] group_sched_out.part.0+0x2c7/0x460 [ 128.130711] ctx_sched_out+0x8f1/0xc10 [ 128.130729] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.130752] __schedule+0xedd/0x2470 [ 128.130770] schedule+0xda/0x1b0 [ 128.130787] futex_wait_queue+0xf5/0x1e0 [ 128.130806] futex_wait+0x28e/0x690 [ 128.130824] do_futex+0x2ff/0x380 [ 128.130840] __x64_sys_futex+0x1c6/0x4d0 [ 128.130858] do_syscall_64+0x3b/0x90 [ 128.130883] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.130915] [ 128.130915] other info that might help us debug this: [ 128.130915] [ 128.130920] Chain exists of: [ 128.130920] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 128.130920] [ 128.130948] Possible unsafe locking scenario: [ 128.130948] [ 128.130952] CPU0 CPU1 [ 128.130956] ---- ---- [ 128.130961] lock(&ctx->lock); [ 128.130971] lock(&rq->__lock); [ 128.130983] lock(&ctx->lock); [ 128.130994] lock((console_sem).lock); [ 128.131005] [ 128.131005] *** DEADLOCK *** [ 128.131005] [ 128.131009] 2 locks held by syz-executor.7/3705: [ 128.131022] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 128.131070] #1: ffff88800d2c1020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 128.131121] [ 128.131121] stack backtrace: [ 128.131126] CPU: 0 PID: 3705 Comm: syz-executor.7 Not tainted 6.0.0-rc5-next-20220914 #1 [ 128.131149] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 128.131164] Call Trace: [ 128.131169] [ 128.131177] dump_stack_lvl+0x8b/0xb3 [ 128.131205] check_noncircular+0x263/0x2e0 [ 128.131236] ? format_decode+0x26c/0xb50 [ 128.131263] ? print_circular_bug+0x450/0x450 [ 128.131296] ? enable_ptr_key_workfn+0x20/0x20 [ 128.131324] ? format_decode+0x26c/0xb50 [ 128.131353] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 128.131387] __lock_acquire+0x2a02/0x5e70 [ 128.131428] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 128.131470] lock_acquire+0x1a2/0x530 [ 128.131502] ? down_trylock+0xe/0x70 [ 128.131529] ? rcu_read_unlock+0x40/0x40 [ 128.131569] ? vprintk+0x84/0xa0 [ 128.131603] _raw_spin_lock_irqsave+0x39/0x60 [ 128.131633] ? down_trylock+0xe/0x70 [ 128.131658] down_trylock+0xe/0x70 [ 128.131683] ? vprintk+0x84/0xa0 [ 128.131715] __down_trylock_console_sem+0x3b/0xd0 [ 128.131748] vprintk_emit+0x16b/0x560 [ 128.131785] vprintk+0x84/0xa0 [ 128.131818] _printk+0xba/0xf1 [ 128.131851] ? record_print_text.cold+0x16/0x16 [ 128.131893] ? report_bug.cold+0x66/0xab [ 128.131920] ? group_sched_out.part.0+0x2c7/0x460 [ 128.131941] report_bug.cold+0x72/0xab [ 128.131973] handle_bug+0x3c/0x70 [ 128.132000] exc_invalid_op+0x14/0x50 [ 128.132028] asm_exc_invalid_op+0x16/0x20 [ 128.132060] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 128.132085] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 128.132106] RSP: 0018:ffff88804201f8f8 EFLAGS: 00010006 [ 128.132123] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.132137] RDX: ffff88801a079ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 128.132151] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 128.132165] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88800d2c1000 [ 128.132179] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 128.132200] ? group_sched_out.part.0+0x2c7/0x460 [ 128.132224] ? group_sched_out.part.0+0x2c7/0x460 [ 128.132248] ctx_sched_out+0x8f1/0xc10 [ 128.132271] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.132300] ? lock_is_held_type+0xd7/0x130 [ 128.132335] ? __perf_cgroup_move+0x160/0x160 [ 128.132358] ? set_next_entity+0x304/0x550 [ 128.132395] ? lock_is_held_type+0xd7/0x130 [ 128.132430] __schedule+0xedd/0x2470 [ 128.132455] ? io_schedule_timeout+0x150/0x150 [ 128.132477] ? futex_wait_setup+0x166/0x230 [ 128.132503] schedule+0xda/0x1b0 [ 128.132524] futex_wait_queue+0xf5/0x1e0 [ 128.132546] futex_wait+0x28e/0x690 [ 128.132569] ? futex_wait_setup+0x230/0x230 [ 128.132593] ? wake_up_q+0x8b/0xf0 [ 128.132618] ? do_raw_spin_unlock+0x4f/0x220 [ 128.132655] ? futex_wake+0x158/0x490 [ 128.132685] ? fd_install+0x1f9/0x640 [ 128.132716] do_futex+0x2ff/0x380 [ 128.132736] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 128.132766] __x64_sys_futex+0x1c6/0x4d0 [ 128.132789] ? __x64_sys_futex_time32+0x480/0x480 [ 128.132809] ? trace_rcu_dyntick+0x1a7/0x250 [ 128.132847] ? syscall_enter_from_user_mode+0x1d/0x50 [ 128.132882] ? syscall_enter_from_user_mode+0x1d/0x50 [ 128.132920] do_syscall_64+0x3b/0x90 [ 128.132947] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.132981] RIP: 0033:0x7f8677d8db19 [ 128.132997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.133017] RSP: 002b:00007f8675303218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.133037] RAX: ffffffffffffffda RBX: 00007f8677ea0f68 RCX: 00007f8677d8db19 [ 128.133051] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8677ea0f68 [ 128.133065] RBP: 00007f8677ea0f60 R08: 0000000000000000 R09: 0000000000000000 [ 128.133078] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8677ea0f6c [ 128.133092] R13: 00007ffcf2a8b82f R14: 00007f8675303300 R15: 0000000000022000 [ 128.133115] [ 128.244759] WARNING: CPU: 0 PID: 3705 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 128.246051] Modules linked in: [ 128.246508] CPU: 0 PID: 3705 Comm: syz-executor.7 Not tainted 6.0.0-rc5-next-20220914 #1 [ 128.247646] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 128.249201] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 128.249954] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 128.252479] RSP: 0018:ffff88804201f8f8 EFLAGS: 00010006 [ 128.253224] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.254216] RDX: ffff88801a079ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 128.255192] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 128.256179] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88800d2c1000 [ 128.257173] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 128.258159] FS: 00007f8675303700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 128.259295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.260104] CR2: 00007f228b031260 CR3: 0000000015e98000 CR4: 0000000000350ef0 [ 128.261102] Call Trace: [ 128.261470] [ 128.261800] ctx_sched_out+0x8f1/0xc10 [ 128.262356] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.263095] ? lock_is_held_type+0xd7/0x130 [ 128.263728] ? __perf_cgroup_move+0x160/0x160 [ 128.264373] ? set_next_entity+0x304/0x550 [ 128.264987] ? lock_is_held_type+0xd7/0x130 [ 128.265618] __schedule+0xedd/0x2470 [ 128.266155] ? io_schedule_timeout+0x150/0x150 [ 128.266824] ? futex_wait_setup+0x166/0x230 [ 128.267443] schedule+0xda/0x1b0 [ 128.267933] futex_wait_queue+0xf5/0x1e0 [ 128.268513] futex_wait+0x28e/0x690 [ 128.269040] ? futex_wait_setup+0x230/0x230 [ 128.269661] ? wake_up_q+0x8b/0xf0 [ 128.270180] ? do_raw_spin_unlock+0x4f/0x220 [ 128.270824] ? futex_wake+0x158/0x490 [ 128.271352] ? fd_install+0x1f9/0x640 [ 128.271890] do_futex+0x2ff/0x380 [ 128.272382] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 128.273168] __x64_sys_futex+0x1c6/0x4d0 [ 128.273737] ? __x64_sys_futex_time32+0x480/0x480 [ 128.274397] ? trace_rcu_dyntick+0x1a7/0x250 [ 128.275041] ? syscall_enter_from_user_mode+0x1d/0x50 [ 128.275755] ? syscall_enter_from_user_mode+0x1d/0x50 [ 128.276467] do_syscall_64+0x3b/0x90 [ 128.276983] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.277691] RIP: 0033:0x7f8677d8db19 [ 128.278198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.280680] RSP: 002b:00007f8675303218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.281725] RAX: ffffffffffffffda RBX: 00007f8677ea0f68 RCX: 00007f8677d8db19 [ 128.282724] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8677ea0f68 [ 128.283721] RBP: 00007f8677ea0f60 R08: 0000000000000000 R09: 0000000000000000 [ 128.284706] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8677ea0f6c [ 128.285699] R13: 00007ffcf2a8b82f R14: 00007f8675303300 R15: 0000000000022000 [ 128.286718] [ 128.287046] irq event stamp: 2352 [ 128.287543] hardirqs last enabled at (2351): [] syscall_enter_from_user_mode+0x1d/0x50 [ 128.288889] hardirqs last disabled at (2352): [] __schedule+0x1225/0x2470 [ 128.290033] softirqs last enabled at (2126): [] __irq_exit_rcu+0x11b/0x180 [ 128.291295] softirqs last disabled at (1961): [] __irq_exit_rcu+0x11b/0x180 [ 128.292560] ---[ end trace 0000000000000000 ]--- [ 128.303878] audit: type=1400 audit(1663160931.291:9): avc: denied { write } for pid=3703 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 13:08:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="bc0774f1680e0f30fa2f5abbed2a463897bc1b16b746e00eeb589f436a37c8582a462ae92da14ebcf5ac6f2e889ca4923471a581a49463e28b0cd3052b972da754df40c689ce9a7b8bb9534eca4b0a61fee3fe8932d1106e110ec94797d41c4b64f298b42bac50b60c9f5d55d746b33bc92fc03463aea1c51d7cc624f094961557ce0ccaaa2aaf385465a9b04bcfe840110ed0e62624c2ce2a36e216d6ac8907db73f1bcebd90b084d1506d6b1d6125339af8831c82d5a58d882d925a84e1c6fd7ed33a869aab81e2abdbe667b639ea1e39eb61e0cd75ed81af68e3586f5d974d6d40e5422", 0xe5}, {&(0x7f0000000300)="10570415256e75228dd7c0bccb7bd13b03a4aac64608ad6090133982a236284e013c4ad894fd2f1c34c69cafdf3a3b5ef4414bd866a9f82a07ac1b7a17c5bae623b20313144a1e47d76c55d6ac2a942533ed511b91347f0cbff5d5d28473707f5cc1756b2343a7018f9fa22b95d31988c2be2e1f07e117aa7a8ce1bbd9ca97bb03513a4d2452f29e892586b6ca93aa0056d4ae75774d3351ae42c5a2dbc44827545279c7fa08c8ec5d64b5c82ef657fba8", 0xb1}, {&(0x7f00000003c0)="ad7c37f35965fe2616e9774d94ed837508c338e7429a249b22cdbca206d69e0214de5d57558e1f6b1a2577fa45474871949e88c27fe370b92e6905aabd94e80e4a5b9d87525d71ec23372ad98aa77a1430a02fe38296a9cf86847897980a3b47997cbdc0fe014fd36259fb56d2848b", 0x6f}, {&(0x7f0000000440)="549a4274cb8b52a1fa776ac8a0913bda459e4112ab3d8f12cfe37eac4a269a173277e13f876ec6ed59d4962a3164cff26503c524aee1891bc0ab27a8f01374510ab3d8b90e7c2872cbf57d1571b8ae3929640904910b3aa40313b81d791c4a4e19ae6795a39902bad88213a294a484edaa1de5b40fb4571850a0adc50236121bdf67c254c46a363fa7d4332857a55f27b01ccb9e2a3e96c872e2b5fb70ebbab7dd35d658ef31f82657895c5d351b4a240e9ddada4f4f477383c941632b7648c81a278616c28319bceb94770b6c39062ab4df918cae1be3dea2590f664434dd339baf9623439710e605550f6dbe", 0xed}], 0x4, r1) add_key(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x3}, &(0x7f0000000780)="f6abb8e58da26cb109433b8f6eefd8aa55cfad8eac439331", 0x18, 0xfffffffffffffffd) r2 = io_uring_setup(0x454c, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x7ab681, 0x24) write(r4, &(0x7f0000000180)="6ffc25721cc9dc764319d54dac5b2ada2c5f6c9df78c125ee322784fa59e8d9ddc71996c417ec62000b6c3b9988a734588bc9336bd89d9f59d68d93b9a56c910436c7877860f050764a4d278b3711e6a88e58a1b7600a5c401c48b0f1cb5d6144d8e6c3aa7102222684bfc7c14f69dee4ab83475356a51a59b9a155244bb2e1ecab721b8f8e3924b938321b5e4334a44536eacd64ef97c4582005b866e58d9269fcbd907f32a4f7d021580305ced96f841f0c9c745610aea71374ccbd1e3", 0xbe) syz_io_uring_setup(0x22d2, &(0x7f0000000580)={0x0, 0x2799, 0x0, 0x3, 0x13, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600), &(0x7f0000000640)) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, r1) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0) sendfile(r0, r0, 0x0, 0x5f1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r5) [ 128.514453] hrtimer: interrupt took 20107 ns 13:08:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="bc0774f1680e0f30fa2f5abbed2a463897bc1b16b746e00eeb589f436a37c8582a462ae92da14ebcf5ac6f2e889ca4923471a581a49463e28b0cd3052b972da754df40c689ce9a7b8bb9534eca4b0a61fee3fe8932d1106e110ec94797d41c4b64f298b42bac50b60c9f5d55d746b33bc92fc03463aea1c51d7cc624f094961557ce0ccaaa2aaf385465a9b04bcfe840110ed0e62624c2ce2a36e216d6ac8907db73f1bcebd90b084d1506d6b1d6125339af8831c82d5a58d882d925a84e1c6fd7ed33a869aab81e2abdbe667b639ea1e39eb61e0cd75ed81af68e3586f5d974d6d40e5422", 0xe5}, {&(0x7f0000000300)="10570415256e75228dd7c0bccb7bd13b03a4aac64608ad6090133982a236284e013c4ad894fd2f1c34c69cafdf3a3b5ef4414bd866a9f82a07ac1b7a17c5bae623b20313144a1e47d76c55d6ac2a942533ed511b91347f0cbff5d5d28473707f5cc1756b2343a7018f9fa22b95d31988c2be2e1f07e117aa7a8ce1bbd9ca97bb03513a4d2452f29e892586b6ca93aa0056d4ae75774d3351ae42c5a2dbc44827545279c7fa08c8ec5d64b5c82ef657fba8", 0xb1}, {&(0x7f00000003c0)="ad7c37f35965fe2616e9774d94ed837508c338e7429a249b22cdbca206d69e0214de5d57558e1f6b1a2577fa45474871949e88c27fe370b92e6905aabd94e80e4a5b9d87525d71ec23372ad98aa77a1430a02fe38296a9cf86847897980a3b47997cbdc0fe014fd36259fb56d2848b", 0x6f}, {&(0x7f0000000440)="549a4274cb8b52a1fa776ac8a0913bda459e4112ab3d8f12cfe37eac4a269a173277e13f876ec6ed59d4962a3164cff26503c524aee1891bc0ab27a8f01374510ab3d8b90e7c2872cbf57d1571b8ae3929640904910b3aa40313b81d791c4a4e19ae6795a39902bad88213a294a484edaa1de5b40fb4571850a0adc50236121bdf67c254c46a363fa7d4332857a55f27b01ccb9e2a3e96c872e2b5fb70ebbab7dd35d658ef31f82657895c5d351b4a240e9ddada4f4f477383c941632b7648c81a278616c28319bceb94770b6c39062ab4df918cae1be3dea2590f664434dd339baf9623439710e605550f6dbe", 0xed}], 0x4, r1) add_key(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x3}, &(0x7f0000000780)="f6abb8e58da26cb109433b8f6eefd8aa55cfad8eac439331", 0x18, 0xfffffffffffffffd) r2 = io_uring_setup(0x454c, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x7ab681, 0x24) write(r4, &(0x7f0000000180)="6ffc25721cc9dc764319d54dac5b2ada2c5f6c9df78c125ee322784fa59e8d9ddc71996c417ec62000b6c3b9988a734588bc9336bd89d9f59d68d93b9a56c910436c7877860f050764a4d278b3711e6a88e58a1b7600a5c401c48b0f1cb5d6144d8e6c3aa7102222684bfc7c14f69dee4ab83475356a51a59b9a155244bb2e1ecab721b8f8e3924b938321b5e4334a44536eacd64ef97c4582005b866e58d9269fcbd907f32a4f7d021580305ced96f841f0c9c745610aea71374ccbd1e3", 0xbe) syz_io_uring_setup(0x22d2, &(0x7f0000000580)={0x0, 0x2799, 0x0, 0x3, 0x13, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600), &(0x7f0000000640)) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, r1) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0) sendfile(r0, r0, 0x0, 0x5f1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r5) [ 129.653168] syz-executor.7 (3788) used greatest stack depth: 24536 bytes left [ 133.063747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.068080] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.069587] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.072916] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.074528] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 133.076105] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 133.081042] Bluetooth: hci0: HCI_REQ-0x0c1a [ 135.078453] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 135.141515] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 135.142224] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 135.143149] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 135.143836] Bluetooth: hci0: command 0x0409 tx timeout [ 137.189661] Bluetooth: hci0: command 0x041b tx timeout [ 137.326184] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 137.329310] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.331704] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 137.333612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 137.336490] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 137.338271] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 137.341762] Bluetooth: hci2: HCI_REQ-0x0c1a [ 137.465701] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 137.474800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.476328] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.478089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 137.478970] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 137.479787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 137.482316] Bluetooth: hci3: HCI_REQ-0x0c1a VM DIAGNOSIS: 13:08:51 Registers: info registers vcpu 0 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b24f1 RDI=ffffffff87641b60 RBP=ffffffff87641b20 RSP=ffff88804201f348 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000038 R11=0000000000000001 R12=0000000000000038 R13=ffffffff87641b20 R14=0000000000000010 R15=ffffffff822b24e0 RIP=ffffffff822b2549 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8675303700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f228b031260 CR3=0000000015e98000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f8677e747c0 00007f8677e747c8 YMM02=0000000000000000 0000000000000000 00007f8677e747e0 00007f8677e747c0 YMM03=0000000000000000 0000000000000000 00007f8677e747c8 00007f8677e747c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffff888041dbff58 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888041dc0001 RSI=ffff888041dbff58 RDI=ffff888041dbf390 RBP=ffff888041dbf3d8 RSP=ffff888041dbf300 R8 =ffffffff862410b8 R9 =ffffffff862410bc R10=ffffed10083b7e7d R11=000000000003603d R12=ffff888041dbf3c1 R13=ffff888041dbf3e0 R14=ffff888041dbf380 R15=ffffffff862410bd RIP=ffffffff8111c559 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007facf6e648e0 CR3=0000000018398000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 322e6f732e6c6462 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00322e6f732e6c64 62696c2f756e672d YMM03=0000000000000000 0000000000000000 78756e696c2d3436 5f3638782f62696c YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000