Warning: Permanently added '[localhost]:41023' (ECDSA) to the list of known hosts. 2022/09/19 13:42:30 fuzzer started 2022/09/19 13:42:30 dialing manager at localhost:42121 syzkaller login: [ 36.463853] cgroup: Unknown subsys name 'net' [ 36.536170] cgroup: Unknown subsys name 'rlimit' 2022/09/19 13:42:44 syscalls: 2215 2022/09/19 13:42:44 code coverage: enabled 2022/09/19 13:42:44 comparison tracing: enabled 2022/09/19 13:42:44 extra coverage: enabled 2022/09/19 13:42:44 setuid sandbox: enabled 2022/09/19 13:42:44 namespace sandbox: enabled 2022/09/19 13:42:44 Android sandbox: enabled 2022/09/19 13:42:44 fault injection: enabled 2022/09/19 13:42:44 leak checking: enabled 2022/09/19 13:42:44 net packet injection: enabled 2022/09/19 13:42:44 net device setup: enabled 2022/09/19 13:42:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/19 13:42:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/19 13:42:44 USB emulation: enabled 2022/09/19 13:42:44 hci packet injection: enabled 2022/09/19 13:42:44 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220919) 2022/09/19 13:42:44 802.15.4 emulation: enabled 2022/09/19 13:42:44 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/19 13:42:44 fetching corpus: 50, signal 18719/22305 (executing program) 2022/09/19 13:42:45 fetching corpus: 100, signal 30473/35440 (executing program) 2022/09/19 13:42:45 fetching corpus: 150, signal 41813/47905 (executing program) 2022/09/19 13:42:45 fetching corpus: 200, signal 49444/56579 (executing program) 2022/09/19 13:42:45 fetching corpus: 250, signal 54128/62357 (executing program) 2022/09/19 13:42:45 fetching corpus: 300, signal 62052/70940 (executing program) 2022/09/19 13:42:45 fetching corpus: 350, signal 69225/78766 (executing program) 2022/09/19 13:42:45 fetching corpus: 400, signal 72581/82936 (executing program) 2022/09/19 13:42:46 fetching corpus: 450, signal 77865/88794 (executing program) 2022/09/19 13:42:46 fetching corpus: 500, signal 82761/94165 (executing program) 2022/09/19 13:42:46 fetching corpus: 550, signal 87494/99254 (executing program) 2022/09/19 13:42:46 fetching corpus: 600, signal 90367/102666 (executing program) 2022/09/19 13:42:46 fetching corpus: 650, signal 93442/106272 (executing program) 2022/09/19 13:42:46 fetching corpus: 700, signal 97316/110374 (executing program) 2022/09/19 13:42:47 fetching corpus: 750, signal 100541/113950 (executing program) 2022/09/19 13:42:47 fetching corpus: 800, signal 102849/116611 (executing program) 2022/09/19 13:42:47 fetching corpus: 850, signal 105420/119465 (executing program) 2022/09/19 13:42:47 fetching corpus: 900, signal 108617/122768 (executing program) 2022/09/19 13:42:47 fetching corpus: 950, signal 110840/125206 (executing program) 2022/09/19 13:42:47 fetching corpus: 1000, signal 112440/127079 (executing program) 2022/09/19 13:42:47 fetching corpus: 1050, signal 114294/129143 (executing program) 2022/09/19 13:42:47 fetching corpus: 1100, signal 116248/131243 (executing program) 2022/09/19 13:42:48 fetching corpus: 1150, signal 118829/133783 (executing program) 2022/09/19 13:42:48 fetching corpus: 1200, signal 121181/136118 (executing program) 2022/09/19 13:42:48 fetching corpus: 1250, signal 123443/138337 (executing program) 2022/09/19 13:42:48 fetching corpus: 1300, signal 125195/140089 (executing program) 2022/09/19 13:42:48 fetching corpus: 1350, signal 126769/141698 (executing program) 2022/09/19 13:42:48 fetching corpus: 1400, signal 127634/142793 (executing program) 2022/09/19 13:42:48 fetching corpus: 1450, signal 129145/144252 (executing program) 2022/09/19 13:42:49 fetching corpus: 1500, signal 130235/145435 (executing program) 2022/09/19 13:42:49 fetching corpus: 1550, signal 131983/146998 (executing program) 2022/09/19 13:42:49 fetching corpus: 1600, signal 133481/148407 (executing program) 2022/09/19 13:42:49 fetching corpus: 1650, signal 134266/149340 (executing program) 2022/09/19 13:42:49 fetching corpus: 1700, signal 136629/151180 (executing program) 2022/09/19 13:42:49 fetching corpus: 1750, signal 137813/152314 (executing program) 2022/09/19 13:42:49 fetching corpus: 1800, signal 139572/153722 (executing program) 2022/09/19 13:42:49 fetching corpus: 1850, signal 141410/155193 (executing program) 2022/09/19 13:42:50 fetching corpus: 1900, signal 143151/156521 (executing program) 2022/09/19 13:42:50 fetching corpus: 1950, signal 144450/157569 (executing program) 2022/09/19 13:42:50 fetching corpus: 2000, signal 145966/158674 (executing program) 2022/09/19 13:42:50 fetching corpus: 2050, signal 147775/160208 (executing program) 2022/09/19 13:42:50 fetching corpus: 2100, signal 148815/161008 (executing program) 2022/09/19 13:42:50 fetching corpus: 2150, signal 149971/161813 (executing program) 2022/09/19 13:42:50 fetching corpus: 2200, signal 150816/162524 (executing program) 2022/09/19 13:42:50 fetching corpus: 2250, signal 152490/163578 (executing program) 2022/09/19 13:42:51 fetching corpus: 2300, signal 153690/164391 (executing program) 2022/09/19 13:42:51 fetching corpus: 2350, signal 154600/165021 (executing program) 2022/09/19 13:42:51 fetching corpus: 2400, signal 155800/165728 (executing program) 2022/09/19 13:42:51 fetching corpus: 2450, signal 156662/166280 (executing program) 2022/09/19 13:42:51 fetching corpus: 2500, signal 157804/166919 (executing program) 2022/09/19 13:42:51 fetching corpus: 2550, signal 158615/167408 (executing program) 2022/09/19 13:42:51 fetching corpus: 2600, signal 159075/167745 (executing program) 2022/09/19 13:42:52 fetching corpus: 2650, signal 160515/168498 (executing program) 2022/09/19 13:42:52 fetching corpus: 2700, signal 161456/168969 (executing program) 2022/09/19 13:42:52 fetching corpus: 2750, signal 162691/169544 (executing program) 2022/09/19 13:42:52 fetching corpus: 2800, signal 163861/170076 (executing program) 2022/09/19 13:42:52 fetching corpus: 2850, signal 164363/170346 (executing program) 2022/09/19 13:42:52 fetching corpus: 2900, signal 165375/170787 (executing program) 2022/09/19 13:42:52 fetching corpus: 2950, signal 165944/171082 (executing program) 2022/09/19 13:42:53 fetching corpus: 3000, signal 167496/171626 (executing program) 2022/09/19 13:42:53 fetching corpus: 3050, signal 168067/171841 (executing program) 2022/09/19 13:42:53 fetching corpus: 3064, signal 168146/171920 (executing program) 2022/09/19 13:42:53 fetching corpus: 3064, signal 168146/171987 (executing program) 2022/09/19 13:42:53 fetching corpus: 3064, signal 168146/172057 (executing program) 2022/09/19 13:42:53 fetching corpus: 3064, signal 168146/172121 (executing program) 2022/09/19 13:42:53 fetching corpus: 3064, signal 168146/172198 (executing program) 2022/09/19 13:42:53 fetching corpus: 3064, signal 168146/172262 (executing program) 2022/09/19 13:42:53 fetching corpus: 3064, signal 168146/172305 (executing program) 2022/09/19 13:42:53 fetching corpus: 3064, signal 168146/172366 (executing program) 2022/09/19 13:42:53 fetching corpus: 3064, signal 168146/172426 (executing program) 2022/09/19 13:42:53 fetching corpus: 3064, signal 168146/172468 (executing program) 2022/09/19 13:42:53 fetching corpus: 3064, signal 168146/172529 (executing program) 2022/09/19 13:42:53 fetching corpus: 3064, signal 168146/172600 (executing program) 2022/09/19 13:42:53 fetching corpus: 3064, signal 168146/172670 (executing program) 2022/09/19 13:42:53 fetching corpus: 3064, signal 168146/172746 (executing program) 2022/09/19 13:42:53 fetching corpus: 3064, signal 168146/172811 (executing program) 2022/09/19 13:42:53 fetching corpus: 3064, signal 168146/172874 (executing program) 2022/09/19 13:42:53 fetching corpus: 3064, signal 168146/172937 (executing program) 2022/09/19 13:42:53 fetching corpus: 3064, signal 168146/173004 (executing program) 2022/09/19 13:42:53 fetching corpus: 3064, signal 168146/173071 (executing program) 2022/09/19 13:42:53 fetching corpus: 3064, signal 168146/173125 (executing program) 2022/09/19 13:42:53 fetching corpus: 3064, signal 168146/173190 (executing program) 2022/09/19 13:42:53 fetching corpus: 3064, signal 168146/173256 (executing program) 2022/09/19 13:42:53 fetching corpus: 3064, signal 168146/173310 (executing program) 2022/09/19 13:42:53 fetching corpus: 3064, signal 168146/173310 (executing program) 2022/09/19 13:42:55 starting 8 fuzzer processes 13:42:55 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) io_setup(0x1f, &(0x7f0000000100)=0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0}]) 13:42:55 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x0, 0xfffffff9}}) 13:42:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73666e6c9200080101000440002000f801002000400003000000000000008000"/64, 0x40}, {&(0x7f0000010100)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x800}, {&(0x7f0000010200)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x1000}, {&(0x7f0000010300)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x1800}, {&(0x7f0000010400)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x2000}, {&(0x7f0000010500)="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", 0x120, 0x2800}, {&(0x7f0000010700)="2e202020202020202020201000b4ea70325132510000ea7032510300000000002e2e2020202020202020201000b4ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000b4ea70325132510000ea70325104001a040000", 0x80, 0x3800}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x4000}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x4800}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x7800}], 0x0, &(0x7f0000010f00)) 13:42:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5608, &(0x7f0000000040)) 13:42:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x161941, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 13:42:55 executing program 5: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) [ 61.616081] audit: type=1400 audit(1663594975.927:6): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:42:55 executing program 6: epoll_create(0x8001) 13:42:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) [ 62.870635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.874290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.876315] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.881135] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.883210] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.884528] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.890642] Bluetooth: hci0: HCI_REQ-0x0c1a [ 62.945837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.948667] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.968110] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.969479] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.970648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.972440] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 62.974747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.976136] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.977294] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 62.981176] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 62.982694] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.984063] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.987473] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.988605] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.989750] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 62.994227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.996078] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.002490] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.004690] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.006728] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.012058] Bluetooth: hci4: HCI_REQ-0x0c1a [ 63.013156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.020470] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.026297] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 63.027824] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 63.029107] Bluetooth: hci3: HCI_REQ-0x0c1a [ 63.030356] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 63.031602] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 63.037993] Bluetooth: hci2: HCI_REQ-0x0c1a [ 63.039775] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 63.052828] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 63.056162] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 63.061031] Bluetooth: hci6: HCI_REQ-0x0c1a [ 63.073488] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 63.074211] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 63.078723] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 63.081005] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 63.082261] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 63.087256] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 63.088665] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 63.093255] Bluetooth: hci7: HCI_REQ-0x0c1a [ 63.097189] Bluetooth: hci5: HCI_REQ-0x0c1a [ 64.956497] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 64.958323] Bluetooth: hci0: command 0x0409 tx timeout [ 65.020092] Bluetooth: hci4: command 0x0409 tx timeout [ 65.084088] Bluetooth: hci2: command 0x0409 tx timeout [ 65.084948] Bluetooth: hci6: command 0x0409 tx timeout [ 65.085022] Bluetooth: hci3: command 0x0409 tx timeout [ 65.149241] Bluetooth: hci5: command 0x0409 tx timeout [ 65.149825] Bluetooth: hci7: command 0x0409 tx timeout [ 67.004108] Bluetooth: hci0: command 0x041b tx timeout [ 67.067989] Bluetooth: hci4: command 0x041b tx timeout [ 67.131988] Bluetooth: hci6: command 0x041b tx timeout [ 67.132798] Bluetooth: hci2: command 0x041b tx timeout [ 67.133009] Bluetooth: hci3: command 0x041b tx timeout [ 67.195985] Bluetooth: hci7: command 0x041b tx timeout [ 67.196715] Bluetooth: hci5: command 0x041b tx timeout [ 68.204214] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.206419] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.209117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.215098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.220377] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.222128] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.225384] Bluetooth: hci1: HCI_REQ-0x0c1a [ 69.052953] Bluetooth: hci0: command 0x040f tx timeout [ 69.115950] Bluetooth: hci4: command 0x040f tx timeout [ 69.181047] Bluetooth: hci3: command 0x040f tx timeout [ 69.181626] Bluetooth: hci2: command 0x040f tx timeout [ 69.183108] Bluetooth: hci6: command 0x040f tx timeout [ 69.244936] Bluetooth: hci5: command 0x040f tx timeout [ 69.245401] Bluetooth: hci7: command 0x040f tx timeout [ 70.268915] Bluetooth: hci1: command 0x0409 tx timeout [ 71.099978] Bluetooth: hci0: command 0x0419 tx timeout [ 71.164401] Bluetooth: hci4: command 0x0419 tx timeout [ 71.227985] Bluetooth: hci6: command 0x0419 tx timeout [ 71.228779] Bluetooth: hci2: command 0x0419 tx timeout [ 71.231290] Bluetooth: hci3: command 0x0419 tx timeout [ 71.293035] Bluetooth: hci7: command 0x0419 tx timeout [ 71.294046] Bluetooth: hci5: command 0x0419 tx timeout [ 72.316924] Bluetooth: hci1: command 0x041b tx timeout [ 74.363954] Bluetooth: hci1: command 0x040f tx timeout [ 76.411914] Bluetooth: hci1: command 0x0419 tx timeout [ 121.960174] syz-executor.2 (297) used greatest stack depth: 24568 bytes left [ 122.087133] audit: type=1400 audit(1663595036.398:7): avc: denied { open } for pid=3908 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 122.088647] audit: type=1400 audit(1663595036.399:8): avc: denied { kernel } for pid=3908 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 122.096545] ------------[ cut here ]------------ [ 122.096566] [ 122.096569] ====================================================== [ 122.096573] WARNING: possible circular locking dependency detected [ 122.096578] 6.0.0-rc6-next-20220919 #1 Not tainted [ 122.096584] ------------------------------------------------------ [ 122.096587] syz-executor.3/3909 is trying to acquire lock: [ 122.096594] ffffffff853fa838 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 122.096632] [ 122.096632] but task is already holding lock: [ 122.096635] ffff88803e57e820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 122.096663] [ 122.096663] which lock already depends on the new lock. [ 122.096663] [ 122.096666] [ 122.096666] the existing dependency chain (in reverse order) is: [ 122.096669] [ 122.096669] -> #3 (&ctx->lock){....}-{2:2}: [ 122.096683] _raw_spin_lock+0x2a/0x40 [ 122.096700] __perf_event_task_sched_out+0x53b/0x18d0 [ 122.096713] __schedule+0xedd/0x2470 [ 122.096723] schedule+0xda/0x1b0 [ 122.096733] futex_wait_queue+0xf5/0x1e0 [ 122.096745] futex_wait+0x28e/0x690 [ 122.096755] do_futex+0x2ff/0x380 [ 122.096773] __x64_sys_futex+0x1c6/0x4d0 [ 122.096782] do_syscall_64+0x3b/0x90 [ 122.096796] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.096814] [ 122.096814] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 122.096828] _raw_spin_lock_nested+0x30/0x40 [ 122.096843] raw_spin_rq_lock_nested+0x1e/0x30 [ 122.096856] task_fork_fair+0x63/0x4d0 [ 122.096875] sched_cgroup_fork+0x3d0/0x540 [ 122.096889] copy_process+0x4183/0x6e20 [ 122.096899] kernel_clone+0xe7/0x890 [ 122.096909] user_mode_thread+0xad/0xf0 [ 122.096919] rest_init+0x24/0x250 [ 122.096934] arch_call_rest_init+0xf/0x14 [ 122.096946] start_kernel+0x4c1/0x4e6 [ 122.096956] secondary_startup_64_no_verify+0xe0/0xeb [ 122.096970] [ 122.096970] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 122.096984] _raw_spin_lock_irqsave+0x39/0x60 [ 122.096999] try_to_wake_up+0xab/0x1920 [ 122.097011] up+0x75/0xb0 [ 122.097022] __up_console_sem+0x6e/0x80 [ 122.097038] console_unlock+0x46a/0x590 [ 122.097053] vprintk_emit+0x1bd/0x560 [ 122.097069] vprintk+0x84/0xa0 [ 122.097085] _printk+0xba/0xf1 [ 122.097102] kauditd_hold_skb.cold+0x3f/0x4e [ 122.097116] kauditd_send_queue+0x233/0x290 [ 122.097131] kauditd_thread+0x5da/0x9a0 [ 122.097144] kthread+0x2ed/0x3a0 [ 122.097158] ret_from_fork+0x22/0x30 [ 122.097170] [ 122.097170] -> #0 ((console_sem).lock){....}-{2:2}: [ 122.097184] __lock_acquire+0x2a02/0x5e70 [ 122.097200] lock_acquire+0x1a2/0x530 [ 122.097215] _raw_spin_lock_irqsave+0x39/0x60 [ 122.097230] down_trylock+0xe/0x70 [ 122.097242] __down_trylock_console_sem+0x3b/0xd0 [ 122.097257] vprintk_emit+0x16b/0x560 [ 122.097273] vprintk+0x84/0xa0 [ 122.097288] _printk+0xba/0xf1 [ 122.097304] report_bug.cold+0x72/0xab [ 122.097317] handle_bug+0x3c/0x70 [ 122.097329] exc_invalid_op+0x14/0x50 [ 122.097342] asm_exc_invalid_op+0x16/0x20 [ 122.097358] group_sched_out.part.0+0x2c7/0x460 [ 122.097368] ctx_sched_out+0x8f1/0xc10 [ 122.097378] __perf_event_task_sched_out+0x6d0/0x18d0 [ 122.097390] __schedule+0xedd/0x2470 [ 122.097399] schedule+0xda/0x1b0 [ 122.097409] futex_wait_queue+0xf5/0x1e0 [ 122.097419] futex_wait+0x28e/0x690 [ 122.097428] do_futex+0x2ff/0x380 [ 122.097445] __x64_sys_futex+0x1c6/0x4d0 [ 122.097455] do_syscall_64+0x3b/0x90 [ 122.097467] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.097484] [ 122.097484] other info that might help us debug this: [ 122.097484] [ 122.097487] Chain exists of: [ 122.097487] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 122.097487] [ 122.097502] Possible unsafe locking scenario: [ 122.097502] [ 122.097504] CPU0 CPU1 [ 122.097506] ---- ---- [ 122.097508] lock(&ctx->lock); [ 122.097514] lock(&rq->__lock); [ 122.097520] lock(&ctx->lock); [ 122.097527] lock((console_sem).lock); [ 122.097532] [ 122.097532] *** DEADLOCK *** [ 122.097532] [ 122.097534] 2 locks held by syz-executor.3/3909: [ 122.097541] #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 122.097567] #1: ffff88803e57e820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 122.097594] [ 122.097594] stack backtrace: [ 122.097597] CPU: 1 PID: 3909 Comm: syz-executor.3 Not tainted 6.0.0-rc6-next-20220919 #1 [ 122.097610] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 122.097618] Call Trace: [ 122.097622] [ 122.097625] dump_stack_lvl+0x8b/0xb3 [ 122.097640] check_noncircular+0x263/0x2e0 [ 122.097656] ? format_decode+0x26c/0xb50 [ 122.097671] ? print_circular_bug+0x450/0x450 [ 122.097688] ? enable_ptr_key_workfn+0x20/0x20 [ 122.097702] ? __lockdep_reset_lock+0x180/0x180 [ 122.097718] ? format_decode+0x26c/0xb50 [ 122.097732] ? memcpy+0x39/0x60 [ 122.097752] ? vsnprintf+0x4ba/0x1600 [ 122.097769] __lock_acquire+0x2a02/0x5e70 [ 122.097790] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 122.097812] lock_acquire+0x1a2/0x530 [ 122.097829] ? down_trylock+0xe/0x70 [ 122.097843] ? lock_release+0x750/0x750 [ 122.097859] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 122.097880] ? vprintk+0x84/0xa0 [ 122.097897] _raw_spin_lock_irqsave+0x39/0x60 [ 122.097913] ? down_trylock+0xe/0x70 [ 122.097926] down_trylock+0xe/0x70 [ 122.097939] ? vprintk+0x84/0xa0 [ 122.097955] __down_trylock_console_sem+0x3b/0xd0 [ 122.097972] vprintk_emit+0x16b/0x560 [ 122.097989] ? lock_downgrade+0x6d0/0x6d0 [ 122.098007] vprintk+0x84/0xa0 [ 122.098024] _printk+0xba/0xf1 [ 122.098041] ? record_print_text.cold+0x16/0x16 [ 122.098061] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 122.098074] ? lock_downgrade+0x6d0/0x6d0 [ 122.098091] ? report_bug.cold+0x66/0xab [ 122.098105] ? group_sched_out.part.0+0x2c7/0x460 [ 122.098117] report_bug.cold+0x72/0xab [ 122.098132] handle_bug+0x3c/0x70 [ 122.098145] exc_invalid_op+0x14/0x50 [ 122.098160] asm_exc_invalid_op+0x16/0x20 [ 122.098177] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 122.098190] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d 5b 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 122.098201] RSP: 0018:ffff8880373df8f8 EFLAGS: 00010006 [ 122.098210] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 122.098218] RDX: ffff88803edbb580 RSI: ffffffff81566077 RDI: 0000000000000005 [ 122.098226] RBP: ffff88803f0805c8 R08: 0000000000000005 R09: 0000000000000001 [ 122.098234] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88803e57e800 [ 122.098241] R13: ffff88806cf3d140 R14: ffffffff8547c780 R15: 0000000000000002 [ 122.098253] ? group_sched_out.part.0+0x2c7/0x460 [ 122.098266] ? group_sched_out.part.0+0x2c7/0x460 [ 122.098278] ctx_sched_out+0x8f1/0xc10 [ 122.098291] __perf_event_task_sched_out+0x6d0/0x18d0 [ 122.098306] ? lock_is_held_type+0xd7/0x130 [ 122.098324] ? __perf_cgroup_move+0x160/0x160 [ 122.098336] ? set_next_entity+0x304/0x550 [ 122.098355] ? lock_is_held_type+0xd7/0x130 [ 122.098374] __schedule+0xedd/0x2470 [ 122.098387] ? io_schedule_timeout+0x150/0x150 [ 122.098402] schedule+0xda/0x1b0 [ 122.098413] futex_wait_queue+0xf5/0x1e0 [ 122.098425] futex_wait+0x28e/0x690 [ 122.098437] ? futex_wait_setup+0x230/0x230 [ 122.098450] ? lock_is_held_type+0xd7/0x130 [ 122.098467] ? irqentry_enter+0x26/0x60 [ 122.098484] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 122.098503] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 122.098526] ? do_futex+0x187/0x380 [ 122.098546] do_futex+0x2ff/0x380 [ 122.098565] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 122.098585] ? ktime_get+0x153/0x1f0 [ 122.098601] __x64_sys_futex+0x1c6/0x4d0 [ 122.098613] ? __x64_sys_futex_time32+0x480/0x480 [ 122.098626] ? syscall_enter_from_user_mode+0x1d/0x50 [ 122.098644] ? syscall_enter_from_user_mode+0x1d/0x50 [ 122.098670] do_syscall_64+0x3b/0x90 [ 122.098685] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.098702] RIP: 0033:0x7f8698116b19 [ 122.098711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.098722] RSP: 002b:00007f869568c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.098733] RAX: ffffffffffffffda RBX: 00007f8698229f68 RCX: 00007f8698116b19 [ 122.098741] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8698229f68 [ 122.098748] RBP: 00007f8698229f60 R08: 0000000000000000 R09: 0000000000000000 [ 122.098755] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8698229f6c [ 122.098762] R13: 00007ffed2bfa4df R14: 00007f869568c300 R15: 0000000000022000 [ 122.098775] [ 122.162041] WARNING: CPU: 1 PID: 3909 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 122.162744] Modules linked in: [ 122.162993] CPU: 1 PID: 3909 Comm: syz-executor.3 Not tainted 6.0.0-rc6-next-20220919 #1 [ 122.163606] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 122.164453] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 122.164859] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d 5b 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 122.166193] RSP: 0018:ffff8880373df8f8 EFLAGS: 00010006 [ 122.166596] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 122.167132] RDX: ffff88803edbb580 RSI: ffffffff81566077 RDI: 0000000000000005 [ 122.167668] RBP: ffff88803f0805c8 R08: 0000000000000005 R09: 0000000000000001 [ 122.168197] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88803e57e800 [ 122.168734] R13: ffff88806cf3d140 R14: ffffffff8547c780 R15: 0000000000000002 [ 122.169266] FS: 00007f869568c700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 122.169895] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.170357] CR2: 00007fc9204dc428 CR3: 000000000e866000 CR4: 0000000000350ee0 [ 122.170926] Call Trace: [ 122.171117] [ 122.171299] ctx_sched_out+0x8f1/0xc10 [ 122.171594] __perf_event_task_sched_out+0x6d0/0x18d0 [ 122.171973] ? lock_is_held_type+0xd7/0x130 [ 122.172292] ? __perf_cgroup_move+0x160/0x160 [ 122.172628] ? set_next_entity+0x304/0x550 [ 122.172946] ? lock_is_held_type+0xd7/0x130 [ 122.173268] __schedule+0xedd/0x2470 [ 122.173543] ? io_schedule_timeout+0x150/0x150 [ 122.173879] schedule+0xda/0x1b0 [ 122.174139] futex_wait_queue+0xf5/0x1e0 [ 122.174434] futex_wait+0x28e/0x690 [ 122.174710] ? futex_wait_setup+0x230/0x230 [ 122.175024] ? lock_is_held_type+0xd7/0x130 [ 122.175345] ? irqentry_enter+0x26/0x60 [ 122.175648] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 122.176053] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 122.176460] ? do_futex+0x187/0x380 [ 122.176744] do_futex+0x2ff/0x380 [ 122.177018] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 122.177447] ? ktime_get+0x153/0x1f0 [ 122.177731] __x64_sys_futex+0x1c6/0x4d0 [ 122.178030] ? __x64_sys_futex_time32+0x480/0x480 [ 122.178386] ? syscall_enter_from_user_mode+0x1d/0x50 [ 122.178773] ? syscall_enter_from_user_mode+0x1d/0x50 [ 122.179162] do_syscall_64+0x3b/0x90 [ 122.179447] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.179844] RIP: 0033:0x7f8698116b19 [ 122.180122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.181462] RSP: 002b:00007f869568c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.182022] RAX: ffffffffffffffda RBX: 00007f8698229f68 RCX: 00007f8698116b19 [ 122.182551] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8698229f68 [ 122.183095] RBP: 00007f8698229f60 R08: 0000000000000000 R09: 0000000000000000 [ 122.183626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8698229f6c [ 122.184161] R13: 00007ffed2bfa4df R14: 00007f869568c300 R15: 0000000000022000 [ 122.184698] [ 122.184885] irq event stamp: 1850 [ 122.185143] hardirqs last enabled at (1849): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 122.185878] hardirqs last disabled at (1850): [] __schedule+0x1225/0x2470 [ 122.186511] softirqs last enabled at (1792): [] __irq_exit_rcu+0x11b/0x180 [ 122.187174] softirqs last disabled at (1783): [] __irq_exit_rcu+0x11b/0x180 [ 122.187815] ---[ end trace 0000000000000000 ]--- [ 124.175143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.176987] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.178659] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.183121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.185685] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 124.187489] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 124.191834] Bluetooth: hci2: HCI_REQ-0x0c1a [ 126.204964] Bluetooth: hci2: command 0x0409 tx timeout [ 126.460949] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 126.523890] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 126.523920] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 128.251934] Bluetooth: hci2: command 0x041b tx timeout [ 130.299972] Bluetooth: hci2: command 0x040f tx timeout [ 130.683907] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 130.748163] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 130.811921] Bluetooth: hci6: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 13:43:56 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff88801d54ff40 RCX=0000000000000000 RDX=0000000080000000 RSI=ffff88801d54ff10 RDI=0000000000000001 RBP=ffff88801d548000 RSP=ffff88801d54f740 R8 =ffffffff85ecafbe R9 =ffffffff85ecafc2 R10=ffffed1003aa9f05 R11=ffff88801d54f800 R12=ffff88801d54f801 R13=ffff88801d54f820 R14=ffff88801d54f7c0 R15=0000000000000003 RIP=ffffffff8111c0e2 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f83bf9d7260 CR3=0000000034d20000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6f732e646f6d6b62 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00322e6f732e646f 6d6b62696c2f756e YMM03=0000000000000000 0000000000000000 672d78756e696c2d 34365f3638782f62 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822b2dec RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff8880373df2f0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000002710 R13=0000000000000020 R14=fffffbfff0ec83c3 R15=dffffc0000000000 RIP=ffffffff822b2e41 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f869568c700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc9204dc428 CR3=000000000e866000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f86981fd7c0 00007f86981fd7c8 YMM02=0000000000000000 0000000000000000 00007f86981fd7e0 00007f86981fd7c0 YMM03=0000000000000000 0000000000000000 00007f86981fd7c8 00007f86981fd7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000