syzkaller login: [ 39.569553] sshd (236) used greatest stack depth: 24088 bytes left Warning: Permanently added '[localhost]:54094' (ECDSA) to the list of known hosts. 2022/09/19 13:59:40 fuzzer started 2022/09/19 13:59:41 dialing manager at localhost:42121 [ 46.115810] cgroup: Unknown subsys name 'net' [ 46.181541] cgroup: Unknown subsys name 'rlimit' 2022/09/19 13:59:53 syscalls: 2215 2022/09/19 13:59:53 code coverage: enabled 2022/09/19 13:59:53 comparison tracing: enabled 2022/09/19 13:59:53 extra coverage: enabled 2022/09/19 13:59:53 setuid sandbox: enabled 2022/09/19 13:59:53 namespace sandbox: enabled 2022/09/19 13:59:53 Android sandbox: enabled 2022/09/19 13:59:53 fault injection: enabled 2022/09/19 13:59:53 leak checking: enabled 2022/09/19 13:59:53 net packet injection: enabled 2022/09/19 13:59:53 net device setup: enabled 2022/09/19 13:59:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/19 13:59:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/19 13:59:53 USB emulation: enabled 2022/09/19 13:59:53 hci packet injection: enabled 2022/09/19 13:59:53 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220919) 2022/09/19 13:59:53 802.15.4 emulation: enabled 2022/09/19 13:59:53 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/19 13:59:53 fetching corpus: 50, signal 24732/28180 (executing program) 2022/09/19 13:59:54 fetching corpus: 100, signal 43242/47815 (executing program) 2022/09/19 13:59:54 fetching corpus: 150, signal 50602/56398 (executing program) 2022/09/19 13:59:54 fetching corpus: 200, signal 56588/63520 (executing program) 2022/09/19 13:59:54 fetching corpus: 250, signal 61840/69859 (executing program) 2022/09/19 13:59:54 fetching corpus: 300, signal 67087/76062 (executing program) 2022/09/19 13:59:54 fetching corpus: 350, signal 71503/81395 (executing program) 2022/09/19 13:59:54 fetching corpus: 400, signal 75062/85919 (executing program) 2022/09/19 13:59:54 fetching corpus: 450, signal 81393/92834 (executing program) 2022/09/19 13:59:55 fetching corpus: 500, signal 83632/95960 (executing program) 2022/09/19 13:59:55 fetching corpus: 550, signal 88438/101269 (executing program) 2022/09/19 13:59:55 fetching corpus: 600, signal 90252/103901 (executing program) 2022/09/19 13:59:55 fetching corpus: 650, signal 92595/106980 (executing program) 2022/09/19 13:59:55 fetching corpus: 700, signal 96433/111196 (executing program) 2022/09/19 13:59:55 fetching corpus: 750, signal 99742/114932 (executing program) 2022/09/19 13:59:55 fetching corpus: 800, signal 101497/117315 (executing program) 2022/09/19 13:59:56 fetching corpus: 850, signal 104201/120442 (executing program) 2022/09/19 13:59:56 fetching corpus: 900, signal 106109/122869 (executing program) 2022/09/19 13:59:56 fetching corpus: 950, signal 108625/125854 (executing program) 2022/09/19 13:59:56 fetching corpus: 1000, signal 111082/128647 (executing program) 2022/09/19 13:59:56 fetching corpus: 1050, signal 113639/131434 (executing program) 2022/09/19 13:59:56 fetching corpus: 1100, signal 116582/134471 (executing program) 2022/09/19 13:59:56 fetching corpus: 1150, signal 118416/136658 (executing program) 2022/09/19 13:59:57 fetching corpus: 1200, signal 121476/139622 (executing program) 2022/09/19 13:59:57 fetching corpus: 1250, signal 124042/142189 (executing program) 2022/09/19 13:59:57 fetching corpus: 1300, signal 126641/144696 (executing program) 2022/09/19 13:59:57 fetching corpus: 1350, signal 127813/146239 (executing program) 2022/09/19 13:59:57 fetching corpus: 1400, signal 129620/148175 (executing program) 2022/09/19 13:59:57 fetching corpus: 1450, signal 130765/149567 (executing program) 2022/09/19 13:59:57 fetching corpus: 1500, signal 132738/151537 (executing program) 2022/09/19 13:59:58 fetching corpus: 1549, signal 135301/153803 (executing program) 2022/09/19 13:59:58 fetching corpus: 1599, signal 137547/155870 (executing program) 2022/09/19 13:59:58 fetching corpus: 1649, signal 138360/156905 (executing program) 2022/09/19 13:59:58 fetching corpus: 1699, signal 139140/157925 (executing program) 2022/09/19 13:59:58 fetching corpus: 1749, signal 141571/159956 (executing program) 2022/09/19 13:59:58 fetching corpus: 1799, signal 143019/161404 (executing program) 2022/09/19 13:59:58 fetching corpus: 1848, signal 144048/162510 (executing program) 2022/09/19 13:59:59 fetching corpus: 1898, signal 145837/164079 (executing program) 2022/09/19 13:59:59 fetching corpus: 1947, signal 147901/165738 (executing program) 2022/09/19 13:59:59 fetching corpus: 1997, signal 148679/166631 (executing program) 2022/09/19 13:59:59 fetching corpus: 2045, signal 150106/167920 (executing program) 2022/09/19 13:59:59 fetching corpus: 2095, signal 151082/168938 (executing program) 2022/09/19 13:59:59 fetching corpus: 2145, signal 152319/170035 (executing program) 2022/09/19 13:59:59 fetching corpus: 2194, signal 153140/170871 (executing program) 2022/09/19 13:59:59 fetching corpus: 2241, signal 154716/172096 (executing program) 2022/09/19 14:00:00 fetching corpus: 2288, signal 155690/172997 (executing program) 2022/09/19 14:00:00 fetching corpus: 2337, signal 156749/173897 (executing program) 2022/09/19 14:00:00 fetching corpus: 2387, signal 158119/174864 (executing program) 2022/09/19 14:00:00 fetching corpus: 2437, signal 159334/175794 (executing program) 2022/09/19 14:00:00 fetching corpus: 2487, signal 160790/176778 (executing program) 2022/09/19 14:00:00 fetching corpus: 2537, signal 161386/177363 (executing program) 2022/09/19 14:00:00 fetching corpus: 2587, signal 162090/178019 (executing program) 2022/09/19 14:00:00 fetching corpus: 2637, signal 162622/178552 (executing program) 2022/09/19 14:00:01 fetching corpus: 2687, signal 163556/179236 (executing program) 2022/09/19 14:00:01 fetching corpus: 2737, signal 164253/179861 (executing program) 2022/09/19 14:00:01 fetching corpus: 2787, signal 165738/180644 (executing program) 2022/09/19 14:00:01 fetching corpus: 2837, signal 166834/181305 (executing program) 2022/09/19 14:00:01 fetching corpus: 2887, signal 167535/181858 (executing program) 2022/09/19 14:00:01 fetching corpus: 2937, signal 168266/182389 (executing program) 2022/09/19 14:00:01 fetching corpus: 2987, signal 169276/182998 (executing program) 2022/09/19 14:00:01 fetching corpus: 3037, signal 170410/183595 (executing program) 2022/09/19 14:00:02 fetching corpus: 3087, signal 171848/184339 (executing program) 2022/09/19 14:00:02 fetching corpus: 3137, signal 172586/184790 (executing program) 2022/09/19 14:00:02 fetching corpus: 3187, signal 173357/185214 (executing program) 2022/09/19 14:00:02 fetching corpus: 3237, signal 174235/185693 (executing program) 2022/09/19 14:00:02 fetching corpus: 3286, signal 174727/186017 (executing program) 2022/09/19 14:00:02 fetching corpus: 3336, signal 175896/186497 (executing program) 2022/09/19 14:00:02 fetching corpus: 3385, signal 176722/186869 (executing program) 2022/09/19 14:00:03 fetching corpus: 3435, signal 177640/187315 (executing program) 2022/09/19 14:00:03 fetching corpus: 3485, signal 178364/187609 (executing program) 2022/09/19 14:00:03 fetching corpus: 3535, signal 179223/187969 (executing program) 2022/09/19 14:00:03 fetching corpus: 3585, signal 179973/188289 (executing program) 2022/09/19 14:00:03 fetching corpus: 3635, signal 181038/188615 (executing program) 2022/09/19 14:00:03 fetching corpus: 3685, signal 181622/188854 (executing program) 2022/09/19 14:00:03 fetching corpus: 3735, signal 182076/189057 (executing program) 2022/09/19 14:00:03 fetching corpus: 3785, signal 182761/189296 (executing program) 2022/09/19 14:00:03 fetching corpus: 3835, signal 183326/189484 (executing program) 2022/09/19 14:00:04 fetching corpus: 3885, signal 184116/189698 (executing program) 2022/09/19 14:00:04 fetching corpus: 3935, signal 185324/190300 (executing program) 2022/09/19 14:00:04 fetching corpus: 3980, signal 185877/190448 (executing program) 2022/09/19 14:00:04 fetching corpus: 3980, signal 185975/190529 (executing program) 2022/09/19 14:00:04 fetching corpus: 3980, signal 185975/190588 (executing program) 2022/09/19 14:00:04 fetching corpus: 3980, signal 185975/190639 (executing program) 2022/09/19 14:00:04 fetching corpus: 3980, signal 185975/190698 (executing program) 2022/09/19 14:00:04 fetching corpus: 3980, signal 185975/190765 (executing program) 2022/09/19 14:00:04 fetching corpus: 3980, signal 185975/190805 (executing program) 2022/09/19 14:00:04 fetching corpus: 3980, signal 185975/190851 (executing program) 2022/09/19 14:00:04 fetching corpus: 3980, signal 185975/190899 (executing program) 2022/09/19 14:00:04 fetching corpus: 3980, signal 185975/190952 (executing program) 2022/09/19 14:00:04 fetching corpus: 3980, signal 185975/190998 (executing program) 2022/09/19 14:00:04 fetching corpus: 3980, signal 185975/191050 (executing program) 2022/09/19 14:00:04 fetching corpus: 3980, signal 185975/191110 (executing program) 2022/09/19 14:00:04 fetching corpus: 3980, signal 185975/191146 (executing program) 2022/09/19 14:00:04 fetching corpus: 3980, signal 185975/191146 (executing program) 2022/09/19 14:00:06 starting 8 fuzzer processes 14:00:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x0) pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 14:00:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) 14:00:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x81, 0x4) sendmmsg$inet6(r0, &(0x7f0000003440)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) [ 71.470158] audit: type=1400 audit(1663596006.741:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:00:06 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 14:00:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000300), 0x4) 14:00:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f8000020004000000000000000000001000000000000000200000001000600000000000000000000000000800029a3169df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400028020000200000004f8000020004000000000000000000001000000000000000200000001000600000000000000000000000000800029a3169df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4200}, {&(0x7f0000010700)="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", 0x120, 0x4400}, {&(0x7f0000010900)="2e20202020202020202020100034eb70325132510000eb7032510300000000002e2e202020202020202020100034eb70325132510000eb70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200034eb70325132510000eb70325104001a040000", 0x80, 0x14400}, {&(0x7f0000010a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x24400}, {&(0x7f0000010f00)='syzkallers\x00'/32, 0x20, 0x34400}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x54400}], 0x0, &(0x7f0000011100)) 14:00:06 executing program 6: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580)) r0 = semget$private(0x0, 0x4, 0x0) semctl$IPC_RMID(r0, 0x0, 0x10) 14:00:06 executing program 7: get_robust_list(0x0, 0x0, 0x0) [ 72.814813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.816905] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.820199] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.823757] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.826155] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.827788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.832960] Bluetooth: hci0: HCI_REQ-0x0c1a [ 72.858327] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.859853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.862471] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.863729] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.865829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.867122] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.870244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.872267] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.875678] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.885427] Bluetooth: hci1: HCI_REQ-0x0c1a [ 72.889807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.894579] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.895906] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.953691] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 72.956148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.959431] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 72.964401] Bluetooth: hci2: HCI_REQ-0x0c1a [ 72.966281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 72.978337] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 72.982756] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.984478] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 72.986522] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.988430] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 72.990741] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 72.992586] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.994027] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 72.995573] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 72.998338] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 72.999711] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 73.001509] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.003614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.004935] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 73.007640] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 73.009093] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 73.011510] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 73.016233] Bluetooth: hci7: HCI_REQ-0x0c1a [ 73.016631] Bluetooth: hci4: HCI_REQ-0x0c1a [ 73.017145] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.030496] Bluetooth: hci5: HCI_REQ-0x0c1a [ 73.044260] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 73.044828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.075308] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 73.107712] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.108853] Bluetooth: hci6: HCI_REQ-0x0c1a [ 73.110051] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.125251] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.133222] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.134666] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.206196] Bluetooth: hci3: HCI_REQ-0x0c1a [ 74.896782] Bluetooth: hci1: command 0x0409 tx timeout [ 74.897729] Bluetooth: hci0: command 0x0409 tx timeout [ 75.024059] Bluetooth: hci4: command 0x0409 tx timeout [ 75.026037] Bluetooth: hci2: command 0x0409 tx timeout [ 75.088053] Bluetooth: hci7: command 0x0409 tx timeout [ 75.088892] Bluetooth: hci5: command 0x0409 tx timeout [ 75.153053] Bluetooth: hci6: command 0x0409 tx timeout [ 75.280085] Bluetooth: hci3: command 0x0409 tx timeout [ 76.944074] Bluetooth: hci0: command 0x041b tx timeout [ 76.945049] Bluetooth: hci1: command 0x041b tx timeout [ 77.072084] Bluetooth: hci2: command 0x041b tx timeout [ 77.072944] Bluetooth: hci4: command 0x041b tx timeout [ 77.136126] Bluetooth: hci5: command 0x041b tx timeout [ 77.137865] Bluetooth: hci7: command 0x041b tx timeout [ 77.200066] Bluetooth: hci6: command 0x041b tx timeout [ 77.328059] Bluetooth: hci3: command 0x041b tx timeout [ 78.992159] Bluetooth: hci1: command 0x040f tx timeout [ 78.993090] Bluetooth: hci0: command 0x040f tx timeout [ 79.120388] Bluetooth: hci4: command 0x040f tx timeout [ 79.121326] Bluetooth: hci2: command 0x040f tx timeout [ 79.184051] Bluetooth: hci7: command 0x040f tx timeout [ 79.184903] Bluetooth: hci5: command 0x040f tx timeout [ 79.248108] Bluetooth: hci6: command 0x040f tx timeout [ 79.380998] Bluetooth: hci3: command 0x040f tx timeout [ 81.040059] Bluetooth: hci0: command 0x0419 tx timeout [ 81.040532] Bluetooth: hci1: command 0x0419 tx timeout [ 81.168140] Bluetooth: hci2: command 0x0419 tx timeout [ 81.168611] Bluetooth: hci4: command 0x0419 tx timeout [ 81.232072] Bluetooth: hci5: command 0x0419 tx timeout [ 81.232523] Bluetooth: hci7: command 0x0419 tx timeout [ 81.296139] Bluetooth: hci6: command 0x0419 tx timeout [ 81.424029] Bluetooth: hci3: command 0x0419 tx timeout 14:01:05 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000b00), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0x0, 0x0, 0x6, 0x4, 0x0, 0x7fffffff, 0x80400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x5, 0x7}, 0x4003, 0xb7, 0x6, 0x3, 0xb06, 0xfffffffe, 0xfffe, 0x0, 0x46, 0x0, 0x2}, r1, 0xd, r0, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="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"]) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = dup3(r0, r2, 0x80000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x80010, r5, 0x10000000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat$loop(r3, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000240)=[r8, r7, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) [ 130.527158] audit: type=1400 audit(1663596065.798:7): avc: denied { open } for pid=3784 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 130.529028] audit: type=1400 audit(1663596065.798:8): avc: denied { kernel } for pid=3784 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 130.537644] ------------[ cut here ]------------ [ 130.537663] [ 130.537666] ====================================================== [ 130.537670] WARNING: possible circular locking dependency detected [ 130.537674] 6.0.0-rc6-next-20220919 #1 Not tainted [ 130.537680] ------------------------------------------------------ [ 130.537683] syz-executor.3/3785 is trying to acquire lock: [ 130.537689] ffffffff853fa838 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 130.537726] [ 130.537726] but task is already holding lock: [ 130.537728] ffff88800e11c820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 130.537755] [ 130.537755] which lock already depends on the new lock. [ 130.537755] [ 130.537758] [ 130.537758] the existing dependency chain (in reverse order) is: [ 130.537761] [ 130.537761] -> #3 (&ctx->lock){....}-{2:2}: [ 130.537775] _raw_spin_lock+0x2a/0x40 [ 130.537791] __perf_event_task_sched_out+0x53b/0x18d0 [ 130.537804] __schedule+0xedd/0x2470 [ 130.537814] schedule+0xda/0x1b0 [ 130.537823] futex_wait_queue+0xf5/0x1e0 [ 130.537835] futex_wait+0x28e/0x690 [ 130.537844] do_futex+0x2ff/0x380 [ 130.537862] __x64_sys_futex+0x1c6/0x4d0 [ 130.537871] do_syscall_64+0x3b/0x90 [ 130.537884] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.537901] [ 130.537901] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 130.537915] _raw_spin_lock_nested+0x30/0x40 [ 130.537929] raw_spin_rq_lock_nested+0x1e/0x30 [ 130.537941] task_fork_fair+0x63/0x4d0 [ 130.537963] sched_cgroup_fork+0x3d0/0x540 [ 130.537977] copy_process+0x4183/0x6e20 [ 130.537987] kernel_clone+0xe7/0x890 [ 130.537996] user_mode_thread+0xad/0xf0 [ 130.538006] rest_init+0x24/0x250 [ 130.538022] arch_call_rest_init+0xf/0x14 [ 130.538033] start_kernel+0x4c1/0x4e6 [ 130.538043] secondary_startup_64_no_verify+0xe0/0xeb [ 130.538057] [ 130.538057] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 130.538070] _raw_spin_lock_irqsave+0x39/0x60 [ 130.538085] try_to_wake_up+0xab/0x1920 [ 130.538098] up+0x75/0xb0 [ 130.538109] __up_console_sem+0x6e/0x80 [ 130.538123] console_unlock+0x46a/0x590 [ 130.538139] do_con_write+0xc05/0x1d50 [ 130.538150] con_write+0x21/0x40 [ 130.538160] n_tty_write+0x4d4/0xfe0 [ 130.538172] file_tty_write.constprop.0+0x49c/0x8f0 [ 130.538183] vfs_write+0x9c3/0xd90 [ 130.538201] ksys_write+0x127/0x250 [ 130.538217] do_syscall_64+0x3b/0x90 [ 130.538230] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.538247] [ 130.538247] -> #0 ((console_sem).lock){....}-{2:2}: [ 130.538260] __lock_acquire+0x2a02/0x5e70 [ 130.538276] lock_acquire+0x1a2/0x530 [ 130.538291] _raw_spin_lock_irqsave+0x39/0x60 [ 130.538306] down_trylock+0xe/0x70 [ 130.538318] __down_trylock_console_sem+0x3b/0xd0 [ 130.538334] vprintk_emit+0x16b/0x560 [ 130.538349] vprintk+0x84/0xa0 [ 130.538365] _printk+0xba/0xf1 [ 130.538381] report_bug.cold+0x72/0xab [ 130.538394] handle_bug+0x3c/0x70 [ 130.538406] exc_invalid_op+0x14/0x50 [ 130.538419] asm_exc_invalid_op+0x16/0x20 [ 130.538435] group_sched_out.part.0+0x2c7/0x460 [ 130.538445] ctx_sched_out+0x8f1/0xc10 [ 130.538455] __perf_event_task_sched_out+0x6d0/0x18d0 [ 130.538467] __schedule+0xedd/0x2470 [ 130.538477] schedule+0xda/0x1b0 [ 130.538486] futex_wait_queue+0xf5/0x1e0 [ 130.538496] futex_wait+0x28e/0x690 [ 130.538506] do_futex+0x2ff/0x380 [ 130.538523] __x64_sys_futex+0x1c6/0x4d0 [ 130.538532] do_syscall_64+0x3b/0x90 [ 130.538545] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.538562] [ 130.538562] other info that might help us debug this: [ 130.538562] [ 130.538564] Chain exists of: [ 130.538564] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 130.538564] [ 130.538579] Possible unsafe locking scenario: [ 130.538579] [ 130.538581] CPU0 CPU1 [ 130.538583] ---- ---- [ 130.538585] lock(&ctx->lock); [ 130.538591] lock(&rq->__lock); [ 130.538598] lock(&ctx->lock); [ 130.538604] lock((console_sem).lock); [ 130.538609] [ 130.538609] *** DEADLOCK *** [ 130.538609] [ 130.538611] 2 locks held by syz-executor.3/3785: [ 130.538618] #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 130.538644] #1: ffff88800e11c820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 130.538671] [ 130.538671] stack backtrace: [ 130.538674] CPU: 1 PID: 3785 Comm: syz-executor.3 Not tainted 6.0.0-rc6-next-20220919 #1 [ 130.538686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 130.538695] Call Trace: [ 130.538699] [ 130.538703] dump_stack_lvl+0x8b/0xb3 [ 130.538717] check_noncircular+0x263/0x2e0 [ 130.538733] ? format_decode+0x26c/0xb50 [ 130.538748] ? print_circular_bug+0x450/0x450 [ 130.538765] ? enable_ptr_key_workfn+0x20/0x20 [ 130.538779] ? format_decode+0x26c/0xb50 [ 130.538795] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 130.538812] __lock_acquire+0x2a02/0x5e70 [ 130.538833] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 130.538855] lock_acquire+0x1a2/0x530 [ 130.538871] ? down_trylock+0xe/0x70 [ 130.538885] ? lock_release+0x750/0x750 [ 130.538905] ? vprintk+0x84/0xa0 [ 130.538923] _raw_spin_lock_irqsave+0x39/0x60 [ 130.538938] ? down_trylock+0xe/0x70 [ 130.538951] down_trylock+0xe/0x70 [ 130.538964] ? vprintk+0x84/0xa0 [ 130.538980] __down_trylock_console_sem+0x3b/0xd0 [ 130.538997] vprintk_emit+0x16b/0x560 [ 130.539016] vprintk+0x84/0xa0 [ 130.539033] _printk+0xba/0xf1 [ 130.539050] ? record_print_text.cold+0x16/0x16 [ 130.539071] ? report_bug.cold+0x66/0xab [ 130.539085] ? group_sched_out.part.0+0x2c7/0x460 [ 130.539097] report_bug.cold+0x72/0xab [ 130.539111] handle_bug+0x3c/0x70 [ 130.539125] exc_invalid_op+0x14/0x50 [ 130.539139] asm_exc_invalid_op+0x16/0x20 [ 130.539156] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 130.539170] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d 5b 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 130.539181] RSP: 0018:ffff88801d9078f8 EFLAGS: 00010006 [ 130.539190] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 130.539197] RDX: ffff888015e78000 RSI: ffffffff81566077 RDI: 0000000000000005 [ 130.539205] RBP: ffff88803d430000 R08: 0000000000000005 R09: 0000000000000001 [ 130.539213] R10: 0000000000000000 R11: ffffffff865ac05b R12: ffff88800e11c800 [ 130.539220] R13: ffff88806cf3d140 R14: ffffffff8547c620 R15: 0000000000000002 [ 130.539231] ? group_sched_out.part.0+0x2c7/0x460 [ 130.539244] ? group_sched_out.part.0+0x2c7/0x460 [ 130.539257] ctx_sched_out+0x8f1/0xc10 [ 130.539269] __perf_event_task_sched_out+0x6d0/0x18d0 [ 130.539284] ? lock_is_held_type+0xd7/0x130 [ 130.539302] ? __perf_cgroup_move+0x160/0x160 [ 130.539314] ? set_next_entity+0x304/0x550 [ 130.539333] ? lock_is_held_type+0xd7/0x130 [ 130.539352] __schedule+0xedd/0x2470 [ 130.539365] ? io_schedule_timeout+0x150/0x150 [ 130.539377] ? futex_wait_setup+0x166/0x230 [ 130.539391] schedule+0xda/0x1b0 [ 130.539402] futex_wait_queue+0xf5/0x1e0 [ 130.539414] futex_wait+0x28e/0x690 [ 130.539426] ? futex_wait_setup+0x230/0x230 [ 130.539438] ? wake_up_q+0x8b/0xf0 [ 130.539451] ? do_raw_spin_unlock+0x4f/0x220 [ 130.539470] ? futex_wake+0x158/0x490 [ 130.539486] ? fd_install+0x1f9/0x640 [ 130.539501] do_futex+0x2ff/0x380 [ 130.539520] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 130.539544] __x64_sys_futex+0x1c6/0x4d0 [ 130.539556] ? __x64_sys_futex_time32+0x480/0x480 [ 130.539568] ? lock_is_held_type+0xd7/0x130 [ 130.539586] ? rcu_read_lock_sched_held+0x3e/0x80 [ 130.539606] do_syscall_64+0x3b/0x90 [ 130.539620] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.539637] RIP: 0033:0x7f37f6624b19 [ 130.539646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 130.539657] RSP: 002b:00007f37f3b9a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.539668] RAX: ffffffffffffffda RBX: 00007f37f6737f68 RCX: 00007f37f6624b19 [ 130.539676] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f37f6737f68 [ 130.539683] RBP: 00007f37f6737f60 R08: 0000000000000000 R09: 0000000000000000 [ 130.539691] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f37f6737f6c [ 130.539698] R13: 00007ffd1d82e9ef R14: 00007f37f3b9a300 R15: 0000000000022000 [ 130.539711] [ 130.598712] WARNING: CPU: 1 PID: 3785 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 130.599413] Modules linked in: [ 130.599652] CPU: 1 PID: 3785 Comm: syz-executor.3 Not tainted 6.0.0-rc6-next-20220919 #1 [ 130.600259] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 130.601095] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 130.601497] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d 5b 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 130.602846] RSP: 0018:ffff88801d9078f8 EFLAGS: 00010006 [ 130.603244] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 130.603777] RDX: ffff888015e78000 RSI: ffffffff81566077 RDI: 0000000000000005 [ 130.604316] RBP: ffff88803d430000 R08: 0000000000000005 R09: 0000000000000001 [ 130.604854] R10: 0000000000000000 R11: ffffffff865ac05b R12: ffff88800e11c800 [ 130.605393] R13: ffff88806cf3d140 R14: ffffffff8547c620 R15: 0000000000000002 [ 130.605940] FS: 00007f37f3b9a700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 130.606558] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.607004] CR2: 00007fed50a156f4 CR3: 000000003e5de000 CR4: 0000000000350ee0 [ 130.607555] Call Trace: [ 130.607749] [ 130.607931] ctx_sched_out+0x8f1/0xc10 [ 130.608230] __perf_event_task_sched_out+0x6d0/0x18d0 [ 130.608626] ? lock_is_held_type+0xd7/0x130 [ 130.608956] ? __perf_cgroup_move+0x160/0x160 [ 130.609304] ? set_next_entity+0x304/0x550 [ 130.609629] ? lock_is_held_type+0xd7/0x130 [ 130.609967] __schedule+0xedd/0x2470 [ 130.610251] ? io_schedule_timeout+0x150/0x150 [ 130.610596] ? futex_wait_setup+0x166/0x230 [ 130.610936] schedule+0xda/0x1b0 [ 130.611198] futex_wait_queue+0xf5/0x1e0 [ 130.611498] futex_wait+0x28e/0x690 [ 130.611774] ? futex_wait_setup+0x230/0x230 [ 130.612093] ? wake_up_q+0x8b/0xf0 [ 130.612362] ? do_raw_spin_unlock+0x4f/0x220 [ 130.612693] ? futex_wake+0x158/0x490 [ 130.612982] ? fd_install+0x1f9/0x640 [ 130.613270] do_futex+0x2ff/0x380 [ 130.613550] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 130.614005] __x64_sys_futex+0x1c6/0x4d0 [ 130.614305] ? __x64_sys_futex_time32+0x480/0x480 [ 130.614676] ? lock_is_held_type+0xd7/0x130 [ 130.615009] ? rcu_read_lock_sched_held+0x3e/0x80 [ 130.615390] do_syscall_64+0x3b/0x90 [ 130.615685] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.616086] RIP: 0033:0x7f37f6624b19 [ 130.616367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 130.617713] RSP: 002b:00007f37f3b9a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.618273] RAX: ffffffffffffffda RBX: 00007f37f6737f68 RCX: 00007f37f6624b19 [ 130.618807] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f37f6737f68 [ 130.619336] RBP: 00007f37f6737f60 R08: 0000000000000000 R09: 0000000000000000 [ 130.619866] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f37f6737f6c [ 130.620405] R13: 00007ffd1d82e9ef R14: 00007f37f3b9a300 R15: 0000000000022000 [ 130.620938] [ 130.621115] irq event stamp: 840 [ 130.621369] hardirqs last enabled at (839): [] syscall_enter_from_user_mode+0x1d/0x50 [ 130.622074] hardirqs last disabled at (840): [] __schedule+0x1225/0x2470 [ 130.622687] softirqs last enabled at (700): [] __irq_exit_rcu+0x11b/0x180 [ 130.623325] softirqs last disabled at (655): [] __irq_exit_rcu+0x11b/0x180 [ 130.623952] ---[ end trace 0000000000000000 ]--- 14:01:05 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000b00), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0x0, 0x0, 0x6, 0x4, 0x0, 0x7fffffff, 0x80400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x5, 0x7}, 0x4003, 0xb7, 0x6, 0x3, 0xb06, 0xfffffffe, 0xfffe, 0x0, 0x46, 0x0, 0x2}, r1, 0xd, r0, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c6530008425db2c4533299109c57672c2db0005f27575807af71535e79d5517102a8640232a272019654a55cca9b9a33b9d813ea9ed21a56d4824589906b4ab2c824f2a6d5c4f20c70d0a4296a1b436a87d29ea101258be5845c588749110bbb129c24ccb2d3a09b6195dc93c7eb4af0e1296a8e6a85e6f94a5c000b8b06c5bd42816ec520b8fe8c02dcc5598038982483531b88254c2bdc724f7cd0e8705791225ded0ea3e2b2b9e0041cec7f3886ece9bbc1c50413798a4ee36902a6113f3d2cec73c36823d72c71de6451749cd140aa5b36ef8093b8f11dccc033e1c43119cf9fc478f02704bc92d40ca30185227b64de8bf51abea8e47689f27c5788c914ec20a6aca85ed6b3d7fd54648a18d55908eed43665e1da9e94ec2bb38716e8bb58e79104c773f5479404ad2ce106b8e972871f2e532c1f8101d0e717c8c6d05dfeabe125571eab8e5f879acb932cb28ed0706608738b1ca66551ceecffc75068ab5381d3aa8e97c5e317c928faffc9c89dfd3ba7497d86226c148d186009b5f826fec412461e1c5874117a76a39cf657fc3530a7a4cf50864edd0ae670815b03f3d841f2d8fb4af5116d320392c1bde6080d50f4d20919fda297626cfb4d7a3cab06fc7b8f7f6a977"]) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = dup3(r0, r2, 0x80000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x80010, r5, 0x10000000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat$loop(r3, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000240)=[r8, r7, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) 14:01:06 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000b00), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0x0, 0x0, 0x6, 0x4, 0x0, 0x7fffffff, 0x80400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x5, 0x7}, 0x4003, 0xb7, 0x6, 0x3, 0xb06, 0xfffffffe, 0xfffe, 0x0, 0x46, 0x0, 0x2}, r1, 0xd, r0, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="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"]) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = dup3(r0, r2, 0x80000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x80010, r5, 0x10000000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat$loop(r3, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000240)=[r8, r7, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) 14:01:06 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000b00), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0x0, 0x0, 0x6, 0x4, 0x0, 0x7fffffff, 0x80400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x5, 0x7}, 0x4003, 0xb7, 0x6, 0x3, 0xb06, 0xfffffffe, 0xfffe, 0x0, 0x46, 0x0, 0x2}, r1, 0xd, r0, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="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"]) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = dup3(r0, r2, 0x80000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x80010, r5, 0x10000000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat$loop(r3, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000240)=[r8, r7, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) 14:01:06 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000b00), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0x0, 0x0, 0x6, 0x4, 0x0, 0x7fffffff, 0x80400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x5, 0x7}, 0x4003, 0xb7, 0x6, 0x3, 0xb06, 0xfffffffe, 0xfffe, 0x0, 0x46, 0x0, 0x2}, r1, 0xd, r0, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c6530008425db2c4533299109c57672c2db0005f27575807af71535e79d5517102a8640232a272019654a55cca9b9a33b9d813ea9ed21a56d4824589906b4ab2c824f2a6d5c4f20c70d0a4296a1b436a87d29ea101258be5845c588749110bbb129c24ccb2d3a09b6195dc93c7eb4af0e1296a8e6a85e6f94a5c000b8b06c5bd42816ec520b8fe8c02dcc5598038982483531b88254c2bdc724f7cd0e8705791225ded0ea3e2b2b9e0041cec7f3886ece9bbc1c50413798a4ee36902a6113f3d2cec73c36823d72c71de6451749cd140aa5b36ef8093b8f11dccc033e1c43119cf9fc478f02704bc92d40ca30185227b64de8bf51abea8e47689f27c5788c914ec20a6aca85ed6b3d7fd54648a18d55908eed43665e1da9e94ec2bb38716e8bb58e79104c773f5479404ad2ce106b8e972871f2e532c1f8101d0e717c8c6d05dfeabe125571eab8e5f879acb932cb28ed0706608738b1ca66551ceecffc75068ab5381d3aa8e97c5e317c928faffc9c89dfd3ba7497d86226c148d186009b5f826fec412461e1c5874117a76a39cf657fc3530a7a4cf50864edd0ae670815b03f3d841f2d8fb4af5116d320392c1bde6080d50f4d20919fda297626cfb4d7a3cab06fc7b8f7f6a977"]) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = dup3(r0, r2, 0x80000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x80010, r5, 0x10000000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat$loop(r3, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000240)=[r8, r7, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) 14:01:06 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000b00), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0x0, 0x0, 0x6, 0x4, 0x0, 0x7fffffff, 0x80400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x5, 0x7}, 0x4003, 0xb7, 0x6, 0x3, 0xb06, 0xfffffffe, 0xfffe, 0x0, 0x46, 0x0, 0x2}, r1, 0xd, r0, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="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"]) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = dup3(r0, r2, 0x80000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x80010, r5, 0x10000000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat$loop(r3, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000240)=[r8, r7, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) 14:01:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) 14:01:06 executing program 6: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580)) r0 = semget$private(0x0, 0x4, 0x0) semctl$IPC_RMID(r0, 0x0, 0x10) [ 136.144109] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 136.208004] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 136.209341] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 136.210278] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 136.211104] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 140.368110] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 140.496032] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 140.496044] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 140.497846] Bluetooth: hci5: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 14:01:06 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffea000038e7c0 RCX=0000000000000000 RDX=ffffea000038e781 RSI=ffffffff8112af4e RDI=0000777f80000000 RBP=0000000000000000 RSP=ffff88801856fb90 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000008 R11=0000000000000001 R12=ffffffff817bcc90 R13=ffffffff816c94cf R14=0000000000000000 R15=ffff888008478c80 RIP=ffffffff81786ab7 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000558cf9884578 CR3=000000003b6b0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b2e71 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff88801d907348 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000037 R11=0000000000000001 R12=0000000000000037 R13=ffffffff87641b60 R14=0000000000000010 R15=ffffffff822b2e60 RIP=ffffffff822b2ec9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f37f3b9a700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fed50a156f4 CR3=000000003e5de000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f37f670b7c0 00007f37f670b7c8 YMM02=0000000000000000 0000000000000000 00007f37f670b7e0 00007f37f670b7c0 YMM03=0000000000000000 0000000000000000 00007f37f670b7c8 00007f37f670b7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000