syzkaller login: [ 42.859657] sshd (244) used greatest stack depth: 24608 bytes left Warning: Permanently added '[localhost]:17186' (ECDSA) to the list of known hosts. 2022/09/21 12:24:05 fuzzer started 2022/09/21 12:24:06 dialing manager at localhost:40289 [ 44.701949] cgroup: Unknown subsys name 'net' [ 44.807407] cgroup: Unknown subsys name 'rlimit' 2022/09/21 12:24:20 syscalls: 2215 2022/09/21 12:24:20 code coverage: enabled 2022/09/21 12:24:20 comparison tracing: enabled 2022/09/21 12:24:20 extra coverage: enabled 2022/09/21 12:24:20 setuid sandbox: enabled 2022/09/21 12:24:20 namespace sandbox: enabled 2022/09/21 12:24:20 Android sandbox: enabled 2022/09/21 12:24:20 fault injection: enabled 2022/09/21 12:24:20 leak checking: enabled 2022/09/21 12:24:20 net packet injection: enabled 2022/09/21 12:24:20 net device setup: enabled 2022/09/21 12:24:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/21 12:24:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/21 12:24:20 USB emulation: enabled 2022/09/21 12:24:20 hci packet injection: enabled 2022/09/21 12:24:20 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220921) 2022/09/21 12:24:20 802.15.4 emulation: enabled 2022/09/21 12:24:20 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/21 12:24:20 fetching corpus: 50, signal 29014/31321 (executing program) 2022/09/21 12:24:21 fetching corpus: 100, signal 40693/43185 (executing program) 2022/09/21 12:24:21 fetching corpus: 150, signal 45645/48482 (executing program) 2022/09/21 12:24:21 fetching corpus: 200, signal 53757/56368 (executing program) 2022/09/21 12:24:21 fetching corpus: 250, signal 58303/60673 (executing program) 2022/09/21 12:24:21 fetching corpus: 300, signal 65457/66940 (executing program) 2022/09/21 12:24:21 fetching corpus: 328, signal 68369/69393 (executing program) 2022/09/21 12:24:21 fetching corpus: 328, signal 68369/69517 (executing program) 2022/09/21 12:24:21 fetching corpus: 328, signal 68369/69677 (executing program) 2022/09/21 12:24:21 fetching corpus: 328, signal 68369/69793 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/69937 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/70065 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/70197 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/70331 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/70465 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/70601 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/70722 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/70869 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/70985 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/71123 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/71236 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/71370 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/71498 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/71627 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/71767 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/71875 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/72012 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/72153 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/72279 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/72407 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/72531 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/72654 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/72791 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/72828 (executing program) 2022/09/21 12:24:22 fetching corpus: 328, signal 68369/72828 (executing program) 2022/09/21 12:24:24 starting 8 fuzzer processes 12:24:24 executing program 0: setitimer(0x2, 0x0, 0x0) 12:24:24 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x460, &(0x7f00000005c0)=ANY=[]) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x0) 12:24:24 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'sit0\x00', 0x0}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) [ 62.959254] audit: type=1400 audit(1663763064.594:6): avc: denied { execmem } for pid=287 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:24:24 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x4bfb, 0x0) 12:24:24 executing program 3: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000100)='/,*\x00', 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000001c0)=0x1) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 12:24:24 executing program 5: pipe2(0x0, 0x0) 12:24:24 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000140)) 12:24:24 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) statfs(0x0, 0x0) [ 64.318458] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.319636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.320973] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.324277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 64.325722] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 64.326954] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.327492] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.328937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.329045] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.329937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.331412] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.337409] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.339060] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.341808] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.342909] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.344860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.345869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.347494] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.348796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.349585] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.351119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.355492] Bluetooth: hci1: HCI_REQ-0x0c1a [ 64.358032] Bluetooth: hci2: HCI_REQ-0x0c1a [ 64.358453] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 64.373006] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 64.378634] Bluetooth: hci4: HCI_REQ-0x0c1a [ 64.378740] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 64.384953] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 64.388402] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.390277] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 64.391388] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 64.392330] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.394047] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 64.395611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 64.397028] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 64.398690] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.399884] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 64.424958] Bluetooth: hci5: HCI_REQ-0x0c1a [ 64.437247] Bluetooth: hci6: HCI_REQ-0x0c1a [ 64.453536] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.464519] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.475801] Bluetooth: hci3: HCI_REQ-0x0c1a [ 64.548004] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 64.551410] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 64.553998] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 64.558638] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 64.560942] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 64.563183] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 64.576172] Bluetooth: hci7: HCI_REQ-0x0c1a [ 66.261144] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 66.389660] Bluetooth: hci4: command 0x0409 tx timeout [ 66.390503] Bluetooth: hci1: command 0x0409 tx timeout [ 66.391225] Bluetooth: hci2: command 0x0409 tx timeout [ 66.454188] Bluetooth: hci5: command 0x0409 tx timeout [ 66.517219] Bluetooth: hci3: command 0x0409 tx timeout [ 66.518019] Bluetooth: hci6: command 0x0409 tx timeout [ 66.645827] Bluetooth: hci7: command 0x0409 tx timeout [ 68.437191] Bluetooth: hci2: command 0x041b tx timeout [ 68.437808] Bluetooth: hci1: command 0x041b tx timeout [ 68.438417] Bluetooth: hci4: command 0x041b tx timeout [ 68.501185] Bluetooth: hci5: command 0x041b tx timeout [ 68.565224] Bluetooth: hci6: command 0x041b tx timeout [ 68.565802] Bluetooth: hci3: command 0x041b tx timeout [ 68.693161] Bluetooth: hci7: command 0x041b tx timeout [ 69.469587] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.473385] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.475005] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.478285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.519980] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.526596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.554149] Bluetooth: hci0: HCI_REQ-0x0c1a [ 70.485247] Bluetooth: hci4: command 0x040f tx timeout [ 70.485338] Bluetooth: hci1: command 0x040f tx timeout [ 70.485782] Bluetooth: hci2: command 0x040f tx timeout [ 70.549192] Bluetooth: hci5: command 0x040f tx timeout [ 70.613177] Bluetooth: hci3: command 0x040f tx timeout [ 70.613196] Bluetooth: hci6: command 0x040f tx timeout [ 70.741269] Bluetooth: hci7: command 0x040f tx timeout [ 71.637287] Bluetooth: hci0: command 0x0409 tx timeout [ 72.533275] Bluetooth: hci1: command 0x0419 tx timeout [ 72.533883] Bluetooth: hci4: command 0x0419 tx timeout [ 72.534469] Bluetooth: hci2: command 0x0419 tx timeout [ 72.598209] Bluetooth: hci5: command 0x0419 tx timeout [ 72.661285] Bluetooth: hci3: command 0x0419 tx timeout [ 72.661839] Bluetooth: hci6: command 0x0419 tx timeout [ 72.789307] Bluetooth: hci7: command 0x0419 tx timeout [ 73.685163] Bluetooth: hci0: command 0x041b tx timeout [ 75.733182] Bluetooth: hci0: command 0x040f tx timeout [ 77.781154] Bluetooth: hci0: command 0x0419 tx timeout 12:25:27 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x4bfb, 0x0) 12:25:27 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x4bfb, 0x0) 12:25:27 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x4bfb, 0x0) [ 125.860410] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 125.861759] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 125.862634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 12:25:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0xa5, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x3c}, 0x0, @in=@multicast2}}, 0xe8) sendmmsg$inet6(r0, &(0x7f0000008e00)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) [ 125.868741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 125.876611] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 125.877493] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 125.887118] Bluetooth: hci1: HCI_REQ-0x0c1a 12:25:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0xa5, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x3c}, 0x0, @in=@multicast2}}, 0xe8) sendmmsg$inet6(r0, &(0x7f0000008e00)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) [ 125.922669] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 125.931663] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 125.934733] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 125.937180] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 125.938334] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 125.939017] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 125.943154] Bluetooth: hci2: HCI_REQ-0x0c1a 12:25:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0xa5, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x3c}, 0x0, @in=@multicast2}}, 0xe8) sendmmsg$inet6(r0, &(0x7f0000008e00)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) [ 125.981266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 125.982389] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 125.983051] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 125.984748] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 125.985898] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 125.986917] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 125.992527] Bluetooth: hci3: HCI_REQ-0x0c1a 12:25:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0xa5, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x3c}, 0x0, @in=@multicast2}}, 0xe8) sendmmsg$inet6(r0, &(0x7f0000008e00)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 12:25:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000000)) getresgid(0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x54, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x1a}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x9, 0x0) [ 126.123805] audit: type=1400 audit(1663763127.759:7): avc: denied { open } for pid=3881 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.125417] audit: type=1400 audit(1663763127.759:8): avc: denied { kernel } for pid=3881 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.136012] ------------[ cut here ]------------ [ 126.136036] [ 126.136041] ====================================================== [ 126.136044] WARNING: possible circular locking dependency detected [ 126.136049] 6.0.0-rc6-next-20220921 #1 Not tainted [ 126.136055] ------------------------------------------------------ [ 126.136059] syz-executor.4/3882 is trying to acquire lock: [ 126.136066] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 126.136111] [ 126.136111] but task is already holding lock: [ 126.136114] ffff888008db2820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 126.136145] [ 126.136145] which lock already depends on the new lock. [ 126.136145] [ 126.136148] [ 126.136148] the existing dependency chain (in reverse order) is: [ 126.136152] [ 126.136152] -> #3 (&ctx->lock){....}-{2:2}: [ 126.136167] _raw_spin_lock+0x2a/0x40 [ 126.136187] __perf_event_task_sched_out+0x53b/0x18d0 [ 126.136201] __schedule+0xedd/0x2470 [ 126.136214] schedule+0xda/0x1b0 [ 126.136228] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.136241] syscall_exit_to_user_mode+0x19/0x40 [ 126.136253] do_syscall_64+0x48/0x90 [ 126.136271] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.136284] [ 126.136284] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 126.136298] _raw_spin_lock_nested+0x30/0x40 [ 126.136318] raw_spin_rq_lock_nested+0x1e/0x30 [ 126.136332] task_fork_fair+0x63/0x4d0 [ 126.136351] sched_cgroup_fork+0x3d0/0x540 [ 126.136366] copy_process+0x4183/0x6e20 [ 126.136378] kernel_clone+0xe7/0x890 [ 126.136388] user_mode_thread+0xad/0xf0 [ 126.136399] rest_init+0x24/0x250 [ 126.136410] arch_call_rest_init+0xf/0x14 [ 126.136428] start_kernel+0x4c1/0x4e6 [ 126.136443] secondary_startup_64_no_verify+0xe0/0xeb [ 126.136458] [ 126.136458] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 126.136472] _raw_spin_lock_irqsave+0x39/0x60 [ 126.136492] try_to_wake_up+0xab/0x1930 [ 126.136506] up+0x75/0xb0 [ 126.136521] __up_console_sem+0x6e/0x80 [ 126.136539] console_unlock+0x46a/0x590 [ 126.136556] do_con_write+0xc05/0x1d50 [ 126.136569] con_write+0x21/0x40 [ 126.136580] n_tty_write+0x4d4/0xfe0 [ 126.136595] file_tty_write.constprop.0+0x49c/0x8f0 [ 126.136608] vfs_write+0x9c3/0xd90 [ 126.136628] ksys_write+0x127/0x250 [ 126.136647] do_syscall_64+0x3b/0x90 [ 126.136665] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.136677] [ 126.136677] -> #0 ((console_sem).lock){....}-{2:2}: [ 126.136691] __lock_acquire+0x2a02/0x5e70 [ 126.136710] lock_acquire+0x1a2/0x530 [ 126.136727] _raw_spin_lock_irqsave+0x39/0x60 [ 126.136747] down_trylock+0xe/0x70 [ 126.136762] __down_trylock_console_sem+0x3b/0xd0 [ 126.136780] vprintk_emit+0x16b/0x560 [ 126.136798] vprintk+0x84/0xa0 [ 126.136816] _printk+0xba/0xf1 [ 126.136827] report_bug.cold+0x72/0xab [ 126.136844] handle_bug+0x3c/0x70 [ 126.136861] exc_invalid_op+0x14/0x50 [ 126.136879] asm_exc_invalid_op+0x16/0x20 [ 126.136891] group_sched_out.part.0+0x2c7/0x460 [ 126.136904] ctx_sched_out+0x8f1/0xc10 [ 126.136917] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.136930] __schedule+0xedd/0x2470 [ 126.136944] schedule+0xda/0x1b0 [ 126.136957] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.136968] syscall_exit_to_user_mode+0x19/0x40 [ 126.136980] do_syscall_64+0x48/0x90 [ 126.136997] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.137009] [ 126.137009] other info that might help us debug this: [ 126.137009] [ 126.137012] Chain exists of: [ 126.137012] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 126.137012] [ 126.137028] Possible unsafe locking scenario: [ 126.137028] [ 126.137031] CPU0 CPU1 [ 126.137033] ---- ---- [ 126.137036] lock(&ctx->lock); [ 126.137042] lock(&rq->__lock); [ 126.137049] lock(&ctx->lock); [ 126.137055] lock((console_sem).lock); [ 126.137062] [ 126.137062] *** DEADLOCK *** [ 126.137062] [ 126.137064] 2 locks held by syz-executor.4/3882: [ 126.137071] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 126.137101] #1: ffff888008db2820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 126.137131] [ 126.137131] stack backtrace: [ 126.137134] CPU: 0 PID: 3882 Comm: syz-executor.4 Not tainted 6.0.0-rc6-next-20220921 #1 [ 126.137147] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 126.137156] Call Trace: [ 126.137160] [ 126.137165] dump_stack_lvl+0x8b/0xb3 [ 126.137184] check_noncircular+0x263/0x2e0 [ 126.137203] ? format_decode+0x26c/0xb50 [ 126.137220] ? print_circular_bug+0x450/0x450 [ 126.137239] ? enable_ptr_key_workfn+0x20/0x20 [ 126.137256] ? perf_trace_lock+0x308/0x560 [ 126.137271] ? format_decode+0x26c/0xb50 [ 126.137288] ? memcpy+0x39/0x60 [ 126.137300] ? vsnprintf+0x4ba/0x1600 [ 126.137320] __lock_acquire+0x2a02/0x5e70 [ 126.137346] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 126.137372] lock_acquire+0x1a2/0x530 [ 126.137390] ? down_trylock+0xe/0x70 [ 126.137408] ? lock_release+0x750/0x750 [ 126.137432] ? vprintk+0x84/0xa0 [ 126.137452] _raw_spin_lock_irqsave+0x39/0x60 [ 126.137472] ? down_trylock+0xe/0x70 [ 126.137489] down_trylock+0xe/0x70 [ 126.137505] ? vprintk+0x84/0xa0 [ 126.137524] __down_trylock_console_sem+0x3b/0xd0 [ 126.137543] vprintk_emit+0x16b/0x560 [ 126.137565] vprintk+0x84/0xa0 [ 126.137584] _printk+0xba/0xf1 [ 126.137595] ? record_print_text.cold+0x16/0x16 [ 126.137613] ? report_bug.cold+0x66/0xab [ 126.137631] ? group_sched_out.part.0+0x2c7/0x460 [ 126.137644] report_bug.cold+0x72/0xab [ 126.137664] handle_bug+0x3c/0x70 [ 126.137682] exc_invalid_op+0x14/0x50 [ 126.137701] asm_exc_invalid_op+0x16/0x20 [ 126.137714] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 126.137728] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 2b 12 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 126.137740] RSP: 0018:ffff88803914fc48 EFLAGS: 00010006 [ 126.137750] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 126.137758] RDX: ffff888031bb1ac0 RSI: ffffffff815663a7 RDI: 0000000000000005 [ 126.137766] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001 [ 126.137774] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff888008db2800 [ 126.137782] R13: ffff88806ce3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 126.137795] ? group_sched_out.part.0+0x2c7/0x460 [ 126.137809] ? group_sched_out.part.0+0x2c7/0x460 [ 126.137824] ctx_sched_out+0x8f1/0xc10 [ 126.137838] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.137855] ? lock_is_held_type+0xd7/0x130 [ 126.137869] ? __perf_cgroup_move+0x160/0x160 [ 126.137882] ? set_next_entity+0x304/0x550 [ 126.137901] ? update_curr+0x267/0x740 [ 126.137922] ? lock_is_held_type+0xd7/0x130 [ 126.137936] __schedule+0xedd/0x2470 [ 126.137954] ? io_schedule_timeout+0x150/0x150 [ 126.137971] ? __x64_sys_futex_time32+0x480/0x480 [ 126.137987] schedule+0xda/0x1b0 [ 126.138002] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.138015] syscall_exit_to_user_mode+0x19/0x40 [ 126.138028] do_syscall_64+0x48/0x90 [ 126.138047] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.138060] RIP: 0033:0x7f9ab780bb19 [ 126.138069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.138080] RSP: 002b:00007f9ab4d81218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.138091] RAX: 0000000000000001 RBX: 00007f9ab791ef68 RCX: 00007f9ab780bb19 [ 126.138099] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9ab791ef6c [ 126.138107] RBP: 00007f9ab791ef60 R08: 000000000000000e R09: 0000000000000000 [ 126.138115] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f9ab791ef6c [ 126.138123] R13: 00007ffed6a2ccbf R14: 00007f9ab4d81300 R15: 0000000000022000 [ 126.138138] [ 126.193861] WARNING: CPU: 0 PID: 3882 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 126.194519] Modules linked in: [ 126.194753] CPU: 0 PID: 3882 Comm: syz-executor.4 Not tainted 6.0.0-rc6-next-20220921 #1 [ 126.195330] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 126.196136] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 126.196530] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 2b 12 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 126.197822] RSP: 0018:ffff88803914fc48 EFLAGS: 00010006 [ 126.198205] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 126.198713] RDX: ffff888031bb1ac0 RSI: ffffffff815663a7 RDI: 0000000000000005 [ 126.199231] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001 [ 126.199746] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff888008db2800 [ 126.200262] R13: ffff88806ce3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 126.200775] FS: 00007f9ab4d81700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 126.201356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.201776] CR2: 00007f9ab791f018 CR3: 000000002d43c000 CR4: 0000000000350ef0 [ 126.202296] Call Trace: [ 126.202487] [ 126.202657] ctx_sched_out+0x8f1/0xc10 [ 126.202952] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.203350] ? lock_is_held_type+0xd7/0x130 [ 126.203669] ? __perf_cgroup_move+0x160/0x160 [ 126.203999] ? set_next_entity+0x304/0x550 [ 126.204314] ? update_curr+0x267/0x740 [ 126.204612] ? lock_is_held_type+0xd7/0x130 [ 126.204930] __schedule+0xedd/0x2470 [ 126.205210] ? io_schedule_timeout+0x150/0x150 [ 126.205554] ? __x64_sys_futex_time32+0x480/0x480 [ 126.205908] schedule+0xda/0x1b0 [ 126.206170] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.206528] syscall_exit_to_user_mode+0x19/0x40 [ 126.206876] do_syscall_64+0x48/0x90 [ 126.207155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.207538] RIP: 0033:0x7f9ab780bb19 [ 126.207812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.209111] RSP: 002b:00007f9ab4d81218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.209652] RAX: 0000000000000001 RBX: 00007f9ab791ef68 RCX: 00007f9ab780bb19 [ 126.210161] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9ab791ef6c [ 126.210675] RBP: 00007f9ab791ef60 R08: 000000000000000e R09: 0000000000000000 [ 126.211182] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f9ab791ef6c [ 126.211692] R13: 00007ffed6a2ccbf R14: 00007f9ab4d81300 R15: 0000000000022000 [ 126.212217] [ 126.212390] irq event stamp: 624 [ 126.212633] hardirqs last enabled at (623): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 126.213300] hardirqs last disabled at (624): [] __schedule+0x1225/0x2470 [ 126.213891] softirqs last enabled at (442): [] __irq_exit_rcu+0x11b/0x180 [ 126.214503] softirqs last disabled at (369): [] __irq_exit_rcu+0x11b/0x180 [ 126.215111] ---[ end trace 0000000000000000 ]--- [ 126.341002] autofs4:pid:3882:validate_dev_ioctl: path string terminator missing for cmd(0xc0189376) [ 126.362054] autofs4:pid:3882:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1768304430.3237228), cmd(0xc0189376) [ 126.363120] autofs4:pid:3882:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189376) [ 127.894108] Bluetooth: hci1: command 0x0409 tx timeout [ 127.957238] Bluetooth: hci2: command 0x0409 tx timeout [ 128.021125] Bluetooth: hci3: command 0x0409 tx timeout [ 128.277134] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 128.277139] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 128.277630] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 128.278099] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 129.941141] Bluetooth: hci1: command 0x041b tx timeout [ 130.006141] Bluetooth: hci2: command 0x041b tx timeout [ 130.070102] Bluetooth: hci3: command 0x041b tx timeout [ 130.664441] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.665735] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.667041] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.668976] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.670170] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 130.670999] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.673300] Bluetooth: hci4: HCI_REQ-0x0c1a [ 131.989114] Bluetooth: hci1: command 0x040f tx timeout [ 132.054120] Bluetooth: hci2: command 0x040f tx timeout [ 132.117123] Bluetooth: hci3: command 0x040f tx timeout [ 132.694110] Bluetooth: hci4: command 0x0409 tx timeout [ 132.757099] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 132.757162] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 132.757623] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 134.037362] Bluetooth: hci1: command 0x0419 tx timeout [ 134.101119] Bluetooth: hci2: command 0x0419 tx timeout [ 134.165132] Bluetooth: hci3: command 0x0419 tx timeout [ 134.741127] Bluetooth: hci4: command 0x041b tx timeout VM DIAGNOSIS: 12:25:28 Registers: info registers vcpu 0 RAX=000000000000006c RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1c91 RDI=ffffffff87645ba0 RBP=ffffffff87645b60 RSP=ffff88803914f698 R8 =0000000000000001 R9 =000000000000000a R10=000000000000006c R11=0000000000000001 R12=000000000000006c R13=ffffffff87645b60 R14=0000000000000010 R15=ffffffff822b1c80 RIP=ffffffff822b1ce9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9ab4d81700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9ab791f018 CR3=000000002d43c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f9ab78f27c0 00007f9ab78f27c8 YMM02=0000000000000000 0000000000000000 00007f9ab78f27e0 00007f9ab78f27c0 YMM03=0000000000000000 0000000000000000 00007f9ab78f27c8 00007f9ab78f27c0 YMM04=0000000000000000 0000000000000000 ffffffffffffff00 ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=1ffffffff0e0b8e0 RDX=0000000000000000 RSI=0000000000000004 RDI=0000000000000001 RBP=ffff88800deab0e0 RSP=ffff888031bbf898 R8 =0000000000000000 R9 =ffff88800deab173 R10=ffffed1001bd562e R11=0000000000000001 R12=0000000000000202 R13=ffff88800deab120 R14=ffff888007c75000 R15=ffff8880188fe600 RIP=ffffffff81206162 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe75b44a540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe75b635620 CR3=000000000d2e0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ff00ffffffffffff 0000000000000000 YMM01=0000000000000000 0000000000000000 0100010001000000 ffffffffffffffff YMM02=0000000000000000 0000000000000000 0500050005000000 455441564952505f YMM03=0000000000000000 0000000000000000 0000000000000000 000000564952505f YMM04=0000000000000000 0000000000000000 0003000500050005 0005000000455441 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000