syzkaller login: [ 42.897595] sshd (244) used greatest stack depth: 24472 bytes left
Warning: Permanently added '[localhost]:43160' (ECDSA) to the list of known hosts.
2022/09/21 12:53:54 fuzzer started
2022/09/21 12:53:54 dialing manager at localhost:40289
[ 45.333170] cgroup: Unknown subsys name 'net'
[ 45.450347] cgroup: Unknown subsys name 'rlimit'
2022/09/21 12:54:08 syscalls: 2215
2022/09/21 12:54:08 code coverage: enabled
2022/09/21 12:54:08 comparison tracing: enabled
2022/09/21 12:54:08 extra coverage: enabled
2022/09/21 12:54:08 setuid sandbox: enabled
2022/09/21 12:54:08 namespace sandbox: enabled
2022/09/21 12:54:08 Android sandbox: enabled
2022/09/21 12:54:08 fault injection: enabled
2022/09/21 12:54:08 leak checking: enabled
2022/09/21 12:54:08 net packet injection: enabled
2022/09/21 12:54:08 net device setup: enabled
2022/09/21 12:54:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/21 12:54:08 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/21 12:54:08 USB emulation: enabled
2022/09/21 12:54:08 hci packet injection: enabled
2022/09/21 12:54:08 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220921 )
2022/09/21 12:54:08 802.15.4 emulation: enabled
2022/09/21 12:54:08 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/21 12:54:08 fetching corpus: 50, signal 24032/27201 (executing program)
2022/09/21 12:54:08 fetching corpus: 100, signal 37924/41955 (executing program)
2022/09/21 12:54:09 fetching corpus: 150, signal 44486/49351 (executing program)
2022/09/21 12:54:09 fetching corpus: 200, signal 53587/58906 (executing program)
2022/09/21 12:54:09 fetching corpus: 250, signal 61508/67088 (executing program)
2022/09/21 12:54:09 fetching corpus: 300, signal 67536/73423 (executing program)
2022/09/21 12:54:09 fetching corpus: 350, signal 73537/79557 (executing program)
2022/09/21 12:54:09 fetching corpus: 400, signal 77516/83716 (executing program)
2022/09/21 12:54:10 fetching corpus: 450, signal 81158/87496 (executing program)
2022/09/21 12:54:10 fetching corpus: 500, signal 85695/91892 (executing program)
2022/09/21 12:54:10 fetching corpus: 550, signal 87669/94015 (executing program)
2022/09/21 12:54:10 fetching corpus: 600, signal 90548/96773 (executing program)
2022/09/21 12:54:10 fetching corpus: 650, signal 93326/99296 (executing program)
2022/09/21 12:54:10 fetching corpus: 700, signal 96991/102562 (executing program)
2022/09/21 12:54:11 fetching corpus: 750, signal 98967/104411 (executing program)
2022/09/21 12:54:11 fetching corpus: 800, signal 100707/105997 (executing program)
2022/09/21 12:54:11 fetching corpus: 850, signal 102574/107662 (executing program)
2022/09/21 12:54:11 fetching corpus: 900, signal 103825/108772 (executing program)
2022/09/21 12:54:11 fetching corpus: 950, signal 106010/110449 (executing program)
2022/09/21 12:54:11 fetching corpus: 1000, signal 107546/111578 (executing program)
2022/09/21 12:54:11 fetching corpus: 1050, signal 109426/112905 (executing program)
2022/09/21 12:54:12 fetching corpus: 1100, signal 112585/114902 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/115312 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/115418 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/115507 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/115602 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/115701 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/115803 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/115908 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/115977 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/116072 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/116174 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/116265 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/116353 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/116442 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/116541 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/116646 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/116740 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/116837 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/116940 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/117048 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/117143 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/117245 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/117346 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/117446 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/117541 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/117645 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/117723 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/117832 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/117924 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/118016 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/118119 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/118222 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/118300 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/118325 (executing program)
2022/09/21 12:54:12 fetching corpus: 1112, signal 113097/118325 (executing program)
2022/09/21 12:54:14 starting 8 fuzzer processes
12:54:14 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
poll(&(0x7f0000000180)=[{r4}, {r4}, {r2}, {r5}, {r3}, {r4}], 0x20000000000000cf, 0x6)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3, 0x14, 0x0, 0x1}})
ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000080)={0x0, 0x7, 0x3})
12:54:14 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), &(0x7f00000000c0)={0x0, 0xfb, 0xf6, 0x5, 0x9, "d2a149fd4415c7eb677a5b4636793d2e", "84784878199988e83ac2b08aacac3433328173d0861b22ed067b49bb67940306ca116fdad3c5faa346e20775406e86c9e10af6588da9448ac2effbf9c314da3d416e4b182461ba029338c85552d9e6e5595de04ec055b23e82e644939271ed7aa51fd8f0563211f839595e195b929ecd8d3c9d473048271484cf4c2684e438dd446a0e1e6d086e7f63ae66680bf1eff6cb761cdad0ec32f30256c01fbd7f8ad9b774c70177f2b59747f5584ddf99f9a91c9ddc815dfc147c7b50d0001f826823a2ae3d125fa668d015c73b1cbbe0d4017f14140bd63714baccd9e6f764a4105e7e"}, 0xf6, 0x2)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x1015, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30)
dup2(r1, r0)
r3 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000018c0)={0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x17)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000001c0)={'veth1_virt_wifi\x00', {0x2, 0x0, @initdev}})
socket$inet_udp(0x2, 0x2, 0x0)
12:54:14 executing program 2:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@obj_user={'obj_user', 0x3d, 'port1\x00'}}, {@fowner_gt={'fowner>', 0xee01}}]}})
12:54:14 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x44, 0x4)
12:54:14 executing program 4:
syslog(0x2, &(0x7f00000000c0)=""/67, 0xfffffd94)
syslog(0xa, 0x0, 0x0)
syslog(0xa, &(0x7f0000000140)=""/4083, 0xff3)
syslog(0x2, &(0x7f0000000080)=""/46, 0x2e)
syslog(0x2, 0x0, 0x0)
syslog(0x2, &(0x7f0000000040)=""/10, 0xa)
syslog(0x9, 0x0, 0x0)
12:54:14 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x2a, &(0x7f0000000200)={0x77359400}, 0x10)
12:54:14 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000200)={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc)
12:54:14 executing program 7:
r0 = syz_open_dev$loop(&(0x7f00000029c0), 0x0, 0x0)
ioctl$BLKFRASET(r0, 0x1264, 0x0)
[ 65.234214] audit: type=1400 audit(1663764854.854:6): avc: denied { execmem } for pid=287 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[ 66.574812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 66.576425] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 66.577894] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 66.579011] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 66.580121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 66.581039] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 66.583258] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 66.585317] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 66.586211] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 66.587241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 66.588602] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 66.592350] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 66.593119] Bluetooth: hci1: HCI_REQ-0x0c1a
[ 66.599317] Bluetooth: hci2: HCI_REQ-0x0c1a
[ 66.631795] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 66.633149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 66.634708] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 66.638000] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 66.638996] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 66.639786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 66.640680] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 66.642375] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 66.643879] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 66.645907] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 66.647780] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 66.651204] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 66.653833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 66.656183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 66.657556] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 66.660657] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 66.662031] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 66.663449] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 66.664875] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 66.666647] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 66.667805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 66.668889] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 66.673735] Bluetooth: hci6: HCI_REQ-0x0c1a
[ 66.674885] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 66.676025] Bluetooth: hci4: HCI_REQ-0x0c1a
[ 66.677462] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 66.690339] Bluetooth: hci0: HCI_REQ-0x0c1a
[ 66.691282] Bluetooth: hci7: HCI_REQ-0x0c1a
[ 66.730460] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 66.732892] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 66.743786] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 66.758955] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 66.764803] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 66.766176] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 66.783121] Bluetooth: hci5: HCI_REQ-0x0c1a
[ 68.649336] Bluetooth: hci2: command 0x0409 tx timeout
[ 68.650009] Bluetooth: hci1: command 0x0409 tx timeout
[ 68.650614] Bluetooth: hci3: Opcode 0x c03 failed: -110
[ 68.712641] Bluetooth: hci0: command 0x0409 tx timeout
[ 68.713283] Bluetooth: hci7: command 0x0409 tx timeout
[ 68.713814] Bluetooth: hci6: command 0x0409 tx timeout
[ 68.714299] Bluetooth: hci4: command 0x0409 tx timeout
[ 68.840625] Bluetooth: hci5: command 0x0409 tx timeout
[ 70.696620] Bluetooth: hci1: command 0x041b tx timeout
[ 70.697393] Bluetooth: hci2: command 0x041b tx timeout
[ 70.760729] Bluetooth: hci4: command 0x041b tx timeout
[ 70.761470] Bluetooth: hci6: command 0x041b tx timeout
[ 70.762230] Bluetooth: hci7: command 0x041b tx timeout
[ 70.762958] Bluetooth: hci0: command 0x041b tx timeout
[ 70.888596] Bluetooth: hci5: command 0x041b tx timeout
[ 71.666390] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 71.673045] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 71.675817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 71.681771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 71.683273] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 71.684372] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 71.690000] Bluetooth: hci3: HCI_REQ-0x0c1a
[ 72.745635] Bluetooth: hci2: command 0x040f tx timeout
[ 72.746112] Bluetooth: hci1: command 0x040f tx timeout
[ 72.808575] Bluetooth: hci0: command 0x040f tx timeout
[ 72.809046] Bluetooth: hci7: command 0x040f tx timeout
[ 72.809455] Bluetooth: hci6: command 0x040f tx timeout
[ 72.809903] Bluetooth: hci4: command 0x040f tx timeout
[ 72.937544] Bluetooth: hci5: command 0x040f tx timeout
[ 73.704638] Bluetooth: hci3: command 0x0409 tx timeout
[ 74.792661] Bluetooth: hci1: command 0x0419 tx timeout
[ 74.793630] Bluetooth: hci2: command 0x0419 tx timeout
[ 74.857611] Bluetooth: hci4: command 0x0419 tx timeout
[ 74.858288] Bluetooth: hci6: command 0x0419 tx timeout
[ 74.858941] Bluetooth: hci7: command 0x0419 tx timeout
[ 74.859846] Bluetooth: hci0: command 0x0419 tx timeout
[ 74.985549] Bluetooth: hci5: command 0x0419 tx timeout
[ 75.753633] Bluetooth: hci3: command 0x041b tx timeout
[ 77.800593] Bluetooth: hci3: command 0x040f tx timeout
[ 79.849534] Bluetooth: hci3: command 0x0419 tx timeout
12:55:12 executing program 2:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@obj_user={'obj_user', 0x3d, 'port1\x00'}}, {@fowner_gt={'fowner>', 0xee01}}]}})
12:55:12 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x44, 0x4)
12:55:12 executing program 2:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@obj_user={'obj_user', 0x3d, 'port1\x00'}}, {@fowner_gt={'fowner>', 0xee01}}]}})
12:55:12 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x44, 0x4)
12:55:12 executing program 2:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@obj_user={'obj_user', 0x3d, 'port1\x00'}}, {@fowner_gt={'fowner>', 0xee01}}]}})
12:55:12 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x44, 0x4)
12:55:12 executing program 3:
r0 = inotify_init1(0x0)
pwrite64(r0, 0x0, 0x0, 0x0)
12:55:12 executing program 3:
r0 = inotify_init1(0x0)
pwrite64(r0, 0x0, 0x0, 0x0)
[ 127.280758] audit: type=1400 audit(1663764916.901:7): avc: denied { open } for pid=3945 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 127.282257] audit: type=1400 audit(1663764916.901:8): avc: denied { kernel } for pid=3945 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 127.294076] ------------[ cut here ]------------
[ 127.294097]
[ 127.294101] ======================================================
[ 127.294104] WARNING: possible circular locking dependency detected
[ 127.294109] 6.0.0-rc6-next-20220921 #1 Not tainted
[ 127.294116] ------------------------------------------------------
[ 127.294120] syz-executor.5/3946 is trying to acquire lock:
[ 127.294127] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[ 127.294169]
[ 127.294169] but task is already holding lock:
[ 127.294172] ffff88800e382020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 127.294203]
[ 127.294203] which lock already depends on the new lock.
[ 127.294203]
[ 127.294207]
[ 127.294207] the existing dependency chain (in reverse order) is:
[ 127.294211]
[ 127.294211] -> #3 (&ctx->lock){....}-{2:2}:
[ 127.294225] _raw_spin_lock+0x2a/0x40
[ 127.294246] __perf_event_task_sched_out+0x53b/0x18d0
[ 127.294259] __schedule+0xedd/0x2470
[ 127.294274] schedule+0xda/0x1b0
[ 127.294287] exit_to_user_mode_prepare+0x114/0x1a0
[ 127.294299] syscall_exit_to_user_mode+0x19/0x40
[ 127.294312] do_syscall_64+0x48/0x90
[ 127.294330] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 127.294343]
[ 127.294343] -> #2 (&rq->__lock){-.-.}-{2:2}:
[ 127.294357] _raw_spin_lock_nested+0x30/0x40
[ 127.294377] raw_spin_rq_lock_nested+0x1e/0x30
[ 127.294392] task_fork_fair+0x63/0x4d0
[ 127.294411] sched_cgroup_fork+0x3d0/0x540
[ 127.294427] copy_process+0x4183/0x6e20
[ 127.294438] kernel_clone+0xe7/0x890
[ 127.294448] user_mode_thread+0xad/0xf0
[ 127.294459] rest_init+0x24/0x250
[ 127.294470] arch_call_rest_init+0xf/0x14
[ 127.294492] start_kernel+0x4c1/0x4e6
[ 127.294507] secondary_startup_64_no_verify+0xe0/0xeb
[ 127.294523]
[ 127.294523] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[ 127.294537] _raw_spin_lock_irqsave+0x39/0x60
[ 127.294557] try_to_wake_up+0xab/0x1930
[ 127.294571] up+0x75/0xb0
[ 127.294586] __up_console_sem+0x6e/0x80
[ 127.294603] console_unlock+0x46a/0x590
[ 127.294620] do_con_write+0xc05/0x1d50
[ 127.294633] con_write+0x21/0x40
[ 127.294644] n_tty_write+0x4d4/0xfe0
[ 127.294659] file_tty_write.constprop.0+0x49c/0x8f0
[ 127.294672] vfs_write+0x9c3/0xd90
[ 127.294693] ksys_write+0x127/0x250
[ 127.294712] do_syscall_64+0x3b/0x90
[ 127.294729] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 127.294741]
[ 127.294741] -> #0 ((console_sem).lock){....}-{2:2}:
[ 127.294755] __lock_acquire+0x2a02/0x5e70
[ 127.294775] lock_acquire+0x1a2/0x530
[ 127.294792] _raw_spin_lock_irqsave+0x39/0x60
[ 127.294811] down_trylock+0xe/0x70
[ 127.294827] __down_trylock_console_sem+0x3b/0xd0
[ 127.294844] vprintk_emit+0x16b/0x560
[ 127.294863] vprintk+0x84/0xa0
[ 127.294880] _printk+0xba/0xf1
[ 127.294892] report_bug.cold+0x72/0xab
[ 127.294909] handle_bug+0x3c/0x70
[ 127.294926] exc_invalid_op+0x14/0x50
[ 127.294944] asm_exc_invalid_op+0x16/0x20
[ 127.294955] group_sched_out.part.0+0x2c7/0x460
[ 127.294967] ctx_sched_out+0x8f1/0xc10
[ 127.294977] __perf_event_task_sched_out+0x6d0/0x18d0
[ 127.294990] __schedule+0xedd/0x2470
[ 127.295004] schedule+0xda/0x1b0
[ 127.295017] exit_to_user_mode_prepare+0x114/0x1a0
[ 127.295028] syscall_exit_to_user_mode+0x19/0x40
[ 127.295040] do_syscall_64+0x48/0x90
[ 127.295057] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 127.295069]
[ 127.295069] other info that might help us debug this:
[ 127.295069]
[ 127.295072] Chain exists of:
[ 127.295072] (console_sem).lock --> &rq->__lock --> &ctx->lock
[ 127.295072]
[ 127.295088] Possible unsafe locking scenario:
[ 127.295088]
[ 127.295090] CPU0 CPU1
[ 127.295093] ---- ----
[ 127.295095] lock(&ctx->lock);
[ 127.295101] lock(&rq->__lock);
[ 127.295109] lock(&ctx->lock);
[ 127.295115] lock((console_sem).lock);
[ 127.295121]
[ 127.295121] *** DEADLOCK ***
[ 127.295121]
[ 127.295124] 2 locks held by syz-executor.5/3946:
[ 127.295131] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[ 127.295161] #1: ffff88800e382020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 127.295191]
[ 127.295191] stack backtrace:
[ 127.295194] CPU: 0 PID: 3946 Comm: syz-executor.5 Not tainted 6.0.0-rc6-next-20220921 #1
[ 127.295207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 127.295216] Call Trace:
[ 127.295219]
[ 127.295224] dump_stack_lvl+0x8b/0xb3
[ 127.295243] check_noncircular+0x263/0x2e0
[ 127.295262] ? format_decode+0x26c/0xb50
[ 127.295279] ? print_circular_bug+0x450/0x450
[ 127.295298] ? enable_ptr_key_workfn+0x20/0x20
[ 127.295315] ? perf_trace_lock+0x308/0x560
[ 127.295330] ? format_decode+0x26c/0xb50
[ 127.295347] ? memcpy+0x39/0x60
[ 127.295359] ? vsnprintf+0x4ba/0x1600
[ 127.295379] __lock_acquire+0x2a02/0x5e70
[ 127.295404] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 127.295430] lock_acquire+0x1a2/0x530
[ 127.295448] ? down_trylock+0xe/0x70
[ 127.295466] ? lock_release+0x750/0x750
[ 127.295490] ? vprintk+0x84/0xa0
[ 127.295510] _raw_spin_lock_irqsave+0x39/0x60
[ 127.295530] ? down_trylock+0xe/0x70
[ 127.295547] down_trylock+0xe/0x70
[ 127.295563] ? vprintk+0x84/0xa0
[ 127.295582] __down_trylock_console_sem+0x3b/0xd0
[ 127.295603] vprintk_emit+0x16b/0x560
[ 127.295627] vprintk+0x84/0xa0
[ 127.295646] _printk+0xba/0xf1
[ 127.295658] ? record_print_text.cold+0x16/0x16
[ 127.295675] ? report_bug.cold+0x66/0xab
[ 127.295694] ? group_sched_out.part.0+0x2c7/0x460
[ 127.295706] report_bug.cold+0x72/0xab
[ 127.295726] handle_bug+0x3c/0x70
[ 127.295744] exc_invalid_op+0x14/0x50
[ 127.295763] asm_exc_invalid_op+0x16/0x20
[ 127.295793] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 127.295808] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 2b 12 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 127.295820] RSP: 0018:ffff88803d1ffc48 EFLAGS: 00010006
[ 127.295829] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 127.295837] RDX: ffff88801be78000 RSI: ffffffff815663a7 RDI: 0000000000000005
[ 127.295846] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001
[ 127.295853] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff88800e382000
[ 127.295862] R13: ffff88806ce3d140 R14: ffffffff8547cf80 R15: 0000000000000002
[ 127.295875] ? group_sched_out.part.0+0x2c7/0x460
[ 127.295889] ? group_sched_out.part.0+0x2c7/0x460
[ 127.295903] ctx_sched_out+0x8f1/0xc10
[ 127.295917] __perf_event_task_sched_out+0x6d0/0x18d0
[ 127.295935] ? lock_is_held_type+0xd7/0x130
[ 127.295949] ? __perf_cgroup_move+0x160/0x160
[ 127.295961] ? set_next_entity+0x304/0x550
[ 127.295981] ? update_curr+0x267/0x740
[ 127.296002] ? lock_is_held_type+0xd7/0x130
[ 127.296016] __schedule+0xedd/0x2470
[ 127.296034] ? io_schedule_timeout+0x150/0x150
[ 127.296051] ? __x64_sys_futex_time32+0x480/0x480
[ 127.296067] schedule+0xda/0x1b0
[ 127.296082] exit_to_user_mode_prepare+0x114/0x1a0
[ 127.296095] syscall_exit_to_user_mode+0x19/0x40
[ 127.296108] do_syscall_64+0x48/0x90
[ 127.296127] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 127.296139] RIP: 0033:0x7fb93426bb19
[ 127.296149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 127.296160] RSP: 002b:00007fb9317e1218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 127.296172] RAX: 0000000000000001 RBX: 00007fb93437ef68 RCX: 00007fb93426bb19
[ 127.296180] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb93437ef6c
[ 127.296188] RBP: 00007fb93437ef60 R08: 000000000000000e R09: 0000000000000000
[ 127.296195] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fb93437ef6c
[ 127.296203] R13: 00007ffff04f095f R14: 00007fb9317e1300 R15: 0000000000022000
[ 127.296219]
[ 127.352604] WARNING: CPU: 0 PID: 3946 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[ 127.353292] Modules linked in:
[ 127.353542] CPU: 0 PID: 3946 Comm: syz-executor.5 Not tainted 6.0.0-rc6-next-20220921 #1
[ 127.354138] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 127.354969] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 127.355384] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 2b 12 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 127.356747] RSP: 0018:ffff88803d1ffc48 EFLAGS: 00010006
[ 127.357147] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 127.357680] RDX: ffff88801be78000 RSI: ffffffff815663a7 RDI: 0000000000000005
[ 127.358213] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001
[ 127.358751] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff88800e382000
[ 127.359276] R13: ffff88806ce3d140 R14: ffffffff8547cf80 R15: 0000000000000002
[ 127.359812] FS: 00007fb9317e1700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 127.360413] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 127.360851] CR2: 00007fb93437f018 CR3: 000000001b6ac000 CR4: 0000000000350ef0
[ 127.361388] Call Trace:
[ 127.361586]
[ 127.361766] ctx_sched_out+0x8f1/0xc10
[ 127.362068] __perf_event_task_sched_out+0x6d0/0x18d0
[ 127.362462] ? lock_is_held_type+0xd7/0x130
[ 127.362791] ? __perf_cgroup_move+0x160/0x160
[ 127.363136] ? set_next_entity+0x304/0x550
[ 127.363466] ? update_curr+0x267/0x740
[ 127.363784] ? lock_is_held_type+0xd7/0x130
[ 127.364123] __schedule+0xedd/0x2470
[ 127.364418] ? io_schedule_timeout+0x150/0x150
[ 127.364771] ? __x64_sys_futex_time32+0x480/0x480
[ 127.365144] schedule+0xda/0x1b0
[ 127.365412] exit_to_user_mode_prepare+0x114/0x1a0
[ 127.365784] syscall_exit_to_user_mode+0x19/0x40
[ 127.366148] do_syscall_64+0x48/0x90
[ 127.366446] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 127.366829] RIP: 0033:0x7fb93426bb19
[ 127.367115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 127.368470] RSP: 002b:00007fb9317e1218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 127.369033] RAX: 0000000000000001 RBX: 00007fb93437ef68 RCX: 00007fb93426bb19
[ 127.369572] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb93437ef6c
[ 127.370111] RBP: 00007fb93437ef60 R08: 000000000000000e R09: 0000000000000000
[ 127.370643] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fb93437ef6c
[ 127.371181] R13: 00007ffff04f095f R14: 00007fb9317e1300 R15: 0000000000022000
[ 127.371723]
[ 127.371910] irq event stamp: 612
[ 127.372166] hardirqs last enabled at (611): [] exit_to_user_mode_prepare+0x109/0x1a0
[ 127.372855] hardirqs last disabled at (612): [] __schedule+0x1225/0x2470
[ 127.373473] softirqs last enabled at (416): [] __irq_exit_rcu+0x11b/0x180
[ 127.374115] softirqs last disabled at (383): [] __irq_exit_rcu+0x11b/0x180
[ 127.374746] ---[ end trace 0000000000000000 ]---
[ 129.640684] Bluetooth: hci1: Opcode 0x c03 failed: -110
[ 129.704552] Bluetooth: hci2: Opcode 0x c03 failed: -110
[ 129.768532] Bluetooth: hci5: Opcode 0x c03 failed: -110
[ 131.828960] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 131.830415] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 131.832756] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 131.834327] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 131.836072] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 131.837348] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 131.840988] Bluetooth: hci1: HCI_REQ-0x0c1a
[ 133.864561] Bluetooth: hci1: command 0x0409 tx timeout
[ 133.928552] Bluetooth: hci2: Opcode 0x c03 failed: -110
[ 133.993514] Bluetooth: hci5: Opcode 0x c03 failed: -110
[ 135.912538] Bluetooth: hci1: command 0x041b tx timeout
VM DIAGNOSIS:
12:55:17 Registers:
info registers vcpu 0
RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b1c91 RDI=ffffffff87645ba0 RBP=ffffffff87645b60 RSP=ffff88803d1ff698
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000031 R11=0000000000000001
R12=0000000000000031 R13=ffffffff87645b60 R14=0000000000000010 R15=ffffffff822b1c80
RIP=ffffffff822b1ce9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fb9317e1700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb93437f018 CR3=000000001b6ac000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007fb9343527c0 00007fb9343527c8
YMM02=0000000000000000 0000000000000000 00007fb9343527e0 00007fb9343527c0
YMM03=0000000000000000 0000000000000000 00007fb9343527c8 00007fb9343527c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff842710f7 RDX=ffffed100d9c6fa1
RSI=0000000000000004 RDI=ffff88806ce37d00 RBP=ffff88806ce37d00 RSP=ffff88802086f6c8
R8 =0000000000000000 R9 =ffff88806ce37d03 R10=ffffed100d9c6fa0 R11=0000000000000001
R12=0000000000000003 R13=ffffed100d9c6fa0 R14=0000000000000001 R15=1ffff1100410deda
RIP=ffffffff84271174 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00005555563f3400 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0473430e50 CR3=000000003be84000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM02=0000000000000000 0000000000000000 00524f5252450040 0000000000000000
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000