INFO: task syz-executor.5:13658 blocked for more than 140 seconds. kobject: 'rfkill394' (ffff888067969828): kobject_add_internal: parent: 'phy392', set: 'devices' Not tainted 4.14.115 #5 kobject: 'rfkill394' (ffff888067969828): kobject_uevent_env "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kobject: 'rfkill394' (ffff888067969828): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim392/ieee80211/phy392/rfkill394' ieee80211 phy392: Selected rate control algorithm 'minstrel_ht' syz-executor.5 D29672 13658 10545 0x00000000 kobject: 'net' (ffff888099613a80): kobject_add_internal: parent: 'hwsim392', set: '(null)' Call Trace: kobject: 'wlan51' (ffff888058b4cff0): kobject_add_internal: parent: 'net', set: 'devices' context_switch kernel/sched/core.c:2807 [inline] __schedule+0x7be/0x1cf0 kernel/sched/core.c:3383 kobject: 'wlan51' (ffff888058b4cff0): kobject_uevent_env kobject: 'wlan51' (ffff888058b4cff0): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim392/net/wlan51' kobject: 'queues' (ffff88804269b948): kobject_add_internal: parent: 'wlan51', set: '' schedule+0x92/0x1c0 kernel/sched/core.c:3427 kobject: 'queues' (ffff88804269b948): kobject_uevent_env __rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:572 [inline] rwsem_down_write_failed+0x5cd/0xbe0 kernel/locking/rwsem-xadd.c:601 kobject: 'queues' (ffff88804269b948): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (ffff888096f080d0): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'rx-0' (ffff888096f080d0): kobject_uevent_env call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:105 kobject: 'rx-0' (ffff888096f080d0): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim392/net/wlan51/queues/rx-0' kobject: 'tx-0' (ffff8880a5254bd8): kobject_add_internal: parent: 'queues', set: 'queues' __down_write arch/x86/include/asm/rwsem.h:126 [inline] down_write+0x53/0x90 kernel/locking/rwsem.c:56 kobject: 'tx-0' (ffff8880a5254bd8): kobject_uevent_env kobject: 'tx-0' (ffff8880a5254bd8): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim392/net/wlan51/queues/tx-0' inode_lock include/linux/fs.h:715 [inline] utimes_common.isra.0+0x28c/0x560 fs/utimes.c:90 kobject: 'tx-1' (ffff8880a5254d58): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-1' (ffff8880a5254d58): kobject_uevent_env kobject: 'tx-1' (ffff8880a5254d58): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim392/net/wlan51/queues/tx-1' kobject: 'tx-2' (ffff8880a5254ed8): kobject_add_internal: parent: 'queues', set: 'queues' do_utimes+0x172/0x270 fs/utimes.c:156 kobject: 'tx-2' (ffff8880a5254ed8): kobject_uevent_env kobject: 'tx-2' (ffff8880a5254ed8): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim392/net/wlan51/queues/tx-2' kobject: 'tx-3' (ffff8880a5255058): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-3' (ffff8880a5255058): kobject_uevent_env kobject: 'tx-3' (ffff8880a5255058): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim392/net/wlan51/queues/tx-3' kobject: 'batman_adv' (ffff8880a5ee7580): kobject_add_internal: parent: 'wlan51', set: '' ieee80211 phy392: hwaddr 02:00:00:01:88:00 registered kobject: 'hwsim393' (ffff888067509350): kobject_add_internal: parent: 'mac80211_hwsim', set: 'devices' kobject: 'hwsim393' (ffff888067509350): kobject_uevent_env kobject: 'hwsim393' (ffff888067509350): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim393' kobject: 'hwsim393' (ffff888067509350): kobject_uevent_env kobject: 'hwsim393' (ffff888067509350): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim393' kobject: 'ieee80211' (ffff8880911e0700): kobject_add_internal: parent: 'hwsim393', set: '(null)' kobject: 'phy393' (ffff88805c7b3eb0): kobject_add_internal: parent: 'ieee80211', set: 'devices' SYSC_utime fs/utimes.c:35 [inline] SyS_utime+0xe8/0x130 fs/utimes.c:24 kobject: 'loop5' (ffff8880a4adc9e0): kobject_uevent_env kobject: 'loop5' (ffff8880a4adc9e0): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'phy393' (ffff88805c7b3eb0): kobject_uevent_env do_syscall_64+0x1eb/0x630 arch/x86/entry/common.c:289 kobject: 'phy393' (ffff88805c7b3eb0): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim393/ieee80211/phy393' entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458da9 RSP: 002b:00007f9370c18c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 kobject: 'rfkill395' (ffff8880a87845e8): kobject_add_internal: parent: 'phy393', set: 'devices' RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000458da9 kobject: 'rfkill395' (ffff8880a87845e8): kobject_uevent_env RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0 kobject: 'rfkill395' (ffff8880a87845e8): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim393/ieee80211/phy393/rfkill395' RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9370c196d4 ieee80211 phy393: Selected rate control algorithm 'minstrel_ht' R13: 00000000004c7e6d R14: 00000000004de120 R15: 00000000ffffffff kobject: 'net' (ffff888093fba480): kobject_add_internal: parent: 'hwsim393', set: '(null)' Showing all locks held in the system: kobject: 'wlan94' (ffff88805e39e0f0): kobject_add_internal: parent: 'net', set: 'devices' 1 lock held by khungtaskd/1010: #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7f/0x21f kernel/locking/lockdep.c:4541 kobject: 'wlan94' (ffff88805e39e0f0): kobject_uevent_env 1 lock held by rsyslogd/7003: #0: (&f->f_pos_lock){+.+.}, at: [] __fdget_pos+0xab/0xd0 fs/file.c:769 kobject: 'wlan94' (ffff88805e39e0f0): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim393/net/wlan94' 2 locks held by getty/7125: #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377 kobject: 'queues' (ffff88804269b848): kobject_add_internal: parent: 'wlan94', set: '' #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156 2 locks held by getty/7126: #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377 #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156 kobject: 'queues' (ffff88804269b848): kobject_uevent_env 2 locks held by getty/7127: #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377 #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156 2 locks held by getty/7128: #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377 #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156 2 locks held by getty/7129: #0: (&tty->ldisc_sem){++++} kobject: 'queues' (ffff88804269b848): kobject_uevent_env: filter function caused the event to drop! , at: [] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377 #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156 2 locks held by getty/7130: #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377 #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156 2 locks held by getty/7131: #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377 #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156 2 locks held by syz-executor.5/11904: #0: (sb_writers#20){.+.+}, at: [] sb_start_write include/linux/fs.h:1545 [inline] #0: (sb_writers#20){.+.+}, at: [] mnt_want_write+0x3f/0xb0 fs/namespace.c:386 #1: (&sb->s_type->i_mutex_key#24){+.+.}, at: [] inode_lock include/linux/fs.h:715 [inline] #1: (&sb->s_type->i_mutex_key#24){+.+.}, at: [] utimes_common.isra.0+0x28c/0x560 fs/utimes.c:90 2 locks held by syz-executor.5/12251: #0: (sb_writers#20){.+.+}, at: [] sb_start_write include/linux/fs.h:1545 [inline] #0: (sb_writers#20){.+.+}, at: [] mnt_want_write+0x3f/0xb0 fs/namespace.c:386 #1: (&sb->s_type->i_mutex_key#24){+.+.}, at: [] inode_lock include/linux/fs.h:715 [inline] #1: (&sb->s_type->i_mutex_key#24){+.+.}, at: [] utimes_common.isra.0+0x28c/0x560 fs/utimes.c:90 2 locks held by syz-executor.5/12271: #0: (sb_writers#20){.+.+}, at: [] sb_start_write include/linux/fs.h:1545 [inline] #0: (sb_writers#20){.+.+}, at: [] mnt_want_write+0x3f/0xb0 fs/namespace.c:386 #1: (&sb->s_type->i_mutex_key#24){+.+.}, at: [] inode_lock include/linux/fs.h:715 [inline] #1: (&sb->s_type->i_mutex_key#24){+.+.}, at: [] utimes_common.isra.0+0x28c/0x560 fs/utimes.c:90 2 locks held by syz-executor.5/13100: #0: (sb_writers#20){.+.+}, at: [] sb_start_write include/linux/fs.h:1545 [inline] #0: (sb_writers#20){.+.+}, at: [] mnt_want_write+0x3f/0xb0 fs/namespace.c:386 #1: (&sb->s_type->i_mutex_key#24){+.+.}, at: [] inode_lock include/linux/fs.h:715 [inline] #1: (&sb->s_type->i_mutex_key#24){+.+.}, at: [] utimes_common.isra.0+0x28c/0x560 fs/utimes.c:90 2 locks held by syz-executor.5/13636: #0: (sb_writers#20){.+.+}, at: [] sb_start_write include/linux/fs.h:1545 [inline] #0: (sb_writers#20){.+.+}, at: [] mnt_want_write+0x3f/0xb0 fs/namespace.c:386 #1: (&sb->s_type->i_mutex_key#24){+.+.}, at: [] inode_lock include/linux/fs.h:715 [inline] #1: (&sb->s_type->i_mutex_key#24){+.+.}, at: [] vfs_setxattr+0x91/0xf0 fs/xattr.c:219 2 locks held by syz-executor.5/13658: #0: (sb_writers#20){.+.+}, at: [] sb_start_write include/linux/fs.h:1545 [inline] #0: (sb_writers#20){.+.+}, at: [] mnt_want_write+0x3f/0xb0 fs/namespace.c:386 #1: (&sb->s_type->i_mutex_key#24){+.+.}, at: [] inode_lock include/linux/fs.h:715 [inline] #1: (&sb->s_type->i_mutex_key#24){+.+.}, at: [] utimes_common.isra.0+0x28c/0x560 fs/utimes.c:90 2 locks held by syz-executor.2/22569: #0: (&tty->legacy_mutex){+.+.}, at: [] tty_lock+0x66/0x80 drivers/tty/tty_mutex.c:19 #1: (&tty->ldisc_sem){++++}, at: [] ldsem_down_write+0x33/0x39 drivers/tty/tty_ldsem.c:403 1 lock held by syz-executor.2/22572: #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377 2 locks held by syz-executor.2/22557: #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377 #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156 2 locks held by syz-executor.0/22560: #0: (cb_lock){++++}, at: [] genl_rcv+0x1a/0x40 net/netlink/genetlink.c:635 #1: (genl_mutex){+.+.}, at: [] genl_lock net/netlink/genetlink.c:33 [inline] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x119/0x150 net/netlink/genetlink.c:623 2 locks held by syz-executor.1/22565: #0: (cb_lock){++++}, at: [] genl_rcv+0x1a/0x40 net/netlink/genetlink.c:635 #1: (genl_mutex){+.+.}, at: [] genl_lock net/netlink/genetlink.c:33 [inline] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x119/0x150 net/netlink/genetlink.c:623 2 locks held by syz-executor.3/22566: #0: (cb_lock){++++}, at: [] genl_rcv+0x1a/0x40 net/netlink/genetlink.c:635 #1: (genl_mutex){+.+.}, at: [] genl_lock net/netlink/genetlink.c:33 [inline] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x119/0x150 net/netlink/genetlink.c:623 2 locks held by syz-executor.5/22575: #0: (cb_lock){++++}, at: [] genl_rcv+0x1a/0x40 net/netlink/genetlink.c:635 #1: (genl_mutex){+.+.}, at: [] genl_lock net/netlink/genetlink.c:33 [inline] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x119/0x150 net/netlink/genetlink.c:623 ============================================= kobject: 'rx-0' (ffff88808d70e250): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'rx-0' (ffff88808d70e250): kobject_uevent_env NMI backtrace for cpu 0 kobject: 'rx-0' (ffff88808d70e250): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim393/net/wlan94/queues/rx-0' CPU: 0 PID: 1010 Comm: khungtaskd Not tainted 4.14.115 #5 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x138/0x19c lib/dump_stack.c:53 nmi_cpu_backtrace.cold+0x57/0x94 lib/nmi_backtrace.c:101 kobject: 'tx-0' (ffff888065e3ac58): kobject_add_internal: parent: 'queues', set: 'queues' nmi_trigger_cpumask_backtrace+0x141/0x189 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 kobject: 'tx-0' (ffff888065e3ac58): kobject_uevent_env trigger_all_cpu_backtrace include/linux/nmi.h:140 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:195 [inline] watchdog+0x5e7/0xb90 kernel/hung_task.c:274 kthread+0x31c/0x430 kernel/kthread.c:232 kobject: 'tx-0' (ffff888065e3ac58): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim393/net/wlan94/queues/tx-0' ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:402 Sending NMI from CPU 0 to CPUs 1: kobject: 'tx-1' (ffff888065e3add8): kobject_add_internal: parent: 'queues', set: 'queues' NMI backtrace for cpu 1 CPU: 1 PID: 22540 Comm: syz-executor.4 Not tainted 4.14.115 #5 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8880878a4080 task.stack: ffff888068308000 RIP: 0010:preempt_count_sub+0x4b/0x130 kernel/sched/core.c:3130 RSP: 0018:ffff8880aef07cf0 EFLAGS: 00000002 RAX: 0000000000010002 RBX: 0000000000000001 RCX: 0000000000000000 RDX: 0000000000000004 RSI: ffffffff869bee00 RDI: 0000000000000001 RBP: ffff8880aef07cf8 R08: 0000000000000000 R09: ffff8880878a4998 R10: ffff8880878a4978 R11: ffff8880878a4080 R12: 0000000000000001 R13: ffff8880aef2c4c0 R14: ffff8880aef2ce48 R15: 0000000100006a7c FS: 00007f997b754700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b33720000 CR3: 000000005ee42000 CR4: 00000000001426e0 Call Trace: rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1190 [inline] rcu_lockdep_current_cpu_online+0xf2/0x140 kernel/rcu/tree.c:1177 rcu_read_lock_held+0x8a/0xd0 kernel/rcu/update.c:330 set_cpu_sd_state_busy kernel/sched/fair.c:8681 [inline] nohz_kick_needed kernel/sched/fair.c:8950 [inline] trigger_load_balance+0x2d2/0xa00 kernel/sched/fair.c:9045 scheduler_tick+0x1d9/0x2d0 kernel/sched/core.c:3042 update_process_times+0x49/0x70 kernel/time/timer.c:1593 tick_sched_handle+0x85/0x160 kernel/time/tick-sched.c:161 tick_sched_timer+0x43/0x130 kernel/time/tick-sched.c:1219 __run_hrtimer kernel/time/hrtimer.c:1220 [inline] __hrtimer_run_queues+0x273/0xbd0 kernel/time/hrtimer.c:1284 hrtimer_interrupt+0x1d8/0x5d0 kernel/time/hrtimer.c:1318 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1037 [inline] smp_apic_timer_interrupt+0x12c/0x600 arch/x86/kernel/apic/apic.c:1062 apic_timer_interrupt+0x8e/0xa0 arch/x86/entry/entry_64.S:787 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:778 [inline] RIP: 0010:console_trylock_spinning kernel/printk/printk.c:1679 [inline] RIP: 0010:vprintk_emit kernel/printk/printk.c:1916 [inline] RIP: 0010:vprintk_emit+0x524/0x600 kernel/printk/printk.c:1882 RSP: 0018:ffff88806830f028 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff10 RAX: 0000000000040000 RBX: 1ffffffff0ee296d RCX: ffffc9000c862000 RDX: 0000000000040000 RSI: ffffffff814b274f RDI: 0000000000000246 RBP: ffff88806830f068 R08: ffff8880878a4080 R09: ffff8880878a4970 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000059 R13: 0000000000000246 R14: ffff8880a8612540 R15: 0000000000000000 vprintk_default+0x28/0x30 kernel/printk/printk.c:1957 vprintk_func+0x5d/0x159 kernel/printk/printk_safe.c:401 printk+0x9e/0xbc kernel/printk/printk.c:1990 kobject_add_internal.part.0.cold+0x101/0x5b1 lib/kobject.c:224 kobject_add_internal lib/kobject.c:363 [inline] kobject_add_varg lib/kobject.c:364 [inline] kobject_init_and_add+0x12c/0x140 lib/kobject.c:436 netdev_queue_add_kobject net/core/net-sysfs.c:1326 [inline] netdev_queue_update_kobjects+0xe8/0x360 net/core/net-sysfs.c:1355 register_queue_kobjects net/core/net-sysfs.c:1397 [inline] netdev_register_kobject+0x28a/0x3a0 net/core/net-sysfs.c:1603 register_netdevice+0x81c/0xca0 net/core/dev.c:7665 ieee80211_if_add+0xfa0/0x17f0 net/mac80211/iface.c:1902 ieee80211_register_hw+0x2628/0x2f30 net/mac80211/main.c:1119 mac80211_hwsim_new_radio+0x19a1/0x2980 drivers/net/wireless/mac80211_hwsim.c:2705 hwsim_new_radio_nl+0x3f2/0x62e drivers/net/wireless/mac80211_hwsim.c:3164 genl_family_rcv_msg+0x61c/0xc40 net/netlink/genetlink.c:600 genl_rcv_msg+0xb4/0x150 net/netlink/genetlink.c:625 netlink_rcv_skb+0x152/0x3c0 net/netlink/af_netlink.c:2432 genl_rcv+0x29/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1286 [inline] netlink_unicast+0x466/0x780 net/netlink/af_netlink.c:1312 netlink_sendmsg+0x7c4/0xc60 net/netlink/af_netlink.c:1877 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xd0/0x110 net/socket.c:656 ___sys_sendmsg+0x70c/0x850 net/socket.c:2062 __sys_sendmsg+0xb9/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0x2d/0x50 net/socket.c:2103 do_syscall_64+0x1eb/0x630 arch/x86/entry/common.c:289 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458da9 RSP: 002b:00007f997b753c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f997b7546d4 R13: 00000000004c6681 R14: 00000000004dafd0 R15: 00000000ffffffff Code: 83 c0 03 89 fb 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c8 00 00 00 8b 0d c5 62 da 07 85 c9 75 18 65 8b 05 0a fa c1 7e 25 ff ff ff 7f <39> c3 7f 1b 81 fb fe 00 00 00 76 55 65 8b 05 f2 f9 c1 7e f7 db