INFO: task kworker/u4:0:25842 blocked for more than 430 seconds. Not tainted 6.6.0-rc5-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u4:0 state:D stack:0 pid:25842 ppid:2 flags:0x00000000 Workqueue: nfc2_nci_rx_wq nci_rx_work Backtrace: [<8183f6e0>] (__schedule) from [<81840348>] (schedule+0x5c/0xac kernel/sched/core.c:6771) r10:870ba805 r9:00000000 r8:871a8460 r7:00000002 r6:ee195dac r5:83f45e00 r4:83f45e00 [<818402ec>] (schedule) from [<8184088c>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6830) r5:83f45e00 r4:871a845c [<81840874>] (schedule_preempt_disabled) from [<81843174>] (__mutex_lock_common kernel/locking/mutex.c:679 [inline]) [<81840874>] (schedule_preempt_disabled) from [<81843174>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:747) [<81842e8c>] (__mutex_lock.constprop.0) from [<81843a40>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1035) r10:870ba805 r9:83f45e00 r8:00000001 r7:871a845c r6:00000000 r5:861ff0fc r4:871a8400 [<81843a2c>] (__mutex_lock_slowpath) from [<81843a80>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<81843a44>] (mutex_lock) from [<81797608>] (device_lock include/linux/device.h:992 [inline]) [<81843a44>] (mutex_lock) from [<81797608>] (nfc_targets_found+0x5c/0x124 net/nfc/core.c:778) [<817975ac>] (nfc_targets_found) from [<817a7964>] (nci_rf_discover_ntf_packet net/nfc/nci/ntf.c:390 [inline]) [<817975ac>] (nfc_targets_found) from [<817a7964>] (nci_ntf_packet+0xa3c/0xe88 net/nfc/nci/ntf.c:798) r8:00000001 r7:00000000 r6:861ff000 r5:834cc000 r4:00000103 [<817a6f28>] (nci_ntf_packet) from [<817a4614>] (nci_rx_work+0x64/0xe4 net/nfc/nci/core.c:1517) r10:870ba805 r9:83f45e00 r8:00000100 r7:861ff0a4 r6:861ff070 r5:861ff000 r4:834cc000 [<817a45b0>] (nci_rx_work) from [<80265fd4>] (process_one_work+0x19c/0x4a8 kernel/workqueue.c:2630) r7:82c0e600 r6:870ba800 r5:861ff070 r4:86ca3e00 [<80265e38>] (process_one_work) from [<80266520>] (process_scheduled_works kernel/workqueue.c:2703 [inline]) [<80265e38>] (process_one_work) from [<80266520>] (worker_thread+0x240/0x48c kernel/workqueue.c:2784) r10:61c88647 r9:83f45e00 r8:82c0e620 r7:82604d40 r6:82c0e600 r5:86ca3e2c r4:86ca3e00 [<802662e0>] (worker_thread) from [<8026d8e0>] (kthread+0x104/0x134 kernel/kthread.c:388) r10:00000000 r9:ed769e98 r8:86cac580 r7:86ca3e00 r6:802662e0 r5:83f45e00 r4:86cac340 [<8026d7dc>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134) Exception stack(0xee195fb0 to 0xee195ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026d7dc r4:86cac340 INFO: task syz-executor.0:6546 blocked for more than 430 seconds. Not tainted 6.6.0-rc5-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:0 pid:6546 ppid:25686 flags:0x00000005 Backtrace: [<8183f6e0>] (__schedule) from [<81840348>] (schedule+0x5c/0xac kernel/sched/core.c:6771) r10:8291a140 r9:00000000 r8:861ff0c8 r7:00000002 r6:ec541a84 r5:83628bc0 r4:83628bc0 [<818402ec>] (schedule) from [<8184088c>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6830) r5:83628bc0 r4:861ff0c4 [<81840874>] (schedule_preempt_disabled) from [<81843174>] (__mutex_lock_common kernel/locking/mutex.c:679 [inline]) [<81840874>] (schedule_preempt_disabled) from [<81843174>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:747) [<81842e8c>] (__mutex_lock.constprop.0) from [<81843a40>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1035) r10:8291a140 r9:861ff0c4 r8:871a8400 r7:ffffffff r6:00000000 r5:00000000 r4:861ff000 [<81843a2c>] (__mutex_lock_slowpath) from [<81843a80>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<81843a44>] (mutex_lock) from [<817a5d2c>] (nci_request net/nfc/nci/core.c:149 [inline]) [<81843a44>] (mutex_lock) from [<817a5d2c>] (nci_start_poll+0x108/0x394 net/nfc/nci/core.c:831) [<817a5c24>] (nci_start_poll) from [<81798544>] (nfc_start_poll+0x74/0xd8 net/nfc/core.c:225) r10:8291a140 r9:ec541c44 r8:ffffffff r7:871a845c r6:00000000 r5:ffffffff r4:871a8400 [<817984d0>] (nfc_start_poll) from [<81799808>] (nfc_genl_start_poll+0x70/0xfc net/nfc/netlink.c:828) r7:871a8610 r6:ec541be4 r5:00000000 r4:871a8400 [<81799798>] (nfc_genl_start_poll) from [<81455688>] (genl_family_rcv_msg_doit net/netlink/genetlink.c:971 [inline]) [<81799798>] (nfc_genl_start_poll) from [<81455688>] (genl_family_rcv_msg net/netlink/genetlink.c:1051 [inline]) [<81799798>] (nfc_genl_start_poll) from [<81455688>] (genl_rcv_msg+0x27c/0x3d0 net/netlink/genetlink.c:1066) r9:ec541c44 r8:867e1d00 r7:00000000 r6:834cc900 r5:866bd210 r4:8218f120 [<8145540c>] (genl_rcv_msg) from [<81453d50>] (netlink_rcv_skb+0xc0/0x120 net/netlink/af_netlink.c:2545) r10:00000000 r9:871ab97c r8:8291a140 r7:00000024 r6:866bd200 r5:8145540c r4:834cc900 [<81453c90>] (netlink_rcv_skb) from [<81454e20>] (genl_rcv+0x2c/0x3c net/netlink/genetlink.c:1075) r7:834cc900 r6:82e40fc0 r5:827c80a8 r4:834cc900 [<81454df4>] (genl_rcv) from [<81453220>] (netlink_unicast_kernel net/netlink/af_netlink.c:1342 [inline]) [<81454df4>] (genl_rcv) from [<81453220>] (netlink_unicast+0x194/0x290 net/netlink/af_netlink.c:1368) r5:00000024 r4:82ed1c00 [<8145308c>] (netlink_unicast) from [<81453530>] (netlink_sendmsg+0x214/0x49c net/netlink/af_netlink.c:1910) r9:00000000 r8:00000000 r7:871ab800 r6:00000024 r5:834cc900 r4:ec541f30 [<8145331c>] (netlink_sendmsg) from [<813409ec>] (sock_sendmsg_nosec net/socket.c:730 [inline]) [<8145331c>] (netlink_sendmsg) from [<813409ec>] (__sock_sendmsg+0x44/0x78 net/socket.c:745) r10:00000000 r9:ec541dcc r8:ec541dcc r7:00000000 r6:84871900 r5:ec541f30 r4:00000000 [<813409a8>] (__sock_sendmsg) from [<8134161c>] (____sys_sendmsg+0x22c/0x2a8 net/socket.c:2558) r7:00000000 r6:00000000 r5:84871900 r4:ec541f30 [<813413f0>] (____sys_sendmsg) from [<81343414>] (___sys_sendmsg+0x9c/0xd0 net/socket.c:2612) r10:ec541e2c r9:20000440 r8:00000000 r7:00000000 r6:84871900 r5:ec541f30 r4:00000000 [<81343378>] (___sys_sendmsg) from [<81343910>] (__sys_sendmsg net/socket.c:2641 [inline]) [<81343378>] (___sys_sendmsg) from [<81343910>] (__do_sys_sendmsg net/socket.c:2650 [inline]) [<81343378>] (___sys_sendmsg) from [<81343910>] (sys_sendmsg+0x78/0xbc net/socket.c:2648) r10:00000128 r9:83628bc0 r8:80200288 r7:00000000 r6:20000440 r5:84871900 r4:00000000 [<81343898>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xec541fa8 to 0xec541ff0) 1fa0: 00000000 00000000 00000006 20000440 00000000 00000000 1fc0: 00000000 00000000 0014c2c0 00000128 7ec0132e 7ec0132f 003d0f00 76b130fc 1fe0: 76b12f08 76b12ef8 00016680 000509d0 r7:00000128 r6:0014c2c0 r5:00000000 r4:00000000 INFO: task syz-executor.0:6563 blocked for more than 430 seconds. Not tainted 6.6.0-rc5-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:0 pid:6563 ppid:25686 flags:0x00000005 Backtrace: [<8183f6e0>] (__schedule) from [<81840348>] (schedule+0x5c/0xac kernel/sched/core.c:6771) r10:00000000 r9:00000000 r8:827c8098 r7:00000002 r6:ec629b24 r5:85ccbac0 r4:85ccbac0 [<818402ec>] (schedule) from [<8184088c>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6830) r5:85ccbac0 r4:827c8094 [<81840874>] (schedule_preempt_disabled) from [<81843174>] (__mutex_lock_common kernel/locking/mutex.c:679 [inline]) [<81840874>] (schedule_preempt_disabled) from [<81843174>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:747) [<81842e8c>] (__mutex_lock.constprop.0) from [<81843a40>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1035) r10:00000000 r9:ec629c44 r8:00000000 r7:0000002c r6:834cc9c0 r5:866bcfc0 r4:8218f120 [<81843a2c>] (__mutex_lock_slowpath) from [<81843a80>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<81843a44>] (mutex_lock) from [<81455710>] (genl_lock net/netlink/genetlink.c:33 [inline]) [<81843a44>] (mutex_lock) from [<81455710>] (genl_op_lock net/netlink/genetlink.c:58 [inline]) [<81843a44>] (mutex_lock) from [<81455710>] (genl_op_lock net/netlink/genetlink.c:55 [inline]) [<81843a44>] (mutex_lock) from [<81455710>] (genl_rcv_msg+0x304/0x3d0 net/netlink/genetlink.c:1065) [<8145540c>] (genl_rcv_msg) from [<81453d50>] (netlink_rcv_skb+0xc0/0x120 net/netlink/af_netlink.c:2545) r10:00000000 r9:871ab97c r8:8291a140 r7:0000002c r6:866bcfc0 r5:8145540c r4:834cc9c0 [<81453c90>] (netlink_rcv_skb) from [<81454e20>] (genl_rcv+0x2c/0x3c net/netlink/genetlink.c:1075) r7:834cc9c0 r6:82e40fc0 r5:827c80a8 r4:834cc9c0 [<81454df4>] (genl_rcv) from [<81453220>] (netlink_unicast_kernel net/netlink/af_netlink.c:1342 [inline]) [<81454df4>] (genl_rcv) from [<81453220>] (netlink_unicast+0x194/0x290 net/netlink/af_netlink.c:1368) r5:0000002c r4:82ed1c00 [<8145308c>] (netlink_unicast) from [<81453530>] (netlink_sendmsg+0x214/0x49c net/netlink/af_netlink.c:1910) r9:00000000 r8:00000000 r7:871ab800 r6:0000002c r5:834cc9c0 r4:ec629f30 [<8145331c>] (netlink_sendmsg) from [<813409ec>] (sock_sendmsg_nosec net/socket.c:730 [inline]) [<8145331c>] (netlink_sendmsg) from [<813409ec>] (__sock_sendmsg+0x44/0x78 net/socket.c:745) r10:00000000 r9:ec629dcc r8:ec629dcc r7:00000000 r6:84871900 r5:ec629f30 r4:00000000 [<813409a8>] (__sock_sendmsg) from [<8134161c>] (____sys_sendmsg+0x22c/0x2a8 net/socket.c:2558) r7:00000000 r6:00000000 r5:84871900 r4:ec629f30 [<813413f0>] (____sys_sendmsg) from [<81343414>] (___sys_sendmsg+0x9c/0xd0 net/socket.c:2612) r10:ec629e2c r9:20000780 r8:00000000 r7:00000000 r6:84871900 r5:ec629f30 r4:00000000 [<81343378>] (___sys_sendmsg) from [<81343910>] (__sys_sendmsg net/socket.c:2641 [inline]) [<81343378>] (___sys_sendmsg) from [<81343910>] (__do_sys_sendmsg net/socket.c:2650 [inline]) [<81343378>] (___sys_sendmsg) from [<81343910>] (sys_sendmsg+0x78/0xbc net/socket.c:2648) r10:00000128 r9:85ccbac0 r8:80200288 r7:00000000 r6:20000780 r5:84871900 r4:00000000 [<81343898>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xec629fa8 to 0xec629ff0) 9fa0: 00000000 00000000 00000006 20000780 00000000 00000000 9fc0: 00000000 00000000 0014c500 00000128 7ec0132e 7ec0132f 003d0f00 76a8f0fc 9fe0: 76a8ef08 76a8eef8 00016680 000509d0 r7:00000128 r6:0014c500 r5:00000000 r4:00000000 INFO: task syz-executor.0:6565 blocked for more than 430 seconds. Not tainted 6.6.0-rc5-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:0 pid:6565 ppid:25686 flags:0x00000005 Backtrace: [<8183f6e0>] (__schedule) from [<81840348>] (schedule+0x5c/0xac kernel/sched/core.c:6771) r10:ec631e3c r9:00000002 r8:ec631de4 r7:83603ac0 r6:ec631e34 r5:00000000 r4:83603ac0 [<818402ec>] (schedule) from [<81847994>] (schedule_timeout+0xe4/0x114 kernel/time/timer.c:2143) r5:00000000 r4:7fffffff [<818478b0>] (schedule_timeout) from [<818412ac>] (do_wait_for_common kernel/sched/completion.c:95 [inline]) [<818478b0>] (schedule_timeout) from [<818412ac>] (__wait_for_common kernel/sched/completion.c:116 [inline]) [<818478b0>] (schedule_timeout) from [<818412ac>] (wait_for_common kernel/sched/completion.c:127 [inline]) [<818478b0>] (schedule_timeout) from [<818412ac>] (wait_for_completion+0x6c/0x144 kernel/sched/completion.c:148) r7:83603ac0 r6:ec631e34 r5:ec631e38 r4:7fffffff [<81841240>] (wait_for_completion) from [<80262aac>] (__flush_workqueue+0x118/0x5d0 kernel/workqueue.c:3195) r10:00000003 r9:872e3810 r8:872e383c r7:861ff030 r6:872e3800 r5:ec631e28 r4:00000001 [<80262994>] (__flush_workqueue) from [<817a3fc4>] (nci_close_device+0x8c/0x130 net/nfc/nci/core.c:579) r10:00000003 r9:83603ac0 r8:834e76d0 r7:861ff030 r6:861ff018 r5:861ff0c4 r4:861ff000 [<817a3f38>] (nci_close_device) from [<817a476c>] (nci_unregister_device+0x24/0x98 net/nfc/nci/core.c:1292) r7:861ff000 r6:839ee480 r5:000e001b r4:867fbd40 [<817a4748>] (nci_unregister_device) from [<80a8732c>] (virtual_ncidev_close+0x18/0x30 drivers/nfc/virtual_ncidev.c:163) r9:83603ac0 r8:834e76d0 r7:830e8088 r6:839ee480 r5:000e001b r4:867fbd40 [<80a87314>] (virtual_ncidev_close) from [<804db0fc>] (__fput+0xd4/0x284 fs/file_table.c:384) r5:000e001b r4:83839a80 [<804db028>] (__fput) from [<804db2bc>] (____fput+0x10/0x14 fs/file_table.c:412) r9:83603ac0 r8:82855624 r7:83603ac0 r6:836042fc r5:836042cc r4:00000000 [<804db2ac>] (____fput) from [<8026a034>] (task_work_run+0x90/0xb8 kernel/task_work.c:180) [<80269fa4>] (task_work_run) from [<8020bd4c>] (resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]) [<80269fa4>] (task_work_run) from [<8020bd4c>] (do_work_pending+0x40c/0x4c0 arch/arm/kernel/signal.c:631) r9:83603ac0 r8:80200288 r7:00000003 r6:80200288 r5:ec631fb0 r4:83603ac0 [<8020b940>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) Exception stack(0xec631fb0 to 0xec631ff8) 1fa0: fffffff2 20000840 00000064 00000000 1fc0: 00000000 00000000 0014c620 00000003 7ec0132e 7ec0132f 003d0f00 76a4d0fc 1fe0: 76a4cf08 76a4cef8 00016680 000509d0 60000010 00000003 r9:83603ac0 r8:80200288 r7:00000003 r6:0014c620 r5:00000000 r4:00000000 NMI backtrace for cpu 0 CPU: 0 PID: 31 Comm: khungtaskd Not tainted 6.6.0-rc5-syzkaller #0 Hardware name: ARM-Versatile Express Backtrace: [<8181e540>] (dump_backtrace) from [<8181e63c>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:256) r7:00000000 r6:00000013 r5:60000093 r4:81fb5704 [<8181e624>] (show_stack) from [<8183b964>] (__dump_stack lib/dump_stack.c:88 [inline]) [<8181e624>] (show_stack) from [<8183b964>] (dump_stack_lvl+0x48/0x54 lib/dump_stack.c:106) [<8183b91c>] (dump_stack_lvl) from [<8183b988>] (dump_stack+0x18/0x1c lib/dump_stack.c:113) r5:00000000 r4:00000001 [<8183b970>] (dump_stack) from [<8180bf84>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<8180be24>] (nmi_cpu_backtrace) from [<8180c0d0>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000000 r6:8260c494 r5:8261a898 r4:ffffffff [<8180bfa0>] (nmi_trigger_cpumask_backtrace) from [<802104b4>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851) r9:8260c60c r8:82899eac r7:8261b448 r6:00007f1e r5:85ccc880 r4:83e6c264 [<8021049c>] (arch_trigger_cpumask_backtrace) from [<80343f18>] (trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]) [<8021049c>] (arch_trigger_cpumask_backtrace) from [<80343f18>] (check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline]) [<8021049c>] (arch_trigger_cpumask_backtrace) from [<80343f18>] (watchdog+0x488/0x59c kernel/hung_task.c:379) [<80343a90>] (watchdog) from [<8026d8e0>] (kthread+0x104/0x134 kernel/kthread.c:388) r10:00000000 r9:df819e58 r8:82ccd9c0 r7:00000000 r6:80343a90 r5:82e10bc0 r4:82f224c0 [<8026d7dc>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134) Exception stack(0xdf8ddfb0 to 0xdf8ddff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026d7dc r4:82f224c0 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 2795 Comm: klogd Not tainted 6.6.0-rc5-syzkaller #0 Hardware name: ARM-Versatile Express PC is at format_decode+0x0/0x570 lib/vsprintf.c:2526 LR is at vsnprintf+0x74/0x400 lib/vsprintf.c:2770 pc : [<818137e8>] lr : [<818194ec>] psr: 20000013 sp : ec2f1d00 ip : 83de9780 fp : ec2f1d4c r10: ffffffff r9 : ec2f1d14 r8 : ec2f1dd7 r7 : ec2f1d70 r6 : 13d0e228 r5 : ec2f1dd7 r4 : 81fabec4 r3 : 0000005b r2 : 81fabec4 r1 : ec2f1d14 r0 : 81fabec4 Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 843d80c0 DAC: 00000000 Backtrace: [<81819478>] (vsnprintf) from [<81819954>] (sprintf+0x38/0x5c lib/vsprintf.c:3022) r10:00000003 r9:000001dc r8:77c5e73c r7:ec2f1dd4 r6:ec2f1e70 r5:00000377 r4:7d94fed0 [<8181991c>] (sprintf) from [<802b6e04>] (print_time kernel/printk/printk.c:1327 [inline]) [<8181991c>] (sprintf) from [<802b6e04>] (info_print_prefix+0x16c/0x188 kernel/printk/printk.c:1353) r3:000b55fc r2:00000ee3 r1:81fabec4 [<802b6c98>] (info_print_prefix) from [<802b6e94>] (record_print_text+0x74/0x17c kernel/printk/printk.c:1402) r10:00000000 r9:000007fe r8:00000001 r7:00000800 r6:871e9800 r5:00000001 r4:00000029 [<802b6e20>] (record_print_text) from [<802b7820>] (syslog_print+0x2a8/0x378 kernel/printk/printk.c:1613) r10:82857040 r9:00000063 r8:00000000 r7:00000080 r6:76fb84bf r5:82857190 r4:0000037f [<802b7578>] (syslog_print) from [<802b983c>] (do_syslog+0x120/0x354 kernel/printk/printk.c:1732) r10:00000067 r9:83de9780 r8:000003ff r7:76fb8140 r6:00000000 r5:00000002 r4:00000000 [<802b971c>] (do_syslog) from [<802b9a84>] (__do_sys_syslog kernel/printk/printk.c:1824 [inline]) [<802b971c>] (do_syslog) from [<802b9a84>] (sys_syslog+0x14/0x18 kernel/printk/printk.c:1822) r9:83de9780 r8:80200288 r7:00000067 r6:00000000 r5:76fb8505 r4:76fb8140 [<802b9a70>] (sys_syslog) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xec2f1fa8 to 0xec2f1ff0) 1fa0: 76fb8140 76fb8505 00000002 76fb8140 000003ff 0000066c 1fc0: 76fb8140 76fb8505 00000000 00000067 76fb8140 76fb794c 76fb8554 76f9a21a 1fe0: 76fb7cfc 7ed56ca4 76f2c9d0 76e4cf1c