[ 30.449383][ T39] audit: type=1400 audit(1730719694.735:82): avc: denied { siginh } for pid=5849 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 30.786006][ T39] audit: type=1400 audit(1730719695.085:83): avc: denied { read } for pid=5345 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 30.792372][ T39] audit: type=1400 audit(1730719695.085:84): avc: denied { append } for pid=5345 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 30.798173][ T39] audit: type=1400 audit(1730719695.085:85): avc: denied { open } for pid=5345 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 30.804104][ T39] audit: type=1400 audit(1730719695.085:86): avc: denied { getattr } for pid=5345 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:32199' (ED25519) to the list of known hosts. [ 35.787299][ T39] audit: type=1400 audit(1730719700.085:87): avc: denied { execute } for pid=5907 comm="sh" name="syz-execprog" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 35.794414][ T39] audit: type=1400 audit(1730719700.085:88): avc: denied { execute_no_trans } for pid=5907 comm="sh" path="/syz-execprog" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 36.169852][ T39] audit: type=1400 audit(1730719700.465:89): avc: denied { write } for pid=5907 comm="syz-execprog" path="pipe:[6468]" dev="pipefs" ino=6468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 2024/11/04 11:28:20 ignoring optional flag "sandboxArg"="0" 2024/11/04 11:28:20 parsed 1 programs [ 36.493634][ T39] audit: type=1400 audit(1730719700.795:90): avc: denied { node_bind } for pid=5907 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 38.266846][ T39] audit: type=1400 audit(1730719702.565:91): avc: denied { mounton } for pid=5934 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 38.269356][ T5934] cgroup: Unknown subsys name 'net' [ 38.272716][ T39] audit: type=1400 audit(1730719702.565:92): avc: denied { mount } for pid=5934 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 38.281448][ T39] audit: type=1400 audit(1730719702.585:93): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 38.433948][ T5934] cgroup: Unknown subsys name 'cpuset' [ 38.437484][ T5934] cgroup: Unknown subsys name 'rlimit' [ 38.576932][ T39] audit: type=1400 audit(1730719702.875:94): avc: denied { setattr } for pid=5934 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.582629][ T39] audit: type=1400 audit(1730719702.875:95): avc: denied { create } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.588044][ T39] audit: type=1400 audit(1730719702.875:96): avc: denied { write } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.613104][ T5952] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 39.236140][ T5934] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 40.704125][ T5957] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.750903][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.753382][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.755553][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.758091][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.760606][ T65] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 40.762911][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 40.879644][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.882203][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.894105][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.896127][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.704017][ T39] kauditd_printk_skb: 34 callbacks suppressed [ 41.704034][ T39] audit: type=1400 audit(1730719706.005:131): avc: denied { module_request } for pid=6009 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 41.718356][ T6009] chnl_net:caif_netlink_parms(): no params data found [ 41.772348][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.774594][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.776447][ T6009] bridge_slave_0: entered allmulticast mode [ 41.778600][ T6009] bridge_slave_0: entered promiscuous mode [ 41.781977][ T6009] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.783890][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.785760][ T6009] bridge_slave_1: entered allmulticast mode [ 41.787769][ T6009] bridge_slave_1: entered promiscuous mode [ 41.808605][ T6009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.813106][ T6009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.831900][ T6009] team0: Port device team_slave_0 added [ 41.834359][ T6009] team0: Port device team_slave_1 added [ 41.853451][ T6009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.855243][ T6009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.861836][ T6009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.867893][ T6009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.870178][ T6009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.877688][ T6009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.953924][ T6009] hsr_slave_0: entered promiscuous mode [ 41.957122][ T6009] hsr_slave_1: entered promiscuous mode [ 42.064464][ T6009] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.071681][ T6009] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.076171][ T6009] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.079321][ T6009] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.115722][ T6009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.125629][ T6009] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.130252][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.132860][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.139565][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.142080][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.176689][ T39] audit: type=1400 audit(1730719706.475:132): avc: denied { sys_module } for pid=6009 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 42.219784][ T6009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.235574][ T6009] veth0_vlan: entered promiscuous mode [ 42.239574][ T6009] veth1_vlan: entered promiscuous mode [ 42.250073][ T6009] veth0_macvtap: entered promiscuous mode [ 42.253225][ T6009] veth1_macvtap: entered promiscuous mode [ 42.260151][ T6009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.264312][ T6009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.267850][ T6009] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.270189][ T6009] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.273316][ T6009] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.275555][ T6009] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.290474][ T39] audit: type=1400 audit(1730719706.585:133): avc: denied { mounton } for pid=6009 comm="syz-executor" path="/syzkaller.wzfY04/syz-tmp" dev="sda1" ino=1943 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.334480][ T69] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.409590][ T69] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.457019][ T39] audit: type=1400 audit(1730719706.755:134): avc: denied { create } for pid=6030 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 42.464041][ T39] audit: type=1400 audit(1730719706.755:135): avc: denied { sys_admin } for pid=6030 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 42.491567][ T39] audit: type=1400 audit(1730719706.795:136): avc: denied { sys_chroot } for pid=6031 comm="syz-executor" capability=18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 42.508555][ T69] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2024/11/04 11:28:26 executed programs: 0 [ 42.539654][ T5305] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 42.542485][ T5305] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 42.544707][ T5305] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 42.547070][ T5305] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 42.549718][ T5305] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 42.551943][ T5305] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 42.569217][ T69] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.621706][ T6036] chnl_net:caif_netlink_parms(): no params data found [ 42.656800][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.658722][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.660595][ T6036] bridge_slave_0: entered allmulticast mode [ 42.662784][ T6036] bridge_slave_0: entered promiscuous mode [ 42.665794][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.667634][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.669502][ T6036] bridge_slave_1: entered allmulticast mode [ 42.671651][ T6036] bridge_slave_1: entered promiscuous mode [ 42.692556][ T6036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.696068][ T6036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.715298][ T6036] team0: Port device team_slave_0 added [ 42.717863][ T6036] team0: Port device team_slave_1 added [ 42.735738][ T6036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.737546][ T6036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.745730][ T6036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.750221][ T6036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.752955][ T6036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.761508][ T6036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.789068][ T6036] hsr_slave_0: entered promiscuous mode [ 42.790909][ T6036] hsr_slave_1: entered promiscuous mode [ 42.794837][ T6036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.797015][ T6036] Cannot create hsr debugfs directory [ 44.621984][ T5305] Bluetooth: hci0: command tx timeout [ 45.847292][ T69] bridge_slave_1: left allmulticast mode [ 45.850067][ T69] bridge_slave_1: left promiscuous mode [ 45.852725][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.858043][ T69] bridge_slave_0: left allmulticast mode [ 45.859568][ T69] bridge_slave_0: left promiscuous mode [ 45.862571][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.087369][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.091853][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.095127][ T69] bond0 (unregistering): Released all slaves [ 46.116312][ T39] audit: type=1400 audit(1730719710.415:137): avc: denied { search } for pid=5663 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.165108][ T39] audit: type=1400 audit(1730719710.465:138): avc: denied { read } for pid=6052 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.172152][ T39] audit: type=1400 audit(1730719710.475:139): avc: denied { open } for pid=6052 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.179140][ T39] audit: type=1400 audit(1730719710.475:140): avc: denied { getattr } for pid=6052 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.196585][ T69] hsr_slave_0: left promiscuous mode [ 46.198697][ T69] hsr_slave_1: left promiscuous mode [ 46.201516][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.203521][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.206454][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.208429][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.223511][ T69] veth1_macvtap: left promiscuous mode [ 46.225232][ T69] veth0_macvtap: left promiscuous mode [ 46.226728][ T69] veth1_vlan: left promiscuous mode [ 46.228192][ T69] veth0_vlan: left promiscuous mode [ 46.671722][ T69] team0 (unregistering): Port device team_slave_1 removed [ 46.702334][ T5305] Bluetooth: hci0: command tx timeout [ 46.716486][ T69] team0 (unregistering): Port device team_slave_0 removed [ 47.298156][ T6036] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.301761][ T6036] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.305471][ T6036] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.308925][ T6036] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.357307][ T6036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.368397][ T6036] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.372927][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.374902][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.379945][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.381954][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.459149][ T6036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.475055][ T6036] veth0_vlan: entered promiscuous mode [ 47.478699][ T6036] veth1_vlan: entered promiscuous mode [ 47.490692][ T6036] veth0_macvtap: entered promiscuous mode [ 47.494523][ T6036] veth1_macvtap: entered promiscuous mode [ 47.500728][ T6036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.505758][ T6036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.509296][ T6036] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.512500][ T6036] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.514782][ T6036] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.517062][ T6036] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.562369][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.564453][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.574513][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.576693][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/11/04 11:28:31 executed programs: 2 [ 47.598675][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 47.598685][ T39] audit: type=1400 audit(1730719711.895:144): avc: denied { connect } for pid=6077 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.791975][ T5305] Bluetooth: hci0: command tx timeout [ 50.861405][ T5305] Bluetooth: hci0: command tx timeout 2024/11/04 11:28:36 executed programs: 279 2024/11/04 11:28:41 executed programs: 555 [ 58.446157][ T65] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.451708][ T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.456132][ T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.463800][ T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.465095][ T6078] ================================================================== [ 58.467599][ T6078] BUG: KASAN: slab-use-after-free in device_for_each_child+0x18f/0x1a0 [ 58.469691][ T6078] Read of size 8 at addr ffff88802b21d308 by task kbnepd bnep0/6078 [ 58.471784][ T65] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.473247][ T6078] [ 58.473254][ T6078] CPU: 0 UID: 0 PID: 6078 Comm: kbnepd bnep0 Not tainted 6.12.0-rc6-syzkaller #0 [ 58.473266][ T6078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.473273][ T6078] Call Trace: [ 58.473277][ T6078] [ 58.473281][ T6078] dump_stack_lvl+0x116/0x1f0 [ 58.473295][ T6078] print_report+0xc3/0x620 [ 58.473307][ T6078] ? __virt_addr_valid+0x5e/0x590 [ 58.473319][ T6078] ? __phys_addr+0xc6/0x150 [ 58.473330][ T6078] kasan_report+0xd9/0x110 [ 58.473340][ T6078] ? device_for_each_child+0x18f/0x1a0 [ 58.473357][ T6078] ? device_for_each_child+0x18f/0x1a0 [ 58.473369][ T6078] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 58.473381][ T6078] device_for_each_child+0x18f/0x1a0 [ 58.473393][ T6078] ? __pfx_device_for_each_child+0x10/0x10 [ 58.473405][ T6078] pm_runtime_set_memalloc_noio+0xf2/0x180 [ 58.473418][ T6078] netdev_unregister_kobject+0x1ed/0x270 [ 58.473429][ T6078] unregister_netdevice_many_notify+0x1055/0x1e50 [ 58.473443][ T6078] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 58.475635][ T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.476249][ T6078] ? trace_contention_end+0xea/0x140 [ 58.506605][ T6078] ? __mutex_lock+0x1a6/0x9c0 [ 58.507850][ T6078] ? rcu_is_watching+0x12/0xc0 [ 58.509110][ T6078] ? trace_lock_acquire+0x14a/0x1d0 [ 58.510478][ T6078] ? unregister_netdev+0x12/0x30 [ 58.511807][ T6078] ? bnep_session+0x2208/0x2d60 [ 58.513091][ T6078] unregister_netdevice_queue+0x307/0x3f0 [ 58.514580][ T6078] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 58.516237][ T6078] ? down_write+0x14e/0x200 [ 58.517435][ T6078] ? __pfx_down_write+0x10/0x10 [ 58.518708][ T6078] unregister_netdev+0x1c/0x30 [ 58.520002][ T6078] bnep_session+0x2210/0x2d60 [ 58.521238][ T6078] ? __schedule+0xe5d/0x5740 [ 58.522450][ T6078] ? __pfx___lock_acquire+0x10/0x10 [ 58.523817][ T6078] ? __pfx_bnep_session+0x10/0x10 [ 58.525189][ T6078] ? __kthread_parkme+0xb7/0x220 [ 58.526484][ T6078] ? __pfx_lock_release+0x10/0x10 [ 58.527795][ T6078] ? __pfx_woken_wake_function+0x10/0x10 [ 58.529256][ T6078] ? lockdep_hardirqs_on+0x7c/0x110 [ 58.530613][ T6078] ? __kthread_parkme+0x148/0x220 [ 58.531958][ T6078] ? __pfx_bnep_session+0x10/0x10 [ 58.533277][ T6078] kthread+0x2c1/0x3a0 [ 58.534347][ T6078] ? _raw_spin_unlock_irq+0x23/0x50 [ 58.535731][ T6078] ? __pfx_kthread+0x10/0x10 [ 58.536927][ T6078] ret_from_fork+0x45/0x80 [ 58.538013][ T6078] ? __pfx_kthread+0x10/0x10 [ 58.539149][ T6078] ret_from_fork_asm+0x1a/0x30 [ 58.540362][ T6078] [ 58.541150][ T6078] [ 58.541761][ T6078] Allocated by task 6036: [ 58.542819][ T6078] kasan_save_stack+0x33/0x60 [ 58.544025][ T6078] kasan_save_track+0x14/0x30 [ 58.545275][ T6078] __kasan_kmalloc+0xaa/0xb0 [ 58.546393][ T6078] __kmalloc_noprof+0x1e8/0x400 [ 58.547613][ T6078] hci_alloc_dev_priv+0x1d/0x2820 [ 58.548906][ T6078] __vhci_create_device+0xef/0x7d0 [ 58.550233][ T6078] vhci_write+0x2c3/0x470 [ 58.551386][ T6078] vfs_write+0x5ae/0x1150 [ 58.552494][ T6078] ksys_write+0x12f/0x260 [ 58.553566][ T6078] do_syscall_64+0xcd/0x250 [ 58.554692][ T6078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.556202][ T6078] [ 58.556811][ T6078] Freed by task 6036: [ 58.557769][ T6078] kasan_save_stack+0x33/0x60 [ 58.558943][ T6078] kasan_save_track+0x14/0x30 [ 58.560130][ T6078] kasan_save_free_info+0x3b/0x60 [ 58.561406][ T6078] __kasan_slab_free+0x51/0x70 [ 58.562611][ T6078] kfree+0x14f/0x4b0 [ 58.563605][ T6078] hci_release_dev+0x4d9/0x600 [ 58.564776][ T6078] bt_host_release+0x6a/0xb0 [ 58.565919][ T6078] device_release+0xa1/0x240 [ 58.567055][ T6078] kobject_put+0x1e4/0x5a0 [ 58.568253][ T6078] put_device+0x1f/0x30 [ 58.569259][ T6078] vhci_release+0x81/0xf0 [ 58.570339][ T6078] __fput+0x3f6/0xb60 [ 58.571323][ T6078] task_work_run+0x14e/0x250 [ 58.572461][ T6078] do_exit+0xadd/0x2d70 [ 58.573478][ T6078] do_group_exit+0xd3/0x2a0 [ 58.574590][ T6078] get_signal+0x25fb/0x2770 [ 58.575724][ T6078] arch_do_signal_or_restart+0x90/0x7e0 [ 58.577209][ T6078] syscall_exit_to_user_mode+0x150/0x2a0 [ 58.578628][ T6078] do_syscall_64+0xda/0x250 [ 58.579880][ T6078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.581501][ T6078] [ 58.582145][ T6078] Last potentially related work creation: [ 58.583570][ T6078] kasan_save_stack+0x33/0x60 [ 58.584767][ T6078] __kasan_record_aux_stack+0xba/0xd0 [ 58.586122][ T6078] insert_work+0x36/0x230 [ 58.587208][ T6078] __queue_work+0x97e/0x1080 [ 58.588366][ T6078] queue_work_on+0x11a/0x140 [ 58.589592][ T6078] l2cap_chan_send+0xb86/0x2a30 [ 58.590807][ T6078] l2cap_sock_sendmsg+0x228/0x300 [ 58.592195][ T6078] sock_sendmsg+0x3cb/0x470 [ 58.593322][ T6078] bnep_session+0x12fb/0x2d60 [ 58.594558][ T6078] kthread+0x2c1/0x3a0 [ 58.595891][ T6078] ret_from_fork+0x45/0x80 [ 58.597328][ T6078] ret_from_fork_asm+0x1a/0x30 [ 58.598531][ T6078] [ 58.599147][ T6078] Second to last potentially related work creation: [ 58.600798][ T6078] kasan_save_stack+0x33/0x60 [ 58.602142][ T6078] __kasan_record_aux_stack+0xba/0xd0 [ 58.603634][ T6078] insert_work+0x36/0x230 [ 58.604724][ T6078] __queue_work+0x97e/0x1080 [ 58.605930][ T6078] queue_work_on+0x11a/0x140 [ 58.607083][ T6078] l2cap_chan_send+0xb86/0x2a30 [ 58.608313][ T6078] l2cap_sock_sendmsg+0x228/0x300 [ 58.609587][ T6078] sock_sendmsg+0x3cb/0x470 [ 58.610788][ T6078] bnep_session+0x12fb/0x2d60 [ 58.612032][ T6078] kthread+0x2c1/0x3a0 [ 58.613051][ T6078] ret_from_fork+0x45/0x80 [ 58.614141][ T6078] ret_from_fork_asm+0x1a/0x30 [ 58.615425][ T6078] [ 58.616071][ T6078] The buggy address belongs to the object at ffff88802b21c000 [ 58.616071][ T6078] which belongs to the cache kmalloc-8k of size 8192 [ 58.619622][ T6078] The buggy address is located 4872 bytes inside of [ 58.619622][ T6078] freed 8192-byte region [ffff88802b21c000, ffff88802b21e000) [ 58.623229][ T6078] [ 58.623859][ T6078] The buggy address belongs to the physical page: [ 58.625526][ T6078] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802b218000 pfn:0x2b218 [ 58.628002][ T6078] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 58.630087][ T6078] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 58.632233][ T6078] page_type: f5(slab) [ 58.633239][ T6078] raw: 00fff00000000240 ffff88801b043180 ffffea0000a19010 ffffea0000d71410 [ 58.635422][ T6078] raw: ffff88802b218000 0000000000020001 00000001f5000000 0000000000000000 [ 58.637554][ T6078] head: 00fff00000000240 ffff88801b043180 ffffea0000a19010 ffffea0000d71410 [ 58.639752][ T6078] head: ffff88802b218000 0000000000020001 00000001f5000000 0000000000000000 [ 58.641902][ T6078] head: 00fff00000000003 ffffea0000ac8601 ffffffffffffffff 0000000000000000 [ 58.644082][ T6078] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 58.646259][ T6078] page dumped because: kasan: bad access detected [ 58.648006][ T6078] page_owner tracks the page as allocated [ 58.649499][ T6078] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6009, tgid 6009 (syz-executor), ts 42112224539, free_ts 42073968496 [ 58.655232][ T6078] post_alloc_hook+0x2d1/0x350 [ 58.656603][ T6078] get_page_from_freelist+0xf7d/0x2d10 [ 58.657980][ T6078] __alloc_pages_noprof+0x223/0x25a0 [ 58.659348][ T6078] alloc_pages_mpol_noprof+0x2c9/0x610 [ 58.660745][ T6078] new_slab+0x2c9/0x410 [ 58.661768][ T6078] ___slab_alloc+0xdac/0x1880 [ 58.662957][ T6078] __slab_alloc.constprop.0+0x56/0xb0 [ 58.664323][ T6078] __kmalloc_node_noprof+0x357/0x430 [ 58.665646][ T6078] __kvmalloc_node_noprof+0x6f/0x1a0 [ 58.666987][ T6078] pfifo_fast_init+0x125/0x3b0 [ 58.668201][ T6078] qdisc_create_dflt+0x101/0x440 [ 58.669417][ T6078] dev_activate+0x63a/0x12b0 [ 58.670586][ T6078] __dev_open+0x396/0x4e0 [ 58.671688][ T6078] __dev_change_flags+0x561/0x720 [ 58.672950][ T6078] dev_change_flags+0x8f/0x160 [ 58.674154][ T6078] do_setlink+0x1b0e/0x41c0 [ 58.675283][ T6078] page last free pid 6009 tgid 6009 stack trace: [ 58.676857][ T6078] free_unref_page+0x5f4/0xdc0 [ 58.678051][ T6078] __put_partials+0x14c/0x170 [ 58.679258][ T6078] qlist_free_all+0x4e/0x120 [ 58.680495][ T6078] kasan_quarantine_reduce+0x192/0x1e0 [ 58.681917][ T6078] __kasan_slab_alloc+0x69/0x90 [ 58.683196][ T6078] __kmalloc_node_track_caller_noprof+0x1c1/0x430 [ 58.684870][ T6078] kstrdup+0x3c/0x70 [ 58.685899][ T6078] device_rename+0x88/0x230 [ 58.687095][ T6078] dev_change_name+0x2b5/0x920 [ 58.688335][ T6078] do_setlink+0x312f/0x41c0 [ 58.689486][ T6078] __rtnl_newlink+0xc35/0x1920 [ 58.690739][ T6078] rtnl_newlink+0x67/0xa0 [ 58.691978][ T6078] rtnetlink_rcv_msg+0x3c7/0xea0 [ 58.693266][ T6078] netlink_rcv_skb+0x16b/0x440 [ 58.694508][ T6078] netlink_unicast+0x53c/0x7f0 [ 58.695761][ T6078] netlink_sendmsg+0x8b8/0xd70 [ 58.697008][ T6078] [ 58.697642][ T6078] Memory state around the buggy address: [ 58.699080][ T6078] ffff88802b21d200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.701072][ T6078] ffff88802b21d280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.703083][ T6078] >ffff88802b21d300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.705184][ T6078] ^ [ 58.706363][ T6078] ffff88802b21d380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.708426][ T6078] ffff88802b21d400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.710505][ T6078] ================================================================== [ 58.714120][ T6078] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 58.716031][ T6078] CPU: 0 UID: 0 PID: 6078 Comm: kbnepd bnep0 Not tainted 6.12.0-rc6-syzkaller #0 [ 58.718382][ T6078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.721176][ T6078] Call Trace: [ 58.722054][ T6078] [ 58.722805][ T6078] dump_stack_lvl+0x3d/0x1f0 [ 58.723983][ T6078] panic+0x71d/0x800 [ 58.724965][ T6078] ? __pfx_panic+0x10/0x10 [ 58.726127][ T6078] ? preempt_schedule_thunk+0x1a/0x30 [ 58.727535][ T6078] ? preempt_schedule_common+0x44/0xc0 [ 58.728973][ T6078] ? check_panic_on_warn+0x1f/0xb0 [ 58.730316][ T6078] check_panic_on_warn+0xab/0xb0 [ 58.731644][ T6078] end_report+0x117/0x180 [ 58.732779][ T6078] kasan_report+0xe9/0x110 [ 58.733932][ T6078] ? device_for_each_child+0x18f/0x1a0 [ 58.735309][ T6078] ? device_for_each_child+0x18f/0x1a0 [ 58.736724][ T6078] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 58.738144][ T6078] device_for_each_child+0x18f/0x1a0 [ 58.739523][ T6078] ? __pfx_device_for_each_child+0x10/0x10 [ 58.741053][ T6078] pm_runtime_set_memalloc_noio+0xf2/0x180 [ 58.742578][ T6078] netdev_unregister_kobject+0x1ed/0x270 [ 58.744049][ T6078] unregister_netdevice_many_notify+0x1055/0x1e50 [ 58.745678][ T6078] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 58.747366][ T6078] ? trace_contention_end+0xea/0x140 [ 58.748759][ T6078] ? __mutex_lock+0x1a6/0x9c0 [ 58.749995][ T6078] ? rcu_is_watching+0x12/0xc0 [ 58.751261][ T6078] ? trace_lock_acquire+0x14a/0x1d0 [ 58.752651][ T6078] ? unregister_netdev+0x12/0x30 [ 58.753952][ T6078] ? bnep_session+0x2208/0x2d60 [ 58.755238][ T6078] unregister_netdevice_queue+0x307/0x3f0 [ 58.756757][ T6078] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 58.758372][ T6078] ? down_write+0x14e/0x200 [ 58.759609][ T6078] ? __pfx_down_write+0x10/0x10 [ 58.760957][ T6078] unregister_netdev+0x1c/0x30 [ 58.762246][ T6078] bnep_session+0x2210/0x2d60 [ 58.763507][ T6078] ? __schedule+0xe5d/0x5740 [ 58.764742][ T6078] ? __pfx___lock_acquire+0x10/0x10 [ 58.766121][ T6078] ? __pfx_bnep_session+0x10/0x10 [ 58.767374][ T6078] ? __kthread_parkme+0xb7/0x220 [ 58.768597][ T6078] ? __pfx_lock_release+0x10/0x10 [ 58.769855][ T6078] ? __pfx_woken_wake_function+0x10/0x10 [ 58.771256][ T6078] ? lockdep_hardirqs_on+0x7c/0x110 [ 58.772648][ T6078] ? __kthread_parkme+0x148/0x220 [ 58.773924][ T6078] ? __pfx_bnep_session+0x10/0x10 [ 58.775186][ T6078] kthread+0x2c1/0x3a0 [ 58.776261][ T6078] ? _raw_spin_unlock_irq+0x23/0x50 [ 58.777701][ T6078] ? __pfx_kthread+0x10/0x10 [ 58.778918][ T6078] ret_from_fork+0x45/0x80 [ 58.780104][ T6078] ? __pfx_kthread+0x10/0x10 [ 58.781280][ T6078] ret_from_fork_asm+0x1a/0x30 [ 58.782519][ T6078] [ 58.784149][ T6078] Kernel Offset: disabled [ 58.785278][ T6078] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:28:42 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b84c5 RDI=ffffffff9aaeac40 RBP=ffffffff9aaeac00 RSP=ffffc900045373e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6232303838386652 R12=0000000000000000 R13=0000000000000061 R14=ffffffff850b8460 R15=0000000000000000 RIP=ffffffff850b84ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff8bbb2b48 CR3=000000002577e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000022000000 Opmask01=00000000ffffffff Opmask02=00000000fff84000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcabdb88d0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff888027bc4880 RCX=ffffc9000608fb18 RDX=0000000000000000 RSI=ffffffff8b6cd2a0 RDI=ffff888027bc4cc4 RBP=ffff888027bc4880 RSP=ffffc9000608fb60 R8 =0000000000000000 R9 =fffffbfff20beb21 R10=ffffffff905f590f R11=0000000000000000 R12=ffff888027bc4880 R13=000000000003dbcc R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff81745963 RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f85152d85e8 CR3=00000000316b8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41ae374dea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41ae50c488 00007f41ae50c480 00007f41ae50c478 00007f41ae50c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41af06d100 00007f41ae50c440 00007f41ae50c458 00007f41ae50c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41ae50c498 00007f41ae50c490 00007f41ae50c488 00007f41ae50c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49372f2738652f0b 2e233b2f0d1e5231 2c3e2b212b5f1806 1d18063830180719 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45575f43494d414e 59445f444c00544f 4e5f444e49425f44 4c00574f4e5f444e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 202331261635263d 062b2c203a5f0b4f 2330202028302b21 2b5f383c2a291b11 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f7f7f6f7f7f7f7f 7e6f3f3f3f7f7f7f 7f3f2b2b2f7f7f2f 3f7f3f3f3a7d1f3b ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49425f444c004854 41005f5952415242 494c5f444c005f00 656d65675f6b6364 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000362e3200414e 41004c004c005042 494c444449004600 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000005c603 RBX=0000000000000002 RCX=ffffffff8b235439 RDX=0000000000000000 RSI=ffffffff8b6ccfa0 RDI=ffffffff8bd1b200 RBP=ffffed1003b5b000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d507025 R10=ffff88806a83812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801dad8000 R14=ffffffff905f5908 R15=0000000000000000 RIP=ffffffff8b23681f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c2bd4c3300 CR3=00000000316b8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41ae374dea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41ae50c488 00007f41ae50c480 00007f41ae50c478 00007f41ae50c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41af06d100 00007f41ae50c440 00007f41ae50c458 00007f41ae50c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41ae50c498 00007f41ae50c490 00007f41ae50c488 00007f41ae50c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49372f2738652f0b 2e233b2f0d1e5231 2c3e2b212b5f1806 1d18063830180719 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45575f43494d414e 59445f444c00544f 4e5f444e49425f44 4c00574f4e5f444e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 202331261635263d 062b2c203a5f0b4f 2330202028302b21 2b5f383c2a291b11 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f7f7f6f7f7f7f7f 7e6f3f3f3f7f7f7f 7f3f2b2b2f7f7f2f 3f7f3f3f3a7d1f3b ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49425f444c004854 41005f5952415242 494c5f444c005f00 656d65675f6b6364 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000362e3200414e 41004c004c005042 494c444449004600 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000035 RCX=ffffffff816da34a RDX=ffff888021152440 RSI=ffffffff816da336 RDI=0000000000000001 RBP=1ffff920001a4f0a RSP=ffffc90000d27840 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000200 R14=ffff888023082440 R15=ffffc90000d27928 RIP=ffffffff816da340 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc0b847e48 CR3=000000002577e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000