last executing test programs: 290.806529ms ago: executing program 3 (id=28): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/access', 0x2, 0x0) 290.324103ms ago: executing program 3 (id=32): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem', 0x800, 0x0) 286.852728ms ago: executing program 3 (id=37): statfs(&(0x7f0000000000), &(0x7f0000000000)) 230.716424ms ago: executing program 3 (id=40): pipe(&(0x7f0000000000)) 230.3763ms ago: executing program 3 (id=43): socket$inet6_icmp(0xa, 0x2, 0x3a) 226.164389ms ago: executing program 3 (id=49): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sr0', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sr0', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sr0', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sr0', 0x800, 0x0) 115.178416ms ago: executing program 1 (id=70): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0', 0x800, 0x0) 112.136146ms ago: executing program 1 (id=74): getrlimit(0x0, &(0x7f0000000000)) 60.617231ms ago: executing program 1 (id=77): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp', 0x800, 0x0) 60.375309ms ago: executing program 0 (id=79): tgkill(0x0, 0x0, 0x0) 60.281282ms ago: executing program 1 (id=80): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/yama/ptrace_scope', 0x2, 0x0) 60.2497ms ago: executing program 2 (id=81): socket$pppoe(0x18, 0x1, 0x0) 60.220911ms ago: executing program 0 (id=82): lsm_set_self_attr(0x0, &(0x7f0000000000), 0x0, 0x0) 58.220743ms ago: executing program 0 (id=83): pivot_root(&(0x7f0000000000), &(0x7f0000000000)) 57.518673ms ago: executing program 1 (id=84): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 57.366888ms ago: executing program 2 (id=85): syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$usbfs(&(0x7f0000000140), 0xa, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0xa, 0x1) syz_open_dev$usbfs(&(0x7f00000001c0), 0xa, 0x2) syz_open_dev$usbfs(&(0x7f0000000200), 0xa, 0x800) syz_open_dev$usbfs(&(0x7f0000000240), 0x14, 0x0) syz_open_dev$usbfs(&(0x7f0000000280), 0x14, 0x1) syz_open_dev$usbfs(&(0x7f00000002c0), 0x14, 0x2) syz_open_dev$usbfs(&(0x7f0000000300), 0x14, 0x800) syz_open_dev$usbfs(&(0x7f0000000340), 0x1e, 0x0) syz_open_dev$usbfs(&(0x7f0000000380), 0x1e, 0x1) syz_open_dev$usbfs(&(0x7f00000003c0), 0x1e, 0x2) syz_open_dev$usbfs(&(0x7f0000000400), 0x1e, 0x800) syz_open_dev$usbfs(&(0x7f0000000440), 0x28, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x28, 0x1) syz_open_dev$usbfs(&(0x7f00000004c0), 0x28, 0x2) syz_open_dev$usbfs(&(0x7f0000000500), 0x28, 0x800) 672.245µs ago: executing program 0 (id=86): getgid() 475.324µs ago: executing program 1 (id=87): syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$mouse(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$mouse(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$mouse(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$mouse(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$mouse(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$mouse(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$mouse(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$mouse(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$mouse(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$mouse(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$mouse(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$mouse(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$mouse(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$mouse(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$mouse(&(0x7f0000000500), 0x4, 0x800) 380.579µs ago: executing program 2 (id=88): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m', 0x2, 0x0) 336.267µs ago: executing program 0 (id=89): inotify_init1(0x0) 282.09µs ago: executing program 2 (id=90): clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000)) exit(0x0) 230.634µs ago: executing program 2 (id=91): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log', 0x0, 0x0) 80.864µs ago: executing program 2 (id=92): syz_open_dev$sndhw(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sndhw(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$sndhw(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$sndhw(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$sndhw(&(0x7f0000000140), 0xa, 0x0) syz_open_dev$sndhw(&(0x7f0000000180), 0xa, 0x1) syz_open_dev$sndhw(&(0x7f00000001c0), 0xa, 0x2) syz_open_dev$sndhw(&(0x7f0000000200), 0xa, 0x800) syz_open_dev$sndhw(&(0x7f0000000240), 0x14, 0x0) syz_open_dev$sndhw(&(0x7f0000000280), 0x14, 0x1) syz_open_dev$sndhw(&(0x7f00000002c0), 0x14, 0x2) syz_open_dev$sndhw(&(0x7f0000000300), 0x14, 0x800) syz_open_dev$sndhw(&(0x7f0000000340), 0x1e, 0x0) syz_open_dev$sndhw(&(0x7f0000000380), 0x1e, 0x1) syz_open_dev$sndhw(&(0x7f00000003c0), 0x1e, 0x2) syz_open_dev$sndhw(&(0x7f0000000400), 0x1e, 0x800) syz_open_dev$sndhw(&(0x7f0000000440), 0x28, 0x0) syz_open_dev$sndhw(&(0x7f0000000480), 0x28, 0x1) syz_open_dev$sndhw(&(0x7f00000004c0), 0x28, 0x2) syz_open_dev$sndhw(&(0x7f0000000500), 0x28, 0x800) 0s ago: executing program 0 (id=93): syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$media(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$media(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$media(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$media(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$media(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$media(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$media(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$media(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$media(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$media(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$media(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$media(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$media(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$media(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$media(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$media(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$media(&(0x7f0000000500), 0x4, 0x800) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:6895' (ED25519) to the list of known hosts. [ 32.102351][ T5863] cgroup: Unknown subsys name 'net' [ 32.229610][ T5863] cgroup: Unknown subsys name 'cpuset' [ 32.232990][ T5863] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.082848][ T5863] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.035954][ T6054] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.039875][ T6054] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.043014][ T6054] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.045701][ T6054] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.048235][ T6054] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.050685][ T6054] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.059453][ T6053] ================================================================== [ 35.061952][ T6053] BUG: KASAN: slab-use-after-free in binder_add_device+0xa4/0xb0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 35.064265][ T6053] Write of size 8 at addr ffff888047fe5808 by task syz-executor/6053 [ 35.068054][ T6053] [ 35.068794][ T6053] CPU: 1 UID: 0 PID: 6053 Comm: syz-executor Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 35.068805][ T6053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 35.068810][ T6053] Call Trace: [ 35.068814][ T6053] [ 35.068817][ T6053] dump_stack_lvl+0x116/0x1f0 [ 35.068827][ T6053] print_report+0xc3/0x620 [ 35.068838][ T6053] ? __virt_addr_valid+0x5e/0x590 [ 35.068846][ T6053] ? __phys_addr+0xc6/0x150 [ 35.068853][ T6053] kasan_report+0xd9/0x110 [ 35.068862][ T6053] ? binder_add_device+0xa4/0xb0 [ 35.068870][ T6053] ? binder_add_device+0xa4/0xb0 [ 35.068879][ T6053] binder_add_device+0xa4/0xb0 [ 35.068886][ T6053] binderfs_binder_device_create.isra.0+0x8ec/0xad0 [ 35.068898][ T6053] binderfs_fill_super+0x848/0x1240 [ 35.068908][ T6053] ? __pfx_binderfs_fill_super+0x10/0x10 [ 35.068921][ T6053] ? shrinker_register+0x1a8/0x260 [ 35.068935][ T6053] ? sget_fc+0x488/0xb90 [ 35.068943][ T6053] ? apparmor_capable+0x114/0x1d0 [ 35.068955][ T6053] ? __pfx_set_anon_super_fc+0x10/0x10 [ 35.068968][ T6053] ? __pfx_binderfs_fill_super+0x10/0x10 [ 35.068977][ T6053] get_tree_nodev+0xda/0x190 [ 35.068985][ T6053] vfs_get_tree+0x8b/0x340 [ 35.068996][ T6053] path_mount+0x6e1/0x1f00 [ 35.069006][ T6053] ? kmem_cache_free+0x2e2/0x4d0 [ 35.069015][ T6053] ? __pfx_path_mount+0x10/0x10 [ 35.069025][ T6053] ? putname+0x13c/0x180 [ 35.069035][ T6053] __ia32_sys_mount+0x28d/0x310 [ 35.069045][ T6053] ? __pfx___ia32_sys_mount+0x10/0x10 [ 35.069055][ T6053] __do_fast_syscall_32+0x73/0x120 [ 35.069065][ T6053] do_fast_syscall_32+0x32/0x80 [ 35.069073][ T6053] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 35.069086][ T6053] RIP: 0023:0xf743e579 [ 35.069093][ T6053] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 35.069101][ T6053] RSP: 002b:00000000ff8b6880 EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 35.069109][ T6053] RAX: ffffffffffffffda RBX: 00000000f72c4aa1 RCX: 00000000f72b54b3 [ 35.069114][ T6053] RDX: 00000000f72c4aa1 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.069119][ T6053] RBP: 00000000ff8b69f8 R08: 0000000000000000 R09: 0000000000000000 [ 35.069124][ T6053] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 35.069128][ T6053] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 35.069135][ T6053] [ 35.069138][ T6053] [ 35.138577][ T6053] Allocated by task 5943: [ 35.139827][ T6053] kasan_save_stack+0x33/0x60 [ 35.141218][ T6053] kasan_save_track+0x14/0x30 [ 35.142606][ T6053] __kasan_kmalloc+0xaa/0xb0 [ 35.143929][ T6053] binderfs_binder_device_create.isra.0+0x17a/0xad0 [ 35.145813][ T6053] binderfs_fill_super+0x848/0x1240 [ 35.147319][ T6053] get_tree_nodev+0xda/0x190 [ 35.148635][ T6053] vfs_get_tree+0x8b/0x340 [ 35.149926][ T6053] path_mount+0x6e1/0x1f00 [ 35.151209][ T6053] __ia32_sys_mount+0x28d/0x310 [ 35.152599][ T6053] __do_fast_syscall_32+0x73/0x120 [ 35.154072][ T6053] do_fast_syscall_32+0x32/0x80 [ 35.155447][ T6053] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 35.157222][ T6053] [ 35.157924][ T6053] Freed by task 6046: [ 35.159072][ T6053] kasan_save_stack+0x33/0x60 [ 35.160432][ T6053] kasan_save_track+0x14/0x30 [ 35.161785][ T6053] kasan_save_free_info+0x3b/0x60 [ 35.163257][ T6053] __kasan_slab_free+0x51/0x70 [ 35.164632][ T6053] kfree+0x2c4/0x4d0 [ 35.165774][ T6053] binderfs_evict_inode+0x1e0/0x250 [ 35.167248][ T6053] evict+0x409/0x960 [ 35.168367][ T6053] iput+0x52a/0x890 [ 35.169506][ T6053] dentry_unlink_inode+0x29c/0x480 [ 35.170977][ T6053] __dentry_kill+0x1d0/0x600 [ 35.172299][ T6053] shrink_dentry_list+0x140/0x5d0 [ 35.173772][ T6053] shrink_dcache_parent+0xe2/0x530 [ 35.175261][ T6053] shrink_dcache_for_umount+0xa1/0x3e0 [ 35.176816][ T6053] generic_shutdown_super+0x6c/0x390 [ 35.178344][ T6053] kill_litter_super+0x70/0xa0 [ 35.179754][ T6053] binderfs_kill_super+0x3b/0xa0 [ 35.181190][ T6053] deactivate_locked_super+0xbe/0x1a0 [ 35.182752][ T6053] deactivate_super+0xde/0x100 [ 35.184148][ T6053] cleanup_mnt+0x222/0x450 [ 35.185441][ T6053] task_work_run+0x14e/0x250 [ 35.186807][ T6053] do_exit+0xad8/0x2d70 [ 35.188011][ T6053] do_group_exit+0xd3/0x2a0 [ 35.189322][ T6053] get_signal+0x2576/0x2610 [ 35.190677][ T6053] arch_do_signal_or_restart+0x90/0x7e0 [ 35.192276][ T6053] irqentry_exit_to_user_mode+0x13f/0x280 [ 35.193926][ T6053] asm_exc_page_fault+0x26/0x30 [ 35.195314][ T6053] [ 35.196036][ T6053] The buggy address belongs to the object at ffff888047fe5800 [ 35.196036][ T6053] which belongs to the cache kmalloc-512 of size 512 [ 35.199957][ T6053] The buggy address is located 8 bytes inside of [ 35.199957][ T6053] freed 512-byte region [ffff888047fe5800, ffff888047fe5a00) [ 35.203770][ T6053] [ 35.204469][ T6053] The buggy address belongs to the physical page: [ 35.206285][ T6053] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x47fe4 [ 35.208749][ T6053] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 35.211131][ T6053] ksm flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 35.213364][ T6053] page_type: f5(slab) [ 35.214520][ T6053] raw: 04fff00000000040 ffff88801b042c80 ffffea00007b7500 0000000000000003 [ 35.216937][ T6053] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 35.219337][ T6053] head: 04fff00000000040 ffff88801b042c80 ffffea00007b7500 0000000000000003 [ 35.221799][ T6053] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 35.224218][ T6053] head: 04fff00000000002 ffffea00011ff901 ffffffffffffffff 0000000000000000 [ 35.226644][ T6053] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 35.229063][ T6053] page dumped because: kasan: bad access detected [ 35.230858][ T6053] page_owner tracks the page as allocated [ 35.232444][ T6053] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5944, tgid 5944 (syz-executor), ts 34550028461, free_ts 34504465357 [ 35.238149][ T6053] post_alloc_hook+0x181/0x1b0 [ 35.239529][ T6053] get_page_from_freelist+0xfce/0x2f80 [ 35.241080][ T6053] __alloc_frozen_pages_noprof+0x221/0x2470 [ 35.242804][ T6053] alloc_pages_mpol+0x1fc/0x540 [ 35.244256][ T6053] new_slab+0x23d/0x330 [ 35.245461][ T6053] ___slab_alloc+0xbfa/0x1600 [ 35.246851][ T6053] __slab_alloc.constprop.0+0x56/0xb0 [ 35.248384][ T6053] __kmalloc_noprof+0x2de/0x4f0 [ 35.249790][ T6053] tomoyo_init_log+0x1268/0x1f60 [ 35.251216][ T6053] tomoyo_supervisor+0x313/0x15a0 [ 35.252659][ T6053] tomoyo_path_number_perm+0x447/0x5b0 [ 35.254225][ T6053] tomoyo_path_mkdir+0x9c/0xe0 [ 35.255592][ T6053] security_path_mkdir+0x154/0x2f0 [ 35.257057][ T6053] do_mkdirat+0x176/0x3a0 [ 35.258334][ T6053] __ia32_sys_mkdirat+0x82/0xb0 [ 35.259766][ T6053] __do_fast_syscall_32+0x73/0x120 [ 35.261221][ T6053] page last free pid 5942 tgid 5942 stack trace: [ 35.263136][ T6053] free_frozen_pages+0x6db/0xfb0 [ 35.264542][ T6053] qlist_free_all+0x4e/0x120 [ 35.265879][ T6053] kasan_quarantine_reduce+0x195/0x1e0 [ 35.267435][ T6053] __kasan_slab_alloc+0x69/0x90 [ 35.268827][ T6053] __kmalloc_node_track_caller_noprof+0x1ce/0x520 [ 35.270674][ T6053] kstrdup+0x42/0xb0 [ 35.271829][ T6053] kstrdup_const+0x63/0x80 [ 35.273109][ T6053] kvasprintf_const+0x10f/0x1a0 [ 35.274496][ T6053] kobject_set_name_vargs+0x5a/0x140 [ 35.276001][ T6053] dev_set_name+0xc8/0x100 [ 35.277276][ T6053] netdev_register_kobject+0xc5/0x3a0 [ 35.278823][ T6053] register_netdevice+0x147b/0x1e50 [ 35.280340][ T6053] __ip_tunnel_create+0x37b/0x4c0 [ 35.281788][ T6053] ip_tunnel_init_net+0x1c2/0x6e0 [ 35.283248][ T6053] ops_init+0x1df/0x5f0 [ 35.284442][ T6053] setup_net+0x21f/0x860 [ 35.285626][ T6053] [ 35.286310][ T6053] Memory state around the buggy address: [ 35.287910][ T6053] ffff888047fe5700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 35.290152][ T6053] ffff888047fe5780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 35.292430][ T6053] >ffff888047fe5800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 35.294686][ T6053] ^ [ 35.295916][ T6053] ffff888047fe5880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 35.298201][ T6053] ffff888047fe5900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 35.300492][ T6053] ================================================================== [ 35.304851][ T6053] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 35.306934][ T6053] CPU: 3 UID: 0 PID: 6053 Comm: syz-executor Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 35.309873][ T6053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 35.312901][ T6053] Call Trace: [ 35.313882][ T6053] [ 35.314749][ T6053] dump_stack_lvl+0x3d/0x1f0 [ 35.316054][ T6053] panic+0x71d/0x800 [ 35.317187][ T6053] ? __pfx_panic+0x10/0x10 [ 35.318454][ T6053] ? irqentry_exit+0x3b/0x90 [ 35.319782][ T6053] ? lockdep_hardirqs_on+0x7c/0x110 [ 35.321258][ T6053] ? preempt_schedule_thunk+0x1a/0x30 [ 35.322782][ T6053] ? preempt_schedule_common+0x44/0xc0 [ 35.324323][ T6053] ? check_panic_on_warn+0x1f/0xb0 [ 35.325780][ T6053] check_panic_on_warn+0xab/0xb0 [ 35.327179][ T6053] end_report+0x117/0x180 [ 35.328421][ T6053] kasan_report+0xe9/0x110 [ 35.329715][ T6053] ? binder_add_device+0xa4/0xb0 [ 35.331121][ T6053] ? binder_add_device+0xa4/0xb0 [ 35.332538][ T6053] binder_add_device+0xa4/0xb0 [ 35.333926][ T6053] binderfs_binder_device_create.isra.0+0x8ec/0xad0 [ 35.335782][ T6053] binderfs_fill_super+0x848/0x1240 [ 35.337284][ T6053] ? __pfx_binderfs_fill_super+0x10/0x10 [ 35.338900][ T6053] ? shrinker_register+0x1a8/0x260 [ 35.340390][ T6053] ? sget_fc+0x488/0xb90 [ 35.341636][ T6053] ? apparmor_capable+0x114/0x1d0 [ 35.343075][ T6053] ? __pfx_set_anon_super_fc+0x10/0x10 [ 35.344645][ T6053] ? __pfx_binderfs_fill_super+0x10/0x10 [ 35.346262][ T6053] get_tree_nodev+0xda/0x190 [ 35.347613][ T6053] vfs_get_tree+0x8b/0x340 [ 35.348897][ T6053] path_mount+0x6e1/0x1f00 [ 35.350193][ T6053] ? kmem_cache_free+0x2e2/0x4d0 [ 35.351627][ T6053] ? __pfx_path_mount+0x10/0x10 [ 35.353019][ T6053] ? putname+0x13c/0x180 [ 35.354257][ T6053] __ia32_sys_mount+0x28d/0x310 [ 35.355653][ T6053] ? __pfx___ia32_sys_mount+0x10/0x10 [ 35.357194][ T6053] __do_fast_syscall_32+0x73/0x120 [ 35.358674][ T6053] do_fast_syscall_32+0x32/0x80 [ 35.360112][ T6053] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 35.361951][ T6053] RIP: 0023:0xf743e579 [ 35.363148][ T6053] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 35.368697][ T6053] RSP: 002b:00000000ff8b6880 EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 35.371176][ T6053] RAX: ffffffffffffffda RBX: 00000000f72c4aa1 RCX: 00000000f72b54b3 [ 35.373463][ T6053] RDX: 00000000f72c4aa1 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.375736][ T6053] RBP: 00000000ff8b69f8 R08: 0000000000000000 R09: 0000000000000000 [ 35.378050][ T6053] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 35.380319][ T6053] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 35.382655][ T6053] [ 35.384005][ T6053] Kernel Offset: disabled [ 35.385293][ T6053] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:24:59 Registers: info registers vcpu 0 CPU#0 RAX=0000000020004000 RBX=ffffffff8fedc000 RCX=1ffffffff1c042ac RDX=fffffbfff1fdb801 RSI=0000000000000008 RDI=0000000000000003 RBP=ffff888025060000 RSP=ffffc900036179a8 R8 =0000000000000000 R9 =fffffbfff1fdb800 R10=ffffffff8fedc007 R11=0000000000000001 R12=0000000000000000 R13=ffffed1004380488 R14=ffff888021c02440 R15=dffffc0000000000 RIP=ffffffff8194a76f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f728ef3c CR3=0000000049658000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fc810000 Opmask01=0000000000410101 Opmask02=00000000ffffffef Opmask03=0104100080810010 Opmask04=00000000ffffffdf Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737373 7373737373737373 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffff00000000ff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 791fc42cd3567c54 737326d98f16992f ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 737373435c021e73 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f646e756f732f00 682e6c6974752f64 65726168732f6372 732f2e2e2f2e2e00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616c730033706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000121 00736576616c732f 33706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003165737500 306d656d702f6b63 6f6c622f302e3065 63617073656d616e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000091 6b636f6c622d3036 000055afa69fb300 306d656d702f6b63 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3b2433273f397b27 697a787c69303b7e 69305f474f5b647c 69303b2433273f39 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85384485 RDI=ffffffff9aad8ee0 RBP=ffffffff9aad8ea0 RSP=ffffc90004127500 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3734303838387257 R12=0000000000000000 R13=0000000000000066 R14=ffffffff85384420 R15=0000000000000000 RIP=ffffffff853844af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f71c58d0 CR3=0000000022d90000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000020210058 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000200 RCX=0000000000000007 RDX=1ffff110056c7fac RSI=ffffc90000548e90 RDI=ffffffff81a0696e RBP=ffff88802b63fcc0 RSP=ffffc90000548e10 R8 =0000000000000000 R9 =fffffbfff20c0402 R10=ffffffff90602017 R11=0000000000000002 R12=0000000000000002 R13=ffff88802b63fd60 R14=ffffffff8e1c81c0 R15=0000000000000000 RIP=ffffffff81c08c11 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f86e40 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f741cff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=1ffff9200081cf69 RCX=0000000000000001 RDX=1ffff110044c15d8 RSI=ffffffff8b6cd500 RDI=ffff88802260aec0 RBP=0000000000000000 RSP=ffffc900040e7b38 R8 =0000000000000000 R9 =fffffbfff20c0402 R10=ffffffff90602017 R11=0000000000000001 R12=ffffffff8d94c408 R13=0000000000000141 R14=ffff88802260a440 R15=ffff88802260a440 RIP=ffffffff8187820e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7247fe0 CR3=0000000026194000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff000000ffff0000 ffffff0000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000