[ 52.898705][ T39] audit: type=1400 audit(1721207607.741:82): avc: denied { siginh } for pid=5190 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.215653][ T39] audit: type=1400 audit(1721207608.081:83): avc: denied { read } for pid=4679 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 53.334657][ T39] audit: type=1400 audit(1721207608.201:84): avc: denied { write } for pid=5193 comm="sftp-server" path="pipe:[5399]" dev="pipefs" ino=5399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 54.341626][ T39] audit: type=1400 audit(1721207609.211:85): avc: denied { append } for pid=4679 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.351023][ T39] audit: type=1400 audit(1721207609.211:86): avc: denied { open } for pid=4679 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.360920][ T39] audit: type=1400 audit(1721207609.211:87): avc: denied { getattr } for pid=4679 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:31128' (ED25519) to the list of known hosts. [ 61.297531][ T39] audit: type=1400 audit(1721207616.171:88): avc: denied { execute } for pid=5210 comm="sh" name="syz-executor1178494207" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 61.305805][ T39] audit: type=1400 audit(1721207616.171:89): avc: denied { execute_no_trans } for pid=5210 comm="sh" path="/syz-executor1178494207" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 61.314150][ T39] audit: type=1400 audit(1721207616.181:90): avc: denied { execmem } for pid=5210 comm="syz-executor117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.322092][ T39] audit: type=1400 audit(1721207616.181:91): avc: denied { mounton } for pid=5211 comm="syz-executor117" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 61.332011][ T39] audit: type=1400 audit(1721207616.181:92): avc: denied { mount } for pid=5211 comm="syz-executor117" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 61.334211][ T5213] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.341131][ T39] audit: type=1400 audit(1721207616.181:93): avc: denied { create } for pid=5211 comm="syz-executor117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.341174][ T39] audit: type=1400 audit(1721207616.181:94): avc: denied { read write } for pid=5211 comm="syz-executor117" name="vhci" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.341215][ T39] audit: type=1400 audit(1721207616.181:95): avc: denied { open } for pid=5211 comm="syz-executor117" path="/dev/vhci" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.341256][ T39] audit: type=1400 audit(1721207616.191:96): avc: denied { ioctl } for pid=5211 comm="syz-executor117" path="socket:[3648]" dev="sockfs" ino=3648 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.384058][ T5213] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.387799][ T5213] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.391921][ T5213] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.395698][ T5213] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.399129][ T5213] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.406916][ T39] audit: type=1400 audit(1721207616.281:97): avc: denied { mounton } for pid=5211 comm="syz-executor117" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 executing program executing program [ 61.494420][ T5213] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:585 [ 61.498293][ T5213] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 5213, name: kworker/u33:2 [ 61.503587][ T5213] preempt_count: 0, expected: 0 [ 61.505213][ T5213] RCU nest depth: 1, expected: 0 executing program [ 61.507371][ T5213] 4 locks held by kworker/u33:2/5213: [ 61.509767][ T5213] #0: ffff888026939148 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 61.514216][ T5213] #1: ffffc900034efd80 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 executing program [ 61.518045][ T5213] #2: ffff88802ef80078 (&hdev->lock){+.+.}-{3:3}, at: hci_le_create_big_complete_evt+0xde/0xb30 [ 61.522068][ T5213] #3: ffffffff8dbb15e0 (rcu_read_lock){....}-{1:2}, at: hci_le_create_big_complete_evt+0x100/0xb30 [ 61.526603][ T5213] CPU: 3 PID: 5213 Comm: kworker/u33:2 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 executing program [ 61.530708][ T5213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.535347][ T5213] Workqueue: hci0 hci_rx_work [ 61.537348][ T5213] Call Trace: [ 61.538770][ T5213] [ 61.540008][ T5213] dump_stack_lvl+0x16c/0x1f0 [ 61.542065][ T5213] __might_resched+0x3c0/0x5e0 [ 61.543941][ T5213] ? __pfx___might_resched+0x10/0x10 [ 61.546072][ T5213] ? __pfx___lock_acquire+0x10/0x10 [ 61.548290][ T5213] ? rcu_is_watching+0x12/0xc0 executing program [ 61.550352][ T5213] __mutex_lock+0xe2/0x9c0 [ 61.552452][ T5213] ? hci_le_create_big_complete_evt+0x387/0xb30 [ 61.555055][ T5213] ? __pfx___mutex_lock+0x10/0x10 [ 61.557201][ T5213] ? __pfx_lock_acquire+0x10/0x10 [ 61.559407][ T5213] ? find_held_lock+0x2d/0x110 executing program [ 61.561399][ T5213] ? hci_event_packet+0x438/0x1180 [ 61.563535][ T5213] ? __pfx_lock_release+0x10/0x10 [ 61.565650][ T5213] ? hci_le_create_big_complete_evt+0x387/0xb30 [ 61.568294][ T5213] hci_le_create_big_complete_evt+0x387/0xb30 [ 61.570884][ T5213] ? __mutex_unlock_slowpath+0x164/0x650 executing program [ 61.573363][ T5213] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 61.576246][ T5213] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 61.578744][ T5213] ? skb_pull_data+0x166/0x210 [ 61.580731][ T5213] hci_le_meta_evt+0x2e2/0x5d0 [ 61.582749][ T5213] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 executing program [ 61.585346][ T5213] hci_event_packet+0x666/0x1180 [ 61.587524][ T5213] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 61.589672][ T5213] ? __pfx_hci_event_packet+0x10/0x10 [ 61.591949][ T5213] ? mark_held_locks+0x9f/0xe0 [ 61.594064][ T5213] ? kcov_remote_start+0x3d1/0x6e0 executing program [ 61.596192][ T5213] ? lockdep_hardirqs_on+0x7c/0x110 [ 61.598578][ T5213] hci_rx_work+0x2c6/0x1610 [ 61.600380][ T5213] process_one_work+0x9c5/0x1b40 [ 61.602308][ T5213] ? __pfx_lock_acquire+0x10/0x10 [ 61.604557][ T5213] ? __pfx_process_one_work+0x10/0x10 [ 61.606536][ T5213] ? assign_work+0x1a0/0x250 [ 61.608346][ T5213] worker_thread+0x6c8/0xf20 executing program [ 61.609961][ T5213] ? __kthread_parkme+0x148/0x220 [ 61.611773][ T5213] ? __pfx_worker_thread+0x10/0x10 [ 61.613553][ T5213] kthread+0x2c1/0x3a0 [ 61.614955][ T5213] ? _raw_spin_unlock_irq+0x23/0x50 [ 61.616759][ T5213] ? __pfx_kthread+0x10/0x10 [ 61.618492][ T5213] ret_from_fork+0x45/0x80 executing program [ 61.620097][ T5213] ? __pfx_kthread+0x10/0x10 [ 61.621926][ T5213] ret_from_fork_asm+0x1a/0x30 [ 61.623508][ T5213] [ 61.624962][ T5213] [ 61.626034][ T5213] ============================= [ 61.628025][ T5213] [ BUG: Invalid wait context ] executing program [ 61.629633][ T5213] 6.10.0-syzkaller-04472-g51835949dda3 #0 Tainted: G W [ 61.632830][ T5213] ----------------------------- [ 61.634472][ T5213] kworker/u33:2/5213 is trying to lock: [ 61.636325][ T5213] ffffffff8f9b69a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_le_create_big_complete_evt+0x387/0xb30 [ 61.639745][ T5213] other info that might help us debug this: [ 61.641689][ T5213] context-{4:4} executing program [ 61.643167][ T5213] 4 locks held by kworker/u33:2/5213: [ 61.645545][ T5213] #0: ffff888026939148 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 61.649781][ T5213] #1: ffffc900034efd80 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 executing program [ 61.654044][ T5213] #2: ffff88802ef80078 (&hdev->lock){+.+.}-{3:3}, at: hci_le_create_big_complete_evt+0xde/0xb30 [ 61.658370][ T5213] #3: ffffffff8dbb15e0 (rcu_read_lock){....}-{1:2}, at: hci_le_create_big_complete_evt+0x100/0xb30 [ 61.661889][ T5213] stack backtrace: [ 61.663163][ T5213] CPU: 3 PID: 5213 Comm: kworker/u33:2 Tainted: G W 6.10.0-syzkaller-04472-g51835949dda3 #0 executing program [ 61.666950][ T5213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.670645][ T5213] Workqueue: hci0 hci_rx_work [ 61.672293][ T5213] Call Trace: [ 61.673693][ T5213] [ 61.674994][ T5213] dump_stack_lvl+0x116/0x1f0 executing program [ 61.677059][ T5213] __lock_acquire+0x811/0x3b30 [ 61.679062][ T5213] ? __pfx___lock_acquire+0x10/0x10 [ 61.681434][ T5213] ? irqentry_exit+0x3b/0x90 [ 61.683547][ T5213] ? lockdep_hardirqs_on+0x7c/0x110 [ 61.685874][ T5213] lock_acquire+0x1b1/0x560 executing program [ 61.687915][ T5213] ? hci_le_create_big_complete_evt+0x387/0xb30 [ 61.690797][ T5213] ? __pfx_lock_acquire+0x10/0x10 [ 61.692914][ T5213] ? dump_stack_lvl+0x1a3/0x1f0 [ 61.694868][ T5213] ? add_taint+0x5f/0xd0 [ 61.696543][ T5213] ? __might_resched+0x3cc/0x5e0 executing program [ 61.698645][ T5213] ? __pfx___might_resched+0x10/0x10 [ 61.701128][ T5213] ? __pfx___lock_acquire+0x10/0x10 [ 61.703280][ T5213] __mutex_lock+0x175/0x9c0 [ 61.705184][ T5213] ? hci_le_create_big_complete_evt+0x387/0xb30 [ 61.707752][ T5213] ? hci_le_create_big_complete_evt+0x387/0xb30 [ 61.710353][ T5213] ? __pfx___mutex_lock+0x10/0x10 executing program [ 61.712445][ T5213] ? __pfx_lock_acquire+0x10/0x10 [ 61.714722][ T5213] ? find_held_lock+0x2d/0x110 [ 61.716765][ T5213] ? hci_event_packet+0x438/0x1180 [ 61.718947][ T5213] ? __pfx_lock_release+0x10/0x10 [ 61.721120][ T5213] ? hci_le_create_big_complete_evt+0x387/0xb30 executing program [ 61.723828][ T5213] hci_le_create_big_complete_evt+0x387/0xb30 [ 61.726421][ T5213] ? __mutex_unlock_slowpath+0x164/0x650 [ 61.728465][ T5213] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 61.731006][ T5213] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 61.733126][ T5213] ? skb_pull_data+0x166/0x210 executing program [ 61.734782][ T5213] hci_le_meta_evt+0x2e2/0x5d0 [ 61.736505][ T5213] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 61.738742][ T5213] hci_event_packet+0x666/0x1180 [ 61.740755][ T5213] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 61.743000][ T5213] ? __pfx_hci_event_packet+0x10/0x10 [ 61.745268][ T5213] ? mark_held_locks+0x9f/0xe0 executing program [ 61.747321][ T5213] ? kcov_remote_start+0x3d1/0x6e0 [ 61.749602][ T5213] ? lockdep_hardirqs_on+0x7c/0x110 [ 61.751749][ T5213] hci_rx_work+0x2c6/0x1610 [ 61.753646][ T5213] process_one_work+0x9c5/0x1b40 [ 61.755684][ T5213] ? __pfx_lock_acquire+0x10/0x10 executing program [ 61.757765][ T5213] ? __pfx_process_one_work+0x10/0x10 [ 61.759965][ T5213] ? assign_work+0x1a0/0x250 [ 61.761847][ T5213] worker_thread+0x6c8/0xf20 [ 61.763789][ T5213] ? __kthread_parkme+0x148/0x220 [ 61.765871][ T5213] ? __pfx_worker_thread+0x10/0x10 [ 61.767984][ T5213] kthread+0x2c1/0x3a0 executing program [ 61.769697][ T5213] ? _raw_spin_unlock_irq+0x23/0x50 [ 61.771917][ T5213] ? __pfx_kthread+0x10/0x10 [ 61.773843][ T5213] ret_from_fork+0x45/0x80 [ 61.775622][ T5213] ? __pfx_kthread+0x10/0x10 [ 61.777555][ T5213] ret_from_fork_asm+0x1a/0x30 [ 61.779582][ T5213] executing program [ 61.781600][ T5213] ================================================================== [ 61.784769][ T5213] BUG: KASAN: slab-use-after-free in hci_le_create_big_complete_evt+0xa62/0xb30 [ 61.788472][ T5213] Read of size 8 at addr ffff88802ee4c000 by task kworker/u33:2/5213 [ 61.791780][ T5213] executing program [ 61.792790][ T5213] CPU: 3 PID: 5213 Comm: kworker/u33:2 Tainted: G W 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 61.798054][ T5213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.802506][ T5213] Workqueue: hci0 hci_rx_work executing program [ 61.804404][ T5213] Call Trace: [ 61.805944][ T5213] [ 61.807119][ T5213] dump_stack_lvl+0x116/0x1f0 [ 61.809127][ T5213] print_report+0xc3/0x620 [ 61.810947][ T5213] ? __virt_addr_valid+0x5e/0x590 [ 61.813094][ T5213] ? __phys_addr+0xc6/0x150 executing program [ 61.815005][ T5213] kasan_report+0xd9/0x110 [ 61.817046][ T5213] ? hci_le_create_big_complete_evt+0xa62/0xb30 [ 61.819747][ T5213] ? hci_le_create_big_complete_evt+0xa62/0xb30 [ 61.822093][ T5213] hci_le_create_big_complete_evt+0xa62/0xb30 [ 61.824383][ T5213] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 executing program [ 61.826910][ T5213] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 61.829172][ T5213] ? skb_pull_data+0x166/0x210 [ 61.831193][ T5213] hci_le_meta_evt+0x2e2/0x5d0 [ 61.833208][ T5213] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 61.835695][ T5213] hci_event_packet+0x666/0x1180 executing program [ 61.837820][ T5213] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 61.839776][ T5213] ? __pfx_hci_event_packet+0x10/0x10 [ 61.841845][ T5213] ? mark_held_locks+0x9f/0xe0 [ 61.843490][ T5213] ? kcov_remote_start+0x3d1/0x6e0 [ 61.845309][ T5213] ? lockdep_hardirqs_on+0x7c/0x110 [ 61.847389][ T5213] hci_rx_work+0x2c6/0x1610 [ 61.849156][ T5213] process_one_work+0x9c5/0x1b40 executing program [ 61.851250][ T5213] ? __pfx_lock_acquire+0x10/0x10 [ 61.853455][ T5213] ? __pfx_process_one_work+0x10/0x10 [ 61.855631][ T5213] ? assign_work+0x1a0/0x250 [ 61.857246][ T5213] worker_thread+0x6c8/0xf20 [ 61.858808][ T5213] ? __kthread_parkme+0x148/0x220 [ 61.860490][ T5213] ? __pfx_worker_thread+0x10/0x10 executing program [ 61.862366][ T5213] kthread+0x2c1/0x3a0 [ 61.864312][ T5213] ? _raw_spin_unlock_irq+0x23/0x50 [ 61.866595][ T5213] ? __pfx_kthread+0x10/0x10 [ 61.868619][ T5213] ret_from_fork+0x45/0x80 [ 61.870608][ T5213] ? __pfx_kthread+0x10/0x10 [ 61.872677][ T5213] ret_from_fork_asm+0x1a/0x30 executing program [ 61.874934][ T5213] [ 61.876329][ T5213] [ 61.877418][ T5213] Allocated by task 5213: [ 61.879349][ T5213] kasan_save_stack+0x33/0x60 [ 61.881461][ T5213] kasan_save_track+0x14/0x30 [ 61.883502][ T5213] __kasan_kmalloc+0xaa/0xb0 executing program [ 61.885543][ T5213] __hci_conn_add+0x131/0x1a50 [ 61.887807][ T5213] hci_conn_add+0x56/0x70 [ 61.889751][ T5213] hci_le_big_sync_established_evt+0x73f/0xad0 [ 61.892462][ T5213] hci_le_meta_evt+0x2e2/0x5d0 [ 61.894579][ T5213] hci_event_packet+0x666/0x1180 executing program [ 61.896777][ T5213] hci_rx_work+0x2c6/0x1610 [ 61.898853][ T5213] process_one_work+0x9c5/0x1b40 [ 61.900990][ T5213] worker_thread+0x6c8/0xf20 [ 61.903044][ T5213] kthread+0x2c1/0x3a0 [ 61.904829][ T5213] ret_from_fork+0x45/0x80 [ 61.906784][ T5213] ret_from_fork_asm+0x1a/0x30 executing program [ 61.908914][ T5213] [ 61.910094][ T5213] Freed by task 5213: [ 61.911823][ T5213] kasan_save_stack+0x33/0x60 [ 61.913592][ T5213] kasan_save_track+0x14/0x30 [ 61.915240][ T5213] kasan_save_free_info+0x3b/0x60 [ 61.917429][ T5213] poison_slab_object+0xf7/0x160 executing program [ 61.919582][ T5213] __kasan_slab_free+0x32/0x50 [ 61.921833][ T5213] kfree+0x12a/0x3b0 [ 61.923535][ T5213] device_release+0xa1/0x240 [ 61.925608][ T5213] kobject_put+0x1fa/0x5b0 [ 61.927610][ T5213] put_device+0x1f/0x30 [ 61.929458][ T5213] hci_conn_del_sysfs+0x151/0x180 executing program [ 61.931661][ T5213] hci_conn_del+0x54e/0xdb0 [ 61.933819][ T5213] hci_le_create_big_complete_evt+0x4ba/0xb30 [ 61.936499][ T5213] hci_le_meta_evt+0x2e2/0x5d0 [ 61.938681][ T5213] hci_event_packet+0x666/0x1180 [ 61.940925][ T5213] hci_rx_work+0x2c6/0x1610 executing program [ 61.942957][ T5213] process_one_work+0x9c5/0x1b40 [ 61.945245][ T5213] worker_thread+0x6c8/0xf20 [ 61.947312][ T5213] kthread+0x2c1/0x3a0 [ 61.949127][ T5213] ret_from_fork+0x45/0x80 [ 61.951128][ T5213] ret_from_fork_asm+0x1a/0x30 [ 61.953274][ T5213] executing program [ 61.954327][ T5213] The buggy address belongs to the object at ffff88802ee4c000 [ 61.954327][ T5213] which belongs to the cache kmalloc-8k of size 8192 [ 61.960531][ T5213] The buggy address is located 0 bytes inside of [ 61.960531][ T5213] freed 8192-byte region [ffff88802ee4c000, ffff88802ee4e000) [ 61.966376][ T5213] executing program [ 61.967437][ T5213] The buggy address belongs to the physical page: [ 61.970299][ T5213] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ee48 [ 61.974129][ T5213] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 executing program [ 61.977801][ T5213] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 61.981152][ T5213] page_type: 0xffffefff(slab) [ 61.983274][ T5213] raw: 00fff00000000040 ffff888015443180 ffffea00009d9400 0000000000000002 [ 61.987001][ T5213] raw: 0000000000000000 0000000080020002 00000001ffffefff 0000000000000000 executing program [ 61.990683][ T5213] head: 00fff00000000040 ffff888015443180 ffffea00009d9400 0000000000000002 [ 61.994508][ T5213] head: 0000000000000000 0000000080020002 00000001ffffefff 0000000000000000 [ 61.998305][ T5213] head: 00fff00000000003 ffffea0000bb9201 ffffffffffffffff 0000000000000000 executing program [ 62.002142][ T5213] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 62.006091][ T5213] page dumped because: kasan: bad access detected [ 62.008813][ T5213] page_owner tracks the page as allocated executing program [ 62.011273][ T5213] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4917, tgid 4917 (dhcpcd), ts 39554246945, free_ts 37645583457 [ 62.020114][ T5213] post_alloc_hook+0x2d1/0x350 [ 62.022165][ T5213] get_page_from_freelist+0x1353/0x2e50 executing program [ 62.024545][ T5213] __alloc_pages_noprof+0x22b/0x2460 [ 62.026918][ T5213] alloc_slab_page+0x56/0x110 [ 62.028936][ T5213] new_slab+0x84/0x260 [ 62.030681][ T5213] ___slab_alloc+0xdac/0x1870 [ 62.032700][ T5213] __slab_alloc.constprop.0+0x56/0xb0 executing program [ 62.034995][ T5213] kmalloc_node_track_caller_noprof+0x355/0x430 [ 62.037739][ T5213] kmalloc_reserve+0xef/0x2c0 [ 62.039779][ T5213] __alloc_skb+0x164/0x380 [ 62.041663][ T5213] netlink_dump+0x2c1/0xcc0 [ 62.043597][ T5213] netlink_recvmsg+0xa0d/0xf30 [ 62.045677][ T5213] sock_recvmsg+0x1f6/0x250 executing program [ 62.047637][ T5213] ____sys_recvmsg+0x21f/0x6b0 [ 62.049806][ T5213] ___sys_recvmsg+0x115/0x1a0 [ 62.051822][ T5213] __sys_recvmsg+0x114/0x1e0 [ 62.053827][ T5213] page last free pid 4697 tgid 4697 stack trace: [ 62.056536][ T5213] free_unref_page+0x64a/0xe40 [ 62.058656][ T5213] __put_partials+0x14c/0x170 executing program [ 62.060678][ T5213] qlist_free_all+0x4e/0x140 [ 62.062691][ T5213] kasan_quarantine_reduce+0x192/0x1e0 [ 62.065035][ T5213] __kasan_slab_alloc+0x69/0x90 [ 62.067097][ T5213] kmem_cache_alloc_noprof+0x121/0x2f0 [ 62.069456][ T5213] vm_area_dup+0x53/0x2f0 executing program [ 62.071347][ T5213] copy_process+0x7bd5/0x8de0 [ 62.073492][ T5213] kernel_clone+0xfd/0x980 [ 62.075375][ T5213] __do_sys_clone+0xba/0x100 [ 62.077325][ T5213] do_syscall_64+0xcd/0x250 [ 62.079258][ T5213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.081737][ T5213] executing program [ 62.082745][ T5213] Memory state around the buggy address: [ 62.085186][ T5213] ffff88802ee4bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 62.088481][ T5213] ffff88802ee4bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc executing program [ 62.091759][ T5213] >ffff88802ee4c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.095170][ T5213] ^ [ 62.096854][ T5213] ffff88802ee4c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb executing program [ 62.100154][ T5213] ffff88802ee4c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.103357][ T5213] ================================================================== [ 62.106504][ T5213] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 62.109240][ T5213] CPU: 3 PID: 5213 Comm: kworker/u33:2 Tainted: G W 6.10.0-syzkaller-04472-g51835949dda3 #0 executing program [ 62.113861][ T5213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.118701][ T5213] Workqueue: hci0 hci_rx_work [ 62.120709][ T5213] Call Trace: [ 62.122170][ T5213] [ 62.123453][ T5213] dump_stack_lvl+0x3d/0x1f0 [ 62.125460][ T5213] panic+0x6f5/0x7a0 [ 62.127147][ T5213] ? __pfx_panic+0x10/0x10 executing program [ 62.129159][ T5213] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 62.131786][ T5213] ? preempt_schedule_thunk+0x1a/0x30 [ 62.134063][ T5213] ? preempt_schedule_common+0x44/0xc0 [ 62.136422][ T5213] ? check_panic_on_warn+0x1f/0xb0 executing program [ 62.138640][ T5213] check_panic_on_warn+0xab/0xb0 [ 62.140853][ T5213] end_report+0x117/0x180 [ 62.142764][ T5213] kasan_report+0xe9/0x110 [ 62.144734][ T5213] ? hci_le_create_big_complete_evt+0xa62/0xb30 [ 62.147456][ T5213] ? hci_le_create_big_complete_evt+0xa62/0xb30 executing program [ 62.150166][ T5213] hci_le_create_big_complete_evt+0xa62/0xb30 [ 62.152883][ T5213] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 62.155658][ T5213] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 62.158255][ T5213] ? skb_pull_data+0x166/0x210 [ 62.160276][ T5213] hci_le_meta_evt+0x2e2/0x5d0 executing program [ 62.162114][ T5213] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 62.164450][ T5213] hci_event_packet+0x666/0x1180 [ 62.166114][ T5213] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 62.167931][ T5213] ? __pfx_hci_event_packet+0x10/0x10 [ 62.169759][ T5213] ? mark_held_locks+0x9f/0xe0 [ 62.171385][ T5213] ? kcov_remote_start+0x3d1/0x6e0 [ 62.173377][ T5213] ? lockdep_hardirqs_on+0x7c/0x110 executing program [ 62.175707][ T5213] hci_rx_work+0x2c6/0x1610 [ 62.177610][ T5213] process_one_work+0x9c5/0x1b40 [ 62.179651][ T5213] ? __pfx_lock_acquire+0x10/0x10 [ 62.181806][ T5213] ? __pfx_process_one_work+0x10/0x10 [ 62.184058][ T5213] ? assign_work+0x1a0/0x250 executing program [ 62.185988][ T5213] worker_thread+0x6c8/0xf20 [ 62.187985][ T5213] ? __kthread_parkme+0x148/0x220 [ 62.190014][ T5213] ? __pfx_worker_thread+0x10/0x10 [ 62.191666][ T5213] kthread+0x2c1/0x3a0 [ 62.193049][ T5213] ? _raw_spin_unlock_irq+0x23/0x50 [ 62.194766][ T5213] ? __pfx_kthread+0x10/0x10 [ 62.196278][ T5213] ret_from_fork+0x45/0x80 [ 62.197747][ T5213] ? __pfx_kthread+0x10/0x10 executing program [ 62.199360][ T5213] ret_from_fork_asm+0x1a/0x30 [ 62.201348][ T5213] [ 62.203094][ T5213] Kernel Offset: disabled [ 62.204638][ T5213] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:13:36 Registers: info registers vcpu 0 CPU#0 RAX=000000000008ac41 RBX=0000000000000000 RCX=ffffffff8aebe9a9 RDX=0000000000000000 RSI=ffffffff8b2cb4c0 RDI=ffffffff8b904ee0 RBP=fffffbfff1b12af8 RSP=ffffffff8d807e20 R8 =0000000000000001 R9 =ffffed100d606fe1 R10=ffff88806b037f0b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8d8957c0 R14=ffffffff8fe540d8 R15=0000000000000000 RIP=ffffffff8aebfd9f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055556826c6c8 CR3=000000002bf2e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffe000c0 Opmask01=0000000000000001 Opmask02=000000000000fbff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffab3ef860 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556826d3b8 00007fcbbafcffe7 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556826d000 00007fcbbaff8600 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e0078616d2d74 6e756f6d2f73662f 7379732f636f7270 2f00303030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0b005d44480851 4b504a480a56430a 565c560a464a5755 0a00151515151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000514c1 RBX=0000000000000001 RCX=ffffffff8aebe9a9 RDX=0000000000000000 RSI=ffffffff8b2cb4c0 RDI=ffffffff8b904ee0 RBP=ffffed1002fd6910 RSP=ffffc90000187e08 R8 =0000000000000001 R9 =ffffed100d626fe1 R10=ffff88806b137f0b R11=0000000000000000 R12=0000000000000001 R13=ffff888017eb4880 R14=ffffffff8fe540d8 R15=0000000000000000 RIP=ffffffff8aebfd9f RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcbbafe1770 CR3=000000002bf2e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffe000c0 Opmask01=0000000000000001 Opmask02=000000000000fbff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffab3ef860 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556826d3b8 00007fcbbafcffe7 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556826d000 00007fcbbaff8600 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e0078616d2d74 6e756f6d2f73662f 7379732f636f7270 2f00303030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0b005d44480851 4b504a480a56430a 565c560a464a5755 0a00151515151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000260b5 RBX=0000000000000002 RCX=ffffffff8aebe9a9 RDX=0000000000000000 RSI=ffffffff8b2cb4c0 RDI=ffffffff8b904ee0 RBP=ffffed1002fd9000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d646fe1 R10=ffff88806b237f0b R11=0000000000000000 R12=0000000000000002 R13=ffff888017ec8000 R14=ffffffff8fe540d8 R15=0000000000000000 RIP=ffffffff8aebfd9f RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcbbafca5c8 CR3=000000001201a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=000000000301000f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=a8b26faeee440aa0 438fec6346191468 a8b26faeee440aa0 438fec6346191468 a8b26faeee440aa0 438fec6346191468 a8b26faeee440aa0 438fec6346191468 ZMM18=05b54b6896a762d3 d9a22de6602ff140 05b54b6896a762d3 d9a22de6602ff140 05b54b6896a762d3 d9a22de6602ff140 05b54b6896a762d3 d9a22de6602ff140 ZMM19=0b00000000000000 0000000000000004 0b00000000000000 0000000000000003 0b00000000000000 0000000000000002 0b00000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=438fec63438fec63 438fec63438fec63 438fec63438fec63 438fec63438fec63 438fec63438fec63 438fec63438fec63 438fec63438fec63 438fec63438fec63 ZMM22=ee440aa0ee440aa0 ee440aa0ee440aa0 ee440aa0ee440aa0 ee440aa0ee440aa0 ee440aa0ee440aa0 ee440aa0ee440aa0 ee440aa0ee440aa0 ee440aa0ee440aa0 ZMM23=a8b26faea8b26fae a8b26faea8b26fae a8b26faea8b26fae a8b26faea8b26fae a8b26faea8b26fae a8b26faea8b26fae a8b26faea8b26fae a8b26faea8b26fae ZMM24=602ff140602ff140 602ff140602ff140 602ff140602ff140 602ff140602ff140 602ff140602ff140 602ff140602ff140 602ff140602ff140 602ff140602ff140 ZMM25=d9a22de6d9a22de6 d9a22de6d9a22de6 d9a22de6d9a22de6 d9a22de6d9a22de6 d9a22de6d9a22de6 d9a22de6d9a22de6 d9a22de6d9a22de6 d9a22de6d9a22de6 ZMM26=96a762d396a762d3 96a762d396a762d3 96a762d396a762d3 96a762d396a762d3 96a762d396a762d3 96a762d396a762d3 96a762d396a762d3 96a762d396a762d3 ZMM27=05b54b6805b54b68 05b54b6805b54b68 05b54b6805b54b68 05b54b6805b54b68 05b54b6805b54b68 05b54b6805b54b68 05b54b6805b54b68 05b54b6805b54b68 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0600000006000000 0600000006000000 0600000006000000 0600000006000000 0600000006000000 0600000006000000 0600000006000000 0600000006000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fe3125 RDI=ffffffff94dff3e0 RBP=ffffffff94dff3a0 RSP=ffffc900034ef418 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000007 R12=0000000000000000 R13=0000000000000020 R14=ffffffff84fe30c0 R15=0000000000000000 RIP=ffffffff84fe314f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055fd9a271000 CR3=000000001201a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=000000000301000f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=a8b26faeee440aa0 438fec6346191468 a8b26faeee440aa0 438fec6346191468 a8b26faeee440aa0 438fec6346191468 a8b26faeee440aa0 438fec6346191468 ZMM18=05b54b6896a762d3 d9a22de6602ff140 05b54b6896a762d3 d9a22de6602ff140 05b54b6896a762d3 d9a22de6602ff140 05b54b6896a762d3 d9a22de6602ff140 ZMM19=0a00000000000000 0000000000000004 0a00000000000000 0000000000000003 0a00000000000000 0000000000000002 0a00000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=438fec63438fec63 438fec63438fec63 438fec63438fec63 438fec63438fec63 438fec63438fec63 438fec63438fec63 438fec63438fec63 438fec63438fec63 ZMM22=ee440aa0ee440aa0 ee440aa0ee440aa0 ee440aa0ee440aa0 ee440aa0ee440aa0 ee440aa0ee440aa0 ee440aa0ee440aa0 ee440aa0ee440aa0 ee440aa0ee440aa0 ZMM23=a8b26faea8b26fae a8b26faea8b26fae a8b26faea8b26fae a8b26faea8b26fae a8b26faea8b26fae a8b26faea8b26fae a8b26faea8b26fae a8b26faea8b26fae ZMM24=602ff140602ff140 602ff140602ff140 602ff140602ff140 602ff140602ff140 602ff140602ff140 602ff140602ff140 602ff140602ff140 602ff140602ff140 ZMM25=d9a22de6d9a22de6 d9a22de6d9a22de6 d9a22de6d9a22de6 d9a22de6d9a22de6 d9a22de6d9a22de6 d9a22de6d9a22de6 d9a22de6d9a22de6 d9a22de6d9a22de6 ZMM26=96a762d396a762d3 96a762d396a762d3 96a762d396a762d3 96a762d396a762d3 96a762d396a762d3 96a762d396a762d3 96a762d396a762d3 96a762d396a762d3 ZMM27=05b54b6805b54b68 05b54b6805b54b68 05b54b6805b54b68 05b54b6805b54b68 05b54b6805b54b68 05b54b6805b54b68 05b54b6805b54b68 05b54b6805b54b68 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0600000006000000 0600000006000000 0600000006000000 0600000006000000 0600000006000000 0600000006000000 0600000006000000 0600000006000000