[ 38.018355][ T40] audit: type=1400 audit(1742861528.402:81): avc: denied { rlimitinh } for pid=5913 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.027416][ T40] audit: type=1400 audit(1742861528.402:82): avc: denied { siginh } for pid=5913 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.745283][ T40] audit: type=1400 audit(1742861529.142:83): avc: denied { read } for pid=5333 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.751060][ T40] audit: type=1400 audit(1742861529.142:84): avc: denied { append } for pid=5333 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.757157][ T40] audit: type=1400 audit(1742861529.142:85): avc: denied { open } for pid=5333 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.763005][ T40] audit: type=1400 audit(1742861529.142:86): avc: denied { getattr } for pid=5333 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:15206' (ED25519) to the list of known hosts. [ 44.171348][ T40] audit: type=1400 audit(1742861534.572:87): avc: denied { execute } for pid=5931 comm="sh" name="syz-executor2192193669" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 44.178970][ T40] audit: type=1400 audit(1742861534.572:88): avc: denied { execute_no_trans } for pid=5931 comm="sh" path="/syz-executor2192193669" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 44.186263][ T40] audit: type=1400 audit(1742861534.582:89): avc: denied { execmem } for pid=5931 comm="syz-executor219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.192636][ T40] audit: type=1400 audit(1742861534.582:90): avc: denied { setattr } for pid=5931 comm="syz-executor219" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.200097][ T40] audit: type=1400 audit(1742861534.582:91): avc: denied { create } for pid=5931 comm="syz-executor219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.206214][ T40] audit: type=1400 audit(1742861534.582:92): avc: denied { write } for pid=5931 comm="syz-executor219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.211843][ T40] audit: type=1400 audit(1742861534.582:93): avc: denied { read } for pid=5931 comm="syz-executor219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.217941][ T40] audit: type=1400 audit(1742861534.602:94): avc: denied { read } for pid=5651 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 44.222679][ T5932] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.226772][ T40] audit: type=1400 audit(1742861534.632:95): avc: denied { relabelto } for pid=5932 comm="mkswap" name="swap-file" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 44.235318][ T40] audit: type=1400 audit(1742861534.632:96): avc: denied { write } for pid=5932 comm="mkswap" path="/swap-file" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 44.828157][ T5931] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.850300][ T5938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.853382][ T5938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.856690][ T5938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.861123][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.864660][ T5938] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.868517][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.934494][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 45.011837][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.014870][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.017103][ T5935] bridge_slave_0: entered allmulticast mode [ 45.019632][ T5935] bridge_slave_0: entered promiscuous mode [ 45.023014][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.024882][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.026908][ T5935] bridge_slave_1: entered allmulticast mode [ 45.028921][ T5935] bridge_slave_1: entered promiscuous mode [ 45.049916][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.053959][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.075633][ T5935] team0: Port device team_slave_0 added [ 45.079129][ T5935] team0: Port device team_slave_1 added [ 45.100291][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.102883][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.112342][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.118054][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.119911][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.128937][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.163642][ T5935] hsr_slave_0: entered promiscuous mode [ 45.166502][ T5935] hsr_slave_1: entered promiscuous mode [ 45.253769][ T5935] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.258085][ T5935] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.261904][ T5935] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.265061][ T5935] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.278871][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.281375][ T5935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.284271][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.286763][ T5935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.314429][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.323517][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.326706][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.334307][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.342217][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.344101][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.349710][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.351639][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.379797][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.398073][ T5935] veth0_vlan: entered promiscuous mode [ 45.402585][ T5935] veth1_vlan: entered promiscuous mode [ 45.414257][ T5935] veth0_macvtap: entered promiscuous mode [ 45.417276][ T5935] veth1_macvtap: entered promiscuous mode [ 45.424535][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.431298][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.435149][ T5935] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.437770][ T5935] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.440094][ T5935] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.442482][ T5935] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.475131][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.479575][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.492328][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.494437][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 45.531355][ T66] BUG: sleeping function called from invalid context at net/core/sock.c:3664 [ 45.533900][ T66] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 66, name: kworker/u33:0 [ 45.538044][ T66] preempt_count: 1, expected: 0 [ 45.539722][ T66] RCU nest depth: 0, expected: 0 [ 45.541181][ T66] 6 locks held by kworker/u33:0/66: [ 45.542601][ T66] #0: ffff888031cd4948 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 45.545549][ T66] #1: ffffc90000d3fd18 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 executing program [ 45.548619][ T66] #2: ffff88802499c078 (&hdev->lock){+.+.}-{4:4}, at: hci_sync_conn_complete_evt+0x118/0x9f0 [ 45.552367][ T66] #3: ffffffff90165948 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_sync_conn_complete_evt+0x32d/0x9f0 [ 45.556558][ T66] #4: ffff88802b1d3c20 (&conn->lock#3){+.+.}-{3:3}, at: sco_connect_cfm+0x2d6/0xd80 [ 45.559510][ T66] #5: ffff888024723258 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_connect_cfm+0x3f3/0xd80 [ 45.562650][ T66] Preemption disabled at: executing program [ 45.562657][ T66] [<0000000000000000>] 0x0 [ 45.565448][ T66] CPU: 1 UID: 0 PID: 66 Comm: kworker/u33:0 Not tainted 6.14.0-syzkaller #0 [ 45.565460][ T66] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.565467][ T66] Workqueue: hci0 hci_rx_work [ 45.565479][ T66] Call Trace: [ 45.565482][ T66] [ 45.565486][ T66] dump_stack_lvl+0x16c/0x1f0 [ 45.565506][ T66] __might_resched+0x3c0/0x5e0 [ 45.565523][ T66] ? __pfx_lock_release+0x10/0x10 [ 45.565538][ T66] ? __pfx___might_resched+0x10/0x10 [ 45.565554][ T66] ? lock_acquire+0x2f/0xb0 [ 45.565567][ T66] ? sco_connect_cfm+0x3f3/0xd80 [ 45.565584][ T66] lock_sock_nested+0x4b/0xf0 [ 45.565599][ T66] ? sco_connect_cfm+0x3f3/0xd80 [ 45.565615][ T66] sco_connect_cfm+0x3f3/0xd80 [ 45.565632][ T66] ? __pfx_sco_connect_cfm+0x10/0x10 [ 45.565651][ T66] ? __pfx_sco_connect_cfm+0x10/0x10 [ 45.565666][ T66] hci_sync_conn_complete_evt+0x398/0x9f0 [ 45.565682][ T66] hci_event_packet+0x9eb/0x1180 [ 45.565698][ T66] ? __pfx_hci_sync_conn_complete_evt+0x10/0x10 [ 45.565713][ T66] ? __pfx_hci_event_packet+0x10/0x10 [ 45.565729][ T66] ? mark_held_locks+0x9f/0xe0 [ 45.565762][ T66] ? kcov_remote_start+0x3cf/0x6e0 [ 45.565779][ T66] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.565796][ T66] hci_rx_work+0x2c5/0x16b0 [ 45.565806][ T66] ? process_one_work+0x921/0x1ba0 [ 45.565822][ T66] process_one_work+0x9c5/0x1ba0 [ 45.565840][ T66] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 45.565855][ T66] ? __pfx_process_one_work+0x10/0x10 [ 45.565872][ T66] ? assign_work+0x1a0/0x250 [ 45.565887][ T66] worker_thread+0x6c8/0xf00 [ 45.565905][ T66] ? __pfx_worker_thread+0x10/0x10 [ 45.565919][ T66] kthread+0x3af/0x750 [ 45.565932][ T66] ? __pfx_kthread+0x10/0x10 [ 45.565944][ T66] ? lock_acquire+0x2f/0xb0 [ 45.565960][ T66] ? __pfx_kthread+0x10/0x10 [ 45.565973][ T66] ret_from_fork+0x45/0x80 [ 45.565986][ T66] ? __pfx_kthread+0x10/0x10 [ 45.565998][ T66] ret_from_fork_asm+0x1a/0x30 [ 45.566016][ T66] [ 45.566020][ T66] ================================================================== [ 45.626045][ T66] BUG: KASAN: slab-use-after-free in __lock_acquire+0x2d90/0x3c40 [ 45.628843][ T66] Read of size 8 at addr ffff8880247231d8 by task kworker/u33:0/66 [ 45.631027][ T66] [ 45.631682][ T66] CPU: 1 UID: 0 PID: 66 Comm: kworker/u33:0 Tainted: G W 6.14.0-syzkaller #0 [ 45.631696][ T66] Tainted: [W]=WARN [ 45.631699][ T66] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.631707][ T66] Workqueue: hci0 hci_rx_work [ 45.631721][ T66] Call Trace: [ 45.631726][ T66] [ 45.631731][ T66] dump_stack_lvl+0x116/0x1f0 [ 45.631747][ T66] print_report+0xc3/0x670 [ 45.631759][ T66] ? __virt_addr_valid+0x5e/0x590 [ 45.631770][ T66] ? __phys_addr+0xc6/0x150 [ 45.631781][ T66] kasan_report+0xd9/0x110 [ 45.631791][ T66] ? __lock_acquire+0x2d90/0x3c40 [ 45.631806][ T66] ? __lock_acquire+0x2d90/0x3c40 [ 45.631821][ T66] __lock_acquire+0x2d90/0x3c40 [ 45.631836][ T66] ? lock_acquire+0x2f/0xb0 [ 45.631849][ T66] ? is_bpf_text_address+0x30/0x1a0 [ 45.631865][ T66] ? __pfx_mark_lock+0x10/0x10 [ 45.631880][ T66] ? __pfx___lock_acquire+0x10/0x10 [ 45.631894][ T66] ? show_trace_log_lvl+0x29d/0x3d0 [ 45.631910][ T66] lock_acquire.part.0+0x11b/0x380 [ 45.631924][ T66] ? lock_sock_nested+0x5f/0xf0 [ 45.631941][ T66] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 45.631955][ T66] ? rcu_is_watching+0x12/0xc0 [ 45.631966][ T66] ? trace_lock_acquire+0x14e/0x1f0 [ 45.631978][ T66] ? __might_resched+0x3cc/0x5e0 [ 45.631994][ T66] ? lock_sock_nested+0x5f/0xf0 [ 45.632008][ T66] ? lock_acquire+0x2f/0xb0 [ 45.632022][ T66] ? lock_sock_nested+0x5f/0xf0 [ 45.632037][ T66] _raw_spin_lock_bh+0x33/0x40 [ 45.632049][ T66] ? lock_sock_nested+0x5f/0xf0 [ 45.632063][ T66] lock_sock_nested+0x5f/0xf0 [ 45.632078][ T66] ? sco_connect_cfm+0x3f3/0xd80 [ 45.632094][ T66] sco_connect_cfm+0x3f3/0xd80 [ 45.632109][ T66] ? __pfx_sco_connect_cfm+0x10/0x10 [ 45.632126][ T66] ? __pfx_sco_connect_cfm+0x10/0x10 [ 45.632141][ T66] hci_sync_conn_complete_evt+0x398/0x9f0 [ 45.632156][ T66] hci_event_packet+0x9eb/0x1180 [ 45.632172][ T66] ? __pfx_hci_sync_conn_complete_evt+0x10/0x10 [ 45.632186][ T66] ? __pfx_hci_event_packet+0x10/0x10 [ 45.632202][ T66] ? mark_held_locks+0x9f/0xe0 [ 45.632215][ T66] ? kcov_remote_start+0x3cf/0x6e0 [ 45.632231][ T66] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.632245][ T66] hci_rx_work+0x2c5/0x16b0 [ 45.632256][ T66] ? process_one_work+0x921/0x1ba0 [ 45.632270][ T66] process_one_work+0x9c5/0x1ba0 [ 45.632285][ T66] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 45.632300][ T66] ? __pfx_process_one_work+0x10/0x10 [ 45.632315][ T66] ? assign_work+0x1a0/0x250 [ 45.632328][ T66] worker_thread+0x6c8/0xf00 [ 45.632343][ T66] ? __pfx_worker_thread+0x10/0x10 [ 45.632357][ T66] kthread+0x3af/0x750 [ 45.632370][ T66] ? __pfx_kthread+0x10/0x10 [ 45.632381][ T66] ? lock_acquire+0x2f/0xb0 [ 45.632396][ T66] ? __pfx_kthread+0x10/0x10 [ 45.632408][ T66] ret_from_fork+0x45/0x80 [ 45.632421][ T66] ? __pfx_kthread+0x10/0x10 [ 45.632433][ T66] ret_from_fork_asm+0x1a/0x30 [ 45.632448][ T66] [ 45.632452][ T66] [ 45.727445][ T66] Allocated by task 5948: [ 45.728633][ T66] kasan_save_stack+0x33/0x60 [ 45.729913][ T66] kasan_save_track+0x14/0x30 [ 45.731202][ T66] __kasan_kmalloc+0xaa/0xb0 [ 45.732474][ T66] __kmalloc_noprof+0x21c/0x510 [ 45.733788][ T66] sk_prot_alloc+0x1a8/0x2a0 [ 45.735027][ T66] sk_alloc+0x36/0xc20 [ 45.736154][ T66] bt_sock_alloc+0x3b/0x3a0 [ 45.737436][ T66] sco_sock_create+0xe3/0x3c0 [ 45.738724][ T66] bt_sock_create+0x182/0x350 [ 45.740032][ T66] __sock_create+0x335/0x8d0 [ 45.741367][ T66] __sys_socket+0x14f/0x260 [ 45.742647][ T66] __x64_sys_socket+0x72/0xb0 [ 45.743952][ T66] do_syscall_64+0xcd/0x250 [ 45.745211][ T66] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.746842][ T66] [ 45.747486][ T66] Freed by task 5947: [ 45.748546][ T66] kasan_save_stack+0x33/0x60 [ 45.749846][ T66] kasan_save_track+0x14/0x30 [ 45.751118][ T66] kasan_save_free_info+0x3b/0x60 [ 45.752421][ T66] __kasan_slab_free+0x51/0x70 [ 45.753713][ T66] kfree+0x2c4/0x4d0 [ 45.754772][ T66] __sk_destruct+0x5ef/0x6f0 [ 45.755996][ T66] sk_destruct+0xc2/0xf0 [ 45.757155][ T66] __sk_free+0xf4/0x3e0 [ 45.758253][ T66] sk_free+0x6a/0x90 [ 45.759274][ T66] sco_sock_kill+0x11a/0x1c0 [ 45.760510][ T66] sco_sock_release+0x154/0x2d0 [ 45.761879][ T66] __sock_release+0xb0/0x270 [ 45.763117][ T66] sock_close+0x1c/0x30 [ 45.764260][ T66] __fput+0x3ff/0xb70 [ 45.765326][ T66] __fput_sync+0xa1/0xc0 [ 45.766486][ T66] __x64_sys_close+0x86/0x100 [ 45.767743][ T66] do_syscall_64+0xcd/0x250 [ 45.768955][ T66] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.770553][ T66] [ 45.771234][ T66] The buggy address belongs to the object at ffff888024723000 [ 45.771234][ T66] which belongs to the cache kmalloc-2k of size 2048 [ 45.774876][ T66] The buggy address is located 472 bytes inside of [ 45.774876][ T66] freed 2048-byte region [ffff888024723000, ffff888024723800) [ 45.778482][ T66] [ 45.779199][ T66] The buggy address belongs to the physical page: [ 45.781074][ T66] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24720 [ 45.783679][ T66] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 45.786011][ T66] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 45.788063][ T66] page_type: f5(slab) [ 45.789136][ T66] raw: 00fff00000000040 ffff88801b042f00 dead000000000122 0000000000000000 [ 45.791436][ T66] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 45.793718][ T66] head: 00fff00000000040 ffff88801b042f00 dead000000000122 0000000000000000 [ 45.796060][ T66] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 45.798412][ T66] head: 00fff00000000003 ffffea000091c801 ffffffffffffffff 0000000000000000 [ 45.800845][ T66] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 45.804116][ T66] page dumped because: kasan: bad access detected [ 45.806539][ T66] page_owner tracks the page as allocated [ 45.808627][ T66] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5935, tgid 5935 (syz-executor219), ts 45509959300, free_ts 45506472562 [ 45.814572][ T66] post_alloc_hook+0x181/0x1b0 [ 45.815883][ T66] get_page_from_freelist+0xfce/0x2f80 [ 45.817304][ T66] __alloc_frozen_pages_noprof+0x221/0x2470 [ 45.818921][ T66] alloc_pages_mpol+0x1fc/0x540 [ 45.820218][ T66] new_slab+0x23d/0x330 [ 45.821361][ T66] ___slab_alloc+0xc5d/0x1720 [ 45.822650][ T66] __slab_alloc.constprop.0+0x56/0xb0 [ 45.824092][ T66] __kmalloc_node_track_caller_noprof+0x2f1/0x510 [ 45.825812][ T66] kmalloc_reserve+0xef/0x2c0 [ 45.827065][ T66] __alloc_skb+0x164/0x380 [ 45.828295][ T66] audit_log_start+0x2e1/0x7e0 [ 45.829581][ T66] common_lsm_audit+0xe9/0x2290 [ 45.830919][ T66] slow_avc_audit+0x17d/0x210 [ 45.832229][ T66] avc_has_perm+0x18d/0x1c0 [ 45.833458][ T66] selinux_kernel_module_request+0x12a/0x190 [ 45.835100][ T66] security_kernel_module_request+0x1b9/0x1e0 [ 45.836718][ T66] page last free pid 5935 tgid 5935 stack trace: [ 45.838403][ T66] free_frozen_pages+0x6db/0xfb0 [ 45.839737][ T66] qlist_free_all+0x4e/0x120 [ 45.840986][ T66] kasan_quarantine_reduce+0x195/0x1e0 [ 45.842514][ T66] __kasan_slab_alloc+0x69/0x90 [ 45.843847][ T66] __kmalloc_cache_noprof+0x243/0x410 [ 45.845292][ T66] tomoyo_init_log+0x195/0x2170 [ 45.846635][ T66] tomoyo_supervisor+0x313/0x1380 [ 45.847983][ T66] tomoyo_path_number_perm+0x447/0x590 [ 45.849440][ T66] tomoyo_path_mkdir+0x9c/0xe0 [ 45.850726][ T66] security_path_mkdir+0x154/0x2f0 [ 45.852117][ T66] do_mkdirat+0x176/0x3a0 [ 45.853276][ T66] __x64_sys_mkdir+0xef/0x140 [ 45.854564][ T66] do_syscall_64+0xcd/0x250 [ 45.855717][ T66] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.857324][ T66] [ 45.858012][ T66] Memory state around the buggy address: [ 45.859555][ T66] ffff888024723080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 45.861762][ T66] ffff888024723100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 45.863981][ T66] >ffff888024723180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 45.866175][ T66] ^ [ 45.868067][ T66] ffff888024723200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 45.870173][ T66] ffff888024723280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 45.872350][ T66] ================================================================== [ 45.874483][ T66] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 45.876423][ T66] CPU: 1 UID: 0 PID: 66 Comm: kworker/u33:0 Tainted: G W 6.14.0-syzkaller #0 [ 45.879059][ T66] Tainted: [W]=WARN [ 45.880112][ T66] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.883006][ T66] Workqueue: hci0 hci_rx_work [ 45.884310][ T66] Call Trace: [ 45.885219][ T66] [ 45.886044][ T66] dump_stack_lvl+0x3d/0x1f0 [ 45.887276][ T66] panic+0x71d/0x800 [ 45.888287][ T66] ? __pfx_panic+0x10/0x10 [ 45.889444][ T66] ? rcu_is_watching+0x12/0xc0 [ 45.890698][ T66] ? __pfx_lock_release+0x10/0x10 [ 45.892029][ T66] ? check_panic_on_warn+0x1f/0xb0 [ 45.893349][ T66] check_panic_on_warn+0xab/0xb0 [ 45.894677][ T66] end_report+0x117/0x180 [ 45.895831][ T66] kasan_report+0xe9/0x110 [ 45.897043][ T66] ? __lock_acquire+0x2d90/0x3c40 [ 45.898407][ T66] ? __lock_acquire+0x2d90/0x3c40 [ 45.899747][ T66] __lock_acquire+0x2d90/0x3c40 [ 45.901030][ T66] ? lock_acquire+0x2f/0xb0 [ 45.902331][ T66] ? is_bpf_text_address+0x30/0x1a0 [ 45.903720][ T66] ? __pfx_mark_lock+0x10/0x10 [ 45.904980][ T66] ? __pfx___lock_acquire+0x10/0x10 [ 45.906376][ T66] ? show_trace_log_lvl+0x29d/0x3d0 [ 45.907758][ T66] lock_acquire.part.0+0x11b/0x380 [ 45.909120][ T66] ? lock_sock_nested+0x5f/0xf0 [ 45.910396][ T66] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 45.911847][ T66] ? rcu_is_watching+0x12/0xc0 [ 45.913157][ T66] ? trace_lock_acquire+0x14e/0x1f0 [ 45.914536][ T66] ? __might_resched+0x3cc/0x5e0 [ 45.915838][ T66] ? lock_sock_nested+0x5f/0xf0 [ 45.917125][ T66] ? lock_acquire+0x2f/0xb0 [ 45.918370][ T66] ? lock_sock_nested+0x5f/0xf0 [ 45.919739][ T66] _raw_spin_lock_bh+0x33/0x40 [ 45.921040][ T66] ? lock_sock_nested+0x5f/0xf0 [ 45.922394][ T66] lock_sock_nested+0x5f/0xf0 [ 45.923652][ T66] ? sco_connect_cfm+0x3f3/0xd80 [ 45.924977][ T66] sco_connect_cfm+0x3f3/0xd80 [ 45.926306][ T66] ? __pfx_sco_connect_cfm+0x10/0x10 [ 45.927766][ T66] ? __pfx_sco_connect_cfm+0x10/0x10 [ 45.929223][ T66] hci_sync_conn_complete_evt+0x398/0x9f0 [ 45.930798][ T66] hci_event_packet+0x9eb/0x1180 [ 45.932195][ T66] ? __pfx_hci_sync_conn_complete_evt+0x10/0x10 [ 45.933926][ T66] ? __pfx_hci_event_packet+0x10/0x10 [ 45.935409][ T66] ? mark_held_locks+0x9f/0xe0 [ 45.936672][ T66] ? kcov_remote_start+0x3cf/0x6e0 [ 45.938002][ T66] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.939414][ T66] hci_rx_work+0x2c5/0x16b0 [ 45.940653][ T66] ? process_one_work+0x921/0x1ba0 [ 45.942005][ T66] process_one_work+0x9c5/0x1ba0 [ 45.943367][ T66] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 45.944866][ T66] ? __pfx_process_one_work+0x10/0x10 [ 45.946304][ T66] ? assign_work+0x1a0/0x250 [ 45.947561][ T66] worker_thread+0x6c8/0xf00 [ 45.948799][ T66] ? __pfx_worker_thread+0x10/0x10 [ 45.950166][ T66] kthread+0x3af/0x750 [ 45.951270][ T66] ? __pfx_kthread+0x10/0x10 [ 45.952524][ T66] ? lock_acquire+0x2f/0xb0 [ 45.953695][ T66] ? __pfx_kthread+0x10/0x10 [ 45.954938][ T66] ret_from_fork+0x45/0x80 [ 45.956158][ T66] ? __pfx_kthread+0x10/0x10 [ 45.957397][ T66] ret_from_fork_asm+0x1a/0x30 [ 45.958674][ T66] [ 45.960077][ T66] Kernel Offset: disabled [ 45.961251][ T66] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:12:16 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffffc90000007990 RCX=0000000000000001 RDX=000000000003ec00 RSI=1ffff1100d4e7dac RDI=ffff88806a73ed60 RBP=ffff88801ded0028 RSP=ffffc90000007860 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc900000079b8 R11=ffff88801daa0f00 R12=dffffc0000000000 R13=ffff88806a73ec00 R14=ffff88801ded0000 R15=0000000000000001 RIP=ffffffff818e2dec RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000200000000086 CR3=0000000030c4c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0c001d0 Opmask01=00000000efe0c0fe Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004700000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff7bd85311a ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff7bd853108 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff7bd853114 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff7bd853128 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff7bd85328f ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff7bd886a00 00007ff7bd886a08 00007ff7bd886a00 00007ff7bd88ef00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0b004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8540c495 RDI=ffffffff9ab847c0 RBP=ffffffff9ab84780 RSP=ffffc90000d3f4a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000000000000a R12=0000000000000000 R13=000000000000006d R14=ffffffff9ab84780 R15=0000000000000000 RIP=ffffffff8540c4bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff7bd7b5b30 CR3=0000000030c4c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0c001d0 Opmask01=00000000efe0c0fe Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004700000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff7bd85311a ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff7bd853108 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff7bd853114 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff7bd853128 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff7bd85328f ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff7bd886a00 00007ff7bd886a08 00007ff7bd886a00 00007ff7bd88ef00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0b004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000003b913 RBX=0000000000000002 RCX=ffffffff8b579469 RDX=0000000000000000 RSI=ffffffff8b6cfbe0 RDI=ffffffff8bd36960 RBP=ffffed1003b5c488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d506f85 R10=ffff88806a837c2b R11=0000000000000000 R12=0000000000000002 R13=ffff88801dae2440 R14=ffffffff90626c10 R15=0000000000000000 RIP=ffffffff8b57a84f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000556efd59bbb0 CR3=0000000022fa0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=0000000000000003 Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556efd3bad10 0000556efd3cb070 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 00000000ff000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001e1 0000000000000000 44455a494c414954 494e495f43455355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000303a 306963682f306963 682f68746f6f7465 756c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000026a81 0000000000000037 6c6c696b66722f34 7968702f31313230 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4943213f395b2249 5a6e786b6e646b7e 59647a305f474f5b 647c79303a243a78 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 26483b3a3a264b3b 3a0a00307f617930 382433273f397b27 697a787c69303b7e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=000000000002d8eb RBX=0000000000000003 RCX=ffffffff8b579469 RDX=0000000000000000 RSI=ffffffff8b6cfbe0 RDI=ffffffff8bd36960 RBP=ffffed1003b5c910 RSP=ffffc900001b7e08 R8 =0000000000000001 R9 =ffffed100d526f85 R10=ffff88806a937c2b R11=0000000000000000 R12=0000000000000003 R13=ffff88801dae4880 R14=ffffffff90626c10 R15=0000000000000000 RIP=ffffffff8b57a84f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff7bd852768 CR3=0000000022fa0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=0000000000000003 Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556efd3bad10 0000556efd3cb070 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 00000000ff000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001e1 0000000000000000 44455a494c414954 494e495f43455355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000303a 306963682f306963 682f68746f6f7465 756c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000026a81 0000000000000037 6c6c696b66722f34 7968702f31313230 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4943213f395b2249 5a6e786b6e646b7e 59647a305f474f5b 647c79303a243a78 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 26483b3a3a264b3b 3a0a00307f617930 382433273f397b27 697a787c69303b7e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020