[ 44.126646][ T40] audit: type=1400 audit(1758668965.707:60): avc: denied { rlimitinh } for pid=5874 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.133473][ T40] audit: type=1400 audit(1758668965.707:61): avc: denied { siginh } for pid=5874 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 86.656567][ T1027] cfg80211: failed to load regulatory.db [ 169.947705][ T40] audit: type=1400 audit(1758669091.547:62): avc: denied { write } for pid=5987 comm="sftp-server" path="pipe:[7173]" dev="pipefs" ino=7173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 Warning: Permanently added '[localhost]:45782' (ED25519) to the list of known hosts. [ 176.400853][ T40] audit: type=1400 audit(1758669097.997:63): avc: denied { execute } for pid=5999 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 176.410300][ T40] audit: type=1400 audit(1758669098.007:64): avc: denied { execute_no_trans } for pid=5999 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2025/09/23 23:11:39 parsed 1 programs [ 177.832953][ T40] audit: type=1400 audit(1758669099.427:65): avc: denied { node_bind } for pid=5999 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 180.297190][ T40] audit: type=1400 audit(1758669101.897:66): avc: denied { mounton } for pid=6009 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 180.302300][ T6009] cgroup: Unknown subsys name 'net' [ 180.304434][ T40] audit: type=1400 audit(1758669101.897:67): avc: denied { mount } for pid=6009 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 180.313440][ T40] audit: type=1400 audit(1758669101.917:68): avc: denied { unmount } for pid=6009 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 180.489144][ T6009] cgroup: Unknown subsys name 'cpuset' [ 180.495330][ T6009] cgroup: Unknown subsys name 'rlimit' [ 180.621085][ T40] audit: type=1400 audit(1758669102.217:69): avc: denied { setattr } for pid=6009 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.628070][ T40] audit: type=1400 audit(1758669102.227:70): avc: denied { create } for pid=6009 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.634126][ T40] audit: type=1400 audit(1758669102.227:71): avc: denied { write } for pid=6009 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.640938][ T40] audit: type=1400 audit(1758669102.227:72): avc: denied { read } for pid=6009 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.698940][ T6012] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 181.585375][ T6009] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 183.098296][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 183.098312][ T40] audit: type=1400 audit(1758669104.697:80): avc: denied { execmem } for pid=6014 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 183.109175][ T40] audit: type=1400 audit(1758669104.697:81): avc: denied { read } for pid=6015 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 183.117886][ T40] audit: type=1400 audit(1758669104.707:82): avc: denied { open } for pid=6015 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 183.128047][ T40] audit: type=1400 audit(1758669104.707:83): avc: denied { mounton } for pid=6015 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 183.148149][ T40] audit: type=1400 audit(1758669104.747:84): avc: denied { mount } for pid=6015 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 183.157013][ T40] audit: type=1400 audit(1758669104.747:85): avc: denied { mounton } for pid=6015 comm="syz-executor" path="/syzkaller.cWydo7/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 183.167516][ T40] audit: type=1400 audit(1758669104.747:86): avc: denied { mount } for pid=6015 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 183.176324][ T40] audit: type=1400 audit(1758669104.747:87): avc: denied { mounton } for pid=6015 comm="syz-executor" path="/syzkaller.cWydo7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 183.187031][ T40] audit: type=1400 audit(1758669104.747:88): avc: denied { mounton } for pid=6015 comm="syz-executor" path="/syzkaller.cWydo7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 183.198086][ T40] audit: type=1400 audit(1758669104.757:89): avc: denied { unmount } for pid=6015 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 183.211534][ T6015] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 184.096730][ T5333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.104669][ T5333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.108306][ T5333] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.112286][ T5333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.117981][ T5333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.547099][ T6055] chnl_net:caif_netlink_parms(): no params data found [ 184.676236][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.679759][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.682798][ T6055] bridge_slave_0: entered allmulticast mode [ 184.687038][ T6055] bridge_slave_0: entered promiscuous mode [ 184.692533][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.695847][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.698754][ T6055] bridge_slave_1: entered allmulticast mode [ 184.702517][ T6055] bridge_slave_1: entered promiscuous mode [ 184.754527][ T6055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.763130][ T6055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.816925][ T6055] team0: Port device team_slave_0 added [ 184.821849][ T6055] team0: Port device team_slave_1 added [ 184.868915][ T6055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.871779][ T6055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.882824][ T6055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.903024][ T6055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.907770][ T6055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.917688][ T6055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.981235][ T6055] hsr_slave_0: entered promiscuous mode [ 184.983605][ T6055] hsr_slave_1: entered promiscuous mode [ 185.108553][ T6055] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.114800][ T6055] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 185.120184][ T6055] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 185.124754][ T6055] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 185.178802][ T6055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.192280][ T6055] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.199761][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.202044][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.209902][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.212869][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.343573][ T6055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.368327][ T6055] veth0_vlan: entered promiscuous mode [ 185.374743][ T6055] veth1_vlan: entered promiscuous mode [ 185.398971][ T6055] veth0_macvtap: entered promiscuous mode [ 185.404416][ T6055] veth1_macvtap: entered promiscuous mode [ 185.417874][ T6055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.426851][ T6055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.437522][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.441868][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.446985][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.450523][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.526114][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.617185][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.709830][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.741650][ T413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.744398][ T413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.770122][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.773032][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.787903][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/09/23 23:11:48 executed programs: 0 [ 187.093542][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.097153][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.100782][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.105411][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.108404][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.248456][ T6110] chnl_net:caif_netlink_parms(): no params data found [ 187.327756][ T6110] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.330602][ T6110] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.332770][ T6110] bridge_slave_0: entered allmulticast mode [ 187.336485][ T6110] bridge_slave_0: entered promiscuous mode [ 187.341227][ T6110] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.344182][ T6110] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.347679][ T6110] bridge_slave_1: entered allmulticast mode [ 187.350339][ T6110] bridge_slave_1: entered promiscuous mode [ 187.382151][ T6110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.387529][ T6110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.418461][ T6110] team0: Port device team_slave_0 added [ 187.421622][ T6110] team0: Port device team_slave_1 added [ 187.451756][ T6110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.453916][ T6110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.463845][ T6110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.469695][ T6110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.471853][ T6110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.480077][ T6110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.541712][ T6110] hsr_slave_0: entered promiscuous mode [ 187.544271][ T6110] hsr_slave_1: entered promiscuous mode [ 187.547550][ T6110] debugfs: 'hsr0' already exists in 'hsr' [ 187.549397][ T6110] Cannot create hsr debugfs directory [ 188.924203][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 188.924218][ T40] audit: type=1400 audit(1758669110.517:111): avc: denied { search } for pid=5684 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.935184][ T40] audit: type=1400 audit(1758669110.517:112): avc: denied { search } for pid=5684 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.943799][ T40] audit: type=1400 audit(1758669110.517:113): avc: denied { search } for pid=5684 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.955187][ T13] bridge_slave_1: left allmulticast mode [ 188.957489][ T13] bridge_slave_1: left promiscuous mode [ 188.959678][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.965041][ T13] bridge_slave_0: left allmulticast mode [ 188.967156][ T13] bridge_slave_0: left promiscuous mode [ 188.969061][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.983047][ T40] audit: type=1400 audit(1758669110.577:114): avc: denied { read open } for pid=6122 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.992369][ T40] audit: type=1400 audit(1758669110.577:115): avc: denied { getattr } for pid=6122 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.000850][ T40] audit: type=1400 audit(1758669110.587:116): avc: denied { add_name } for pid=6120 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.045314][ T40] audit: type=1400 audit(1758669110.647:117): avc: denied { remove_name } for pid=6124 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2100 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.135607][ T5333] Bluetooth: hci0: command tx timeout [ 189.196563][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.200575][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.203957][ T13] bond0 (unregistering): Released all slaves [ 189.363849][ T13] hsr_slave_0: left promiscuous mode [ 189.367814][ T13] hsr_slave_1: left promiscuous mode [ 189.370537][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.373426][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.377961][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.380896][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.400519][ T13] veth1_macvtap: left promiscuous mode [ 189.403275][ T13] veth0_macvtap: left promiscuous mode [ 189.405760][ T13] veth1_vlan: left promiscuous mode [ 189.407980][ T13] veth0_vlan: left promiscuous mode [ 189.869161][ T13] team0 (unregistering): Port device team_slave_1 removed [ 189.917950][ T13] team0 (unregistering): Port device team_slave_0 removed [ 190.472226][ T6110] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 190.478205][ T6110] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.482763][ T6110] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 190.486623][ T6110] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 190.532110][ T6110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.544372][ T6110] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.551212][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.553925][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.561558][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.563860][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.683958][ T6110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.877092][ T6110] veth0_vlan: entered promiscuous mode [ 190.883092][ T6110] veth1_vlan: entered promiscuous mode [ 190.903477][ T6110] veth0_macvtap: entered promiscuous mode [ 190.907547][ T6110] veth1_macvtap: entered promiscuous mode [ 190.916060][ T6110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.921885][ T6110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.928560][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.932074][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.942498][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.946274][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.023140][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.025664][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.038189][ T215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.040651][ T215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.060873][ T40] audit: type=1400 audit(1758669112.657:118): avc: denied { connect } for pid=6154 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 191.062950][ T6155] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 191.072967][ T40] audit: type=1400 audit(1758669112.667:119): avc: denied { read } for pid=5367 comm="acpid" name="mouse2" dev="devtmpfs" ino=2840 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 191.087672][ T40] audit: type=1400 audit(1758669112.667:120): avc: denied { open } for pid=5367 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2840 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 191.215034][ T5333] Bluetooth: hci0: command tx timeout 2025/09/23 23:11:53 executed programs: 51 [ 193.305667][ T5333] Bluetooth: hci0: command tx timeout [ 195.375072][ T5333] Bluetooth: hci0: command tx timeout 2025/09/23 23:11:58 executed programs: 300 [ 199.310643][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.313473][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 2025/09/23 23:12:03 executed programs: 548 [ 203.226390][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.232465][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.235975][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.240391][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.245998][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.339155][ T7357] chnl_net:caif_netlink_parms(): no params data found [ 203.429516][ T7357] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.431757][ T7357] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.433979][ T7357] bridge_slave_0: entered allmulticast mode [ 203.436881][ T7357] bridge_slave_0: entered promiscuous mode [ 203.439921][ T7357] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.442195][ T7357] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.444492][ T7357] bridge_slave_1: entered allmulticast mode [ 203.447338][ T7357] bridge_slave_1: entered promiscuous mode [ 203.493463][ T72] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.501135][ T7357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.507550][ T7357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.540776][ T7357] team0: Port device team_slave_0 added [ 203.544127][ T7357] team0: Port device team_slave_1 added [ 203.571703][ T72] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.610128][ T7357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.613009][ T7357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.623254][ T7357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.628673][ T7357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.630886][ T7357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.638521][ T7357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.653214][ T72] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.695505][ T7357] hsr_slave_0: entered promiscuous mode [ 203.697825][ T7357] hsr_slave_1: entered promiscuous mode [ 203.751239][ T72] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.884695][ T72] bridge_slave_1: left allmulticast mode [ 203.887274][ T72] bridge_slave_1: left promiscuous mode [ 203.889871][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.895678][ T72] bridge_slave_0: left allmulticast mode [ 203.898113][ T72] bridge_slave_0: left promiscuous mode [ 203.900637][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.145660][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.151475][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.156589][ T72] bond0 (unregistering): Released all slaves [ 204.566708][ T7357] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.570673][ T7357] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 204.574692][ T7357] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 204.584840][ T7357] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 204.598338][ T72] hsr_slave_0: left promiscuous mode [ 204.601185][ T72] hsr_slave_1: left promiscuous mode [ 204.603914][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.607316][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.610921][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.614017][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.633646][ T72] veth1_macvtap: left promiscuous mode [ 204.636895][ T72] veth0_macvtap: left promiscuous mode [ 204.639329][ T72] veth1_vlan: left promiscuous mode [ 204.642050][ T72] veth0_vlan: left promiscuous mode [ 205.064278][ T72] team0 (unregistering): Port device team_slave_1 removed [ 205.109538][ T72] team0 (unregistering): Port device team_slave_0 removed [ 205.295287][ T5333] Bluetooth: hci1: command tx timeout [ 205.442028][ T7357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.451219][ T7357] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.457080][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.459324][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.471429][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.476554][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.609272][ T7357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.633680][ T7357] veth0_vlan: entered promiscuous mode [ 205.641869][ T7357] veth1_vlan: entered promiscuous mode [ 205.663324][ T7357] veth0_macvtap: entered promiscuous mode [ 205.669228][ T7357] veth1_macvtap: entered promiscuous mode [ 205.683034][ T7357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.692468][ T7357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.698681][ T413] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.703297][ T413] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.708454][ T413] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.712159][ T413] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.760840][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.763997][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.782234][ T413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.785567][ T413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.809023][ T7388] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 2025/09/23 23:12:08 executed programs: 666 [ 207.375379][ T5333] Bluetooth: hci1: command tx timeout [ 209.464989][ T5333] Bluetooth: hci1: command tx timeout [ 211.535033][ T5333] Bluetooth: hci1: command tx timeout 2025/09/23 23:12:13 executed programs: 915 2025/09/23 23:12:18 executed programs: 1174 [ 217.815247][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.819192][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.825876][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.832507][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.838210][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.951668][ T8589] chnl_net:caif_netlink_parms(): no params data found [ 218.025681][ T8589] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.028139][ T8589] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.031056][ T8589] bridge_slave_0: entered allmulticast mode [ 218.033684][ T8589] bridge_slave_0: entered promiscuous mode [ 218.038874][ T8589] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.041662][ T8589] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.044001][ T8589] bridge_slave_1: entered allmulticast mode [ 218.047168][ T8589] bridge_slave_1: entered promiscuous mode [ 218.061121][ T72] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.101813][ T8589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.108167][ T8589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.155829][ T72] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.168513][ T8589] team0: Port device team_slave_0 added [ 218.171890][ T8589] team0: Port device team_slave_1 added [ 218.204197][ T8589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.206992][ T8589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.215055][ T8589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.219995][ T8589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.222280][ T8589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.230935][ T8589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.260124][ T72] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.282706][ T8589] hsr_slave_0: entered promiscuous mode [ 218.286181][ T8589] hsr_slave_1: entered promiscuous mode [ 218.288205][ T8589] debugfs: 'hsr0' already exists in 'hsr' [ 218.289955][ T8589] Cannot create hsr debugfs directory [ 218.373658][ T72] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.480265][ T72] bridge_slave_1: left allmulticast mode [ 218.482325][ T72] bridge_slave_1: left promiscuous mode [ 218.484859][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.488701][ T72] bridge_slave_0: left allmulticast mode [ 218.490460][ T72] bridge_slave_0: left promiscuous mode [ 218.492271][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.702532][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.706855][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.710616][ T72] bond0 (unregistering): Released all slaves [ 219.060423][ T72] hsr_slave_0: left promiscuous mode [ 219.062606][ T72] hsr_slave_1: left promiscuous mode [ 219.064740][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.067245][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.070107][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.072477][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.084529][ T72] veth1_macvtap: left promiscuous mode [ 219.086411][ T72] veth0_macvtap: left promiscuous mode [ 219.088307][ T72] veth1_vlan: left promiscuous mode [ 219.090295][ T72] veth0_vlan: left promiscuous mode [ 219.470854][ T72] team0 (unregistering): Port device team_slave_1 removed [ 219.510249][ T72] team0 (unregistering): Port device team_slave_0 removed [ 219.855235][ T5333] Bluetooth: hci0: command tx timeout [ 220.008974][ T8589] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 220.015164][ T8589] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.021149][ T8589] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.027317][ T8589] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.100995][ T8589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.110971][ T8589] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.116712][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.119750][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.132162][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.134387][ T413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.282626][ T8589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.308829][ T8589] veth0_vlan: entered promiscuous mode [ 220.316465][ T8589] veth1_vlan: entered promiscuous mode [ 220.332221][ T8589] veth0_macvtap: entered promiscuous mode [ 220.336436][ T8589] veth1_macvtap: entered promiscuous mode [ 220.352084][ T8589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.361252][ T8589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.369754][ T72] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.372675][ T72] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.375825][ T413] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.381807][ T413] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.416406][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.419703][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.438753][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.441230][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.464581][ T8633] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 221.936514][ T5333] Bluetooth: hci0: command tx timeout 2025/09/23 23:12:23 executed programs: 1287 [ 224.015075][ T5333] Bluetooth: hci0: command tx timeout [ 226.095033][ T5333] Bluetooth: hci0: command tx timeout 2025/09/23 23:12:28 executed programs: 1539 2025/09/23 23:12:33 executed programs: 1790 [ 232.547003][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 232.550661][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 232.553768][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 232.557837][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 232.559158][ T8634] ================================================================== [ 232.563370][ T8634] BUG: KASAN: slab-use-after-free in __mutex_lock+0xe8a/0x1060 [ 232.564313][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 232.566347][ T8634] Read of size 8 at addr ffff88802a7340a0 by task khidpd_00010003/8634 [ 232.566364][ T8634] [ 232.566373][ T8634] CPU: 3 UID: 0 PID: 8634 Comm: khidpd_00010003 Not tainted syzkaller #0 PREEMPT(full) [ 232.566392][ T8634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 232.566402][ T8634] Call Trace: [ 232.566407][ T8634] [ 232.566413][ T8634] dump_stack_lvl+0x116/0x1f0 [ 232.566437][ T8634] print_report+0xcd/0x630 [ 232.566456][ T8634] ? __virt_addr_valid+0x81/0x610 [ 232.566477][ T8634] ? __phys_addr+0xe8/0x180 [ 232.566499][ T8634] ? __mutex_lock+0xe8a/0x1060 [ 232.566519][ T8634] kasan_report+0xe0/0x110 [ 232.566538][ T8634] ? __mutex_lock+0xe8a/0x1060 [ 232.566561][ T8634] ? l2cap_unregister_user+0x71/0x240 [ 232.566582][ T8634] __mutex_lock+0xe8a/0x1060 [ 232.566604][ T8634] ? l2cap_unregister_user+0x71/0x240 [ 232.566628][ T8634] ? __pfx___mutex_lock+0x10/0x10 [ 232.566657][ T8634] ? rcu_is_watching+0x12/0xc0 [ 232.566679][ T8634] ? lockdep_hardirqs_on+0x7c/0x110 [ 232.566700][ T8634] ? __try_to_del_timer_sync+0x115/0x170 [ 232.566728][ T8634] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 232.566756][ T8634] ? l2cap_unregister_user+0x71/0x240 [ 232.566776][ T8634] l2cap_unregister_user+0x71/0x240 [ 232.566799][ T8634] hidp_session_thread+0x45e/0x660 [ 232.566815][ T8634] ? __pfx_hidp_session_thread+0x10/0x10 [ 232.566831][ T8634] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 232.566859][ T8634] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 232.566885][ T8634] ? lockdep_hardirqs_on+0x7c/0x110 [ 232.566904][ T8634] ? __kthread_parkme+0x19e/0x250 [ 232.566929][ T8634] ? __pfx_hidp_session_thread+0x10/0x10 [ 232.566945][ T8634] kthread+0x3c2/0x780 [ 232.566961][ T8634] ? __pfx_kthread+0x10/0x10 [ 232.566978][ T8634] ? rcu_is_watching+0x12/0xc0 [ 232.566999][ T8634] ? __pfx_kthread+0x10/0x10 [ 232.567015][ T8634] ret_from_fork+0x56a/0x730 [ 232.567031][ T8634] ? __pfx_kthread+0x10/0x10 [ 232.567046][ T8634] ret_from_fork_asm+0x1a/0x30 [ 232.567070][ T8634] [ 232.567076][ T8634] [ 232.636925][ T8634] Allocated by task 8589: [ 232.638274][ T8634] kasan_save_stack+0x33/0x60 [ 232.639786][ T8634] kasan_save_track+0x14/0x30 [ 232.641274][ T8634] __kasan_kmalloc+0xaa/0xb0 [ 232.642726][ T8634] __kmalloc_noprof+0x223/0x510 [ 232.644354][ T8634] hci_alloc_dev_priv+0x1d/0x28a0 [ 232.645941][ T8634] __vhci_create_device+0xf0/0x880 [ 232.647548][ T8634] vhci_write+0x2c0/0x480 [ 232.648944][ T8634] vfs_write+0x7d3/0x11d0 [ 232.650314][ T8634] ksys_write+0x12a/0x250 [ 232.651683][ T8634] do_syscall_64+0xcd/0x4e0 [ 232.653144][ T8634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.654994][ T8634] [ 232.655764][ T8634] Freed by task 8589: [ 232.657028][ T8634] kasan_save_stack+0x33/0x60 [ 232.658514][ T8634] kasan_save_track+0x14/0x30 [ 232.660000][ T8634] kasan_save_free_info+0x3b/0x60 [ 232.661585][ T8634] __kasan_slab_free+0x60/0x70 [ 232.663103][ T8634] kfree+0x2b4/0x4d0 [ 232.664368][ T8634] hci_release_dev+0x4ef/0x610 [ 232.665879][ T8634] bt_host_release+0x6a/0xb0 [ 232.667341][ T8634] device_release+0xa4/0x240 [ 232.668835][ T8634] kobject_put+0x1e7/0x5a0 [ 232.670244][ T8634] put_device+0x1f/0x30 [ 232.671553][ T8634] vhci_release+0x185/0x230 [ 232.672929][ T8634] __fput+0x3ff/0xb70 [ 232.674189][ T8634] task_work_run+0x150/0x240 [ 232.675644][ T8634] do_exit+0x86f/0x2bf0 [ 232.676967][ T8634] do_group_exit+0xd3/0x2a0 [ 232.678400][ T8634] get_signal+0x2673/0x26d0 [ 232.679838][ T8634] arch_do_signal_or_restart+0x8f/0x7d0 [ 232.681573][ T8634] exit_to_user_mode_loop+0x84/0x110 [ 232.683237][ T8634] do_syscall_64+0x41c/0x4e0 [ 232.684709][ T8634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.686541][ T8634] [ 232.687305][ T8634] Last potentially related work creation: [ 232.689101][ T8634] kasan_save_stack+0x33/0x60 [ 232.690576][ T8634] kasan_record_aux_stack+0xa7/0xc0 [ 232.692217][ T8634] insert_work+0x36/0x230 [ 232.693579][ T8634] __queue_work+0x3f8/0x1160 [ 232.694997][ T8634] queue_work_on+0x1a4/0x1f0 [ 232.696460][ T8634] process_one_work+0x9cc/0x1b70 [ 232.698006][ T8634] worker_thread+0x6c8/0xf10 [ 232.699471][ T8634] kthread+0x3c2/0x780 [ 232.700769][ T8634] ret_from_fork+0x56a/0x730 [ 232.702231][ T8634] ret_from_fork_asm+0x1a/0x30 [ 232.703725][ T8634] [ 232.704495][ T8634] Second to last potentially related work creation: [ 232.706528][ T8634] kasan_save_stack+0x33/0x60 [ 232.708023][ T8634] kasan_record_aux_stack+0xa7/0xc0 [ 232.709646][ T8634] insert_work+0x36/0x230 [ 232.710999][ T8634] __queue_work+0x97e/0x1160 [ 232.712467][ T8634] call_timer_fn+0x197/0x620 [ 232.713945][ T8634] __run_timers+0x569/0x960 [ 232.715381][ T8634] run_timer_base+0x114/0x190 [ 232.716873][ T8634] run_timer_softirq+0x1a/0x40 [ 232.718376][ T8634] handle_softirqs+0x219/0x8e0 [ 232.719906][ T8634] __irq_exit_rcu+0x109/0x170 [ 232.721389][ T8634] irq_exit_rcu+0x9/0x30 [ 232.722737][ T8634] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 232.724504][ T8634] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 232.726379][ T8634] [ 232.727145][ T8634] The buggy address belongs to the object at ffff88802a734000 [ 232.727145][ T8634] which belongs to the cache kmalloc-8k of size 8192 [ 232.731419][ T8634] The buggy address is located 160 bytes inside of [ 232.731419][ T8634] freed 8192-byte region [ffff88802a734000, ffff88802a736000) [ 232.735601][ T8634] [ 232.736374][ T8634] The buggy address belongs to the physical page: [ 232.738356][ T8634] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a730 [ 232.741056][ T8634] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 232.743677][ T8634] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 232.746126][ T8634] page_type: f5(slab) [ 232.747367][ T8634] raw: 00fff00000000040 ffff88801b843180 ffffea0000b1f200 dead000000000005 [ 232.750018][ T8634] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 232.752671][ T8634] head: 00fff00000000040 ffff88801b843180 ffffea0000b1f200 dead000000000005 [ 232.755327][ T8634] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 232.757992][ T8634] head: 00fff00000000003 ffffea0000a9cc01 00000000ffffffff 00000000ffffffff [ 232.760662][ T8634] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 232.763332][ T8634] page dumped because: kasan: bad access detected [ 232.765326][ T8634] page_owner tracks the page as allocated [ 232.767082][ T8634] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6012, tgid 6012 (sh), ts 180669620918, free_ts 180633203369 [ 232.773118][ T8634] post_alloc_hook+0x1c0/0x230 [ 232.774619][ T8634] get_page_from_freelist+0x132b/0x38e0 [ 232.776351][ T8634] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 232.778192][ T8634] alloc_pages_mpol+0x1fb/0x550 [ 232.779704][ T8634] new_slab+0x247/0x330 [ 232.781021][ T8634] ___slab_alloc+0xcf2/0x1750 [ 232.782509][ T8634] __slab_alloc.constprop.0+0x56/0xb0 [ 232.784193][ T8634] __kmalloc_cache_noprof+0xfb/0x3e0 [ 232.785856][ T8634] tomoyo_init_log+0xc8a/0x2140 [ 232.787386][ T8634] tomoyo_supervisor+0x302/0x13b0 [ 232.788972][ T8634] tomoyo_execute_permission+0x38e/0x4b0 [ 232.790728][ T8634] tomoyo_find_next_domain+0x38d/0x20b0 [ 232.792458][ T8634] tomoyo_bprm_check_security+0x12e/0x1d0 [ 232.794172][ T8634] security_bprm_check+0x1b9/0x1e0 [ 232.795740][ T8634] bprm_execve+0x81a/0x1640 [ 232.797131][ T8634] do_execveat_common.isra.0+0x4a5/0x610 [ 232.798856][ T8634] page last free pid 5382 tgid 5382 stack trace: [ 232.800812][ T8634] __free_frozen_pages+0x7d5/0x10f0 [ 232.802446][ T8634] qlist_free_all+0x4d/0x120 [ 232.803902][ T8634] kasan_quarantine_reduce+0x195/0x1e0 [ 232.805590][ T8634] __kasan_slab_alloc+0x69/0x90 [ 232.807067][ T8634] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 232.808791][ T8634] getname_flags.part.0+0x4c/0x550 [ 232.810397][ T8634] getname_flags+0x93/0xf0 [ 232.811805][ T8634] vfs_fstatat+0xe1/0xf0 [ 232.813175][ T8634] __do_sys_newfstatat+0x97/0x120 [ 232.814730][ T8634] do_syscall_64+0xcd/0x4e0 [ 232.816101][ T8634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.817951][ T8634] [ 232.818710][ T8634] Memory state around the buggy address: [ 232.820418][ T8634] ffff88802a733f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 232.822903][ T8634] ffff88802a734000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 232.825345][ T8634] >ffff88802a734080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 232.827735][ T8634] ^ [ 232.829347][ T8634] ffff88802a734100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 232.831745][ T8634] ffff88802a734180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 232.834253][ T8634] ================================================================== [ 232.837019][ T8634] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 232.839314][ T8634] CPU: 3 UID: 0 PID: 8634 Comm: khidpd_00010003 Not tainted syzkaller #0 PREEMPT(full) [ 232.842359][ T8634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 232.845737][ T8634] Call Trace: [ 232.846805][ T8634] [ 232.847739][ T8634] dump_stack_lvl+0x3d/0x1f0 [ 232.849206][ T8634] vpanic+0x6e8/0x7a0 [ 232.850471][ T8634] ? __pfx_vpanic+0x10/0x10 [ 232.851895][ T8634] ? __pfx_vprintk_emit+0x10/0x10 [ 232.853482][ T8634] ? __mutex_lock+0xe8a/0x1060 [ 232.854981][ T8634] panic+0xca/0xd0 [ 232.856161][ T8634] ? __pfx_panic+0x10/0x10 [ 232.857569][ T8634] ? check_panic_on_warn+0x1f/0xb0 [ 232.859181][ T8634] check_panic_on_warn+0xab/0xb0 [ 232.860786][ T8634] end_report+0x107/0x170 [ 232.862265][ T8634] kasan_report+0xee/0x110 [ 232.863683][ T8634] ? __mutex_lock+0xe8a/0x1060 [ 232.865204][ T8634] ? l2cap_unregister_user+0x71/0x240 [ 232.866882][ T8634] __mutex_lock+0xe8a/0x1060 [ 232.868348][ T8634] ? l2cap_unregister_user+0x71/0x240 [ 232.870043][ T8634] ? __pfx___mutex_lock+0x10/0x10 [ 232.871616][ T8634] ? rcu_is_watching+0x12/0xc0 [ 232.873146][ T8634] ? lockdep_hardirqs_on+0x7c/0x110 [ 232.874775][ T8634] ? __try_to_del_timer_sync+0x115/0x170 [ 232.876562][ T8634] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 232.878441][ T8634] ? l2cap_unregister_user+0x71/0x240 [ 232.880131][ T8634] l2cap_unregister_user+0x71/0x240 [ 232.881770][ T8634] hidp_session_thread+0x45e/0x660 [ 232.883373][ T8634] ? __pfx_hidp_session_thread+0x10/0x10 [ 232.885112][ T8634] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 232.887027][ T8634] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 232.888984][ T8634] ? lockdep_hardirqs_on+0x7c/0x110 [ 232.890600][ T8634] ? __kthread_parkme+0x19e/0x250 [ 232.892178][ T8634] ? __pfx_hidp_session_thread+0x10/0x10 [ 232.893935][ T8634] kthread+0x3c2/0x780 [ 232.895208][ T8634] ? __pfx_kthread+0x10/0x10 [ 232.896663][ T8634] ? rcu_is_watching+0x12/0xc0 [ 232.898162][ T8634] ? __pfx_kthread+0x10/0x10 [ 232.899609][ T8634] ret_from_fork+0x56a/0x730 [ 232.901075][ T8634] ? __pfx_kthread+0x10/0x10 [ 232.902546][ T8634] ret_from_fork_asm+0x1a/0x30 [ 232.904055][ T8634] [ 232.905622][ T8634] Kernel Offset: disabled [ 232.906965][ T8634] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:12:34 Registers: info registers vcpu 0 CPU#0 RAX=000000000011b01f RBX=0000000000000000 RCX=ffffffff8b94db49 RDX=0000000000000000 RSI=ffffffff8de52d59 RDI=ffffffff8c163400 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab7690 R15=0000000000000000 RIP=ffffffff8b94c68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f35301fed00 CR3=0000000024490000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000000c0d0 Opmask01=0000000000000000 Opmask02=000000007fffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a886ff9fc0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a886ffe920 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89b0d2ab20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737342 7373737373737353 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373734303 1c1c1f5c0516175c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00306963682f6874 6f6f7465756c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00306963682f6874 6f6f7465756c622f 6c6175747269762f 736563697665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c31412c46392c45 392c38392c36392c 45382c43382c4138 2c39382c38382c37 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766736c6d612c38 2c312c30722c3431 312c3331312c3231 312c3131312c3031 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c32432c31432c 30432c46422c4542 2c44422c43422c42 422c41422c39422c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38422c37422c3242 2c31422c30422c44 412c36412c35412c 34412c33412c3141 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c46392c45392c38 392c36392c45382c 43382c41382c3938 2c38382c37382c36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000e645f RBX=0000000000000001 RCX=ffffffff8b94db49 RDX=0000000000000000 RSI=ffffffff8de52d59 RDI=ffffffff8c163400 RBP=ffffed1003bd7488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801deba440 R14=ffffffff90ab7690 R15=0000000000000000 RIP=ffffffff8b94c68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f353042f13c CR3=0000000024490000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=0000000000000003 Opmask02=00000000ffff7fdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a886fecd90 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a886ffcc60 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737342 7373737373737353 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373734303 1c1c1f5c0516175c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030323a30696368 2f306963682f6874 6f6f7465756c622f 6c6175747269762f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c31412c46392c45 392c38392c36392c 45382c43382c4138 2c39382c38382c37 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766736c6d612c38 2c312c30722c3431 312c3331312c3231 312c3131312c3031 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c32432c31432c 30432c46422c4542 2c44422c43422c42 422c41422c39422c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38422c37422c3242 2c31422c30422c44 412c36412c35412c 34412c33412c3141 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c46392c45392c38 392c36392c45382c 43382c41382c3938 2c38382c37382c36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564c215 RDI=ffffffff9b118120 RBP=ffffffff9b1180e0 RSP=ffffc90000b0f4e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b1180e0 R15=ffffffff8564c1b0 RIP=ffffffff8564c23f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffdd5fd5de8 CR3=0000000024490000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffffd0 Opmask01=0000000000000003 Opmask02=00000000ffff7fdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a887000e80 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a886ff09c0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737342 7373737373737353 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373734303 1c1c1f5c0516175c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3130323a30696368 2f306963682f6874 6f6f7465756c622f 6c6175747269762f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c31412c46392c45 392c38392c36392c 45382c43382c4138 2c39382c38382c37 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766736c6d612c38 2c312c30722c3431 312c3331312c3231 312c3131312c3031 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c32432c31432c 30432c46422c4542 2c44422c43422c42 422c41422c39422c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38422c37422c3242 2c31422c30422c44 412c36412c35412c 34412c33412c3141 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c46392c45392c38 392c36392c45382c 43382c41382c3938 2c38382c37382c36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564c215 RDI=ffffffff9b118120 RBP=ffffffff9b1180e0 RSP=ffffc90006867630 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000064616552 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b1180e0 R15=ffffffff8564c1b0 RIP=ffffffff8564c23f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c00997a000 CR3=0000000052880000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=00000000feff8000 Opmask03=0000000000000000 Opmask04=00000000feffffc0 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a886ff4f60 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89b0d2ab20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89b0d2ab20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 377475706e692f30 30323a306963682f 306963682f68746f 6f7465756c622f6c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382c36382c35382c 34382c33382c3238 2c31382c30382c46 372c45372c44372c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c31412c46392c45 392c38392c36392c 45382c43382c4138 2c39382c38382c37 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766736c6d612c38 2c312c30722c3431 312c3331312c3231 312c3131312c3031 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c32432c31432c 30432c46422c4542 2c44422c43422c42 422c41422c39422c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38422c37422c3242 2c31422c30422c44 412c36412c35412c 34412c33412c3141 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c46392c45392c38 392c36392c45382c 43382c41382c3938 2c38382c37382c36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000