[ 46.236395][ T39] audit: type=1400 audit(1717353944.153:81): avc: denied { rlimitinh } for pid=5182 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.242700][ T39] audit: type=1400 audit(1717353944.153:82): avc: denied { siginh } for pid=5182 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.480419][ T39] audit: type=1400 audit(1717353944.413:83): avc: denied { write } for pid=5185 comm="sftp-server" path="pipe:[5023]" dev="pipefs" ino=5023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 50.075423][ T39] audit: type=1400 audit(1717353948.013:84): avc: denied { read } for pid=4676 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 50.082960][ T39] audit: type=1400 audit(1717353948.013:85): avc: denied { append } for pid=4676 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.090400][ T39] audit: type=1400 audit(1717353948.013:86): avc: denied { open } for pid=4676 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.098313][ T39] audit: type=1400 audit(1717353948.013:87): avc: denied { getattr } for pid=4676 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:47004' (ED25519) to the list of known hosts. [ 51.222076][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 51.222087][ T39] audit: type=1400 audit(1717353949.153:89): avc: denied { execute_no_trans } for pid=5194 comm="sh" path="/syz-execprog" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2024/06/02 18:45:49 ignoring optional flag "sandboxArg"="0" 2024/06/02 18:45:49 parsed 1 programs [ 51.939033][ T39] audit: type=1400 audit(1717353949.873:90): avc: denied { setattr } for pid=5207 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.956760][ T39] audit: type=1400 audit(1717353949.893:91): avc: denied { mounton } for pid=5213 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 51.971617][ T5200] cgroup: Unknown subsys name 'net' [ 51.982183][ T39] audit: type=1400 audit(1717353949.893:92): avc: denied { mount } for pid=5213 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 51.998741][ T39] audit: type=1400 audit(1717353949.903:93): avc: denied { mounton } for pid=5200 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 52.008475][ T5211] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 52.013330][ T39] audit: type=1400 audit(1717353949.903:94): avc: denied { mount } for pid=5200 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.021493][ T39] audit: type=1400 audit(1717353949.923:95): avc: denied { create } for pid=5226 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.029478][ T39] audit: type=1400 audit(1717353949.923:96): avc: denied { write } for pid=5226 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.036352][ T39] audit: type=1400 audit(1717353949.933:97): avc: denied { unmount } for pid=5200 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.042963][ T39] audit: type=1400 audit(1717353949.933:98): avc: denied { read } for pid=5226 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.302458][ T5200] cgroup: Unknown subsys name 'rlimit' [ 52.720779][ T5204] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.135511][ T5239] chnl_net:caif_netlink_parms(): no params data found [ 53.223087][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.226196][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.228797][ T5239] bridge_slave_0: entered allmulticast mode [ 53.231616][ T5239] bridge_slave_0: entered promiscuous mode [ 53.238727][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.241254][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.244212][ T5239] bridge_slave_1: entered allmulticast mode [ 53.247919][ T5239] bridge_slave_1: entered promiscuous mode [ 53.312492][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.317506][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.375847][ T5239] team0: Port device team_slave_0 added [ 53.381657][ T5239] team0: Port device team_slave_1 added [ 53.438803][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.441170][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.452096][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.457423][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.459798][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.470572][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.512692][ T5239] hsr_slave_0: entered promiscuous mode [ 53.515845][ T5239] hsr_slave_1: entered promiscuous mode [ 53.643608][ T5239] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.649311][ T5239] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.655085][ T5239] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.661935][ T5239] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.694055][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.697512][ T5239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.701784][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.705092][ T5239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.768625][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.780148][ T1627] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.784269][ T1627] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.797491][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.807758][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.809961][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.825601][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.828051][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.944167][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.976226][ T5239] veth0_vlan: entered promiscuous mode [ 53.987226][ T5239] veth1_vlan: entered promiscuous mode [ 54.010812][ T5239] veth0_macvtap: entered promiscuous mode [ 54.016230][ T5239] veth1_macvtap: entered promiscuous mode [ 54.027472][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.036390][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.043856][ T5239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.047186][ T5239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.050535][ T5239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.054185][ T5239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.126163][ T72] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.220152][ T72] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.300970][ T72] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.371706][ T72] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.995760][ T5282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.000289][ T5282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.004166][ T5282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.008234][ T5282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.011951][ T5282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.015487][ T5282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.231855][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.235525][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.264914][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.268334][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/06/02 18:45:53 executed programs: 0 [ 55.565809][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.569172][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.572547][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.576131][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.583002][ T5313] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.583799][ T5315] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.587172][ T5313] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.587550][ T5317] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.588251][ T5317] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.588477][ T5317] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.588669][ T5320] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.590095][ T5315] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.590455][ T5315] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.590512][ T5315] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.591327][ T5313] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.591379][ T5315] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.591418][ T5320] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.592813][ T5315] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.594702][ T5320] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.594827][ T5307] ================================================================== [ 55.594833][ T5307] BUG: KASAN: slab-use-after-free in kfree_skb_reason+0x36/0x210 [ 55.594849][ T5307] Read of size 4 at addr ffff88802a2e38a4 by task syz-executor.1/5307 [ 55.594857][ T5307] [ 55.594860][ T5307] CPU: 0 PID: 5307 Comm: syz-executor.1 Not tainted 6.10.0-rc1-syzkaller-00304-g83814698cf48 #0 [ 55.594871][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 55.594876][ T5307] Call Trace: [ 55.594881][ T5307] [ 55.594885][ T5307] dump_stack_lvl+0x116/0x1f0 [ 55.594939][ T5307] print_report+0xc3/0x620 [ 55.594957][ T5307] ? __virt_addr_valid+0x5e/0x580 [ 55.594969][ T5307] ? __phys_addr+0xc6/0x150 [ 55.594983][ T5307] kasan_report+0xd9/0x110 [ 55.594997][ T5307] ? kfree_skb_reason+0x36/0x210 [ 55.595008][ T5307] ? kfree_skb_reason+0x36/0x210 [ 55.595019][ T5307] kasan_check_range+0xef/0x1a0 [ 55.595029][ T5307] kfree_skb_reason+0x36/0x210 [ 55.595040][ T5307] __hci_req_sync+0x61d/0x980 [ 55.595054][ T5307] ? __pfx___hci_req_sync+0x10/0x10 [ 55.595067][ T5307] ? __mutex_lock+0x1a6/0x9c0 [ 55.595081][ T5307] ? __pfx_autoremove_wake_function+0x10/0x10 [ 55.595095][ T5307] ? hci_req_sync+0x3f/0xd0 [ 55.595108][ T5307] ? __pfx___might_resched+0x10/0x10 [ 55.595120][ T5307] hci_req_sync+0x97/0xd0 [ 55.595132][ T5307] ? __pfx_hci_scan_req+0x10/0x10 [ 55.595146][ T5307] hci_dev_cmd+0x634/0x960 [ 55.595156][ T5307] ? cap_capable+0x1cf/0x240 [ 55.595166][ T5307] ? __pfx_hci_dev_cmd+0x10/0x10 [ 55.595176][ T5307] ? security_capable+0x98/0xd0 [ 55.612591][ T5313] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.614226][ T5307] hci_sock_ioctl+0x4f3/0x880 [ 55.615072][ T4638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.622709][ T5313] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.624171][ T5307] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 55.627831][ T5313] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.631727][ T5307] sock_do_ioctl+0x116/0x280 [ 55.633030][ T5313] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.635994][ T5307] ? __pfx_sock_do_ioctl+0x10/0x10 [ 55.703923][ T5307] ? ioctl_has_perm.constprop.0.isra.0+0x2f9/0x470 [ 55.706724][ T5307] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 55.709663][ T5307] sock_ioctl+0x22e/0x6c0 [ 55.711542][ T5307] ? __pfx_sock_ioctl+0x10/0x10 [ 55.713660][ T5307] ? selinux_file_ioctl+0x180/0x270 [ 55.715931][ T5307] ? selinux_file_ioctl+0xb4/0x270 [ 55.718163][ T5307] ? __pfx_sock_ioctl+0x10/0x10 [ 55.720283][ T5307] __x64_sys_ioctl+0x193/0x220 [ 55.722380][ T5307] do_syscall_64+0xcd/0x250 [ 55.724351][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.726905][ T5307] RIP: 0033:0x7f0f6ae7cc4b [ 55.728819][ T5307] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 55.736992][ T5307] RSP: 002b:00007fff19bf6dc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.740586][ T5307] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f0f6ae7cc4b [ 55.743984][ T5307] RDX: 00007fff19bf6e38 RSI: 00000000400448dd RDI: 0000000000000003 [ 55.747370][ T5307] RBP: 0000555583b0b430 R08: 0000000000000000 R09: 0000000000000000 [ 55.750865][ T5307] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 55.754277][ T5307] R13: 0000000000000000 R14: 0000000000000001 R15: 00000000fffffff1 [ 55.757699][ T5307] [ 55.759057][ T5307] [ 55.759975][ T5310] chnl_net:caif_netlink_parms(): no params data found [ 55.760121][ T5307] Allocated by task 5282: [ 55.760132][ T5307] kasan_save_stack+0x33/0x60 [ 55.766507][ T5307] kasan_save_track+0x14/0x30 [ 55.768564][ T5307] __kasan_slab_alloc+0x89/0x90 [ 55.770718][ T5307] kmem_cache_alloc_noprof+0x121/0x2f0 [ 55.773090][ T5307] skb_clone+0x190/0x3f0 [ 55.774967][ T5307] hci_cmd_work+0x66a/0x710 [ 55.776810][ T5307] process_one_work+0x9fb/0x1b60 [ 55.778555][ T5307] worker_thread+0x6c8/0xf70 [ 55.780155][ T5307] kthread+0x2c1/0x3a0 [ 55.781557][ T5307] ret_from_fork+0x45/0x80 [ 55.783132][ T5307] ret_from_fork_asm+0x1a/0x30 [ 55.784799][ T5307] [ 55.785646][ T5307] Freed by task 5282: [ 55.787015][ T5307] kasan_save_stack+0x33/0x60 [ 55.788713][ T5307] kasan_save_track+0x14/0x30 [ 55.790379][ T5307] kasan_save_free_info+0x3b/0x60 [ 55.792436][ T5307] poison_slab_object+0xf7/0x160 [ 55.794637][ T5307] __kasan_slab_free+0x32/0x50 [ 55.796760][ T5307] kmem_cache_free+0x12f/0x3a0 [ 55.798921][ T5307] kfree_skbmem+0x10e/0x200 [ 55.800938][ T5307] kfree_skb_reason+0x138/0x210 [ 55.803088][ T5307] hci_req_sync_complete+0x16c/0x270 [ 55.805391][ T5307] hci_event_packet+0x963/0x1170 [ 55.807576][ T5307] hci_rx_work+0x2c4/0x1610 [ 55.809566][ T5307] process_one_work+0x9fb/0x1b60 [ 55.811763][ T5307] worker_thread+0x6c8/0xf70 [ 55.813783][ T5307] kthread+0x2c1/0x3a0 [ 55.815422][ T5307] ret_from_fork+0x45/0x80 [ 55.817402][ T5307] ret_from_fork_asm+0x1a/0x30 [ 55.819549][ T5307] [ 55.820623][ T5307] The buggy address belongs to the object at ffff88802a2e37c0 [ 55.820623][ T5307] which belongs to the cache skbuff_head_cache of size 240 [ 55.826675][ T5307] The buggy address is located 228 bytes inside of [ 55.826675][ T5307] freed 240-byte region [ffff88802a2e37c0, ffff88802a2e38b0) [ 55.832392][ T5307] [ 55.833289][ T5307] The buggy address belongs to the physical page: [ 55.835934][ T5307] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a2e2 [ 55.839253][ T5307] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 55.842606][ T5307] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 55.845749][ T5307] page_type: 0xffffefff(slab) [ 55.847599][ T5307] raw: 00fff00000000040 ffff888019298780 dead000000000122 0000000000000000 [ 55.850465][ T5307] raw: 0000000000000000 0000000000190019 00000001ffffefff 0000000000000000 [ 55.853311][ T5307] head: 00fff00000000040 ffff888019298780 dead000000000122 0000000000000000 [ 55.856295][ T5307] head: 0000000000000000 0000000000190019 00000001ffffefff 0000000000000000 [ 55.859270][ T5307] head: 00fff00000000001 ffffea0000a8b881 ffffffffffffffff 0000000000000000 [ 55.862160][ T5307] head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 55.865020][ T5307] page dumped because: kasan: bad access detected [ 55.867189][ T5307] page_owner tracks the page as allocated [ 55.869070][ T5307] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4638, tgid 4638 (kworker/u33:1), ts 55591842303, free_ts 54978555803 [ 55.875824][ T5307] post_alloc_hook+0x2d1/0x350 [ 55.877521][ T5307] get_page_from_freelist+0x136a/0x2df0 [ 55.879375][ T5307] __alloc_pages_noprof+0x22b/0x2460 [ 55.881143][ T5307] alloc_slab_page+0x56/0x110 [ 55.882717][ T5307] new_slab+0x84/0x260 [ 55.884084][ T5307] ___slab_alloc+0xdac/0x1870 [ 55.885656][ T5307] __slab_alloc.constprop.0+0x56/0xb0 [ 55.887483][ T5307] kmem_cache_alloc_node_noprof+0xed/0x310 [ 55.889424][ T5307] __alloc_skb+0x2b1/0x380 [ 55.890935][ T5307] __hci_cmd_sync_sk+0x761/0xf80 [ 55.892525][ T5307] hci_read_voice_setting_sync+0x2c/0x160 [ 55.894417][ T5307] hci_dev_open_sync+0x1b19/0x23e0 [ 55.896083][ T5307] hci_dev_do_open+0x2a/0x90 [ 55.897625][ T5307] hci_power_on+0x132/0x610 [ 55.899138][ T5307] process_one_work+0x9fb/0x1b60 [ 55.900813][ T5307] worker_thread+0x6c8/0xf70 [ 55.902375][ T5307] page last free pid 5275 tgid 5275 stack trace: [ 55.904472][ T5307] free_unref_page+0x64a/0xe40 [ 55.906093][ T5307] vfree+0x181/0x7a0 [ 55.907415][ T5307] kcov_put+0x2a/0x40 [ 55.908761][ T5307] kcov_close+0x10/0x20 [ 55.910190][ T5307] __fput+0x408/0xbb0 [ 55.911530][ T5307] task_work_run+0x14e/0x250 [ 55.913085][ T5307] do_exit+0xa9b/0x2ba0 [ 55.914491][ T5307] do_group_exit+0xd3/0x2a0 [ 55.916017][ T5307] get_signal+0x2616/0x2710 [ 55.917543][ T5307] arch_do_signal_or_restart+0x90/0x7e0 [ 55.919416][ T5307] syscall_exit_to_user_mode+0x14a/0x2a0 [ 55.921295][ T5307] do_syscall_64+0xda/0x250 [ 55.922745][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.924734][ T5307] [ 55.925543][ T5307] Memory state around the buggy address: [ 55.927431][ T5307] ffff88802a2e3780: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 55.930088][ T5307] ffff88802a2e3800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.932729][ T5307] >ffff88802a2e3880: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 55.935391][ T5307] ^ [ 55.937091][ T5307] ffff88802a2e3900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.939774][ T5307] ffff88802a2e3980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 55.942451][ T5307] ================================================================== [ 55.946109][ T5307] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 55.948576][ T5307] CPU: 0 PID: 5307 Comm: syz-executor.1 Not tainted 6.10.0-rc1-syzkaller-00304-g83814698cf48 #0 [ 55.952029][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 55.955194][ T5307] Call Trace: [ 55.956289][ T5307] [ 55.957299][ T5307] dump_stack_lvl+0x3d/0x1f0 [ 55.958872][ T5307] panic+0x6f5/0x7a0 [ 55.960313][ T5307] ? __pfx_panic+0x10/0x10 [ 55.961896][ T5307] ? irqentry_exit+0x3b/0x90 [ 55.963466][ T5307] ? lockdep_hardirqs_on+0x7c/0x110 [ 55.965221][ T5307] ? preempt_schedule_thunk+0x1a/0x30 [ 55.967022][ T5307] ? preempt_schedule_common+0x44/0xc0 [ 55.968886][ T5307] ? check_panic_on_warn+0x1f/0xb0 [ 55.970662][ T5307] check_panic_on_warn+0xab/0xb0 [ 55.972325][ T5307] end_report+0x117/0x180 [ 55.973783][ T5307] kasan_report+0xe9/0x110 [ 55.975356][ T5307] ? kfree_skb_reason+0x36/0x210 [ 55.977006][ T5307] ? kfree_skb_reason+0x36/0x210 [ 55.978703][ T5307] kasan_check_range+0xef/0x1a0 [ 55.980341][ T5307] kfree_skb_reason+0x36/0x210 [ 55.982136][ T5307] __hci_req_sync+0x61d/0x980 [ 55.984117][ T5307] ? __pfx___hci_req_sync+0x10/0x10 [ 55.985962][ T5307] ? __mutex_lock+0x1a6/0x9c0 [ 55.987583][ T5307] ? __pfx_autoremove_wake_function+0x10/0x10 [ 55.989642][ T5307] ? hci_req_sync+0x3f/0xd0 [ 55.991228][ T5307] ? __pfx___might_resched+0x10/0x10 [ 55.993447][ T5307] hci_req_sync+0x97/0xd0 [ 55.995181][ T5307] ? __pfx_hci_scan_req+0x10/0x10 [ 55.996892][ T5307] hci_dev_cmd+0x634/0x960 [ 55.998426][ T5307] ? cap_capable+0x1cf/0x240 [ 56.000017][ T5307] ? __pfx_hci_dev_cmd+0x10/0x10 [ 56.001702][ T5307] ? security_capable+0x98/0xd0 [ 56.003345][ T5307] hci_sock_ioctl+0x4f3/0x880 [ 56.004942][ T5307] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 56.006710][ T5307] sock_do_ioctl+0x116/0x280 [ 56.008279][ T5307] ? __pfx_sock_do_ioctl+0x10/0x10 [ 56.010025][ T5307] ? ioctl_has_perm.constprop.0.isra.0+0x2f9/0x470 [ 56.012206][ T5307] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 56.014519][ T5307] sock_ioctl+0x22e/0x6c0 [ 56.016065][ T5307] ? __pfx_sock_ioctl+0x10/0x10 [ 56.017742][ T5307] ? selinux_file_ioctl+0x180/0x270 [ 56.019847][ T5307] ? selinux_file_ioctl+0xb4/0x270 [ 56.021630][ T5307] ? __pfx_sock_ioctl+0x10/0x10 [ 56.023276][ T5307] __x64_sys_ioctl+0x193/0x220 [ 56.024884][ T5307] do_syscall_64+0xcd/0x250 [ 56.026423][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.028954][ T5307] RIP: 0033:0x7f0f6ae7cc4b [ 56.030905][ T5307] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 56.039294][ T5307] RSP: 002b:00007fff19bf6dc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.042992][ T5307] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f0f6ae7cc4b [ 56.046468][ T5307] RDX: 00007fff19bf6e38 RSI: 00000000400448dd RDI: 0000000000000003 [ 56.049893][ T5307] RBP: 0000555583b0b430 R08: 0000000000000000 R09: 0000000000000000 [ 56.053333][ T5307] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 56.056375][ T5307] R13: 0000000000000000 R14: 0000000000000001 R15: 00000000fffffff1 [ 56.059071][ T5307] [ 56.060619][ T5307] Kernel Offset: disabled [ 56.062096][ T5307] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:45:53 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fdac65 RDI=ffffffff94ddd460 RBP=ffffffff94ddd420 RSP=ffffc90003d77338 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6532613230386552 R12=0000000000000000 R13=0000000000000020 R14=ffffffff84fdac00 R15=0000000000000000 RIP=ffffffff84fdac8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555583b0b480 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f44f1bffd80 CR3=000000001f630000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 409aff3976b9cc74 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000440476 0000000000440533 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000441cd8 00000000004415f5 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000449148 0000000000442156 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000440533 0000000000448e4f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000046c605 0000000000440476 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000000000b8d95f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000025547ab ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000b89123 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000025547ac ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000000000b8d965 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000025547aa ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000b89ced ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff888023d87040 RCX=1ffffffff285ac30 RDX=1ffff11004c69448 RSI=ffffffff88bdd675 RDI=ffff888023d8710c RBP=ffff88802634a240 RSP=ffffc90026ae7b20 R8 =0000000000000001 R9 =fffffbfff284d67a R10=ffffffff9426b3d7 R11=0000000000000002 R12=0000000000000cc0 R13=ffff88802634a109 R14=0000000000000000 R15=000000000000000c RIP=ffffffff88bdd6fc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f441e8b91b0 CR3=000000001b150000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000400000f Opmask02=00000000ffffbfef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 49af3f46295d7a82 f0e78f998ee577ac ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f9e3b66fbf452576 f8b55c53779150bb ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 071ee467acda3bfb f0fe9fca9ecafadd ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 664cd70012491519 59f10d3f1afc68e3 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001b40 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 57023e00f9e9fc00 000023158c000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000231600000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000231500000000 a96ea00000002315 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ccbb1200 23166c8900000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e7592bfe19f5b8b4 cf394d12aad2a98f ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ab94becfb9b50bc2 3cac7eb74f4e5fb6 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f441e97f840 00007f441e97f848 00007f441e97f840 00007f441f4db020 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4d00746f6f723d52 4553550063657865 00322e726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff816eb63e RDX=ffff8880217b8000 RSI=ffffffff816eb62c RDI=0000000000000001 RBP=0000000000000035 RSP=ffffc90003db78b0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000002 R12=0000000000000200 R13=ffff88802a54c880 R14=ffffffff8c6a19e0 R15=ffffc90003db7930 RIP=ffffffff816eb62e RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fce594a4a70 CR3=000000002a86e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000400000f Opmask02=00000000ffffbfef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44f2279d6a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44f237f840 00007f44f237f848 00007f44f237f840 00007f44f2edb020 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4d00746f6f723d52 4553550063657865 00332e726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffc90003cf7048 RCX=ffffffff90a79cff RDX=ffffffff90a79cfe RSI=ffffffff813cccbc RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90003cf6fc8 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000002 R11=0000000000000002 R12=ffffffff90a79cfa R13=ffffffff90a79cff R14=ffffffff90a79cfe R15=ffffc90003cf707d RIP=ffffffff813cccd1 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555674c1480 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f441e8f311c CR3=000000003f732000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000400000f Opmask02=00000000ffffbfef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000100 0000000000000100 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f441e879d6a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f441e97f840 00007f441e97f848 00007f441e97f840 00007f441f4db020 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4d00746f6f723d52 4553550063657865 00322e726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000