bisecting cause commit starting from 6e5a03bcba44e080a6bf300194a68ce9bb1e5184 building syzkaller on 6a81331a1d4c744da9204d02ec88d558f7eea9c9 testing commit 6e5a03bcba44e080a6bf300194a68ce9bb1e5184 with gcc (GCC) 10.2.1 20210217 kernel signature: 9949ed9e63d2503d72615f18c6eecf8860122e73fd472567af8965e8164c1087 all runs: crashed: WARNING in ieee802154_del_seclevel testing release v5.11 testing commit f40ddce88593482919761f74910f42f4b84c004b with gcc (GCC) 10.2.1 20210217 kernel signature: e99cd9f143ce9d9fcac692e506c1f42fd7bad007e669bcc2d658384620d3ab58 all runs: crashed: WARNING in ieee802154_del_seclevel testing release v5.10 testing commit 2c85ebc57b3e1817b6ce1a6b703928e113a90442 with gcc (GCC) 10.2.1 20210217 kernel signature: a85323b0701dba111ac583b145ff31def09d195ee905600b53b701659a53318a all runs: crashed: WARNING in ieee802154_del_seclevel testing release v5.9 testing commit bbf5c979011a099af5dc76498918ed7df445635b with gcc (GCC) 10.2.1 20210217 kernel signature: 518fb1aeda7a24ee3d4efae5c88e23f29027cd3df6defd6a587437de3d25454c all runs: crashed: WARNING in ieee802154_del_seclevel testing release v5.8 testing commit bcf876870b95592b52519ed4aafcf9d95999bc9c with gcc (GCC) 8.4.1 20210217 kernel signature: 3fd984bc16d47748b5999bb31f87b0aa7ef3d85d1c8c75dc2d70718fb8c8fd1c all runs: crashed: WARNING in ieee802154_del_seclevel testing release v5.7 testing commit 3d77e6a8804abcc0504c904bd6e5cdf3a5cf8162 with gcc (GCC) 8.4.1 20210217 kernel signature: 3ea098051d234c6402a881adaad943a392da5cd3d368c594f1a49fd42c6aee29 all runs: crashed: WARNING in ieee802154_del_seclevel testing release v5.6 testing commit 7111951b8d4973bda27ff663f2cf18b663d15b48 with gcc (GCC) 8.4.1 20210217 kernel signature: b4075d9dcea9f7c6d6766bd389db2270bfa11bf026e4af423b09b01ea5327549 all runs: crashed: WARNING in ieee802154_del_seclevel testing release v5.5 testing commit d5226fa6dbae0569ee43ecfc08bdcd6770fc4755 with gcc (GCC) 8.4.1 20210217 kernel signature: 81c44ef761e6867be1ff2a49dde4c8255fe5d0722ba73c8f459a28b9d950fdb6 run #0: crashed: BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! run #1: OK run #2: crashed: BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! run #3: crashed: BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! run #4: OK run #5: crashed: BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! run #6: crashed: BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! run #7: crashed: BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! run #8: crashed: BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! run #9: crashed: BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! testing release v5.4 testing commit 219d54332a09e8d8741c1e1982f5eae56099de85 with gcc (GCC) 8.4.1 20210217 kernel signature: 881f8ad892b8181fe1602f9cdee9164e4e8eb24bc5d638c2331a8541ac1c71d7 run #0: crashed: WARNING in __dev_mc_add run #1: crashed: BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! run #2: crashed: BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! run #3: crashed: WARNING in __dev_mc_add run #4: crashed: BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! run #5: crashed: BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! run #6: crashed: BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! run #7: crashed: BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! run #8: crashed: BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! run #9: crashed: BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! testing release v5.3 testing commit 4d856f72c10ecb060868ed10ff1b1453943fc6c8 with gcc (GCC) 8.4.1 20210217 kernel signature: 2584b0db803a21bdf3866ef8a4b732382187f7d356ca8ff1b338563cbd71289a all runs: OK # git bisect start 219d54332a09e8d8741c1e1982f5eae56099de85 4d856f72c10ecb060868ed10ff1b1453943fc6c8 Bisecting: 7882 revisions left to test after this (roughly 13 steps) [a9f8b38a071b468276a243ea3ea5a0636e848cf2] Merge tag 'for-linus-5.4-1' of git://github.com/cminyard/linux-ipmi testing commit a9f8b38a071b468276a243ea3ea5a0636e848cf2 with gcc (GCC) 8.4.1 20210217 kernel signature: dc9d98def0e01a59b10b20e4883d235d92ca1da1925e9e1174846b13f764e4cf all runs: OK # git bisect good a9f8b38a071b468276a243ea3ea5a0636e848cf2 Bisecting: 3941 revisions left to test after this (roughly 12 steps) [0a3775e4f883912944481cf2ef36eb6383a9cc74] ocfs2: wait for recovering done after direct unlock request testing commit 0a3775e4f883912944481cf2ef36eb6383a9cc74 with gcc (GCC) 8.4.1 20210217 kernel signature: fe74209132528f953f74d4f585f47f8e88af1c86676e3a0623caab1fabccbb57 all runs: OK # git bisect good 0a3775e4f883912944481cf2ef36eb6383a9cc74 Bisecting: 1972 revisions left to test after this (roughly 11 steps) [63f9bff56beb718ac0a2eb8398a98220b1e119dc] Merge tag 'mips_fixes_5.4_2' of git://git.kernel.org/pub/scm/linux/kernel/git/mips/linux testing commit 63f9bff56beb718ac0a2eb8398a98220b1e119dc with gcc (GCC) 8.4.1 20210217 kernel signature: 42c9ce294b3970be0193981a190593650d765bf764379a12777579bc7cd9770d run #0: crashed: general protection fault in batadv_iv_ogm_queue_add run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK reproducer seems to be flaky # git bisect bad 63f9bff56beb718ac0a2eb8398a98220b1e119dc Bisecting: 978 revisions left to test after this (roughly 10 steps) [7bccb9f10c8f36ee791769b531ed4d28f6379aae] Merge tag 'linux-watchdog-5.4-rc1' of git://www.linux-watchdog.org/linux-watchdog testing commit 7bccb9f10c8f36ee791769b531ed4d28f6379aae with gcc (GCC) 8.4.1 20210217 kernel signature: b40d641996cac0db6aef1a9e662f1dcc2db490fa4dd6849dad56c9a224eb4156 run #0: crashed: general protection fault in batadv_iv_ogm_queue_add run #1: crashed: general protection fault in batadv_iv_ogm_queue_add run #2: crashed: general protection fault in batadv_iv_ogm_queue_add run #3: crashed: general protection fault in batadv_iv_ogm_queue_add run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 7bccb9f10c8f36ee791769b531ed4d28f6379aae Bisecting: 483 revisions left to test after this (roughly 9 steps) [351c8a09b00b5c51c8f58b016fffe51f87e2d820] Merge branch 'i2c/for-5.4' of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux testing commit 351c8a09b00b5c51c8f58b016fffe51f87e2d820 with gcc (GCC) 8.4.1 20210217 kernel signature: a90f889a985e6c1338c6c4d1bebfd1bcd63bda99a2818ca17f7d4e50e7c0a311 run #0: crashed: general protection fault in batadv_iv_ogm_queue_add run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 351c8a09b00b5c51c8f58b016fffe51f87e2d820 Bisecting: 248 revisions left to test after this (roughly 8 steps) [4c07e2ddab5b6b57dbcb09aedbda1f484d5940cc] Merge tag 'mfd-next-5.4' of git://git.kernel.org/pub/scm/linux/kernel/git/lee/mfd testing commit 4c07e2ddab5b6b57dbcb09aedbda1f484d5940cc with gcc (GCC) 8.4.1 20210217 kernel signature: e47562204b923d8e5702d59fe2097229016327c919d0fd656783679d65ce2f39 run #0: crashed: general protection fault in batadv_iv_ogm_queue_add run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 4c07e2ddab5b6b57dbcb09aedbda1f484d5940cc Bisecting: 129 revisions left to test after this (roughly 7 steps) [cdc7e184abb338dfe24624e90b09d366f0dcfad5] Merge branch 'remotes/lorenzo/pci/vmd' testing commit cdc7e184abb338dfe24624e90b09d366f0dcfad5 with gcc (GCC) 8.4.1 20210217 kernel signature: fb77df29441c2e3a6131039f682f70b030f30d480b5eee73c208e3d0d51aae12 all runs: boot failed: general protection fault in dma_direct_max_mapping_size # git bisect skip cdc7e184abb338dfe24624e90b09d366f0dcfad5 Bisecting: 129 revisions left to test after this (roughly 7 steps) [e406b832d89d63b9eb525fa8fea18eb7a1598c60] mfd: da9063: Remove now unused platform_data testing commit e406b832d89d63b9eb525fa8fea18eb7a1598c60 with gcc (GCC) 8.4.1 20210217 kernel signature: ffe313cf614736eb3fc69d38f022a27b9c7fa7abf05dbf257fde787071173722 all runs: boot failed: general protection fault in dma_direct_max_mapping_size # git bisect skip e406b832d89d63b9eb525fa8fea18eb7a1598c60 Bisecting: 129 revisions left to test after this (roughly 7 steps) [3efa7f1febe60531c0b5f0397c3e87cfa48591f7] Merge branch 'lorenzo/pci/tegra' testing commit 3efa7f1febe60531c0b5f0397c3e87cfa48591f7 with gcc (GCC) 8.4.1 20210217 kernel signature: fb77df29441c2e3a6131039f682f70b030f30d480b5eee73c208e3d0d51aae12 all runs: boot failed: general protection fault in dma_direct_max_mapping_size # git bisect skip 3efa7f1febe60531c0b5f0397c3e87cfa48591f7 Bisecting: 129 revisions left to test after this (roughly 7 steps) [7b31a72e7195aebd620d504f28b97ad8398e95ec] dt-bindings: Add PCIe supports-clkreq property testing commit 7b31a72e7195aebd620d504f28b97ad8398e95ec with gcc (GCC) 8.4.1 20210217 kernel signature: 5ed6d2a833abe2fddc945d4b606df301f54afe83e6cf7f9acd75d9d6dcc66a07 all runs: boot failed: general protection fault in dma_direct_max_mapping_size # git bisect skip 7b31a72e7195aebd620d504f28b97ad8398e95ec Bisecting: 129 revisions left to test after this (roughly 7 steps) [c5048a73b4770304699cb15e3ffcb97acab685f7] Merge branch 'pci/trivial' testing commit c5048a73b4770304699cb15e3ffcb97acab685f7 with gcc (GCC) 8.4.1 20210217 kernel signature: fb77df29441c2e3a6131039f682f70b030f30d480b5eee73c208e3d0d51aae12 all runs: boot failed: general protection fault in dma_direct_max_mapping_size # git bisect skip c5048a73b4770304699cb15e3ffcb97acab685f7 Bisecting: 129 revisions left to test after this (roughly 7 steps) [7147935a0cf693e86daeaa68811f150140ece024] Merge branch 'for-5.4/cleanup' into for-linus testing commit 7147935a0cf693e86daeaa68811f150140ece024 with gcc (GCC) 8.4.1 20210217 kernel signature: afdb0a185be0f4809ba05e52594776a1246a91a723c7750313c6c500eb3c2764 run #0: crashed: KASAN: use-after-free Read in batadv_tvlv_container_ogm_append run #1: crashed: general protection fault in batadv_iv_ogm_queue_add run #2: crashed: general protection fault in batadv_iv_ogm_queue_add run #3: crashed: general protection fault in batadv_iv_ogm_queue_add run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 7147935a0cf693e86daeaa68811f150140ece024 Bisecting: 5 revisions left to test after this (roughly 3 steps) [2bcdacb70327013ca2066bfcf2af1009eff01f1d] HID: sony: Fix memory corruption issue on cleanup. testing commit 2bcdacb70327013ca2066bfcf2af1009eff01f1d with gcc (GCC) 8.4.1 20210217 kernel signature: 0ec8a7729c43915f9f796826166cd7bd550905eab8ea65be0a3d84b32656d975 run #0: crashed: general protection fault in batadv_iv_ogm_queue_add run #1: crashed: general protection fault in batadv_iv_ogm_queue_add run #2: crashed: general protection fault in batadv_iv_ogm_queue_add run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 2bcdacb70327013ca2066bfcf2af1009eff01f1d Bisecting: 2 revisions left to test after this (roughly 1 step) [5f9242775bb61f390f0885f23fc16397262c7538] HID: logitech: Fix general protection fault caused by Logitech driver testing commit 5f9242775bb61f390f0885f23fc16397262c7538 with gcc (GCC) 8.4.1 20210217 kernel signature: c6ef7b591191d8a63f6bad2b36bd82d5a93072ca4a1dc580d0efb4ce1475e386 run #0: crashed: KASAN: use-after-free Read in batadv_iv_ogm_queue_add run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: crashed: general protection fault in batadv_iv_ogm_queue_add run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 5f9242775bb61f390f0885f23fc16397262c7538 Bisecting: 0 revisions left to test after this (roughly 0 steps) [416dacb819f59180e4d86a5550052033ebb6d72c] HID: hidraw: Fix invalid read in hidraw_ioctl testing commit 416dacb819f59180e4d86a5550052033ebb6d72c with gcc (GCC) 8.4.1 20210217 kernel signature: 94f8c2c5171705bcec0af6fcf9b92efe7cf76f8a1bf237e7b1d342b86d90f619 run #0: crashed: general protection fault in batadv_iv_ogm_queue_add run #1: crashed: general protection fault in batadv_iv_ogm_queue_add run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 416dacb819f59180e4d86a5550052033ebb6d72c 416dacb819f59180e4d86a5550052033ebb6d72c is the first bad commit commit 416dacb819f59180e4d86a5550052033ebb6d72c Author: Alan Stern Date: Wed Aug 21 13:27:12 2019 -0400 HID: hidraw: Fix invalid read in hidraw_ioctl The syzbot fuzzer has reported a pair of problems in the hidraw_ioctl() function: slab-out-of-bounds read and use-after-free read. An example of the first: BUG: KASAN: slab-out-of-bounds in strlen+0x79/0x90 lib/string.c:525 Read of size 1 at addr ffff8881c8035f38 by task syz-executor.4/2833 CPU: 1 PID: 2833 Comm: syz-executor.4 Not tainted 5.3.0-rc2+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xca/0x13e lib/dump_stack.c:113 print_address_description+0x6a/0x32c mm/kasan/report.c:351 __kasan_report.cold+0x1a/0x33 mm/kasan/report.c:482 kasan_report+0xe/0x12 mm/kasan/common.c:612 strlen+0x79/0x90 lib/string.c:525 strlen include/linux/string.h:281 [inline] hidraw_ioctl+0x245/0xae0 drivers/hid/hidraw.c:446 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:509 [inline] do_vfs_ioctl+0xd2d/0x1330 fs/ioctl.c:696 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:713 __do_sys_ioctl fs/ioctl.c:720 [inline] __se_sys_ioctl fs/ioctl.c:718 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:718 do_syscall_64+0xb7/0x580 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x459829 Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f7a68f6dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 RDX: 0000000000000000 RSI: 0000000080404805 RDI: 0000000000000004 RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7a68f6e6d4 R13: 00000000004c21de R14: 00000000004d5620 R15: 00000000ffffffff The two problems have the same cause: hidraw_ioctl() fails to test whether the device has been removed. This patch adds the missing test. Reported-and-tested-by: syzbot+5a6c4ec678a0c6ee84ba@syzkaller.appspotmail.com Signed-off-by: Alan Stern CC: Signed-off-by: Jiri Kosina drivers/hid/hidraw.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) parent commit fcf887e7caaa813eea821d11bf2b7619a37df37a wasn't tested testing commit fcf887e7caaa813eea821d11bf2b7619a37df37a with gcc (GCC) 8.4.1 20210217 kernel signature: 8f1572aa134ce531a1446a9877ee4a54f2b1021eca2223d62baba9723d04dc4e culprit signature: 94f8c2c5171705bcec0af6fcf9b92efe7cf76f8a1bf237e7b1d342b86d90f619 parent signature: 8f1572aa134ce531a1446a9877ee4a54f2b1021eca2223d62baba9723d04dc4e Reproducer flagged being flaky revisions tested: 25, total time: 6h34m7.794895007s (build: 3h10m27.645974366s, test: 3h20m5.305743147s) first bad commit: 416dacb819f59180e4d86a5550052033ebb6d72c HID: hidraw: Fix invalid read in hidraw_ioctl recipients (to): ["jkosina@suse.cz" "stern@rowland.harvard.edu" "syzbot+5a6c4ec678a0c6ee84ba@syzkaller.appspotmail.com"] recipients (cc): [] crash: general protection fault in batadv_iv_ogm_queue_add kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 9761 Comm: kworker/u4:5 Not tainted 5.3.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet RIP: 0010:batadv_iv_ogm_queue_add+0x9b/0xec0 net/batman-adv/bat_iv_ogm.c:599 Code: 44 89 8d 64 ff ff ff c7 02 f1 f1 f1 f1 c7 42 04 04 f2 f2 f2 48 89 fa 65 48 8b 0c 25 28 00 00 00 48 89 4d d0 31 c9 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 cb 0b 00 00 RSP: 0018:ffff8880a469fac0 EFLAGS: 00010246 RAX: dffffc0000000000 RBX: ffff88808b774f00 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: ffff8880a469fbd8 R08: ffff88808b774f00 R09: 0000000000000001 R10: ffffed10148d3f8f R11: 0000000000000003 R12: ffff88808b774f00 R13: dffffc0000000000 R14: ffff8880a84f8b40 R15: 000000000000003c FS: 0000000000000000(0000) GS:ffff8880ba300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055b95419a398 CR3: 00000000ab544000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: batadv_iv_ogm_schedule+0xb47/0xe80 net/batman-adv/bat_iv_ogm.c:807 batadv_iv_send_outstanding_bat_ogm_packet+0x54c/0x780 net/batman-adv/bat_iv_ogm.c:1669 process_one_work+0x7d2/0x1560 kernel/workqueue.c:2269 worker_thread+0x85/0xb60 kernel/workqueue.c:2415 kthread+0x331/0x3f0 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Modules linked in: ---[ end trace 9b0c06b33e623e68 ]--- RIP: 0010:batadv_iv_ogm_queue_add+0x9b/0xec0 net/batman-adv/bat_iv_ogm.c:599 Code: 44 89 8d 64 ff ff ff c7 02 f1 f1 f1 f1 c7 42 04 04 f2 f2 f2 48 89 fa 65 48 8b 0c 25 28 00 00 00 48 89 4d d0 31 c9 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 cb 0b 00 00 RSP: 0018:ffff8880a469fac0 EFLAGS: 00010246 RAX: dffffc0000000000 RBX: ffff88808b774f00 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: ffff8880a469fbd8 R08: ffff88808b774f00 R09: 0000000000000001 R10: ffffed10148d3f8f R11: 0000000000000003 R12: ffff88808b774f00 R13: dffffc0000000000 R14: ffff8880a84f8b40 R15: 000000000000003c FS: 0000000000000000(0000) GS:ffff8880ba300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000540114 CR3: 00000000b09c1000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400