[ 43.464724][ T38] audit: type=1400 audit(1646654748.592:73): avc: denied { transition } for pid=3558 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 43.496383][ T38] audit: type=1400 audit(1646654748.602:74): avc: denied { write } for pid=3558 comm="sh" path="pipe:[3060]" dev="pipefs" ino=3060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1
[ 87.251474][ T55] cfg80211: failed to load regulatory.db
Warning: Permanently added '[localhost]:29485' (ECDSA) to the list of known hosts.
executing program
[ 167.443409][ T38] audit: type=1400 audit(1646654872.572:75): avc: denied { execute } for pid=3677 comm="sh" name="syz-executor278738894" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[ 167.467179][ T38] audit: type=1400 audit(1646654872.572:76): avc: denied { execute_no_trans } for pid=3677 comm="sh" path="/syz-executor278738894" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[ 167.491778][ T38] audit: type=1400 audit(1646654872.592:77): avc: denied { execmem } for pid=3677 comm="syz-executor278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 167.512278][ T38] audit: type=1400 audit(1646654872.592:78): avc: denied { read write } for pid=3678 comm="syz-executor278" name="raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 167.541875][ T38] audit: type=1400 audit(1646654872.592:79): avc: denied { open } for pid=3678 comm="syz-executor278" path="/dev/raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 167.571874][ T38] audit: type=1400 audit(1646654872.592:80): avc: denied { ioctl } for pid=3678 comm="syz-executor278" path="/dev/raw-gadget" dev="devtmpfs" ino=760 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 167.735751][ T5] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 167.975845][ T5] usb 5-1: Using ep0 maxpacket: 32
[ 168.096519][ T5] usb 5-1: config 0 has an invalid interface number: 254 but max is 0
[ 168.104724][ T5] usb 5-1: config 0 has no interface number 0
[ 168.111228][ T5] usb 5-1: config 0 interface 254 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 168.275933][ T5] usb 5-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice=29.3d
[ 168.286512][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 168.294688][ T5] usb 5-1: Product: syz
[ 168.299989][ T5] usb 5-1: Manufacturer: syz
[ 168.304545][ T5] usb 5-1: SerialNumber: syz
[ 168.322860][ T5] usb 5-1: config 0 descriptor??
executing program
[ 168.611372][ T5] em28xx 5-1:0.254: New device syz syz @ 480 Mbps (eb1a:e303, interface 254, class 254)
[ 168.621265][ T5] em28xx 5-1:0.254: Video interface 254 found:
[ 168.755834][ T5] em28xx 5-1:0.254: unknown em28xx chip ID (0)
[ 169.075951][ T5] em28xx 5-1:0.254: reading from i2c device at 0xa0 failed (error=-5)
[ 169.084698][ T5] em28xx 5-1:0.254: board has no eeprom
[ 169.195659][ T5] em28xx 5-1:0.254: Identified as Kaiomy TVnPC U2 (card=63)
[ 169.203030][ T5] em28xx 5-1:0.254: analog set to bulk mode.
[ 169.228951][ T1257] em28xx 5-1:0.254: Registering V4L2 extension
[ 169.238268][ T5] usb 5-1: USB disconnect, device number 2
[ 169.249440][ T5] em28xx 5-1:0.254: Disconnecting em28xx
[ 169.284050][ T1257] i2c i2c-2: Invalid 7-bit I2C address 0x00
[ 169.309210][ T1257] tuner: 2-0061: Tuner -1 found with type(s) Radio TV.
[ 169.318962][ T1257] xc2028 2-0061: creating new instance
[ 169.325360][ T1257] xc2028 2-0061: type set to XCeive xc2028/xc3028 tuner
[ 169.333513][ T1257] em28xx 5-1:0.254: Config register raw data: 0xffffffed
[ 169.341392][ T1257] em28xx 5-1:0.254: AC97 chip type couldn't be determined
[ 169.348817][ T1257] em28xx 5-1:0.254: No AC97 audio processor
[ 169.359511][ T1257] em28xx 5-1:0.254: Registered radio device as radio32
[ 169.366540][ T1257] usb 5-1: Decoder not found
[ 169.371078][ T1257] em28xx 5-1:0.254: failed to create media graph
[ 169.377470][ T1257] em28xx 5-1:0.254: V4L2 device radio32 deregistered
[ 169.386398][ T1257] em28xx 5-1:0.254: V4L2 device video71 deregistered
[ 169.394808][ T1257] xc2028 2-0061: destroying instance
[ 169.401149][ T1257] em28xx 5-1:0.254: Registering input extension
[ 169.408412][ T5] em28xx 5-1:0.254: Closing input extension
[ 169.421569][ T5] em28xx 5-1:0.254: Freeing device
[ 169.432553][ T1257] usb 5-1:0.254: Direct firmware load for xc3028-v27.fw failed with error -2
[ 169.445617][ T1257] usb 5-1:0.254: Falling back to sysfs fallback for: xc3028-v27.fw
[ 169.453617][ T1257] kobject_add_internal failed for firmware (error: -2 parent: 5-1:0.254)
[ 169.462695][ T1257] firmware xc3028-v27.fw: fw_load_sysfs_fallback: device_register failed
[ 169.472029][ T1257] ==================================================================
[ 169.479934][ T1257] BUG: KASAN: use-after-free in load_firmware_cb+0x269/0x290
[ 169.487461][ T1257] Read of size 8 at addr ffff888021b13318 by task kworker/0:2/1257
[ 169.496737][ T1257]
[ 169.500327][ T1257] CPU: 0 PID: 1257 Comm: kworker/0:2 Not tainted 5.17.0-rc7-syzkaller #0
[ 169.509397][ T1257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[ 169.519964][ T1257] Workqueue: events request_firmware_work_func
[ 169.526885][ T1257] Call Trace:
[ 169.530240][ T1257]
[ 169.533423][ T1257] dump_stack_lvl+0xcd/0x134
[ 169.539085][ T1257] print_address_description.constprop.0.cold+0x8d/0x303
[ 169.546644][ T1257] ? load_firmware_cb+0x269/0x290
[ 169.551162][ T1257] ? load_firmware_cb+0x269/0x290
[ 169.555770][ T1257] kasan_report.cold+0x83/0xdf
[ 169.560030][ T1257] ? load_firmware_cb+0x269/0x290
[ 169.564556][ T1257] ? seek_firmware.isra.0+0x610/0x610
[ 169.569381][ T1257] load_firmware_cb+0x269/0x290
[ 169.573787][ T1257] ? mark_held_locks+0x9f/0xe0
[ 169.578414][ T1257] ? asm_sysvec_call_function+0x12/0x20
[ 169.583538][ T1257] ? seek_firmware.isra.0+0x610/0x610
[ 169.588416][ T1257] ? asm_sysvec_call_function+0x12/0x20
[ 169.593436][ T1257] ? seek_firmware.isra.0+0x610/0x610
[ 169.598324][ T1257] ? seek_firmware.isra.0+0x610/0x610
[ 169.603176][ T1257] request_firmware_work_func+0x12c/0x230
[ 169.608650][ T1257] ? request_partial_firmware_into_buf+0xa0/0xa0
[ 169.614407][ T1257] process_one_work+0x9ac/0x1650
[ 169.618875][ T1257] ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 169.623688][ T1257] ? rwlock_bug.part.0+0x90/0x90
[ 169.628141][ T1257] ? _raw_spin_lock_irq+0x41/0x50
[ 169.632702][ T1257] worker_thread+0x657/0x1110
[ 169.636958][ T1257] ? process_one_work+0x1650/0x1650
[ 169.641489][ T1257] kthread+0x2e9/0x3a0
[ 169.645233][ T1257] ? kthread_complete_and_exit+0x40/0x40
[ 169.650358][ T1257] ret_from_fork+0x1f/0x30
[ 169.654425][ T1257]
[ 169.657127][ T1257]
[ 169.659220][ T1257] Allocated by task 1257:
[ 169.663088][ T1257] kasan_save_stack+0x1e/0x40
[ 169.667413][ T1257] __kasan_kmalloc+0xa6/0xd0
[ 169.671517][ T1257] kmem_cache_alloc_trace+0x1ea/0x4a0
[ 169.676373][ T1257] tuner_probe+0xa4/0x1180
[ 169.680280][ T1257] i2c_device_probe+0xa0c/0xb90
[ 169.684569][ T1257] really_probe+0x245/0xcc0
[ 169.688605][ T1257] __driver_probe_device+0x338/0x4d0
[ 169.693334][ T1257] driver_probe_device+0x4c/0x1a0
[ 169.697933][ T1257] __device_attach_driver+0x20b/0x2f0
[ 169.702780][ T1257] bus_for_each_drv+0x15f/0x1e0
[ 169.707184][ T1257] __device_attach+0x228/0x4a0
[ 169.711445][ T1257] bus_probe_device+0x1e4/0x290
[ 169.716043][ T1257] device_add+0xb83/0x1e20
[ 169.720038][ T1257] i2c_new_client_device+0x67b/0xb60
[ 169.724811][ T1257] v4l2_i2c_new_subdev_board+0xaf/0x2c0
[ 169.729831][ T1257] v4l2_i2c_new_subdev+0x102/0x170
[ 169.734455][ T1257] em28xx_v4l2_init.cold+0x9cb/0x32a7
[ 169.739363][ T1257] em28xx_init_extension+0x12f/0x1f0
[ 169.744184][ T1257] request_module_async+0x5d/0x70
[ 169.748673][ T1257] process_one_work+0x9ac/0x1650
[ 169.753122][ T1257] worker_thread+0x657/0x1110
[ 169.757422][ T1257] kthread+0x2e9/0x3a0
[ 169.761100][ T1257] ret_from_fork+0x1f/0x30
[ 169.765216][ T1257]
[ 169.767292][ T1257] Freed by task 1257:
[ 169.770842][ T1257] kasan_save_stack+0x1e/0x40
[ 169.775476][ T1257] kasan_set_track+0x21/0x30
[ 169.780306][ T1257] kasan_set_free_info+0x20/0x30
[ 169.785608][ T1257] ____kasan_slab_free+0xff/0x140
[ 169.790874][ T1257] kfree+0xf8/0x2b0
[ 169.794640][ T1257] tuner_remove+0x198/0x200
[ 169.798801][ T1257] i2c_device_remove+0x7b/0x240
[ 169.803408][ T1257] __device_release_driver+0x3bd/0x760
[ 169.809231][ T1257] device_release_driver+0x26/0x40
[ 169.814632][ T1257] bus_remove_device+0x2eb/0x5a0
[ 169.819474][ T1257] device_del+0x4f3/0xc80
[ 169.823397][ T1257] device_unregister+0x1f/0xc0
[ 169.827796][ T1257] i2c_unregister_device+0x38/0x40
[ 169.832395][ T1257] v4l2_i2c_subdev_unregister+0xa2/0xc0
[ 169.837390][ T1257] v4l2_device_unregister+0x20d/0x2e0
[ 169.842118][ T1257] em28xx_v4l2_init.cold+0xd26/0x32a7
[ 169.846895][ T1257] em28xx_init_extension+0x12f/0x1f0
[ 169.851599][ T1257] request_module_async+0x5d/0x70
[ 169.856221][ T1257] process_one_work+0x9ac/0x1650
[ 169.860398][ T1257] worker_thread+0x657/0x1110
[ 169.864334][ T1257] kthread+0x2e9/0x3a0
[ 169.867972][ T1257] ret_from_fork+0x1f/0x30
[ 169.872070][ T1257]
[ 169.874415][ T1257] The buggy address belongs to the object at ffff888021b13000
[ 169.874415][ T1257] which belongs to the cache kmalloc-2k of size 2048
[ 169.887104][ T1257] The buggy address is located 792 bytes inside of
[ 169.887104][ T1257] 2048-byte region [ffff888021b13000, ffff888021b13800)
[ 169.898795][ T1257] The buggy address belongs to the page:
[ 169.903979][ T1257] page:ffffea000086c4c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21b13
[ 169.913434][ T1257] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 169.920607][ T1257] raw: 00fff00000000200 ffffea0000615808 ffffea00007004c8 ffff888010c40800
[ 169.928263][ T1257] raw: 0000000000000000 ffff888021b13000 0000000100000001 0000000000000000
[ 169.936235][ T1257] page dumped because: kasan: bad access detected
[ 169.942045][ T1257] page_owner tracks the page as allocated
[ 169.947149][ T1257] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2420c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_COMP|__GFP_THISNODE), pid 1257, ts 169309092891, free_ts 167105668032
[ 169.963255][ T1257] get_page_from_freelist+0xa72/0x2f50
[ 169.968159][ T1257] __alloc_pages+0x1b2/0x500
[ 169.972292][ T1257] cache_grow_begin+0x75/0x390
[ 169.976586][ T1257] cache_alloc_refill+0x27f/0x380
[ 169.981083][ T1257] kmem_cache_alloc_trace+0x380/0x4a0
[ 169.985900][ T1257] tuner_probe+0xa4/0x1180
[ 169.989836][ T1257] i2c_device_probe+0xa0c/0xb90
[ 169.994209][ T1257] really_probe+0x245/0xcc0
[ 169.998325][ T1257] __driver_probe_device+0x338/0x4d0
[ 170.003060][ T1257] driver_probe_device+0x4c/0x1a0
[ 170.007660][ T1257] __device_attach_driver+0x20b/0x2f0
[ 170.012477][ T1257] bus_for_each_drv+0x15f/0x1e0
[ 170.016841][ T1257] __device_attach+0x228/0x4a0
[ 170.021097][ T1257] bus_probe_device+0x1e4/0x290
[ 170.025452][ T1257] device_add+0xb83/0x1e20
[ 170.029359][ T1257] i2c_new_client_device+0x67b/0xb60
[ 170.034105][ T1257] page last free stack trace:
[ 170.038290][ T1257] free_pcp_prepare+0x374/0x870
[ 170.042622][ T1257] free_unref_page+0x19/0x690
[ 170.046798][ T1257] __put_page+0x13d/0x1e0
[ 170.050670][ T1257] free_page_and_swap_cache+0x1f2/0x270
[ 170.055607][ T1257] tlb_remove_table_rcu+0x85/0xe0
[ 170.060085][ T1257] rcu_core+0x7b1/0x1820
[ 170.063929][ T1257] __do_softirq+0x29b/0x9c2
[ 170.067942][ T1257]
[ 170.070022][ T1257] Memory state around the buggy address:
[ 170.075206][ T1257] ffff888021b13200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 170.082799][ T1257] ffff888021b13280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 170.090739][ T1257] >ffff888021b13300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 170.098131][ T1257] ^
[ 170.102530][ T1257] ffff888021b13380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 170.109822][ T1257] ffff888021b13400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 170.116879][ T1257] ==================================================================
[ 170.124146][ T1257] Disabling lock debugging due to kernel taint
[ 170.130347][ T1257] Kernel panic - not syncing: panic_on_warn set ...
[ 170.136449][ T1257] CPU: 0 PID: 1257 Comm: kworker/0:2 Tainted: G B 5.17.0-rc7-syzkaller #0
[ 170.145510][ T1257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[ 170.153596][ T1257] Workqueue: events request_firmware_work_func
[ 170.159081][ T1257] Call Trace:
[ 170.162043][ T1257]
[ 170.164637][ T1257] dump_stack_lvl+0xcd/0x134
[ 170.168746][ T1257] panic+0x2b0/0x6dd
[ 170.172264][ T1257] ? __warn_printk+0xf3/0xf3
[ 170.176355][ T1257] ? preempt_schedule_common+0x59/0xc0
[ 170.181251][ T1257] ? load_firmware_cb+0x269/0x290
[ 170.185698][ T1257] ? preempt_schedule_thunk+0x16/0x18
[ 170.190638][ T1257] ? trace_hardirqs_on+0x38/0x1c0
[ 170.195463][ T1257] ? trace_hardirqs_on+0x51/0x1c0
[ 170.200005][ T1257] ? load_firmware_cb+0x269/0x290
[ 170.204576][ T1257] ? load_firmware_cb+0x269/0x290
[ 170.209076][ T1257] end_report.cold+0x63/0x6f
[ 170.213181][ T1257] kasan_report.cold+0x71/0xdf
[ 170.217467][ T1257] ? load_firmware_cb+0x269/0x290
[ 170.221988][ T1257] ? seek_firmware.isra.0+0x610/0x610
[ 170.226769][ T1257] load_firmware_cb+0x269/0x290
[ 170.231127][ T1257] ? mark_held_locks+0x9f/0xe0
[ 170.235525][ T1257] ? asm_sysvec_call_function+0x12/0x20
[ 170.240479][ T1257] ? seek_firmware.isra.0+0x610/0x610
[ 170.245247][ T1257] ? asm_sysvec_call_function+0x12/0x20
[ 170.250304][ T1257] ? seek_firmware.isra.0+0x610/0x610
[ 170.255142][ T1257] ? seek_firmware.isra.0+0x610/0x610
[ 170.260109][ T1257] request_firmware_work_func+0x12c/0x230
[ 170.265291][ T1257] ? request_partial_firmware_into_buf+0xa0/0xa0
[ 170.271075][ T1257] process_one_work+0x9ac/0x1650
[ 170.275827][ T1257] ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 170.280724][ T1257] ? rwlock_bug.part.0+0x90/0x90
[ 170.285188][ T1257] ? _raw_spin_lock_irq+0x41/0x50
[ 170.289731][ T1257] worker_thread+0x657/0x1110
[ 170.293997][ T1257] ? process_one_work+0x1650/0x1650
[ 170.298711][ T1257] kthread+0x2e9/0x3a0
[ 170.302353][ T1257] ? kthread_complete_and_exit+0x40/0x40
[ 170.307349][ T1257] ret_from_fork+0x1f/0x30
[ 170.311329][ T1257]
[ 170.314802][ T1257] Kernel Offset: disabled
[ 170.318569][ T1257] Rebooting in 86400 seconds..
VM DIAGNOSIS:
12:07:55 Registers:
info registers vcpu 0
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff8441fdcc RDI=ffffffff907ef2e0 RBP=ffffffff907ef2a0 RSP=ffffc900058ef658
R8 =0000000000000058 R9 =0000000000000000 R10=ffffffff8441fdbd R11=000000000000001f
R12=0000000000000000 R13=fffffbfff20fdea7 R14=fffffbfff20fde5e R15=dffffc0000000000
RIP=ffffffff8441fdf2 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802ca00000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd477e6f58 CR3=00000000190e9000 CR4=00150ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00ff00000000ff000000000000000000
XMM02=00ff000000000000000000000000ff00 XMM03=77662e3732762d383230336378206572
XMM04=746e6f6373203030353578303d646d63 XMM05=00000000000000ff0000000000000000
XMM06=666e6d63732030223535653020226d63 XMM07=323131312e38363120205b203a6c656e
XMM08=2500656c6f736e6f632f7665642f000a XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff88802ca3df20 RCX=0000000000000000 RDX=ffff88801658c040
RSI=ffffffff816c5824 RDI=0000000000000003 RBP=0000000000000003 RSP=ffffc90000df79e8
R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff816c584a R11=0000000000000000
R12=ffffed1005947be5 R13=0000000000000000 R14=ffff88802ca3df28 R15=0000000000000001
RIP=ffffffff8177e637 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802cb00000 ffffffff 00c00000
LDT=0000 0000000000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd477e36e8 CR3=000000000b88e000 CR4=00150ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f
XMM02=0000000000000000000000ff00000000 XMM03=ff00000000ff000000ff000000000000
XMM04=00000000000000000000000000000000 XMM05=000000000000000000000000000000ff
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 2
RAX=dffffc0000000000 RBX=ffff888011c15980 RCX=e28f8ec0086fcb3e RDX=1ffff11005984f17
RSI=0000000000000003 RDI=ffffffff8b5848b0 RBP=0000000000000002 RSP=ffffc90000d67ab8
R8 =0000000000000000 R9 =ffffffff8ffc9947 R10=fffffbfff1ff9328 R11=0000000000000001
R12=ffff8880119261c0 R13=ffff888017a2c350 R14=ffffc90000d67bf0 R15=ffff88802cc39cc0
RIP=ffffffff8155a38a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555555abf300 ffffffff 00c00000
GS =0000 ffff88802cc00000 ffffffff 00c00000
LDT=0000 0000000000000000 00000000 00000000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe000008f000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000555a1754c7d8 CR3=0000000018daf000 CR4=00150ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f
XMM02=0000000000000000000000ff00000000 XMM03=ff00000000ff000000ff000000000000
XMM04=00000000000000000000000000000000 XMM05=000000000000000000000000000000ff
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 3
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000001000 RDX=ffffea0000980b00
RSI=ffff888000000000 RDI=ffff88802602c000 RBP=ffffea0000980b00 RSP=ffffc90000d87890
R8 =0000160000000000 R9 =ffffea0000980b80 R10=fffff94000130166 R11=0000000000000001
R12=0000000000000001 R13=00000000002420c0 R14=0000000000000002 R15=0000000000000001
RIP=ffffffff840664f7 RFL=00010046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f93fe948840 ffffffff 00c00000
GS =0000 ffff88802cd00000 ffffffff 00c00000
LDT=0000 0000000000000000 00000000 00000000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe00000d6000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000555a17449820 CR3=000000001ccd3000 CR4=00150ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00ff000000000000ff00000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000ff00000000000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=ffff000000000000ffffffffffff0000
XMM06=ffff000000000000ffff000000000000 XMM07=00000000000000000000000000000000
XMM08=3162653d44495f524f444e45565f4449 XMM09=00000000000000000000000000000000
XMM10=2a2a2a2bd48960962a2a55b9d49c9daa XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000