[ 38.199144][ T39] audit: type=1400 audit(1740679252.242:81): avc: denied { rlimitinh } for pid=5916 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.206456][ T39] audit: type=1400 audit(1740679252.242:82): avc: denied { siginh } for pid=5916 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.635853][ T39] audit: type=1400 audit(1740679259.692:83): avc: denied { read } for pid=5339 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 45.642409][ T39] audit: type=1400 audit(1740679259.692:84): avc: denied { append } for pid=5339 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.648835][ T39] audit: type=1400 audit(1740679259.692:85): avc: denied { open } for pid=5339 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.657142][ T39] audit: type=1400 audit(1740679259.692:86): avc: denied { getattr } for pid=5339 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:7961' (ED25519) to the list of known hosts. [ 48.028264][ T39] audit: type=1400 audit(1740679262.082:87): avc: denied { execute } for pid=5937 comm="sh" name="syz-executor224185998" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.035198][ T39] audit: type=1400 audit(1740679262.092:88): avc: denied { execute_no_trans } for pid=5937 comm="sh" path="/syz-executor224185998" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.043023][ T39] audit: type=1400 audit(1740679262.092:89): avc: denied { execmem } for pid=5937 comm="syz-executor224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.048690][ T39] audit: type=1400 audit(1740679262.092:90): avc: denied { create } for pid=5937 comm="syz-executor224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.057678][ T39] audit: type=1400 audit(1740679262.092:91): avc: denied { write } for pid=5937 comm="syz-executor224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.063430][ T39] audit: type=1400 audit(1740679262.092:92): avc: denied { read } for pid=5937 comm="syz-executor224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.085994][ T5959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.087194][ T5960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.088731][ T5959] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.090589][ T5960] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.093641][ T5959] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.095358][ T5960] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.096888][ T5961] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.097448][ T5962] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.097957][ T5962] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.098079][ T5962] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.099256][ T5962] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.099409][ T5960] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.099909][ T5963] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.100489][ T5963] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.100554][ T5959] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 48.100854][ T5959] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.101094][ T5959] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 48.101301][ T5959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.102853][ T5961] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.106853][ T5958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.109812][ T5961] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 48.111835][ T5962] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 48.117329][ T5958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.119122][ T5962] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 executing program executing program executing program executing program executing program [ 48.220562][ T5962] BUG: sleeping function called from invalid context at net/core/sock.c:3647 [ 48.222094][ T5958] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.223700][ T5962] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5962, name: kworker/u33:7 executing program executing program [ 48.223885][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection executing program [ 48.231475][ T5958] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.232509][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.233590][ T5962] preempt_count: 1, expected: 0 [ 48.241140][ T5962] RCU nest depth: 0, expected: 0 [ 48.242611][ T5962] 5 locks held by kworker/u33:7/5962: executing program executing program [ 48.244166][ T5962] #0: ffff8881061f3148 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 executing program [ 48.244260][ T5958] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.244338][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection executing program [ 48.248603][ T5962] #1: ffffc90003857d18 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 executing program [ 48.257636][ T5958] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection executing program [ 48.258340][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection executing program [ 48.259484][ T5962] #2: ffff888028f80078 (&hdev->lock){+.+.}-{4:4}, at: hci_sync_conn_complete_evt+0x199/0xa80 executing program [ 48.268846][ T5958] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.272409][ T5962] #3: ffff888020522a20 (&conn->lock#3){+.+.}-{3:3}, at: sco_connect_cfm+0x29f/0xc00 executing program [ 48.274902][ T5958] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection executing program [ 48.275726][ T5962] #4: executing program [ 48.279416][ T5958] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.281377][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.283725][ T5962] ffff888035e01258 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_connect_cfm+0x3bc/0xc00 executing program executing program [ 48.290883][ T5962] Preemption disabled at: [ 48.290889][ T5962] [<0000000000000000>] 0x0 executing program [ 48.291164][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.292505][ T5962] CPU: 1 UID: 0 PID: 5962 Comm: kworker/u33:7 Not tainted 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 48.292521][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.292527][ T5962] Workqueue: hci0 hci_rx_work [ 48.292544][ T5962] Call Trace: [ 48.292547][ T5962] <TASK> executing program executing program [ 48.292551][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 48.292565][ T5962] __might_resched+0x3c0/0x5e0 [ 48.292580][ T5962] ? __pfx_lock_release+0x10/0x10 [ 48.292595][ T5962] ? __pfx___might_resched+0x10/0x10 [ 48.292610][ T5962] ? lock_acquire+0x2f/0xb0 [ 48.292623][ T5962] ? sco_connect_cfm+0x3bc/0xc00 [ 48.292637][ T5962] lock_sock_nested+0x4b/0xf0 [ 48.292651][ T5962] ? sco_connect_cfm+0x3bc/0xc00 [ 48.292664][ T5962] sco_connect_cfm+0x3bc/0xc00 [ 48.292678][ T5962] ? __pfx_sco_connect_cfm+0x10/0x10 [ 48.292692][ T5962] ? hci_cb_lookup+0x319/0x4e0 [ 48.292713][ T5962] ? __pfx_sco_connect_cfm+0x10/0x10 [ 48.292730][ T5962] hci_sync_conn_complete_evt+0x421/0xa80 [ 48.292749][ T5962] ? __pfx_hci_sync_conn_complete_evt+0x10/0x10 [ 48.292768][ T5962] ? skb_pull_data+0x166/0x210 [ 48.292789][ T5962] hci_event_packet+0x9eb/0x1180 [ 48.292810][ T5962] ? __pfx_hci_sync_conn_complete_evt+0x10/0x10 [ 48.292828][ T5962] ? __pfx_hci_event_packet+0x10/0x10 [ 48.292842][ T5962] ? mark_held_locks+0x9f/0xe0 [ 48.292856][ T5962] ? kcov_remote_start+0x3cf/0x6e0 [ 48.292871][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.292886][ T5962] hci_rx_work+0x2c5/0x16b0 [ 48.292901][ T5962] ? process_one_work+0x921/0x1ba0 [ 48.292917][ T5962] process_one_work+0x9c5/0x1ba0 [ 48.292934][ T5962] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 48.292948][ T5962] ? __pfx_process_one_work+0x10/0x10 [ 48.292965][ T5962] ? assign_work+0x1a0/0x250 [ 48.292979][ T5962] worker_thread+0x6c8/0xf00 [ 48.292995][ T5962] ? __kthread_parkme+0x148/0x220 [ 48.293006][ T5962] ? __pfx_worker_thread+0x10/0x10 [ 48.293020][ T5962] kthread+0x3af/0x750 [ 48.293032][ T5962] ? __pfx_kthread+0x10/0x10 [ 48.293043][ T5962] ? lock_acquire+0x2f/0xb0 [ 48.293059][ T5962] ? __pfx_kthread+0x10/0x10 [ 48.293071][ T5962] ret_from_fork+0x45/0x80 [ 48.293084][ T5962] ? __pfx_kthread+0x10/0x10 [ 48.293096][ T5962] ret_from_fork_asm+0x1a/0x30 [ 48.293114][ T5962] </TASK> [ 48.293119][ T5962] ================================================================== [ 48.296860][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.297079][ T5962] BUG: KASAN: slab-use-after-free in __lock_acquire+0x2d90/0x3c40 [ 48.307894][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.308198][ T5962] Read of size 8 at addr ffff888035e011d8 by task kworker/u33:7/5962 [ 48.311233][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.311377][ T5962] [ 48.311385][ T5962] CPU: 1 UID: 0 PID: 5962 Comm: kworker/u33:7 Tainted: G W 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 48.311399][ T5962] Tainted: [W]=WARN [ 48.311402][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.311409][ T5962] Workqueue: hci0 hci_rx_work [ 48.311426][ T5962] Call Trace: [ 48.311430][ T5962] <TASK> [ 48.311433][ T5962] dump_stack_lvl+0x116/0x1f0 [ 48.311446][ T5962] print_report+0xc3/0x670 [ 48.311458][ T5962] ? __virt_addr_valid+0x5e/0x590 [ 48.311468][ T5962] ? __phys_addr+0xc6/0x150 [ 48.311477][ T5962] kasan_report+0xd9/0x110 [ 48.311487][ T5962] ? __lock_acquire+0x2d90/0x3c40 [ 48.311501][ T5962] ? __lock_acquire+0x2d90/0x3c40 [ 48.311516][ T5962] __lock_acquire+0x2d90/0x3c40 [ 48.311529][ T5962] ? lock_acquire+0x2f/0xb0 [ 48.311543][ T5962] ? is_bpf_text_address+0x30/0x1a0 [ 48.311564][ T5962] ? __pfx_mark_lock+0x10/0x10 [ 48.311586][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 48.311606][ T5962] ? show_trace_log_lvl+0x29d/0x3d0 [ 48.311629][ T5962] lock_acquire.part.0+0x11b/0x380 [ 48.311648][ T5962] ? lock_sock_nested+0x5f/0xf0 [ 48.311664][ T5962] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 48.311678][ T5962] ? rcu_is_watching+0x12/0xc0 [ 48.311688][ T5962] ? trace_lock_acquire+0x14e/0x1f0 [ 48.311699][ T5962] ? __might_resched+0x3cc/0x5e0 [ 48.311714][ T5962] ? lock_sock_nested+0x5f/0xf0 [ 48.311727][ T5962] ? lock_acquire+0x2f/0xb0 [ 48.311739][ T5962] ? lock_sock_nested+0x5f/0xf0 [ 48.311752][ T5962] _raw_spin_lock_bh+0x33/0x40 [ 48.311762][ T5962] ? lock_sock_nested+0x5f/0xf0 [ 48.311774][ T5962] lock_sock_nested+0x5f/0xf0 [ 48.311787][ T5962] ? sco_connect_cfm+0x3bc/0xc00 [ 48.311800][ T5962] sco_connect_cfm+0x3bc/0xc00 [ 48.311813][ T5962] ? __pfx_sco_connect_cfm+0x10/0x10 [ 48.311826][ T5962] ? hci_cb_lookup+0x319/0x4e0 [ 48.311841][ T5962] ? __pfx_sco_connect_cfm+0x10/0x10 [ 48.311853][ T5962] hci_sync_conn_complete_evt+0x421/0xa80 [ 48.311865][ T5962] ? __pfx_hci_sync_conn_complete_evt+0x10/0x10 [ 48.311876][ T5962] ? skb_pull_data+0x166/0x210 [ 48.311888][ T5962] hci_event_packet+0x9eb/0x1180 [ 48.311902][ T5962] ? __pfx_hci_sync_conn_complete_evt+0x10/0x10 [ 48.311913][ T5962] ? __pfx_hci_event_packet+0x10/0x10 [ 48.311926][ T5962] ? mark_held_locks+0x9f/0xe0 [ 48.311939][ T5962] ? kcov_remote_start+0x3cf/0x6e0 [ 48.311954][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.311966][ T5962] hci_rx_work+0x2c5/0x16b0 [ 48.311980][ T5962] ? process_one_work+0x921/0x1ba0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 48.311994][ T5962] process_one_work+0x9c5/0x1ba0 [ 48.312008][ T5962] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 48.312022][ T5962] ? __pfx_process_one_work+0x10/0x10 [ 48.312036][ T5962] ? assign_work+0x1a0/0x250 [ 48.312048][ T5962] worker_thread+0x6c8/0xf00 [ 48.312061][ T5962] ? __kthread_parkme+0x148/0x220 [ 48.312071][ T5962] ? __pfx_worker_thread+0x10/0x10 [ 48.312084][ T5962] kthread+0x3af/0x750 [ 48.312096][ T5962] ? __pfx_kthread+0x10/0x10 [ 48.312107][ T5962] ? lock_acquire+0x2f/0xb0 [ 48.312121][ T5962] ? __pfx_kthread+0x10/0x10 [ 48.312137][ T5962] ret_from_fork+0x45/0x80 [ 48.312149][ T5962] ? __pfx_kthread+0x10/0x10 [ 48.312161][ T5962] ret_from_fork_asm+0x1a/0x30 [ 48.312174][ T5962] </TASK> [ 48.312177][ T5962] [ 48.354966][ T5958] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.355296][ T5962] Allocated by task 5974: [ 48.357244][ T5958] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.358527][ T5962] kasan_save_stack+0x33/0x60 [ 48.360929][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.362425][ T5962] kasan_save_track+0x14/0x30 [ 48.363876][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.365710][ T5962] __kasan_kmalloc+0xaa/0xb0 [ 48.365728][ T5962] __kmalloc_noprof+0x21c/0x510 [ 48.365742][ T5962] sk_prot_alloc+0x1a8/0x2a0 [ 48.365757][ T5962] sk_alloc+0x36/0xb90 [ 48.383287][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.383417][ T5962] bt_sock_alloc+0x3b/0x3a0 [ 48.385224][ T5958] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.401836][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.402622][ T5962] sco_sock_create+0xe3/0x3c0 [ 48.405740][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.406994][ T5962] bt_sock_create+0x182/0x350 [ 48.434411][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.435384][ T5962] __sock_create+0x335/0x8d0 [ 48.435400][ T5962] __sys_socket+0x14f/0x260 [ 48.435409][ T5962] __x64_sys_socket+0x72/0xb0 [ 48.435419][ T5962] do_syscall_64+0xcd/0x250 [ 48.438905][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.439568][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.440508][ T5958] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.456010][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.457095][ T5962] [ 48.457100][ T5962] Freed by task 5974: [ 48.457851][ T5958] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.467333][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.467420][ T5962] kasan_save_stack+0x33/0x60 [ 48.469319][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.470565][ T5962] kasan_save_track+0x14/0x30 [ 48.506944][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.507628][ T5962] kasan_save_free_info+0x3b/0x60 [ 48.509712][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.510254][ T5962] __kasan_slab_free+0x51/0x70 [ 48.548776][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.548868][ T5962] kfree+0x2c4/0x4d0 [ 48.554015][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.555158][ T5962] __sk_destruct+0x5eb/0x720 [ 48.555181][ T5962] sk_destruct+0xc2/0xf0 [ 48.555198][ T5962] __sk_free+0xf4/0x3e0 [ 48.558941][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.559971][ T5962] sk_free+0x6a/0x90 [ 48.572903][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.573075][ T5962] sco_sock_kill+0x11a/0x1c0 [ 48.580121][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.581379][ T5962] sco_sock_release+0x154/0x2d0 [ 48.587475][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.588518][ T5962] __sock_release+0xb0/0x270 [ 48.588536][ T5962] sock_close+0x1c/0x30 [ 48.595109][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.596566][ T5962] __fput+0x3ff/0xb70 [ 48.599979][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.600567][ T5962] __fput_sync+0xa1/0xc0 [ 48.607430][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.608190][ T5962] __x64_sys_close+0x86/0x100 [ 48.612821][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.613839][ T5962] do_syscall_64+0xcd/0x250 [ 48.618793][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.620572][ T5962] [ 48.620605][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.621319][ T5962] The buggy address belongs to the object at ffff888035e01000 [ 48.621319][ T5962] which belongs to the cache kmalloc-2k of size 2048 [ 48.625421][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.628117][ T5962] The buggy address is located 472 bytes inside of [ 48.628117][ T5962] freed 2048-byte region [ffff888035e01000, ffff888035e01800) [ 48.633204][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.634722][ T5962] [ 48.634727][ T5962] The buggy address belongs to the physical page: [ 48.634731][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35e00 [ 48.637020][ T5958] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.645248][ T5962] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 48.645338][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.647638][ T5962] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 48.649053][ T5958] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.655759][ T5962] page_type: f5(slab) [ 48.656961][ T5962] raw: 00fff00000000040 ffff88801b042f00 dead000000000122 0000000000000000 [ 48.657738][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.659342][ T5962] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 48.661666][ T5958] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.667580][ T5962] head: 00fff00000000040 ffff88801b042f00 dead000000000122 0000000000000000 [ 48.669931][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.670055][ T5962] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 48.673523][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.675398][ T5962] head: 00fff00000000003 ffffea0000d78001 ffffffffffffffff 0000000000000000 [ 48.675407][ T5962] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 48.675412][ T5962] page dumped because: kasan: bad access detected [ 48.675417][ T5962] page_owner tracks the page as allocated [ 48.675420][ T5962] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5946, tgid 5946 (syz-executor224), ts 48216170535, free_ts 22936549757 [ 48.675438][ T5962] post_alloc_hook+0x181/0x1b0 [ 48.681134][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.683190][ T5962] get_page_from_freelist+0xfce/0x2f80 [ 48.684445][ T5958] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.692228][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.692332][ T5962] __alloc_frozen_pages_noprof+0x221/0x2470 [ 48.695846][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.696362][ T5962] alloc_pages_mpol+0x1fc/0x540 [ 48.703829][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.704712][ T5962] new_slab+0x23d/0x330 [ 48.709056][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.711181][ T5962] ___slab_alloc+0xc5d/0x1720 [ 48.715964][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.716367][ T5962] __slab_alloc.constprop.0+0x56/0xb0 [ 48.720405][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.720437][ T5962] __kmalloc_node_track_caller_noprof+0x2f1/0x510 [ 48.724897][ T5962] kmalloc_reserve+0xef/0x2c0 [ 48.726280][ T5962] __alloc_skb+0x164/0x380 [ 48.727469][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.727743][ T5962] inet6_ifinfo_notify+0x77/0x150 [ 48.731729][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.734243][ T5962] addrconf_notify+0x81a/0x19c0 [ 48.735670][ T5962] notifier_call_chain+0xb7/0x410 [ 48.737144][ T5962] call_netdevice_notifiers_info+0xbe/0x140 [ 48.738886][ T5962] __dev_notify_flags+0x12d/0x2e0 [ 48.738891][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.738899][ T5962] dev_change_flags+0x10c/0x160 [ 48.743395][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.744287][ T5962] page last free pid 5636 tgid 5636 stack trace: [ 48.748668][ T5962] free_frozen_pages+0x6db/0xfb0 [ 48.750096][ T5962] __put_partials+0x14c/0x170 [ 48.751242][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.751774][ T5962] qlist_free_all+0x4e/0x120 [ 48.754442][ T5958] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.759323][ T5962] kasan_quarantine_reduce+0x195/0x1e0 [ 48.761205][ T5962] __kasan_slab_alloc+0x69/0x90 [ 48.762993][ T5962] __kmalloc_noprof+0x1cd/0x510 [ 48.763744][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.764774][ T5962] tomoyo_supervisor+0x46c/0x1380 [ 48.764790][ T5962] tomoyo_env_perm+0x193/0x210 [ 48.764804][ T5962] tomoyo_find_next_domain+0xed4/0x20c0 [ 48.764819][ T5962] tomoyo_bprm_check_security+0x12e/0x1d0 [ 48.764828][ T5962] security_bprm_check+0x1b9/0x1e0 [ 48.769783][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.770747][ T5962] bprm_execve+0x832/0x16d0 [ 48.770763][ T5962] do_execveat_common.isra.0+0x4a2/0x610 [ 48.770778][ T5962] __x64_sys_execve+0x8c/0xb0 [ 48.776450][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.778282][ T5962] do_syscall_64+0xcd/0x250 [ 48.781215][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 48.781452][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.787762][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.789714][ T5962] [ 48.789718][ T5962] Memory state around the buggy address: [ 48.789724][ T5962] ffff888035e01080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.793235][ T5298] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.794401][ T5962] ffff888035e01100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.801568][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.803617][ T5962] >ffff888035e01180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.803624][ T5962] ^ [ 48.805546][ T5958] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.812818][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.813428][ T5962] ffff888035e01200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.813436][ T5962] ffff888035e01280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.815824][ T5958] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.823528][ T5962] ================================================================== [ 48.823884][ T5298] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 48.825794][ T5962] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 48.825803][ T5962] CPU: 1 UID: 0 PID: 5962 Comm: kworker/u33:7 Tainted: G W 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 48.825817][ T5962] Tainted: [W]=WARN [ 48.825821][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.825828][ T5962] Workqueue: hci0 hci_rx_work [ 48.825846][ T5962] Call Trace: [ 48.825850][ T5962] <TASK> [ 48.825854][ T5962] dump_stack_lvl+0x3d/0x1f0 [ 48.825867][ T5962] panic+0x71d/0x800 [ 48.825878][ T5962] ? __pfx_panic+0x10/0x10 [ 48.825889][ T5962] ? rcu_is_watching+0x12/0xc0 [ 48.825900][ T5962] ? __pfx_lock_release+0x10/0x10 [ 48.825914][ T5962] ? check_panic_on_warn+0x1f/0xb0 [ 48.825926][ T5962] check_panic_on_warn+0xab/0xb0 [ 48.825938][ T5962] end_report+0x117/0x180 [ 48.825949][ T5962] kasan_report+0xe9/0x110 [ 48.825960][ T5962] ? __lock_acquire+0x2d90/0x3c40 [ 48.825973][ T5962] ? __lock_acquire+0x2d90/0x3c40 [ 48.825997][ T5962] __lock_acquire+0x2d90/0x3c40 [ 48.826010][ T5962] ? lock_acquire+0x2f/0xb0 [ 48.826023][ T5962] ? is_bpf_text_address+0x30/0x1a0 [ 48.826038][ T5962] ? __pfx_mark_lock+0x10/0x10 [ 48.826052][ T5962] ? __pfx___lock_acquire+0x10/0x10 [ 48.826066][ T5962] ? show_trace_log_lvl+0x29d/0x3d0 [ 48.826081][ T5962] lock_acquire.part.0+0x11b/0x380 [ 48.826095][ T5962] ? lock_sock_nested+0x5f/0xf0 [ 48.826109][ T5962] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 48.826124][ T5962] ? rcu_is_watching+0x12/0xc0 [ 48.826134][ T5962] ? trace_lock_acquire+0x14e/0x1f0 [ 48.826145][ T5962] ? __might_resched+0x3cc/0x5e0 [ 48.826160][ T5962] ? lock_sock_nested+0x5f/0xf0 [ 48.826173][ T5962] ? lock_acquire+0x2f/0xb0 [ 48.826186][ T5962] ? lock_sock_nested+0x5f/0xf0 [ 48.826199][ T5962] _raw_spin_lock_bh+0x33/0x40 [ 48.826209][ T5962] ? lock_sock_nested+0x5f/0xf0 [ 48.826221][ T5962] lock_sock_nested+0x5f/0xf0 [ 48.826234][ T5962] ? sco_connect_cfm+0x3bc/0xc00 [ 48.826247][ T5962] sco_connect_cfm+0x3bc/0xc00 [ 48.826261][ T5962] ? __pfx_sco_connect_cfm+0x10/0x10 [ 48.826274][ T5962] ? hci_cb_lookup+0x319/0x4e0 [ 48.826289][ T5962] ? __pfx_sco_connect_cfm+0x10/0x10 [ 48.826302][ T5962] hci_sync_conn_complete_evt+0x421/0xa80 [ 48.826314][ T5962] ? __pfx_hci_sync_conn_complete_evt+0x10/0x10 [ 48.826326][ T5962] ? skb_pull_data+0x166/0x210 [ 48.826338][ T5962] hci_event_packet+0x9eb/0x1180 [ 48.826352][ T5962] ? __pfx_hci_sync_conn_complete_evt+0x10/0x10 [ 48.826363][ T5962] ? __pfx_hci_event_packet+0x10/0x10 [ 48.826376][ T5962] ? mark_held_locks+0x9f/0xe0 [ 48.826393][ T5962] ? kcov_remote_start+0x3cf/0x6e0 [ 48.826409][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.826421][ T5962] hci_rx_work+0x2c5/0x16b0 [ 48.826435][ T5962] ? process_one_work+0x921/0x1ba0 [ 48.826449][ T5962] process_one_work+0x9c5/0x1ba0 [ 48.826464][ T5962] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 48.826478][ T5962] ? __pfx_process_one_work+0x10/0x10 [ 48.826492][ T5962] ? assign_work+0x1a0/0x250 [ 48.826504][ T5962] worker_thread+0x6c8/0xf00 [ 48.826518][ T5962] ? __kthread_parkme+0x148/0x220 [ 48.826528][ T5962] ? __pfx_worker_thread+0x10/0x10 [ 48.826541][ T5962] kthread+0x3af/0x750 [ 48.826553][ T5962] ? __pfx_kthread+0x10/0x10 [ 48.826564][ T5962] ? lock_acquire+0x2f/0xb0 [ 48.826578][ T5962] ? __pfx_kthread+0x10/0x10 [ 48.826590][ T5962] ret_from_fork+0x45/0x80 [ 48.826602][ T5962] ? __pfx_kthread+0x10/0x10 [ 48.826614][ T5962] ret_from_fork_asm+0x1a/0x30 [ 48.826627][ T5962] </TASK> [ 48.829044][ T5962] Kernel Offset: disabled VM DIAGNOSIS: 18:01:02 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000067 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85407af5 RDI=ffffffff9ab80780 RBP=ffffffff9ab80740 RSP=ffffc900043174b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000065 R12=0000000000000000 R13=0000000000000067 R14=ffffffff9ab80740 R15=0000000000000000 RIP=ffffffff85407b1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000400000000082 CR3=0000000035ca6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc0d0 Opmask01=0000000000000fff Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe657dbb40 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000002f 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000038a0f6fe ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0b004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000050 RCX=ffffffff8199aafa RDX=ffff88802fb72440 RSI=0000000000000000 RDI=0000000000000001 RBP=1ffff9200070aeeb RSP=ffffc90003857748 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000005 R12=0000000000000001 R13=0000000000000200 R14=ffff88802986c880 R15=ffffc90003857810 RIP=ffffffff8199aae1 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000400000000082 CR3=0000000035eb2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc0d0 Opmask01=0000000000000fff Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe657dbb40 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000002f 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000038561f0a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0b004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000003b5a7 RBX=0000000000000002 RCX=ffffffff8b574469 RDX=0000000000000000 RSI=ffffffff8b6ced80 RDI=ffffffff8bd35740 RBP=ffffed1003b55000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d506f85 R10=ffff88806a837c2b R11=0000000000000000 R12=0000000000000002 R13=ffff88801daa8000 R14=ffffffff90625510 R15=0000000000000000 RIP=ffffffff8b57584f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555770236c8 CR3=0000000029792000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000021 Opmask01=0000000000000fff Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe657dbb40 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000002f 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000038561f0a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e006a64615f6572 6f63735f6d6f6f2f 666c65732f636f72 702f003030303100 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0b004f41445f4057 4a46565f484a4a0a 434940560a464a57 550a001515151400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000036e0b RBX=0000000000000003 RCX=ffffffff8b574469 RDX=0000000000000000 RSI=ffffffff8b6ced80 RDI=ffffffff8bd35740 RBP=ffffed1003b55488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d526f85 R10=ffff88806a937c2b R11=0000000000000000 R12=0000000000000003 R13=ffff88801daaa440 R14=ffffffff90625510 R15=0000000000000000 RIP=ffffffff8b57584f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd5a9e7e608 CR3=000000002fbbe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000000a0000 Opmask01=00000000ffffffff Opmask02=00000000fff80000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe780998d0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000