Warning: Permanently added '[localhost]:33738' (ED25519) to the list of known hosts. [ 49.815432][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 49.815447][ T42] audit: type=1400 audit(1786436844.381:138): avc: denied { execute } for pid=5723 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 49.825163][ T42] audit: type=1400 audit(1786436844.381:139): avc: denied { execute_no_trans } for pid=5723 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/08/11 08:27:25 parsed 1 programs 2026/08/11 08:27:25 serving rpc on tcp://33669 [ 50.961583][ T42] audit: type=1400 audit(1786436845.531:140): avc: denied { node_bind } for pid=5723 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 53.526670][ T42] audit: type=1400 audit(1786436848.091:141): avc: denied { mounton } for pid=5733 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 53.536477][ T42] audit: type=1400 audit(1786436848.101:142): avc: denied { mount } for pid=5733 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.538813][ T5733] cgroup: Unknown subsys name 'net' [ 53.549256][ T42] audit: type=1400 audit(1786436848.121:143): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.680876][ T5733] cgroup: Unknown subsys name 'cpuset' [ 53.685555][ T5733] cgroup: Unknown subsys name 'rlimit' [ 53.856084][ T42] audit: type=1400 audit(1786436848.421:144): avc: denied { setattr } for pid=5733 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.865217][ T42] audit: type=1400 audit(1786436848.421:145): avc: denied { create } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.873451][ T42] audit: type=1400 audit(1786436848.421:146): avc: denied { write } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.881398][ T42] audit: type=1400 audit(1786436848.421:147): avc: denied { read } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.910739][ T5736] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 54.802089][ T5733] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.677755][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 56.677775][ T42] audit: type=1400 audit(1786436851.251:158): avc: denied { execmem } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 56.687199][ T42] audit: type=1400 audit(1786436851.251:159): avc: denied { read } for pid=5740 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.695385][ T42] audit: type=1400 audit(1786436851.251:160): avc: denied { open } for pid=5740 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.705809][ T42] audit: type=1400 audit(1786436851.251:161): avc: denied { mounton } for pid=5740 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.740129][ T42] audit: type=1400 audit(1786436851.311:162): avc: denied { mount } for pid=5740 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.747149][ T42] audit: type=1400 audit(1786436851.311:163): avc: denied { mounton } for pid=5740 comm="syz-executor" path="/syzkaller.Thk1bT/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.755194][ T42] audit: type=1400 audit(1786436851.311:164): avc: denied { mount } for pid=5740 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.762494][ T42] audit: type=1400 audit(1786436851.311:165): avc: denied { mounton } for pid=5740 comm="syz-executor" path="/syzkaller.Thk1bT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 56.773311][ T42] audit: type=1400 audit(1786436851.311:166): avc: denied { mounton } for pid=5740 comm="syz-executor" path="/syzkaller.Thk1bT/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 56.785195][ T42] audit: type=1400 audit(1786436851.311:167): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.796743][ T5740] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.459113][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.464186][ T5085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.469039][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.474054][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.477048][ T5085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.688221][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.692164][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.784953][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.789373][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.305034][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.308586][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.311596][ T5782] bridge_slave_0: entered allmulticast mode [ 58.315082][ T5782] bridge_slave_0: entered promiscuous mode [ 58.344581][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.347498][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.350255][ T5782] bridge_slave_1: entered allmulticast mode [ 58.353674][ T5782] bridge_slave_1: entered promiscuous mode [ 58.383348][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.390943][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.417477][ T5782] team0: Port device team_slave_0 added [ 58.422182][ T5782] team0: Port device team_slave_1 added [ 58.445780][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.449775][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.460583][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.479126][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.482161][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.493737][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.555242][ T5782] hsr_slave_0: entered promiscuous mode [ 58.559495][ T5782] hsr_slave_1: entered promiscuous mode [ 58.682626][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.690368][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.693715][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.702218][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.705072][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.709629][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.713092][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.717858][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.741122][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.744926][ T5782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.748931][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.751922][ T5782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.771347][ T177] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.774522][ T177] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.811843][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.823799][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.829765][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.832082][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.839154][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.841997][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.070822][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.097952][ T5782] veth0_vlan: entered promiscuous mode [ 59.104552][ T5782] veth1_vlan: entered promiscuous mode [ 59.123399][ T5782] veth0_macvtap: entered promiscuous mode [ 59.129318][ T5782] veth1_macvtap: entered promiscuous mode [ 59.144562][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.153999][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.191263][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.201242][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.217531][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.221156][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.254984][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.326582][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.387584][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.460711][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/08/11 08:27:34 executed programs: 0 [ 60.279489][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.284109][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.289054][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.292785][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.296254][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.729092][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.732271][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.735545][ T5853] bridge_slave_0: entered allmulticast mode [ 60.739245][ T5853] bridge_slave_0: entered promiscuous mode [ 60.742661][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.745344][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.749982][ T5853] bridge_slave_1: entered allmulticast mode [ 60.753977][ T5853] bridge_slave_1: entered promiscuous mode [ 60.779506][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.784074][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.811384][ T5853] team0: Port device team_slave_0 added [ 60.816147][ T5853] team0: Port device team_slave_1 added [ 60.838591][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.841103][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.850723][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.855189][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.857654][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.865576][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.905057][ T5853] hsr_slave_0: entered promiscuous mode [ 60.908379][ T5853] hsr_slave_1: entered promiscuous mode [ 60.911266][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 60.913746][ T5853] Cannot create hsr debugfs directory [ 62.379538][ T64] Bluetooth: hci0: command tx timeout [ 62.550791][ T12] bridge_slave_1: left allmulticast mode [ 62.553341][ T12] bridge_slave_1: left promiscuous mode [ 62.557744][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.565447][ T12] bridge_slave_0: left allmulticast mode [ 62.568789][ T12] bridge_slave_0: left promiscuous mode [ 62.572042][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.678758][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.684801][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.696111][ T12] bond0 (unregistering): Released all slaves [ 62.787859][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 62.787876][ T42] audit: type=1400 audit(1786436857.361:188): avc: denied { write } for pid=5876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.799988][ T42] audit: type=1400 audit(1786436857.361:189): avc: denied { create } for pid=5876 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.809002][ T42] audit: type=1400 audit(1786436857.361:190): avc: denied { write } for pid=5876 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2028 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.819625][ T42] audit: type=1400 audit(1786436857.361:191): avc: denied { append } for pid=5876 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2028 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.854857][ T42] audit: type=1400 audit(1786436857.411:192): avc: denied { write } for pid=5879 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.862680][ T42] audit: type=1400 audit(1786436857.411:193): avc: denied { unlink } for pid=5879 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2028 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.876006][ T12] hsr_slave_0: left promiscuous mode [ 62.878464][ T12] hsr_slave_1: left promiscuous mode [ 62.880518][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.882814][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.885814][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.888435][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.895080][ T12] veth1_macvtap: left promiscuous mode [ 62.896944][ T12] veth0_macvtap: left promiscuous mode [ 62.899759][ T12] veth1_vlan: left promiscuous mode [ 62.901446][ T12] veth0_vlan: left promiscuous mode [ 63.017555][ T12] team0 (unregistering): Port device team_slave_1 removed [ 63.029099][ T12] team0 (unregistering): Port device team_slave_0 removed [ 63.098327][ T5439] 8021q: adding VLAN 0 to HW filter on device eth2 [ 63.258892][ T42] audit: type=1400 audit(1786436857.831:194): avc: denied { write } for pid=5882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.316889][ T42] audit: type=1400 audit(1786436857.881:195): avc: denied { write } for pid=5885 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.402148][ T42] audit: type=1400 audit(1786436857.971:196): avc: denied { write } for pid=5887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.424443][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.439314][ T5853] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.442220][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.450182][ T5853] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.454942][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.460344][ T42] audit: type=1400 audit(1786436858.031:197): avc: denied { write } for pid=5890 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.461020][ T5853] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.471789][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.478457][ T5853] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.520536][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.533940][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.540135][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.542476][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.548381][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.550721][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.933119][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.963902][ T5853] veth0_vlan: entered promiscuous mode [ 63.971172][ T5853] veth1_vlan: entered promiscuous mode [ 63.991086][ T5853] veth0_macvtap: entered promiscuous mode [ 63.995161][ T5853] veth1_macvtap: entered promiscuous mode [ 64.004300][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.011110][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.027894][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.032090][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.055072][ T108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.060655][ T108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.073429][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.075901][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.087754][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.091967][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.134751][ T5913] ================================================================== [ 64.137307][ T5913] BUG: KFENCE: use-after-free read in dvb_device_open+0xee/0x3b0 [ 64.137307][ T5913] [ 64.140373][ T5913] Use-after-free read at 0xffff88816dbb8018 (in kfence-#219): [ 64.143660][ T5913] dvb_device_open+0xee/0x3b0 [ 64.145345][ T5913] chrdev_open+0x234/0x6a0 [ 64.146749][ T5913] do_dentry_open+0x6ab/0x14d0 [ 64.148222][ T5913] vfs_open+0x82/0x3f0 [ 64.149450][ T5913] path_openat+0x2873/0x4280 [ 64.150888][ T5913] do_file_open+0x20e/0x430 [ 64.152316][ T5913] do_sys_openat2+0x10f/0x1e0 [ 64.153803][ T5913] __x64_sys_openat+0x12d/0x210 [ 64.155332][ T5913] do_syscall_64+0x115/0x870 [ 64.156784][ T5913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.158585][ T5913] [ 64.159320][ T5913] kfence-#219: 0xffff88816dbb8000-0xffff88816dbb80d7, size=216, cache=kmalloc-256 [ 64.159320][ T5913] [ 64.162828][ T5913] allocated by task 1 on cpu 2 at 14.362068s (49.800759s ago): [ 64.165152][ T5913] dvb_register_device+0x1d6/0x1e20 [ 64.166804][ T5913] dvb_register_frontend+0x552/0x820 [ 64.168473][ T5913] vidtv_bridge_probe+0x44b/0xa30 [ 64.170056][ T5913] platform_probe+0x106/0x1d0 [ 64.171609][ T5913] really_probe+0x241/0xa60 [ 64.173082][ T5913] __driver_probe_device+0x20e/0x450 [ 64.174749][ T5913] driver_probe_device+0x4a/0x140 [ 64.176336][ T5913] __driver_attach+0x21f/0x5b0 [ 64.177854][ T5913] bus_for_each_dev+0x13e/0x1d0 [ 64.179401][ T5913] bus_add_driver+0x305/0x5b0 [ 64.180891][ T5913] driver_register+0x1e2/0x360 [ 64.182418][ T5913] vidtv_bridge_init+0x52/0x80 [ 64.183935][ T5913] do_one_initcall+0x11d/0x700 [ 64.185465][ T5913] kernel_init_freeable+0x6ea/0x7b0 [ 64.187158][ T5913] kernel_init+0x1f/0x1e0 [ 64.188522][ T5913] ret_from_fork+0x72b/0xd50 [ 64.189988][ T5913] ret_from_fork_asm+0x1a/0x30 [ 64.191511][ T5913] [ 64.192280][ T5913] freed by task 5911 on cpu 2 at 64.124217s (0.068062s ago): [ 64.194587][ T5913] dvb_device_put.part.0+0x57/0x90 [ 64.196203][ T5913] dvb_device_open+0x2ba/0x3b0 [ 64.197746][ T5913] chrdev_open+0x234/0x6a0 [ 64.199167][ T5913] do_dentry_open+0x6ab/0x14d0 [ 64.200673][ T5913] vfs_open+0x82/0x3f0 [ 64.201968][ T5913] path_openat+0x2873/0x4280 [ 64.203435][ T5913] do_file_open+0x20e/0x430 [ 64.204877][ T5913] do_sys_openat2+0x10f/0x1e0 [ 64.206375][ T5913] __x64_sys_openat+0x12d/0x210 [ 64.207917][ T5913] do_syscall_64+0x115/0x870 [ 64.209301][ T5913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.211055][ T5913] [ 64.211801][ T5913] CPU: 2 UID: 0 PID: 5913 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 64.214527][ T5913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.217711][ T5913] RIP: 0010:dvb_device_open+0xee/0x3b0 [ 64.219547][ T5913] Code: 0f 84 3f 02 00 00 e8 11 25 ef f9 48 8d 7d 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4c 02 00 00 <4c> 8b 6d 18 4d 85 ed 0f 84 0e 02 00 00 e8 e0 24 ef f9 4c 89 ea 48 [ 64.225750][ T5913] RSP: 0018:ffffc90003d4f8d8 EFLAGS: 00010246 [ 64.227820][ T5913] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 64.230340][ T5913] RDX: 1ffff1102db77003 RSI: ffffffff881b4e6f RDI: ffff88816dbb8018 [ 64.232795][ T5913] RBP: ffff88816dbb8000 R08: 0000000000000001 R09: fffffbfff206d695 [ 64.235267][ T5913] R10: ffffffff9036b4af R11: 0000000000000000 R12: ffff88803a2fb340 [ 64.237759][ T5913] R13: ffffffff881b4da0 R14: ffff88802df661c8 R15: ffff88803a2fb388 [ 64.240278][ T5913] FS: 00007f5a8d3396c0(0000) GS:ffff8880d5fec000(0000) knlGS:0000000000000000 [ 64.243055][ T5913] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.245128][ T5913] CR2: ffff88816dbb8018 CR3: 0000000034203000 CR4: 0000000000352ef0 [ 64.247640][ T5913] Call Trace: [ 64.248706][ T5913] [ 64.249651][ T5913] ? __pfx_dvb_device_open+0x10/0x10 [ 64.251367][ T5913] chrdev_open+0x234/0x6a0 [ 64.252782][ T5913] ? __pfx_chrdev_open+0x10/0x10 [ 64.254347][ T5913] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 64.256330][ T5913] do_dentry_open+0x6ab/0x14d0 [ 64.257860][ T5913] ? __pfx_chrdev_open+0x10/0x10 [ 64.259436][ T5913] vfs_open+0x82/0x3f0 [ 64.260729][ T5913] path_openat+0x2873/0x4280 [ 64.262124][ T5913] ? __pfx_path_openat+0x10/0x10 [ 64.263617][ T5913] do_file_open+0x20e/0x430 [ 64.265018][ T5913] ? __pfx_do_file_open+0x10/0x10 [ 64.266523][ T5913] ? alloc_fd+0x471/0x7a0 [ 64.267889][ T5913] ? do_getname+0x191/0x390 [ 64.269342][ T5913] do_sys_openat2+0x10f/0x1e0 [ 64.270844][ T5913] ? __pfx_do_sys_openat2+0x10/0x10 [ 64.272478][ T5913] ? arch_do_signal_or_restart+0x1f9/0x7e0 [ 64.274316][ T5913] __x64_sys_openat+0x12d/0x210 [ 64.275872][ T5913] ? __pfx___x64_sys_openat+0x10/0x10 [ 64.277596][ T5913] do_syscall_64+0x115/0x870 [ 64.279068][ T5913] ? clear_bhb_loop+0x70/0xc0 [ 64.280553][ T5913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.282405][ T5913] RIP: 0033:0x7f5a8c35e90e [ 64.283804][ T5913] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 64.289713][ T5913] RSP: 002b:00007f5a8d338b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 64.292175][ T5913] RAX: ffffffffffffffda RBX: 00007f5a8d3396c0 RCX: 00007f5a8c35e90e [ 64.294586][ T5913] RDX: 0000000000000002 RSI: 00007f5a8d338c00 RDI: ffffffffffffff9c [ 64.296975][ T5913] RBP: 00007f5a8d338c00 R08: 0000000000000000 R09: 0000000000000000 [ 64.299352][ T5913] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 64.301712][ T5913] R13: 00007f5a8c626038 R14: 00007f5a8c625fa0 R15: 00007ffff0fe69d8 [ 64.304052][ T5913] [ 64.305036][ T5913] ================================================================== [ 64.307382][ T5913] Kernel panic - not syncing: KFENCE: panic_on_warn set ... [ 64.309994][ T5913] CPU: 2 UID: 0 PID: 5913 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 64.312686][ T5913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.315693][ T5913] Call Trace: [ 64.316717][ T5913] [ 64.317674][ T5913] dump_stack_lvl+0x100/0x190 [ 64.319143][ T5913] vpanic+0x552/0x970 [ 64.320348][ T5913] ? __pfx_vpanic+0x10/0x10 [ 64.321712][ T5913] ? __pfx_vprintk_emit+0x10/0x10 [ 64.323285][ T5913] panic+0xd1/0xe0 [ 64.324456][ T5913] ? __pfx_panic+0x10/0x10 [ 64.325841][ T5913] ? check_panic_on_warn+0x1f/0x90 [ 64.327490][ T5913] check_panic_on_warn.cold+0x19/0x34 [ 64.329443][ T5913] kfence_report_error.cold+0x308/0xac5 [ 64.331188][ T5913] ? __pfx_kfence_report_error+0x10/0x10 [ 64.332947][ T5913] ? dvb_device_open+0xee/0x3b0 [ 64.334489][ T5913] ? chrdev_open+0x234/0x6a0 [ 64.335949][ T5913] ? do_dentry_open+0x6ab/0x14d0 [ 64.337519][ T5913] ? vfs_open+0x82/0x3f0 [ 64.338880][ T5913] ? path_openat+0x2873/0x4280 [ 64.340414][ T5913] ? do_file_open+0x20e/0x430 [ 64.341894][ T5913] ? do_sys_openat2+0x10f/0x1e0 [ 64.343440][ T5913] ? __x64_sys_openat+0x12d/0x210 [ 64.345032][ T5913] ? do_syscall_64+0x115/0x870 [ 64.346550][ T5913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.348495][ T5913] ? do_file_open+0x20e/0x430 [ 64.349996][ T5913] ? do_sys_openat2+0x10f/0x1e0 [ 64.351536][ T5913] ? __x64_sys_openat+0x12d/0x210 [ 64.353120][ T5913] ? do_syscall_64+0x115/0x870 [ 64.354639][ T5913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.356541][ T5913] kfence_handle_page_fault+0x238/0x5a0 [ 64.358325][ T5913] page_fault_oops+0x168/0x820 [ 64.359890][ T5913] ? __pfx_page_fault_oops+0x10/0x10 [ 64.361686][ T5913] ? find_held_lock+0x2b/0x80 [ 64.363367][ T5913] ? search_bpf_extables+0x145/0x290 [ 64.365076][ T5913] ? search_bpf_extables+0x145/0x290 [ 64.366753][ T5913] ? is_prefetch.isra.0+0x9f/0x530 [ 64.368360][ T5913] ? dvb_device_open+0xee/0x3b0 [ 64.369930][ T5913] ? __pfx_is_prefetch.isra.0+0x10/0x10 [ 64.371673][ T5913] ? fixup_exception+0x119/0xff0 [ 64.373278][ T5913] kernelmode_fixup_or_oops.isra.0+0xbd/0xf0 [ 64.375180][ T5913] __bad_area_nosemaphore+0x35b/0x3f0 [ 64.376842][ T5913] ? spurious_kernel_fault+0x3fc/0x4b0 [ 64.378607][ T5913] do_kern_addr_fault+0x5b/0x80 [ 64.380203][ T5913] exc_page_fault+0xc3/0xd0 [ 64.381646][ T5913] asm_exc_page_fault+0x26/0x30 [ 64.383195][ T5913] RIP: 0010:dvb_device_open+0xee/0x3b0 [ 64.384928][ T5913] Code: 0f 84 3f 02 00 00 e8 11 25 ef f9 48 8d 7d 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4c 02 00 00 <4c> 8b 6d 18 4d 85 ed 0f 84 0e 02 00 00 e8 e0 24 ef f9 4c 89 ea 48 [ 64.391285][ T5913] RSP: 0018:ffffc90003d4f8d8 EFLAGS: 00010246 [ 64.393189][ T5913] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 64.395671][ T5913] RDX: 1ffff1102db77003 RSI: ffffffff881b4e6f RDI: ffff88816dbb8018 [ 64.398150][ T5913] RBP: ffff88816dbb8000 R08: 0000000000000001 R09: fffffbfff206d695 [ 64.400647][ T5913] R10: ffffffff9036b4af R11: 0000000000000000 R12: ffff88803a2fb340 [ 64.403107][ T5913] R13: ffffffff881b4da0 R14: ffff88802df661c8 R15: ffff88803a2fb388 [ 64.405565][ T5913] ? __pfx_dvb_device_open+0x10/0x10 [ 64.407271][ T5913] ? dvb_device_open+0xcf/0x3b0 [ 64.408800][ T5913] ? dvb_device_open+0xcf/0x3b0 [ 64.410343][ T5913] ? __pfx_dvb_device_open+0x10/0x10 [ 64.411999][ T5913] chrdev_open+0x234/0x6a0 [ 64.413412][ T5913] ? __pfx_chrdev_open+0x10/0x10 [ 64.414975][ T5913] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 64.416961][ T5913] do_dentry_open+0x6ab/0x14d0 [ 64.418498][ T5913] ? __pfx_chrdev_open+0x10/0x10 [ 64.420083][ T5913] vfs_open+0x82/0x3f0 [ 64.421391][ T5913] path_openat+0x2873/0x4280 [ 64.422836][ T5913] ? __pfx_path_openat+0x10/0x10 [ 64.424409][ T5913] do_file_open+0x20e/0x430 [ 64.425849][ T5913] ? __pfx_do_file_open+0x10/0x10 [ 64.427519][ T5913] ? alloc_fd+0x471/0x7a0 [ 64.428885][ T5913] ? do_getname+0x191/0x390 [ 64.430337][ T5913] do_sys_openat2+0x10f/0x1e0 [ 64.431825][ T5913] ? __pfx_do_sys_openat2+0x10/0x10 [ 64.433468][ T5913] ? arch_do_signal_or_restart+0x1f9/0x7e0 [ 64.435302][ T5913] __x64_sys_openat+0x12d/0x210 [ 64.436874][ T5913] ? __pfx___x64_sys_openat+0x10/0x10 [ 64.438575][ T5913] do_syscall_64+0x115/0x870 [ 64.440039][ T5913] ? clear_bhb_loop+0x70/0xc0 [ 64.441514][ T5913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.443367][ T5913] RIP: 0033:0x7f5a8c35e90e [ 64.444784][ T5913] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 64.450783][ T5913] RSP: 002b:00007f5a8d338b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 64.453380][ T5913] RAX: ffffffffffffffda RBX: 00007f5a8d3396c0 RCX: 00007f5a8c35e90e [ 64.455841][ T5913] RDX: 0000000000000002 RSI: 00007f5a8d338c00 RDI: ffffffffffffff9c [ 64.458350][ T5913] RBP: 00007f5a8d338c00 R08: 0000000000000000 R09: 0000000000000000 [ 64.460807][ T5913] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 64.463284][ T5913] R13: 00007f5a8c626038 R14: 00007f5a8c625fa0 R15: 00007ffff0fe69d8 [ 64.465748][ T5913] [ 64.467360][ T5913] Kernel Offset: disabled [ 64.469119][ T5913] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:27:38 Registers: info registers vcpu 0 CPU#0 RAX=00000000000c59d1 RBX=ffffffff8e891480 RCX=ffffffff8bbad335 RDX=0000000000000000 RSI=ffffffff8e1a9419 RDI=ffffffff8c400480 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100d48678d R10=ffff88806a433c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bbab8ff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1c69f98e9c CR3=0000000031ca8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=000000000000001f Opmask02=00000000ffff7fdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a076e1b4b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a07704fb10 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ff89f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326d304764483 737326d65f95a459 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b00ec423d7fd48bb 737373762974032d ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697377685f313132 303863616d2f6c61 75747269762f7365 63697665642f7379 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003a6166703a756b 733a302e30312d35 33712d6370727663 3a3174633a554d45 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000069295 RBX=ffff88801eaea540 RCX=ffffffff8bbad335 RDX=0000000000000000 RSI=ffffffff8e1a9419 RDI=ffffffff8c400480 RBP=ffffed1003d5d4a8 RSP=ffffc90000177e00 R8 =0000000000000001 R9 =ffffed100d4a678d R10=ffff88806a533c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=dffffc0000000000 RIP=ffffffff8bbab8ff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5eec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a0770b5af0 CR3=0000000034c2d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fef9ffd0 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 000055a0770632a0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ff90697f0 00007f7ff90697e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ff8952c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6c6174735f7563 725f78616d006c74 6373797300313d65 6c62616e65000030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e2e65726f632e74 656e2e6c74637379 73203034313d6873 657268745f676f64 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a35005 RDI=ffffffff9b9f7ec0 RBP=ffffffff9b9f7e80 RSP=ffffc90003d4edb0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=657466612d657355 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9b6ea22e R15=ffffffff85a34fa0 RIP=ffffffff85a3502f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5a8d3396c0 ffffffff 00c00000 GS =0000 ffff8880d5fec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=ffff88816dbb8018 CR3=0000000034203000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff0fe6ec6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff0fe6ec6 00007ffff0fe6ecc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a8c435607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a8c435647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a8c4357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a8c435639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a8c5f25f8 00007f5a8c5f25c8 00007f5a8c5f2600 00007f5a8c5f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffff888023c33798 RCX=ffffffff81cae038 RDX=1ffff11004e1b132 RSI=ffffffff8c400400 RDI=ffffffff8c400440 RBP=ffffffff81cbead9 RSP=ffffc90003abfc38 R8 =0000000000000001 R9 =ffffed1004e1b000 R10=ffff8880270d8007 R11=0000000000000000 R12=ffff8880270d8990 R13=0000000000000000 R14=0000000100000000 R15=0000000000000000 RIP=ffffffff8bbadab0 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555579a5a500 ffffffff 00c00000 GS =0000 ffff8880d60ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffff0fe5e40 CR3=0000000034203000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7bcf09f5dd8d45e3 a13e97a0fdc154cd ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b85ad61be8d182f 6b51c854ea3a6607 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0692925c0676bfa2 f8cc57cc994c39b1 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 594796ae565a8cca d8afe66d35e6a260 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a01b19bb5165818d ca151a197002e3c8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 30f11a91392cf0d0 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a838df499407372 b1b4c76c5875feff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d1c43fd800000000 34e1606563f5198b ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 192ced5793946a71 976018d63d314b37 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a320213ad5be67ff a881ec0854fc3b14 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000