ELFx@@?#{S[@t@d@74b6@*7`&@a:@r`&!6[B*SA{è#_a@*R@A T?#{A8 @ !,@6c&@ byaxzB!a&B`~ )RbN @{¨#_AR@6?#{S(@ K)0@B4DD?kCT@@@ATA8"@B"8|_ȥ|Ȥ5 @ SA@{è#_ @SA@{è#_ւ^B#SX!@@ T Ձ@  @@b!@ ?"1 |_ ȣ5;ՠ?#{ @ @{¨#_! @{¨#_"(@B"@"@("@,"@0",@4!@8? qhTR_֠_?#{S*@6`.@`4q`Tc&@ byaxzB!a&`~ )RSA{Ũ#_[a@`2@5d@5`:@xrT7`6@@5@@07@ (`675[B@ [`@v2@d@a*@`@?qV@T@a07`@(*7[B@07@ (v6@`@d@@`!aBRaB5[BBa@*b*@7@7[B@ @`7[BRD1[BK:Tcw2@7@?kIT*~@ڟ"N@ 7xw T~rb X 5`&@ws`&cC@[B ut2@B4D4^BQAtXat`:@@6a6@@c@b*@6@* )@@ TA8"@B"#҂8|_ȥ|Ȥ5 @ ` @@2N"R @97"R"9!4R@ [B`#z|x4[BcCbq`|_a|Ȣ5[B [B @ !!#@k"T#@h|_!|Ȣ5#@?#{@@{#_B<#   B<#   2%%%2%%>  io_uring/msg_ring.cinclude/linux/fs.hstruct file::f_count incremented from zero; use-after-free condition present! X)@VAinti(i,*)s32J)u32])s64u)u64&i (H(#-= iBL cCnn YD zEFz M&iF     G oY o t  &i?  ^(Hi^5i0 &i H5V*xI @ @  @@---  &V*{*h*Jz KG66L@'0'0MtwY' 7len(7cmd,'0N)4'!8" V$0iLiQ "V)jn!]<O" Ny" `y"" Vvy.G.F. VD$M$iP#&sQ#s @"C!1$"$!G0 A% b0RE(8E$uP/reqGS&V|0req&"c8&4id/msg(Tret)VPU;#(7  #N$?Z[#AA5)$1 ref   j { ? & V*6Q g  b A5) "c"#"<"0"G"9?# "  ###'# ]$ j$v$R$ $ / $$$ 1$1"G "###z #### $ $&$P $ = $1$?$M$97#%%%% %%P& yh&]&& p && (C (2((((( ' C2 ''<(CS(I(](i( z   C~ T` b# n s#Mo ^3jkdG#p0T#Vlmyd3@U4 rf~efP   #j  {#0 P t  " ; / ".:FR   ?W^_juv( ((( ; ; H Y d $$$w%  %%  %(& D&9&& 9 && (XN(2((((( `' X|{'q''P'X (((P#(/(3q r 1   3   GXVTP0req'P0sqeGPQ/msg% %  %  % % % Y   Vreq, >i$ msg ctx$0 Vreq. ctx$ msgj: ;9nP msg req4retVP<_s$$ N$[$A5)huZ V+req5c;GiQ=$e msg=0d4retVd[    &3@0req7 Ii msg ctx$0 idxV _i V _s i    Vreq. @i$ msg retVw VCreqw0y$ msgz{|jctxj>$ reqlt t s ~Y VctxY3$reqYIresZV Z Z#\:Jlj+reqJ1c+tsJJQ4ctxL$db#ODs#~PgG#RT#!V!)!_C!6!O!>?#J$"L###\'##]$Mj$v$R$ $ / r$$$ 1$1!!#M#$#M####$ $M$&$P $ =Z$1$?$M$>7#Q$N $$O%  k%`%%  %%& " &&t& a && (\(2((((( & \2&&'#''.'I'?'S''\'''P'E! E;$]:H +req:+c msg<<>V<  ) V3 )3$ *i$ M $6$sy ?y s  !  >y  s! req> resGctx<$ ictx>$ iNreq4res= Fhreq2req:80 8E 9V 30 3? % %*i%:i!?" ,?14 A H  &n  >0 f20! ^! !!V!& ptr&8s,&D4&!! ptr&6s!])! ref]6!F" refF; nrFNH"o!Mu!Mu!M!Mu!M!Mu!M!MuM #"ref6"ref;nrN"e"uw"u""u""u""u!2#ref7 !2# "?a?B!b#,5gV#,g5''## "'%V## #ptr sval  i tmp   $ off " ;!X$ ti =X$ pc >?$ > M$ A J T -$val -,V pc /$ /  1,j$ !$ i  v 1$  % v .$! &% i  v ($(^J%v(^OJ% (^Y4 { !w% i # v 5$ % v 2$ v%i vv v,$ !% i  v .% M & v ,% ^ (& i ^  v ^ ,% 6 P& i 6 $ v 6 3%! n t& i n  v n %%\&i\v\%X&iXvX%C&iCvC%'iv%.'iv%`'iv% old'iv% old'iv%'iv% tmp<(iv% val tmpv(iv% tmpX(idxXCszY[!( 0_!)cap'p(`)8)ptr) (.: ;9 'I !1RUX Y W .?: ; 9 '< .?: ;9 '<!.: ;9 ' !".?: ; 9 'I<#1X YW $1RUX YW % &> !I: ; 9!' :!; 9 I8 (&I):!; 9!I*( +:!; 9 I,: ;9 I-(..?: ; 9!'</4:!;9 I0:!;9 I1 1U2 13 1U44:!; 9 I5> !I: ; 9!6 :!; 9!I7 :!; 9!I8 8:!;9 I91X!Y W!:.:!; 9! '@|;:!; 9 I< U=4:!; 9 I>1RUX!YW!?.:!;9 ' !@% A$ > B<C'D E&F5IG4: ; 9 I?H> I: ;9 I> I: ;9 J4: ;9 I?<K : ; 9 L  : ; 9 M : ; 9 I 8 N I8 OP.?: ;9 '<Q.?: ;9 'I<R.?: ;9 '@|S.?: ;9 'I@|T4: ;9 IU : ;9 V 1W 1X.?: ;9 'I@zY1X YW Z.: ; 9 'I@|[ : ; 9 \ 1U].?: ; 9 '@|^4: ;9 I_ : ; 9 `.: ; 9 'a.: ; 9 'I,$8                                                               a + g"!|~-!  Y# ! 0 ~.aY~J!  .~. /!~  #f! ~~. } !}.F =~.i,"  } ! }.!  <}.!Ki!|~ (1 } b"  !!`   ~   }X }T ) #.   $y  sX   y X"  "} & !} i!|~ (<    h ti~d lq.#  !  ~Jt }.{J#  !!E J} #! !   !   ! ! !  ! 1! s  #} k.#  J!   !nJ~ %!|  01 0 1 &!!   m< .F "!}"> "(~ " -<~< # # .\/}"#~<< .}.!X"  0+  C...I<|  "" /  .5! lr   (.   g |j~A <y .# !~JK ~ 9.a| n  ~<! .!    } "}   / "W ) W  ) W !$! j!{U (1 ~ b"  !!`      ~X ~T ) #.      $y  !=K <   .      y.!Q.~ }. X  /%..~ .~ .!Q.  <fzX<   g k~ < = JXx .Q.?.###/ __kernel_ulong_tIO_URING_F_IOPOLLoctxget_fileio_double_lock_ctxmutex_lockREQ_F_ASYNC_DATAraw_spinlock_tatomic_long_sub_and_test__s32___GFP_MEMALLOC_BITslotIOU_F_TWQ_LAZY_WAKEkasan_check_write__PERCPU_REF_ATOMIC_DEADREQ_F_ARM_LTIMEOUTio_msg___GFP_NORETRY_BITlooptask_structtarget_ctxunsigned intcpucapio_msg_need_remoteio_fixed_filemask__vpp_verifysp_el0headio_tw_statepercpu_refTWA_RESUME__lse_atomic64_fetch_add_relaxed___GFP_ZEROTAGS_BITraw_atomic64_fetch_inc_relaxed___GFP_RECLAIMABLE_BIT__already_done___GFP_UNUSED_BITshort intIOU_OKio_req_queue_tw_completeIO_URING_F_COMPATREQ_F_LINKtask_work_addfuncpercpu_ref_get_manypercpu_countget_currentREQ_F_INFLIGHTio_msg_data_remoteio_msg_tw_fd_completeREQ_F_CAN_POLL__PERCPU_REF_DEADIO_URING_F_CQE32__ret_once__ref_is_percpualternative_has_cap_likelyio_msg_send_fdREQ_F_FAILIORING_MSG_SEND_FDIOU_REQUEUE__lse_atomic64_fetch_subraw_atomic_long_sub_and_testio_msg_ring_cleanup__compiletime_assert_612signed chararray_index_mask_nospecREQ_F_FORCE_ASYNCREQ_F_SUPPORT_NOWAITREQ_F_CREDSREQ_F_CLEAR_POLLINmutex___GFP_THISNODE_BIT___GFP_RETRY_MAYFAIL_BITsrc_fileindexreq_set_failREQ_F_HARDLINKREQ_F_HASH_LOCKEDresultREQ_F_BUFFER_SELECTREQ_F_IO_DRAINlong long unsigned intfileio_slot_file__compiletime_assert_628__compiletime_assert_629TWA_NMI_CURRENTthread_infoREQ_F_BUFFERS_COMMIT__compiletime_assert_0alloc_tagio_ring_submit_unlock___GFP_HIGH_BITTWA_NONEkasan_mempool_unpoison_objectissue_flagspercpu_ptrkmem_cache_alloc_noprofio_uring_cmd_flags_raw_spin_trylockIO_URING_F_SQE128__compiletime_assert_630__compiletime_assert_631__compiletime_assert_632__compiletime_assert_633__compiletime_assert_634__compiletime_assert_635__compiletime_assert_636size_tio_msg_remote_postpercpu_ref_put_manyarch_atomic64_sub_returnIO_URING_F_MULTISHOT__compiletime_assert_133__compiletime_assert_136__compiletime_assert_137__compiletime_assert_138_Boolio_req_set_res___GFP_NOMEMALLOC_BIT__preempt_count_dec_and_test__ret_condrcu_read_unlocktrue___GFP_MOVABLE_BITdst_fd___GFP_DIRECT_RECLAIM_BITREQ_F_FIXED_FILEio_alloc_cache_putcqe_flags_raw_spin_unlockchar___GFP_NO_OBJ_EXT_BITkcsan_check_access___GFP_LAST_BITio_add_aux_cqeio_uring_sqetableREQ_F_POLLED__ll_sc_atomic64_addarch_atomic64_fetch_add_relaxedtask_work_func_tio_req_task_completemutex_trylockio_ring_submit_lockraw_atomic64_fetch_add_relaxedreq_cacheptask_work_notify_modekmem_cache__percpu_add_case_64REQ_F_SKIP_LINK_CQESREQ_F_BL_EMPTYio_msg_grab_fileuser_dataREQ_F_APOLL_MULTISHOTlong long int__compiletime_assert_1lockio_msg_install_completercu_read_lockIO_URING_F_NONBLOCKtaskIO_URING_F_COMPLETE_DEFERraw_atomic64_sub_return___GFP_FS_BITboolREQ_F_NOWAITtargetcflagspercpu_countpcurrent_stack_pointerkmem_cache_free__ret_warn_on__rcu_read_unlock__lse_atomic64_sub_returnio_msg_cache_freeREQ_F_NEED_CLEANUPsizeio_post_aux_cqe__compiletime_assert_132cpucap_is_possible__compiletime_assert_637_oldREQ_F_CQE_SKIPcache__io_fixed_fd_installdonemutex_unlock__PERCPU_REF_FLAG_BITS__lse_atomic64_addfputpercpu_ref_getio_ring_ctxatomic_long_addspin_trylockREQ_F_REFCOUNTio_req_task_work_add_remote__u32IOU_ISSUE_SKIP_COMPLETE_res__u64flagsspinlock_tout_unlockraw_atomic_long_addIO_URING_F_UNLOCKEDgfp_tkasan_mempool_poison_object__warn_printk__ll_sc_atomic64_fetch_add_relaxedtworklong intio_msg_fd_remote___GFP_ACCOUNT_BITcmd_szio_msg_ring_prep__PERCPU_REF_ATOMICraw_atomic64_addIORING_MSG_DATA__kernel_size_tinit_task_work___GFP_IO_BIT___GFP_COMP_BITio_file_tableprior___GFP_DMA32_BITREQ_F_SINGLE_POLLTWA_SIGNAL_NO_IPIREQ_F_BUFFER_RINGraw_atomic64_sub_and_testio_msg_tw_completeio_msg_get_kiocbTWA_SIGNALREQ_F_BL_NO_RECYCLE__io_req_task_work_addIOU_STOP_MULTISHOTREQ_F_REISSUEio_req_task_work_addIO_URING_F_IOWQio_alloc_cache_getlong unsigned intatomic64_t__ptr__ret_do_once___GFP_NOWARN_BITGNU C11 13.2.0 -mlittle-endian -mgeneral-regs-only -mabi=lp64 -mbranch-protection=pac-ret -mstack-protector-guard=sysreg -mstack-protector-guard-reg=sp_el0 -mstack-protector-guard-offset=1288 -g -O2 -std=gnu11 -fshort-wchar -funsigned-char -fno-common -fno-PIE -fno-strict-aliasing -fno-asynchronous-unwind-tables -fno-unwind-tables -fno-delete-null-pointer-checks -fno-allow-store-data-races -fstack-protector-strong -fno-omit-frame-pointer -fno-optimize-sibling-calls -ftrivial-auto-var-init=zero -fno-stack-clash-protection -falign-functions=4 -fstrict-flex-arrays=3 -fno-strict-overflow -fstack-check=no -fconserve-stack -fno-var-tracking -femit-struct-debug-baseonly -fstack-protector-strong__int128entrytype__rcu_read_lock___GFP_ZERO_BITunsigned char__kern_my_cpu_offsetspinlockio_double_unlock_ctxfalseREQ_F_POLL_NO_LAZY_mask___GFP_WRITE_BITio_msg_ring__s64atomic_long_fetch_inc_relaxedio_kiocbraw_atomic_long_fetch_inc_relaxedREQ_F_LINK_TIMEOUT__ll_sc_atomic64_sub_returnl_noio_alloc_cache___GFP_KSWAPD_RECLAIM_BITREQ_F_ISREGio_file_from_indexIO_URING_F_CANCEL___GFP_NOFAIL_BIT__mptrspin_unlockshort unsigned int__lse_atomic64_fetch_addarch_atomic64_addpreempt_schedule_notrace___GFP_HARDWALL_BITraw_spinlock__compiletime_assert_268REQ_F_BUFFER_SELECTED___GFP_HIGHMEM_BIT__int128 unsignedio_uring_msg_ring_flagsio_kiocb_cmd_sz_checkcallback_headpercpu_ref_putio_is_uring_fops___GFP_DMA_BITatomic_long_tsrc_fdinstrument_atomic_read_writeREQ_F_CUR_POS__preempt_count_addio_fixed_file_slotREQ_F_DOUBLE_POLLio_msg_ring_dataio_uring/msg_ring.c/kernel/work/linux-6.11/kernel/work/linux-6.11io_uring./include/linux./arch/arm64/include/asm./include/linux/atomic./include/uapi/asm-generic./include/asm-generic./include/uapi/linuxmsg_ring.cmsg_ring.cio_uring_types.hcurrent.hio_uring.hspinlock.halloc_cache.hpercpu-refcount.hrcupdate.hpreempt.hpercpu.hatomic-instrumented.hatomic-long.hatomic-arch-fallback.hatomic.halternative-macros.hcpucaps.hatomic_lse.hatomic_ll_sc.htask_work.hbarrier.hfiletable.hfs.hint-ll64.hint-ll64.hposix_types.htypes.hspinlock_types_raw.hstddef.hgfp_types.hspinlock_types.hio_uring.hstack_pointer.hbug.hmutex.hslab.hio_uring.hfile.hkasan.hspinlock_api_smp.hinstrumented.hkcsan-checks.hkasan-checks.hGCC: (Ubuntu 13.2.0-23ubuntu4) 13.2.0GNU x <A-A0BBZ A-A ,A-A CV A-A DlA-A0BBl A-A F A-A 4HA-A BG A-A CA-T|A-AP BW A-A AUER A R B J B C B B C A\F B zMI B FD BA HA B A B EAGAFC$(A-BEA- '=DlP  P  S P  Pd n x"-=MfxHTL|(msg_ring.c$xio_msg_install_completeio_msg_tw_fd_completeio_msg_tw_complete$d__already_done.0.L144721.L144722mutex_trylock__io_fixed_fd_installmutex_unlockio_post_aux_cqemutex_lockio_req_task_complete__io_req_task_work_addio_add_aux_cqe_raw_spin_trylock_raw_spin_unlockreq_cachepkmem_cache_free__rcu_read_lockpreempt_schedule_notrace__rcu_read_unlockalt_cb_patch_nopsio_msg_ring_cleanupfputio_msg_ring_prepio_msg_ringio_is_uring_fopsio_req_task_work_add_remote__warn_printkkmem_cache_alloc_noprofio_msg_cache_free0 D!l"#$%%&p'x()**+,-..H)L,1h4  5$#**+(),p-t.|DD6  7")**8" ""$"**+ d/$h(/0@4<H@HlL/  *18?0FK^ l/v@  ) o  k" 05A7 NZU`F[.) Hw 7"u(c. 4:@G UbZ_ pu] 8   qC  $~*RBI Y _# eMkLq {EZVGv bl f k  ")2);)DM>V _hOq zl* J n@:  3A=HVb{ c  T w*Y =+ ODai wK ~N \ -   25HQb cw ktL& L&L<_  "! ) -D L 8] 8|  \      ! / E  p   , , , 8 8 + @3 ; L <T j  X X X \ h t l' = lE \ ld z l  l  l l l p7 l        5[cw(88XBcy &&   !$)ED<l<tUUPPP`Pk Pv%h->LhTjhrhhhh0 h'h<hSl0| #bw $, >VWs$  p}JS dl x +6j =J$c} h$$$ h #Gv9W$ $+ 7 Dn z     D+l3AIQLlt\lll| @Uw(=_tdddd/d7Ndo|dddhh h7kC|$=  1#'4A#N\_ lts tAw B Oi7   # 0  < I (e Us     ! =   = !&*! P!b!iu!i!!i!!i!!i! "g $"H"Y"ik"i}""i""i""i"",# #)#8#@# H#U#e c# t#e ##3# ## $7${E$O$^$$ $b$$v$o$"% '%j>% P%x%I% %%& )& Q& u&4&# &J&] '/'1a''O '~''g (=( ^(w((d(<(<(( ((N ) ) ,)z9)O) ",&D*M.]2v6:>HMRW\afk(p:uEzOXn| "*?HTep $TXD L.symtab.strtab.shstrtab.rela.text.data.bss.rela.altinstructions.rela__bug_table.rodata.str.rodata.str1.8.data.once.rela.debug_info.debug_abbrev.rela.debug_aranges.debug_rnglists.rela.debug_line.debug_str.debug_line_str.comment.note.GNU-stack.note.gnu.property.rela.debug_frame @@np&X,X6XT1@tPLG@Xu`X2'd2Os? @ \)~@u06 2~80@08;e@0K0a0d'dd e@Pgp  pl%H+