Warning: Permanently added '[localhost]:24075' (ED25519) to the list of known hosts. executing program [ 69.779458][ T5316] loop0: detected capacity change from 0 to 32768 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 73.073335][ T5316] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 73.078968][ T5316] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 73.082313][ T5316] bcachefs (loop0): Version upgrade required: [ 73.082313][ T5316] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 73.082313][ T5316] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 73.082313][ T5316] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 74.463625][ T5316] bcachefs (loop0): accounting_read... done [ 75.254639][ T5316] bcachefs (loop0): alloc_read... done executing program executing program executing program executing program executing program executing program [ 75.312116][ T5316] bcachefs (loop0): stripes_read... done [ 75.314413][ T5316] bcachefs (loop0): snapshots_read... done [ 75.317048][ T5316] bcachefs (loop0): check_allocations... done [ 75.664043][ T5316] bcachefs (loop0): going read-write executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 75.667122][ T5316] bcachefs (loop0): journal_replay... done [ 77.864271][ T5316] bcachefs (loop0): check_alloc_info... done [ 77.870423][ T5316] bcachefs (loop0): check_lrus... done [ 77.873253][ T5316] bcachefs (loop0): check_btree_backpointers... done [ 77.876290][ T5316] bcachefs (loop0): check_backpointers_to_extents... done [ 77.879825][ T5316] bcachefs (loop0): check_extents_to_backpointers... [ 77.880561][ T5316] missing backpointer for btree=inodes l=1 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 77.880588][ T5316] got: u64s 5 type deleted 0:9961472:0 len 0 ver 0 [ 77.880596][ T5316] want: u64s 9 type backpointer 0:9961472:0 len 0 ver 0: bucket=0:38:0 btree=inodes l=1 offset=0:0 len=256 pos=SPOS_MAX, fixing [ 77.897041][ T5316] missing backpointer for btree=dirents l=1 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 77.897057][ T5316] got: u64s 5 type deleted 0:10747904:0 len 0 ver 0 [ 77.897064][ T5316] want: u64s 9 type backpointer 0:10747904:0 len 0 ver 0: bucket=0:41:0 btree=dirents l=1 offset=0:0 len=256 pos=SPOS_MAX, fixing [ 77.910521][ T5316] missing backpointer for btree=alloc l=1 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 77.910537][ T5316] got: u64s 5 type deleted 0:6815744:0 len 0 ver 0 [ 77.910544][ T5316] want: u64s 9 type backpointer 0:6815744:0 len 0 ver 0: bucket=0:26:0 btree=alloc l=1 offset=0:0 len=256 pos=SPOS_MAX, fixing [ 77.925288][ T5316] missing backpointer for btree=subvolumes l=1 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 [ 77.925304][ T5316] got: u64s 5 type deleted 0:9175040:0 len 0 ver 0 [ 77.925311][ T5316] want: u64s 9 type backpointer 0:9175040:0 len 0 ver 0: bucket=0:35:0 btree=subvolumes l=1 offset=0:0 len=256 pos=SPOS_MAX, fixing [ 77.939558][ T5316] missing backpointer for btree=snapshots l=1 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 77.939572][ T5316] got: u64s 5 type deleted 0:8388608:0 len 0 ver 0 [ 77.939579][ T5316] want: u64s 9 type backpointer 0:8388608:0 len 0 ver 0: bucket=0:32:0 btree=snapshots l=1 offset=0:0 len=256 pos=SPOS_MAX, fixing [ 77.955504][ T5316] missing backpointer for btree=freespace l=1 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 40 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 77.955520][ T5316] got: u64s 5 type deleted 0:7602176:0 len 0 ver 0 executing program executing program executing program [ 77.955527][ T5316] want: u64s 9 type backpointer 0:7602176:0 len 0 ver 0: bucket=0:29:0 btree=freespace l=1 offset=0:0 len=256 pos=SPOS_MAX, fixing [ 77.970757][ T5316] done [ 77.981138][ T5316] bcachefs (loop0): check_alloc_to_lru_refs... done [ 77.986909][ T5316] bcachefs (loop0): bucket_gens_init... done executing program executing program [ 78.964560][ T5316] bcachefs (loop0): check_snapshot_trees... done executing program [ 79.554462][ T5316] bcachefs (loop0): check_snapshots... [ 79.555002][ T5316] snapshot points to missing/incorrect tree: [ 79.555015][ T5316] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: is_subvol 1 deleted 0 parent 0 children 0 0 subvol 1 tree 0, fixing [ 79.565448][ T5316] snapshot points to missing/incorrect tree: [ 79.565460][ T5316] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: is_subvol 1 deleted 0 parent 0 children 0 0 subvol 1 tree 0, fixing [ 79.576951][ T5316] done executing program executing program executing program executing program [ 80.178550][ T5316] bcachefs (loop0): check_subvols... done [ 80.181744][ T5316] bcachefs (loop0): check_subvol_children... done [ 80.184823][ T5316] bcachefs (loop0): delete_dead_snapshots... done [ 80.187597][ T5316] bcachefs (loop0): check_inodes... done executing program executing program executing program [ 80.202611][ T5316] bcachefs (loop0): check_extents... done [ 80.205914][ T5316] bcachefs (loop0): check_indirect_extents... done [ 80.208727][ T5316] bcachefs (loop0): check_dirents... done [ 80.212401][ T5316] bcachefs (loop0): check_xattrs... done executing program executing program [ 81.924568][ T5316] bcachefs (loop0): check_root... done executing program executing program executing program executing program executing program executing program executing program executing program [ 82.680677][ T5316] bcachefs (loop0): check_unreachable_inodes... done executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 86.960240][ T52] cfg80211: failed to load regulatory.db executing program executing program executing program [ 87.706365][ T5316] bcachefs (loop0): check_subvolume_structure... done [ 87.712098][ T5316] bcachefs (loop0): check_directory_structure... done [ 87.716155][ T5316] bcachefs (loop0): check_nlinks... done [ 87.721206][ T5316] bcachefs (loop0): resume_logged_ops... done [ 87.723670][ T5316] bcachefs (loop0): delete_dead_inodes... done [ 87.726103][ T5316] bcachefs (loop0): set_fs_needs_rebalance... done executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 90.417408][ T5316] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 90.420681][ T5316] bcachefs (loop0): check_alloc_info... done [ 90.425745][ T5316] bcachefs (loop0): check_lrus... done [ 90.427635][ T5316] bcachefs (loop0): check_btree_backpointers... done [ 90.430356][ T5316] bcachefs (loop0): check_backpointers_to_extents... done [ 90.435409][ T5316] bcachefs (loop0): check_extents_to_backpointers... done [ 90.438604][ T5316] bcachefs (loop0): check_alloc_to_lru_refs... done [ 90.441589][ T5316] bcachefs (loop0): bucket_gens_init... done [ 90.450684][ T5316] bcachefs (loop0): check_snapshot_trees... done [ 90.453545][ T5316] bcachefs (loop0): check_snapshots... done [ 90.455990][ T5316] bcachefs (loop0): check_subvols... done [ 90.457913][ T5316] bcachefs (loop0): check_subvol_children... done [ 90.460175][ T5316] bcachefs (loop0): delete_dead_snapshots... done [ 90.462260][ T5316] bcachefs (loop0): check_inodes... done [ 90.464526][ T5316] bcachefs (loop0): check_extents... done [ 90.466864][ T5316] bcachefs (loop0): check_indirect_extents... done [ 90.469213][ T5316] bcachefs (loop0): check_dirents... done [ 90.471819][ T5316] bcachefs (loop0): check_xattrs... done [ 90.474070][ T5316] bcachefs (loop0): check_root... done [ 90.476161][ T5316] bcachefs (loop0): check_unreachable_inodes... done [ 90.478807][ T5316] bcachefs (loop0): check_subvolume_structure... done [ 90.481400][ T5316] bcachefs (loop0): check_directory_structure... done [ 90.484321][ T5316] bcachefs (loop0): check_nlinks... done [ 90.486623][ T5316] bcachefs (loop0): resume_logged_ops... done [ 90.488813][ T5316] bcachefs (loop0): delete_dead_inodes... done [ 90.490907][ T5316] bcachefs (loop0): set_fs_needs_rebalance... done [ 90.496056][ T5316] bcachefs (loop0): bch2_copygc_start(): error creating copygc thread EINTR [ 90.499257][ T5316] bcachefs (loop0): error starting copygc thread [ 90.501528][ T5316] bcachefs (loop0): bch2_fs_start(): error starting filesystem EINTR [ 90.504677][ T5316] bcachefs (loop0): shutting down [ 90.506562][ T5316] bcachefs (loop0): going read-only executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 91.850820][ T5316] bcachefs (loop0): finished waiting for writes to stop [ 91.856623][ T5316] bcachefs (loop0): flushing journal and stopping allocators, journal seq 99 [ 91.860302][ T5316] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 99 [ 91.865866][ T5316] bcachefs (loop0): shutdown complete, journal seq 100 [ 91.869152][ T5316] bcachefs (loop0): marking filesystem clean [ 92.070091][ T5316] bcachefs (loop0): shutdown complete [ 92.076594][ T1029] ================================================================== [ 92.079719][ T1029] BUG: KASAN: slab-use-after-free in percpu_ref_put+0xda/0x250 [ 92.082868][ T1029] Read of size 8 at addr ffff88803eb8a0b0 by task kworker/u4:5/1029 [ 92.086894][ T1029] [ 92.087846][ T1029] CPU: 0 UID: 0 PID: 1029 Comm: kworker/u4:5 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 92.091970][ T1029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.096214][ T1029] Workqueue: loop0 loop_rootcg_workfn [ 92.098334][ T1029] Call Trace: [ 92.099633][ T1029] [ 92.100799][ T1029] dump_stack_lvl+0x241/0x360 [ 92.102557][ T1029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.104619][ T1029] ? __pfx__printk+0x10/0x10 [ 92.106461][ T1029] ? _printk+0xd5/0x120 [ 92.108071][ T1029] ? __virt_addr_valid+0x183/0x530 [ 92.110057][ T1029] ? __virt_addr_valid+0x183/0x530 [ 92.111963][ T1029] print_report+0x169/0x550 [ 92.113684][ T1029] ? __virt_addr_valid+0x183/0x530 [ 92.115570][ T1029] ? __virt_addr_valid+0x183/0x530 [ 92.117315][ T1029] ? __virt_addr_valid+0x45f/0x530 [ 92.119227][ T1029] ? __phys_addr+0xba/0x170 [ 92.120922][ T1029] ? percpu_ref_put+0xda/0x250 [ 92.122718][ T1029] kasan_report+0x143/0x180 [ 92.124346][ T1029] ? percpu_ref_put+0xda/0x250 [ 92.126148][ T1029] ? percpu_ref_put+0x1f/0x250 [ 92.127810][ T1029] percpu_ref_put+0xda/0x250 [ 92.129434][ T1029] blk_update_request+0x5e5/0x1160 [ 92.131226][ T1029] blk_mq_end_request+0x3e/0x70 [ 92.132950][ T1029] loop_process_work+0x1c10/0x2170 [ 92.134719][ T1029] ? __pfx_loop_process_work+0x10/0x10 [ 92.136451][ T1029] ? register_lock_class+0x102/0x980 [ 92.138147][ T1029] ? try_to_wake_up+0x948/0x14b0 [ 92.139741][ T1029] ? __pfx_register_lock_class+0x10/0x10 [ 92.141688][ T1029] ? mark_lock+0x9a/0x360 [ 92.143214][ T1029] ? __pfx_lock_acquire+0x10/0x10 [ 92.145044][ T1029] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 92.147385][ T1029] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 92.149732][ T1029] ? process_scheduled_works+0x976/0x1850 [ 92.151871][ T1029] process_scheduled_works+0xa63/0x1850 [ 92.153869][ T1029] ? __pfx_process_scheduled_works+0x10/0x10 [ 92.156111][ T1029] ? assign_work+0x364/0x3d0 [ 92.157794][ T1029] worker_thread+0x870/0xd30 [ 92.159448][ T1029] ? __kthread_parkme+0x169/0x1d0 [ 92.161578][ T1029] ? __pfx_worker_thread+0x10/0x10 [ 92.163547][ T1029] kthread+0x2f0/0x390 [ 92.165135][ T1029] ? __pfx_worker_thread+0x10/0x10 [ 92.167114][ T1029] ? __pfx_kthread+0x10/0x10 [ 92.168747][ T1029] ret_from_fork+0x4b/0x80 [ 92.170458][ T1029] ? __pfx_kthread+0x10/0x10 [ 92.172061][ T1029] ret_from_fork_asm+0x1a/0x30 [ 92.173922][ T1029] [ 92.175098][ T1029] [ 92.176029][ T1029] Allocated by task 5316: [ 92.177619][ T1029] kasan_save_track+0x3f/0x80 [ 92.179356][ T1029] __kasan_kmalloc+0x98/0xb0 [ 92.181088][ T1029] __kmalloc_cache_noprof+0x19c/0x2c0 [ 92.183172][ T1029] __bch2_dev_alloc+0x57/0xa60 [ 92.184971][ T1029] bch2_dev_alloc+0xd4/0x170 [ 92.186749][ T1029] bch2_fs_open+0x2e3f/0x2f80 [ 92.188478][ T1029] bch2_fs_get_tree+0x738/0x1710 [ 92.190471][ T1029] vfs_get_tree+0x90/0x2b0 [ 92.192251][ T1029] do_new_mount+0x2be/0xb40 [ 92.193942][ T1029] __se_sys_mount+0x2d6/0x3c0 [ 92.195709][ T1029] do_syscall_64+0xf3/0x230 [ 92.197511][ T1029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.199912][ T1029] [ 92.200910][ T1029] Freed by task 5316: [ 92.202464][ T1029] kasan_save_track+0x3f/0x80 [ 92.204293][ T1029] kasan_save_free_info+0x40/0x50 [ 92.206185][ T1029] __kasan_slab_free+0x59/0x70 [ 92.208003][ T1029] kfree+0x1a0/0x440 [ 92.209502][ T1029] kobject_put+0x22f/0x480 [ 92.211337][ T1029] bch2_fs_free+0x27b/0x3c0 [ 92.213092][ T1029] bch2_fs_get_tree+0xd9f/0x1710 [ 92.215004][ T1029] vfs_get_tree+0x90/0x2b0 [ 92.216729][ T1029] do_new_mount+0x2be/0xb40 [ 92.218533][ T1029] __se_sys_mount+0x2d6/0x3c0 [ 92.220511][ T1029] do_syscall_64+0xf3/0x230 [ 92.222281][ T1029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.224730][ T1029] [ 92.225705][ T1029] Last potentially related work creation: [ 92.227810][ T1029] kasan_save_stack+0x3f/0x60 [ 92.229574][ T1029] __kasan_record_aux_stack+0xac/0xc0 [ 92.231575][ T1029] insert_work+0x3e/0x330 [ 92.233189][ T1029] __queue_work+0xc8b/0xf50 [ 92.234887][ T1029] queue_work_on+0x1c2/0x380 [ 92.236625][ T1029] bch2_dev_do_discards+0x17a/0x1f0 [ 92.238618][ T1029] bch2_do_discards+0x29/0x60 [ 92.240383][ T1029] journal_write_done+0x785/0xea0 [ 92.242255][ T1029] process_scheduled_works+0xa63/0x1850 [ 92.244225][ T1029] worker_thread+0x870/0xd30 [ 92.245916][ T1029] kthread+0x2f0/0x390 [ 92.247569][ T1029] ret_from_fork+0x4b/0x80 [ 92.249465][ T1029] ret_from_fork_asm+0x1a/0x30 [ 92.251380][ T1029] [ 92.252415][ T1029] Second to last potentially related work creation: [ 92.254990][ T1029] kasan_save_stack+0x3f/0x60 [ 92.256691][ T1029] __kasan_record_aux_stack+0xac/0xc0 [ 92.258709][ T1029] insert_work+0x3e/0x330 [ 92.260289][ T1029] __queue_work+0xc8b/0xf50 [ 92.261938][ T1029] queue_work_on+0x1c2/0x380 [ 92.263609][ T1029] bch2_dev_do_discards+0x17a/0x1f0 [ 92.265489][ T1029] bch2_do_discards+0x29/0x60 [ 92.267209][ T1029] journal_write_done+0x785/0xea0 [ 92.269019][ T1029] process_scheduled_works+0xa63/0x1850 [ 92.271001][ T1029] worker_thread+0x870/0xd30 [ 92.272682][ T1029] kthread+0x2f0/0x390 [ 92.274183][ T1029] ret_from_fork+0x4b/0x80 [ 92.275765][ T1029] ret_from_fork_asm+0x1a/0x30 [ 92.277453][ T1029] [ 92.278293][ T1029] The buggy address belongs to the object at ffff88803eb8a000 [ 92.278293][ T1029] which belongs to the cache kmalloc-4k of size 4096 [ 92.283032][ T1029] The buggy address is located 176 bytes inside of [ 92.283032][ T1029] freed 4096-byte region [ffff88803eb8a000, ffff88803eb8b000) [ 92.288155][ T1029] [ 92.289037][ T1029] The buggy address belongs to the physical page: [ 92.291302][ T1029] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3eb88 [ 92.294529][ T1029] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 92.297475][ T1029] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 92.300206][ T1029] page_type: f5(slab) [ 92.301679][ T1029] raw: 04fff00000000040 ffff88801ac42140 dead000000000100 dead000000000122 [ 92.304708][ T1029] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 92.307640][ T1029] head: 04fff00000000040 ffff88801ac42140 dead000000000100 dead000000000122 [ 92.310715][ T1029] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 92.313620][ T1029] head: 04fff00000000003 ffffea0000fae201 ffffffffffffffff 0000000000000000 [ 92.316441][ T1029] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 92.319209][ T1029] page dumped because: kasan: bad access detected [ 92.321381][ T1029] page_owner tracks the page as allocated [ 92.323453][ T1029] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4739, tgid 4739 (udevd), ts 40932600103, free_ts 40920492490 [ 92.330679][ T1029] post_alloc_hook+0x1f3/0x230 [ 92.332854][ T1029] get_page_from_freelist+0x3649/0x3790 [ 92.335200][ T1029] __alloc_pages_noprof+0x292/0x710 [ 92.337417][ T1029] alloc_pages_mpol_noprof+0x3e8/0x680 [ 92.339387][ T1029] alloc_slab_page+0x6a/0x140 [ 92.341028][ T1029] allocate_slab+0x5a/0x2f0 [ 92.342767][ T1029] ___slab_alloc+0xcd1/0x14b0 [ 92.344489][ T1029] __slab_alloc+0x58/0xa0 [ 92.346085][ T1029] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 92.348119][ T1029] uevent_show+0x163/0x340 [ 92.349781][ T1029] dev_attr_show+0x55/0xc0 [ 92.351583][ T1029] sysfs_kf_seq_show+0x331/0x4c0 [ 92.353567][ T1029] seq_read_iter+0x43f/0xd70 [ 92.355279][ T1029] vfs_read+0x991/0xb70 [ 92.356822][ T1029] ksys_read+0x183/0x2b0 [ 92.358436][ T1029] do_syscall_64+0xf3/0x230 [ 92.360057][ T1029] page last free pid 4732 tgid 4732 stack trace: [ 92.362284][ T1029] free_unref_page+0xdf9/0x1140 [ 92.364071][ T1029] __put_partials+0xeb/0x130 [ 92.365755][ T1029] put_cpu_partial+0x17c/0x250 [ 92.367621][ T1029] __slab_free+0x2ea/0x3d0 [ 92.369301][ T1029] qlist_free_all+0x9a/0x140 [ 92.371089][ T1029] kasan_quarantine_reduce+0x14f/0x170 [ 92.373100][ T1029] __kasan_slab_alloc+0x23/0x80 [ 92.374976][ T1029] __kmalloc_noprof+0x1a6/0x400 [ 92.376780][ T1029] tomoyo_realpath_from_path+0xcf/0x5e0 [ 92.378777][ T1029] tomoyo_path_perm+0x2b7/0x740 [ 92.380571][ T1029] security_inode_getattr+0x130/0x330 [ 92.382628][ T1029] vfs_getattr+0x45/0x430 [ 92.384099][ T1029] vfs_fstatat+0xe4/0x190 [ 92.385705][ T1029] __x64_sys_newfstatat+0x11d/0x1a0 [ 92.387564][ T1029] do_syscall_64+0xf3/0x230 [ 92.389277][ T1029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.391644][ T1029] [ 92.392614][ T1029] Memory state around the buggy address: [ 92.394636][ T1029] ffff88803eb89f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 92.397702][ T1029] ffff88803eb8a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 92.400690][ T1029] >ffff88803eb8a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 92.403729][ T1029] ^ [ 92.405765][ T1029] ffff88803eb8a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 92.408698][ T1029] ffff88803eb8a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 92.411629][ T1029] ================================================================== executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program VM DIAGNOSIS: 05:14:02 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=ffffffff9a71cee0 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc90002296df0 R8 =ffffffff854b498b R9 =1ffff1100676a046 R10=dffffc0000000000 R11=ffffffff854b4940 R12=dffffc0000000000 R13=ffffffff9a417eff R14=0000000000000020 R15=00000000000003f8 RIP=ffffffff854b49be RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff17f7ea58 CR3=0000000011c6c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefff800 Opmask01=0000000000000009 Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffdfffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd37c719f0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 44455a494c414954 494e495f43455355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000006c7463 2d30736665686361 63622f7366656863 6163622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001b41 0000000000000000 0000000000000062 642e79726f74616c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 68303e3b3a38253b 3a253e3a6e68303b 21383b657a687438 2739243c3b243b27 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69305f474f5b647c 69303a2433273f39 7b27697a787c7a30 23333a3a38263342 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000