[ 45.864086][ T2462] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.877768][ T2462] device veth1_macvtap left promiscuous mode [ 45.885131][ T2462] device veth0_macvtap left promiscuous mode [ 45.891393][ T2462] device veth1_vlan left promiscuous mode [ 45.897294][ T2462] device veth0_vlan left promiscuous mode [ 46.010573][ T2462] team0 (unregistering): Port device team_slave_1 removed [ 46.024197][ T2462] team0 (unregistering): Port device team_slave_0 removed [ 46.037065][ T2462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.051562][ T2462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.095549][ T2462] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.1' (ECDSA) to the list of known hosts. 2022/05/13 04:35:38 parsed 1 programs 2022/05/13 04:35:38 executed programs: 0 [ 59.481092][ T4017] cgroup: Unknown subsys name 'net' [ 59.492477][ T4017] cgroup: Unknown subsys name 'rlimit' [ 62.671219][ T3604] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 66.113040][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.119452][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.831198][ T3604] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 70.991095][ T3604] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 71.233299][ T22] cfg80211: failed to load regulatory.db [ 75.151139][ T3604] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 77.235659][ T46] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.243860][ T46] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.252162][ T46] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.259854][ T46] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.267895][ T46] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.275199][ T46] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.338248][ T4065] chnl_net:caif_netlink_parms(): no params data found [ 77.370507][ T4065] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.378040][ T4065] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.386073][ T4065] device bridge_slave_0 entered promiscuous mode [ 77.393992][ T4065] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.401403][ T4065] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.409014][ T4065] device bridge_slave_1 entered promiscuous mode [ 77.426495][ T4065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.437115][ T4065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.457468][ T4065] team0: Port device team_slave_0 added [ 77.464854][ T4065] team0: Port device team_slave_1 added [ 77.479494][ T4065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.486588][ T4065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.513433][ T4065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.525236][ T4065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.532218][ T4065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.558119][ T4065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.581510][ T4065] device hsr_slave_0 entered promiscuous mode [ 77.588020][ T4065] device hsr_slave_1 entered promiscuous mode [ 77.640294][ T4065] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.647477][ T4065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.654782][ T4065] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.662366][ T4065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.696112][ T4065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.708805][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.718054][ T3611] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.726528][ T3611] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.734060][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 77.745551][ T4065] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.754700][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.763502][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.770532][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.792969][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.801965][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.809120][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.817687][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.826530][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.835208][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.844998][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.852940][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.865080][ T4065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.878656][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.887154][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.897778][ T4065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.102623][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.112436][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.121480][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.129035][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.139925][ T4065] device veth0_vlan entered promiscuous mode [ 78.149657][ T4065] device veth1_vlan entered promiscuous mode [ 78.165784][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.174305][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.182905][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.193110][ T4065] device veth0_macvtap entered promiscuous mode [ 78.202430][ T4065] device veth1_macvtap entered promiscuous mode [ 78.215595][ T4065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.223686][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.232789][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.243844][ T4065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.252028][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.296357][ T1058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.312134][ T1058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.319406][ T2462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.319439][ T2462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.330851][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.344269][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.373664][ T4084] FAULT_INJECTION: forcing a failure. [ 78.373664][ T4084] name failslab, interval 1, probability 0, space 0, times 1 [ 78.387177][ T4084] CPU: 0 PID: 4084 Comm: syz-executor.0 Not tainted 5.18.0-rc4-syzkaller #0 [ 78.396192][ T4084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.406229][ T4084] Call Trace: [ 78.409490][ T4084] [ 78.412402][ T4084] dump_stack_lvl+0x57/0x7d [ 78.416882][ T4084] should_fail.cold+0x5/0xa [ 78.421381][ T4084] should_failslab+0x5/0x10 [ 78.425862][ T4084] kmem_cache_alloc_bulk+0x4b/0x710 [ 78.431030][ T4084] ? rcu_read_lock_sched_held+0x3a/0x70 [ 78.436571][ T4084] mas_alloc_nodes+0x1f0/0x580 [ 78.441316][ T4084] ? anon_vma_clone+0x353/0x520 [ 78.446156][ T4084] mas_preallocate+0xcc/0x230 [ 78.450816][ T4084] vma_link+0xa4/0x210 [ 78.454877][ T4084] ? vma_mas_store+0x280/0x280 [ 78.459734][ T4084] ? up_write+0x148/0x470 [ 78.464047][ T4084] ? anon_vma_clone+0x353/0x520 [ 78.468878][ T4084] copy_vma+0x4c7/0x810 [ 78.473022][ T4084] ? __install_special_mapping+0x320/0x320 [ 78.478805][ T4084] ? percpu_counter_add_batch+0x79/0x130 [ 78.484414][ T4084] move_vma+0x35e/0xdd0 [ 78.488544][ T4084] ? arch_get_unmapped_area+0x560/0x560 [ 78.494062][ T4084] ? move_page_tables.part.0+0x2660/0x2660 [ 78.499850][ T4084] ? find_vma+0x161/0x190 [ 78.504152][ T4084] ? get_unmapped_area+0x2e0/0x2e0 [ 78.509242][ T4084] ? security_mmap_addr+0x34/0x70 [ 78.514242][ T4084] __do_sys_mremap+0x374/0x1130 [ 78.519088][ T4084] ? move_vma+0xdd0/0xdd0 [ 78.523446][ T4084] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 78.529413][ T4084] ? syscall_enter_from_user_mode+0x21/0x70 [ 78.535290][ T4084] do_syscall_64+0x35/0xb0 [ 78.539717][ T4084] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 78.545604][ T4084] RIP: 0033:0x7f1ed18890e9 [ 78.550227][ T4084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 78.569819][ T4084] RSP: 002b:00007f1ed2a7d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 78.578225][ T4084] RAX: ffffffffffffffda RBX: 00007f1ed199bf60 RCX: 00007f1ed18890e9 [ 78.586173][ T4084] RDX: 0000000000003000 RSI: 0000000000002000 RDI: 00000000204a2000 [ 78.594135][ T4084] RBP: 00007f1ed2a7d1d0 R08: 0000000020ffd000 R09: 0000000000000000 [ 78.602081][ T4084] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 78.610040][ T4084] R13: 00007ffdcb189b7f R14: 00007f1ed2a7d300 R15: 0000000000022000 [ 78.618011][ T4084] [ 78.633299][ T4083] ================================================================== [ 78.641379][ T4083] BUG: KASAN: use-after-free in anon_vma_interval_tree_insert+0x388/0x570 [ 78.649857][ T4083] Read of size 8 at addr ffff88801ca44500 by task syz-executor.0/4083 [ 78.658078][ T4083] [ 78.660376][ T4083] CPU: 1 PID: 4083 Comm: syz-executor.0 Not tainted 5.18.0-rc4-syzkaller #0 [ 78.669015][ T4083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.679042][ T4083] Call Trace: [ 78.682301][ T4083] [ 78.685213][ T4083] dump_stack_lvl+0x57/0x7d [ 78.689689][ T4083] print_address_description.constprop.0.cold+0xeb/0x495 [ 78.696682][ T4083] ? anon_vma_interval_tree_insert+0x388/0x570 [ 78.702802][ T4083] kasan_report.cold+0xf4/0x1c6 [ 78.707624][ T4083] ? anon_vma_interval_tree_insert+0x388/0x570 [ 78.713744][ T4083] anon_vma_interval_tree_insert+0x388/0x570 [ 78.719690][ T4083] __vma_adjust+0x70d/0x14c0 [ 78.724255][ T4083] ? vma_mas_remove+0x2d0/0x2d0 [ 78.729077][ T4083] vma_merge+0xa57/0x12b0 [ 78.733379][ T4083] ? __vma_adjust+0x14c0/0x14c0 [ 78.738199][ T4083] ? down_write+0xde/0x150 [ 78.742585][ T4083] userfaultfd_release+0x30c/0x600 [ 78.747676][ T4083] ? find_held_lock+0x2d/0x110 [ 78.752425][ T4083] ? userfaultfd_event_wait_completion+0xa30/0xa30 [ 78.759087][ T4083] __fput+0x1f5/0x8c0 [ 78.763046][ T4083] task_work_run+0xc0/0x160 [ 78.767521][ T4083] exit_to_user_mode_prepare+0x23c/0x250 [ 78.773162][ T4083] syscall_exit_to_user_mode+0x19/0x60 [ 78.778609][ T4083] do_syscall_64+0x42/0xb0 [ 78.783011][ T4083] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 78.788898][ T4083] RIP: 0033:0x7f1ed183bd2b [ 78.793318][ T4083] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 78.812908][ T4083] RSP: 002b:00007ffdcb189be0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 78.821310][ T4083] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f1ed183bd2b [ 78.829253][ T4083] RDX: 00007f1ed19a02e8 RSI: ffffffffffffffff RDI: 0000000000000003 [ 78.837194][ T4083] RBP: 00007f1ed199d960 R08: 0000000000000000 R09: 00007f1ed19a02f0 [ 78.845148][ T4083] R10: 00007ffdcb189ce0 R11: 0000000000000293 R12: 0000000000013202 [ 78.853184][ T4083] R13: 00007ffdcb189ce0 R14: 00007f1ed199bf60 R15: 0000000000000032 [ 78.861157][ T4083] [ 78.864151][ T4083] [ 78.866449][ T4083] Allocated by task 4084: [ 78.870743][ T4083] kasan_save_stack+0x1e/0x40 [ 78.875392][ T4083] __kasan_slab_alloc+0x90/0xc0 [ 78.880326][ T4083] kmem_cache_alloc+0x204/0x3b0 [ 78.885156][ T4083] vm_area_dup+0x83/0x370 [ 78.889456][ T4083] copy_vma+0x388/0x810 [ 78.893585][ T4083] move_vma+0x35e/0xdd0 [ 78.897732][ T4083] __do_sys_mremap+0x374/0x1130 [ 78.902548][ T4083] do_syscall_64+0x35/0xb0 [ 78.906929][ T4083] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 78.912790][ T4083] [ 78.915090][ T4083] Freed by task 4084: [ 78.919035][ T4083] kasan_save_stack+0x1e/0x40 [ 78.923677][ T4083] kasan_set_track+0x21/0x30 [ 78.928234][ T4083] kasan_set_free_info+0x20/0x30 [ 78.933139][ T4083] ____kasan_slab_free+0x166/0x1a0 [ 78.938215][ T4083] slab_free_freelist_hook+0x8b/0x1c0 [ 78.944006][ T4083] kmem_cache_free+0xdd/0x5a0 [ 78.948755][ T4083] copy_vma+0x637/0x810 [ 78.952893][ T4083] move_vma+0x35e/0xdd0 [ 78.957019][ T4083] __do_sys_mremap+0x374/0x1130 [ 78.961834][ T4083] do_syscall_64+0x35/0xb0 [ 78.966215][ T4083] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 78.972075][ T4083] [ 78.974372][ T4083] The buggy address belongs to the object at ffff88801ca44488 [ 78.974372][ T4083] which belongs to the cache vm_area_struct of size 168 [ 78.989349][ T4083] The buggy address is located 120 bytes inside of [ 78.989349][ T4083] 168-byte region [ffff88801ca44488, ffff88801ca44530) [ 79.002587][ T4083] [ 79.004884][ T4083] The buggy address belongs to the physical page: [ 79.011266][ T4083] page:ffffea0000729100 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801ca44ae0 pfn:0x1ca44 [ 79.022682][ T4083] memcg:ffff88801c57be01 [ 79.026887][ T4083] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 79.034399][ T4083] raw: 00fff00000000200 ffffea0001de2a40 dead000000000003 ffff888140006b40 [ 79.042945][ T4083] raw: ffff88801ca44ae0 000000008011000b 00000001ffffffff ffff88801c57be01 [ 79.051492][ T4083] page dumped because: kasan: bad access detected [ 79.057870][ T4083] page_owner tracks the page as allocated [ 79.063557][ T4083] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 3848, tgid 3848 (rm), ts 48020570663, free_ts 48018326510 [ 79.080879][ T4083] get_page_from_freelist+0x177d/0x3e60 [ 79.086398][ T4083] __alloc_pages+0x1b2/0x500 [ 79.090957][ T4083] allocate_slab+0x26c/0x3c0 [ 79.095525][ T4083] ___slab_alloc+0x8e1/0xf20 [ 79.100079][ T4083] __slab_alloc.constprop.0+0x4d/0xa0 [ 79.105423][ T4083] kmem_cache_alloc+0x360/0x3b0 [ 79.110240][ T4083] vm_area_dup+0x83/0x370 [ 79.114557][ T4083] __split_vma+0x82/0x470 [ 79.118864][ T4083] mprotect_fixup+0x545/0x7a0 [ 79.123506][ T4083] do_mprotect_pkey+0x400/0x7d0 [ 79.128323][ T4083] __x64_sys_mprotect+0x6f/0xb0 [ 79.133141][ T4083] do_syscall_64+0x35/0xb0 [ 79.137524][ T4083] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 79.143386][ T4083] page last free stack trace: [ 79.148030][ T4083] free_pcp_prepare+0x549/0xd20 [ 79.152848][ T4083] free_unref_page_list+0x16f/0xf80 [ 79.158013][ T4083] release_pages+0x6f1/0x1780 [ 79.162656][ T4083] tlb_batch_pages_flush+0x85/0x160 [ 79.167818][ T4083] tlb_finish_mmu+0x110/0x6c0 [ 79.172458][ T4083] exit_mmap+0x19d/0x510 [ 79.176756][ T4083] __mmput+0xf3/0x440 [ 79.180701][ T4083] begin_new_exec+0xda0/0x29e0 [ 79.185430][ T4083] load_elf_binary+0xf64/0x4180 [ 79.190247][ T4083] bprm_execve+0x669/0x14e0 [ 79.194736][ T4083] do_execveat_common+0x5fd/0x7b0 [ 79.199725][ T4083] __x64_sys_execve+0x8a/0xb0 [ 79.204380][ T4083] do_syscall_64+0x35/0xb0 [ 79.208766][ T4083] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 79.214627][ T4083] [ 79.216921][ T4083] Memory state around the buggy address: [ 79.222523][ T4083] ffff88801ca44400: fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc [ 79.230551][ T4083] ffff88801ca44480: fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.238576][ T4083] >ffff88801ca44500: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fa fb [ 79.246609][ T4083] ^ [ 79.250642][ T4083] ffff88801ca44580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.258669][ T4083] ffff88801ca44600: fb fb fb fc fc fc fc fc fc fc fc fb fb fb fb fb [ 79.266695][ T4083] ================================================================== [ 79.282522][ T4083] Kernel panic - not syncing: panic_on_warn set ... [ 79.289198][ T4083] CPU: 1 PID: 4083 Comm: syz-executor.0 Not tainted 5.18.0-rc4-syzkaller #0 [ 79.297929][ T4083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.307953][ T4083] Call Trace: [ 79.311209][ T4083] [ 79.314113][ T4083] dump_stack_lvl+0x57/0x7d [ 79.318601][ T4083] panic+0x227/0x466 [ 79.322554][ T4083] ? panic_print_sys_info.part.0+0x69/0x69 [ 79.328326][ T4083] ? preempt_schedule_common+0x59/0xc0 [ 79.333768][ T4083] ? anon_vma_interval_tree_insert+0x388/0x570 [ 79.339887][ T4083] ? preempt_schedule_thunk+0x16/0x18 [ 79.345227][ T4083] ? anon_vma_interval_tree_insert+0x388/0x570 [ 79.351347][ T4083] end_report.part.0+0x3f/0x7c [ 79.356090][ T4083] kasan_report.cold+0x93/0x1c6 [ 79.360906][ T4083] ? anon_vma_interval_tree_insert+0x388/0x570 [ 79.367025][ T4083] anon_vma_interval_tree_insert+0x388/0x570 [ 79.372971][ T4083] __vma_adjust+0x70d/0x14c0 [ 79.377531][ T4083] ? vma_mas_remove+0x2d0/0x2d0 [ 79.382372][ T4083] vma_merge+0xa57/0x12b0 [ 79.386672][ T4083] ? __vma_adjust+0x14c0/0x14c0 [ 79.391498][ T4083] ? down_write+0xde/0x150 [ 79.395885][ T4083] userfaultfd_release+0x30c/0x600 [ 79.400967][ T4083] ? find_held_lock+0x2d/0x110 [ 79.405705][ T4083] ? userfaultfd_event_wait_completion+0xa30/0xa30 [ 79.412170][ T4083] __fput+0x1f5/0x8c0 [ 79.416121][ T4083] task_work_run+0xc0/0x160 [ 79.420613][ T4083] exit_to_user_mode_prepare+0x23c/0x250 [ 79.426216][ T4083] syscall_exit_to_user_mode+0x19/0x60 [ 79.431644][ T4083] do_syscall_64+0x42/0xb0 [ 79.436027][ T4083] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 79.441897][ T4083] RIP: 0033:0x7f1ed183bd2b [ 79.446295][ T4083] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 79.465889][ T4083] RSP: 002b:00007ffdcb189be0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 79.474282][ T4083] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f1ed183bd2b [ 79.482244][ T4083] RDX: 00007f1ed19a02e8 RSI: ffffffffffffffff RDI: 0000000000000003 [ 79.490187][ T4083] RBP: 00007f1ed199d960 R08: 0000000000000000 R09: 00007f1ed19a02f0 [ 79.498126][ T4083] R10: 00007ffdcb189ce0 R11: 0000000000000293 R12: 0000000000013202 [ 79.506072][ T4083] R13: 00007ffdcb189ce0 R14: 00007f1ed199bf60 R15: 0000000000000032 [ 79.514106][ T4083] [ 79.517163][ T4083] Kernel Offset: disabled [ 79.521637][ T4083] Rebooting in 86400 seconds..