syzkaller login: [ 250.757648][ T1857] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 250.824082][ T1857] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 250.876442][ T1857] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 259.712223][ T1857] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:21512' (ECDSA) to the list of known hosts. 1970/01/01 00:05:10 fuzzer started 1970/01/01 00:05:23 dialing manager at localhost:39725 [ 329.298686][ T2024] cgroup: Unknown subsys name 'net' [ 330.281052][ T2024] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:05:30 syscalls: 2853 1970/01/01 00:05:30 code coverage: enabled 1970/01/01 00:05:30 comparison tracing: enabled 1970/01/01 00:05:30 extra coverage: enabled 1970/01/01 00:05:30 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:05:30 setuid sandbox: enabled 1970/01/01 00:05:30 namespace sandbox: enabled 1970/01/01 00:05:30 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:05:30 fault injection: enabled 1970/01/01 00:05:30 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:05:30 net packet injection: enabled 1970/01/01 00:05:30 net device setup: enabled 1970/01/01 00:05:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:05:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:05:30 USB emulation: enabled 1970/01/01 00:05:30 hci packet injection: /dev/vhci does not exist 1970/01/01 00:05:30 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:05:30 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:05:30 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:05:36 fetching corpus: 48, signal 32164/34909 (executing program) 1970/01/01 00:05:41 fetching corpus: 98, signal 49843/52901 (executing program) 1970/01/01 00:05:45 fetching corpus: 142, signal 55986/59526 (executing program) 1970/01/01 00:05:48 fetching corpus: 189, signal 64541/68124 (executing program) 1970/01/01 00:05:51 fetching corpus: 238, signal 70677/74241 (executing program) 1970/01/01 00:05:54 fetching corpus: 286, signal 75823/79274 (executing program) 1970/01/01 00:05:57 fetching corpus: 335, signal 80644/83823 (executing program) 1970/01/01 00:06:00 fetching corpus: 382, signal 84823/87656 (executing program) 1970/01/01 00:06:02 fetching corpus: 431, signal 87294/89925 (executing program) 1970/01/01 00:06:05 fetching corpus: 480, signal 90166/92448 (executing program) 1970/01/01 00:06:08 fetching corpus: 529, signal 93921/95479 (executing program) 1970/01/01 00:06:11 fetching corpus: 579, signal 96904/97833 (executing program) 1970/01/01 00:06:14 fetching corpus: 623, signal 99133/99517 (executing program) 1970/01/01 00:06:15 fetching corpus: 623, signal 99138/99546 (executing program) 1970/01/01 00:06:15 fetching corpus: 623, signal 99138/99576 (executing program) 1970/01/01 00:06:15 fetching corpus: 624, signal 99143/99607 (executing program) 1970/01/01 00:06:15 fetching corpus: 624, signal 99143/99633 (executing program) 1970/01/01 00:06:16 fetching corpus: 624, signal 99143/99664 (executing program) 1970/01/01 00:06:16 fetching corpus: 624, signal 99144/99699 (executing program) 1970/01/01 00:06:16 fetching corpus: 624, signal 99144/99723 (executing program) 1970/01/01 00:06:16 fetching corpus: 624, signal 99144/99750 (executing program) 1970/01/01 00:06:16 fetching corpus: 624, signal 99144/99776 (executing program) 1970/01/01 00:06:16 fetching corpus: 624, signal 99144/99798 (executing program) 1970/01/01 00:06:16 fetching corpus: 624, signal 99144/99833 (executing program) 1970/01/01 00:06:16 fetching corpus: 624, signal 99144/99870 (executing program) 1970/01/01 00:06:17 fetching corpus: 624, signal 99144/99899 (executing program) 1970/01/01 00:06:17 fetching corpus: 624, signal 99144/99930 (executing program) 1970/01/01 00:06:17 fetching corpus: 624, signal 99144/99957 (executing program) 1970/01/01 00:06:17 fetching corpus: 624, signal 99144/99987 (executing program) 1970/01/01 00:06:17 fetching corpus: 624, signal 99144/100017 (executing program) 1970/01/01 00:06:17 fetching corpus: 624, signal 99144/100046 (executing program) 1970/01/01 00:06:17 fetching corpus: 624, signal 99144/100076 (executing program) 1970/01/01 00:06:17 fetching corpus: 624, signal 99144/100104 (executing program) 1970/01/01 00:06:18 fetching corpus: 624, signal 99144/100136 (executing program) 1970/01/01 00:06:18 fetching corpus: 624, signal 99144/100165 (executing program) 1970/01/01 00:06:18 fetching corpus: 624, signal 99179/100199 (executing program) 1970/01/01 00:06:18 fetching corpus: 624, signal 99179/100226 (executing program) 1970/01/01 00:06:18 fetching corpus: 624, signal 99179/100246 (executing program) 1970/01/01 00:06:19 fetching corpus: 624, signal 99179/100273 (executing program) 1970/01/01 00:06:19 fetching corpus: 624, signal 99179/100302 (executing program) 1970/01/01 00:06:19 fetching corpus: 624, signal 99179/100331 (executing program) 1970/01/01 00:06:19 fetching corpus: 624, signal 99179/100359 (executing program) 1970/01/01 00:06:19 fetching corpus: 624, signal 99181/100383 (executing program) 1970/01/01 00:06:19 fetching corpus: 624, signal 99181/100413 (executing program) 1970/01/01 00:06:19 fetching corpus: 624, signal 99181/100446 (executing program) 1970/01/01 00:06:20 fetching corpus: 624, signal 99181/100478 (executing program) 1970/01/01 00:06:20 fetching corpus: 624, signal 99181/100508 (executing program) 1970/01/01 00:06:20 fetching corpus: 624, signal 99181/100541 (executing program) 1970/01/01 00:06:20 fetching corpus: 624, signal 99181/100560 (executing program) 1970/01/01 00:06:20 fetching corpus: 624, signal 99181/100566 (executing program) 1970/01/01 00:06:20 fetching corpus: 624, signal 99181/100566 (executing program) 1970/01/01 00:08:02 starting 2 fuzzer processes 00:08:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:08:02 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000001380)) [ 507.263178][ T2036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.356761][ T2036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.393796][ T2038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.500973][ T2038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.653994][ T2036] device hsr_slave_0 entered promiscuous mode [ 518.697243][ T2036] device hsr_slave_1 entered promiscuous mode [ 520.322467][ T2038] device hsr_slave_0 entered promiscuous mode [ 520.360007][ T2038] device hsr_slave_1 entered promiscuous mode [ 520.385178][ T2038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 520.388474][ T2038] Cannot create hsr debugfs directory [ 526.872409][ T2036] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 527.007849][ T2036] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 527.126946][ T2036] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 527.408754][ T2036] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 528.385209][ T2038] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 528.526368][ T2038] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 528.717379][ T2038] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 528.941263][ T2038] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 538.844963][ T2036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.474531][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 539.577903][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 539.877173][ T2038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.503636][ T2026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 540.572782][ T2026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 547.475800][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 547.516103][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 547.581625][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 547.607166][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 547.637130][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 547.802367][ T2026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 548.063051][ T2026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 548.122837][ T2026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 548.434073][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 548.473203][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 549.447299][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 549.494041][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 549.517739][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 549.567024][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 549.602589][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 549.621192][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 549.708816][ T2036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 550.871846][ T2038] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 550.873010][ T2038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 551.016564][ T2025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 551.045155][ T2025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 551.075438][ T2025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 551.094406][ T2025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 551.131702][ T2025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 551.135951][ T2025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 551.196373][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 551.943859][ T2025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 551.953816][ T2025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 570.124430][ T2025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 570.208436][ T2025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 571.183040][ T2026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 571.247965][ T2026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 576.537802][ T2026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 576.623106][ T2026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 576.732364][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 576.791112][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 576.937697][ T2036] device veth0_vlan entered promiscuous mode [ 577.454251][ T2036] device veth1_vlan entered promiscuous mode [ 578.866748][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 578.937306][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 579.111899][ T2026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 579.156275][ T2026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 579.403308][ T2038] device veth0_vlan entered promiscuous mode [ 579.597028][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 579.646961][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 580.023565][ T2036] device veth0_macvtap entered promiscuous mode [ 580.304545][ T2036] device veth1_macvtap entered promiscuous mode [ 580.416945][ T2038] device veth1_vlan entered promiscuous mode [ 581.572894][ T2025] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 581.616552][ T2025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 581.875830][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 581.924908][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 582.167952][ T2036] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.191547][ T2036] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.193239][ T2036] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.194734][ T2036] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.483300][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 582.563692][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 583.062183][ T2038] device veth0_macvtap entered promiscuous mode [ 583.534044][ T2038] device veth1_macvtap entered promiscuous mode [ 584.961064][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 585.008301][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 585.343994][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 585.388424][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 585.604812][ T2038] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.606148][ T2038] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.607291][ T2038] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.608759][ T2038] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.238724][ T2038] get_swap_device: Bad swap file entry 141ffff5f003b308 [ 589.257052][ T2038] BUG: Bad page map in process syz-executor.1 pte:ffffffff801110e4 pmd:276e0c01 [ 589.258639][ T2038] addr:00007fffaf7f1000 vm_flags:100400fb anon_vma:0000000000000000 mapping:ffffaf800ab2c730 index:1df [ 589.264014][ T2038] file:kcov fault:0x0 mmap:kcov_mmap readpage:0x0 [ 589.266496][ T2038] CPU: 1 PID: 2038 Comm: syz-executor.1 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 589.267662][ T2038] Hardware name: riscv-virtio,qemu (DT) [ 589.268478][ T2038] Call Trace: [ 589.269213][ T2038] [] dump_backtrace+0x2e/0x3c [ 589.270979][ T2038] [] show_stack+0x34/0x40 [ 589.272148][ T2038] [] dump_stack_lvl+0xe4/0x150 [ 589.273366][ T2038] [] dump_stack+0x1c/0x24 [ 589.274609][ T2038] [] print_bad_pte+0x3d4/0x4a0 [ 589.275830][ T2038] [] vm_normal_page+0x20c/0x22a [ 589.276933][ T2038] [] copy_page_range+0x828/0x236c [ 589.278105][ T2038] [] dup_mm+0xb5c/0xe10 [ 589.279638][ T2038] [] copy_process+0x25da/0x3c34 [ 589.281389][ T2038] [] kernel_clone+0xee/0x920 [ 589.282668][ T2038] [] __do_sys_clone+0xf2/0x12e [ 589.284172][ T2038] [] sys_clone+0x32/0x44 [ 589.285887][ T2038] [] ret_from_syscall+0x0/0x2 [ 589.288630][ T2038] Disabling lock debugging due to kernel taint [ 589.361951][ T2038] BUG: Bad page map in process syz-executor.1 pte:41b58ab3 pmd:276e0c01 [ 589.363145][ T2038] addr:00007fffaf7fc000 vm_flags:100400fb anon_vma:0000000000000000 mapping:ffffaf800ab2c730 index:1ea [ 589.364275][ T2038] file:kcov fault:0x0 mmap:kcov_mmap readpage:0x0 [ 589.365611][ T2038] CPU: 1 PID: 2038 Comm: syz-executor.1 Tainted: G B 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 589.366990][ T2038] Hardware name: riscv-virtio,qemu (DT) [ 589.367980][ T2038] Call Trace: [ 589.368729][ T2038] [] dump_backtrace+0x2e/0x3c [ 589.370277][ T2038] [] show_stack+0x34/0x40 [ 589.371247][ T2038] [] dump_stack_lvl+0xe4/0x150 [ 589.372273][ T2038] [] dump_stack+0x1c/0x24 [ 589.373284][ T2038] [] print_bad_pte+0x3d4/0x4a0 [ 589.374340][ T2038] [] vm_normal_page+0x20c/0x22a [ 589.375321][ T2038] [] copy_page_range+0x828/0x236c [ 589.376313][ T2038] [] dup_mm+0xb5c/0xe10 [ 589.377316][ T2038] [] copy_process+0x25da/0x3c34 [ 589.378377][ T2038] [] kernel_clone+0xee/0x920 [ 589.380226][ T2038] [] __do_sys_clone+0xf2/0x12e [ 589.381529][ T2038] [] sys_clone+0x32/0x44 [ 589.382235][ T2038] [] ret_from_syscall+0x0/0x2 [ 589.385023][ T2038] BUG: Bad page map in process syz-executor.1 pte:ffffffff8451f630 pmd:276e0c01 [ 589.386044][ T2038] addr:00007fffaf7fd000 vm_flags:100400fb anon_vma:0000000000000000 mapping:ffffaf800ab2c730 index:1eb [ 589.387405][ T2038] file:kcov fault:0x0 mmap:kcov_mmap readpage:0x0 [ 589.388546][ T2038] CPU: 1 PID: 2038 Comm: syz-executor.1 Tainted: G B 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 589.390753][ T2038] Hardware name: riscv-virtio,qemu (DT) [ 589.391498][ T2038] Call Trace: [ 589.392103][ T2038] [] dump_backtrace+0x2e/0x3c [ 589.392819][ T2038] [] show_stack+0x34/0x40 [ 589.393686][ T2038] [] dump_stack_lvl+0xe4/0x150 [ 589.394601][ T2038] [] dump_stack+0x1c/0x24 [ 589.395809][ T2038] [] print_bad_pte+0x3d4/0x4a0 [ 589.396645][ T2038] [] vm_normal_page+0x20c/0x22a [ 589.397495][ T2038] [] copy_page_range+0x828/0x236c [ 589.398987][ T2038] [] dup_mm+0xb5c/0xe10 [ 589.400404][ T2038] [] copy_process+0x25da/0x3c34 [ 589.401432][ T2038] [] kernel_clone+0xee/0x920 [ 589.402208][ T2038] [] __do_sys_clone+0xf2/0x12e [ 589.403510][ T2038] [] sys_clone+0x32/0x44 [ 589.404623][ T2038] [] ret_from_syscall+0x0/0x2 [ 589.471431][ T2038] Unable to handle kernel paging request at virtual address ffffaf847c9ffff8 [ 589.474342][ T2038] Oops [#1] [ 589.475077][ T2038] Modules linked in: [ 589.475883][ T2038] CPU: 1 PID: 2038 Comm: syz-executor.1 Tainted: G B 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 589.477288][ T2038] Hardware name: riscv-virtio,qemu (DT) [ 589.478049][ T2038] epc : copy_page_range+0x1ade/0x236c [ 589.479139][ T2038] ra : copy_page_range+0x1ade/0x236c [ 589.480533][ T2038] epc : ffffffff803dce04 ra : ffffffff803dce04 sp : ffffaf801d987680 [ 589.481532][ T2038] gp : ffffffff85863ac0 tp : ffffaf8009f98000 t0 : ffffaf801d987830 [ 589.482537][ T2038] t1 : fffff5ef03b30f05 t2 : 0000000000000009 s0 : ffffaf801d9878e0 [ 589.484417][ T2038] s1 : ffffffff80110fdc a0 : ffffaf847c9ffff8 a1 : 0000000000000007 [ 589.485375][ T2038] a2 : 1ffff5f08f93ffff a3 : ffffffff803dce04 a4 : 0000000000000000 [ 589.486420][ T2038] a5 : ffffaf847c9ffff8 a6 : 0000000000f00000 a7 : ffffaf801d98782f [ 589.488201][ T2038] s2 : ffffaf801d983ff0 s3 : ffffaf800b7deff0 s4 : 0000000000000000 [ 589.489693][ T2038] s5 : 7c1ffffffff00221 s6 : 001ffffffff00221 s7 : ffffaf847c9ffff8 [ 589.491018][ T2038] s8 : 000000000000001f s9 : 00007fffaf800000 s10: ffffaf800cc35210 [ 589.491740][ T2038] s11: 00007fffaf7fe000 t3 : 00007fffb1f04ac0 t4 : fffff5ef03b30f04 [ 589.492990][ T2038] t5 : fffff5ef03b30f06 t6 : 0000000000000000 [ 589.493752][ T2038] status: 0000000000000120 badaddr: ffffaf847c9ffff8 cause: 000000000000000d [ 589.494649][ T2038] [] dup_mm+0xb5c/0xe10 [ 589.495807][ T2038] [] copy_process+0x25da/0x3c34 [ 589.497258][ T2038] [] kernel_clone+0xee/0x920 [ 589.498428][ T2038] [] __do_sys_clone+0xf2/0x12e [ 589.499770][ T2038] [] sys_clone+0x32/0x44 [ 589.500480][ T2038] [] ret_from_syscall+0x0/0x2 [ 589.502760][ T2038] ---[ end trace 0000000000000000 ]--- [ 589.504144][ T2038] Kernel panic - not syncing: Fatal exception [ 589.505124][ T2038] SMP: stopping secondary CPUs [ 589.506738][ T2038] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:59:36 Registers: info registers vcpu 0 pc ffffffff8010b22c mhartid 0000000000000000 mstatus 00000000000001a0 mip 00000000000000a0 mie 000000000000020a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8020100c sepc ffffffff80121626 mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff831a18d8 x2/sp ffffaf801d986a00 x3/gp ffffffff85863ac0 x4/tp ffffaf8009f98000 x5/t0 0000000000046000 x6/t1 fffff5ef0b53c90c x7/t2 0000000000000000 x8/s0 ffffaf801d986a10 x9/s1 0000000000001000 x10/a0 0000000000000120 x11/a1 ffffffffffffffff x12/a2 1ffff5f0013f3001 x13/a3 ffffffff80146d84 x14/a4 0000000000010005 x15/a5 0000000000000000 x16/a6 0000000000f00000 x17/a7 ffffaf805a9e4863 x18/s2 ffffaf8009f98000 x19/s3 ffffffff84b73ec0 x20/s4 0000000000000000 x21/s5 ffffffff8343c840 x22/s6 ffffffffffffffff x23/s7 ffffffff800c889c x24/s8 ffffffff86c1a620 x25/s9 ffffffff8588a420 x26/s10 ffffaf805a9e7400 x27/s11 ffffffff8018e412 x28/t3 fffffffff3f3f300 x29/t4 fffff5ef0b53c90c x30/t5 fffff5ef0b53c90d x31/t6 ffffffff86bda9cf f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff8005f5f6 mhartid 0000000000000001 mstatus 00000000000000a0 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8000f97e sepc 0000000000039214 mcause 0000000000000009 scause 0000000000000008 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80146d6c x2/sp ffffaf800c773d90 x3/gp ffffffff85863ac0 x4/tp ffffaf800b2cb080 x5/t0 0000000000000000 x6/t1 8a4955e870fa4f00 x7/t2 00007fffe2e651b7 x8/s0 ffffaf800c773d40 x9/s1 0000000000000002 x10/a0 ffffaf800b2cb080 x11/a1 00000000000f0000 x12/a2 0000000000000002 x13/a3 ffffffff8011680e x14/a4 0000000000000000 x15/a5 0000000000000000 x16/a6 0000000000f00000 x17/a7 8a4955e870fa4f00 x18/s2 ffffffff86c1a620 x19/s3 0000000000000081 x20/s4 0000000000000000 x21/s5 ffffaf800b2cba98 x22/s6 ffffffff858c4ca0 x23/s7 00000000000c0000 x24/s8 ffffffff858c4ca0 x25/s9 0000000000000000 x26/s10 0000000000000082 x27/s11 ffffaf800b2cb080 x28/t3 fffffffff3f3f300 x29/t4 ffffffff80112282 x30/t5 1ffff5f0018ee778 x31/t6 001443fd00000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000