program: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4000397}]}]}], {0x14, 0x10}}, 0x70}}, 0x4080) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) sendmsg$inet6(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0xa, 0x4e22, 0x5234, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000100)="5d54ce49ecf93e39726779cc842d2527ced0be813eafba1aba435d2434bdc93e931ac13c60795208d87c0350f96dd4142918acc7f6977fe178d1858a7ce677605693e69af677611abf57ecae33f1d2f9ce7ae9ac2894eb4140cb3e454092e10eec4c83d5676f9b6f21", 0x69}, {&(0x7f0000000280)="396638dbe5958a1214151a8b50fe8b630087102890b87ddf92c8d127a30a37c55ed41f775040df178b1fa595ea1538100a2f0723afefd82c6f170c529661e1c57ce021eeb0e4f00d7860e61f79def0", 0x4f}, {&(0x7f0000000300)="5653c4e710929d3767808da467e81c5de10cd6e8e6da270a1f8c7f12c5380995a8e0fa6730c1c067e5c4b0c1f96b1884f380d2f57b9ad120c4f9f3ed4a7f3fdf81d4420f06d1c019dfbe1092", 0x4c}, {&(0x7f0000019580)="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", 0x1000}], 0x4}, 0x0) syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB="6673636b2c696e6c696e655f646174612c6e6f636f62d37df02e5ccd56615f696f2c7374725f686173683d736970686173682c6e6f7265636f766572792c646973636172642c7265636f6e7374727563745f616c6c5f636f64652c73743b5f686173683d736970686173682c686173682c66756e633d504154485f434845434b2c00c6db4c3ce939f8ede9828900"/151], 0xff, 0x5912, &(0x7f000000b240)="$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") [ 69.126584][ T4670] Bluetooth: hci0: command tx timeout [ 69.163702][ T5330] syz.0.0: vmalloc error: size 1073742088, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 69.191813][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted 6.14.0-rc5-syzkaller-00025-gcfced12f5100 #0 [ 69.192058][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.192291][ T5330] Call Trace: [ 69.192389][ T5330] [ 69.192460][ T5330] dump_stack_lvl+0x241/0x360 [ 69.192973][ T5330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.193284][ T5330] ? __pfx__printk+0x10/0x10 [ 69.194403][ T5330] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 69.194426][ T5330] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 69.194448][ T5330] warn_alloc+0x278/0x410 [ 69.194467][ T5330] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 69.194494][ T5330] ? __pfx_warn_alloc+0x10/0x10 [ 69.194517][ T5330] ? __asan_memset+0x23/0x50 [ 69.195085][ T5330] ? __alloc_frozen_pages_noprof+0xbe/0x710 [ 69.195269][ T5330] __vmalloc_node_range_noprof+0x126/0x1380 [ 69.195417][ T5330] ? __kasan_kmalloc_large+0x1a/0xa0 [ 69.195513][ T5330] ? rcu_is_watching+0x15/0xb0 [ 69.195691][ T5330] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 69.195943][ T5330] ? rcu_is_watching+0x15/0xb0 [ 69.196263][ T5330] ? trace_kmalloc+0x1f/0xd0 [ 69.196360][ T5330] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 69.196434][ T5330] ? __kvmalloc_node_noprof+0x72/0x190 [ 69.196572][ T5330] __kvmalloc_node_noprof+0x142/0x190 [ 69.196767][ T5330] ? nf_tables_newset+0x18ed/0x3170 [ 69.197011][ T5330] nf_tables_newset+0x18ed/0x3170 [ 69.197110][ T5330] ? __pfx_nf_tables_newset+0x10/0x10 [ 69.197185][ T5330] ? __pfx_lock_release+0x10/0x10 [ 69.197280][ T5330] ? __skb_clone+0x5c/0x6c0 [ 69.197319][ T5330] ? __nla_parse+0x40/0x60 [ 69.197374][ T5330] nfnetlink_rcv+0x14e3/0x2ab0 [ 69.197425][ T5330] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 69.197528][ T5330] ? netlink_deliver_tap+0x2e/0x1b0 [ 69.197604][ T5330] ? skb_clone+0x240/0x390 [ 69.197696][ T5330] ? __pfx_lock_release+0x10/0x10 [ 69.197750][ T5330] ? netlink_deliver_tap+0x2e/0x1b0 [ 69.197861][ T5330] netlink_unicast+0x7f6/0x990 [ 69.198001][ T5330] ? __pfx_netlink_unicast+0x10/0x10 [ 69.198103][ T5330] ? __virt_addr_valid+0x45f/0x530 [ 69.198184][ T5330] ? __phys_addr_symbol+0x2f/0x70 [ 69.198260][ T5330] ? __check_object_size+0x47a/0x730 [ 69.198305][ T5330] netlink_sendmsg+0x8de/0xcb0 [ 69.198385][ T5330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.198440][ T5330] ? aa_sock_msg_perm+0x91/0x160 [ 69.198513][ T5330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.198544][ T5330] __sock_sendmsg+0x221/0x270 [ 69.198565][ T5330] ____sys_sendmsg+0x53a/0x860 [ 69.198642][ T5330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.198804][ T5330] ? __fget_files+0x2a/0x410 [ 69.199003][ T5330] ? __fget_files+0x2a/0x410 [ 69.199176][ T5330] __sys_sendmsg+0x269/0x350 [ 69.199207][ T5330] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.199410][ T5330] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.199574][ T5330] ? do_syscall_64+0x100/0x230 [ 69.199618][ T5330] ? do_syscall_64+0xb6/0x230 [ 69.199672][ T5330] do_syscall_64+0xf3/0x230 [ 69.199749][ T5330] ? clear_bhb_loop+0x35/0x90 [ 69.199837][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.199871][ T5330] RIP: 0033:0x7facc898d169 [ 69.199994][ T5330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.200043][ T5330] RSP: 002b:00007facc971e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.200131][ T5330] RAX: ffffffffffffffda RBX: 00007facc8ba5fa0 RCX: 00007facc898d169 [ 69.200159][ T5330] RDX: 0000000000004080 RSI: 00004000000000c0 RDI: 0000000000000004 [ 69.200171][ T5330] RBP: 00007facc8a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 69.200215][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.200242][ T5330] R13: 0000000000000000 R14: 00007facc8ba5fa0 R15: 00007fff86b400a8 [ 69.200358][ T5330] [ 69.399777][ T5330] Mem-Info: [ 69.401331][ T5330] active_anon:2792 inactive_anon:0 isolated_anon:0 [ 69.401331][ T5330] active_file:0 inactive_file:38194 isolated_file:0 [ 69.401331][ T5330] unevictable:1768 dirty:17 writeback:0 [ 69.401331][ T5330] slab_reclaimable:7030 slab_unreclaimable:33394 [ 69.401331][ T5330] mapped:9918 shmem:2305 pagetables:503 [ 69.401331][ T5330] sec_pagetables:284 bounce:0 [ 69.401331][ T5330] kernel_misc_reclaimable:0 [ 69.401331][ T5330] free:33484 free_pcp:150 free_cma:0 [ 69.447250][ T5330] Node 0 active_anon:1312kB inactive_anon:0kB active_file:0kB inactive_file:7004kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:3428kB dirty:24kB writeback:0kB shmem:1864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2812kB pagetables:560kB sec_pagetables:1088kB all_unreclaimable? yes [ 69.479000][ T5330] Node 1 active_anon:10000kB inactive_anon:0kB active_file:0kB inactive_file:145772kB unevictable:5536kB isolated(anon):0kB isolated(file):0kB mapped:36244kB dirty:44kB writeback:0kB shmem:7356kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6660kB pagetables:1452kB sec_pagetables:48kB all_unreclaimable? no [ 69.515099][ T5330] Node 0 DMA free:2880kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1744kB unevictable:4kB writepending:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:304kB local_pcp:304kB free_cma:0kB [ 69.542331][ T5330] lowmem_reserve[]: 0 110 0 0 0 [ 69.544732][ T5330] Node 0 DMA32 free:12456kB boost:8192kB min:12372kB low:13416kB high:14460kB reserved_highatomic:0KB active_anon:1264kB inactive_anon:0kB active_file:0kB inactive_file:5260kB unevictable:1532kB writepending:20kB present:770052kB managed:113456kB mlocked:0kB bounce:0kB free_pcp:60kB local_pcp:60kB free_cma:0kB [ 69.578940][ T5330] lowmem_reserve[]: 0 0 0 0 0 [ 69.581121][ T5330] Node 1 DMA32 free:114520kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB active_anon:12088kB inactive_anon:0kB active_file:0kB inactive_file:145772kB unevictable:5536kB writepending:44kB present:786288kB managed:690876kB mlocked:0kB bounce:0kB free_pcp:1764kB local_pcp:1764kB free_cma:0kB [ 69.607206][ T5330] lowmem_reserve[]: 0 0 0 0 0 [ 69.609765][ T5330] Node 0 DMA: 0*4kB 4*8kB (U) 6*16kB (U) 86*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2880kB [ 69.615220][ T5330] Node 0 DMA32: 136*4kB (UME) 85*8kB (UME) 30*16kB (UME) 106*32kB (UME) 59*64kB (UME) 18*128kB (UME) 1*256kB (E) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 12456kB [ 69.646011][ T5330] Node 1 DMA32: 1*4kB (U) 1*8kB (E) 2*16kB (UE) 3*32kB (UME) 1*64kB (U) 0*128kB 1*256kB (E) 1*512kB (M) 1*1024kB (U) 1*2048kB (U) 26*4096kB (M) = 110540kB [ 69.656228][ T5330] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 69.666413][ T5330] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 69.676589][ T5330] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 69.686850][ T5330] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 69.698407][ T5330] 42965 total pagecache pages [ 69.700669][ T5330] 0 pages in swap cache [ 69.702538][ T5330] Free swap = 124996kB [ 69.704174][ T5330] Total swap = 124996kB [ 69.705794][ T5330] 393083 pages RAM [ 69.717840][ T5330] 0 pages HighMem/MovableOnly [ 69.720044][ T5330] 188160 pages reserved [ 69.721817][ T5330] 0 pages cma reserved [ 69.771902][ T5331] loop0: detected capacity change from 0 to 32768 [ 69.864188][ T5331] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck,norecovery,nojournal_transaction_names [ 69.872621][ T5331] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 69.876173][ T5331] bcachefs (loop0): Version upgrade required: [ 69.876173][ T5331] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 69.876173][ T5331] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 69.876173][ T5331] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 69.915951][ T5331] bcachefs (loop0): error validating btree node on loop0 at btree xattrs level 0/0 [ 69.915969][ T5331] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 69.915976][ T5331] node offset 0/16 bset u64s 60928: bset past end of btree node (offset 0 len 960 but written 16), exiting [ 69.932172][ T5331] bcachefs (loop0): Unable to continue, halting [ 69.935203][ T5331] bcachefs (loop0): flagging btree xattrs lost data [ 69.939482][ T5331] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 69.944340][ T5331] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 69.952460][ T5331] error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 69.961550][ T5331] bcachefs (loop0): error validating btree node at btree alloc level 0/0 [ 69.961569][ T5331] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 69.961579][ T5331] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 69.979589][ T5331] invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 69.979606][ T5331] gen 0 oldest_gen 0 data_type btree [ 69.979613][ T5331] journal_seq_nonempty 6 [ 69.979620][ T5331] journal_seq_empty 0 [ 69.979627][ T5331] need_discard 1 [ 69.979635][ T5331] need_inc_gen 1 [ 69.979641][ T5331] dirty_sectors 0 [ 69.979648][ T5331] stripe_sectors 0 [ 69.979654][ T5331] cached_sectors 0 [ 69.979660][ T5331] stripe 0 [ 69.979667][ T5331] stripe_redundancy 0 [ 69.979674][ T5331] io_time[READ] 1 [ 69.979680][ T5331] io_time[WRITE] 768 [ 69.979686][ T5331] fragmentation 0 [ 69.979691][ T5331] bp_start 8 [ 69.979694][ T5331] [ 69.979697][ T5331] invalid data type (got 3 should be 9): delete?, fixing [ 70.022112][ T5331] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error [ 70.022112][ T5331] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 70.035585][ T5331] invalid bkey in btree_node btree=subvolumes level=0: u64s 7 type subvolume 0:1:0 len 0 ver 0: root 4096 snapshot id 0 [ 70.035605][ T5331] invalid snapshot: delete?, fixing [ 70.050279][ T5331] bcachefs (loop0): scan_for_btree_nodes... [ 70.063561][ T5331] bcachefs (loop0): btree node scan found 7 nodes after overwrites [ 70.074531][ T5331] done [ 70.075888][ T5331] bcachefs (loop0): check_topology... [ 70.076593][ T5331] bcachefs (loop0): btree root xattrs unreadable, must recover from scan [ 70.083776][ T5331] bcachefs (loop0): bch2_get_scanned_nodes(): recovery btree=xattrs level=0 POS_MIN - SPOS_MAX [ 70.089592][ T5331] bcachefs (loop0): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 960 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 70.100527][ T37] invalid bkey in btree_node btree=xattrs level=0: u64s 16 type deleted POS_MIN len 0 ver 0: [ 70.100545][ T37] snapshot == 0: delete?, fixing [ 70.109545][ T37] bcachefs (loop0): error validating btree node at btree xattrs level 0/0 [ 70.109560][ T37] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 960 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 70.109565][ T37] node offset 0/960 bset u64s 60431 bset byte offset 240: bad k->u64s 0 (min 3 max 253), exiting [ 70.123875][ T37] bcachefs (loop0): Unable to continue, halting [ 70.127481][ T8] BUG: unable to handle page fault for address: ffffff05e9c58959 [ 70.130768][ T8] #PF: supervisor read access in kernel mode [ 70.133093][ T8] #PF: error_code(0x0000) - not-present page [ 70.135508][ T8] PGD 1342f067 P4D 1342f067 PUD 0 [ 70.138098][ T8] Oops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 70.140951][ T8] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.14.0-rc5-syzkaller-00025-gcfced12f5100 #0 [ 70.144834][ T8] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.148130][ T8] Workqueue: events nsim_fib_event_work [ 70.150259][ T8] RIP: 0010:stack_depot_save_flags+0x1b4/0x940 [ 70.153554][ T8] Code: 00 31 f6 48 89 d5 4c 89 cb e8 f8 ba c7 ff 49 89 d9 8b 5c 24 04 48 89 ea 4c 8b 44 24 08 45 85 e4 75 67 4d 8b 3f 49 39 d7 74 5c <45> 39 77 10 75 f2 45 39 4f 14 75 ec 31 c0 49 8b 0c c0 49 3b 4c c7 [ 70.161186][ T8] RSP: 0018:ffffc900001a7330 EFLAGS: 00010202 [ 70.163712][ T8] RAX: ffff88805e200000 RBX: 0000000000000001 RCX: 0000000000ed5c20 [ 70.167705][ T8] RDX: ffff88805f0d5c20 RSI: 0000000000000002 RDI: 000000000106f8ae [ 70.171243][ T8] RBP: 00000000a9dd7c52 R08: ffffc900001a73a0 R09: 000000000000000a [ 70.174461][ T8] R10: ffffc900001a7270 R11: ffffffff81ad5ae0 R12: ffff88801b041280 [ 70.177606][ T8] R13: 000000000000000a R14: 0000000001aed5c2 R15: ffffff05e9c58949 [ 70.181055][ T8] FS: 0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 70.185291][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.187756][ T8] CR2: ffffff05e9c58959 CR3: 0000000011cec000 CR4: 0000000000352ef0 [ 70.190626][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.193893][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.198125][ T8] Call Trace: [ 70.200022][ T8] [ 70.201425][ T8] ? __die_body+0x5f/0xb0 [ 70.203214][ T8] ? page_fault_oops+0x8e4/0xcc0 [ 70.205177][ T8] ? __pfx_page_fault_oops+0x10/0x10 [ 70.207171][ T8] ? is_prefetch+0x4ed/0x780 [ 70.208945][ T8] ? __pfx_is_prefetch+0x10/0x10 [ 70.210874][ T8] ? __bad_area_nosemaphore+0x118/0x770 [ 70.213243][ T8] ? preempt_count_add+0x93/0x190 [ 70.215501][ T8] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 70.218610][ T8] ? spurious_kernel_fault+0x119/0x5a0 [ 70.221352][ T8] ? exc_page_fault+0x5c8/0x8b0 [ 70.223148][ T8] ? asm_exc_page_fault+0x26/0x30 [ 70.225239][ T8] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 70.228246][ T8] ? stack_depot_save_flags+0x1b4/0x940 [ 70.231266][ T8] kasan_save_track+0x51/0x80 [ 70.234090][ T8] ? kasan_save_track+0x3f/0x80 [ 70.236767][ T8] ? kasan_save_free_info+0x40/0x50 [ 70.239492][ T8] ? __kasan_slab_free+0x59/0x70 [ 70.242106][ T8] ? kfree+0x196/0x430 [ 70.244334][ T8] ? nsim_fib_event_work+0x2466/0x3f00 [ 70.247522][ T8] ? process_scheduled_works+0xabe/0x18e0 [ 70.250538][ T8] ? worker_thread+0x870/0xd30 [ 70.252777][ T8] ? kthread+0x7a9/0x920 [ 70.254586][ T8] ? ret_from_fork+0x4b/0x80 [ 70.256709][ T8] ? ret_from_fork_asm+0x1a/0x30 [ 70.259115][ T8] kasan_save_free_info+0x40/0x50 [ 70.261299][ T8] __kasan_slab_free+0x59/0x70 [ 70.263195][ T8] ? nsim_fib_event_work+0x2466/0x3f00 [ 70.265364][ T8] kfree+0x196/0x430 [ 70.267126][ T8] ? nsim_fib_event_work+0x2466/0x3f00 [ 70.269572][ T8] nsim_fib_event_work+0x2466/0x3f00 [ 70.272132][ T8] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 70.274668][ T8] ? mark_lock+0x9a/0x360 [ 70.276482][ T8] ? debug_object_deactivate+0x2d5/0x390 [ 70.278517][ T8] ? __lock_acquire+0x1397/0x2100 [ 70.280544][ T8] ? do_raw_spin_unlock+0x58/0x8b0 [ 70.282687][ T8] ? __pfx_lock_acquire+0x10/0x10 [ 70.285752][ T8] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 70.288846][ T8] ? process_scheduled_works+0x9c6/0x18e0 [ 70.291172][ T8] process_scheduled_works+0xabe/0x18e0 [ 70.293343][ T8] ? __pfx_process_scheduled_works+0x10/0x10 [ 70.295983][ T8] ? assign_work+0x364/0x3d0 [ 70.297975][ T8] worker_thread+0x870/0xd30 [ 70.299903][ T8] ? __kthread_parkme+0x169/0x1d0 [ 70.302386][ T8] ? __pfx_worker_thread+0x10/0x10 [ 70.304854][ T8] kthread+0x7a9/0x920 [ 70.306650][ T8] ? __pfx_kthread+0x10/0x10 [ 70.308527][ T8] ? __pfx_worker_thread+0x10/0x10 [ 70.310511][ T8] ? __pfx_kthread+0x10/0x10 [ 70.312527][ T8] ? __pfx_kthread+0x10/0x10 [ 70.315062][ T8] ? __pfx_kthread+0x10/0x10 [ 70.317327][ T8] ? _raw_spin_unlock_irq+0x23/0x50 [ 70.319225][ T8] ? lockdep_hardirqs_on+0x99/0x150 [ 70.321414][ T8] ? __pfx_kthread+0x10/0x10 [ 70.323408][ T8] ret_from_fork+0x4b/0x80 [ 70.325416][ T8] ? __pfx_kthread+0x10/0x10 [ 70.327657][ T8] ret_from_fork_asm+0x1a/0x30 [ 70.329989][ T8] [ 70.331483][ T8] Modules linked in: [ 70.333197][ T8] CR2: ffffff05e9c58959 [ 70.334700][ T8] ---[ end trace 0000000000000000 ]--- [ 70.336847][ T8] RIP: 0010:stack_depot_save_flags+0x1b4/0x940 [ 70.339442][ T8] Code: 00 31 f6 48 89 d5 4c 89 cb e8 f8 ba c7 ff 49 89 d9 8b 5c 24 04 48 89 ea 4c 8b 44 24 08 45 85 e4 75 67 4d 8b 3f 49 39 d7 74 5c <45> 39 77 10 75 f2 45 39 4f 14 75 ec 31 c0 49 8b 0c c0 49 3b 4c c7 [ 70.347681][ T8] RSP: 0018:ffffc900001a7330 EFLAGS: 00010202 [ 70.350103][ T8] RAX: ffff88805e200000 RBX: 0000000000000001 RCX: 0000000000ed5c20 [ 70.353522][ T8] RDX: ffff88805f0d5c20 RSI: 0000000000000002 RDI: 000000000106f8ae [ 70.357653][ T8] RBP: 00000000a9dd7c52 R08: ffffc900001a73a0 R09: 000000000000000a [ 70.361192][ T8] R10: ffffc900001a7270 R11: ffffffff81ad5ae0 R12: ffff88801b041280 [ 70.364326][ T8] R13: 000000000000000a R14: 0000000001aed5c2 R15: ffffff05e9c58949 [ 70.367942][ T8] FS: 0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 70.372372][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.375510][ T8] CR2: ffffff05e9c58959 CR3: 0000000011cec000 CR4: 0000000000352ef0 [ 70.378576][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.381527][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.384909][ T8] Kernel panic - not syncing: Fatal exception [ 70.387775][ T8] Kernel Offset: disabled [ 70.389502][ T8] Rebooting in 86400 seconds..