[ 86.541434][ T9] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:56981' (ED25519) to the list of known hosts. [ 131.494498][ T5332] loop0: detected capacity change from 0 to 32768 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 134.313596][ T5332] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 134.319400][ T5332] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 134.322624][ T5332] bcachefs (loop0): Version upgrade required: [ 134.322624][ T5332] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 134.322624][ T5332] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 134.322624][ T5332] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 135.928254][ T5332] bcachefs (loop0): accounting_read... done [ 136.499827][ T5332] bcachefs (loop0): alloc_read... done [ 136.502130][ T5332] bcachefs (loop0): stripes_read... done [ 136.504175][ T5332] bcachefs (loop0): snapshots_read... done [ 136.506683][ T5332] bcachefs (loop0): check_allocations... done [ 137.476755][ T5332] bcachefs (loop0): going read-write executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 137.480189][ T5332] bcachefs (loop0): journal_replay... done executing program executing program executing program executing program [ 143.930961][ T5332] bcachefs (loop0): check_alloc_info... done [ 143.937409][ T5332] bcachefs (loop0): check_lrus... done [ 143.940157][ T5332] bcachefs (loop0): check_btree_backpointers... done [ 143.943256][ T5332] bcachefs (loop0): check_backpointers_to_extents... done [ 143.946877][ T5332] bcachefs (loop0): check_extents_to_backpointers... [ 143.947974][ T5332] missing backpointer for btree=inodes l=1 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 143.947996][ T5332] got: u64s 5 type deleted 0:9961472:0 len 0 ver 0 [ 143.948003][ T5332] want: u64s 9 type backpointer 0:9961472:0 len 0 ver 0: bucket=0:38:0 btree=inodes l=1 offset=0:0 len=256 pos=SPOS_MAX, fixing [ 143.964703][ T5332] missing backpointer for btree=dirents l=1 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 143.964719][ T5332] got: u64s 5 type deleted 0:10747904:0 len 0 ver 0 [ 143.964726][ T5332] want: u64s 9 type backpointer 0:10747904:0 len 0 ver 0: bucket=0:41:0 btree=dirents l=1 offset=0:0 len=256 pos=SPOS_MAX, fixing [ 143.979136][ T5332] missing backpointer for btree=alloc l=1 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 143.979160][ T5332] got: u64s 5 type deleted 0:6815744:0 len 0 ver 0 [ 143.979166][ T5332] want: u64s 9 type backpointer 0:6815744:0 len 0 ver 0: bucket=0:26:0 btree=alloc l=1 offset=0:0 len=256 pos=SPOS_MAX, fixing [ 143.993244][ T5332] missing backpointer for btree=subvolumes l=1 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 [ 143.993254][ T5332] got: u64s 5 type deleted 0:9175040:0 len 0 ver 0 [ 143.993258][ T5332] want: u64s 9 type backpointer 0:9175040:0 len 0 ver 0: bucket=0:35:0 btree=subvolumes l=1 offset=0:0 len=256 pos=SPOS_MAX, fixing [ 144.010162][ T5332] missing backpointer for btree=snapshots l=1 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 144.010178][ T5332] got: u64s 5 type deleted 0:8388608:0 len 0 ver 0 [ 144.010185][ T5332] want: u64s 9 type backpointer 0:8388608:0 len 0 ver 0: bucket=0:32:0 btree=snapshots l=1 offset=0:0 len=256 pos=SPOS_MAX, fixing [ 144.031172][ T5332] missing backpointer for btree=freespace l=1 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 40 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 144.031189][ T5332] got: u64s 5 type deleted 0:7602176:0 len 0 ver 0 [ 144.031197][ T5332] want: u64s 9 type backpointer 0:7602176:0 len 0 ver 0: bucket=0:29:0 btree=freespace l=1 offset=0:0 len=256 pos=SPOS_MAX, fixing [ 144.048378][ T5332] done [ 144.062461][ T5332] bcachefs (loop0): check_alloc_to_lru_refs... done [ 144.066284][ T5332] bcachefs (loop0): bucket_gens_init... done executing program [ 145.123522][ T5332] bcachefs (loop0): check_snapshot_trees... done [ 145.126989][ T5332] bcachefs (loop0): check_snapshots... [ 145.127340][ T5332] snapshot points to missing/incorrect tree: [ 145.127354][ T5332] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: is_subvol 1 deleted 0 parent 0 children 0 0 subvol 1 tree 0, fixing [ 145.137656][ T5332] snapshot points to missing/incorrect tree: [ 145.137668][ T5332] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: is_subvol 1 deleted 0 parent 0 children 0 0 subvol 1 tree 0, fixing executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 147.055394][ T5332] snapshot points to missing/incorrect tree: [ 147.055418][ T5332] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: is_subvol 1 deleted 0 parent 0 children 0 0 subvol 1 tree 0, fixing [ 147.066054][ T5332] done [ 147.512153][ T5332] bcachefs (loop0): check_subvols... done executing program executing program executing program [ 148.132880][ T5332] bcachefs (loop0): check_subvol_children... done [ 149.419299][ T5332] bcachefs (loop0): delete_dead_snapshots... done [ 149.422773][ T5332] bcachefs (loop0): check_inodes... done [ 149.426086][ T5332] bcachefs (loop0): check_extents... done [ 149.428943][ T5332] bcachefs (loop0): check_indirect_extents... done [ 149.431636][ T5332] bcachefs (loop0): check_dirents... done [ 149.434294][ T5332] bcachefs (loop0): check_xattrs... done [ 149.817027][ T5332] bcachefs (loop0): check_root... done [ 149.820103][ T5332] bcachefs (loop0): check_unreachable_inodes... done [ 149.823157][ T5332] bcachefs (loop0): check_subvolume_structure... done [ 149.827907][ T5332] bcachefs (loop0): check_directory_structure... done [ 150.214405][ T5332] bcachefs (loop0): check_nlinks... done [ 150.217782][ T5332] bcachefs (loop0): resume_logged_ops... done executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 150.223517][ T5332] bcachefs (loop0): delete_dead_inodes... done [ 150.227281][ T5332] bcachefs (loop0): set_fs_needs_rebalance... done executing program executing program executing program executing program [ 150.992893][ T5332] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 150.996475][ T5332] bcachefs (loop0): check_alloc_info... done [ 151.001296][ T5332] bcachefs (loop0): check_lrus... done [ 151.003364][ T5332] bcachefs (loop0): check_btree_backpointers... done [ 151.006196][ T5332] bcachefs (loop0): check_backpointers_to_extents... done [ 151.009376][ T5332] bcachefs (loop0): check_extents_to_backpointers... done [ 151.012772][ T5332] bcachefs (loop0): check_alloc_to_lru_refs... done [ 151.015928][ T5332] bcachefs (loop0): bucket_gens_init... done [ 151.020185][ T5332] bcachefs (loop0): check_snapshot_trees... done [ 151.022728][ T5332] bcachefs (loop0): check_snapshots... done [ 151.025080][ T5332] bcachefs (loop0): check_subvols... done [ 151.027270][ T5332] bcachefs (loop0): check_subvol_children... done [ 151.029603][ T5332] bcachefs (loop0): delete_dead_snapshots... done [ 151.032014][ T5332] bcachefs (loop0): check_inodes... done [ 151.034410][ T5332] bcachefs (loop0): check_extents... done [ 151.036880][ T5332] bcachefs (loop0): check_indirect_extents... done [ 151.039255][ T5332] bcachefs (loop0): check_dirents... done [ 151.041794][ T5332] bcachefs (loop0): check_xattrs... done [ 151.044095][ T5332] bcachefs (loop0): check_root... done [ 151.046609][ T5332] bcachefs (loop0): check_unreachable_inodes... done [ 151.049267][ T5332] bcachefs (loop0): check_subvolume_structure... done [ 151.051881][ T5332] bcachefs (loop0): check_directory_structure... done [ 151.054620][ T5332] bcachefs (loop0): check_nlinks... done [ 151.057099][ T5332] bcachefs (loop0): resume_logged_ops... done [ 151.059542][ T5332] bcachefs (loop0): delete_dead_inodes... done [ 151.061958][ T5332] bcachefs (loop0): set_fs_needs_rebalance... done [ 151.068003][ T5332] bcachefs (loop0): bch2_copygc_start(): error creating copygc thread EINTR [ 151.071371][ T5332] bcachefs (loop0): error starting copygc thread [ 151.073661][ T5332] bcachefs (loop0): bch2_fs_start(): error starting filesystem EINTR [ 151.076727][ T5332] bcachefs (loop0): shutting down [ 151.078701][ T5332] bcachefs (loop0): going read-only executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 153.167312][ T5332] bcachefs (loop0): finished waiting for writes to stop [ 153.170342][ T5332] bcachefs (loop0): flushing journal and stopping allocators, journal seq 40 [ 153.173587][ T5332] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 40 [ 153.178235][ T5332] bcachefs (loop0): shutdown complete, journal seq 41 [ 153.181565][ T5332] bcachefs (loop0): marking filesystem clean [ 153.195061][ T5332] bcachefs (loop0): shutdown complete [ 153.197809][ T1031] ================================================================== [ 153.200599][ T1031] BUG: KASAN: slab-use-after-free in percpu_ref_put+0xda/0x250 [ 153.203473][ T1031] Read of size 8 at addr ffff88801cfbe0b0 by task kworker/u4:7/1031 [ 153.207565][ T1031] [ 153.208484][ T1031] CPU: 0 UID: 0 PID: 1031 Comm: kworker/u4:7 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 153.212306][ T1031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.215947][ T1031] Workqueue: loop0 loop_rootcg_workfn [ 153.217659][ T1031] Call Trace: [ 153.218834][ T1031] [ 153.219843][ T1031] dump_stack_lvl+0x241/0x360 [ 153.221635][ T1031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.223401][ T1031] ? __pfx__printk+0x10/0x10 [ 153.224987][ T1031] ? _printk+0xd5/0x120 [ 153.226487][ T1031] ? __virt_addr_valid+0x183/0x530 [ 153.228476][ T1031] ? __virt_addr_valid+0x183/0x530 [ 153.230342][ T1031] print_report+0x169/0x550 [ 153.232014][ T1031] ? __virt_addr_valid+0x183/0x530 [ 153.233879][ T1031] ? __virt_addr_valid+0x183/0x530 [ 153.235756][ T1031] ? __virt_addr_valid+0x45f/0x530 [ 153.237615][ T1031] ? __phys_addr+0xba/0x170 [ 153.239380][ T1031] ? percpu_ref_put+0xda/0x250 [ 153.241320][ T1031] kasan_report+0x143/0x180 [ 153.243130][ T1031] ? percpu_ref_put+0xda/0x250 [ 153.244878][ T1031] ? percpu_ref_put+0x1f/0x250 [ 153.246725][ T1031] percpu_ref_put+0xda/0x250 [ 153.248469][ T1031] blk_update_request+0x5e5/0x1160 [ 153.250297][ T1031] blk_mq_end_request+0x3e/0x70 [ 153.252090][ T1031] loop_process_work+0x1c10/0x2170 [ 153.253961][ T1031] ? __pfx_loop_process_work+0x10/0x10 [ 153.256060][ T1031] ? register_lock_class+0x102/0x980 [ 153.258038][ T1031] ? __pfx_register_lock_class+0x10/0x10 [ 153.260142][ T1031] ? mark_lock+0x9a/0x360 [ 153.261756][ T1031] ? debug_object_deactivate+0x2d5/0x390 [ 153.263938][ T1031] ? __pfx_lock_acquire+0x10/0x10 [ 153.265791][ T1031] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 153.267939][ T1031] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.270353][ T1031] ? process_scheduled_works+0x976/0x1850 [ 153.272510][ T1031] process_scheduled_works+0xa63/0x1850 [ 153.274638][ T1031] ? __pfx_process_scheduled_works+0x10/0x10 [ 153.276929][ T1031] ? assign_work+0x364/0x3d0 [ 153.278752][ T1031] worker_thread+0x870/0xd30 [ 153.280521][ T1031] ? __kthread_parkme+0x169/0x1d0 [ 153.282431][ T1031] ? __pfx_worker_thread+0x10/0x10 [ 153.284341][ T1031] kthread+0x2f0/0x390 [ 153.285847][ T1031] ? __pfx_worker_thread+0x10/0x10 [ 153.287849][ T1031] ? __pfx_kthread+0x10/0x10 [ 153.289563][ T1031] ret_from_fork+0x4b/0x80 [ 153.291304][ T1031] ? __pfx_kthread+0x10/0x10 [ 153.293024][ T1031] ret_from_fork_asm+0x1a/0x30 [ 153.294826][ T1031] [ 153.296021][ T1031] [ 153.296909][ T1031] Allocated by task 5332: [ 153.298483][ T1031] kasan_save_track+0x3f/0x80 [ 153.300298][ T1031] __kasan_kmalloc+0x98/0xb0 [ 153.301957][ T1031] __kmalloc_cache_noprof+0x19c/0x2c0 [ 153.303840][ T1031] __bch2_dev_alloc+0x57/0xa60 [ 153.305487][ T1031] bch2_dev_alloc+0xd4/0x170 [ 153.307208][ T1031] bch2_fs_open+0x2e3f/0x2f80 [ 153.308943][ T1031] bch2_fs_get_tree+0x738/0x1710 [ 153.310680][ T1031] vfs_get_tree+0x90/0x2b0 [ 153.312301][ T1031] do_new_mount+0x2be/0xb40 [ 153.313975][ T1031] __se_sys_mount+0x2d6/0x3c0 [ 153.315704][ T1031] do_syscall_64+0xf3/0x230 [ 153.317314][ T1031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.319402][ T1031] [ 153.320284][ T1031] Freed by task 5332: [ 153.321740][ T1031] kasan_save_track+0x3f/0x80 [ 153.323495][ T1031] kasan_save_free_info+0x40/0x50 [ 153.325334][ T1031] __kasan_slab_free+0x59/0x70 [ 153.327100][ T1031] kfree+0x1a0/0x440 [ 153.328514][ T1031] kobject_put+0x22f/0x480 [ 153.330050][ T1031] bch2_fs_free+0x27b/0x3c0 [ 153.331502][ T1031] bch2_fs_get_tree+0xd9f/0x1710 [ 153.333242][ T1031] vfs_get_tree+0x90/0x2b0 [ 153.334784][ T1031] do_new_mount+0x2be/0xb40 [ 153.336597][ T1031] __se_sys_mount+0x2d6/0x3c0 [ 153.338288][ T1031] do_syscall_64+0xf3/0x230 [ 153.340022][ T1031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.342141][ T1031] [ 153.342990][ T1031] Last potentially related work creation: [ 153.344986][ T1031] kasan_save_stack+0x3f/0x60 [ 153.346661][ T1031] __kasan_record_aux_stack+0xac/0xc0 [ 153.348551][ T1031] insert_work+0x3e/0x330 [ 153.350107][ T1031] __queue_work+0xc8b/0xf50 [ 153.351763][ T1031] queue_work_on+0x1c2/0x380 [ 153.353347][ T1031] bch2_dev_do_discards+0x17a/0x1f0 [ 153.355194][ T1031] bch2_do_discards+0x29/0x60 [ 153.356941][ T1031] journal_write_done+0x785/0xea0 [ 153.358760][ T1031] process_scheduled_works+0xa63/0x1850 [ 153.360796][ T1031] worker_thread+0x870/0xd30 [ 153.362383][ T1031] kthread+0x2f0/0x390 [ 153.363880][ T1031] ret_from_fork+0x4b/0x80 [ 153.365581][ T1031] ret_from_fork_asm+0x1a/0x30 [ 153.367513][ T1031] [ 153.368405][ T1031] Second to last potentially related work creation: [ 153.370719][ T1031] kasan_save_stack+0x3f/0x60 [ 153.372362][ T1031] __kasan_record_aux_stack+0xac/0xc0 [ 153.374226][ T1031] insert_work+0x3e/0x330 [ 153.375720][ T1031] __queue_work+0xc8b/0xf50 [ 153.377329][ T1031] queue_work_on+0x1c2/0x380 [ 153.379048][ T1031] bch2_dev_do_discards+0x17a/0x1f0 [ 153.380991][ T1031] bch2_do_discards+0x29/0x60 [ 153.382691][ T1031] journal_write_done+0x785/0xea0 [ 153.384554][ T1031] process_scheduled_works+0xa63/0x1850 [ 153.386723][ T1031] worker_thread+0x870/0xd30 [ 153.388435][ T1031] kthread+0x2f0/0x390 [ 153.389909][ T1031] ret_from_fork+0x4b/0x80 [ 153.391564][ T1031] ret_from_fork_asm+0x1a/0x30 [ 153.393294][ T1031] [ 153.394146][ T1031] The buggy address belongs to the object at ffff88801cfbe000 [ 153.394146][ T1031] which belongs to the cache kmalloc-4k of size 4096 [ 153.399208][ T1031] The buggy address is located 176 bytes inside of [ 153.399208][ T1031] freed 4096-byte region [ffff88801cfbe000, ffff88801cfbf000) [ 153.404096][ T1031] [ 153.404983][ T1031] The buggy address belongs to the physical page: [ 153.407283][ T1031] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1cfb8 [ 153.410380][ T1031] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 153.413447][ T1031] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 153.416364][ T1031] page_type: f5(slab) [ 153.417981][ T1031] raw: 00fff00000000040 ffff88801ac42140 0000000000000000 dead000000000001 [ 153.421119][ T1031] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 153.424180][ T1031] head: 00fff00000000040 ffff88801ac42140 0000000000000000 dead000000000001 [ 153.427396][ T1031] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 153.430501][ T1031] head: 00fff00000000003 ffffea000073ee01 ffffffffffffffff 0000000000000000 [ 153.433679][ T1031] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 153.436786][ T1031] page dumped because: kasan: bad access detected [ 153.439095][ T1031] page_owner tracks the page as allocated [ 153.441208][ T1031] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4697, tgid 4697 (mount), ts 22841073444, free_ts 13357461075 [ 153.447806][ T1031] post_alloc_hook+0x1f3/0x230 [ 153.449405][ T1031] get_page_from_freelist+0x3649/0x3790 [ 153.451186][ T1031] __alloc_pages_noprof+0x292/0x710 [ 153.452886][ T1031] alloc_pages_mpol_noprof+0x3e8/0x680 [ 153.454601][ T1031] alloc_slab_page+0x6a/0x140 [ 153.456217][ T1031] allocate_slab+0x5a/0x2f0 [ 153.457783][ T1031] ___slab_alloc+0xcd1/0x14b0 [ 153.459495][ T1031] __slab_alloc+0x58/0xa0 [ 153.461085][ T1031] __kmalloc_noprof+0x25a/0x400 [ 153.462863][ T1031] tomoyo_realpath_from_path+0xcf/0x5e0 [ 153.464895][ T1031] tomoyo_path_perm+0x2b7/0x740 [ 153.466787][ T1031] security_inode_getattr+0x130/0x330 [ 153.468855][ T1031] vfs_getattr+0x45/0x430 [ 153.470468][ T1031] vfs_fstatat+0xe4/0x190 [ 153.472096][ T1031] __x64_sys_newfstatat+0x11d/0x1a0 [ 153.473900][ T1031] do_syscall_64+0xf3/0x230 [ 153.475624][ T1031] page last free pid 1 tgid 1 stack trace: [ 153.478151][ T1031] free_unref_page+0xcfb/0xf20 [ 153.480287][ T1031] __put_partials+0xeb/0x130 [ 153.482018][ T1031] put_cpu_partial+0x17c/0x250 [ 153.483741][ T1031] __slab_free+0x2ea/0x3d0 [ 153.485384][ T1031] qlist_free_all+0x9a/0x140 [ 153.487027][ T1031] kasan_quarantine_reduce+0x14f/0x170 [ 153.489007][ T1031] __kasan_slab_alloc+0x23/0x80 [ 153.490768][ T1031] __kmalloc_cache_noprof+0x132/0x2c0 [ 153.492699][ T1031] bus_add_driver+0x163/0x670 [ 153.494318][ T1031] driver_register+0x23a/0x320 [ 153.496217][ T1031] __usb_serial_register_drivers+0x76d/0xe00 [ 153.498476][ T1031] do_one_initcall+0x248/0x880 [ 153.500310][ T1031] do_initcall_level+0x157/0x210 [ 153.502255][ T1031] do_initcalls+0x3f/0x80 [ 153.503912][ T1031] kernel_init_freeable+0x435/0x5d0 [ 153.505831][ T1031] kernel_init+0x1d/0x2b0 [ 153.507498][ T1031] [ 153.508446][ T1031] Memory state around the buggy address: [ 153.510543][ T1031] ffff88801cfbdf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.513644][ T1031] ffff88801cfbe000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.516714][ T1031] >ffff88801cfbe080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.519785][ T1031] ^ [ 153.521906][ T1031] ffff88801cfbe100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.524897][ T1031] ffff88801cfbe180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.527861][ T1031] ================================================================== executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program VM DIAGNOSIS: 21:35:52 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000073 RBX=ffffffff9a719ec0 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000230edf0 R8 =ffffffff854b053b R9 =1ffff11003dd2046 R10=dffffc0000000000 R11=ffffffff854b04f0 R12=dffffc0000000000 R13=ffffffff9a414f00 R14=0000000000000073 R15=00000000000003f8 RIP=ffffffff854b056e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5765421130 CR3=0000000040bf2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=000000000301000f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5ce9862a5f96f58b 546a9b176534a8d4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c587bc43c09cb14 b0b6736c5225ca1b ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 663861e6aa1fedbb be47f3c28d50bb4b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a1e9942734eed036 f18a7a566745e982 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006500000065 48d37df00b2e8619 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006500000065 37ba748600000065 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000028c82f06 0adef94f289f7605 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 49032124484fe558 0000000028789e5f ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a1211c1e9b821289 584d06055cd84458 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 246e13da00d37eaf 7f35db0ceedef377 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6cd5b7ca5b038f3b ee6daedf9fc953a2 6cd5b7ca5b038f3b ee6daedf9fc953a2 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c20b655ff8571162 d5edae4ce330b9ae c20b655ff8571162 d5edae4ce330b9ae ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2800000000000000 0000000000000003 2800000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000002 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ee6daedfee6daedf ee6daedfee6daedf ee6daedfee6daedf ee6daedfee6daedf ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5b038f3b5b038f3b 5b038f3b5b038f3b 5b038f3b5b038f3b 5b038f3b5b038f3b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6cd5b7ca6cd5b7ca 6cd5b7ca6cd5b7ca 6cd5b7ca6cd5b7ca 6cd5b7ca6cd5b7ca ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e330b9aee330b9ae e330b9aee330b9ae e330b9aee330b9ae e330b9aee330b9ae ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d5edae4cd5edae4c d5edae4cd5edae4c d5edae4cd5edae4c d5edae4cd5edae4c ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f8571162f8571162 f8571162f8571162 f8571162f8571162 f8571162f8571162 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c20b655fc20b655f c20b655fc20b655f c20b655fc20b655f c20b655fc20b655f ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000800000006 0000000400000002 0000000700000005 0000000300000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f0000001f000000 1f0000001f000000 1f0000001f000000 1f0000001f000000