gfs2: fsid=syz:syz.0:  H: s:SH f:H e:0 p:9896 [syz.0.1214] iterate_dir+0x532/0xb40 fs/readdir.c:108
==================================================================
BUG: KASAN: global-out-of-bounds in pid_nr include/linux/pid.h:179 [inline]
BUG: KASAN: global-out-of-bounds in dump_holder fs/gfs2/glock.c:2295 [inline]
BUG: KASAN: global-out-of-bounds in gfs2_dump_glock+0x19c5/0x1c80 fs/gfs2/glock.c:2407
Read of size 4 at addr ffffffff8b6e6900 by task syz.0.1214/9908

CPU: 0 UID: 0 PID: 9908 Comm: syz.0.1214 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xc3/0x620 mm/kasan/report.c:489
 kasan_report+0xd9/0x110 mm/kasan/report.c:602
 pid_nr include/linux/pid.h:179 [inline]
 dump_holder fs/gfs2/glock.c:2295 [inline]
 gfs2_dump_glock+0x19c5/0x1c80 fs/gfs2/glock.c:2407
 gfs2_consist_inode_i+0x104/0x150 fs/gfs2/util.c:457
 gfs2_dirent_scan+0x352/0x400 fs/gfs2/dir.c:589
 gfs2_dirent_search+0x459/0x5c0 fs/gfs2/dir.c:853
 gfs2_dir_search+0x98/0x2e0 fs/gfs2/dir.c:1653
 gfs2_lookupi+0x4b9/0x6f0 fs/gfs2/inode.c:340
 __gfs2_lookup+0xa1/0x290 fs/gfs2/inode.c:897
 gfs2_atomic_open+0xdd/0x240 fs/gfs2/inode.c:1298
 atomic_open fs/namei.c:3509 [inline]
 lookup_open.isra.0+0xca2/0x14c0 fs/namei.c:3620
 open_last_lookups fs/namei.c:3748 [inline]
 path_openat+0x904/0x2d60 fs/namei.c:3984
 do_filp_open+0x20c/0x470 fs/namei.c:4014
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1402
 do_sys_open fs/open.c:1417 [inline]
 __do_sys_open fs/open.c:1425 [inline]
 __se_sys_open fs/open.c:1421 [inline]
 __x64_sys_open+0x154/0x1e0 fs/open.c:1421
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f61bf385d19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f61bd1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 00007f61bf576080 RCX: 00007f61bf385d19
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100
RBP: 00007f61bf401a20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f61bf576080 R15: 00007ffc6c600878
 </TASK>

The buggy address belongs to the variable:
 __param_str_rcu_expedited+0x20/0x140

The buggy address belongs to the physical page:
page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xb6e6
flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff)
raw: 00fff00000002000 ffffea00002db988 ffffea00002db988 0000000000000000
raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner info is not present (never set?)

Memory state around the buggy address:
 ffffffff8b6e6800: f9 f9 f9 f9 00 06 f9 f9 f9 f9 f9 f9 00 00 00 07
 ffffffff8b6e6880: f9 f9 f9 f9 00 00 04 f9 f9 f9 f9 f9 00 00 07 f9
>ffffffff8b6e6900: f9 f9 f9 f9 00 05 f9 f9 f9 f9 f9 f9 00 f9 f9 f9
                   ^
 ffffffff8b6e6980: f9 f9 f9 f9 04 f9 f9 f9 f9 f9 f9 f9 02 f9 f9 f9
 ffffffff8b6e6a00: f9 f9 f9 f9 04 f9 f9 f9 f9 f9 f9 f9 00 00 02 f9
==================================================================
==================================================================
BUG: KASAN: global-out-of-bounds in pid_task+0x148/0x170 kernel/pid.c:414
Read of size 8 at addr ffffffff8b6e6878 by task syz.0.1214/9908

CPU: 0 UID: 0 PID: 9908 Comm: syz.0.1214 Tainted: G    B              6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0
Tainted: [B]=BAD_PAGE
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xc3/0x620 mm/kasan/report.c:489
 kasan_report+0xd9/0x110 mm/kasan/report.c:602
 pid_task+0x148/0x170 kernel/pid.c:414
 dump_holder fs/gfs2/glock.c:2296 [inline]
 gfs2_dump_glock+0x1278/0x1c80 fs/gfs2/glock.c:2407
 gfs2_consist_inode_i+0x104/0x150 fs/gfs2/util.c:457
 gfs2_dirent_scan+0x352/0x400 fs/gfs2/dir.c:589
 gfs2_dirent_search+0x459/0x5c0 fs/gfs2/dir.c:853
 gfs2_dir_search+0x98/0x2e0 fs/gfs2/dir.c:1653
 gfs2_lookupi+0x4b9/0x6f0 fs/gfs2/inode.c:340
 __gfs2_lookup+0xa1/0x290 fs/gfs2/inode.c:897
 gfs2_atomic_open+0xdd/0x240 fs/gfs2/inode.c:1298
 atomic_open fs/namei.c:3509 [inline]
 lookup_open.isra.0+0xca2/0x14c0 fs/namei.c:3620
 open_last_lookups fs/namei.c:3748 [inline]
 path_openat+0x904/0x2d60 fs/namei.c:3984
 do_filp_open+0x20c/0x470 fs/namei.c:4014
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1402
 do_sys_open fs/open.c:1417 [inline]
 __do_sys_open fs/open.c:1425 [inline]
 __se_sys_open fs/open.c:1421 [inline]
 __x64_sys_open+0x154/0x1e0 fs/open.c:1421
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f61bf385d19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f61bd1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 00007f61bf576080 RCX: 00007f61bf385d19
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100
RBP: 00007f61bf401a20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f61bf576080 R15: 00007ffc6c600878
 </TASK>

The buggy address belongs to the variable:
 __param_str_rcu_normal_after_boot+0x18/0x40

The buggy address belongs to the physical page:
page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xb6e6
flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff)
raw: 00fff00000002000 ffffea00002db988 ffffea00002db988 0000000000000000
raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner info is not present (never set?)

Memory state around the buggy address:
 ffffffff8b6e6700: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 00 05 f9 f9
 ffffffff8b6e6780: f9 f9 f9 f9 00 00 04 f9 f9 f9 f9 f9 00 00 01 f9
>ffffffff8b6e6800: f9 f9 f9 f9 00 06 f9 f9 f9 f9 f9 f9 00 00 00 07
                                                                ^
 ffffffff8b6e6880: f9 f9 f9 f9 00 00 04 f9 f9 f9 f9 f9 00 00 07 f9
 ffffffff8b6e6900: f9 f9 f9 f9 00 05 f9 f9 f9 f9 f9 f9 00 f9 f9 f9
==================================================================
==================================================================
BUG: KASAN: global-out-of-bounds in dump_holder fs/gfs2/glock.c:2303 [inline]
BUG: KASAN: global-out-of-bounds in gfs2_dump_glock+0x1876/0x1c80 fs/gfs2/glock.c:2407
Read of size 8 at addr ffffffff8e1bb530 by task syz.0.1214/9908

CPU: 0 UID: 0 PID: 9908 Comm: syz.0.1214 Tainted: G    B              6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0
Tainted: [B]=BAD_PAGE
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xc3/0x620 mm/kasan/report.c:489
 kasan_report+0xd9/0x110 mm/kasan/report.c:602
 dump_holder fs/gfs2/glock.c:2303 [inline]
 gfs2_dump_glock+0x1876/0x1c80 fs/gfs2/glock.c:2407
 gfs2_consist_inode_i+0x104/0x150 fs/gfs2/util.c:457
 gfs2_dirent_scan+0x352/0x400 fs/gfs2/dir.c:589
 gfs2_dirent_search+0x459/0x5c0 fs/gfs2/dir.c:853
 gfs2_dir_search+0x98/0x2e0 fs/gfs2/dir.c:1653
 gfs2_lookupi+0x4b9/0x6f0 fs/gfs2/inode.c:340
 __gfs2_lookup+0xa1/0x290 fs/gfs2/inode.c:897
 gfs2_atomic_open+0xdd/0x240 fs/gfs2/inode.c:1298
 atomic_open fs/namei.c:3509 [inline]
 lookup_open.isra.0+0xca2/0x14c0 fs/namei.c:3620
 open_last_lookups fs/namei.c:3748 [inline]
 path_openat+0x904/0x2d60 fs/namei.c:3984
 do_filp_open+0x20c/0x470 fs/namei.c:4014
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1402
 do_sys_open fs/open.c:1417 [inline]
 __do_sys_open fs/open.c:1425 [inline]
 __se_sys_open fs/open.c:1421 [inline]
 __x64_sys_open+0x154/0x1e0 fs/open.c:1421
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f61bf385d19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f61bd1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 00007f61bf576080 RCX: 00007f61bf385d19
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100
RBP: 00007f61bf401a20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f61bf576080 R15: 00007ffc6c600878
 </TASK>

The buggy address belongs to the variable:
 rcu_lock_map+0x30/0x60

The buggy address belongs to the physical page:
page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xe1bb
flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff)
raw: 00fff00000002000 ffffea0000386ec8 ffffea0000386ec8 0000000000000000
raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner info is not present (never set?)

Memory state around the buggy address:
 ffffffff8e1bb400: 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 00 f9 f9 f9
 ffffffff8e1bb480: f9 f9 f9 f9 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9
>ffffffff8e1bb500: 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9 04 f9 f9 f9
                                     ^
 ffffffff8e1bb580: f9 f9 f9 f9 00 00 00 00 f9 f9 f9 f9 00 05 f9 f9
 ffffffff8e1bb600: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00
==================================================================
==================================================================
BUG: KASAN: global-out-of-bounds in dump_holder fs/gfs2/glock.c:2302 [inline]
BUG: KASAN: global-out-of-bounds in gfs2_dump_glock+0x189a/0x1c80 fs/gfs2/glock.c:2407
Read of size 8 at addr ffffffff8e1bb528 by task syz.0.1214/9908

CPU: 0 UID: 0 PID: 9908 Comm: syz.0.1214 Tainted: G    B              6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0
Tainted: [B]=BAD_PAGE
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xc3/0x620 mm/kasan/report.c:489
 kasan_report+0xd9/0x110 mm/kasan/report.c:602
 dump_holder fs/gfs2/glock.c:2302 [inline]
 gfs2_dump_glock+0x189a/0x1c80 fs/gfs2/glock.c:2407
 gfs2_consist_inode_i+0x104/0x150 fs/gfs2/util.c:457
 gfs2_dirent_scan+0x352/0x400 fs/gfs2/dir.c:589
 gfs2_dirent_search+0x459/0x5c0 fs/gfs2/dir.c:853
 gfs2_dir_search+0x98/0x2e0 fs/gfs2/dir.c:1653
 gfs2_lookupi+0x4b9/0x6f0 fs/gfs2/inode.c:340
 __gfs2_lookup+0xa1/0x290 fs/gfs2/inode.c:897
 gfs2_atomic_open+0xdd/0x240 fs/gfs2/inode.c:1298
 atomic_open fs/namei.c:3509 [inline]
 lookup_open.isra.0+0xca2/0x14c0 fs/namei.c:3620
 open_last_lookups fs/namei.c:3748 [inline]
 path_openat+0x904/0x2d60 fs/namei.c:3984
 do_filp_open+0x20c/0x470 fs/namei.c:4014
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1402
 do_sys_open fs/open.c:1417 [inline]
 __do_sys_open fs/open.c:1425 [inline]
 __se_sys_open fs/open.c:1421 [inline]
 __x64_sys_open+0x154/0x1e0 fs/open.c:1421
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f61bf385d19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f61bd1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 00007f61bf576080 RCX: 00007f61bf385d19
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100
RBP: 00007f61bf401a20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f61bf576080 R15: 00007ffc6c600878
 </TASK>

The buggy address belongs to the variable:
 rcu_lock_map+0x28/0x60

The buggy address belongs to the physical page:
page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xe1bb
flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff)
raw: 00fff00000002000 ffffea0000386ec8 ffffea0000386ec8 0000000000000000
raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner info is not present (never set?)

Memory state around the buggy address:
 ffffffff8e1bb400: 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 00 f9 f9 f9
 ffffffff8e1bb480: f9 f9 f9 f9 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9
>ffffffff8e1bb500: 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9 04 f9 f9 f9
                                  ^
 ffffffff8e1bb580: f9 f9 f9 f9 00 00 00 00 f9 f9 f9 f9 00 05 f9 f9
 ffffffff8e1bb600: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00
==================================================================
Oops: general protection fault, probably for non-canonical address 0xe0000a8dedec4c3d: 0000 [#1] PREEMPT SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000746f6f6261e8-0x0000746f6f6261ef]
CPU: 0 UID: 0 PID: 9908 Comm: syz.0.1214 Tainted: G    B              6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0
Tainted: [B]=BAD_PAGE
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
RIP: 0010:string_nocheck lib/vsprintf.c:646 [inline]
RIP: 0010:string+0x1ba/0x3d0 lib/vsprintf.c:728
Code: 24 08 48 39 c5 74 4b e8 b4 fa 75 f6 48 89 ef 48 83 c5 01 48 b9 00 00 00 00 00 fc ff df 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <0f> b6 04 08 38 d0 7f 08 84 c0 0f 85 c9 01 00 00 44 0f b6 65 ff 31
RSP: 0018:ffffc9000bcde980 EFLAGS: 00010002
RAX: 00000e8dedec4c3d RBX: ffffc9000bcdeee7 RCX: dffffc0000000000
RDX: 0000000000000002 RSI: ffffffff8b2418fc RDI: 0000746f6f6261ea
RBP: 0000746f6f6261eb R08: 0000000000000005 R09: 0000000000000000
R10: 00000000ffffffff R11: 3d3d3d3d3d3d3d3d R12: 00000000ffffffff
R13: ffffc9000bcdeec0 R14: 0000746f6f6261ea R15: 0000000000000000
FS:  00007f61bd1d56c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f005255cd58 CR3: 000000001297c000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 vsnprintf+0xbed/0x1880 lib/vsprintf.c:2848
 va_format.constprop.0+0x1ad/0x3a0 lib/vsprintf.c:1718
 pointer+0x857/0xbf0 lib/vsprintf.c:2479
 vsnprintf+0x4c4/0x1880 lib/vsprintf.c:2852
 vprintk_store+0x3b1/0xc00 kernel/printk/printk.c:2279
 vprintk_emit+0x155/0x6f0 kernel/printk/printk.c:2408
 vprintk+0x7f/0xa0 kernel/printk/printk_safe.c:86
 _printk+0xc8/0x100 kernel/printk/printk.c:2457
 gfs2_print_dbg+0x159/0x160 fs/gfs2/glock.c:1455
 dump_holder fs/gfs2/glock.c:2300 [inline]
 gfs2_dump_glock+0x1103/0x1c80 fs/gfs2/glock.c:2407
 gfs2_consist_inode_i+0x104/0x150 fs/gfs2/util.c:457
 gfs2_dirent_scan+0x352/0x400 fs/gfs2/dir.c:589
 gfs2_dirent_search+0x459/0x5c0 fs/gfs2/dir.c:853
 gfs2_dir_search+0x98/0x2e0 fs/gfs2/dir.c:1653
 gfs2_lookupi+0x4b9/0x6f0 fs/gfs2/inode.c:340
 __gfs2_lookup+0xa1/0x290 fs/gfs2/inode.c:897
 gfs2_atomic_open+0xdd/0x240 fs/gfs2/inode.c:1298
 atomic_open fs/namei.c:3509 [inline]
 lookup_open.isra.0+0xca2/0x14c0 fs/namei.c:3620
 open_last_lookups fs/namei.c:3748 [inline]
 path_openat+0x904/0x2d60 fs/namei.c:3984
 do_filp_open+0x20c/0x470 fs/namei.c:4014
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1402
 do_sys_open fs/open.c:1417 [inline]
 __do_sys_open fs/open.c:1425 [inline]
 __se_sys_open fs/open.c:1421 [inline]
 __x64_sys_open+0x154/0x1e0 fs/open.c:1421
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f61bf385d19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f61bd1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 00007f61bf576080 RCX: 00007f61bf385d19
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100
RBP: 00007f61bf401a20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f61bf576080 R15: 00007ffc6c600878
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:string_nocheck lib/vsprintf.c:646 [inline]
RIP: 0010:string+0x1ba/0x3d0 lib/vsprintf.c:728
Code: 24 08 48 39 c5 74 4b e8 b4 fa 75 f6 48 89 ef 48 83 c5 01 48 b9 00 00 00 00 00 fc ff df 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <0f> b6 04 08 38 d0 7f 08 84 c0 0f 85 c9 01 00 00 44 0f b6 65 ff 31
RSP: 0018:ffffc9000bcde980 EFLAGS: 00010002
RAX: 00000e8dedec4c3d RBX: ffffc9000bcdeee7 RCX: dffffc0000000000
RDX: 0000000000000002 RSI: ffffffff8b2418fc RDI: 0000746f6f6261ea
RBP: 0000746f6f6261eb R08: 0000000000000005 R09: 0000000000000000
R10: 00000000ffffffff R11: 3d3d3d3d3d3d3d3d R12: 00000000ffffffff
R13: ffffc9000bcdeec0 R14: 0000746f6f6261ea R15: 0000000000000000
FS:  00007f61bd1d56c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f005255cd58 CR3: 000000001297c000 CR4: 0000000000350ef0
----------------
Code disassembly (best guess):
   0:	24 08                	and    $0x8,%al
   2:	48 39 c5             	cmp    %rax,%rbp
   5:	74 4b                	je     0x52
   7:	e8 b4 fa 75 f6       	call   0xf675fac0
   c:	48 89 ef             	mov    %rbp,%rdi
   f:	48 83 c5 01          	add    $0x1,%rbp
  13:	48 b9 00 00 00 00 00 	movabs $0xdffffc0000000000,%rcx
  1a:	fc ff df
  1d:	48 89 f8             	mov    %rdi,%rax
  20:	48 89 fa             	mov    %rdi,%rdx
  23:	48 c1 e8 03          	shr    $0x3,%rax
  27:	83 e2 07             	and    $0x7,%edx
* 2a:	0f b6 04 08          	movzbl (%rax,%rcx,1),%eax <-- trapping instruction
  2e:	38 d0                	cmp    %dl,%al
  30:	7f 08                	jg     0x3a
  32:	84 c0                	test   %al,%al
  34:	0f 85 c9 01 00 00    	jne    0x203
  3a:	44 0f b6 65 ff       	movzbl -0x1(%rbp),%r12d
  3f:	31                   	.byte 0x31