ci starts bisection 2022-12-18 17:25:22.705301713 +0000 UTC m=+155822.109336151 bisecting cause commit starting from 4c86114194e644b6da9107d75910635c9e87179e building syzkaller on 0de35f24a4d2da07a3436f9d227c30d15f508beb ensuring issue is reproducible on original commit 4c86114194e644b6da9107d75910635c9e87179e testing commit 4c86114194e644b6da9107d75910635c9e87179e gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: bbe7c4d98fc6ff3487c0087dcbf6c77f3b51efad7e83ff164b5122d95dcd5b82 run #0: crashed: INFO: rcu detected stall in corrupted run #1: crashed: INFO: rcu detected stall in corrupted run #2: crashed: INFO: rcu detected stall in corrupted run #3: crashed: INFO: rcu detected stall in corrupted run #4: crashed: INFO: rcu detected stall in corrupted run #5: crashed: INFO: rcu detected stall in corrupted run #6: crashed: INFO: rcu detected stall in corrupted run #7: crashed: INFO: rcu detected stall in corrupted run #8: crashed: INFO: rcu detected stall in corrupted run #9: crashed: INFO: rcu detected stall in corrupted run #10: crashed: INFO: rcu detected stall in corrupted run #11: crashed: INFO: rcu detected stall in corrupted run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK testing release v6.0 testing commit 4fe89d07dcc2804c8b562f6c7896a45643d34b2f gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: b97f6a544635597eb9ea17025eebfd564b3776c04dcc52220c3581b701b03dd5 run #0: crashed: INFO: rcu detected stall in corrupted run #1: crashed: INFO: rcu detected stall in corrupted run #2: crashed: INFO: rcu detected stall in corrupted run #3: crashed: INFO: rcu detected stall in corrupted run #4: crashed: INFO: rcu detected stall in corrupted run #5: crashed: BUG: unable to handle kernel paging request in inode_wait_for_writeback run #6: OK run #7: OK run #8: OK run #9: OK testing release v5.19 testing commit 3d7cb6b04c3f3115719235cc6866b10326de34cd gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 49535b5cbb1d178c93d6045464313827b7fc1fc63e7c33bc178d3d6cbaa3765c run #0: crashed: KASAN: stack-out-of-bounds Write in end_buffer_read_sync run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK reproducer seems to be flaky testing release v5.18 testing commit 4b0986a3613c92f4ec1bdc7f60ec66fea135991f gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 7cafd6e09bdedb603131daefdff0c3053b6b4637094bbf3ab863b8b5b499f30f all runs: OK # git bisect start 3d7cb6b04c3f3115719235cc6866b10326de34cd 4b0986a3613c92f4ec1bdc7f60ec66fea135991f Bisecting: 8493 revisions left to test after this (roughly 13 steps) [c011dd537ffe47462051930413fed07dbdc80313] Merge tag 'arm-soc-5.19' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc testing commit c011dd537ffe47462051930413fed07dbdc80313 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: a74097fa7d52e4f35d589fd193c7d05357e35ea299f49aa3a6a7c9b02ef001e0 run #0: crashed: BUG: unable to handle kernel paging request in ni_clear run #1: crashed: BUG: spinlock bad magic in writeback_single_inode run #2: crashed: kernel panic: stack is corrupted in __lock_acquire run #3: crashed: kernel panic: stack is corrupted in __lock_acquire run #4: crashed: KASAN: out-of-bounds Write in end_buffer_read_sync run #5: crashed: kernel panic: stack is corrupted in __lock_acquire run #6: crashed: kernel panic: stack is corrupted in __lock_acquire run #7: crashed: BUG: spinlock bad magic in writeback_single_inode run #8: crashed: BUG: spinlock bad magic in writeback_single_inode run #9: basic kernel testing failed: failed to copy binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/tmp/syz-executor841849367" "root@10.128.1.151:./syz-executor841849367"]: exit status 1 ssh: connect to host 10.128.1.151 port 22: Connection timed out lost connection run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad c011dd537ffe47462051930413fed07dbdc80313 Bisecting: 2961 revisions left to test after this (roughly 12 steps) [7e062cda7d90543ac8c7700fc7c5527d0c0f22ad] Merge tag 'net-next-5.19' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next testing commit 7e062cda7d90543ac8c7700fc7c5527d0c0f22ad gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 81407f4e7ad29468f7e878eea2542016cbfd6d96acd87f26aab3a0085b390c64 run #0: crashed: BUG: spinlock bad magic in writeback_single_inode run #1: crashed: KASAN: out-of-bounds Write in end_buffer_read_sync run #2: crashed: kernel panic: stack is corrupted in __lock_acquire run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 7e062cda7d90543ac8c7700fc7c5527d0c0f22ad Bisecting: 2538 revisions left to test after this (roughly 11 steps) [3842007b1a33589d57f67eac479b132b77767514] Merge tag 'zonefs-5.19-rc1-fix' of git://git.kernel.org/pub/scm/linux/kernel/git/dlemoal/zonefs testing commit 3842007b1a33589d57f67eac479b132b77767514 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 02bf5af3b1d071586aa6006a5378f9717ddb66a307bc950891db1151a5987ea2 run #0: crashed: BUG: sleeping function called from invalid context in write_inode_now run #1: crashed: WARNING: bad unlock balance in corrupted run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 3842007b1a33589d57f67eac479b132b77767514 Bisecting: 1204 revisions left to test after this (roughly 10 steps) [22922deae13fc8d3769790c2eb388e9afce9771d] Merge tag 'objtool-core-2022-05-23' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip testing commit 22922deae13fc8d3769790c2eb388e9afce9771d gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 818e8cb54ef37cfa1bd8a569c496bcb940006ad8e244e27d2e213b2f7c3dbefc run #0: crashed: WARNING: bad unlock balance in corrupted run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 22922deae13fc8d3769790c2eb388e9afce9771d Bisecting: 605 revisions left to test after this (roughly 9 steps) [03e1ccd45fa70904e43ddceda140854d22b7e871] Merge tag 'x86-irq-2022-05-23' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip testing commit 03e1ccd45fa70904e43ddceda140854d22b7e871 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 9b6983d4ded210dbb48900e87203a7eb642fb6f926a0e22334d4f6c3a36b9394 run #0: crashed: WARNING: bad unlock balance in corrupted run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: crashed: WARNING: bad unlock balance in corrupted run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 03e1ccd45fa70904e43ddceda140854d22b7e871 Bisecting: 300 revisions left to test after this (roughly 8 steps) [e1a8fde7203fa8a3e3f35d4f9df47477d23529c1] Merge tag 'for-5.19/io_uring-net-2022-05-22' of git://git.kernel.dk/linux-block testing commit e1a8fde7203fa8a3e3f35d4f9df47477d23529c1 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 8b857da6902c599ba6eb24b3c6650e321700457cf9fee42d06568bf9c1126063 run #0: crashed: WARNING: bad unlock balance in corrupted run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad e1a8fde7203fa8a3e3f35d4f9df47477d23529c1 Bisecting: 130 revisions left to test after this (roughly 7 steps) [1e57930e9f4083ad5854ab6eadffe790a8167fb4] Merge tag 'rcu.2022.05.19a' of git://git.kernel.org/pub/scm/linux/kernel/git/paulmck/linux-rcu testing commit 1e57930e9f4083ad5854ab6eadffe790a8167fb4 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 7e7cca310b3db8bc48bc28cc85c2cb571adebd1427ec66e04929a93f5780f70b run #0: crashed: WARNING: bad unlock balance in corrupted run #1: crashed: WARNING: bad unlock balance in corrupted run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 1e57930e9f4083ad5854ab6eadffe790a8167fb4 Bisecting: 81 revisions left to test after this (roughly 6 steps) [be05ee54378d451e1d60196921566d6087f3079f] Merge branches 'docs.2022.04.20a', 'fixes.2022.04.20a', 'nocb.2022.04.11b', 'rcu-tasks.2022.04.11b', 'srcu.2022.05.03a', 'torture.2022.04.11b', 'torture-tasks.2022.04.20a' and 'torturescript.2022.04.20a' into HEAD testing commit be05ee54378d451e1d60196921566d6087f3079f gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 8228af083cb0c9d28f6cf339015fc35abeb1ca353185b2a823096b225884117f run #0: crashed: WARNING: bad unlock balance in corrupted run #1: crashed: WARNING: bad unlock balance in corrupted run #2: crashed: WARNING: bad unlock balance in corrupted run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad be05ee54378d451e1d60196921566d6087f3079f Bisecting: 57 revisions left to test after this (roughly 5 steps) [586e31d59c436cda65a2e8ac04ff954bed247023] srcu: Drop needless initialization of sdp in srcu_gp_start() testing commit 586e31d59c436cda65a2e8ac04ff954bed247023 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: da6fd645a1341f2b511a743cf246efd9c3147c0e055a506ef6cf88479c97aa6b run #0: crashed: WARNING: bad unlock balance in corrupted run #1: crashed: KASAN: stack-out-of-bounds Write in end_buffer_read_sync run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 586e31d59c436cda65a2e8ac04ff954bed247023 Bisecting: 10 revisions left to test after this (roughly 3 steps) [0b56f953908a751716f2c8f907942674b60d8db5] srcu: Ensure snp nodes tree is fully initialized before traversal testing commit 0b56f953908a751716f2c8f907942674b60d8db5 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: b305c8f0db717a16b287360c952b75b708b66aba6519d25c7d97c9168bcc482f run #0: crashed: WARNING: bad unlock balance in corrupted run #1: crashed: WARNING: bad unlock balance in corrupted run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: crashed: WARNING: bad unlock balance in corrupted run #17: OK run #18: OK run #19: OK # git bisect bad 0b56f953908a751716f2c8f907942674b60d8db5 Bisecting: 4 revisions left to test after this (roughly 2 steps) [2ec303113d978931ef368886c4c6bc854493e8bf] srcu: Dynamically allocate srcu_node array testing commit 2ec303113d978931ef368886c4c6bc854493e8bf gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: bdf2db35b9c46c870bc28237476cbec990d41fff3b611ed5950a1d5fbab8eda8 run #0: crashed: WARNING: bad unlock balance in corrupted run #1: OK run #2: crashed: WARNING: bad unlock balance in corrupted run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 2ec303113d978931ef368886c4c6bc854493e8bf Bisecting: 2 revisions left to test after this (roughly 1 step) [95ebe80d99de3cb849c522a1f768e5e8befa0b7c] srcu: Fix s/is/if/ typo in srcu_node comment testing commit 95ebe80d99de3cb849c522a1f768e5e8befa0b7c gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 3facd3073d5670f82483c13548fc276ff0bef3debb2b4a71a5ebf3cc6fcfb23c run #0: OK run #1: OK run #2: OK run #3: crashed: KASAN: stack-out-of-bounds Write in end_buffer_read_sync run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 95ebe80d99de3cb849c522a1f768e5e8befa0b7c Bisecting: 0 revisions left to test after this (roughly 0 steps) [8ed00760203d8018bee042fbfe8e076579be2c2b] srcu: Tighten cleanup_srcu_struct() GP checks testing commit 8ed00760203d8018bee042fbfe8e076579be2c2b gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 8631766c4c38f0d70e2dfcb07987f50827f7ceac08a07860ec7ba8705eb98bb7 run #0: crashed: WARNING: bad unlock balance in corrupted run #1: crashed: WARNING: bad unlock balance in corrupted run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 8ed00760203d8018bee042fbfe8e076579be2c2b 8ed00760203d8018bee042fbfe8e076579be2c2b is the first bad commit commit 8ed00760203d8018bee042fbfe8e076579be2c2b Author: Paul E. McKenney Date: Wed Jan 12 09:52:44 2022 -0800 srcu: Tighten cleanup_srcu_struct() GP checks Currently, cleanup_srcu_struct() checks for a grace period in progress, but it does not check for a grace period that has not yet started but which might start at any time. Such a situation could result in a use-after-free bug, so this commit adds a check for a grace period that is needed but not yet started to cleanup_srcu_struct(). Signed-off-by: Paul E. McKenney kernel/rcu/srcutree.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) parent commit 3123109284176b1532874591f7c81f3837bbdc17 wasn't tested testing commit 3123109284176b1532874591f7c81f3837bbdc17 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 4aaa6649c9df5cb4b745aad4fa35639a57c64379f920fce0b1803c2065462f42 culprit signature: 8631766c4c38f0d70e2dfcb07987f50827f7ceac08a07860ec7ba8705eb98bb7 parent signature: 4aaa6649c9df5cb4b745aad4fa35639a57c64379f920fce0b1803c2065462f42 Reproducer flagged being flaky revisions tested: 17, total time: 5h29m16.216841545s (build: 2h8m43.593498242s, test: 3h16m26.302065907s) first bad commit: 8ed00760203d8018bee042fbfe8e076579be2c2b srcu: Tighten cleanup_srcu_struct() GP checks recipients (to): ["linux-kernel@vger.kernel.org" "paulmck@kernel.org"] recipients (cc): ["jiangshanlai@gmail.com" "josh@joshtriplett.org" "mathieu.desnoyers@efficios.com" "paulmck@kernel.org" "rcu@vger.kernel.org" "rostedt@goodmis.org"] crash: WARNING: bad unlock balance in corrupted ===================================== WARNING: bad unlock balance detected! 5.18.0-rc1-syzkaller #0 Not tainted ------------------------------------- syz-executor329/19136 is trying to release lock ( BUG: unable to handle page fault for address: ffffff88f98e8000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD ac8f067 P4D ac8f067 PUD 0 Oops: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 19136 Comm: syz-executor329 Not tainted 5.18.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 RIP: 0010:string_nocheck lib/vsprintf.c:643 [inline] RIP: 0010:string+0x154/0x330 lib/vsprintf.c:725 Code: 48 39 dd 74 2f 48 89 d7 48 83 c2 01 48 89 f8 48 89 f9 48 c1 e8 03 83 e1 07 42 0f b6 04 00 38 c8 7f 08 84 c0 0f 85 34 01 00 00 <44> 0f b6 72 ff 45 84 f6 75 9e 4c 89 f9 4c 89 ea 48 89 ef e8 64 9b RSP: 0018:ffffc9000baf7410 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffffc9010baf76c1 RCX: 0000000000000000 RDX: ffffff88f98e8001 RSI: 0000000000000000 RDI: ffffff88f98e8000 RBP: ffffc9000baf76c2 R08: dffffc0000000000 R09: 1ffff9200175ee01 R10: fffff5200175eed8 R11: 0000000000000001 R12: 1ffff9200175ee85 R13: ffffc9000baf76c8 R14: ffffc9000baf7518 R15: ffff0a00ffffff04 FS: 00007f7524e23700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffff88f98e8000 CR3: 0000000022eac000 CR4: 0000000000350ef0 Call Trace: vsnprintf+0x198/0x1630 lib/vsprintf.c:2806 vprintk_store+0x28b/0x8f0 kernel/printk/printk.c:2158 vprintk_emit+0x63/0x3c0 kernel/printk/printk.c:2256 _printk+0xad/0xde kernel/printk/printk.c:2293 print_lockdep_cache+0xba/0xf5 kernel/locking/lockdep.c:721 print_unlock_imbalance_bug.part.0+0x8b/0xe6 kernel/locking/lockdep.c:5074 print_unlock_imbalance_bug include/trace/events/lock.h:58 [inline] __lock_release kernel/locking/lockdep.c:5318 [inline] lock_release.cold+0x34/0x4e kernel/locking/lockdep.c:5661 __raw_spin_unlock include/linux/spinlock_api_smp.h:141 [inline] _raw_spin_unlock+0x12/0x40 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:389 [inline] writeback_single_inode+0xdb/0x340 fs/fs-writeback.c:1718 write_inode_now+0x125/0x190 fs/fs-writeback.c:2697 iput_final fs/inode.c:1731 [inline] iput.part.0+0x363/0x6a0 fs/inode.c:1770 ntfs_fill_super+0x2414/0x3120 fs/ntfs3/super.c:1178 get_tree_bdev+0x398/0x680 fs/super.c:1292 vfs_get_tree+0x7f/0x2c0 fs/super.c:1497 do_new_mount fs/namespace.c:3040 [inline] path_mount+0x7e8/0x1a40 fs/namespace.c:3370 do_mount fs/namespace.c:3383 [inline] __do_sys_mount fs/namespace.c:3591 [inline] __se_sys_mount fs/namespace.c:3568 [inline] __x64_sys_mount+0x1f5/0x260 fs/namespace.c:3568 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f7524e7d27a Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 a8 00 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f7524e23168 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7524e7d27a RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f7524e23180 RBP: 0000000000000004 R08: 00007f7524e231c0 R09: 00007f7524e236b8 R10: 0000000000000000 R11: 0000000000000286 R12: 00007f7524e231c0 R13: 000000000000010c R14: 00007f7524e23180 R15: 0000000020001b20 Modules linked in: CR2: ffffff88f98e8000 ---[ end trace 0000000000000000 ]--- RIP: 0010:string_nocheck lib/vsprintf.c:643 [inline] RIP: 0010:string+0x154/0x330 lib/vsprintf.c:725 Code: 48 39 dd 74 2f 48 89 d7 48 83 c2 01 48 89 f8 48 89 f9 48 c1 e8 03 83 e1 07 42 0f b6 04 00 38 c8 7f 08 84 c0 0f 85 34 01 00 00 <44> 0f b6 72 ff 45 84 f6 75 9e 4c 89 f9 4c 89 ea 48 89 ef e8 64 9b RSP: 0018:ffffc9000baf7410 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffffc9010baf76c1 RCX: 0000000000000000 RDX: ffffff88f98e8001 RSI: 0000000000000000 RDI: ffffff88f98e8000 RBP: ffffc9000baf76c2 R08: dffffc0000000000 R09: 1ffff9200175ee01 R10: fffff5200175eed8 R11: 0000000000000001 R12: 1ffff9200175ee85 R13: ffffc9000baf76c8 R14: ffffc9000baf7518 R15: ffff0a00ffffff04 FS: 00007f7524e23700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffff88f98e8000 CR3: 0000000022eac000 CR4: 0000000000350ef0 ---------------- Code disassembly (best guess): 0: 48 39 dd cmp %rbx,%rbp 3: 74 2f je 0x34 5: 48 89 d7 mov %rdx,%rdi 8: 48 83 c2 01 add $0x1,%rdx c: 48 89 f8 mov %rdi,%rax f: 48 89 f9 mov %rdi,%rcx 12: 48 c1 e8 03 shr $0x3,%rax 16: 83 e1 07 and $0x7,%ecx 19: 42 0f b6 04 00 movzbl (%rax,%r8,1),%eax 1e: 38 c8 cmp %cl,%al 20: 7f 08 jg 0x2a 22: 84 c0 test %al,%al 24: 0f 85 34 01 00 00 jne 0x15e * 2a: 44 0f b6 72 ff movzbl -0x1(%rdx),%r14d <-- trapping instruction 2f: 45 84 f6 test %r14b,%r14b 32: 75 9e jne 0xffffffd2 34: 4c 89 f9 mov %r15,%rcx 37: 4c 89 ea mov %r13,%rdx 3a: 48 89 ef mov %rbp,%rdi 3d: e8 .byte 0xe8 3e: 64 fs 3f: 9b fwait