[ 76.043328][ T23] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.0' (ED25519) to the list of known hosts.
2023/10/17 05:26:49 ignoring optional flag "sandboxArg"="0"
2023/10/17 05:26:50 parsed 1 programs
2023/10/17 05:26:51 executed programs: 0
[ 81.604753][ T5385] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 81.653878][ T4442] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 81.661734][ T4442] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 81.669598][ T4442] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 81.677687][ T4442] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 81.686074][ T4442] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 81.693464][ T4442] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 81.804723][ T5391] chnl_net:caif_netlink_parms(): no params data found
[ 81.857212][ T5391] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.864551][ T5391] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.871819][ T5391] bridge_slave_0: entered allmulticast mode
[ 81.879017][ T5391] bridge_slave_0: entered promiscuous mode
[ 81.886655][ T5391] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.894108][ T5391] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.901544][ T5391] bridge_slave_1: entered allmulticast mode
[ 81.909701][ T5391] bridge_slave_1: entered promiscuous mode
[ 81.933739][ T5391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 81.944996][ T5391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 81.972828][ T5391] team0: Port device team_slave_0 added
[ 81.982290][ T5391] team0: Port device team_slave_1 added
[ 82.004216][ T5391] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 82.011245][ T5391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 82.037519][ T5391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 82.049996][ T5391] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 82.057152][ T5391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 82.083375][ T5391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 82.118185][ T5391] hsr_slave_0: entered promiscuous mode
[ 82.124404][ T5391] hsr_slave_1: entered promiscuous mode
[ 83.001285][ T5391] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 83.013313][ T5391] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 83.024865][ T5391] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 83.037080][ T5391] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 83.136613][ T5391] 8021q: adding VLAN 0 to HW filter on device bond0
[ 83.162626][ T5391] 8021q: adding VLAN 0 to HW filter on device team0
[ 83.179564][ T23] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.186956][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 83.212424][ T23] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.219748][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 83.410618][ T5391] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 83.461491][ T5391] veth0_vlan: entered promiscuous mode
[ 83.476865][ T5391] veth1_vlan: entered promiscuous mode
[ 83.517374][ T5391] veth0_macvtap: entered promiscuous mode
[ 83.529368][ T5391] veth1_macvtap: entered promiscuous mode
[ 83.552152][ T5391] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 83.574089][ T5391] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 83.588913][ T5391] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.597670][ T5391] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.609236][ T5391] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.617934][ T5391] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.698006][ T5051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.713220][ T5051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.745755][ T5051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.754283][ T5051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.789859][ T4442] Bluetooth: hci0: command 0x0409 tx timeout
[ 83.875492][ T5468] loop0: detected capacity change from 0 to 8192
[ 83.896906][ T5468] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 83.913790][ T5468] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 83.923865][ T5468] REISERFS (device loop0): using ordered data mode
[ 83.934566][ T5468] reiserfs: using flush barriers
[ 83.943877][ T5468] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 83.963452][ T5468] REISERFS (device loop0): checking transaction log (loop0)
[ 84.057340][ T5468] REISERFS (device loop0): Using r5 hash to sort names
[ 84.065917][ T5468] REISERFS (device loop0): using 3.5.x disk format
[ 84.079434][ T5479] stack segment: 0000 [#1] PREEMPT SMP KASAN
[ 84.085443][ T5479] CPU: 1 PID: 5479 Comm: sed Not tainted 6.6.0-rc6-syzkaller-g213f891525c2 #0
[ 84.088394][ C0] ==================================================================
[ 84.094398][ T5479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 84.102440][ C0] BUG: KASAN: slab-out-of-bounds in debug_object_deactivate+0x29a/0x320
[ 84.112461][ T5479] RIP: 0010:__stack_depot_save+0x15e/0x510
[ 84.120751][ C0] Read of size 8 at addr ffff888014eee1c8 by task syz-executor.0/5468
[ 84.126525][ T5479] Code: 29 c0 89 c3 48 8b 05 f9 b2 ff 0d 89 d9 23 0d e9 b2 ff 0d 48 8d 0c c8 48 8b 29 48 85 ed 75 0b eb 70 48 8b 6d 00 48 85 ed 74 67 <39> 5d 08 75 f2 44 3b 7d 0c 75 ec 31 c0 48 8b 74 c5 18 49 39 34 c6
[ 84.134641][ C0]
[ 84.134646][ C0] CPU: 0 PID: 5468 Comm: syz-executor.0 Not tainted 6.6.0-rc6-syzkaller-g213f891525c2 #0
[ 84.154233][ T5479] RSP: 0000:ffffc9000508f2a0 EFLAGS: 00010206
[ 84.156533][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 84.166295][ T5479]
[ 84.166299][ T5479] RAX: ffff88823b400000 RBX: 000000001f438700 RCX: ffff88823b5c3800
[ 84.172324][ C0] Call Trace:
[ 84.172334][ C0]
[ 84.182347][ T5479] RDX: 0000000000000010 RSI: 0000000000000002 RDI: 000000000a31ec6e
[ 84.184648][ C0] dump_stack_lvl+0xd9/0x1b0
[ 84.192586][ T5479] RBP: 4c8b480000441f0f R08: 000000001c352baa R09: 0000000000000000
[ 84.195851][ C0] print_report+0xc4/0x620
[ 84.198665][ T5479] R10: 0000000000000000 R11: dffffc0000000000 R12: 0000000000000001
[ 84.206628][ C0] ? __virt_addr_valid+0x5e/0x2d0
[ 84.211183][ T5479] R13: 0000000000102800 R14: ffffc9000508f328 R15: 0000000000000010
[ 84.219120][ C0] ? __phys_addr+0xc6/0x140
[ 84.223509][ T5479] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 84.231449][ C0] kasan_report+0xda/0x110
[ 84.236439][ T5479] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 84.244381][ C0] ? debug_object_deactivate+0x29a/0x320
[ 84.248851][ T5479] CR2: 00007f5ff784a0a0 CR3: 0000000028b4f000 CR4: 0000000000350ee0
[ 84.257746][ C0] ? debug_object_deactivate+0x29a/0x320
[ 84.262142][ T5479] Call Trace:
[ 84.268713][ C0] debug_object_deactivate+0x29a/0x320
[ 84.274313][ T5479]
[ 84.282251][ C0] ? debug_object_active_state+0x350/0x350
[ 84.287845][ T5479] ? show_regs+0x8f/0xa0
[ 84.291098][ C0] ? rcu_is_watching+0x12/0xb0
[ 84.296534][ T5479] ? die+0x36/0xa0
[ 84.299441][ C0] ? rcu_is_watching+0x12/0xb0
[ 84.305212][ T5479] ? do_trap+0x22b/0x420
[ 84.309416][ C0] ? lock_release+0x4bf/0x680
[ 84.314148][ T5479] ? do_error_trap+0xf4/0x230
[ 84.317832][ C0] ? lock_sync+0x190/0x190
[ 84.322668][ T5479] ? exc_stack_segment+0x37/0x50
[ 84.326872][ C0] ? hrtimer_interrupt+0x142/0x800
[ 84.331520][ T5479] ? asm_exc_stack_segment+0x26/0x30
[ 84.336163][ C0] __hrtimer_run_queues+0x470/0xc10
[ 84.340545][ T5479] ? __stack_depot_save+0x15e/0x510
[ 84.345448][ C0] ? lock_sync+0x190/0x190
[ 84.350525][ T5479] save_stack+0x16d/0x1f0
[ 84.355774][ C0] ? enqueue_hrtimer+0x310/0x310
[ 84.360940][ T5479] ? register_early_stack+0xd0/0xd0
[ 84.366099][ C0] ? ktime_get_update_offsets_now+0x3bc/0x610
[ 84.370616][ T5479] ? post_alloc_hook+0x2cf/0x340
[ 84.374943][ C0] hrtimer_interrupt+0x31b/0x800
[ 84.379844][ T5479] ? get_page_from_freelist+0xee0/0x2f20
[ 84.385013][ C0] __sysvec_apic_timer_interrupt+0x105/0x3f0
[ 84.391039][ T5479] ? __alloc_pages+0x1d0/0x4a0
[ 84.395943][ C0] sysvec_apic_timer_interrupt+0x8e/0xc0
[ 84.400848][ T5479] ? alloc_pages+0x1a9/0x270
[ 84.406446][ C0]
[ 84.412475][ T5479] ? __get_free_pages+0xc/0x40
[ 84.417203][ C0]
[ 84.417209][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 84.422799][ T5479] ? __tlb_remove_page_size+0x2a6/0x470
[ 84.427473][ C0] RIP: 0010:memmove+0x48/0x1b0
[ 84.430380][ T5479] ? unmap_page_range+0x1399/0x2c10
[ 84.435108][ C0] Code: 20 0f 82 01 01 00 00 66 0f 1f 44 00 00 48 81 fa a8 02 00 00 72 05 40 38 fe 74 47 48 83 ea 20 48 83 ea 20 4c 8b 1e 4c 8b 56 08 <4c> 8b 4e 10 4c 8b 46 18 48 8d 76 20 4c 89 1f 4c 89 57 08 4c 89 4f
[ 84.438039][ T5479] ? unmap_single_vma+0x194/0x2b0
[ 84.443983][ C0] RSP: 0018:ffffc90004edef18 EFLAGS: 00000286
[ 84.449492][ T5479] ? unmap_vmas+0x1e2/0x330
[ 84.454222][ C0]
[ 84.454226][ C0] RAX: ffff888065861fb4 RBX: 0000000000000002 RCX: ffff888065861030
[ 84.459383][ T5479] ? exit_mmap+0x1ad/0xa60
[ 84.479048][ C0] RDX: fffffffff541b7a0 RSI: ffff8880704467a4 RDI: ffff8880704467b4
[ 84.484047][ T5479] ? __mmput+0x12a/0x4d0
[ 84.490077][ C0] RBP: 0000000000000020 R08: 0000000000000000 R09: 0000000000000000
[ 84.494543][ T5479] ? mmput+0x62/0x70
[ 84.496842][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001
[ 84.504814][ T5479] ? do_exit+0x9ad/0x2a20
[ 84.509194][ C0] R13: 0000000000000000 R14: ffff888065861fa4 R15: 0000000000000010
[ 84.517136][ T5479] ? do_group_exit+0xd4/0x2a0
[ 84.521440][ C0] leaf_paste_entries+0x43c/0x920
[ 84.529468][ T5479] ? get_signal+0x23ba/0x2790
[ 84.533337][ C0] balance_leaf+0x9476/0xcd90
[ 84.541292][ T5479] ? arch_do_signal_or_restart+0x90/0x7f0
[ 84.545599][ C0] ? get_num_ver.constprop.0+0xfd0/0xfd0
[ 84.553713][ T5479] ? mark_held_locks+0x9f/0xe0
[ 84.558372][ C0] ? replace_key+0x150/0x150
[ 84.563366][ T5479] ? bad_range+0x262/0x440
[ 84.568025][ C0] do_balance+0x337/0x840
[ 84.572688][ T5479] __set_page_owner+0x1f/0x60
[ 84.578381][ C0] ? get_right_neighbor_position+0x170/0x170
[ 84.583997][ T5479] post_alloc_hook+0x2cf/0x340
[ 84.588728][ C0] ? bit_wait_io_timeout+0x160/0x160
[ 84.593302][ T5479] get_page_from_freelist+0xee0/0x2f20
[ 84.597775][ C0] reiserfs_paste_into_item+0x62a/0x7c0
[ 84.602072][ T5479] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 84.606713][ C0] ? reiserfs_delete_object+0x200/0x200
[ 84.612933][ T5479] ? __zone_watermark_ok+0x4c0/0x4c0
[ 84.617769][ C0] ? search_by_entry_key+0x940/0x940
[ 84.623014][ T5479] ? prepare_alloc_pages.constprop.0+0x40c/0x550
[ 84.628455][ C0] ? reiserfs_new_inode+0x1219/0x20b0
[ 84.633978][ T5479] __alloc_pages+0x1d0/0x4a0
[ 84.639930][ C0] ? r5_hash+0xaf/0xd0
[ 84.645446][ T5479] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360
[ 84.650730][ C0] ? make_cpu_key+0x26/0x2a0
[ 84.655995][ T5479] ? __mod_memcg_lruvec_state+0x1ce/0x310
[ 84.662299][ C0] reiserfs_add_entry+0x936/0xd20
[ 84.667643][ T5479] alloc_pages+0x1a9/0x270
[ 84.672235][ C0] ? reiserfs_lookup+0x690/0x690
[ 84.676292][ T5479] __get_free_pages+0xc/0x40
[ 84.683069][ C0] reiserfs_mkdir+0x68a/0x9a0
[ 84.687787][ T5479] __tlb_remove_page_size+0x2a6/0x470
[ 84.693494][ C0] ? reiserfs_mknod+0x740/0x740
[ 84.698502][ T5479] unmap_page_range+0x1399/0x2c10
[ 84.702888][ C0] ? reiserfs_lookup_privroot+0x19b/0x200
[ 84.707805][ T5479] ? vm_normal_page_pmd+0x5a0/0x5a0
[ 84.712359][ C0] ? rwsem_down_write_slowpath+0x12a0/0x12a0
[ 84.717006][ T5479] unmap_single_vma+0x194/0x2b0
[ 84.722341][ C0] reiserfs_xattr_init+0x57f/0xbb0
[ 84.727163][ T5479] unmap_vmas+0x1e2/0x330
[ 84.732438][ C0] reiserfs_fill_super+0x2139/0x3150
[ 84.738208][ T5479] ? unmap_single_vma+0x2b0/0x2b0
[ 84.743390][ C0] ? reiserfs_remount+0x1640/0x1640
[ 84.749347][ T5479] ? reacquire_held_locks+0x4b0/0x4b0
[ 84.754166][ C0] ? reiserfs_remount+0x1640/0x1640
[ 84.759245][ T5479] ? lru_add_drain_cpu+0x455/0x850
[ 84.763541][ C0] ? vsprintf+0x30/0x30
[ 84.768801][ T5479] exit_mmap+0x1ad/0xa60
[ 84.773788][ C0] ? bit_wait_io_timeout+0x160/0x160
[ 84.778954][ T5479] ? uprobe_clear_state+0x4b/0x420
[ 84.784291][ C0] ? preempt_count_sub+0x150/0x150
[ 84.789484][ T5479] ? do_vma_munmap+0x70/0x70
[ 84.794559][ C0] ? do_raw_spin_lock+0x12e/0x2b0
[ 84.798754][ T5479] __mmput+0x12a/0x4d0
[ 84.803063][ C0] ? down_write+0x14f/0x200
[ 84.808338][ T5479] mmput+0x62/0x70
[ 84.813413][ C0] ? setup_bdev_super+0x366/0x6f0
[ 84.818497][ T5479] do_exit+0x9ad/0x2a20
[ 84.823053][ C0] ? reiserfs_remount+0x1640/0x1640
[ 84.828048][ T5479] ? mm_update_next_owner+0x840/0x840
[ 84.832090][ C0] mount_bdev+0x1f3/0x2e0
[ 84.836593][ T5479] do_group_exit+0xd4/0x2a0
[ 84.840279][ C0] ? sget+0x610/0x610
[ 84.845268][ T5479] get_signal+0x23ba/0x2790
[ 84.849406][ C0] ? apparmor_capable+0x1da/0x4e0
[ 84.854591][ T5479] ? exit_signals+0x920/0x920
[ 84.859946][ C0] ? reiserfs_kill_sb+0x1e0/0x1e0
[ 84.864242][ T5479] ? up_write+0x510/0x510
[ 84.868709][ C0] legacy_get_tree+0x109/0x220
[ 84.872659][ T5479] arch_do_signal_or_restart+0x90/0x7f0
[ 84.877131][ C0] vfs_get_tree+0x8c/0x370
[ 84.882124][ T5479] ? __bad_area_nosemaphore+0x325/0x6a0
[ 84.886792][ C0] path_mount+0x1492/0x1ed0
[ 84.891814][ T5479] ? get_sigframe_size+0x20/0x20
[ 84.896120][ C0] ? kmem_cache_free+0xf0/0x480
[ 84.900879][ T5479] exit_to_user_mode_prepare+0x11f/0x240
[ 84.906383][ C0] ? finish_automount+0xa40/0xa40
[ 84.910767][ T5479] irqentry_exit_to_user_mode+0x9/0x40
[ 84.916298][ C0] ? putname+0x101/0x140
[ 84.920765][ T5479] asm_exc_page_fault+0x26/0x30
[ 84.925757][ C0] __x64_sys_mount+0x293/0x310
[ 84.930572][ T5479] RIP: 0033:0x7f5ff784a0a0
[ 84.936168][ C0] ? copy_mnt_ns+0xb60/0xb60
[ 84.941158][ T5479] Code: Unable to access opcode bytes at 0x7f5ff784a076.
[ 84.946593][ C0] ? syscall_enter_from_user_mode+0x26/0x80
[ 84.950803][ T5479] RSP: 002b:00007ffdf3039990 EFLAGS: 00010246
[ 84.955661][ C0] do_syscall_64+0x38/0xb0
[ 84.960390][ T5479]
[ 84.960394][ T5479] RAX: 00007ffdf784a0a0 RBX: 00007f5ff7598419 RCX: 00007f5ff7749150
[ 84.964780][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 84.969334][ T5479] RDX: 00007f5ff7749150 RSI: 0000000000000000 RDI: 00007f5ff7594560
[ 84.976320][ C0] RIP: 0033:0x7fc08de7e1ea
[ 84.982186][ T5479] RBP: 00007f5ff784a0a0 R08: 00007ffdf30398b0 R09: 00007ffdf3039990
[ 84.988226][ C0] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 84.992610][ T5479] R10: 00007ffdf30398f0 R11: 0000000000000007 R12: 0000000000000008
[ 84.994910][ C0] RSP: 002b:00007fc08ec7fee8 EFLAGS: 00000246
[ 85.002936][ T5479] R13: 0000000000000000 R14: 00007f5ff7819fc0 R15: 00007ffdf3039990
[ 85.008797][ C0] ORIG_RAX: 00000000000000a5
[ 85.016760][ T5479]
[ 85.021131][ C0] RAX: ffffffffffffffda RBX: 00007fc08ec7ff80 RCX: 00007fc08de7e1ea
[ 85.029069][ T5479] Modules linked in:
[ 85.049001][ C0] RDX: 0000000020001100 RSI: 0000000020000040 RDI: 00007fc08ec7ff40
[ 85.057133][ C1] ================================================================================
[ 85.063275][ C0] RBP: 0000000020001100 R08: 00007fc08ec7ff80 R09: 0000000000000080
[ 85.071225][ C1] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:131:9
[ 85.075868][ C0] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000020000040
[ 85.078860][ C1] index 8865 is out of range for type 'long unsigned int [8]'
[ 85.086800][ C0] R13: 00007fc08ec7ff40 R14: 00000000000010fa R15: 0000000020000000
[ 85.148479][ C0]
[ 85.151488][ C0]
[ 85.151493][ C1] CPU: 1 PID: 5479 Comm: sed Tainted: G D 6.6.0-rc6-syzkaller-g213f891525c2 #0
[ 85.153789][ C0] Allocated by task 5470:
[ 85.164112][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 85.168407][ C0] kasan_save_stack+0x33/0x50
[ 85.178653][ C1] Call Trace:
[ 85.178662][ C1]
[ 85.183300][ C0] kasan_set_track+0x25/0x30
[ 85.186597][ C1] dump_stack_lvl+0xd9/0x1b0
[ 85.189415][ C0] __kasan_slab_alloc+0x81/0x90
[ 85.193976][ C1] __ubsan_handle_out_of_bounds+0x111/0x150
[ 85.198536][ C0] kmem_cache_alloc+0x16c/0x3b0
[ 85.203366][ C1] __pv_queued_spin_lock_slowpath+0xb37/0xc70
[ 85.209235][ C0] prepare_creds+0x43/0x7b0
[ 85.214056][ C1] ? native_queued_spin_lock_slowpath+0x9c0/0x9c0
[ 85.220169][ C0] copy_creds+0xa7/0xe40
[ 85.224671][ C1] ? rcu_is_watching+0x12/0xb0
[ 85.231051][ C0] copy_process+0xeb6/0x73f0
[ 85.235255][ C1] ? lock_acquire+0x464/0x510
[ 85.240004][ C0] kernel_clone+0xfd/0x920
[ 85.244558][ C1] ? debug_locks_off+0x24/0x80
[ 85.249198][ C0] __do_sys_clone+0xba/0x100
[ 85.253614][ C1] do_raw_spin_lock+0x20e/0x2b0
[ 85.258346][ C0] do_syscall_64+0x38/0xb0
[ 85.262905][ C1] ? spin_bug+0x1d0/0x1d0
[ 85.267723][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 85.272104][ C1] ? do_raw_spin_unlock+0x173/0x230
[ 85.276395][ C0]
[ 85.276399][ C0] Last potentially related work creation:
[ 85.282268][ C1] ? do_raw_spin_unlock+0x173/0x230
[ 85.287445][ C0] kasan_save_stack+0x33/0x50
[ 85.289767][ C1] _raw_spin_lock_irqsave+0x42/0x50
[ 85.295450][ C0] __kasan_record_aux_stack+0xbc/0xd0
[ 85.300621][ C1] ? try_to_wake_up+0xb0/0x15b0
[ 85.305298][ C0] __call_rcu_common.constprop.0+0x9a/0x790
[ 85.310462][ C1] try_to_wake_up+0xb0/0x15b0
[ 85.315803][ C0] __put_cred+0x1ce/0x260
[ 85.320620][ C1] ? reacquire_held_locks+0x4b0/0x4b0
[ 85.326490][ C0] exit_creds+0x2ee/0x360
[ 85.331136][ C1] ? sched_ttwu_pending+0x560/0x560
[ 85.335433][ C0] __put_task_struct+0x129/0x3c0
[ 85.340775][ C1] ? hrtimer_init_sleeper_on_stack+0x90/0x90
[ 85.345071][ C0] delayed_put_task_struct+0x21b/0x2b0
[ 85.350232][ C1] hrtimer_wakeup+0x47/0x60
[ 85.355138][ C0] rcu_core+0x805/0x1bb0
[ 85.361087][ C1] __hrtimer_run_queues+0x203/0xc10
[ 85.366714][ C0] __do_softirq+0x218/0x965
[ 85.371196][ C1] ? enqueue_hrtimer+0x310/0x310
[ 85.375397][ C0]
[ 85.375400][ C0] Second to last potentially related work creation:
[ 85.380562][ C1] ? ktime_get_update_offsets_now+0x3bc/0x610
[ 85.385034][ C0] kasan_save_stack+0x33/0x50
[ 85.389940][ C1] hrtimer_interrupt+0x31b/0x800
[ 85.392243][ C0] __kasan_record_aux_stack+0xbc/0xd0
[ 85.398802][ C1] __sysvec_apic_timer_interrupt+0x105/0x3f0
[ 85.404840][ C0] __call_rcu_common.constprop.0+0x9a/0x790
[ 85.409481][ C1] sysvec_apic_timer_interrupt+0x8e/0xc0
[ 85.414383][ C0] __put_cred+0x1ce/0x260
[ 85.419721][ C1]
[ 85.425658][ C0] exit_creds+0x2ee/0x360
[ 85.431518][ C1]
[ 85.431524][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 85.437118][ C0] __put_task_struct+0x129/0x3c0
[ 85.441415][ C1] RIP: 0010:oops_end+0xc8/0x1e0
[ 85.444316][ C0] delayed_put_task_struct+0x21b/0x2b0
[ 85.448610][ C1] Code: d6 58 00 48 85 db 0f 85 08 01 00 00 e8 41 db 58 00 81 e5 00 02 00 00 31 ff 48 89 ee e8 c1 d6 58 00 48 85 ed 0f 85 81 00 00 00 23 db 58 00 e8 0e 13 1f 00 48 c7 c2 2e 3e 4d 8c be 02 00 00 00
[ 85.451513][ C0] rcu_core+0x805/0x1bb0
[ 85.457473][ C1] RSP: 0000:ffffc9000508f0f8 EFLAGS: 00000293
[ 85.462373][ C0] __do_softirq+0x218/0x965
[ 85.467189][ C1]
[ 85.467193][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 85.472725][ C0]
[ 85.472728][ C0] The buggy address belongs to the object at ffff888014eee100
[ 85.472728][ C0] which belongs to the cache cred_jar of size 192
[ 85.492648][ C1] RDX: ffff88801e91d940 RSI: ffffffff812ecd6e RDI: 0000000000000007
[ 85.496859][ C0] The buggy address is located 8 bytes to the right of
[ 85.496859][ C0] allocated 192-byte region [ffff888014eee100, ffff888014eee1c0)
[ 85.502890][ C1] RBP: 0000000000000200 R08: 0000000000000007 R09: 0000000000000000
[ 85.507357][ C0]
[ 85.507360][ C0] The buggy address belongs to the physical page:
[ 85.509657][ C1] R10: 0000000000000200 R11: 205d393734355420 R12: 000000000000000b
[ 85.517622][ C0] page:ffffea000053bb80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14eee
[ 85.519925][ C1] R13: 0000000000000001 R14: ffff88801e91d940 R15: ffff88801e91f1f0
[ 85.533794][ C0] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 85.541768][ C1] ? oops_end+0x14e/0x1e0
[ 85.556223][ C0] page_type: 0xffffffff()
[ 85.564172][ C1] ? oops_end+0x14e/0x1e0
[ 85.566474][ C0] raw: 00fff00000000800 ffff888014e433c0 ffffea000092b500 dead000000000002
[ 85.573049][ C1] do_trap+0x22b/0x420
[ 85.581026][ C0] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 85.591172][ C1] do_error_trap+0xf4/0x230
[ 85.599144][ C0] page dumped because: kasan: bad access detected
[ 85.606693][ C1] exc_stack_segment+0x37/0x50
[ 85.610989][ C0] page_owner tracks the page as allocated
[ 85.615286][ C1] asm_exc_stack_segment+0x26/0x30
[ 85.619601][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 68, tgid 68 (kworker/u4:3), ts 2907869304, free_ts 2893484752
[ 85.628195][ C1] RIP: 0010:__stack_depot_save+0x15e/0x510
[ 85.632229][ C0] post_alloc_hook+0x2cf/0x340
[ 85.640870][ C1] Code: 29 c0 89 c3 48 8b 05 f9 b2 ff 0d 89 d9 23 0d e9 b2 ff 0d 48 8d 0c c8 48 8b 29 48 85 ed 75 0b eb 70 48 8b 6d 00 48 85 ed 74 67 <39> 5d 08 75 f2 44 3b 7d 0c 75 ec 31 c0 48 8b 74 c5 18 49 39 34 c6
[ 85.645338][ C0] get_page_from_freelist+0xee0/0x2f20
[ 85.651746][ C1] RSP: 0000:ffffc9000508f2a0 EFLAGS: 00010206
[ 85.656473][ C0] __alloc_pages+0x1d0/0x4a0
[ 85.662157][ C1]
[ 85.662161][ C1] RAX: ffff88823b400000 RBX: 000000001f438700 RCX: ffff88823b5c3800
[ 85.667233][ C0] alloc_pages+0x1a9/0x270
[ 85.684981][ C1] RDX: 0000000000000010 RSI: 0000000000000002 RDI: 000000000a31ec6e
[ 85.690839][ C0] allocate_slab+0x251/0x380
[ 85.695572][ C1] RBP: 4c8b480000441f0f R08: 000000001c352baa R09: 0000000000000000
[ 85.715149][ C0] ___slab_alloc+0x8c7/0x1580
[ 85.720667][ C1] R10: 0000000000000000 R11: dffffc0000000000 R12: 0000000000000001
[ 85.726698][ C0] __slab_alloc.constprop.0+0x56/0xa0
[ 85.731255][ C1] R13: 0000000000102800 R14: ffffc9000508f328 R15: 0000000000000010
[ 85.733548][ C0] kmem_cache_alloc+0x38c/0x3b0
[ 85.741618][ C1] save_stack+0x16d/0x1f0
[ 85.745982][ C0] prepare_kernel_cred+0x39/0x8b0
[ 85.753927][ C1] ? register_early_stack+0xd0/0xd0
[ 85.758480][ C0] call_usermodehelper_exec_async+0x10e/0x4c0
[ 85.766418][ C1] ? post_alloc_hook+0x2cf/0x340
[ 85.771057][ C0] ret_from_fork+0x45/0x80
[ 85.779255][ C1] ? get_page_from_freelist+0xee0/0x2f20
[ 85.784588][ C0] ret_from_fork_asm+0x11/0x20
[ 85.792529][ C1] ? __alloc_pages+0x1d0/0x4a0
[ 85.797344][ C0] page last free stack trace:
[ 85.797349][ C0] free_unref_page_prepare+0x476/0xa40
[ 85.801637][ C1] ? alloc_pages+0x1a9/0x270
[ 85.806627][ C0] free_unref_page+0x33/0x3b0
[ 85.811813][ C1] ? __get_free_pages+0xc/0x40
[ 85.818016][ C0] __mmdrop+0xd7/0x470
[ 85.822917][ C1] ? __tlb_remove_page_size+0x2a6/0x470
[ 85.827298][ C0] __mmput+0x409/0x4d0
[ 85.832902][ C1] ? unmap_page_range+0x1399/0x2c10
[ 85.837630][ C0] mmput+0x62/0x70
[ 85.842358][ C1] ? unmap_single_vma+0x194/0x2b0
[ 85.847020][ C0] free_bprm+0x144/0x3f0
[ 85.852440][ C1] ? unmap_vmas+0x1e2/0x330
[ 85.856994][ C0] kernel_execve+0x3e7/0x4e0
[ 85.861638][ C1] ? exit_mmap+0x1ad/0xa60
[ 85.866564][ C0] call_usermodehelper_exec_async+0x256/0x4c0
[ 85.870626][ C1] ? __mmput+0x12a/0x4d0
[ 85.876219][ C0] ret_from_fork+0x45/0x80
[ 85.880253][ C1] ? mmput+0x62/0x70
[ 85.885417][ C0] ret_from_fork_asm+0x11/0x20
[ 85.889102][ C1] ? do_exit+0x9ad/0x2a20
[ 85.894093][ C0]
[ 85.894097][ C0] Memory state around the buggy address:
[ 85.898323][ C1] ? do_group_exit+0xd4/0x2a0
[ 85.902794][ C0] ffff888014eee080: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 85.907475][ C1] ? get_signal+0x23ba/0x2790
[ 85.911865][ C0] ffff888014eee100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 85.917892][ C1] ? arch_do_signal_or_restart+0x90/0x7f0
[ 85.922124][ C0] >ffff888014eee180: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[ 85.926500][ C1] ? mark_held_locks+0x9f/0xe0
[ 85.930361][ C0] ^
[ 85.935182][ C1] ? bad_range+0x262/0x440
[ 85.939478][ C0] ffff888014eee200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 85.941781][ C1] __set_page_owner+0x1f/0x60
[ 85.947378][ C0] ffff888014eee280: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[ 85.952018][ C1] post_alloc_hook+0x2cf/0x340
[ 85.960061][ C0] ==================================================================
[ 85.964704][ C1] get_page_from_freelist+0xee0/0x2f20
[ 85.972734][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 85.978422][ C1] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 85.978443][ C1] ? __zone_watermark_ok+0x4c0/0x4c0
[ 85.978455][ C1] ? prepare_alloc_pages.constprop.0+0x40c/0x550
[ 85.978468][ C1] __alloc_pages+0x1d0/0x4a0
[ 85.978480][ C1] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360
[ 85.978495][ C1] ? __mod_memcg_lruvec_state+0x1ce/0x310
[ 85.978515][ C1] alloc_pages+0x1a9/0x270
[ 85.978533][ C1] __get_free_pages+0xc/0x40
[ 85.978549][ C1] __tlb_remove_page_size+0x2a6/0x470
[ 85.978568][ C1] unmap_page_range+0x1399/0x2c10
[ 85.978585][ C1] ? vm_normal_page_pmd+0x5a0/0x5a0
[ 85.978599][ C1] unmap_single_vma+0x194/0x2b0
[ 85.978612][ C1] unmap_vmas+0x1e2/0x330
[ 85.978627][ C1] ? unmap_single_vma+0x2b0/0x2b0
[ 85.978638][ C1] ? reacquire_held_locks+0x4b0/0x4b0
[ 85.978655][ C1] ? lru_add_drain_cpu+0x455/0x850
[ 85.978672][ C1] exit_mmap+0x1ad/0xa60
[ 85.978688][ C1] ? uprobe_clear_state+0x4b/0x420
[ 85.978704][ C1] ? do_vma_munmap+0x70/0x70
[ 85.978728][ C1] __mmput+0x12a/0x4d0
[ 85.978740][ C1] mmput+0x62/0x70
[ 85.978751][ C1] do_exit+0x9ad/0x2a20
[ 85.978770][ C1] ? mm_update_next_owner+0x840/0x840
[ 85.978790][ C1] do_group_exit+0xd4/0x2a0
[ 85.978807][ C1] get_signal+0x23ba/0x2790
[ 85.978822][ C1] ? exit_signals+0x920/0x920
[ 85.978834][ C1] ? up_write+0x510/0x510
[ 85.978847][ C1] arch_do_signal_or_restart+0x90/0x7f0
[ 85.978864][ C1] ? __bad_area_nosemaphore+0x325/0x6a0
[ 85.978877][ C1] ? get_sigframe_size+0x20/0x20
[ 85.978898][ C1] exit_to_user_mode_prepare+0x11f/0x240
[ 85.978911][ C1] irqentry_exit_to_user_mode+0x9/0x40
[ 85.978930][ C1] asm_exc_page_fault+0x26/0x30
[ 85.978946][ C1] RIP: 0033:0x7f5ff784a0a0
[ 85.978955][ C1] Code: Unable to access opcode bytes at 0x7f5ff784a076.
[ 85.978960][ C1] RSP: 002b:00007ffdf3039990 EFLAGS: 00010246
[ 85.978972][ C1] RAX: 00007ffdf784a0a0 RBX: 00007f5ff7598419 RCX: 00007f5ff7749150
[ 85.978979][ C1] RDX: 00007f5ff7749150 RSI: 0000000000000000 RDI: 00007f5ff7594560
[ 85.978987][ C1] RBP: 00007f5ff784a0a0 R08: 00007ffdf30398b0 R09: 00007ffdf3039990
[ 85.978994][ C1] R10: 00007ffdf30398f0 R11: 0000000000000007 R12: 0000000000000008
[ 85.979001][ C1] R13: 0000000000000000 R14: 00007f5ff7819fc0 R15: 00007ffdf3039990
[ 85.979012][ C1]
[ 85.979016][ C1] ================================================================================
[ 85.979040][ C1] general protection fault, probably for non-canonical address 0xdffffc00004bd73c: 0000 [#2] PREEMPT SMP KASAN
[ 85.979051][ C1] KASAN: probably user-memory-access in range [0x00000000025eb9e0-0x00000000025eb9e7]
[ 85.979060][ C1] CPU: 1 PID: 5479 Comm: sed Tainted: G D 6.6.0-rc6-syzkaller-g213f891525c2 #0
[ 85.979074][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 85.979080][ C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x595/0xc70
[ 85.979094][ C1] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 05 00 00 4a 03 2c e5 20 0a 5d 8c 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 59 05 00 00 4c 8d 6d 14 44 89 7c 24 10 49 89 df
[ 85.979105][ C1] RSP: 0000:ffffc900001f0bd8 EFLAGS: 00010016
[ 85.979114][ C1] RAX: dffffc0000000000 RBX: ffff8880689a89e8 RCX: 0000000000000000
[ 85.979122][ C1] RDX: 00000000004bd73c RSI: ffffffff84558b1e RDI: ffffffff8c5e1f28
[ 85.979130][ C1] RBP: 00000000025eb9e0 R08: 0000000000000005 R09: ffff8880b993d580
[ 85.979137][ C1] R10: 0000000000000000 R11: 3d3d3d3d3d3d3d3d R12: 00000000000022a1
[ 85.979144][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000080000
[ 85.979154][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 85.979167][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 85.979175][ C1] CR2: 00007f5ff784a0a0 CR3: 0000000028b4f000 CR4: 0000000000350ee0
[ 85.979182][ C1] Call Trace:
[ 85.979187][ C1]
[ 85.979190][ C1] ? show_regs+0x8f/0xa0
[ 85.979204][ C1] ? die_addr+0x4f/0xd0
[ 85.979217][ C1] ? exc_general_protection+0x154/0x230
[ 85.979235][ C1] ? asm_exc_general_protection+0x26/0x30
[ 85.979251][ C1] ? __ubsan_handle_out_of_bounds+0x13e/0x150
[ 85.979269][ C1] ? __pv_queued_spin_lock_slowpath+0x595/0xc70
[ 85.979282][ C1] ? __pv_queued_spin_lock_slowpath+0xb37/0xc70
[ 85.979296][ C1] ? native_queued_spin_lock_slowpath+0x9c0/0x9c0
[ 85.979309][ C1] ? rcu_is_watching+0x12/0xb0
[ 85.979321][ C1] ? lock_acquire+0x464/0x510
[ 85.979335][ C1] ? debug_locks_off+0x24/0x80
[ 85.979351][ C1] do_raw_spin_lock+0x20e/0x2b0
[ 85.979368][ C1] ? spin_bug+0x1d0/0x1d0
[ 85.979383][ C1] ? do_raw_spin_unlock+0x173/0x230
[ 85.979400][ C1] ? do_raw_spin_unlock+0x173/0x230
[ 85.979418][ C1] _raw_spin_lock_irqsave+0x42/0x50
[ 85.979430][ C1] ? try_to_wake_up+0xb0/0x15b0
[ 85.979448][ C1] try_to_wake_up+0xb0/0x15b0
[ 85.979466][ C1] ? reacquire_held_locks+0x4b0/0x4b0
[ 85.979481][ C1] ? sched_ttwu_pending+0x560/0x560
[ 85.979501][ C1] ? hrtimer_init_sleeper_on_stack+0x90/0x90
[ 85.979517][ C1] hrtimer_wakeup+0x47/0x60
[ 85.979532][ C1] __hrtimer_run_queues+0x203/0xc10
[ 85.979549][ C1] ? enqueue_hrtimer+0x310/0x310
[ 85.979564][ C1] ? ktime_get_update_offsets_now+0x3bc/0x610
[ 85.979584][ C1] hrtimer_interrupt+0x31b/0x800
[ 85.979603][ C1] __sysvec_apic_timer_interrupt+0x105/0x3f0
[ 85.979624][ C1] sysvec_apic_timer_interrupt+0x8e/0xc0
[ 85.979641][ C1]
[ 85.979644][ C1]
[ 85.979648][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 85.979663][ C1] RIP: 0010:oops_end+0xc8/0x1e0
[ 85.979677][ C1] Code: d6 58 00 48 85 db 0f 85 08 01 00 00 e8 41 db 58 00 81 e5 00 02 00 00 31 ff 48 89 ee e8 c1 d6 58 00 48 85 ed 0f 85 81 00 00 00 23 db 58 00 e8 0e 13 1f 00 48 c7 c2 2e 3e 4d 8c be 02 00 00 00
[ 85.979687][ C1] RSP: 0000:ffffc9000508f0f8 EFLAGS: 00000293
[ 85.979696][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 85.979703][ C1] RDX: ffff88801e91d940 RSI: ffffffff812ecd6e RDI: 0000000000000007
[ 85.979710][ C1] RBP: 0000000000000200 R08: 0000000000000007 R09: 0000000000000000
[ 85.979717][ C1] R10: 0000000000000200 R11: 205d393734355420 R12: 000000000000000b
[ 85.979724][ C1] R13: 0000000000000001 R14: ffff88801e91d940 R15: ffff88801e91f1f0
[ 85.979734][ C1] ? oops_end+0x14e/0x1e0
[ 85.979748][ C1] ? oops_end+0x14e/0x1e0
[ 85.979761][ C1] do_trap+0x22b/0x420
[ 85.979779][ C1] do_error_trap+0xf4/0x230
[ 85.979797][ C1] exc_stack_segment+0x37/0x50
[ 85.979812][ C1] asm_exc_stack_segment+0x26/0x30
[ 85.979826][ C1] RIP: 0010:__stack_depot_save+0x15e/0x510
[ 85.979841][ C1] Code: 29 c0 89 c3 48 8b 05 f9 b2 ff 0d 89 d9 23 0d e9 b2 ff 0d 48 8d 0c c8 48 8b 29 48 85 ed 75 0b eb 70 48 8b 6d 00 48 85 ed 74 67 <39> 5d 08 75 f2 44 3b 7d 0c 75 ec 31 c0 48 8b 74 c5 18 49 39 34 c6
[ 85.979852][ C1] RSP: 0000:ffffc9000508f2a0 EFLAGS: 00010206
[ 85.979860][ C1] RAX: ffff88823b400000 RBX: 000000001f438700 RCX: ffff88823b5c3800
[ 85.979867][ C1] RDX: 0000000000000010 RSI: 0000000000000002 RDI: 000000000a31ec6e
[ 85.979874][ C1] RBP: 4c8b480000441f0f R08: 000000001c352baa R09: 0000000000000000
[ 85.979882][ C1] R10: 0000000000000000 R11: dffffc0000000000 R12: 0000000000000001
[ 85.979889][ C1] R13: 0000000000102800 R14: ffffc9000508f328 R15: 0000000000000010
[ 85.979903][ C1] save_stack+0x16d/0x1f0
[ 85.979918][ C1] ? register_early_stack+0xd0/0xd0
[ 85.979932][ C1] ? post_alloc_hook+0x2cf/0x340
[ 85.979949][ C1] ? get_page_from_freelist+0xee0/0x2f20
[ 85.979959][ C1] ? __alloc_pages+0x1d0/0x4a0
[ 85.979969][ C1] ? alloc_pages+0x1a9/0x270
[ 85.979985][ C1] ? __get_free_pages+0xc/0x40
[ 85.980000][ C1] ? __tlb_remove_page_size+0x2a6/0x470
[ 85.980017][ C1] ? unmap_page_range+0x1399/0x2c10
[ 85.980027][ C1] ? unmap_single_vma+0x194/0x2b0
[ 85.980038][ C1] ? unmap_vmas+0x1e2/0x330
[ 85.980048][ C1] ? exit_mmap+0x1ad/0xa60
[ 85.980062][ C1] ? __mmput+0x12a/0x4d0
[ 85.980073][ C1] ? mmput+0x62/0x70
[ 85.980082][ C1] ? do_exit+0x9ad/0x2a20
[ 85.980098][ C1] ? do_group_exit+0xd4/0x2a0
[ 85.980114][ C1] ? get_signal+0x23ba/0x2790
[ 85.980125][ C1] ? arch_do_signal_or_restart+0x90/0x7f0
[ 85.980141][ C1] ? mark_held_locks+0x9f/0xe0
[ 85.980156][ C1] ? bad_range+0x262/0x440
[ 85.980173][ C1] __set_page_owner+0x1f/0x60
[ 85.980188][ C1] post_alloc_hook+0x2cf/0x340
[ 85.980208][ C1] get_page_from_freelist+0xee0/0x2f20
[ 85.980223][ C1] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 85.980240][ C1] ? __zone_watermark_ok+0x4c0/0x4c0
[ 85.980252][ C1] ? prepare_alloc_pages.constprop.0+0x40c/0x550
[ 85.980265][ C1] __alloc_pages+0x1d0/0x4a0
[ 85.980276][ C1] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360
[ 85.980292][ C1] ? __mod_memcg_lruvec_state+0x1ce/0x310
[ 85.980312][ C1] alloc_pages+0x1a9/0x270
[ 85.980329][ C1] __get_free_pages+0xc/0x40
[ 85.980345][ C1] __tlb_remove_page_size+0x2a6/0x470
[ 85.980364][ C1] unmap_page_range+0x1399/0x2c10
[ 85.980380][ C1] ? vm_normal_page_pmd+0x5a0/0x5a0
[ 85.980394][ C1] unmap_single_vma+0x194/0x2b0
[ 85.980407][ C1] unmap_vmas+0x1e2/0x330
[ 85.980419][ C1] ? unmap_single_vma+0x2b0/0x2b0
[ 85.980430][ C1] ? reacquire_held_locks+0x4b0/0x4b0
[ 85.980447][ C1] ? lru_add_drain_cpu+0x455/0x850
[ 85.980463][ C1] exit_mmap+0x1ad/0xa60
[ 85.980480][ C1] ? uprobe_clear_state+0x4b/0x420
[ 85.980495][ C1] ? do_vma_munmap+0x70/0x70
[ 85.980518][ C1] __mmput+0x12a/0x4d0
[ 85.980530][ C1] mmput+0x62/0x70
[ 85.980540][ C1] do_exit+0x9ad/0x2a20
[ 85.980558][ C1] ? mm_update_next_owner+0x840/0x840
[ 85.980578][ C1] do_group_exit+0xd4/0x2a0
[ 85.980595][ C1] get_signal+0x23ba/0x2790
[ 85.980609][ C1] ? exit_signals+0x920/0x920
[ 85.980626][ C1] ? up_write+0x510/0x510
[ 85.980639][ C1] arch_do_signal_or_restart+0x90/0x7f0
[ 85.980655][ C1] ? __bad_area_nosemaphore+0x325/0x6a0
[ 85.980667][ C1] ? get_sigframe_size+0x20/0x20
[ 85.980687][ C1] exit_to_user_mode_prepare+0x11f/0x240
[ 85.980700][ C1] irqentry_exit_to_user_mode+0x9/0x40
[ 85.980717][ C1] asm_exc_page_fault+0x26/0x30
[ 85.980731][ C1] RIP: 0033:0x7f5ff784a0a0
[ 85.980739][ C1] Code: Unable to access opcode bytes at 0x7f5ff784a076.
[ 85.980744][ C1] RSP: 002b:00007ffdf3039990 EFLAGS: 00010246
[ 85.980752][ C1] RAX: 00007ffdf784a0a0 RBX: 00007f5ff7598419 RCX: 00007f5ff7749150
[ 85.980760][ C1] RDX: 00007f5ff7749150 RSI: 0000000000000000 RDI: 00007f5ff7594560
[ 85.980767][ C1] RBP: 00007f5ff784a0a0 R08: 00007ffdf30398b0 R09: 00007ffdf3039990
[ 85.980774][ C1] R10: 00007ffdf30398f0 R11: 0000000000000007 R12: 0000000000000008
[ 85.980781][ C1] R13: 0000000000000000 R14: 00007f5ff7819fc0 R15: 00007ffdf3039990
[ 85.980792][ C1]
[ 85.980796][ C1] Modules linked in:
[ 85.980802][ C1] ---[ end trace 0000000000000000 ]---
[ 85.980806][ C1] RIP: 0010:__stack_depot_save+0x15e/0x510
[ 85.980821][ C1] Code: 29 c0 89 c3 48 8b 05 f9 b2 ff 0d 89 d9 23 0d e9 b2 ff 0d 48 8d 0c c8 48 8b 29 48 85 ed 75 0b eb 70 48 8b 6d 00 48 85 ed 74 67 <39> 5d 08 75 f2 44 3b 7d 0c 75 ec 31 c0 48 8b 74 c5 18 49 39 34 c6
[ 85.980832][ C1] RSP: 0000:ffffc9000508f2a0 EFLAGS: 00010206
[ 85.980840][ C1] RAX: ffff88823b400000 RBX: 000000001f438700 RCX: ffff88823b5c3800
[ 85.980848][ C1] RDX: 0000000000000010 RSI: 0000000000000002 RDI: 000000000a31ec6e
[ 85.980855][ C1] RBP: 4c8b480000441f0f R08: 000000001c352baa R09: 0000000000000000
[ 85.980862][ C1] R10: 0000000000000000 R11: dffffc0000000000 R12: 0000000000000001
[ 85.980869][ C1] R13: 0000000000102800 R14: ffffc9000508f328 R15: 0000000000000010
[ 85.980878][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 85.980890][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 85.980898][ C1] CR2: 00007f5ff784a0a0 CR3: 0000000028b4f000 CR4: 0000000000350ee0
[ 87.060238][ C0] Shutting down cpus with NMI
[ 88.280552][ C0] Kernel Offset: disabled
[ 88.284866][ C0] Rebooting in 86400 seconds..