[ 23.920911] BUG: Bad rss-counter state mm:0000000000f459fb type:MM_FILEPAGES val:33
[ 23.920944] BUG: Bad rss-counter state mm:0000000000f459fb type:MM_ANONPAGES val:22
[ 24.200760] ==================================================================
[ 24.201626] BUG: KASAN: slab-use-after-free in vma_interval_tree_remove+0xc75/0xec0
[ 24.202526] Read of size 8 at addr ffff88800e0e1ed8 by task sshd/219
[ 24.203247]
[ 24.203454] CPU: 1 PID: 219 Comm: sshd Not tainted 6.4.0-rc7-next-20230620 #1
[ 24.204273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 24.205191] Call Trace:
[ 24.205498]
[ 24.205767] dump_stack_lvl+0x91/0xf0
[ 24.206240] print_report+0xcc/0x620
[ 24.206704] ? __virt_addr_valid+0x102/0x340
[ 24.207224] ? vma_interval_tree_remove+0xc75/0xec0
[ 24.207812] ? vma_interval_tree_remove+0xc75/0xec0
[ 24.208391] kasan_report+0xbe/0xf0
[ 24.208845] ? vma_interval_tree_remove+0xc75/0xec0
[ 24.209430] vma_interval_tree_remove+0xc75/0xec0
[ 24.210005] vma_prepare+0xc54/0x11a0
[ 24.210471] __split_vma+0x5af/0x950
[ 24.210942] ? __pfx___split_vma+0x10/0x10
[ 24.211461] ? find_held_lock+0x2c/0x110
[ 24.211986] do_vmi_align_munmap+0x2ba/0x11f0
[ 24.212554] ? lock_is_held_type+0x9f/0x120
[ 24.213089] ? __pfx_do_vmi_align_munmap+0x10/0x10
[ 24.213697] ? mtree_range_walk+0x632/0x900
[ 24.214272] ? mas_walk+0x5c7/0x7c0
[ 24.214752] do_vmi_munmap+0x1f1/0x2b0
[ 24.215247] mmap_region+0x1f9/0x2660
[ 24.215735] ? vm_mmap_pgoff+0x15c/0x3a0
[ 24.216240] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[ 24.216972] ? __pfx_lock_acquire+0x10/0x10
[ 24.217506] ? __pfx_mmap_region+0x10/0x10
[ 24.218027] ? security_mmap_addr+0x7d/0xa0
[ 24.218561] ? get_unmapped_area+0x1f5/0x3f0
[ 24.219118] do_mmap+0x854/0xf00
[ 24.219557] vm_mmap_pgoff+0x1a6/0x3a0
[ 24.220055] ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 24.220611] ksys_mmap_pgoff+0x3af/0x500
[ 24.221112] do_syscall_64+0x3f/0x90
[ 24.221589] entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 24.222257] RIP: 0033:0x7fad9b23ad82
[ 24.222718] Code: eb aa 66 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 33 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 56 5b 5d c3 0f 1f 00 c7 05 ae 03 01 00 16 00
[ 24.224835] RSP: 002b:00007fff0a304f68 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[ 24.225750] RAX: ffffffffffffffda RBX: 0000000000000812 RCX: 00007fad9b23ad82
[ 24.226614] RDX: 0000000000000005 RSI: 0000000000001000 RDI: 00007fad9a674000
[ 24.227470] RBP: 00007fad9a674000 R08: 0000000000000009 R09: 0000000000001000
[ 24.228319] R10: 0000000000000812 R11: 0000000000000206 R12: 0000563d40d58980
[ 24.229397] R13: 00007fff0a304f80 R14: 00007fff0a304fb0 R15: 00007fff0a305310
[ 24.230262]
[ 24.230555]
[ 24.230772] Allocated by task 206:
[ 24.231201] kasan_save_stack+0x22/0x50
[ 24.231727] kasan_set_track+0x25/0x30
[ 24.232227] __kasan_slab_alloc+0x59/0x70
[ 24.232754] kmem_cache_alloc+0x16b/0x370
[ 24.233265] vm_area_dup+0x20/0x160
[ 24.233721] __split_vma+0x170/0x950
[ 24.234175] split_vma+0xc6/0x110
[ 24.234619] mprotect_fixup+0x8d2/0xb30
[ 24.235124] do_mprotect_pkey+0x87e/0xd40
[ 24.235640] __x64_sys_mprotect+0x78/0xc0
[ 24.236159] do_syscall_64+0x3f/0x90
[ 24.236641] entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 24.237277]
[ 24.237496] Freed by task 13:
[ 24.237884] kasan_save_stack+0x22/0x50
[ 24.238390] kasan_set_track+0x25/0x30
[ 24.238892] kasan_save_free_info+0x2b/0x50
[ 24.239421] __kasan_slab_free+0x10a/0x190
[ 24.239949] kmem_cache_free+0x10d/0x4d0
[ 24.240451] rcu_core+0x8c8/0x2860
[ 24.240898] __do_softirq+0x1b7/0x7d4
[ 24.241370]
[ 24.241585] Last potentially related work creation:
[ 24.242185] kasan_save_stack+0x22/0x50
[ 24.242689] __kasan_record_aux_stack+0x8e/0xa0
[ 24.243255] __call_rcu_common.constprop.0+0x6a/0xb90
[ 24.243893] remove_vma+0x139/0x170
[ 24.244338] do_vmi_align_munmap+0xd4a/0x11f0
[ 24.244896] do_vmi_munmap+0x1f1/0x2b0
[ 24.245381] __vm_munmap+0x138/0x3a0
[ 24.245853] __x64_sys_munmap+0x59/0x80
[ 24.246349] do_syscall_64+0x3f/0x90
[ 24.246821] entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 24.247465]
[ 24.247685] The buggy address belongs to the object at ffff88800e0e1e80
[ 24.247685] which belongs to the cache vm_area_struct of size 168
[ 24.249158] The buggy address is located 88 bytes inside of
[ 24.249158] freed 168-byte region [ffff88800e0e1e80, ffff88800e0e1f28)
[ 24.250564]
[ 24.250784] The buggy address belongs to the physical page:
[ 24.251444] page:0000000049118b40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xe0e1
[ 24.252535] memcg:ffff88800e234801
[ 24.252962] anon flags: 0x100000000000200(slab|node=0|zone=1)
[ 24.253657] page_type: 0xffffffff()
[ 24.254107] raw: 0100000000000200 ffff8880087a0c80 ffffea0000383200 dead000000000007
[ 24.255032] raw: 0000000000000000 0000000000110011 00000001ffffffff ffff88800e234801
[ 24.255940] page dumped because: kasan: bad access detected
[ 24.256590]
[ 24.256806] Memory state around the buggy address:
[ 24.257387] ffff88800e0e1d80: fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 24.258254] ffff88800e0e1e00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[ 24.259111] >ffff88800e0e1e80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 24.259958] ^
[ 24.260686] ffff88800e0e1f00: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc
[ 24.261532] ffff88800e0e1f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 24.262396] ==================================================================
[ 24.263402] Disabling lock debugging due to kernel taint
Debian GNU/Linux 11 syzkaller ttyS0
syzkaller login: [ 26.344070] BUG: Bad rss-counter state mm:000000007a13f25c type:MM_FILEPAGES val:33
[ 26.345629] BUG: Bad rss-counter state mm:000000007a13f25c type:MM_ANONPAGES val:22
[ 26.827276] BUG: Bad rss-counter state mm:000000007e9be5a9 type:MM_FILEPAGES val:33
[ 26.828273] BUG: Bad rss-counter state mm:000000007e9be5a9 type:MM_ANONPAGES val:22
Warning: Permanently added '[localhost]:45730' (ECDSA) to the list of known hosts.
[ 27.075808] kmemleak: Cannot insert 0xffff88801be242f8 into the object search tree (overlaps existing)
[ 27.076966] CPU: 0 PID: 237 Comm: sshd Tainted: G B 6.4.0-rc7-next-20230620 #1
[ 27.078005] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 27.079015] Call Trace:
[ 27.079340]
[ 27.079624] dump_stack_lvl+0x91/0xf0
[ 27.080132] __create_object+0x736/0xc90
[ 27.080667] ? kasan_set_track+0x25/0x30
[ 27.081200] kmem_cache_alloc+0x20b/0x370
[ 27.081729] vm_area_dup+0x20/0x160
[ 27.082204] dup_mmap+0x94e/0x1770
[ 27.082665] ? __pfx_dup_mmap+0x10/0x10
[ 27.083166] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 27.083762] ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 27.084386] ? trace_hardirqs_on+0x16/0x100
[ 27.084936] ? mm_init+0xb4a/0xe70
[ 27.085385] copy_process+0x3e68/0x7320
[ 27.085886] ? lock_acquire+0x434/0x4c0
[ 27.086398] ? __pfx_copy_process+0x10/0x10
[ 27.086949] ? expand_files+0x446/0x8e0
[ 27.087458] kernel_clone+0xeb/0x7d0
[ 27.087938] ? __pfx_kernel_clone+0x10/0x10
[ 27.088477] ? lock_acquire+0x434/0x4c0
[ 27.088971] ? lock_release+0x4d8/0x680
[ 27.089463] ? __pfx_lock_release+0x10/0x10
[ 27.089999] ? __pfx_lock_release+0x10/0x10
[ 27.090549] ? _raw_spin_unlock+0x1e/0x40
[ 27.091067] ? alloc_fd+0x2eb/0x760
[ 27.091538] __do_sys_clone+0xba/0x100
[ 27.092034] ? __pfx___do_sys_clone+0x10/0x10
[ 27.092613] ? fpregs_assert_state_consistent+0xbd/0xe0
[ 27.093274] do_syscall_64+0x3f/0x90
[ 27.093759] entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 27.094412] RIP: 0033:0x7f2e1e3c84bb
[ 27.094884] Code: ed 0f 85 f8 00 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 91 00 00 00 41 89 c5 85 c0 0f 85 9e 00 00
[ 27.097048] RSP: 002b:00007fffddbf8a40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 27.097952] RAX: ffffffffffffffda RBX: 0000000000008844 RCX: 00007f2e1e3c84bb
[ 27.098836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 27.099699] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f2e1df09900
[ 27.100549] R10: 00007f2e1df09bd0 R11: 0000000000000246 R12: 0000000000000000
[ 27.101401] R13: 0000564a3cd88ec0 R14: 0000564a3cd992e0 R15: 00007fffddbf8ac0
[ 27.102292]
[ 27.102599] kmemleak: Kernel memory leak detector disabled
[ 27.103256] kmemleak: Object 0xffff88801be242b8 (size 168):
[ 27.103943] kmemleak: comm "sshd", pid 237, jiffies 4294693987
[ 27.104681] kmemleak: min_count = 1
[ 27.105152] kmemleak: count = 0
[ 27.105569] kmemleak: flags = 0x1
[ 27.106006] kmemleak: checksum = 0
[ 27.106473] kmemleak: backtrace:
[ 27.106894] vm_area_dup+0x20/0x160
[ 27.107358] dup_mmap+0x94e/0x1770
[ 27.107808] copy_process+0x3e68/0x7320
[ 27.108301] kernel_clone+0xeb/0x7d0
[ 27.108783] __do_sys_clone+0xba/0x100
[ 27.109272] do_syscall_64+0x3f/0x90
[ 27.109755] entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 27.111707] kmemleak: Automatic memory scanning thread ended
[ 27.124533] general protection fault, probably for non-canonical address 0xe0efdc23a000001b: 0000 [#1] PREEMPT SMP KASAN NOPTI
[ 27.125910] KASAN: maybe wild-memory-access in range [0x077f011d000000d8-0x077f011d000000df]
[ 27.126900] CPU: 1 PID: 237 Comm: sshd Tainted: G B 6.4.0-rc7-next-20230620 #1
[ 27.127912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 27.128879] RIP: 0010:__rb_insert_augmented+0x9d/0x8b0
[ 27.129538] Code: c2 48 c1 ea 03 42 80 3c 2a 00 0f 85 55 05 00 00 4d 8b 74 24 08 49 39 ee 0f 84 77 01 00 00 4d 85 f6 74 1c 4c 89 f2 48 c1 ea 03 <42> 80 3c 2a 00 0f 85 61 05 00 00 41 f6 06 01 0f 84 7a 04 00 00 48
[ 27.131682] RSP: 0018:ffff88800c55f948 EFLAGS: 00010216
[ 27.132318] RAX: ffff88801b8385d0 RBX: ffff88800e237210 RCX: ffffffff844d49f9
[ 27.133162] RDX: 00efe023a000001b RSI: 0000000000000008 RDI: ffff88800cbbea88
[ 27.134000] RBP: ffff88800bef9280 R08: ffff88800cbbea88 R09: 0000000000000000
[ 27.134855] R10: 0000000000000002 R11: 00000000000b6a61 R12: ffff88800cbbea80
[ 27.135699] R13: dffffc0000000000 R14: 077f011d000000db R15: ffffffff816e6340
[ 27.136553] FS: 00007f2e1df09900(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 27.137502] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 27.138210] CR2: 00007f42a9323100 CR3: 000000000eace000 CR4: 0000000000350ee0
[ 27.139066] Call Trace:
[ 27.139379]
[ 27.139661] ? die_addr+0x3c/0xa0
[ 27.140099] ? exc_general_protection+0x125/0x220
[ 27.140720] ? asm_exc_general_protection+0x26/0x30
[ 27.141343] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10
[ 27.142095] ? __rb_insert_augmented+0x5e9/0x8b0
[ 27.142705] ? __rb_insert_augmented+0x9d/0x8b0
[ 27.143291] ? __rb_insert_augmented+0x5e9/0x8b0
[ 27.143880] ? vma_interval_tree_insert_after+0x315/0x390
[ 27.144586] dup_mmap+0xc45/0x1770
[ 27.145047] ? __pfx_dup_mmap+0x10/0x10
[ 27.145536] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 27.146281] ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 27.147139] ? trace_hardirqs_on+0x16/0x100
[ 27.147877] ? mm_init+0xb4a/0xe70
[ 27.148484] copy_process+0x3e68/0x7320
[ 27.149140] ? lock_acquire+0x434/0x4c0
[ 27.149820] ? __pfx_copy_process+0x10/0x10
[ 27.150581] ? expand_files+0x446/0x8e0
[ 27.151195] kernel_clone+0xeb/0x7d0
[ 27.151664] ? __pfx_kernel_clone+0x10/0x10
[ 27.152200] ? lock_acquire+0x434/0x4c0
[ 27.152690] ? lock_release+0x4d8/0x680
[ 27.153180] ? __pfx_lock_release+0x10/0x10
[ 27.153711] ? __pfx_lock_release+0x10/0x10
[ 27.154246] ? _raw_spin_unlock+0x1e/0x40
[ 27.154752] ? alloc_fd+0x2eb/0x760
[ 27.155220] __do_sys_clone+0xba/0x100
[ 27.155704] ? __pfx___do_sys_clone+0x10/0x10
[ 27.156277] ? fpregs_assert_state_consistent+0xbd/0xe0
[ 27.156935] do_syscall_64+0x3f/0x90
[ 27.157414] entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 27.158061] RIP: 0033:0x7f2e1e3c84bb
[ 27.158533] Code: ed 0f 85 f8 00 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 91 00 00 00 41 89 c5 85 c0 0f 85 9e 00 00
[ 27.160640] RSP: 002b:00007fffddbf8a40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 27.161534] RAX: ffffffffffffffda RBX: 0000000000008844 RCX: 00007f2e1e3c84bb
[ 27.162396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 27.163230] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f2e1df09900
[ 27.164067] R10: 00007f2e1df09bd0 R11: 0000000000000246 R12: 0000000000000000
[ 27.164909] R13: 0000564a3cd88ec0 R14: 0000564a3cd992e0 R15: 00007fffddbf8ac0
[ 27.165771]
[ 27.166062] Modules linked in:
[ 27.166559] ---[ end trace 0000000000000000 ]---
[ 27.167149] RIP: 0010:__rb_insert_augmented+0x9d/0x8b0
[ 27.167818] Code: c2 48 c1 ea 03 42 80 3c 2a 00 0f 85 55 05 00 00 4d 8b 74 24 08 49 39 ee 0f 84 77 01 00 00 4d 85 f6 74 1c 4c 89 f2 48 c1 ea 03 <42> 80 3c 2a 00 0f 85 61 05 00 00 41 f6 06 01 0f 84 7a 04 00 00 48
[ 27.169962] RSP: 0018:ffff88800c55f948 EFLAGS: 00010216
[ 27.170632] RAX: ffff88801b8385d0 RBX: ffff88800e237210 RCX: ffffffff844d49f9
[ 27.171510] RDX: 00efe023a000001b RSI: 0000000000000008 RDI: ffff88800cbbea88
[ 27.172371] RBP: ffff88800bef9280 R08: ffff88800cbbea88 R09: 0000000000000000
[ 27.173222] R10: 0000000000000002 R11: 00000000000b6a61 R12: ffff88800cbbea80
[ 27.174318] R13: dffffc0000000000 R14: 077f011d000000db R15: ffffffff816e6340
[ 27.175191] FS: 00007f2e1df09900(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 27.176159] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 27.176878] CR2: 00007f42a9323100 CR3: 000000000eace000 CR4: 0000000000350ee0
[ 28.080900] general protection fault, probably for non-canonical address 0x1723e26c000008: 0000 [#2] PREEMPT SMP KASAN NOPTI
[ 28.082263] CPU: 1 PID: 33 Comm: kworker/u4:3 Tainted: G B D 6.4.0-rc7-next-20230620 #1
[ 28.083341] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 28.084297] Workqueue: writeback wb_workfn (flush-8:0)
[ 28.084953] RIP: 0010:qlist_free_all+0xaf/0x1a0
[ 28.085533] Code: 80 4c 01 c2 0f 82 f8 00 00 00 48 c7 c0 00 00 00 80 48 2b 05 7b 5e ab 03 48 01 d0 48 c1 e8 0c 48 c1 e0 06 48 03 05 59 5e ab 03 <48> 8b 48 08 48 89 c2 f6 c1 01 0f 85 ba 00 00 00 0f 1f 44 00 00 48
[ 28.087628] RSP: 0018:ffff888009517328 EFLAGS: 00010207
[ 28.088257] RAX: 001723e26c000000 RBX: 05ce011b000000ed RCX: 000000008011000c
[ 28.089093] RDX: 05ce011b800000ed RSI: ffff88801be243a0 RDI: ffff8880087a0c80
[ 28.089933] RBP: 0000000000000000 R08: 05ce011b000000ed R09: 0000000000000000
[ 28.090767] R10: ffffea00006f8900 R11: 000000008011000c R12: dffffc0000000000
[ 28.091595] R13: ffff888009517368 R14: 0000000000000000 R15: ffff88801be243a0
[ 28.092439] FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 28.093379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 28.094066] CR2: 00007f2fae1436f8 CR3: 000000000d654000 CR4: 0000000000350ee0
[ 28.094924] Call Trace:
[ 28.095239]
[ 28.095519] ? die_addr+0x3c/0xa0
[ 28.095952] ? exc_general_protection+0x125/0x220
[ 28.096558] ? asm_exc_general_protection+0x26/0x30
[ 28.097188] ? qlist_free_all+0xaf/0x1a0
[ 28.097695] ? qlist_free_all+0x6d/0x1a0
[ 28.098194] ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 28.098817] kasan_quarantine_reduce+0x199/0x230
[ 28.099416] __kasan_slab_alloc+0x49/0x70
[ 28.099936] kmem_cache_alloc+0x16b/0x370
[ 28.100453] ext4_init_io_end+0x27/0x180
[ 28.100953] ext4_do_writepages+0xc31/0x3150
[ 28.101519] ? __pfx_ext4_do_writepages+0x10/0x10
[ 28.102120] ? __pfx_lock_release+0x10/0x10
[ 28.102660] ? lock_release+0x4d8/0x680
[ 28.103149] ? __pfx_lock_acquire+0x10/0x10
[ 28.103670] ? ext4_es_insert_extent+0x2b4/0xc50
[ 28.104248] ? __pfx_lock_release+0x10/0x10
[ 28.104769] ? lock_acquire+0x434/0x4c0
[ 28.105257] ext4_writepages+0x2fc/0x760
[ 28.105767] ? __pfx_ext4_writepages+0x10/0x10
[ 28.106363] ? __pfx_ext4_writepages+0x10/0x10
[ 28.106933] do_writepages+0x1ad/0x650
[ 28.107432] ? __pfx_do_writepages+0x10/0x10
[ 28.107991] ? __pfx_lock_release+0x10/0x10
[ 28.108516] ? __pfx_lock_release+0x10/0x10
[ 28.109035] ? lock_release+0x4d8/0x680
[ 28.109526] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 28.110102] ? __pfx_lock_release+0x10/0x10
[ 28.110631] ? do_raw_spin_lock+0x125/0x270
[ 28.111159] __writeback_single_inode+0x105/0xc50
[ 28.111747] ? wbc_attach_and_unlock_inode+0x4a3/0x910
[ 28.112392] writeback_sb_inodes+0x546/0xe20
[ 28.112944] ? __pfx_writeback_sb_inodes+0x10/0x10
[ 28.113552] __writeback_inodes_wb+0xbe/0x270
[ 28.114109] wb_writeback+0x48b/0x980
[ 28.114603] ? __pfx_wb_writeback+0x10/0x10
[ 28.115134] ? get_nr_dirty_inodes+0x12a/0x1b0
[ 28.115695] wb_workfn+0x81d/0xed0
[ 28.116141] ? __pfx_lock_unpin_lock+0x10/0x10
[ 28.116710] ? __pfx_wb_workfn+0x10/0x10
[ 28.117209] ? lock_acquire+0x434/0x4c0
[ 28.117695] ? __pfx_lock_acquire+0x10/0x10
[ 28.118229] ? read_word_at_a_time+0xe/0x20
[ 28.118749] ? strscpy+0xa4/0x2b0
[ 28.119181] process_one_work+0xabf/0x1770
[ 28.119692] ? __pfx_lock_acquire+0x10/0x10
[ 28.120217] ? __pfx_process_one_work+0x10/0x10
[ 28.120781] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 28.121360] worker_thread+0x64f/0x12a0
[ 28.121856] ? __pfx_worker_thread+0x10/0x10
[ 28.122396] kthread+0x33f/0x440
[ 28.122825] ? __pfx_kthread+0x10/0x10
[ 28.123309] ret_from_fork+0x2c/0x50
[ 28.123781]
[ 28.124067] Modules linked in:
[ 28.124529] ---[ end trace 0000000000000000 ]---
[ 28.125104] RIP: 0010:__rb_insert_augmented+0x9d/0x8b0
[ 28.125770] Code: c2 48 c1 ea 03 42 80 3c 2a 00 0f 85 55 05 00 00 4d 8b 74 24 08 49 39 ee 0f 84 77 01 00 00 4d 85 f6 74 1c 4c 89 f2 48 c1 ea 03 <42> 80 3c 2a 00 0f 85 61 05 00 00 41 f6 06 01 0f 84 7a 04 00 00 48
[ 28.127910] RSP: 0018:ffff88800c55f948 EFLAGS: 00010216
[ 28.128548] RAX: ffff88801b8385d0 RBX: ffff88800e237210 RCX: ffffffff844d49f9
[ 28.129404] RDX: 00efe023a000001b RSI: 0000000000000008 RDI: ffff88800cbbea88
[ 28.130259] RBP: ffff88800bef9280 R08: ffff88800cbbea88 R09: 0000000000000000
[ 28.131109] R10: 0000000000000002 R11: 00000000000b6a61 R12: ffff88800cbbea80
[ 28.131959] R13: dffffc0000000000 R14: 077f011d000000db R15: ffffffff816e6340
[ 28.132832] FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 28.133795] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 28.134505] CR2: 00007f2fae1436f8 CR3: 000000000d654000 CR4: 0000000000350ee0
[ 28.135400] ------------[ cut here ]------------
[ 28.135971] WARNING: CPU: 1 PID: 33 at kernel/exit.c:818 do_exit+0x1be5/0x2780
[ 28.136880] Modules linked in:
[ 28.137276] CPU: 1 PID: 33 Comm: kworker/u4:3 Tainted: G B D 6.4.0-rc7-next-20230620 #1
[ 28.138387] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 28.139364] Workqueue: writeback wb_workfn (flush-8:0)
[ 28.140037] RIP: 0010:do_exit+0x1be5/0x2780
[ 28.140563] Code: 00 00 31 f6 e8 6c 68 ff ff e9 09 f6 ff ff e8 42 7a 33 00 4c 89 ee bf 05 06 00 00 e8 c5 e2 02 00 e9 fc e8 ff ff e8 2b 7a 33 00 <0f> 0b e9 e2 e5 ff ff e8 1f 7a 33 00 0f 0b e9 9a e4 ff ff e8 13 7a
[ 28.142688] RSP: 0018:ffff888009517e40 EFLAGS: 00010293
[ 28.143319] RAX: 0000000000000000 RBX: ffff888008f421c0 RCX: 0000000000000000
[ 28.144169] RDX: ffff888009501b40 RSI: ffffffff81188e35 RDI: ffff888009502cc0
[ 28.145017] RBP: ffff888009501b40 R08: 0000000000000000 R09: 0000000000000000
[ 28.145873] R10: ffffffff85d3d357 R11: 0000000000000001 R12: ffff888009502368
[ 28.146735] R13: 000000000000000b R14: ffff888008f3ae40 R15: 0000000000000000
[ 28.147589] FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 28.148556] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 28.149267] CR2: 00007f2fae1436f8 CR3: 000000000d654000 CR4: 0000000000350ee0
[ 28.150128] Call Trace:
[ 28.150472]
[ 28.150775] ? __warn+0xe6/0x340
[ 28.151215] ? do_exit+0x1be5/0x2780
[ 28.151705] ? report_bug+0x2fe/0x400
[ 28.152191] ? handle_bug+0x3c/0x70
[ 28.152680] ? exc_invalid_op+0x18/0x50
[ 28.153193] ? asm_exc_invalid_op+0x1a/0x20
[ 28.153735] ? do_exit+0x1be5/0x2780
[ 28.154197] ? do_exit+0x1be5/0x2780
[ 28.154705] ? worker_thread+0x64f/0x12a0
[ 28.155217] ? __pfx_do_exit+0x10/0x10
[ 28.155727] make_task_dead+0x175/0x3b0
[ 28.156234] rewind_stack_and_make_dead+0x17/0x20
[ 28.156844] RIP: 0000:0x0
[ 28.157193] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[ 28.157971] RSP: 0000:0000000000000000 EFLAGS: 00000000 ORIG_RAX: 0000000000000000
[ 28.158903] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 28.159749] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 28.160595] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 28.161436] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 28.162299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 28.163153]
[ 28.163440] irq event stamp: 6324
[ 28.163870] hardirqs last enabled at (6323): [] _raw_spin_unlock_irq+0x23/0x40
[ 28.164923] hardirqs last disabled at (6324): [] __schedule+0x127d/0x2b00
[ 28.165921] softirqs last enabled at (5896): [] irq_exit_rcu+0x93/0xc0
[ 28.166919] softirqs last disabled at (5887): [] irq_exit_rcu+0x93/0xc0
[ 28.167902] ---[ end trace 0000000000000000 ]---
VM DIAGNOSIS:
16:31:56 Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffffffff85d3e490 RCX=0000000000000000 RDX=0000000000000002
RSI=ffffffff849018c0 RDI=ffffffff87f338e0 RBP=ffff88800d988898 RSP=ffff88800d10fc78
R8 =0000000000000002 R9 =0000000000000000 R10=ffff88800d9887df R11=00000000000b6a61
R12=ffffffff87f338e0 R13=0000000000000000 R14=ffffffff87b6a200 R15=ffff888008f7a000
RIP=ffffffff812c19c0 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fdc94714900 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffea5308000 CR3=0000000019b8e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffffffff000000000000 XMM01=000000000000003635006b6f6c6c756e
XMM02=62003d73646e756f7200323135616873 XMM03=5320444f4854454d5f54505952434e45
XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000202020 XMM09=ff0000ffffffffffff00000000ffffff
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=00000000dead4ead RBX=ffffffff856d84a0 RCX=0000000000000000 RDX=0000000000000000
RSI=0000000000000008 RDI=ffffffff856d84a4 RBP=1ffff11003429f61 RSP=ffff88801a14fb00
R8 =0000000000000000 R9 =fffffbfff0ba7a6a R10=ffffffff85d3d357 R11=00000000000b6a61
R12=0000000000000287 R13=ffffea0000394680 R14=ffffffff811654d8 R15=ffff88800d6d7680
RIP=ffffffff812e009a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f42a92f9b80 CR3=000000000e6ac000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2036353a31333a3631203032206e754a XMM01=73732878696e755f6d6170203a5d3832
XMM02=65736f6c63206e6f6973736573203a29 XMM03=755f6d6170203a5d3832325b64687373
XMM04=69662068637573206f4e203a656c6163 XMM05=3a656c696620766e65206e65706f206f
XMM06=65733a6468737328766e655f6d617020 XMM07=6b7a79732036353a31333a3631203032
XMM08=69767265733d7373616c63742030733a XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000