2022/09/15 15:38:29 ###proc loop idx: 1
2022/09/15 15:38:29 ###begin to attach usb device
2022/09/15 15:38:29 ###begin to attach usb device
durationWaitTime:  800ms
[  222.526500][ T2956] Bluetooth: hci2: command 0x040f tx timeout
durationWaitTime:  1.6s
[  224.604275][   T30] Bluetooth: hci2: command 0x0419 tx timeout
15:38:36 executing program 3:
syz_attach_gadget(&(0x7f0000000040)={0x210, 0x0, 0x0, 0x0, 0x78, 0x77d, 0x627a, 0x1, 0x80, 0x46, 0x2, [{0xa, @ms_null_attr}, {0x7, @net_attr={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @broadcast, &(0x7f0000000000)=0x20, 0x6}}]}, 0x3)

2022/09/15 15:38:36 fops fd map: /dev/amidi.(amidi./) -> shmem_file_operations, fd: fd
2022/09/15 15:38:36 fops fd map: /dev/bus/usb/003/002(002/003/usb/bus/) -> usbdev_file_operations, fd: fd_usbfs
2022/09/15 15:38:36 fops fd map: /dev/hidg0(hidg0/) -> f_hidg_fops, fd: fd
2022/09/15 15:38:36 fops fd map: /dev/hidg1(hidg1/) -> f_hidg_fops, fd: fd
2022/09/15 15:38:36 fops fd map: /dev/hidraw0(hidraw0/) -> hidraw_ops, fd: fd_hidraw
2022/09/15 15:38:36 ###attach usb device success: map[/dev/amidi.:fd /dev/bus/usb/003/002:fd_usbfs /dev/hidg0:fd /dev/hidg1:fd /dev/hidraw0:fd_hidraw]
2022/09/15 15:38:36 ###begin to generate program
2022/09/15 15:38:36 file prog: name: /dev/amidi., fd: fd
2022/09/15 15:38:36 file prog loop meta, name: syz_open_dev$floppy, Ret: fd_floppy
2022/09/15 15:38:36 file prog loop meta, name: openat$drirender128, Ret: fd_dri
2022/09/15 15:38:36 file prog loop meta, name: syz_open_dev$char_usb, Ret: fd_char_usb
2022/09/15 15:38:36 file prog loop meta, name: syz_mount_image$squashfs, Ret: fd_dir
2022/09/15 15:38:36 file prog loop meta, name: eventfd2, Ret: fd_event
2022/09/15 15:38:36 file prog loop meta, name: openat$dev_bsg_1, Ret: fd_dev_bsg
2022/09/15 15:38:36 file prog loop meta, name: openat$proc_mixer, Ret: fd_proc_mixer
2022/09/15 15:38:36 file prog loop meta, name: openat$bsg, Ret: fd
2022/09/15 15:38:36 file prog: name: /dev/bus/usb/003/002, fd: fd_usbfs
2022/09/15 15:38:36 file prog loop meta, name: syz_open_dev$usbfs, Ret: fd_usbfs
2022/09/15 15:38:36 file prog: name: /dev/hidg0, fd: fd
2022/09/15 15:38:36 file prog loop meta, name: open$dir, Ret: fd_dir
2022/09/15 15:38:36 file prog loop meta, name: epoll_create1, Ret: fd_epoll
2022/09/15 15:38:36 file prog loop meta, name: socket$isdn_base, Ret: sock_isdn_base
2022/09/15 15:38:36 file prog loop meta, name: dup, Ret: fd
2022/09/15 15:38:36 file prog: name: /dev/hidg1, fd: fd
2022/09/15 15:38:36 file prog loop meta, name: openat$audio1, Ret: fd_dsp
2022/09/15 15:38:36 file prog loop meta, name: mq_open, Ret: fd_mq
2022/09/15 15:38:36 file prog loop meta, name: syz_open_dev$vcsa, Ret: fd
2022/09/15 15:38:36 file prog: name: /dev/hidraw0, fd: fd_hidraw
2022/09/15 15:38:36 file prog loop meta, name: syz_open_dev$hidraw, Ret: fd_hidraw
15:38:36 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi.', 0x404000, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/003/002', 0x2, 0x4100)
r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/dev/hidg0', 0x8240, 0x30)
r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/hidg1', 0xc489, 0x4800)
r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw0', 0x9, 0x1)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)=0x10000)
ioctl$TCFLSH(r2, 0x540b, 0x1)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000200)={0x0, 0x30, 0x1000, 0x8, 0x73, 0x2, &(0x7f0000000180)="518dad5464ddb1bdc41780024307b1b2c816c70b407b779b7d2e3337f7f9a02a249a3d17f2244e066c9a04c18b640f0d9b00d2b704f36d4ab42f3a971efc19a866d301b86c0ef2baa70126925a35bbad97151a6c97996014f4650e69161852c19f2752677d6eafb0fd67ec6a1969bd519d0b21"})
r4 = signalfd4(r3, &(0x7f0000000240)={[0x7fffffff]}, 0x8, 0x80800)
ioctl$USBDEVFS_RELEASEINTERFACE(r4, 0x80045510, &(0x7f0000000280)=0x1)
ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f00000002c0))
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000300)={0x7ff, 0x4, 0x9954, 0x8000000000000001, 0x1, 0xfffb})
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000340)=0x10)
syz_attach_gadget(&(0x7f0000000380)={0x310, 0x0, 0x0, 0x0, 0x48, 0x8dd, 0x988, 0x0, 0xc0, 0x50, 0x1, [{0x8, @phonet_null_attr}]}, 0x2)
ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d13, &(0x7f00000003c0)=0x40)
ioctl$USBDEVFS_RESET(r0, 0x5514)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r5, 0x4008941a, &(0x7f0000000400))
read$FUSE(r1, &(0x7f0000000a00)={0x2020, 0x0, 0x0, <r6=>0x0}, 0x2020)
syz_mount_image$tmpfs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x5, 0x6, &(0x7f0000000940)=[{&(0x7f00000004c0)="3120ad0c9e40c5c62bf8cfde7a2c659c3326a69bf6a1bf578e9349445b8d35d294453529a90a48cbb6b465355a0a3af95eca1c1b3d51ec52eee794aa803495c9e1808422477356eba030fc1dc57ce2948c0dc7fb5d27cc0824ec4a54d60a7f43d336936e7a1459f4079fee7f0b6e1c5cc86277378b014313f3ce32f245220566e2cc6355d24a2639914696460cf2fa7542fa5ac98f5f8dfa2fe7612b6ac0009dd55dd8c72a35044bb532e16f7a79101c4bee76fc0b9e0136b3d8082492119179affd8f7a55f606bed0c6340cc366902b38d68642239282d929c0d36d8e2ad89f8e50c849760eb8cbe694f723106a1e08163a7876", 0xf4, 0x6}, {&(0x7f00000005c0)="9ba79b2bba19ec4ef6e51704867899b0fdcbfc8003b849a1b050a6f2778e41bfdb1ff6a4011a6259dd92f042e97b29d060367fdc3b3e2e49f7b40d1a5666b7871d394d7884ad8e04b3393a6b95b9c2e84c178f274f71e2a6167d7c2e0483b64a69b55eddf788f11b3111757a8ea84c3eb1d145b930413b22fe87e3d2aa9212c01f09255c1d67c2579bb56f858bd625e92e4c065ff28507a2", 0x98, 0xb682}, {&(0x7f0000000680)="28f8b74f14f29589ba1b5402f77b21127d40c17287fa53e243760a2a64f29131a6288e53cb9d87e24cb04c228ee5db153d82020b6d08bd9d2a75054af413ea5fe7ec4c7140ef27e64d2dc54daa", 0x4d, 0x11c3}, {&(0x7f0000000700)="5720359f65497a530b9942aaba1af4cf6606d4a9c7fca8d5f2bba220bf32269cd65544f4709c7bb511fb70f0f6ebe9de29b127df62b0a9f02399f53ec44aa661faeb3557e49debfedbcf26c29a66cca5139e0b03abb6b93ba5e1c90d92f5ca4c6077986229071b5d8358701eef455743425afc5394c5961afb101d2e8c12d3d0cc0821f2919a3f07174e757665cb09d0ae885ff7471b2a431ebbe783dd94eca2c273726ad06962e1d04173092ae9b6cce14a9fe06e2d4263e1b4057e4a71196192df089e57ce85a056517655e0020facd74b16f9aa", 0xd5, 0x1}, {&(0x7f0000000800)="8a579fcaf5", 0x5, 0x7}, {&(0x7f0000000840)="7c1f4e66613f53e4d6bcbb9c900005e4d529e7a63bd04fb4e07c15267814bb001e61ce649e83e34e210c53160fe0c38a6f5688b8a7c5b9f6061adfdcce590e394ea1b9319a14292c5ba61b790033020be149d1f7321a7d6bb75272fa4cf0da818fb2e9be873a595e2ce07f2d7bf4070906f10a9f38ec1fe95578fea49e5351e4f5bfce1704770dcfd3d911495ff5039c613ba112ce3fec49bad09cbb2eb3bb3a1c1573760c1f0216ba4831f252c71a1b43567dbf6d1ad923261540e6148169a3c8cb49ec3717cf57377b355bb6e8f9893041231920a865e5d06401e949248c205b", 0xe1, 0x18000000000}], 0x11001, &(0x7f0000004a80)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@huge_advise}, {@nr_inodes={'nr_inodes', 0x3d, [0x34, 0x32, 0x12, 0x38, 0x34, 0x78, 0x74, 0x30]}}, {@mpol={'mpol', 0x3d, {'default', '=static', @val={0x3a, [0x39, 0x34, 0x32]}}}}], [{@euid_lt={'euid<', r6}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/amidi.'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@euid_lt}, {@appraise}, {@obj_type={'obj_type', 0x3d, '/dev/hidg1'}}, {@obj_role={'obj_role', 0x3d, '/dev/bus/usb/003/002'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/hidraw0'}}]})

[  228.469873][   T29] audit: type=1800 audit(1663256316.468:20): pid=7952 uid=0 auid=0 ses=4 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="UDC" dev="configfs" ino=32876 res=0 errno=0
[  228.486924][   T29] audit: type=1800 audit(1663256316.488:21): pid=7952 uid=0 auid=0 ses=4 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="UDC" dev="configfs" ino=32877 res=0 errno=0
[  228.502452][   T29] audit: type=1800 audit(1663256316.498:22): pid=7952 uid=0 auid=0 ses=4 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="UDC" dev="configfs" ino=32878 res=0 errno=0
[  228.528289][   T24] usb 3-1: USB disconnect, device number 2
[  228.569125][ T7951] ==================================================================
[  228.569860][ T7951] BUG: KASAN: use-after-free in f_hidg_read+0xa7a/0xe20
[  228.570483][ T7951] Read of size 1 at addr ffff888027a49012 by task syz-executor.2/7951
[  228.571794][ T7951]
[  228.572079][ T7951] CPU: 1 PID: 7951 Comm: syz-executor.2 Not tainted 6.0.0-rc4+ #20
[  228.572941][ T7951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014
[  228.574001][ T7951] Call Trace:
[  228.574372][ T7951]  <TASK>
[  228.574703][ T7951]  dump_stack_lvl+0xcd/0x134
[  228.575341][ T7951]  print_report.cold+0xe5/0x66d
[  228.576521][ T7951]  ? f_hidg_read+0xa7a/0xe20
[  228.577168][ T7951]  kasan_report+0x8a/0x1b0
[  228.577690][ T7951]  ? f_hidg_read+0xa7a/0xe20
[  228.578211][ T7951]  f_hidg_read+0xa7a/0xe20
[  228.578748][ T7951]  ? apparmor_task_setrlimit+0x8e0/0x8e0
[  228.579428][ T7951]  ? hidg_set_alt+0xa20/0xa20
[  228.580009][ T7951]  ? __sanitizer_cov_trace_pc+0x1a/0x40
[  228.580702][ T7951]  ? security_file_permission+0x490/0x6b0
[  228.581340][ T7951]  vfs_read+0x257/0x940
[  228.581829][ T7951]  ? hidg_set_alt+0xa20/0xa20
[  228.582326][ T7951]  ? kernel_read+0x70/0x70
[  228.582699][ T7951]  ? __fget_files+0x26b/0x430
[  228.583083][ T7951]  ? __sanitizer_cov_trace_pc+0x1a/0x40
[  228.583534][ T7951]  ? __fget_light+0x20d/0x270
[  228.584056][ T7951]  ksys_read+0x127/0x250
[  228.584573][ T7951]  ? vfs_write+0xd90/0xd90
[  228.585126][ T7951]  ? syscall_enter_from_user_mode+0x22/0xb0
[  228.585777][ T7951]  do_syscall_64+0x35/0x80
[  228.586244][ T7951]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  228.586890][ T7951] RIP: 0033:0x7fe3038a80fd
[  228.587314][ T7951] Code: 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  228.589214][ T7951] RSP: 002b:00007fe303f02bf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  228.590046][ T7951] RAX: ffffffffffffffda RBX: 00007fe30399c340 RCX: 00007fe3038a80fd
[  228.590828][ T7951] RDX: 0000000000002020 RSI: 0000000020000a00 RDI: 0000000000000003
[  228.591596][ T7951] RBP: 00007fe30390b606 R08: 0000000000000000 R09: 0000000000000000
[  228.592464][ T7951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  228.593245][ T7951] R13: 00007ffe7356189f R14: 00007ffe73561a40 R15: 00007fe303f02d80
[  228.594046][ T7951]  </TASK>
[  228.594368][ T7951]
[  228.594620][ T7951] Allocated by task 7828:
[  228.595060][ T7951]  kasan_save_stack+0x1e/0x40
[  228.595546][ T7951]  __kasan_kmalloc+0xa9/0xd0
[  228.596017][ T7951]  kmem_cache_alloc_trace+0x19b/0x380
[  228.596575][ T7951]  hidg_alloc+0x49/0x620
[  228.597011][ T7951]  usb_get_function+0x54/0xc0
[  228.597488][ T7951]  config_usb_cfg_link+0x1bf/0x3b0
[  228.598033][ T7951]  configfs_symlink+0x542/0x1100
[  228.598546][ T7951]  vfs_symlink+0x579/0x8b0
[  228.599003][ T7951]  do_symlinkat+0x225/0x2a0
[  228.599473][ T7951]  __x64_sys_symlink+0x75/0x90
[  228.599967][ T7951]  do_syscall_64+0x35/0x80
[  228.600467][ T7951]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  228.601335][ T7951]
[  228.601582][ T7951] Freed by task 7952:
[  228.601968][ T7951]  kasan_save_stack+0x1e/0x40
[  228.602429][ T7951]  kasan_set_track+0x21/0x30
[  228.602888][ T7951]  kasan_set_free_info+0x20/0x30
[  228.603375][ T7951]  __kasan_slab_free+0x11d/0x1b0
[  228.603862][ T7951]  kfree+0xe9/0x650
[  228.604280][ T7951]  hidg_free+0x9c/0x110
[  228.604854][ T7951]  usb_put_function+0x34/0x50
[  228.605397][ T7951]  config_usb_cfg_unlink+0x281/0x360
[  228.606013][ T7951]  configfs_unlink+0x3e2/0x830
[  228.606574][ T7951]  vfs_unlink+0x343/0x940
[  228.607112][ T7951]  do_unlinkat+0x3d5/0x660
[  228.607671][ T7951]  __x64_sys_unlink+0x3e/0x50
[  228.608330][ T7951]  do_syscall_64+0x35/0x80
[  228.608825][ T7951]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  228.609388][ T7951]
[  228.609612][ T7951] The buggy address belongs to the object at ffff888027a49000
[  228.609612][ T7951]  which belongs to the cache kmalloc-1k of size 1024
[  228.610800][ T7951] The buggy address is located 18 bytes inside of
[  228.610800][ T7951]  1024-byte region [ffff888027a49000, ffff888027a49400)
[  228.611946][ T7951]
[  228.612170][ T7951] The buggy address belongs to the physical page:
[  228.612768][ T7951] page:ffffea00009e9200 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888027a4d800 pfn:0x27a48
[  228.613756][ T7951] head:ffffea00009e9200 order:3 compound_mapcount:0 compound_pincount:0
[  228.614490][ T7951] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  228.615281][ T7951] raw: 00fff00000010200 ffffea00009e5c08 ffffea0000ab0008 ffff888011c41dc0
[  228.616073][ T7951] raw: ffff888027a4d800 000000000010000d 00000001ffffffff 0000000000000000
[  228.617035][ T7951] page dumped because: kasan: bad access detected
[  228.617856][ T7951] page_owner tracks the page as allocated
[  228.618603][ T7951] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6450, tgid 6450 (syz-executor.0), ts 172570752202, free_ts 168197901202
[  228.621142][ T7951]  prep_new_page+0x2c6/0x350
[  228.621766][ T7951]  get_page_from_freelist+0xae9/0x3a80
[  228.622364][ T7951]  __alloc_pages+0x321/0x710
[  228.622913][ T7951]  alloc_pages+0x117/0x2f0
[  228.623439][ T7951]  new_slab+0x246/0x3a0
[  228.623977][ T7951]  ___slab_alloc+0xa50/0x1060
[  228.624693][ T7951]  __slab_alloc.isra.0+0x4d/0xa0
[  228.625250][ T7951]  __kmalloc_node+0x2ed/0x360
[  228.625777][ T7951]  qdisc_alloc+0xb9/0xc30
[  228.626331][ T7951]  qdisc_create_dflt+0x71/0x4a0
[  228.626858][ T7951]  attach_one_default_qdisc.constprop.0+0xc4/0x1a0
[  228.627521][ T7951]  dev_activate+0x5a7/0xa10
[  228.627993][ T7951]  __dev_open+0x32d/0x460
[  228.628478][ T7951]  __dev_change_flags+0x500/0x650
[  228.628982][ T7951]  dev_change_flags+0x93/0x170
[  228.629405][ T7951]  do_setlink+0xacc/0x3ca0
[  228.629803][ T7951] page last free stack trace:
[  228.630313][ T7951]  free_pcp_prepare+0x5ab/0xd00
[  228.630984][ T7951]  free_unref_page+0x19/0x410
[  228.631647][ T7951]  release_pages+0x386/0x16c0
[  228.632281][ T7951]  tlb_flush_mmu+0xef/0x690
[  228.632870][ T7951]  tlb_finish_mmu+0x93/0x3c0
[  228.633415][ T7951]  unmap_region+0x27f/0x350
[  228.634169][ T7951]  __do_munmap+0xafe/0x10c0
[  228.634686][ T7951]  __vm_munmap+0xf7/0x230
[  228.635191][ T7951]  __x64_sys_munmap+0x55/0x80
[  228.635710][ T7951]  do_syscall_64+0x35/0x80
[  228.636231][ T7951]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  228.636915][ T7951]
[  228.637186][ T7951] Memory state around the buggy address:
[  228.637748][ T7951]  ffff888027a48f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  228.638617][ T7951]  ffff888027a48f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  228.639389][ T7951] >ffff888027a49000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  228.640168][ T7951]                          ^
[  228.640662][ T7951]  ffff888027a49080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  228.641415][ T7951]  ffff888027a49100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  228.642156][ T7951] ==================================================================
[  228.654000][ T7951] Kernel panic - not syncing: panic_on_warn set ...
[  228.654726][ T7951] CPU: 1 PID: 7951 Comm: syz-executor.2 Not tainted 6.0.0-rc4+ #20
[  228.655507][ T7951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014
[  228.656509][ T7951] Call Trace:
[  228.656912][ T7951]  <TASK>
[  228.657224][ T7951]  dump_stack_lvl+0xcd/0x134
[  228.657775][ T7951]  panic+0x2d7/0x636
[  228.658233][ T7951]  ? panic_print_sys_info.part.0+0x10b/0x10b
[  228.658998][ T7951]  ? preempt_schedule_common+0x5e/0xc0
[  228.659658][ T7951]  ? f_hidg_read+0xa7a/0xe20
[  228.660148][ T7951]  ? preempt_schedule_thunk+0x16/0x18
[  228.660765][ T7951]  ? f_hidg_read+0xa7a/0xe20
[  228.661251][ T7951]  end_report.part.0+0x3f/0x7c
[  228.661795][ T7951]  kasan_report.cold+0x8/0x12
[  228.662313][ T7951]  ? f_hidg_read+0xa7a/0xe20
[  228.662811][ T7951]  f_hidg_read+0xa7a/0xe20
[  228.663262][ T7951]  ? apparmor_task_setrlimit+0x8e0/0x8e0
[  228.663809][ T7951]  ? hidg_set_alt+0xa20/0xa20
[  228.664332][ T7951]  ? __sanitizer_cov_trace_pc+0x1a/0x40
[  228.664906][ T7951]  ? security_file_permission+0x490/0x6b0
[  228.665488][ T7951]  vfs_read+0x257/0x940
[  228.665948][ T7951]  ? hidg_set_alt+0xa20/0xa20
[  228.666455][ T7951]  ? kernel_read+0x70/0x70
[  228.666936][ T7951]  ? __fget_files+0x26b/0x430
[  228.667442][ T7951]  ? __sanitizer_cov_trace_pc+0x1a/0x40
[  228.668021][ T7951]  ? __fget_light+0x20d/0x270
[  228.668527][ T7951]  ksys_read+0x127/0x250
[  228.668952][ T7951]  ? vfs_write+0xd90/0xd90
[  228.669390][ T7951]  ? syscall_enter_from_user_mode+0x22/0xb0
[  228.669963][ T7951]  do_syscall_64+0x35/0x80
[  228.670426][ T7951]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  228.671034][ T7951] RIP: 0033:0x7fe3038a80fd
[  228.671476][ T7951] Code: 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  228.673512][ T7951] RSP: 002b:00007fe303f02bf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  228.674290][ T7951] RAX: ffffffffffffffda RBX: 00007fe30399c340 RCX: 00007fe3038a80fd
[  228.675092][ T7951] RDX: 0000000000002020 RSI: 0000000020000a00 RDI: 0000000000000003
[  228.675884][ T7951] RBP: 00007fe30390b606 R08: 0000000000000000 R09: 0000000000000000
[  228.676686][ T7951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  228.677455][ T7951] R13: 00007ffe7356189f R14: 00007ffe73561a40 R15: 00007fe303f02d80
[  228.678250][ T7951]  </TASK>
[  228.678641][ T7951] Kernel Offset: disabled
[  228.679085][ T7951] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:38:36  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffff888022261d40 RDX=0000000000000000
RSI=ffff888022261d40 RDI=ffff88802226213c RBP=ffff888022261d40 RSP=ffffc90003d97cb0
R8 =ffffffff89069d93 R9 =00000000000002fa R10=0000000000000004 R11=fffffbfff1d34742
R12=0000000000000001 R13=00000000000002fa R14=dffffc0000000000 R15=ffff88801eab97d0
RIP=ffffffff8165a3a7 RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88802cc00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1258748978 CR3=000000002ad7a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=726f6674616c702f736563697665642f
XMM02=ffffffffffffffff00000000000000ff XMM03=696e656420737365636341002f737973
XMM04=00005645053dd1b000005645053c7ba0 XMM05=000000010000ff000000000200000007
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=616c702f736563697665642f7379732f XMM09=00000000000000000000000000000000
XMM10=00002000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000005 RBX=0000000000000001 RCX=0000000000000000 RDX=00000000000003f9
RSI=ffff88801f6f3a80 RDI=ffffffff916c1f40 RBP=ffffffff916c1f00 RSP=ffffc90006e7f5e0
R8 =ffffffff84624951 R9 =000000000000001f R10=0000000000000001 R11=ffffed100887e046
R12=0000000000000000 R13=0000000000000005 R14=0000000000000000 R15=0000000000000010
RIP=ffffffff8462497b RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fe303f03700 00000000 00000000
GS =0000 ffff88807ec00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000c002f3e0e8 CR3=0000000022984000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff00ff0000000000000000000000ff XMM01=25252525252525252525252525252525
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=00ff00000000000000000000000000ff XMM05=00000000000000000000000000001000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000