Complete report #1015639
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
|
vmlinux |
|
0x23
|
|
2
|
|
vmlinux |
|
0x23
|
|
3
|
|
vmlinux |
|
0x23
|
|
4
|
|
vmlinux |
|
0x23
|
|
5
|
|
vmlinux |
|
0x23
|
|
6
|
|
vmlinux |
|
0x23
|
|
7
|
|
vmlinux |
|
0x23
|
|
8
|
__die
|
vmlinux |
|
0x23
|
|
9
|
__die
|
vmlinux |
|
0x23
|
|
10
|
__die
|
vmlinux |
|
0x23
|
|
11
|
__die
|
vmlinux |
|
0x23
|
|
12
|
__die
|
vmlinux |
|
0x23
|
|
13
|
nv_revoke_gpu_mappings_locked
|
nvidia |
|
0x47
|
|
14
|
nv_revoke_gpu_mappings_locked
|
nvidia |
|
0x47
|
|
15
|
nv_revoke_gpu_mappings_locked
|
nvidia |
|
0x47
|
|
16
|
__die
|
vmlinux |
|
0x23
|
|
17
|
__die
|
vmlinux |
|
0x23
|
|
18
|
__die
|
vmlinux |
|
0x23
|
|
19
|
__die
|
vmlinux |
|
0x23
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
|
vmlinux |
|
0x23
|
|
22
|
__die
|
vmlinux |
|
0x23
|
WARNING: CPU: 12 PID: 98015 at include/linux/rwsem.h:80 follow_pte+0x20e/0x220
Modules linked in: vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock vmw_vmci uinput snd_seq_dummy snd_hrtimer rfkill qrtr nvidia_drm(POE) sunrpc nvidia_modeset(POE) nvidia_uvm(POE) nvidia(POE) snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_hda_intel binfmt_misc snd_usb_audio snd_intel_dspcfg intel_rapl_msr snd_intel_sdw_acpi intel_rapl_common joydev iTCO_wdt uvcvideo uvc video x86_pkg_temp_thermal snd_hda_codec snd_usbmidi_lib intel_powerclamp coretemp videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 snd_ump videobuf2_common kvm_intel snd_hda_core snd_rawmidi videodev mc snd_hwdep snd_seq kvm snd_seq_device intel_pmc_bxt snd_pcm snd_timer snd soundcore rapl mei_me intel_cstate ucsi_ccg typec_ucsi typec i2c_i801 pcspkr i2c_nvidia_gpu iTCO_vendor_support mei intel_uncore i2c_smbus lpc_ich loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic mxm_wmi ghash_clmulni_intel firewire_ohci e1000e sha512_ssse3
sha256_ssse3 firewire_core sha1_ssse3 crc_itu_t wmi ip6_tables ip_tables fuse
CPU: 12 PID: 98015 Comm: nvidia-sleep.sh Tainted: P S W OE 6.10.5-100.fc39.x86_64 #1
Hardware name: /DX79SI, BIOS SIX7910J.86A.0650.2014.0307.0138 03/07/2014
RIP: 0010:follow_pte+0x20e/0x220
Code: e8 e7 f3 ff ff 48 8b 15 20 98 83 01 48 81 e2 00 00 00 c0 eb 87 49 8b 3c 24 e8 1e fe d7 00 e8 09 91 de ff bd ea ff ff ff eb af <0f> 0b e9 1f fe ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90
RSP: 0018:ffffa76c53cd3b20 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 00007f409000f000 RCX: ffffa76c53cd3b68
RDX: ffffa76c53cd3b60 RSI: 00007f409000f000 RDI: ffff8acda2ee84d0
RBP: ffffa76c53cd3ba8 R08: ffffa76c53cd3d00 R09: 0000000000000000
R10: ffff8aca41415460 R11: 0000000000000000 R12: ffffa76c53cd3b68
R13: ffffa76c53cd3b60 R14: ffff8acd835e9b80 R15: 0000000000000000
FS: 00007f055923e740(0000) GS:ffff8ad14fc00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055a3a8b233c8 CR3: 000000077f39e001 CR4: 00000000000606f0
Call Trace:
<TASK>
? __warn+0x80/0x120
? follow_pte+0x20e/0x220
? report_bug+0x164/0x190
? handle_bug+0x3c/0x80
? exc_invalid_op+0x17/0x70
? asm_exc_invalid_op+0x1a/0x20
? follow_pte+0x20e/0x220
follow_phys+0x4b/0x110
untrack_pfn+0x57/0x120
unmap_single_vma+0xa6/0xe0
zap_page_range_single+0x122/0x1d0
unmap_mapping_range+0x111/0x140
nv_revoke_gpu_mappings_locked+0x47/0x70 [nvidia]
nv_set_system_power_state+0x1cd/0x470 [nvidia]
nv_procfs_write_suspend+0x10c/0x1b0 [nvidia]
proc_reg_write+0x5d/0xa0
vfs_write+0xf8/0x460
ksys_write+0x6f/0xf0
do_syscall_64+0x82/0x160
? do_user_addr_fault+0x33a/0x6c0
? exc_page_fault+0x7e/0x180
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f0559349ee4
Code: c7 00 16 00 00 00 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 80 3d 85 74 0d 00 00 74 13 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 54 c3 0f 1f 00 55 48 89 e5 48 83 ec 20 48 89
RSP: 002b:00007ffc7983d148 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f0559349ee4
RDX: 0000000000000008 RSI: 000055a3a8b22fc0 RDI: 0000000000000001
RBP: 00007ffc7983d170 R08: 0000000000000410 R09: 0000000000000001
R10: 0000000000000004 R11: 0000000000000202 R12: 0000000000000008
R13: 000055a3a8b22fc0 R14: 00007f055941a5c0 R15: 00007f0559417f20
</TASK>
Complete report #946584
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
|
vmlinux |
|
0x23
|
|
2
|
|
vmlinux |
|
0x23
|
|
3
|
|
vmlinux |
|
0x23
|
|
4
|
|
vmlinux |
|
0x23
|
|
5
|
|
bluetooth |
|
0x105
|
|
6
|
|
bluetooth |
|
0x105
|
|
7
|
hci_dev_open_sync
|
bluetooth |
|
0x105
|
|
8
|
hci_dev_open_sync
|
bluetooth |
|
0x105
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
__die
|
vmlinux |
|
0x23
|
|
17
|
__die
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
__die
|
vmlinux |
|
0x23
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
__die
|
vmlinux |
|
0x23
|
|
22
|
|
vmlinux |
|
0x23
|
|
23
|
__die
|
vmlinux |
|
0x23
|
BUG: unable to handle page fault for address: 0000000000027c53
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 6 PID: 20097 Comm: kworker/6:2 Not tainted 6.7.11-200.fc39.x86_64 #1
Hardware name: LENOVO 21JR000AIX/21JR000AIX, BIOS R2CET33W (1.15 ) 12/15/2023
Workqueue: events l2cap_info_timeout [bluetooth]
RIP: 0010:hci_send_acl+0x5c/0x2e0 [bluetooth]
Code: 1f 44 00 00 48 8b 44 24 18 48 89 44 24 08 48 8b 44 24 08 44 8b 6d 70 c6 45 28 02 44 2b 6d 74 c7 45 74 00 00 00 00 44 89 6d 70 <0f> b6 50 53 84 d2 0f 84 f9 01 00 00 80 fa 01 0f 85 6c 01 00 00 41
RSP: 0018:ffffb2ba4e847d00 EFLAGS: 00010206
RAX: 0000000000027c00 RBX: ffff8f6686704c00 RCX: ffff8f65cc12a000
RDX: 0000000000000000 RSI: ffff8f66ad917900 RDI: ffff8f65eee77800
RBP: ffff8f66ad917900 R08: ffffb2ba4e847c50 R09: ffff8f66730c7640
R10: 0000000000000007 R11: 0000000000000100 R12: ffff8f65eee77890
R13: 000000000000000c R14: 0000000000000000 R15: ffff8f65eee77800
FS: 0000000000000000(0000) GS:ffff8f689ef80000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000027c53 CR3: 0000000316422000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
<TASK>
? __die+0x23/0x70
? page_fault_oops+0x171/0x4e0
? exc_page_fault+0x7f/0x180
? asm_exc_page_fault+0x26/0x30
? hci_send_acl+0x5c/0x2e0 [bluetooth]
? l2cap_send_cmd+0x247/0x250 [bluetooth]
l2cap_send_conn_req+0x99/0xc0 [bluetooth]
l2cap_conn_start+0x262/0x350 [bluetooth]
? srso_alias_return_thunk+0x5/0xfbef5
? finish_task_switch.isra.0+0x94/0x2f0
? srso_alias_return_thunk+0x5/0xfbef5
? __schedule+0x3f5/0x1420
? lock_timer_base+0x61/0x80
? srso_alias_return_thunk+0x5/0xfbef5
? add_timer_on+0xe0/0x150
process_one_work+0x17f/0x350
worker_thread+0x27b/0x3a0
? __pfx_worker_thread+0x10/0x10
kthread+0xe8/0x120
? __pfx_kthread+0x10/0x10
ret_from_fork+0x34/0x50
? __pfx_kthread+0x10/0x10
ret_from_fork_asm+0x1b/0x30
</TASK>
Modules linked in: uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep sunrpc binfmt_misc vfat fat snd_acp_legacy_mach snd_acp_mach snd_soc_nau8821 snd_acp3x_pdm_dma snd_soc_dmic snd_acp3x_rn snd_sof_amd_acp63 snd_sof_amd_vangogh snd_sof_amd_rembrandt snd_sof_amd_renoir snd_sof_amd_acp snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_ctl_led snd_sof_utils snd_hda_codec_conexant snd_hda_codec_generic snd_hda_codec_hdmi snd_soc_core mt7921e snd_hda_intel mt7921_common snd_intel_dspcfg intel_rapl_msr snd_intel_sdw_acpi mt792x_lib intel_rapl_common snd_compress snd_hda_codec mt76_connac_lib edac_mce_amd uvcvideo ac97_bus btusb snd_pcm_dmaengine mt76 snd_hda_core uvc btrtl snd_pci_ps videobuf2_vmalloc btintel snd_rpl_pci_acp6x kvm_amd snd_hwdep snd_acp_pci btbcm
videobuf2_memops mac80211 snd_acp_legacy_common snd_seq btmtk videobuf2_v4l2 kvm snd_seq_device videobuf2_common libarc4 snd_pci_acp6x bluetooth irqbypass snd_pci_acp5x videodev snd_pcm thinkpad_acpi cfg80211 mc ledtrig_audio rapl snd_rn_pci_acp3x snd_timer platform_profile think_lmi snd_acp_config snd_soc_acpi firmware_attributes_class snd wmi_bmof rfkill pcspkr snd_pci_acp3x soundcore i2c_piix4 k10temp amd_pmc joydev loop zram amdgpu amdxcp i2c_algo_bit drm_ttm_helper ttm crct10dif_pclmul drm_exec crc32_pclmul crc32c_intel polyval_clmulni gpu_sched polyval_generic nvme drm_suballoc_helper drm_buddy nvme_core drm_display_helper ghash_clmulni_intel r8169 sha512_ssse3 video hid_multitouch sha256_ssse3 ucsi_acpi typec_ucsi sha1_ssse3 sp5100_tco ccp cec realtek typec nvme_auth wmi i2c_hid_acpi i2c_hid serio_raw ip6_tables ip_tables fuse
CR2: 0000000000027c53
Complete report #1065145
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
__die
|
vmlinux |
|
0x23
|
|
2
|
__die
|
vmlinux |
|
0x23
|
|
3
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
4
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
5
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
|
vmlinux |
|
0x23
|
|
22
|
|
vmlinux |
|
0x23
|
|
23
|
|
vmlinux |
|
0x23
|
|
24
|
|
vmlinux |
|
0x23
|
|
25
|
|
vmlinux |
|
0x23
|
|
26
|
|
vmlinux |
|
0x23
|
|
27
|
|
vmlinux |
|
0x23
|
|
28
|
|
vmlinux |
|
0x23
|
|
29
|
__die
|
vmlinux |
|
0x23
|
traps: ThreadPoolForeg[27210] trap invalid opcode ip:55ab0a46457a sp:7ff8e91fea30 error:0 in outlook-for-linux[55ab06969000+7e33000]
traps: ThreadPoolForeg[4522] trap invalid opcode ip:55cc1f4c62ac sp:7f003bbfe920 error:0 in teams-for-linux[55cc1b53a000+8972000]
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in /tmp/vbox.0/SUPDrvGip.c:2204:20
index 1 is out of range for type 'SUPGIPCPU [1]'
CPU: 3 PID: 39556 Comm: rmmod Tainted: G OE 6.8.8-100.fc38.x86_64 #1
Hardware name: HP HP Laptop HP 250 G8/85F3, BIOS F.54 05/11/2022
Call Trace:
<TASK>
dump_stack_lvl+0x64/0x80
__ubsan_handle_out_of_bounds+0x95/0xd0
supdrvGipDestroy+0x288/0x290 [vboxdrv]
supdrvDeleteDevExt+0xe5/0x130 [vboxdrv]
VBoxDrvLinuxUnload+0xcf/0x150 [vboxdrv]
__do_sys_delete_module.isra.0+0x198/0x2f0
do_syscall_64+0x83/0x170
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x90/0x170
? do_syscall_64+0x90/0x170
? touch_atime+0x1e/0x120
? iterate_dir+0x116/0x1f0
? current_time+0x40/0xe0
? atime_needs_update+0xa0/0x120
? __mod_memcg_lruvec_state+0xc5/0x170
? mod_memcg_lruvec_state+0x15/0x30
? mod_objcg_state+0x19d/0x2c0
? __memcg_slab_free_hook+0x112/0x160
? __memcg_slab_free_hook+0x112/0x160
? __memcg_slab_free_hook+0x112/0x160
? __x64_sys_close+0x3d/0x80
? kmem_cache_free+0x3b7/0x3e0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x90/0x170
? do_user_addr_fault+0x304/0x690
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
entry_SYSCALL_64_after_hwframe+0x78/0x80
RIP: 0033:0x7f1cfff1192b
Code: 73 01 c3 48 8b 0d dd 04 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ad 04 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007ffffdbc21f8 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
RAX: ffffffffffffffda RBX: 000056163d6f46f0 RCX: 00007f1cfff1192b
RDX: 0000000000000000 RSI: 0000000000000800 RDI: 000056163d6f4758
RBP: 00007ffffdbc2220 R08: 1999999999999999 R09: 0000000000000000
R10: 00007f1cfff82ac0 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffffdbc2480 R14: 000056163d6f46f0 R15: 0000000000000000
</TASK>
Complete report #1031671
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
__die
|
vmlinux |
|
0x23
|
|
2
|
__die
|
vmlinux |
|
0x23
|
|
3
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
4
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
5
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
|
vmlinux |
|
0x23
|
|
22
|
|
vmlinux |
|
0x23
|
|
23
|
__die
|
vmlinux |
|
0x23
|
traps: ThreadPoolForeg[4150] trap invalid opcode ip:55c85803dc2a sp:7f5f805fe750 error:0 in teams-for-linux[55c8543a0000+83b3000]
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in /tmp/vbox.0/SUPDrvGip.c:2204:20
index 1 is out of range for type 'SUPGIPCPU [1]'
CPU: 0 PID: 41198 Comm: rmmod Tainted: G OE 6.8.8-100.fc38.x86_64 #1
Hardware name: HP HP Laptop HP 250 G8/85F3, BIOS F.54 05/11/2022
Call Trace:
<TASK>
dump_stack_lvl+0x64/0x80
__ubsan_handle_out_of_bounds+0x95/0xd0
supdrvGipDestroy+0x288/0x290 [vboxdrv]
supdrvDeleteDevExt+0xe5/0x130 [vboxdrv]
VBoxDrvLinuxUnload+0xcf/0x150 [vboxdrv]
__do_sys_delete_module.isra.0+0x198/0x2f0
do_syscall_64+0x83/0x170
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x90/0x170
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x90/0x170
? atime_needs_update+0xa0/0x120
? touch_atime+0x1e/0x120
? iterate_dir+0x116/0x1f0
? __x64_sys_getdents64+0xfc/0x130
? __pfx_filldir64+0x10/0x10
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x90/0x170
? do_user_addr_fault+0x304/0x690
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
entry_SYSCALL_64_after_hwframe+0x78/0x80
RIP: 0033:0x7fccc411192b
Code: 73 01 c3 48 8b 0d dd 04 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ad 04 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007ffd2ab479d8 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
RAX: ffffffffffffffda RBX: 0000559c4132e6f0 RCX: 00007fccc411192b
RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000559c4132e758
RBP: 00007ffd2ab47a00 R08: 1999999999999999 R09: 0000000000000000
R10: 00007fccc4182ac0 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffd2ab47c60 R14: 0000559c4132e6f0 R15: 0000000000000000
</TASK>
Complete report #1030929
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
__die
|
vmlinux |
|
0x23
|
|
2
|
__die
|
vmlinux |
|
0x23
|
|
3
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
4
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
5
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
|
vmlinux |
|
0x23
|
|
22
|
|
vmlinux |
|
0x23
|
|
23
|
|
vmlinux |
|
0x23
|
|
24
|
|
vmlinux |
|
0x23
|
|
25
|
|
vmlinux |
|
0x23
|
|
26
|
|
vmlinux |
|
0x23
|
|
27
|
|
vmlinux |
|
0x23
|
|
28
|
|
vmlinux |
|
0x23
|
|
29
|
|
vmlinux |
|
0x23
|
|
30
|
|
vmlinux |
|
0x23
|
|
31
|
|
vmlinux |
|
0x23
|
|
32
|
__die
|
vmlinux |
|
0x23
|
traps: nautilus[6559] general protection fault ip:7fc53345d4fb sp:7ffd18b747f0 error:0 in libglib-2.0.so.0.7600.6[7fc533423000+a0000]
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in /tmp/akmodsbuild.RJ5P4qty/BUILD/VirtualBox-kmod-7.0.14/_kmod_build_6.8.8-100.fc38.x86_64/vboxdrv/SUPDrvGip.c:2204:20
index 1 is out of range for type 'SUPGIPCPU [1]'
CPU: 10 PID: 9647 Comm: modprobe Tainted: P OE 6.8.8-100.fc38.x86_64 #1
Hardware name: LENOVO 82K2/LNVNB161216, BIOS H3CN32WW(V2.02) 02/23/2022
Call Trace:
<TASK>
dump_stack_lvl+0x64/0x80
__ubsan_handle_out_of_bounds+0x95/0xd0
supdrvGipDestroy+0x288/0x290 [vboxdrv]
supdrvDeleteDevExt+0xe5/0x120 [vboxdrv]
VBoxDrvLinuxUnload+0xcf/0x150 [vboxdrv]
__do_sys_delete_module.isra.0+0x19b/0x2f0
do_syscall_64+0x83/0x170
? srso_alias_return_thunk+0x5/0xfbef5
? mod_memcg_lruvec_state+0x15/0x30
? srso_alias_return_thunk+0x5/0xfbef5
? mod_objcg_state+0x19d/0x2c0
? srso_alias_return_thunk+0x5/0xfbef5
? __memcg_slab_free_hook+0x112/0x160
? srso_alias_return_thunk+0x5/0xfbef5
? srso_alias_return_thunk+0x5/0xfbef5
? __memcg_slab_free_hook+0x112/0x160
? srso_alias_return_thunk+0x5/0xfbef5
? srso_alias_return_thunk+0x5/0xfbef5
? kmem_cache_free+0x3b7/0x3e0
? srso_alias_return_thunk+0x5/0xfbef5
? syscall_exit_to_user_mode+0x83/0x230
? srso_alias_return_thunk+0x5/0xfbef5
? do_syscall_64+0x90/0x170
? srso_alias_return_thunk+0x5/0xfbef5
? ksys_read+0x6f/0xf0
? srso_alias_return_thunk+0x5/0xfbef5
? syscall_exit_to_user_mode+0x83/0x230
? srso_alias_return_thunk+0x5/0xfbef5
? do_syscall_64+0x90/0x170
? srso_alias_return_thunk+0x5/0xfbef5
? srso_alias_return_thunk+0x5/0xfbef5
entry_SYSCALL_64_after_hwframe+0x78/0x80
RIP: 0033:0x7f2241d3592b
Code: 73 01 c3 48 8b 0d dd 04 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ad 04 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007ffdbfd5a5b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
RAX: ffffffffffffffda RBX: 000056267a31ee60 RCX: 00007f2241d3592b
RDX: 0000000000000000 RSI: 0000000000000800 RDI: 000056267a31eec8
RBP: 00007ffdbfd5a5e0 R08: 1999999999999999 R09: 0000000000000000
R10: 00007f2241da6ac0 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffdbfd5a610 R14: 0000000000000000 R15: 0000000000000000
</TASK>
Complete report #1007907
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
__die
|
vmlinux |
|
0x23
|
|
2
|
__die
|
vmlinux |
|
0x23
|
|
3
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
4
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
5
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
|
vmlinux |
|
0x23
|
|
22
|
|
vmlinux |
|
0x23
|
|
23
|
|
vmlinux |
|
0x23
|
|
24
|
|
vmlinux |
|
0x23
|
|
25
|
__die
|
vmlinux |
|
0x23
|
traps: ThreadPoolForeg[4082] trap invalid opcode ip:55eec480128a sp:7f31fedfe7d0 error:0 in teams-for-linux[55eec0b69000+83aa000]
traps: ThreadPoolForeg[4858] trap invalid opcode ip:55e8cbed957a sp:7fb0581feab0 error:0 in outlook-for-linux[55e8c83de000+7e33000]
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in /tmp/vbox.0/SUPDrvGip.c:2204:20
index 1 is out of range for type 'SUPGIPCPU [1]'
CPU: 2 PID: 20152 Comm: rmmod Tainted: G OE 6.8.8-100.fc38.x86_64 #1
Hardware name: HP HP Laptop HP 250 G8/85F3, BIOS F.54 05/11/2022
Call Trace:
<TASK>
dump_stack_lvl+0x64/0x80
__ubsan_handle_out_of_bounds+0x95/0xd0
supdrvGipDestroy+0x288/0x290 [vboxdrv]
supdrvDeleteDevExt+0xe5/0x130 [vboxdrv]
VBoxDrvLinuxUnload+0xcf/0x150 [vboxdrv]
__do_sys_delete_module.isra.0+0x198/0x2f0
do_syscall_64+0x83/0x170
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x90/0x170
? seq_read_iter+0x375/0x480
? seq_read_iter+0x208/0x480
? mutex_lock+0x12/0x30
? kernfs_seq_start+0x29/0xa0
? kernfs_seq_stop+0x34/0x40
? seq_read_iter+0x208/0x480
? security_file_permission+0x33/0x50
? vfs_read+0x24c/0x380
? ksys_read+0x6f/0xf0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x90/0x170
? do_user_addr_fault+0x304/0x690
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
entry_SYSCALL_64_after_hwframe+0x78/0x80
RIP: 0033:0x7f343d53592b
Code: 73 01 c3 48 8b 0d dd 04 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ad 04 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007ffdf8668528 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
RAX: ffffffffffffffda RBX: 000055702c0d96f0 RCX: 00007f343d53592b
RDX: 0000000000000000 RSI: 0000000000000800 RDI: 000055702c0d9758
RBP: 00007ffdf8668550 R08: 1999999999999999 R09: 0000000000000000
R10: 00007f343d5a6ac0 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffdf86687b0 R14: 000055702c0d96f0 R15: 0000000000000000
</TASK>
Complete report #994305
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
__die
|
vmlinux |
|
0x23
|
|
2
|
__die
|
vmlinux |
|
0x23
|
|
3
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
4
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
5
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
|
vmlinux |
|
0x23
|
|
22
|
__die
|
vmlinux |
|
0x23
|
traps: ThreadPoolForeg[11328] trap invalid opcode ip:555a4d21157a sp:7fd1bb7feab0 error:0 in outlook-for-linux[555a49716000+7e33000]
traps: ThreadPoolSingl[5451] trap invalid opcode ip:555f01f760fa sp:7fafea9fe8b0 error:0 in teams-for-linux[555efe352000+8168000]
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in /tmp/vbox.0/SUPDrvGip.c:2204:20
index 1 is out of range for type 'SUPGIPCPU [1]'
CPU: 1 PID: 23643 Comm: rmmod Tainted: G OE 6.8.8-100.fc38.x86_64 #1
Hardware name: HP HP Laptop HP 250 G8/85F3, BIOS F.54 05/11/2022
Call Trace:
<TASK>
dump_stack_lvl+0x64/0x80
__ubsan_handle_out_of_bounds+0x95/0xd0
supdrvGipDestroy+0x288/0x290 [vboxdrv]
supdrvDeleteDevExt+0xe5/0x130 [vboxdrv]
VBoxDrvLinuxUnload+0xcf/0x150 [vboxdrv]
__do_sys_delete_module.isra.0+0x198/0x2f0
do_syscall_64+0x83/0x170
? ksys_read+0x6f/0xf0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x90/0x170
? seq_read_iter+0x208/0x480
? vfs_read+0x24c/0x380
? ksys_read+0x6f/0xf0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x90/0x170
? count_memcg_events.constprop.0+0x1a/0x30
? handle_mm_fault+0xa2/0x360
? do_user_addr_fault+0x304/0x690
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
entry_SYSCALL_64_after_hwframe+0x78/0x80
RIP: 0033:0x7f36fd53592b
Code: 73 01 c3 48 8b 0d dd 04 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ad 04 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007ffd484eebb8 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
RAX: ffffffffffffffda RBX: 0000559931a7c6f0 RCX: 00007f36fd53592b
RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000559931a7c758
RBP: 00007ffd484eebe0 R08: 1999999999999999 R09: 0000000000000000
R10: 00007f36fd5a6ac0 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffd484eee40 R14: 0000559931a7c6f0 R15: 0000000000000000
</TASK>
Complete report #988411
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
__die
|
vmlinux |
|
0x23
|
|
2
|
__die
|
vmlinux |
|
0x23
|
|
3
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
4
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
5
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
|
vmlinux |
|
0x23
|
|
22
|
|
vmlinux |
|
0x23
|
|
23
|
|
vmlinux |
|
0x23
|
|
24
|
|
vmlinux |
|
0x23
|
|
25
|
|
vmlinux |
|
0x23
|
|
26
|
|
vmlinux |
|
0x23
|
|
27
|
__die
|
vmlinux |
|
0x23
|
traps: ThreadPoolSingl[30371] trap invalid opcode ip:5560282e857a sp:7f52d7bfeab0 error:0 in outlook-for-linux[5560247ed000+7e33000]
traps: ThreadPoolForeg[30370] trap invalid opcode ip:5560282e857a sp:7f52d85feab0 error:0 in outlook-for-linux[5560247ed000+7e33000]
traps: ThreadPoolForeg[4060] trap invalid opcode ip:5642d58490fa sp:7f05449fe880 error:0 in teams-for-linux[5642d1c25000+8168000]
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in /tmp/vbox.0/SUPDrvGip.c:2204:20
index 1 is out of range for type 'SUPGIPCPU [1]'
CPU: 2 PID: 53570 Comm: rmmod Tainted: G OE 6.8.8-100.fc38.x86_64 #1
Hardware name: HP HP Laptop HP 250 G8/85F3, BIOS F.54 05/11/2022
Call Trace:
<TASK>
dump_stack_lvl+0x64/0x80
__ubsan_handle_out_of_bounds+0x95/0xd0
supdrvGipDestroy+0x288/0x290 [vboxdrv]
supdrvDeleteDevExt+0xe5/0x130 [vboxdrv]
VBoxDrvLinuxUnload+0xcf/0x150 [vboxdrv]
__do_sys_delete_module.isra.0+0x198/0x2f0
do_syscall_64+0x83/0x170
? vfs_read+0x24c/0x380
? __mod_memcg_lruvec_state+0xc5/0x170
? mod_memcg_lruvec_state+0x15/0x30
? mod_objcg_state+0x19d/0x2c0
? __memcg_slab_free_hook+0x112/0x160
? __memcg_slab_free_hook+0x112/0x160
? __x64_sys_close+0x3d/0x80
? kmem_cache_free+0x3b7/0x3e0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x90/0x170
? iterate_dir+0x116/0x1f0
? __x64_sys_getdents64+0xfc/0x130
? __pfx_filldir64+0x10/0x10
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x90/0x170
? do_user_addr_fault+0x304/0x690
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
entry_SYSCALL_64_after_hwframe+0x78/0x80
RIP: 0033:0x7f4f7213592b
Code: 73 01 c3 48 8b 0d dd 04 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ad 04 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007fff545eb8a8 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
RAX: ffffffffffffffda RBX: 000055aa58ef96f0 RCX: 00007f4f7213592b
RDX: 0000000000000000 RSI: 0000000000000800 RDI: 000055aa58ef9758
RBP: 00007fff545eb8d0 R08: 1999999999999999 R09: 0000000000000000
R10: 00007f4f721a6ac0 R11: 0000000000000206 R12: 0000000000000000
R13: 00007fff545ebb30 R14: 000055aa58ef96f0 R15: 0000000000000000
</TASK>
Complete report #983228
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
__die
|
vmlinux |
|
0x23
|
|
2
|
__die
|
vmlinux |
|
0x23
|
|
3
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
4
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
5
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
|
vmlinux |
|
0x23
|
|
22
|
|
vmlinux |
|
0x23
|
|
23
|
|
vmlinux |
|
0x23
|
|
24
|
|
vmlinux |
|
0x23
|
|
25
|
|
vmlinux |
|
0x23
|
|
26
|
|
vmlinux |
|
0x23
|
|
27
|
|
vmlinux |
|
0x23
|
|
28
|
|
vmlinux |
|
0x23
|
|
29
|
|
vmlinux |
|
0x23
|
|
30
|
__die
|
vmlinux |
|
0x23
|
traps: ThreadPoolForeg[6078] trap invalid opcode ip:561378eb40fa sp:7fcfd8dfe880 error:0 in teams-for-linux[561375290000+8168000]
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in /tmp/vbox.0/SUPDrvGip.c:2191:20
index 1 is out of range for type 'SUPGIPCPU [1]'
CPU: 3 PID: 189252 Comm: rmmod Tainted: G OE 6.8.8-100.fc38.x86_64 #1
Hardware name: LENOVO 81V7/LNVNB161216, BIOS BUCN28WW 01/12/2021
Call Trace:
<TASK>
dump_stack_lvl+0x64/0x80
__ubsan_handle_out_of_bounds+0x95/0xd0
supdrvGipDestroy+0x288/0x290 [vboxdrv]
supdrvDeleteDevExt+0xe5/0x130 [vboxdrv]
VBoxDrvLinuxUnload+0x44/0xc1 [vboxdrv]
__do_sys_delete_module.isra.0+0x19b/0x2f0
do_syscall_64+0x83/0x170
? srso_return_thunk+0x5/0x5f
? mutex_lock+0x12/0x30
? srso_return_thunk+0x5/0x5f
? kernfs_seq_start+0x29/0xa0
? srso_return_thunk+0x5/0x5f
? kernfs_seq_stop+0x34/0x40
? srso_return_thunk+0x5/0x5f
? seq_read_iter+0x208/0x480
? srso_return_thunk+0x5/0x5f
? security_file_permission+0x36/0x50
? srso_return_thunk+0x5/0x5f
? vfs_read+0x24f/0x380
? srso_return_thunk+0x5/0x5f
? ksys_read+0x6f/0xf0
? srso_return_thunk+0x5/0x5f
? syscall_exit_to_user_mode+0x83/0x230
? srso_return_thunk+0x5/0x5f
? do_syscall_64+0x90/0x170
? srso_return_thunk+0x5/0x5f
? do_user_addr_fault+0x304/0x690
? srso_return_thunk+0x5/0x5f
? srso_return_thunk+0x5/0x5f
entry_SYSCALL_64_after_hwframe+0x78/0x80
RIP: 0033:0x7f2b9f13592b
Code: 73 01 c3 48 8b 0d dd 04 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ad 04 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007ffdf1beba78 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
RAX: ffffffffffffffda RBX: 00005564ba4136f0 RCX: 00007f2b9f13592b
RDX: 0000000000000000 RSI: 0000000000000800 RDI: 00005564ba413758
RBP: 00007ffdf1bebaa0 R08: 1999999999999999 R09: 0000000000000000
R10: 00007f2b9f1a6ac0 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffdf1bebd00 R14: 00005564ba4136f0 R15: 0000000000000000
</TASK>
Complete report #977688
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
__die
|
vmlinux |
|
0x23
|
|
2
|
__die
|
vmlinux |
|
0x23
|
|
3
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
4
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
5
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
|
vmlinux |
|
0x23
|
|
22
|
|
vmlinux |
|
0x23
|
|
23
|
|
vmlinux |
|
0x23
|
|
24
|
|
vmlinux |
|
0x23
|
|
25
|
|
vmlinux |
|
0x23
|
|
26
|
|
vmlinux |
|
0x23
|
|
27
|
__die
|
vmlinux |
|
0x23
|
traps: ThreadPoolSingl[20199] trap invalid opcode ip:558b78f3d0fa sp:7f872dffe8b0 error:0 in teams-for-linux[558b75319000+8168000]
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in /tmp/vbox.0/SUPDrvGip.c:2204:20
index 1 is out of range for type 'SUPGIPCPU [1]'
CPU: 5 PID: 678317 Comm: rmmod Tainted: P OE 6.8.8-100.fc38.x86_64 #1
Hardware name: HP Victus by HP Laptop 16-d0xxx/88F9, BIOS F.23 04/26/2023
Call Trace:
<TASK>
dump_stack_lvl+0x64/0x80
__ubsan_handle_out_of_bounds+0x95/0xd0
supdrvGipDestroy+0x288/0x290 [vboxdrv]
supdrvDeleteDevExt+0xe5/0x130 [vboxdrv]
VBoxDrvLinuxUnload+0xcf/0x150 [vboxdrv]
__do_sys_delete_module.isra.0+0x198/0x2f0
do_syscall_64+0x83/0x170
? __memcg_slab_free_hook+0x112/0x160
? __memcg_slab_free_hook+0x112/0x160
? __x64_sys_close+0x3d/0x80
? kmem_cache_free+0x3b7/0x3e0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x90/0x170
? ksys_read+0x6f/0xf0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x90/0x170
? ksys_read+0x6f/0xf0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x90/0x170
? __count_memcg_events+0x69/0x100
? count_memcg_events.constprop.0+0x1a/0x30
? handle_mm_fault+0xa2/0x360
? do_user_addr_fault+0x304/0x690
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
entry_SYSCALL_64_after_hwframe+0x78/0x80
RIP: 0033:0x7f0eed53592b
Code: 73 01 c3 48 8b 0d dd 04 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ad 04 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007ffeac4cb738 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
RAX: ffffffffffffffda RBX: 000055598e647750 RCX: 00007f0eed53592b
RDX: 0000000000000000 RSI: 0000000000000800 RDI: 000055598e6477b8
RBP: 00007ffeac4cb760 R08: 1999999999999999 R09: 0000000000000000
R10: 00007f0eed5a6ac0 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffeac4cb9c0 R14: 000055598e647750 R15: 0000000000000000
</TASK>
Complete report #976975
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
__die
|
vmlinux |
|
0x23
|
|
2
|
__die
|
vmlinux |
|
0x23
|
|
3
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
4
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
5
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
|
vmlinux |
|
0x23
|
|
22
|
|
vmlinux |
|
0x23
|
|
23
|
|
vmlinux |
|
0x23
|
|
24
|
|
vmlinux |
|
0x23
|
|
25
|
|
vmlinux |
|
0x23
|
|
26
|
|
vmlinux |
|
0x23
|
|
27
|
__die
|
vmlinux |
|
0x23
|
traps: ThreadPoolSingl[5618] trap invalid opcode ip:55ec2dd6a0fa sp:7f294bbfe8b0 error:0 in teams-for-linux[55ec2a146000+8168000]
traps: ThreadPoolForeg[5616] trap invalid opcode ip:55ec2dd6a0fa sp:7f294cffe880 error:0 in teams-for-linux[55ec2a146000+8168000]
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in /tmp/vbox.0/SUPDrvGip.c:2191:20
index 1 is out of range for type 'SUPGIPCPU [1]'
CPU: 6 PID: 38843 Comm: rmmod Tainted: G OE 6.8.8-100.fc38.x86_64 #1
Hardware name: LENOVO 81V7/LNVNB161216, BIOS BUCN28WW 01/12/2021
Call Trace:
<TASK>
dump_stack_lvl+0x64/0x80
__ubsan_handle_out_of_bounds+0x95/0xd0
supdrvGipDestroy+0x288/0x290 [vboxdrv]
supdrvDeleteDevExt+0xe5/0x130 [vboxdrv]
VBoxDrvLinuxUnload+0x44/0xc1 [vboxdrv]
__do_sys_delete_module.isra.0+0x19b/0x2f0
do_syscall_64+0x83/0x170
? srso_return_thunk+0x5/0x5f
? __memcg_slab_free_hook+0x112/0x160
? srso_return_thunk+0x5/0x5f
? srso_return_thunk+0x5/0x5f
? kmem_cache_free+0x3b7/0x3e0
? srso_return_thunk+0x5/0x5f
? syscall_exit_to_user_mode+0x83/0x230
? srso_return_thunk+0x5/0x5f
? do_syscall_64+0x90/0x170
? srso_return_thunk+0x5/0x5f
? __count_memcg_events+0x69/0x100
? srso_return_thunk+0x5/0x5f
? count_memcg_events.constprop.0+0x1a/0x30
? srso_return_thunk+0x5/0x5f
? handle_mm_fault+0xa2/0x360
? srso_return_thunk+0x5/0x5f
? do_user_addr_fault+0x304/0x690
? srso_return_thunk+0x5/0x5f
? srso_return_thunk+0x5/0x5f
entry_SYSCALL_64_after_hwframe+0x78/0x80
RIP: 0033:0x7f624573592b
Code: 73 01 c3 48 8b 0d dd 04 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ad 04 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007ffe621ce048 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
RAX: ffffffffffffffda RBX: 00005653f8f6f6f0 RCX: 00007f624573592b
RDX: 0000000000000000 RSI: 0000000000000800 RDI: 00005653f8f6f758
RBP: 00007ffe621ce070 R08: 1999999999999999 R09: 0000000000000000
R10: 00007f62457a6ac0 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffe621ce2d0 R14: 00005653f8f6f6f0 R15: 0000000000000000
</TASK>
Complete report #975527
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
__die
|
vmlinux |
|
0x23
|
|
2
|
__die
|
vmlinux |
|
0x23
|
|
3
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
4
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
5
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
__die
|
vmlinux |
|
0x23
|
traps: nautilus[11978] general protection fault ip:7f89d5696dab sp:7ffcaf8b4a80 error:0 in libglib-2.0.so.0.8000.0[7f89d5652000+a3000]
vethdc17e0d: renamed from eth0
docker0: port 2(veth16a1fb8) entered disabled state
docker0: port 2(veth16a1fb8) entered disabled state
veth16a1fb8 (unregistering): left allmulticast mode
veth16a1fb8 (unregistering): left promiscuous mode
docker0: port 2(veth16a1fb8) entered disabled state
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in /tmp/vbox.0/SUPDrvGip.c:2204:20
index 1 is out of range for type 'SUPGIPCPU [1]'
CPU: 11 PID: 59198 Comm: rmmod Tainted: P W OE 6.8.8-300.fc40.x86_64 #1
Hardware name: Acer Nitro AN517-54/Kamiq_TLS, BIOS V1.19 10/28/2022
Call Trace:
<TASK>
dump_stack_lvl+0x6a/0x90
__ubsan_handle_out_of_bounds+0x95/0xd0
supdrvGipDestroy+0x288/0x290 [vboxdrv]
supdrvDeleteDevExt+0xe5/0x130 [vboxdrv]
VBoxDrvLinuxUnload+0xcf/0x150 [vboxdrv]
__do_sys_delete_module.isra.0+0x198/0x2f0
do_syscall_64+0x83/0x170
? __x64_sys_getdents64+0xfa/0x130
? __pfx_filldir64+0x10/0x10
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x8f/0x170
? __handle_mm_fault+0xca6/0xe90
? __count_memcg_events+0x69/0x100
? count_memcg_events.constprop.0+0x1a/0x30
? handle_mm_fault+0x1f2/0x350
? do_user_addr_fault+0x304/0x690
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
entry_SYSCALL_64_after_hwframe+0x78/0x80
RIP: 0033:0x7f3c0c72c3fb
Code: 73 01 c3 48 8b 0d 1d 9a 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ed 99 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007ffe692383d8 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
RAX: ffffffffffffffda RBX: 000055b42f8c1790 RCX: 00007f3c0c72c3fb
RDX: 0000000000000000 RSI: 0000000000000800 RDI: 000055b42f8c17f8
RBP: 00007ffe69238400 R08: 1999999999999999 R09: 0000000000000000
R10: 00007f3c0c7a5fe0 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffe69238650 R14: 00007ffe69238658 R15: 0000000000000000
</TASK>
Complete report #974188
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
__die
|
vmlinux |
|
0x23
|
|
2
|
__die
|
vmlinux |
|
0x23
|
|
3
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
4
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
5
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
__die
|
vmlinux |
|
0x23
|
traps: gvfsd-fuse[199078] general protection fault ip:7f0fffbde331 sp:7f0ff1dff0a8 error:0 in libgobject-2.0.so.0.7600.6[7f0fffbb1000+36000]
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in /tmp/vbox.0/SUPDrvGip.c:2204:20
index 1 is out of range for type 'SUPGIPCPU [1]'
CPU: 4 PID: 199131 Comm: rmmod Tainted: G OE 6.8.8-100.fc38.x86_64 #1
Hardware name: Dell Inc. Inspiron 15 3530/0NGYTK, BIOS 1.8.0 12/21/2023
Call Trace:
<TASK>
dump_stack_lvl+0x64/0x80
__ubsan_handle_out_of_bounds+0x95/0xd0
supdrvGipDestroy+0x288/0x290 [vboxdrv]
supdrvDeleteDevExt+0xe5/0x130 [vboxdrv]
VBoxDrvLinuxUnload+0xcf/0x150 [vboxdrv]
__do_sys_delete_module.isra.0+0x198/0x2f0
do_syscall_64+0x83/0x170
? seq_read_iter+0x208/0x480
? security_file_permission+0x33/0x50
? vfs_read+0x24c/0x380
? ksys_read+0x6f/0xf0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x90/0x170
? __handle_mm_fault+0xba3/0xe50
? __count_memcg_events+0x69/0x100
? count_memcg_events.constprop.0+0x1a/0x30
? handle_mm_fault+0xa2/0x360
? do_user_addr_fault+0x304/0x690
? exc_page_fault+0x7f/0x180
entry_SYSCALL_64_after_hwframe+0x78/0x80
RIP: 0033:0x7f18b1f3592b
Code: 73 01 c3 48 8b 0d dd 04 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ad 04 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007ffd12f7fe88 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
RAX: ffffffffffffffda RBX: 000055a86b96b6f0 RCX: 00007f18b1f3592b
RDX: 0000000000000000 RSI: 0000000000000800 RDI: 000055a86b96b758
RBP: 00007ffd12f7feb0 R08: 1999999999999999 R09: 0000000000000000
R10: 00007f18b1fa6ac0 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffd12f80110 R14: 000055a86b96b6f0 R15: 0000000000000000
</TASK>
Complete report #973884
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
__die
|
vmlinux |
|
0x23
|
|
2
|
__die
|
vmlinux |
|
0x23
|
|
3
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
4
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
5
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
|
vmlinux |
|
0x23
|
|
22
|
|
vmlinux |
|
0x23
|
|
23
|
|
vmlinux |
|
0x23
|
|
24
|
__die
|
vmlinux |
|
0x23
|
traps: nautilus[9432] general protection fault ip:7ff69fa5cdab sp:7ffcf61da2d0 error:0 in libglib-2.0.so.0.8000.0[7ff69fa18000+a3000]
/dev/vmmon[14687]: Module vmmon: unloaded
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in /tmp/vbox.0/SUPDrvGip.c:2204:20
index 1 is out of range for type 'SUPGIPCPU [1]'
CPU: 4 PID: 14736 Comm: rmmod Tainted: G OE 6.8.8-300.fc40.x86_64 #1
Hardware name: LENOVO 81YM/LNVNB161216, BIOS DTCN24WW(V1.10) 12/25/2020
Call Trace:
<TASK>
dump_stack_lvl+0x6a/0x90
__ubsan_handle_out_of_bounds+0x95/0xd0
supdrvGipDestroy+0x288/0x290 [vboxdrv]
supdrvDeleteDevExt+0xe5/0x130 [vboxdrv]
VBoxDrvLinuxUnload+0xcf/0x150 [vboxdrv]
__do_sys_delete_module.isra.0+0x19b/0x2f0
do_syscall_64+0x83/0x170
? ksys_read+0x6d/0xf0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x8f/0x170
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x8f/0x170
? touch_atime+0x1e/0x120
? iterate_dir+0x116/0x1f0
? __x64_sys_getdents64+0xfa/0x130
? __pfx_filldir64+0x10/0x10
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x8f/0x170
? __count_memcg_events+0x69/0x100
? count_memcg_events.constprop.0+0x1a/0x30
? handle_mm_fault+0x1f2/0x350
? do_user_addr_fault+0x304/0x690
? exc_page_fault+0x7f/0x180
entry_SYSCALL_64_after_hwframe+0x78/0x80
RIP: 0033:0x7f6cc512c3fb
Code: 73 01 c3 48 8b 0d 1d 9a 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ed 99 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007ffc718005e8 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
RAX: ffffffffffffffda RBX: 000055a862b19700 RCX: 00007f6cc512c3fb
RDX: 0000000000000000 RSI: 0000000000000800 RDI: 000055a862b19768
RBP: 00007ffc71800610 R08: 1999999999999999 R09: 0000000000000000
R10: 00007f6cc51a5fe0 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffc71800860 R14: 00007ffc71800868 R15: 0000000000000000
</TASK>
Complete report #972441
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
__die
|
vmlinux |
|
0x23
|
|
2
|
__die
|
vmlinux |
|
0x23
|
|
3
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
4
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
5
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
|
vmlinux |
|
0x23
|
|
22
|
|
vmlinux |
|
0x23
|
|
23
|
|
vmlinux |
|
0x23
|
|
24
|
|
vmlinux |
|
0x23
|
|
25
|
|
vmlinux |
|
0x23
|
|
26
|
__die
|
vmlinux |
|
0x23
|
traps: QNetworkAccessM[17223] general protection fault ip:7f7f1cb8b89e sp:7f7ef73ff238 error:0 in libc.so.6[7f7f1ca3b000+169000]
ACPI BIOS Error (bug): Could not resolve symbol [\_TZ.ETMD], AE_NOT_FOUND (20230628/psargs-330)
ACPI Error: Aborting method \_SB.IETM._OSC due to previous error (AE_NOT_FOUND) (20230628/psparse-529)
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in /tmp/vbox.0/SUPDrvGip.c:2191:20
index 1 is out of range for type 'SUPGIPCPU [1]'
CPU: 6 PID: 672460 Comm: rmmod Tainted: G W OE 6.8.8-300.fc40.x86_64 #1
Hardware name: LENOVO 82FG/LNVNB161216, BIOS FHCN59WW 08/26/2021
Call Trace:
<TASK>
dump_stack_lvl+0x6a/0x90
__ubsan_handle_out_of_bounds+0x95/0xd0
supdrvGipDestroy+0x288/0x290 [vboxdrv]
supdrvDeleteDevExt+0xe5/0x130 [vboxdrv]
VBoxDrvLinuxUnload+0x44/0xc1 [vboxdrv]
__do_sys_delete_module.isra.0+0x198/0x2f0
do_syscall_64+0x83/0x170
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x8f/0x170
? mutex_lock+0x12/0x30
? kernfs_seq_start+0x29/0xa0
? kernfs_seq_stop+0x34/0x40
? seq_read_iter+0x208/0x480
? security_file_permission+0x33/0x50
? vfs_read+0x24c/0x380
? ksys_read+0x6d/0xf0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x8f/0x170
? __count_memcg_events+0x69/0x100
? count_memcg_events.constprop.0+0x1a/0x30
? handle_mm_fault+0x1f2/0x350
? do_user_addr_fault+0x304/0x690
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
entry_SYSCALL_64_after_hwframe+0x78/0x80
RIP: 0033:0x7f4bb632c3fb
Code: 73 01 c3 48 8b 0d 1d 9a 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ed 99 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007ffcc74b8918 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
RAX: ffffffffffffffda RBX: 0000557ffd091700 RCX: 00007f4bb632c3fb
RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000557ffd091768
RBP: 00007ffcc74b8940 R08: 1999999999999999 R09: 0000000000000000
R10: 00007f4bb63a5fe0 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffcc74b8b90 R14: 00007ffcc74b8b98 R15: 0000000000000000
</TASK>
Complete report #972013
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
__die
|
vmlinux |
|
0x23
|
|
2
|
__die
|
vmlinux |
|
0x23
|
|
3
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
4
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
5
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
|
vmlinux |
|
0x23
|
|
22
|
|
vmlinux |
|
0x23
|
|
23
|
|
vmlinux |
|
0x23
|
|
24
|
|
vmlinux |
|
0x23
|
|
25
|
|
vmlinux |
|
0x23
|
|
26
|
|
vmlinux |
|
0x23
|
|
27
|
|
vmlinux |
|
0x23
|
|
28
|
__die
|
vmlinux |
|
0x23
|
traps: nautilus[26718] general protection fault ip:7fecc6e46dab sp:7ffe58d00730 error:0 in libglib-2.0.so.0.8000.0[7fecc6e02000+a3000]
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in /tmp/vbox.0/SUPDrvGip.c:2204:20
index 1 is out of range for type 'SUPGIPCPU [1]'
CPU: 3 PID: 27855 Comm: rmmod Tainted: G OE 6.8.8-300.fc40.x86_64 #1
Hardware name: Dell Inc. OptiPlex SFF 7010/0PJDGF, BIOS 1.13.1 03/11/2024
Call Trace:
<TASK>
dump_stack_lvl+0x6a/0x90
__ubsan_handle_out_of_bounds+0x95/0xd0
supdrvGipDestroy+0x288/0x290 [vboxdrv]
supdrvDeleteDevExt+0xe5/0x130 [vboxdrv]
VBoxDrvLinuxUnload+0xcf/0x150 [vboxdrv]
__do_sys_delete_module.isra.0+0x198/0x2f0
do_syscall_64+0x83/0x170
? ksys_read+0x6d/0xf0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x8f/0x170
? sprintf+0x60/0x80
? __mod_memcg_lruvec_state+0xc5/0x170
? mod_memcg_lruvec_state+0x15/0x30
? mod_objcg_state+0x18a/0x2b0
? __memcg_slab_free_hook+0x112/0x160
? __memcg_slab_free_hook+0x112/0x160
? mntput_no_expire+0x4a/0x260
? __x64_sys_close+0x3d/0x80
? kmem_cache_free+0x3af/0x3d0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x8f/0x170
? __handle_mm_fault+0xca6/0xe90
? __count_memcg_events+0x69/0x100
? count_memcg_events.constprop.0+0x1a/0x30
? handle_mm_fault+0x1f2/0x350
? do_user_addr_fault+0x304/0x690
? exc_page_fault+0x7f/0x180
entry_SYSCALL_64_after_hwframe+0x78/0x80
RIP: 0033:0x7fbfbc32c3fb
Code: 73 01 c3 48 8b 0d 1d 9a 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ed 99 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007ffd8a2486f8 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
RAX: ffffffffffffffda RBX: 0000564d4bba5700 RCX: 00007fbfbc32c3fb
RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000564d4bba5768
RBP: 00007ffd8a248720 R08: 1999999999999999 R09: 0000000000000000
R10: 00007fbfbc3a5fe0 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffd8a248970 R14: 00007ffd8a248978 R15: 0000000000000000
</TASK>
Complete report #971916
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
__die
|
vmlinux |
|
0x23
|
|
2
|
__die
|
vmlinux |
|
0x23
|
|
3
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
4
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
5
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
|
vmlinux |
|
0x23
|
|
22
|
|
vmlinux |
|
0x23
|
|
23
|
|
vmlinux |
|
0x23
|
|
24
|
|
vmlinux |
|
0x23
|
|
25
|
|
vmlinux |
|
0x23
|
|
26
|
__die
|
vmlinux |
|
0x23
|
traps: ThreadPoolSingl[6727] trap invalid opcode ip:555e9556c57a sp:7fd500dfeab0 error:0 in outlook-for-linux[555e91a71000+7e33000]
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in /tmp/vbox.0/SUPDrvGip.c:2204:20
index 1 is out of range for type 'SUPGIPCPU [1]'
CPU: 7 PID: 50831 Comm: rmmod Tainted: G OE 6.8.8-300.fc40.x86_64 #1
Hardware name: ASUSTeK COMPUTER INC. ZenBook UX482EAR_UX482EAR/UX482EAR, BIOS UX482EAR.208 10/21/2021
Call Trace:
<TASK>
dump_stack_lvl+0x6a/0x90
__ubsan_handle_out_of_bounds+0x95/0xd0
supdrvGipDestroy+0x288/0x290 [vboxdrv]
supdrvDeleteDevExt+0xe5/0x130 [vboxdrv]
VBoxDrvLinuxUnload+0xcf/0x150 [vboxdrv]
__do_sys_delete_module.isra.0+0x198/0x2f0
do_syscall_64+0x83/0x170
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x8f/0x170
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x8f/0x170
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x8f/0x170
? __lruvec_stat_mod_folio+0x68/0xa0
? set_ptes.isra.0+0x28/0x90
? do_anonymous_page+0x4c9/0x700
? __memcg_slab_free_hook+0x112/0x160
? mntput_no_expire+0x4a/0x260
? __x64_sys_close+0x3d/0x80
? kmem_cache_free+0x3af/0x3d0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x8f/0x170
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
entry_SYSCALL_64_after_hwframe+0x78/0x80
RIP: 0033:0x7f22b092c3fb
Code: 73 01 c3 48 8b 0d 1d 9a 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ed 99 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007ffc08ccfef8 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
RAX: ffffffffffffffda RBX: 000055ea16868700 RCX: 00007f22b092c3fb
RDX: 0000000000000000 RSI: 0000000000000800 RDI: 000055ea16868768
RBP: 00007ffc08ccff20 R08: 1999999999999999 R09: 0000000000000000
R10: 00007f22b09a5fe0 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffc08cd0170 R14: 00007ffc08cd0178 R15: 0000000000000000
</TASK>
Complete report #971889
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
__die
|
vmlinux |
|
0x23
|
|
2
|
__die
|
vmlinux |
|
0x23
|
|
3
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
4
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
5
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
|
vmlinux |
|
0x23
|
|
22
|
__die
|
vmlinux |
|
0x23
|
traps: nautilus[12682] general protection fault ip:7fe758220dab sp:7fff328a8ab0 error:0 in libglib-2.0.so.0.8000.0[7fe7581dc000+a3000]
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in /tmp/vbox.0/SUPDrvGip.c:2204:20
index 1 is out of range for type 'SUPGIPCPU [1]'
CPU: 3 PID: 32913 Comm: rmmod Tainted: P OE 6.8.8-300.fc40.x86_64 #1
Hardware name: MACHENIKE F117-7/NP55HH_J_K-HMx, BIOS 1.07.05TQLM5 11/10/2021
Call Trace:
<TASK>
dump_stack_lvl+0x6a/0x90
__ubsan_handle_out_of_bounds+0x95/0xd0
supdrvGipDestroy+0x288/0x290 [vboxdrv]
supdrvDeleteDevExt+0xe5/0x130 [vboxdrv]
VBoxDrvLinuxUnload+0xcf/0x150 [vboxdrv]
__do_sys_delete_module.isra.0+0x198/0x2f0
do_syscall_64+0x83/0x170
? __mod_memcg_lruvec_state+0xc5/0x170
? mod_memcg_lruvec_state+0x15/0x30
? mod_objcg_state+0x18a/0x2b0
? __memcg_slab_free_hook+0x112/0x160
? __memcg_slab_free_hook+0x112/0x160
? mntput_no_expire+0x4a/0x260
? __x64_sys_close+0x3d/0x80
? kmem_cache_free+0x3af/0x3d0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x8f/0x170
? do_user_addr_fault+0x304/0x690
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
entry_SYSCALL_64_after_hwframe+0x78/0x80
RIP: 0033:0x7f0a27f2c3fb
Code: 73 01 c3 48 8b 0d 1d 9a 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ed 99 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007fff652ce2c8 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
RAX: ffffffffffffffda RBX: 00005653dff4f760 RCX: 00007f0a27f2c3fb
RDX: 0000000000000000 RSI: 0000000000000800 RDI: 00005653dff4f7c8
RBP: 00007fff652ce2f0 R08: 1999999999999999 R09: 0000000000000000
R10: 00007f0a27fa5fe0 R11: 0000000000000206 R12: 0000000000000000
R13: 00007fff652ce540 R14: 00007fff652ce548 R15: 0000000000000000
</TASK>
Complete report #971684
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
__die
|
vmlinux |
|
0x23
|
|
2
|
__die
|
vmlinux |
|
0x23
|
|
3
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
4
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
5
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
|
vmlinux |
|
0x23
|
|
22
|
|
vmlinux |
|
0x23
|
|
23
|
|
vmlinux |
|
0x23
|
|
24
|
|
vmlinux |
|
0x23
|
|
25
|
|
vmlinux |
|
0x23
|
|
26
|
|
vmlinux |
|
0x23
|
|
27
|
__die
|
vmlinux |
|
0x23
|
traps: ThreadPoolSingl[23410] trap invalid opcode ip:55e0760ca57a sp:7f29d71feab0 error:0 in outlook-for-linux[55e0725cf000+7e33000]
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in /tmp/vbox.0/SUPDrvGip.c:2204:20
index 1 is out of range for type 'SUPGIPCPU [1]'
CPU: 2 PID: 50695 Comm: rmmod Tainted: G OE 6.8.8-300.fc40.x86_64 #1
Hardware name: ASUSTeK COMPUTER INC. ZenBook UX482EAR_UX482EAR/UX482EAR, BIOS UX482EAR.208 10/21/2021
Call Trace:
<TASK>
dump_stack_lvl+0x6a/0x90
__ubsan_handle_out_of_bounds+0x95/0xd0
supdrvGipDestroy+0x288/0x290 [vboxdrv]
supdrvDeleteDevExt+0xe5/0x130 [vboxdrv]
VBoxDrvLinuxUnload+0xcf/0x150 [vboxdrv]
__do_sys_delete_module.isra.0+0x198/0x2f0
do_syscall_64+0x83/0x170
? __mod_memcg_lruvec_state+0xc5/0x170
? vsnprintf+0x49b/0x6e0
? mutex_lock+0x12/0x30
? kernfs_seq_start+0x29/0xa0
? kernfs_seq_stop+0x34/0x40
? seq_read_iter+0x208/0x480
? security_file_permission+0x33/0x50
? vfs_read+0x24c/0x380
? ksys_read+0x6d/0xf0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x8f/0x170
? ksys_read+0x6d/0xf0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x8f/0x170
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x8f/0x170
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
entry_SYSCALL_64_after_hwframe+0x78/0x80
RIP: 0033:0x7f971b12c3fb
Code: 73 01 c3 48 8b 0d 1d 9a 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ed 99 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007ffd931392c8 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
RAX: ffffffffffffffda RBX: 0000562cbd568700 RCX: 00007f971b12c3fb
RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000562cbd568768
RBP: 00007ffd931392f0 R08: 1999999999999999 R09: 0000000000000000
R10: 00007f971b1a5fe0 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffd93139540 R14: 00007ffd93139548 R15: 0000000000000000
</TASK>
Complete report #971641
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
__die
|
vmlinux |
|
0x23
|
|
2
|
__die
|
vmlinux |
|
0x23
|
|
3
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
4
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
5
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
|
vmlinux |
|
0x23
|
|
22
|
|
vmlinux |
|
0x23
|
|
23
|
|
vmlinux |
|
0x23
|
|
24
|
|
vmlinux |
|
0x23
|
|
25
|
|
vmlinux |
|
0x23
|
|
26
|
|
vmlinux |
|
0x23
|
|
27
|
__die
|
vmlinux |
|
0x23
|
traps: ThreadPoolForeg[10346] trap invalid opcode ip:5590656b90fa sp:7f7a10ffe880 error:0 in teams-for-linux[559061a95000+8168000]
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in /tmp/vbox.0/SUPDrvGip.c:2204:20
index 1 is out of range for type 'SUPGIPCPU [1]'
CPU: 2 PID: 16776 Comm: rmmod Tainted: G W OE 6.8.8-100.fc38.x86_64 #1
Hardware name: HP HP 250 G8 Notebook PC/881D, BIOS F.55 07/07/2022
Call Trace:
<TASK>
dump_stack_lvl+0x64/0x80
__ubsan_handle_out_of_bounds+0x95/0xd0
supdrvGipDestroy+0x288/0x290 [vboxdrv]
supdrvDeleteDevExt+0xe5/0x130 [vboxdrv]
VBoxDrvLinuxUnload+0xcf/0x150 [vboxdrv]
__do_sys_delete_module.isra.0+0x198/0x2f0
do_syscall_64+0x83/0x170
? seq_read_iter+0x208/0x480
? security_file_permission+0x33/0x50
? vfs_read+0x24c/0x380
? ksys_read+0x6f/0xf0
? syscall_exit_to_user_mode+0x83/0x230
? __mod_memcg_lruvec_state+0xc5/0x170
? mod_memcg_lruvec_state+0x15/0x30
? mod_objcg_state+0x19d/0x2c0
? __memcg_slab_free_hook+0x112/0x160
? __memcg_slab_free_hook+0x112/0x160
? __memcg_slab_free_hook+0x112/0x160
? __x64_sys_close+0x3d/0x80
? kmem_cache_free+0x3b7/0x3e0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x90/0x170
? do_user_addr_fault+0x304/0x690
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
entry_SYSCALL_64_after_hwframe+0x78/0x80
RIP: 0033:0x7f1df2b3592b
Code: 73 01 c3 48 8b 0d dd 04 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ad 04 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007fff34212888 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
RAX: ffffffffffffffda RBX: 000055bbd89506f0 RCX: 00007f1df2b3592b
RDX: 0000000000000000 RSI: 0000000000000800 RDI: 000055bbd8950758
RBP: 00007fff342128b0 R08: 1999999999999999 R09: 0000000000000000
R10: 00007f1df2ba6ac0 R11: 0000000000000206 R12: 0000000000000000
R13: 00007fff34212b10 R14: 000055bbd89506f0 R15: 0000000000000000
</TASK>
Complete report #971366
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
|
vmlinux |
|
0x23
|
|
2
|
|
vmlinux |
|
0x23
|
|
3
|
|
vmlinux |
|
0x23
|
|
4
|
|
vmlinux |
|
0x23
|
|
5
|
|
vmlinux |
|
0x23
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
__die
|
vmlinux |
|
0x23
|
|
10
|
__die
|
vmlinux |
|
0x23
|
|
11
|
__die
|
vmlinux |
|
0x23
|
|
12
|
notify_handler
|
intel_vbtn |
|
0xfa
|
|
13
|
__die
|
vmlinux |
|
0x23
|
|
14
|
__die
|
vmlinux |
|
0x23
|
|
15
|
__die
|
vmlinux |
|
0x23
|
|
16
|
__die
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
__die
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
__die
|
vmlinux |
|
0x23
|
|
21
|
|
vmlinux |
|
0x23
|
|
22
|
__die
|
vmlinux |
|
0x23
|
BUG: kernel NULL pointer dereference, address: 0000000000000018
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 3 PID: 8200 Comm: kworker/3:2 Not tainted 6.8.8-300.fc40.x86_64 #1
Hardware name: Dell Inc. Inspiron 5579/0KJVMJ, BIOS 1.10.0 07/19/2018
Workqueue: kacpi_notify acpi_os_execute_deferred
RIP: 0010:klist_add_tail+0x2d/0x90
Code: fa 41 56 41 55 41 54 4c 8d 67 08 55 48 89 fd 53 48 89 f3 48 89 37 83 e6 01 4c 89 67 08 4c 89 67 10 c7 47 18 01 00 00 00 75 53 <48> 8b 43 18 48 85 c0 74 08 48 89 ef ff d0 0f 1f 00 48 89 df 4c 8d
RSP: 0018:ffffa3976194bce0 EFLAGS: 00010246
RAX: ffff898d37950300 RBX: 0000000000000000 RCX: 0000000025b8c003
RDX: 0000000025b8a003 RSI: 0000000000000000 RDI: ffff898d37950328
RBP: ffff898d37950328 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 4e51455300393174 R12: ffff898d37950330
R13: 0000000000000000 R14: ffffa3976194bd21 R15: ffff898bef282298
FS: 0000000000000000(0000) GS:ffff898dc84c0000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000018 CR3: 000000001f428006 CR4: 00000000003706f0
Call Trace:
<TASK>
? __die+0x23/0x70
? page_fault_oops+0x174/0x540
? exc_page_fault+0x7f/0x180
? asm_exc_page_fault+0x26/0x30
? klist_add_tail+0x2d/0x90
device_add+0x6d3/0x8a0
cdev_device_add+0x48/0xa0
? cdev_init+0x55/0x60
evdev_connect+0x16a/0x1d0
input_attach_handler.isra.0+0x72/0xa0
input_register_device+0x3c6/0x530
notify_handler+0xfa/0x140 [intel_vbtn]
acpi_ev_notify_dispatch+0x48/0x80
acpi_os_execute_deferred+0x17/0x30
process_one_work+0x16f/0x330
worker_thread+0x273/0x3c0
? __pfx_worker_thread+0x10/0x10
kthread+0xe5/0x120
? __pfx_kthread+0x10/0x10
ret_from_fork+0x31/0x50
? __pfx_kthread+0x10/0x10
ret_from_fork_asm+0x1b/0x30
</TASK>
Modules linked in: uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr uhid bnep snd_hda_codec_hdmi sunrpc snd_sof_pci_intel_skl snd_sof_intel_hda_common soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils soundwire_generic_allocation soundwire_bus snd_soc_avs snd_soc_hda_codec snd_soc_skl snd_soc_hdac_hda snd_hda_ext_core snd_soc_sst_ipc snd_soc_sst_dsp snd_soc_acpi_intel_match snd_soc_acpi snd_ctl_led snd_soc_core snd_hda_codec_realtek snd_hda_codec_generic snd_compress intel_uncore_frequency intel_uncore_frequency_common ac97_bus snd_pcm_dmaengine intel_tcc_cooling x86_pkg_temp_thermal ath10k_pci iTCO_wdt intel_powerclamp coretemp snd_hda_intel ath10k_core snd_intel_dspcfg kvm_intel
snd_intel_sdw_acpi intel_pmc_bxt snd_hda_codec binfmt_misc ee1004 iTCO_vendor_support mei_pxp mei_hdcp snd_hda_core mac80211 kvm dell_laptop uvcvideo intel_rapl_msr snd_hwdep btusb uvc btrtl videobuf2_vmalloc dell_wmi btintel irqbypass snd_seq videobuf2_memops videobuf2_v4l2 libarc4 btbcm rapl videobuf2_common btmtk ath dell_smm_hwmon snd_seq_device videodev intel_cstate bluetooth dell_smbios cfg80211 mc ledtrig_audio dcdbas processor_thermal_device_pci_legacy pcspkr intel_uncore snd_pcm hid_sensor_incl_3d vfat hid_sensor_magn_3d wmi_bmof hid_sensor_rotation hid_sensor_gyro_3d hid_sensor_accel_3d dell_wmi_descriptor fat hid_sensor_trigger processor_thermal_device processor_thermal_wt_hint processor_thermal_rfim snd_timer hid_sensor_iio_common industrialio_triggered_buffer kfifo_buf rfkill snd processor_thermal_rapl industrialio intel_rapl_common i2c_i801 processor_thermal_wt_req mei_me soundcore processor_thermal_power_floor i2c_smbus mei intel_pch_thermal processor_thermal_mbox intel_xhci_usb_role_switch
intel_soc_dts_iosf idma64 intel_vbtn soc_button_array int3403_thermal intel_hid intel_pmc_core sparse_keymap int3402_thermal intel_vsec int340x_thermal_zone pmt_telemetry int3400_thermal pmt_class acpi_pad acpi_thermal_rel loop nfnetlink zram hid_sensor_hub intel_ishtp_hid i915 i2c_algo_bit drm_buddy crct10dif_pclmul ttm crc32_pclmul crc32c_intel polyval_clmulni polyval_generic drm_display_helper ghash_clmulni_intel sha512_ssse3 intel_ish_ipc sha256_ssse3 sha1_ssse3 cec intel_ishtp i2c_hid_acpi i2c_hid video wmi pinctrl_sunrisepoint serio_raw hid_multitouch ip6_tables ip_tables analog gameport joydev fuse i2c_dev
CR2: 0000000000000018
Complete report #970888
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
__die
|
vmlinux |
|
0x23
|
|
2
|
__die
|
vmlinux |
|
0x23
|
|
3
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
4
|
|
vboxdrv |
|
0x288
|
|
5
|
|
vboxdrv |
|
0x288
|
|
6
|
|
vboxdrv |
|
0x288
|
|
7
|
|
vboxdrv |
|
0x288
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
|
nfnetlink_queue |
|
0xd0
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
|
vmlinux |
|
0x23
|
|
22
|
|
vmlinux |
|
0x23
|
|
23
|
|
vmlinux |
|
0x23
|
|
24
|
|
vmlinux |
|
0x23
|
|
25
|
|
vmlinux |
|
0x23
|
|
26
|
|
vmlinux |
|
0x23
|
|
27
|
|
vmlinux |
|
0x23
|
|
28
|
|
vmlinux |
|
0x23
|
|
29
|
|
vmlinux |
|
0x23
|
|
30
|
|
vmlinux |
|
0x23
|
|
31
|
|
vmlinux |
|
0x23
|
|
32
|
|
vmlinux |
|
0x23
|
traps: UIMainEventList[11210] general protection fault ip:7f5dfa01ddd4 sp:7f5dd15ff5a0 error:0 in VBoxXPCOMIPCC.so[7f5dfa011000+11000]
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in /tmp/akmodsbuild.zbqrPNjo/BUILD/VirtualBox-kmod-7.0.14/_kmod_build_6.8.8-100.fc38.x86_64/vboxdrv/common/log/log.c:1558:29
index 413 is out of range for type 'uint32_t [1]'
CPU: 6 PID: 11493 Comm: Virtua:traceq0 Tainted: G W OE 6.8.8-100.fc38.x86_64 #1
Hardware name: LENOVO 20VE/LNVNB161216, BIOS F8CN48WW(V2.11) 05/20/2022
Call Trace:
<TASK>
dump_stack_lvl+0x64/0x80
__ubsan_handle_out_of_bounds+0x95/0xd0
VBoxHost_RTLogDestroy+0x197/0x1a0 [vboxdrv]
? VBoxHost_RTHandleTableDestroy+0x291/0x2c0 [vboxdrv]
? supdrvCleanupSession+0x1f4/0x540 [vboxdrv]
? supdrvSessionRelease+0x68/0xc0 [vboxdrv]
? VBoxDrvLinuxClose+0x1d/0x40 [vboxdrv]
? __fput+0x97/0x2c0
? task_work_run+0x5a/0x90
? do_exit+0x360/0xaf0
? do_group_exit+0x31/0x80
? get_signal+0xb13/0xb20
? futex_wait+0x77/0x110
? arch_do_signal_or_restart+0x3e/0x270
? syscall_exit_to_user_mode+0x1cd/0x230
? do_syscall_64+0x90/0x170
? __x64_sys_prctl+0x5/0x30
? kprobe_ftrace_handler+0x11f/0x220
? nfnetlink_queue_init+0xd0/0xff0 [nfnetlink_queue]
? __check_object_size+0x53/0x2e0
? __do_sys_prctl+0x20f/0x960
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x90/0x170
? __handle_mm_fault+0xba3/0xe50
? __count_memcg_events+0x69/0x100
? count_memcg_events.constprop.0+0x1a/0x30
? handle_mm_fault+0xa2/0x360
? syscall_exit_to_user_mode+0x83/0x230
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
? entry_SYSCALL_64_after_hwframe+0x78/0x80
</TASK>
Complete report #970792
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
__die
|
vmlinux |
|
0x23
|
|
2
|
__die
|
vmlinux |
|
0x23
|
|
3
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
4
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
5
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
|
vmlinux |
|
0x23
|
|
22
|
|
vmlinux |
|
0x23
|
|
23
|
|
vmlinux |
|
0x23
|
|
24
|
|
vmlinux |
|
0x23
|
|
25
|
__die
|
vmlinux |
|
0x23
|
traps: cpptools-srv[11602] general protection fault ip:ade45e sp:7fc3d0e02648 error:0 in cpptools-srv[400000+9d7000]
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in /tmp/vbox.0/SUPDrvGip.c:2204:20
index 1 is out of range for type 'SUPGIPCPU [1]'
CPU: 4 PID: 18622 Comm: rmmod Tainted: G OE 6.8.8-100.fc38.x86_64 #1
Hardware name: LENOVO 82H7/LNVNB161216, BIOS GGCN55WW 06/12/2023
Call Trace:
<TASK>
dump_stack_lvl+0x64/0x80
__ubsan_handle_out_of_bounds+0x95/0xd0
supdrvGipDestroy+0x288/0x290 [vboxdrv]
supdrvDeleteDevExt+0xe5/0x130 [vboxdrv]
VBoxDrvLinuxUnload+0xcf/0x150 [vboxdrv]
__do_sys_delete_module.isra.0+0x198/0x2f0
do_syscall_64+0x83/0x170
? ksys_read+0x6f/0xf0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x90/0x170
? kmem_cache_free+0x3b7/0x3e0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x90/0x170
? __x64_sys_getdents64+0xfc/0x130
? __pfx_filldir64+0x10/0x10
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x90/0x170
? __count_memcg_events+0x69/0x100
? count_memcg_events.constprop.0+0x1a/0x30
? handle_mm_fault+0xa2/0x360
? do_user_addr_fault+0x304/0x690
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
entry_SYSCALL_64_after_hwframe+0x78/0x80
RIP: 0033:0x7f8dd453592b
Code: 73 01 c3 48 8b 0d dd 04 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ad 04 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007ffe9f3f8a48 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
RAX: ffffffffffffffda RBX: 0000556de18bd6f0 RCX: 00007f8dd453592b
RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000556de18bd758
RBP: 00007ffe9f3f8a70 R08: 1999999999999999 R09: 0000000000000000
R10: 00007f8dd45a6ac0 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffe9f3f8cd0 R14: 0000556de18bd6f0 R15: 0000000000000000
</TASK>
Complete report #970270
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
__die
|
vmlinux |
|
0x23
|
|
2
|
__die
|
vmlinux |
|
0x23
|
|
3
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
4
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
5
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
__die
|
vmlinux |
|
0x23
|
traps: nautilus[9370] general protection fault ip:7fd2d7ae7dab sp:7ffd9b93b5a0 error:0 in libglib-2.0.so.0.8000.0[7fd2d7aa3000+a3000]
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in /tmp/vbox.0/SUPDrvGip.c:2204:20
index 1 is out of range for type 'SUPGIPCPU [1]'
CPU: 0 PID: 11070 Comm: rmmod Tainted: G OE 6.8.8-300.fc40.x86_64 #1
Hardware name: Gigabyte Technology Co., Ltd. To be filled by O.E.M./B75M-D3V, BIOS F5 03/27/2012
Call Trace:
<TASK>
dump_stack_lvl+0x6a/0x90
__ubsan_handle_out_of_bounds+0x95/0xd0
supdrvGipDestroy+0x288/0x290 [vboxdrv]
supdrvDeleteDevExt+0xe5/0x130 [vboxdrv]
VBoxDrvLinuxUnload+0xcf/0x150 [vboxdrv]
__do_sys_delete_module.isra.0+0x19b/0x2f0
do_syscall_64+0x83/0x170
? do_filp_open+0xb3/0x160
? __mod_memcg_lruvec_state+0xc5/0x170
? mod_memcg_lruvec_state+0x15/0x30
? mod_objcg_state+0x18a/0x2b0
? __memcg_slab_free_hook+0x112/0x160
? __memcg_slab_free_hook+0x112/0x160
? mntput_no_expire+0x4a/0x260
? __x64_sys_close+0x3d/0x80
? kmem_cache_free+0x3af/0x3d0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x8f/0x170
? exc_page_fault+0x7f/0x180
entry_SYSCALL_64_after_hwframe+0x78/0x80
RIP: 0033:0x7f8a39f2c3fb
Code: 73 01 c3 48 8b 0d 1d 9a 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ed 99 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007ffd604996c8 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
RAX: ffffffffffffffda RBX: 000055660ffa8700 RCX: 00007f8a39f2c3fb
RDX: 0000000000000000 RSI: 0000000000000800 RDI: 000055660ffa8768
RBP: 00007ffd604996f0 R08: 1999999999999999 R09: 0000000000000000
R10: 00007f8a39fa5fe0 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffd60499940 R14: 00007ffd60499948 R15: 0000000000000000
</TASK>
Complete report #969878
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
__die
|
vmlinux |
|
0x23
|
|
2
|
__die
|
vmlinux |
|
0x23
|
|
3
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
4
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
5
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
|
vmlinux |
|
0x23
|
|
22
|
|
vmlinux |
|
0x23
|
|
23
|
__die
|
vmlinux |
|
0x23
|
traps: nautilus[3750] general protection fault ip:7fe234c5adab sp:7fff537cec50 error:0 in libglib-2.0.so.0.8000.0[7fe234c16000+a3000]
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in /tmp/vbox.0/SUPDrvGip.c:2204:20
index 1 is out of range for type 'SUPGIPCPU [1]'
CPU: 0 PID: 26223 Comm: rmmod Tainted: G S OE 6.8.8-300.fc40.x86_64 #1
Hardware name: Dell Inc. Precision T3610/09M8Y8, BIOS A06 02/28/2014
Call Trace:
<TASK>
dump_stack_lvl+0x6a/0x90
__ubsan_handle_out_of_bounds+0x95/0xd0
supdrvGipDestroy+0x288/0x290 [vboxdrv]
supdrvDeleteDevExt+0xe5/0x130 [vboxdrv]
VBoxDrvLinuxUnload+0xcf/0x150 [vboxdrv]
__do_sys_delete_module.isra.0+0x19b/0x2f0
do_syscall_64+0x83/0x170
? __x64_sys_close+0x3d/0x80
? kmem_cache_free+0x3af/0x3d0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x8f/0x170
? ksys_read+0x6d/0xf0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x8f/0x170
? do_syscall_64+0x8f/0x170
? touch_atime+0x1e/0x120
? iterate_dir+0x116/0x1f0
? __x64_sys_getdents64+0xfa/0x130
? __pfx_filldir64+0x10/0x10
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x8f/0x170
? exc_page_fault+0x7f/0x180
entry_SYSCALL_64_after_hwframe+0x78/0x80
RIP: 0033:0x7fa69252c3fb
Code: 73 01 c3 48 8b 0d 1d 9a 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ed 99 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007fffc8e3b0f8 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
RAX: ffffffffffffffda RBX: 0000563282db7700 RCX: 00007fa69252c3fb
RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000563282db7768
RBP: 00007fffc8e3b120 R08: 1999999999999999 R09: 0000000000000000
R10: 00007fa6925a5fe0 R11: 0000000000000206 R12: 0000000000000000
R13: 00007fffc8e3b370 R14: 00007fffc8e3b378 R15: 0000000000000000
</TASK>
Complete report #967437
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
__die
|
vmlinux |
|
0x23
|
|
2
|
__die
|
vmlinux |
|
0x23
|
|
3
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
4
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
5
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
__die
|
vmlinux |
|
0x23
|
traps: gnome-calendar[6702] general protection fault ip:7f23803fec51 sp:7fff6cf7b220 error:0 in libgobject-2.0.so.0.8000.0[7f23803d0000+37000]
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in /tmp/vbox.0/SUPDrvGip.c:2204:20
index 1 is out of range for type 'SUPGIPCPU [1]'
CPU: 2 PID: 7412 Comm: rmmod Tainted: G OE 6.8.8-300.fc40.x86_64 #1
Hardware name: HP HP ProDesk 600 G3 DM/829E, BIOS P22 Ver. 02.11 11/07/2017
Call Trace:
<TASK>
dump_stack_lvl+0x6a/0x90
__ubsan_handle_out_of_bounds+0x95/0xd0
supdrvGipDestroy+0x288/0x290 [vboxdrv]
supdrvDeleteDevExt+0xe5/0x130 [vboxdrv]
VBoxDrvLinuxUnload+0xcf/0x150 [vboxdrv]
__do_sys_delete_module.isra.0+0x198/0x2f0
do_syscall_64+0x83/0x170
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x8f/0x170
? vfs_read+0x24c/0x380
? ksys_read+0x6d/0xf0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x8f/0x170
? do_sys_openat2+0x9c/0xe0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x8f/0x170
? count_memcg_events.constprop.0+0x1a/0x30
? handle_mm_fault+0x1f2/0x350
? do_user_addr_fault+0x304/0x690
? exc_page_fault+0x7f/0x180
entry_SYSCALL_64_after_hwframe+0x78/0x80
RIP: 0033:0x7fd161f2c3fb
Code: 73 01 c3 48 8b 0d 1d 9a 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ed 99 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007fffbb8e8d68 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
RAX: ffffffffffffffda RBX: 0000561b5b23f700 RCX: 00007fd161f2c3fb
RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000561b5b23f768
RBP: 00007fffbb8e8d90 R08: 1999999999999999 R09: 0000000000000000
R10: 00007fd161fa5fe0 R11: 0000000000000206 R12: 0000000000000000
R13: 00007fffbb8e8fe0 R14: 00007fffbb8e8fe8 R15: 0000000000000000
</TASK>
Complete report #967426
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
__die
|
vmlinux |
|
0x23
|
|
2
|
__die
|
vmlinux |
|
0x23
|
|
3
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
4
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
5
|
supdrvGipDestroy
|
vboxdrv |
|
0x288
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
|
vmlinux |
|
0x23
|
|
11
|
|
vmlinux |
|
0x23
|
|
12
|
|
vmlinux |
|
0x23
|
|
13
|
|
vmlinux |
|
0x23
|
|
14
|
|
vmlinux |
|
0x23
|
|
15
|
|
vmlinux |
|
0x23
|
|
16
|
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
|
vmlinux |
|
0x23
|
|
22
|
|
vmlinux |
|
0x23
|
|
23
|
|
vmlinux |
|
0x23
|
|
24
|
|
vmlinux |
|
0x23
|
|
25
|
|
vmlinux |
|
0x23
|
|
26
|
|
vmlinux |
|
0x23
|
|
27
|
|
vmlinux |
|
0x23
|
|
28
|
|
vmlinux |
|
0x23
|
|
29
|
|
vmlinux |
|
0x23
|
|
30
|
__die
|
vmlinux |
|
0x23
|
traps: spotify[28211] general protection fault ip:18aa96e sp:7fff9f20ef20 error:0 in spotify[b8c000+14b5000]
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in /tmp/vbox.0/SUPDrvGip.c:2204:20
index 1 is out of range for type 'SUPGIPCPU [1]'
CPU: 0 PID: 45915 Comm: rmmod Tainted: G W OE 6.8.8-100.fc38.x86_64 #1
Hardware name: HP HP Laptop 15s-fq2xxx/87FE, BIOS F.26 10/18/2022
Call Trace:
<TASK>
dump_stack_lvl+0x64/0x80
__ubsan_handle_out_of_bounds+0x95/0xd0
supdrvGipDestroy+0x288/0x290 [vboxdrv]
supdrvDeleteDevExt+0xe5/0x130 [vboxdrv]
VBoxDrvLinuxUnload+0xcf/0x150 [vboxdrv]
__do_sys_delete_module.isra.0+0x198/0x2f0
do_syscall_64+0x83/0x170
? mod_memcg_lruvec_state+0x15/0x30
? mod_objcg_state+0x19d/0x2c0
? __memcg_slab_free_hook+0x112/0x160
? __memcg_slab_free_hook+0x112/0x160
? __x64_sys_close+0x3d/0x80
? kmem_cache_free+0x3b7/0x3e0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x90/0x170
? security_file_permission+0x33/0x50
? vfs_read+0x24c/0x380
? ksys_read+0x6f/0xf0
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x90/0x170
? syscall_exit_to_user_mode+0x83/0x230
? do_syscall_64+0x90/0x170
? __count_memcg_events+0x69/0x100
? count_memcg_events.constprop.0+0x1a/0x30
? handle_mm_fault+0xa2/0x360
? do_user_addr_fault+0x304/0x690
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
? clear_bhb_loop+0x55/0xb0
entry_SYSCALL_64_after_hwframe+0x78/0x80
RIP: 0033:0x7f3cb791192b
Code: 73 01 c3 48 8b 0d dd 04 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ad 04 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007ffeb89c5528 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
RAX: ffffffffffffffda RBX: 00005590439496f0 RCX: 00007f3cb791192b
RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000559043949758
RBP: 00007ffeb89c5550 R08: 1999999999999999 R09: 0000000000000000
R10: 00007f3cb7982ac0 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffeb89c57b0 R14: 00005590439496f0 R15: 0000000000000000
</TASK>
Complete report #962984
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
|
vmlinux |
|
0x23
|
|
2
|
|
vmlinux |
|
0x23
|
|
3
|
|
vmlinux |
|
0x23
|
|
4
|
|
vmlinux |
|
0x23
|
|
5
|
|
vmlinux |
|
0x23
|
|
6
|
__die
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
|
vmlinux |
|
0x23
|
|
9
|
__die
|
vmlinux |
|
0x23
|
|
10
|
__die
|
vmlinux |
|
0x23
|
|
11
|
__die
|
vmlinux |
|
0x23
|
|
12
|
notify_handler
|
intel_vbtn |
|
0xfa
|
|
13
|
__die
|
vmlinux |
|
0x23
|
|
14
|
__die
|
vmlinux |
|
0x23
|
|
15
|
__die
|
vmlinux |
|
0x23
|
|
16
|
__die
|
vmlinux |
|
0x23
|
|
17
|
|
vmlinux |
|
0x23
|
|
18
|
__die
|
vmlinux |
|
0x23
|
|
19
|
|
vmlinux |
|
0x23
|
|
20
|
__die
|
vmlinux |
|
0x23
|
|
21
|
|
vmlinux |
|
0x23
|
|
22
|
__die
|
vmlinux |
|
0x23
|
BUG: kernel NULL pointer dereference, address: 0000000000000018
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 2 PID: 32 Comm: kworker/2:0 Tainted: G I 6.8.8-300.fc40.x86_64 #1
Hardware name: Dell Inc. Inspiron 13-7359/0X1DP8, BIOS 1.26.1 05/06/2021
Workqueue: kacpi_notify acpi_os_execute_deferred
RIP: 0010:klist_add_tail+0x2d/0x90
Code: fa 41 56 41 55 41 54 4c 8d 67 08 55 48 89 fd 53 48 89 f3 48 89 37 83 e6 01 4c 89 67 08 4c 89 67 10 c7 47 18 01 00 00 00 75 53 <48> 8b 43 18 48 85 c0 74 08 48 89 ef ff d0 0f 1f 00 48 89 df 4c 8d
RSP: 0018:ffffb0ca8016bce0 EFLAGS: 00010246
RAX: ffff9e0386d94d00 RBX: 0000000000000000 RCX: 000000003e190002
RDX: 000000003e18e002 RSI: 0000000000000000 RDI: ffff9e0386d94d28
RBP: ffff9e0386d94d28 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: ffff9e0386d94d30
R13: 0000000000000000 R14: ffffb0ca8016bd21 R15: ffff9e0204631b18
FS: 0000000000000000(0000) GS:ffff9e0448700000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000018 CR3: 00000001f5428005 CR4: 00000000003706f0
Call Trace:
<TASK>
? __die+0x23/0x70
? page_fault_oops+0x174/0x540
? exc_page_fault+0x7f/0x180
? asm_exc_page_fault+0x26/0x30
? klist_add_tail+0x2d/0x90
device_add+0x6d3/0x8a0
cdev_device_add+0x48/0xa0
? cdev_init+0x55/0x60
evdev_connect+0x16a/0x1d0
input_attach_handler.isra.0+0x72/0xa0
input_register_device+0x3c6/0x530
notify_handler+0xfa/0x140 [intel_vbtn]
acpi_ev_notify_dispatch+0x48/0x80
acpi_os_execute_deferred+0x17/0x30
process_one_work+0x16f/0x330
worker_thread+0x273/0x3c0
? __pfx_worker_thread+0x10/0x10
kthread+0xe5/0x120
? __pfx_kthread+0x10/0x10
ret_from_fork+0x31/0x50
? __pfx_kthread+0x10/0x10
ret_from_fork_asm+0x1b/0x30
</TASK>
Modules linked in: wireguard curve25519_x86_64 libcurve25519_generic ip6_udp_tunnel udp_tunnel uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr snd_sof_pci_intel_skl snd_sof_intel_hda_common soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils soundwire_generic_allocation soundwire_bus snd_soc_avs snd_soc_hda_codec snd_soc_skl snd_soc_hdac_hda bnep snd_hda_ext_core snd_soc_sst_ipc snd_soc_sst_dsp snd_soc_acpi_intel_match snd_soc_acpi snd_soc_core snd_hda_codec_hdmi ath10k_pci snd_compress ac97_bus snd_hda_codec_conexant snd_pcm_dmaengine snd_hda_codec_generic ath10k_core snd_hda_intel intel_tcc_cooling x86_pkg_temp_thermal snd_intel_dspcfg iTCO_wdt snd_intel_sdw_acpi intel_pmc_bxt intel_powerclamp
iTCO_vendor_support at24 uvcvideo mac80211 snd_hda_codec coretemp snd_hda_core kvm_intel sunrpc dell_laptop mei_pxp mei_hdcp uvc intel_rapl_msr snd_hwdep dell_smm_hwmon videobuf2_vmalloc snd_seq kvm videobuf2_memops libarc4 videobuf2_v4l2 hid_sensor_incl_3d hid_sensor_magn_3d hid_sensor_als hid_sensor_rotation hid_sensor_accel_3d hid_sensor_gyro_3d btusb irqbypass snd_seq_device rapl ath intel_cstate btrtl btintel hid_sensor_trigger snd_pcm intel_uncore hid_sensor_iio_common videobuf2_common cfg80211 btbcm industrialio_triggered_buffer dell_wmi kfifo_buf btmtk videodev processor_thermal_device_pci_legacy dell_smbios bluetooth i2c_i801 processor_thermal_device industrialio dcdbas processor_thermal_wt_hint mc ledtrig_audio wmi_bmof pcspkr processor_thermal_rfim dell_wmi_descriptor binfmt_misc snd_timer processor_thermal_rapl i2c_smbus intel_rapl_common snd mei_me rfkill soundcore mei processor_thermal_wt_req processor_thermal_power_floor idma64 processor_thermal_mbox intel_xhci_usb_role_switch
intel_soc_dts_iosf vfat fat intel_hid int3403_thermal intel_vbtn soc_button_array sparse_keymap intel_pmc_core int3402_thermal intel_vsec int340x_thermal_zone int3400_thermal acpi_thermal_rel pmt_telemetry acpi_pad pmt_class joydev loop nfnetlink zram hid_sensor_hub i915 i2c_algo_bit drm_buddy ttm crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic drm_display_helper ghash_clmulni_intel hid_multitouch sha512_ssse3 sha256_ssse3 sha1_ssse3 cec i2c_hid_acpi i2c_hid video wmi pinctrl_sunrisepoint serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000018
Complete report #954400
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
|
vmlinux |
|
0x23
|
|
2
|
|
vmlinux |
|
0x23
|
|
3
|
|
vmlinux |
|
0x23
|
|
4
|
|
vmlinux |
|
0x23
|
|
5
|
|
vmlinux |
|
0x23
|
|
6
|
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
__die
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
__die
|
vmlinux |
|
0x23
|
|
11
|
__die
|
vmlinux |
|
0x23
|
|
12
|
__die
|
vmlinux |
|
0x23
|
|
13
|
notify_handler
|
intel_vbtn |
|
0xfb
|
|
14
|
__die
|
vmlinux |
|
0x23
|
|
15
|
__die
|
vmlinux |
|
0x23
|
|
16
|
__die
|
vmlinux |
|
0x23
|
|
17
|
__die
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
__die
|
vmlinux |
|
0x23
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
__die
|
vmlinux |
|
0x23
|
|
22
|
|
vmlinux |
|
0x23
|
|
23
|
__die
|
vmlinux |
|
0x23
|
BUG: kernel NULL pointer dereference, address: 0000000000000018
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 4 PID: 44 Comm: kworker/4:0 Tainted: G W 6.8.5-201.fc39.x86_64 #1
Hardware name: Dell Inc. Inspiron 5579/04JW9K, BIOS 1.11.0 01/15/2019
Workqueue: kacpi_notify acpi_os_execute_deferred
RIP: 0010:klist_add_tail+0x2d/0x90
Code: fa 41 56 41 55 41 54 4c 8d 67 08 55 48 89 fd 53 48 89 f3 48 89 37 83 e6 01 4c 89 67 08 4c 89 67 10 c7 47 18 01 00 00 00 75 53 <48> 8b 43 18 48 85 c0 74 08 48 89 ef ff d0 0f 1f 00 48 89 df 4c 8d
RSP: 0018:ffffa73b401f7ce8 EFLAGS: 00010246
RAX: ffff9b94c7f58700 RBX: 0000000000000000 RCX: 00000000116e6004
RDX: 00000000116e4004 RSI: 0000000000000000 RDI: ffff9b94c7f58728
RBP: ffff9b94c7f58728 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff9b94c7f58730
R13: 0000000000000000 R14: 0000000000000000 R15: ffff9b94e18c4098
FS: 0000000000000000(0000) GS:ffff9b9740500000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000018 CR3: 0000000285422001 CR4: 00000000003706f0
Call Trace:
<TASK>
? __die+0x23/0x70
? page_fault_oops+0x171/0x4e0
? exc_page_fault+0x7f/0x180
? asm_exc_page_fault+0x26/0x30
? klist_add_tail+0x2d/0x90
? bus_probe_device+0x1d/0xa0
device_add+0x6cf/0x8a0
cdev_device_add+0x48/0xa0
? cdev_init+0x55/0x60
evdev_connect+0x16a/0x1d0
input_attach_handler.isra.0+0x72/0xa0
input_register_device+0x3f1/0x540
notify_handler+0xfb/0x140 [intel_vbtn]
acpi_ev_notify_dispatch+0x46/0x70
acpi_os_execute_deferred+0x17/0x30
process_one_work+0x171/0x340
worker_thread+0x27b/0x3a0
? __pfx_worker_thread+0x10/0x10
kthread+0xe5/0x120
? __pfx_kthread+0x10/0x10
ret_from_fork+0x31/0x50
? __pfx_kthread+0x10/0x10
ret_from_fork_asm+0x1b/0x30
</TASK>
Modules linked in: rfcomm snd_seq_dummy snd_hrtimer xt_CHECKSUM iptable_mangle xt_MASQUERADE xt_comment iptable_nat bridge stp llc iptable_filter nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep snd_hda_codec_hdmi sunrpc snd_sof_pci_intel_skl snd_sof_intel_hda_common soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils soundwire_generic_allocation soundwire_bus snd_soc_avs snd_soc_hda_codec snd_soc_skl snd_soc_hdac_hda snd_hda_ext_core snd_soc_sst_ipc snd_soc_sst_dsp intel_uncore_frequency intel_uncore_frequency_common snd_soc_acpi_intel_match intel_tcc_cooling binfmt_misc snd_soc_acpi x86_pkg_temp_thermal ath10k_pci snd_ctl_led intel_powerclamp snd_soc_core snd_hda_codec_realtek coretemp ath10k_core snd_hda_codec_generic
kvm_intel snd_compress ac97_bus snd_pcm_dmaengine iTCO_wdt vfat intel_pmc_bxt fat snd_hda_intel ee1004 iTCO_vendor_support mei_hdcp mei_pxp kvm mac80211 snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec intel_rapl_msr uvcvideo irqbypass btusb snd_hda_core libarc4 uvc rapl dell_laptop btrtl videobuf2_vmalloc btintel snd_hwdep dell_wmi ath videobuf2_memops snd_seq dell_smbios btbcm dell_smm_hwmon videobuf2_v4l2 intel_cstate snd_seq_device videobuf2_common dcdbas btmtk cfg80211 snd_pcm intel_uncore ledtrig_audio pcspkr videodev wmi_bmof dell_wmi_descriptor bluetooth snd_timer mc snd i2c_i801 i2c_smbus soundcore processor_thermal_device_pci_legacy rfkill hid_sensor_incl_3d hid_sensor_rotation hid_sensor_magn_3d hid_sensor_accel_3d hid_sensor_gyro_3d processor_thermal_device mei_me processor_thermal_wt_hint hid_sensor_trigger processor_thermal_rfim hid_sensor_iio_common processor_thermal_rapl industrialio_triggered_buffer kfifo_buf intel_rapl_common mei industrialio processor_thermal_wt_req
processor_thermal_power_floor intel_pch_thermal idma64 processor_thermal_mbox intel_xhci_usb_role_switch intel_soc_dts_iosf soc_button_array intel_vbtn int3403_thermal intel_hid intel_pmc_core sparse_keymap int3402_thermal int340x_thermal_zone intel_vsec int3400_thermal acpi_pad pmt_telemetry acpi_thermal_rel pmt_class joydev squashfs loop zram hid_sensor_hub intel_ishtp_hid i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic i2c_algo_bit drm_buddy ghash_clmulni_intel sha512_ssse3 ttm sha256_ssse3 sha1_ssse3 video drm_display_helper i2c_hid_acpi i2c_hid intel_ish_ipc cec pinctrl_sunrisepoint intel_ishtp wmi hid_multitouch serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000018
Complete report #951853
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
|
vmlinux |
|
0x23
|
|
2
|
|
vmlinux |
|
0x23
|
|
3
|
|
vmlinux |
|
0x23
|
|
4
|
|
vmlinux |
|
0x23
|
|
5
|
|
vmlinux |
|
0x23
|
|
6
|
|
vmlinux |
|
0x23
|
|
7
|
__die
|
vmlinux |
|
0x23
|
|
8
|
__die
|
vmlinux |
|
0x23
|
|
9
|
|
vmlinux |
|
0x23
|
|
10
|
__die
|
vmlinux |
|
0x23
|
|
11
|
__die
|
vmlinux |
|
0x23
|
|
12
|
__die
|
vmlinux |
|
0x23
|
|
13
|
notify_handler
|
intel_vbtn |
|
0xfb
|
|
14
|
__die
|
vmlinux |
|
0x23
|
|
15
|
__die
|
vmlinux |
|
0x23
|
|
16
|
__die
|
vmlinux |
|
0x23
|
|
17
|
__die
|
vmlinux |
|
0x23
|
|
18
|
|
vmlinux |
|
0x23
|
|
19
|
__die
|
vmlinux |
|
0x23
|
|
20
|
|
vmlinux |
|
0x23
|
|
21
|
__die
|
vmlinux |
|
0x23
|
|
22
|
|
vmlinux |
|
0x23
|
|
23
|
__die
|
vmlinux |
|
0x23
|
BUG: kernel NULL pointer dereference, address: 0000000000000018
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 3 PID: 13841 Comm: kworker/3:0 Tainted: G OE 6.8.5-101.fc38.x86_64 #1
Hardware name: Dell Inc. Inspiron 5379/0MR7RT, BIOS 1.15.0 12/29/2020
Workqueue: kacpi_notify acpi_os_execute_deferred
RIP: 0010:klist_add_tail+0x2d/0x90
Code: fa 41 56 41 55 41 54 4c 8d 67 08 55 48 89 fd 53 48 89 f3 48 89 37 83 e6 01 4c 89 67 08 4c 89 67 10 c7 47 18 01 00 00 00 75 53 <48> 8b 43 18 48 85 c0 74 08 48 89 ef ff d0 0f 1f 00 48 89 df 4c 8d
RSP: 0018:ffffa946aa7b7ce8 EFLAGS: 00010246
RAX: ffff9c51024b8e00 RBX: 0000000000000000 RCX: 000000023419c003
RDX: 000000023419a003 RSI: 0000000000000000 RDI: ffff9c51024b8e28
RBP: ffff9c51024b8e28 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff9c51024b8e30
R13: 0000000000000000 R14: 0000000000000000 R15: ffff9c501eb8e4d8
FS: 0000000000000000(0000) GS:ffff9c51404c0000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000018 CR3: 000000016d1a0003 CR4: 00000000003706f0
Call Trace:
<TASK>
? __die+0x23/0x70
? page_fault_oops+0x171/0x4e0
? exc_page_fault+0x7f/0x180
? asm_exc_page_fault+0x26/0x30
? klist_add_tail+0x2d/0x90
? bus_probe_device+0x1d/0xa0
device_add+0x6cf/0x8a0
cdev_device_add+0x48/0xa0
? cdev_init+0x55/0x60
evdev_connect+0x16a/0x1d0
input_attach_handler.isra.0+0x72/0xa0
input_register_device+0x3f1/0x540
notify_handler+0xfb/0x140 [intel_vbtn]
acpi_ev_notify_dispatch+0x46/0x70
acpi_os_execute_deferred+0x17/0x30
process_one_work+0x171/0x340
worker_thread+0x27b/0x3a0
? __pfx_worker_thread+0x10/0x10
kthread+0xe5/0x120
? __pfx_kthread+0x10/0x10
ret_from_fork+0x31/0x50
? __pfx_kthread+0x10/0x10
ret_from_fork_asm+0x1b/0x30
</TASK>
Modules linked in: dummy bpf_preload hid_apple xt_conntrack xt_MASQUERADE nf_conntrack_netlink xt_addrtype br_netfilter bridge stp llc rfcomm snd_seq_dummy snd_hrtimer xt_comment nft_compat tun overlay nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink vboxnetadp(OE) vboxnetflt(OE) vboxdrv(OE) snd_hda_codec_hdmi qrtr uhid bnep snd_sof_pci_intel_skl snd_sof_intel_hda_common soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils soundwire_generic_allocation soundwire_bus snd_soc_avs sunrpc snd_soc_hda_codec iwlmvm snd_soc_skl snd_soc_hdac_hda snd_hda_ext_core snd_soc_sst_ipc snd_soc_sst_dsp snd_soc_acpi_intel_match snd_soc_acpi intel_uncore_frequency intel_uncore_frequency_common snd_ctl_led snd_soc_core snd_hda_codec_realtek
intel_tcc_cooling mac80211 x86_pkg_temp_thermal snd_hda_codec_generic intel_powerclamp snd_compress ac97_bus coretemp snd_pcm_dmaengine uvcvideo kvm_intel snd_hda_intel uvc snd_intel_dspcfg snd_intel_sdw_acpi libarc4 iTCO_wdt snd_hda_codec kvm iwlwifi binfmt_misc videobuf2_vmalloc snd_hda_core btusb intel_pmc_bxt snd_hwdep intel_rapl_msr iTCO_vendor_support btrtl snd_seq irqbypass mei_pxp videobuf2_memops btintel ee1004 dell_laptop mei_hdcp btbcm videobuf2_v4l2 snd_seq_device btmtk vfat rapl snd_pcm dell_smm_hwmon fat hid_sensor_accel_3d videobuf2_common intel_cstate hid_sensor_incl_3d dell_wmi hid_sensor_magn_3d cfg80211 processor_thermal_device_pci_legacy processor_thermal_device bluetooth processor_thermal_wt_hint snd_timer hid_sensor_rotation hid_sensor_gyro_3d processor_thermal_rfim videodev hid_sensor_trigger snd hid_sensor_iio_common processor_thermal_rapl industrialio_triggered_buffer i2c_i801 intel_rapl_common dell_smbios kfifo_buf processor_thermal_wt_req intel_uncore rfkill soundcore
industrialio mc dcdbas processor_thermal_power_floor mei_me i2c_smbus pcspkr ledtrig_audio wmi_bmof dell_wmi_descriptor mei processor_thermal_mbox idma64 intel_pch_thermal intel_xhci_usb_role_switch intel_soc_dts_iosf intel_pmc_core soc_button_array intel_vbtn intel_vsec int3403_thermal int3402_thermal pmt_telemetry int3400_thermal acpi_pad int340x_thermal_zone intel_hid acpi_thermal_rel pmt_class sparse_keymap joydev squashfs loop zram dm_crypt hid_sensor_hub intel_ishtp_hid i915 i2c_algo_bit crct10dif_pclmul crc32_pclmul crc32c_intel drm_buddy polyval_clmulni ttm polyval_generic ax88179_178a usbnet drm_display_helper ghash_clmulni_intel sha512_ssse3 intel_ish_ipc sha256_ssse3 mii intel_ishtp sha1_ssse3 cec i2c_hid_acpi i2c_hid video wmi pinctrl_sunrisepoint hid_multitouch serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000018