Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13

linux-mm.kvack.org archive mirror
 help / color / mirror / Atom feed

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
       [not found] <2f681f48-00f5-4e09-8431-2b3dbfaa881e@heusel.eu>
@ 2025-02-07  9:34 ` Miklos Szeredi
  2025-02-07  9:45   ` Matthew Wilcox
                     ` (3 more replies)
  0 siblings, 4 replies; 34+ messages in thread
From: Miklos Szeredi @ 2025-02-07  9:34 UTC (permalink / raw)
  To: Christian Heusel
  Cc: Josef Bacik, Miklos Szeredi, regressions, linux-kernel,
	linux-fsdevel, Joanne Koong, Matthew Wilcox, linux-mm

[Adding Joanne, Willy and linux-mm].


On Thu, 6 Feb 2025 at 11:54, Christian Heusel <christian@heusel.eu> wrote:
>
> Hello everyone,
>
> we have recently received [a report][0] on the Arch Linux Gitlab about
> multiple users having system crashes when using Flatpak programs and
> related FUSE errors in their dmesg logs.
>
> We have subsequently bisected the issue within the mainline kernel tree
> to the following commit:
>
>     3eab9d7bc2f4 ("fuse: convert readahead to use folios")
>
> The error is still present in the latest mainline release 6.14-rc1 and
> sadly testing a revert is not trivially possible due to conflicts.
>
> I have attached a dmesg output from a boot where the failure occurs and
> I'm happy to test any debug patches with the help of the other reporters
> on our GitLab.
>
> We also noticed that there already was [a discussion][1] about a related
> commit but the fix for the issue back then 7a4f54187373 ("fuse: fix
> direct io folio offset and length calculation") was already included in
> the revisions we have tested.
>
> Cheers,
> Christian
>
> [0]: https://gitlab.archlinux.org/archlinux/packaging/packages/linux/-/issues/110
> [1]: https://lore.kernel.org/all/p3iss6hssbvtdutnwmuddvdadubrhfkdoosgmbewvo674f7f3y@cwnwffjqltzw/

Thanks for the report.

Seems like page allocation gets an inconsistent page (mapcount != -1)
in the report below.

Any ideas why this could be happening?

Thanks,
Miklos

> Feb 06 08:54:47 archvm kernel: BUG: Bad page state in process rnote  pfn:67587
> Feb 06 08:54:47 archvm kernel: page: refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x67587
> Feb 06 08:54:47 archvm kernel: flags: 0xfffffc8000020(lru|node=0|zone=1|lastcpupid=0x1fffff)
> Feb 06 08:54:47 archvm kernel: raw: 000fffffc8000020 dead000000000100 dead000000000122 0000000000000000
> Feb 06 08:54:47 archvm kernel: raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000
> Feb 06 08:54:47 archvm kernel: page dumped because: PAGE_FLAGS_CHECK_AT_PREP flag(s) set
> Feb 06 08:54:47 archvm kernel: Modules linked in: snd_seq_dummy snd_hrtimer snd_seq snd_seq_device rfkill vfat fat intel_rapl_msr intel_rapl_common kvm_amd ccp snd_hda_codec_hdmi snd_hda_codec_generic snd_hda_intel snd_intel_dspcfg kvm snd_intel_sdw_acpi snd_hda_codec polyval_clmulni snd_hda_core polyval_generic ghash_clmulni_intel snd_hwdep iTCO_wdt sha512_ssse3 intel_pmc_bxt sha256_ssse3 snd_pcm joydev iTCO_vendor_support sha1_ssse3 snd_timer aesni_intel snd crypto_simd i2c_i801 psmouse cryptd pcspkr i2c_smbus soundcore lpc_ich i2c_mux mousedev mac_hid crypto_user loop dm_mod nfnetlink vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock vmw_vmci qemu_fw_cfg ip_tables x_tables ext4 crc16 mbcache jbd2 nouveau drm_ttm_helper ttm video gpu_sched i2c_algo_bit drm_gpuvm serio_raw drm_exec atkbd mxm_wmi wmi libps2 vivaldi_fmap drm_display_helper virtio_net net_failover cec intel_agp virtio_input virtio_rng virtio_console failover virtio_blk i8042 intel_gtt serio
> Feb 06 08:54:47 archvm kernel: CPU: 0 UID: 1000 PID: 1962 Comm: rnote Not tainted 6.14.0-rc1-1-mainline #1 715c0460cf5d3cc18e3178ef3209cee42e97ae1c
> Feb 06 08:54:47 archvm kernel: Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS unknown 02/02/2022
> Feb 06 08:54:47 archvm kernel: Call Trace:
> Feb 06 08:54:47 archvm kernel:
> Feb 06 08:54:47 archvm kernel:  dump_stack_lvl+0x5d/0x80
> Feb 06 08:54:47 archvm kernel:  bad_page.cold+0x7a/0x91
> Feb 06 08:54:47 archvm kernel:  __rmqueue_pcplist+0x200/0xc50
> Feb 06 08:54:47 archvm kernel:  get_page_from_freelist+0x2ae/0x1740
> Feb 06 08:54:47 archvm kernel:  ? srso_return_thunk+0x5/0x5f
> Feb 06 08:54:47 archvm kernel:  ? __pm_runtime_suspend+0x69/0xc0
> Feb 06 08:54:47 archvm kernel:  ? srso_return_thunk+0x5/0x5f
> Feb 06 08:54:47 archvm kernel:  ? __seccomp_filter+0x303/0x520
> Feb 06 08:54:47 archvm kernel:  ? srso_return_thunk+0x5/0x5f
> Feb 06 08:54:47 archvm kernel:  __alloc_frozen_pages_noprof+0x184/0x330
> Feb 06 08:54:47 archvm kernel:  alloc_pages_mpol+0x7d/0x160
> Feb 06 08:54:47 archvm kernel:  folio_alloc_mpol_noprof+0x14/0x40
> Feb 06 08:54:47 archvm kernel:  vma_alloc_folio_noprof+0x69/0xb0
> Feb 06 08:54:47 archvm kernel:  do_anonymous_page+0x32a/0x8b0
> Feb 06 08:54:47 archvm kernel:  ? srso_return_thunk+0x5/0x5f
> Feb 06 08:54:47 archvm kernel:  ? ___pte_offset_map+0x1b/0x180
> Feb 06 08:54:47 archvm kernel:  __handle_mm_fault+0xb5e/0xfe0
> Feb 06 08:54:47 archvm kernel:  handle_mm_fault+0xe2/0x2c0
> Feb 06 08:54:47 archvm kernel:  do_user_addr_fault+0x217/0x620
> Feb 06 08:54:47 archvm kernel:  exc_page_fault+0x81/0x1b0
> Feb 06 08:54:47 archvm kernel:  asm_exc_page_fault+0x26/0x30
> Feb 06 08:54:47 archvm kernel: RIP: 0033:0x7fcfc31c8cf9
> Feb 06 08:54:47 archvm kernel: Code: 34 19 49 39 d4 49 89 74 24 60 0f 95 c2 48 29 d8 48 83 c1 10 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 51 f8 <48> 89 46 08 e9 22 ff ff ff 48 8d 3d 07 ed 10 00 e8 62 c3 ff ff 48
> Feb 06 08:54:47 archvm kernel: RSP: 002b:00007fff1f931850 EFLAGS: 00010206
> Feb 06 08:54:47 archvm kernel: RAX: 000000000000bee1 RBX: 0000000000000140 RCX: 000056541d491ff0
> Feb 06 08:54:47 archvm kernel: RDX: 0000000000000141 RSI: 000056541d492120 RDI: 0000000000000000
> Feb 06 08:54:47 archvm kernel: RBP: 00007fff1f9318a0 R08: 0000000000000140 R09: 0000000000000001
> Feb 06 08:54:47 archvm kernel: R10: 0000000000000004 R11: 0000565419567488 R12: 00007fcfc3308ac0
> Feb 06 08:54:47 archvm kernel: R13: 0000000000000130 R14: 00007fcfc3308b20 R15: 0000000000000140
> Feb 06 08:54:47 archvm kernel:
> Feb 06 08:54:47 archvm kernel: Disabling lock debugging due to kernel taint
> Feb 06 08:54:47 archvm kernel: Oops: general protection fault, probably for non-canonical address 0xdead000000000122: 0000 [#1] PREEMPT SMP NOPTI
> Feb 06 08:54:47 archvm kernel: CPU: 0 UID: 1000 PID: 1962 Comm: rnote Tainted: G    B              6.14.0-rc1-1-mainline #1 715c0460cf5d3cc18e3178ef3209cee42e97ae1c
> Feb 06 08:54:47 archvm kernel: Tainted: [B]=BAD_PAGE
> Feb 06 08:54:47 archvm kernel: Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS unknown 02/02/2022
> Feb 06 08:54:47 archvm kernel: RIP: 0010:__rmqueue_pcplist+0xb0/0xc50
> Feb 06 08:54:47 archvm kernel: Code: 00 4c 01 f0 48 89 7c 24 30 48 89 44 24 20 49 8b 04 24 49 39 c4 0f 84 6c 01 00 00 49 8b 14 24 48 8b 42 08 48 8b 0a 48 8d 5a f8 <48> 3b 10 0f 85 8d 0b 00 00 48 3b 51 08 0f 85 d5 0f be ff 48 89 41
> Feb 06 08:54:47 archvm kernel: RSP: 0000:ffffab3b84a2faa0 EFLAGS: 00010297
> Feb 06 08:54:47 archvm kernel: RAX: dead000000000122 RBX: ffffdd38819d61c0 RCX: dead000000000100
> Feb 06 08:54:47 archvm kernel: RDX: ffffdd38819d61c8 RSI: ffff9b31fd2218c0 RDI: ffff9b31fd2218c0
> Feb 06 08:54:47 archvm kernel: RBP: 0000000000000010 R08: 0000000000000000 R09: ffffab3b84a2f920
> Feb 06 08:54:47 archvm kernel: R10: ffffffffbdeb44a8 R11: 0000000000000003 R12: ffff9b31fd23d4b0
> Feb 06 08:54:47 archvm kernel: R13: 0000000000000000 R14: ffff9b31fef21980 R15: ffff9b31fd23d480
> Feb 06 08:54:47 archvm kernel: FS:  00007fcfbead5140(0000) GS:ffff9b31fd200000(0000) knlGS:0000000000000000
> Feb 06 08:54:47 archvm kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 08:54:47 archvm kernel: CR2: 000056541d492128 CR3: 000000001ed94000 CR4: 00000000003506f0
> Feb 06 08:54:47 archvm kernel: Call Trace:
> Feb 06 08:54:47 archvm kernel:
> Feb 06 08:54:47 archvm kernel:  ? __die_body.cold+0x19/0x27
> Feb 06 08:54:47 archvm kernel:  ? die_addr+0x3c/0x60
> Feb 06 08:54:47 archvm kernel:  ? exc_general_protection+0x17d/0x400
> Feb 06 08:54:47 archvm kernel:  ? asm_exc_general_protection+0x26/0x30
> Feb 06 08:54:47 archvm kernel:  ? __rmqueue_pcplist+0xb0/0xc50
> Feb 06 08:54:47 archvm kernel:  get_page_from_freelist+0x2ae/0x1740
> Feb 06 08:54:47 archvm kernel:  ? srso_return_thunk+0x5/0x5f
> Feb 06 08:54:47 archvm kernel:  ? __pm_runtime_suspend+0x69/0xc0
> Feb 06 08:54:47 archvm kernel:  ? srso_return_thunk+0x5/0x5f
> Feb 06 08:54:47 archvm kernel:  ? __seccomp_filter+0x303/0x520
> Feb 06 08:54:47 archvm kernel:  ? srso_return_thunk+0x5/0x5f
> Feb 06 08:54:47 archvm kernel:  __alloc_frozen_pages_noprof+0x184/0x330
> Feb 06 08:54:47 archvm kernel:  alloc_pages_mpol+0x7d/0x160
> Feb 06 08:54:47 archvm kernel:  folio_alloc_mpol_noprof+0x14/0x40
> Feb 06 08:54:47 archvm kernel:  vma_alloc_folio_noprof+0x69/0xb0
> Feb 06 08:54:47 archvm kernel:  do_anonymous_page+0x32a/0x8b0
> Feb 06 08:54:47 archvm kernel:  ? srso_return_thunk+0x5/0x5f
> Feb 06 08:54:47 archvm kernel:  ? ___pte_offset_map+0x1b/0x180
> Feb 06 08:54:47 archvm kernel:  __handle_mm_fault+0xb5e/0xfe0
> Feb 06 08:54:47 archvm kernel:  handle_mm_fault+0xe2/0x2c0
> Feb 06 08:54:47 archvm kernel:  do_user_addr_fault+0x217/0x620
> Feb 06 08:54:47 archvm kernel:  exc_page_fault+0x81/0x1b0
> Feb 06 08:54:47 archvm kernel:  asm_exc_page_fault+0x26/0x30
> Feb 06 08:54:47 archvm kernel: RIP: 0033:0x7fcfc31c8cf9
> Feb 06 08:54:47 archvm kernel: Code: 34 19 49 39 d4 49 89 74 24 60 0f 95 c2 48 29 d8 48 83 c1 10 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 51 f8 <48> 89 46 08 e9 22 ff ff ff 48 8d 3d 07 ed 10 00 e8 62 c3 ff ff 48
> Feb 06 08:54:47 archvm kernel: RSP: 002b:00007fff1f931850 EFLAGS: 00010206
> Feb 06 08:54:47 archvm kernel: RAX: 000000000000bee1 RBX: 0000000000000140 RCX: 000056541d491ff0
> Feb 06 08:54:47 archvm kernel: RDX: 0000000000000141 RSI: 000056541d492120 RDI: 0000000000000000
> Feb 06 08:54:47 archvm kernel: RBP: 00007fff1f9318a0 R08: 0000000000000140 R09: 0000000000000001
> Feb 06 08:54:47 archvm kernel: R10: 0000000000000004 R11: 0000565419567488 R12: 00007fcfc3308ac0
> Feb 06 08:54:47 archvm kernel: R13: 0000000000000130 R14: 00007fcfc3308b20 R15: 0000000000000140
> Feb 06 08:54:47 archvm kernel:
> Feb 06 08:54:47 archvm kernel: Modules linked in: snd_seq_dummy snd_hrtimer snd_seq snd_seq_device rfkill vfat fat intel_rapl_msr intel_rapl_common kvm_amd ccp snd_hda_codec_hdmi snd_hda_codec_generic snd_hda_intel snd_intel_dspcfg kvm snd_intel_sdw_acpi snd_hda_codec polyval_clmulni snd_hda_core polyval_generic ghash_clmulni_intel snd_hwdep iTCO_wdt sha512_ssse3 intel_pmc_bxt sha256_ssse3 snd_pcm joydev iTCO_vendor_support sha1_ssse3 snd_timer aesni_intel snd crypto_simd i2c_i801 psmouse cryptd pcspkr i2c_smbus soundcore lpc_ich i2c_mux mousedev mac_hid crypto_user loop dm_mod nfnetlink vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock vmw_vmci qemu_fw_cfg ip_tables x_tables ext4 crc16 mbcache jbd2 nouveau drm_ttm_helper ttm video gpu_sched i2c_algo_bit drm_gpuvm serio_raw drm_exec atkbd mxm_wmi wmi libps2 vivaldi_fmap drm_display_helper virtio_net net_failover cec intel_agp virtio_input virtio_rng virtio_console failover virtio_blk i8042 intel_gtt serio
> Feb 06 08:54:47 archvm kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 08:54:47 archvm kernel: RIP: 0010:__rmqueue_pcplist+0xb0/0xc50
> Feb 06 08:54:47 archvm kernel: Code: 00 4c 01 f0 48 89 7c 24 30 48 89 44 24 20 49 8b 04 24 49 39 c4 0f 84 6c 01 00 00 49 8b 14 24 48 8b 42 08 48 8b 0a 48 8d 5a f8 <48> 3b 10 0f 85 8d 0b 00 00 48 3b 51 08 0f 85 d5 0f be ff 48 89 41
> Feb 06 08:54:47 archvm kernel: RSP: 0000:ffffab3b84a2faa0 EFLAGS: 00010297
> Feb 06 08:54:47 archvm kernel: RAX: dead000000000122 RBX: ffffdd38819d61c0 RCX: dead000000000100
> Feb 06 08:54:47 archvm kernel: RDX: ffffdd38819d61c8 RSI: ffff9b31fd2218c0 RDI: ffff9b31fd2218c0
> Feb 06 08:54:47 archvm kernel: RBP: 0000000000000010 R08: 0000000000000000 R09: ffffab3b84a2f920
> Feb 06 08:54:47 archvm kernel: R10: ffffffffbdeb44a8 R11: 0000000000000003 R12: ffff9b31fd23d4b0
> Feb 06 08:54:47 archvm kernel: R13: 0000000000000000 R14: ffff9b31fef21980 R15: ffff9b31fd23d480
> Feb 06 08:54:47 archvm kernel: FS:  00007fcfbead5140(0000) GS:ffff9b31fd200000(0000) knlGS:0000000000000000
> Feb 06 08:54:47 archvm kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 08:54:47 archvm kernel: CR2: 000056541d492128 CR3: 000000001ed94000 CR4: 00000000003506f0
> Feb 06 08:54:47 archvm kernel: note: rnote[1962] exited with preempt_count 2
> Feb 06 08:54:50 archvm geoclue[844]: Service not used for 60 seconds. Shutting down..
> Feb 06 08:55:01 archvm systemd[990]: Starting Virtual filesystem metadata service...
> Feb 06 08:55:14 archvm kernel: watchdog: BUG: soft lockup - CPU#0 stuck for 26s! [kworker/0:3:370]
> Feb 06 08:55:14 archvm kernel: CPU#0 Utilization every 4s during lockup:
> Feb 06 08:55:14 archvm kernel:         #1: 100% system,          0% softirq,          1% hardirq,          0% idle
> Feb 06 08:55:14 archvm kernel:         #2: 100% system,          0% softirq,          1% hardirq,          0% idle
> Feb 06 08:55:14 archvm kernel:         #3: 100% system,          0% softirq,          1% hardirq,          0% idle
> Feb 06 08:55:14 archvm kernel:         #4: 100% system,          0% softirq,          1% hardirq,          0% idle
> Feb 06 08:55:14 archvm kernel:         #5: 100% system,          0% softirq,          1% hardirq,          0% idle
> Feb 06 08:55:14 archvm kernel: Modules linked in: snd_seq_dummy snd_hrtimer snd_seq snd_seq_device rfkill vfat fat intel_rapl_msr intel_rapl_common kvm_amd ccp snd_hda_codec_hdmi snd_hda_codec_generic snd_hda_intel snd_intel_dspcfg kvm snd_intel_sdw_acpi snd_hda_codec polyval_clmulni snd_hda_core polyval_generic ghash_clmulni_intel snd_hwdep iTCO_wdt sha512_ssse3 intel_pmc_bxt sha256_ssse3 snd_pcm joydev iTCO_vendor_support sha1_ssse3 snd_timer aesni_intel snd crypto_simd i2c_i801 psmouse cryptd pcspkr i2c_smbus soundcore lpc_ich i2c_mux mousedev mac_hid crypto_user loop dm_mod nfnetlink vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock vmw_vmci qemu_fw_cfg ip_tables x_tables ext4 crc16 mbcache jbd2 nouveau drm_ttm_helper ttm video gpu_sched i2c_algo_bit drm_gpuvm serio_raw drm_exec atkbd mxm_wmi wmi libps2 vivaldi_fmap drm_display_helper virtio_net net_failover cec intel_agp virtio_input virtio_rng virtio_console failover virtio_blk i8042 intel_gtt serio
> Feb 06 08:55:14 archvm kernel: CPU: 0 UID: 0 PID: 370 Comm: kworker/0:3 Tainted: G    B D            6.14.0-rc1-1-mainline #1 715c0460cf5d3cc18e3178ef3209cee42e97ae1c
> Feb 06 08:55:14 archvm kernel: Tainted: [B]=BAD_PAGE, [D]=DIE
> Feb 06 08:55:14 archvm kernel: Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS unknown 02/02/2022
> Feb 06 08:55:14 archvm kernel: Workqueue: mm_percpu_wq vmstat_update
> Feb 06 08:55:14 archvm kernel: RIP: 0010:__pv_queued_spin_lock_slowpath+0x267/0x490
> Feb 06 08:55:14 archvm kernel: Code: 14 0f 85 5c fe ff ff 41 c6 45 00 03 4c 89 fe 4c 89 ef e8 8c 2d 2e ff e9 47 fe ff ff f3 90 4d 8b 3e 4d 85 ff 74 f6 eb c1 f3 90 <83> ea 01 75 8a 48 83 3c 24 00 41 c6 45 01 00 0f 84 de 01 00 00 41
> Feb 06 08:55:14 archvm kernel: RSP: 0018:ffffab3b80907c98 EFLAGS: 00000206
> Feb 06 08:55:14 archvm kernel: RAX: 0000000000000003 RBX: 0000000000040000 RCX: 0000000000000008
> Feb 06 08:55:14 archvm kernel: RDX: 00000000000053b7 RSI: 0000000000000003 RDI: ffff9b31fd23d480
> Feb 06 08:55:14 archvm kernel: RBP: 0000000000000001 R08: ffff9b31fd237bc0 R09: 0000000000000000
> Feb 06 08:55:14 archvm kernel: R10: 0000000000000000 R11: fefefefefefefeff R12: 0000000000000100
> Feb 06 08:55:14 archvm kernel: R13: ffff9b31fd23d480 R14: ffff9b31fd237bc0 R15: 0000000000000000
> Feb 06 08:55:14 archvm kernel: FS:  0000000000000000(0000) GS:ffff9b31fd200000(0000) knlGS:0000000000000000
> Feb 06 08:55:14 archvm kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 08:55:14 archvm kernel: CR2: 00007fa8ba718100 CR3: 0000000016022000 CR4: 00000000003506f0
> Feb 06 08:55:14 archvm kernel: Call Trace:
> Feb 06 08:55:14 archvm kernel:
> Feb 06 08:55:14 archvm kernel:  ? watchdog_timer_fn.cold+0x226/0x22b
> Feb 06 08:55:14 archvm kernel:  ? srso_return_thunk+0x5/0x5f
> Feb 06 08:55:14 archvm kernel:  ? __pfx_watchdog_timer_fn+0x10/0x10
> Feb 06 08:55:14 archvm kernel:  ? __hrtimer_run_queues+0x132/0x2a0
> Feb 06 08:55:14 archvm kernel:  ? hrtimer_interrupt+0xff/0x230
> Feb 06 08:55:14 archvm kernel:  ? __sysvec_apic_timer_interrupt+0x55/0x100
> Feb 06 08:55:14 archvm kernel:  ? sysvec_apic_timer_interrupt+0x6c/0x90
> Feb 06 08:55:14 archvm kernel:
> Feb 06 08:55:14 archvm kernel:
> Feb 06 08:55:14 archvm kernel:  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
> Feb 06 08:55:14 archvm kernel:  ? __pv_queued_spin_lock_slowpath+0x267/0x490
> Feb 06 08:55:14 archvm kernel:  ? __pv_queued_spin_lock_slowpath+0x2be/0x490
> Feb 06 08:55:14 archvm kernel:  _raw_spin_lock+0x29/0x30
> Feb 06 08:55:14 archvm kernel:  decay_pcp_high+0x63/0x90
> Feb 06 08:55:14 archvm kernel:  refresh_cpu_vm_stats+0xf7/0x240
> Feb 06 08:55:14 archvm kernel:  vmstat_update+0x13/0x50
> Feb 06 08:55:14 archvm kernel:  process_one_work+0x17e/0x330
> Feb 06 08:55:14 archvm kernel:  worker_thread+0x2ce/0x3f0
> Feb 06 08:55:14 archvm kernel:  ? __pfx_worker_thread+0x10/0x10
> Feb 06 08:55:14 archvm kernel:  kthread+0xef/0x230
> Feb 06 08:55:14 archvm kernel:  ? __pfx_kthread+0x10/0x10
> Feb 06 08:55:14 archvm kernel:  ret_from_fork+0x34/0x50
> Feb 06 08:55:14 archvm kernel:  ? __pfx_kthread+0x10/0x10
> Feb 06 08:55:14 archvm kernel:  ret_from_fork_asm+0x1a/0x30
> Feb 06 08:55:14 archvm kernel:


^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-07  9:34 ` [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13 Miklos Szeredi
@ 2025-02-07  9:45   ` Matthew Wilcox
  2025-02-07 10:25     ` Vlastimil Babka
  2025-02-07 11:00   ` Mantas Mikulėnas
                     ` (2 subsequent siblings)
  3 siblings, 1 reply; 34+ messages in thread
From: Matthew Wilcox @ 2025-02-07  9:45 UTC (permalink / raw)
  To: Miklos Szeredi
  Cc: Christian Heusel, Josef Bacik, Miklos Szeredi, regressions,
	linux-kernel, linux-fsdevel, Joanne Koong, linux-mm

On Fri, Feb 07, 2025 at 10:34:52AM +0100, Miklos Szeredi wrote:
> Seems like page allocation gets an inconsistent page (mapcount != -1)
> in the report below.

I think you're misreading the report.  _mapcount is -1.  Which means
mapcount is 0.

> > Feb 06 08:54:47 archvm kernel: BUG: Bad page state in process rnote  pfn:67587
> > Feb 06 08:54:47 archvm kernel: page: refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x67587
> > Feb 06 08:54:47 archvm kernel: flags: 0xfffffc8000020(lru|node=0|zone=1|lastcpupid=0x1fffff)
> > Feb 06 08:54:47 archvm kernel: raw: 000fffffc8000020 dead000000000100 dead000000000122 0000000000000000

flags lru.next lru.prev mapping

> > Feb 06 08:54:47 archvm kernel: raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000

index private mapcount:refcount memcg_data

> > Feb 06 08:54:47 archvm kernel: page dumped because: PAGE_FLAGS_CHECK_AT_PREP flag(s) set

So the problem is the lru flag is set.

> > Feb 06 08:54:47 archvm kernel:  dump_stack_lvl+0x5d/0x80
> > Feb 06 08:54:47 archvm kernel:  bad_page.cold+0x7a/0x91
> > Feb 06 08:54:47 archvm kernel:  __rmqueue_pcplist+0x200/0xc50
> > Feb 06 08:54:47 archvm kernel:  get_page_from_freelist+0x2ae/0x1740
> > Feb 06 08:54:47 archvm kernel:  __alloc_frozen_pages_noprof+0x184/0x330
> > Feb 06 08:54:47 archvm kernel:  alloc_pages_mpol+0x7d/0x160
> > Feb 06 08:54:47 archvm kernel:  folio_alloc_mpol_noprof+0x14/0x40
> > Feb 06 08:54:47 archvm kernel:  vma_alloc_folio_noprof+0x69/0xb0
> > Feb 06 08:54:47 archvm kernel:  do_anonymous_page+0x32a/0x8b0

It's very weird, because PG_lru is also in PAGE_FLAGS_CHECK_AT_FREE.
So it should already have been checked and not be set.  I'm on holiday
until Monday, so I'm not going to dive into this any further.



^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-07  9:45   ` Matthew Wilcox
@ 2025-02-07 10:25     ` Vlastimil Babka
  2025-02-07 10:43       ` Miklos Szeredi
  0 siblings, 1 reply; 34+ messages in thread
From: Vlastimil Babka @ 2025-02-07 10:25 UTC (permalink / raw)
  To: Matthew Wilcox, Miklos Szeredi
  Cc: Christian Heusel, Josef Bacik, Miklos Szeredi, regressions,
	linux-kernel, linux-fsdevel, Joanne Koong, linux-mm

On 2/7/25 10:45, Matthew Wilcox wrote:
> On Fri, Feb 07, 2025 at 10:34:52AM +0100, Miklos Szeredi wrote:
>> Seems like page allocation gets an inconsistent page (mapcount != -1)
>> in the report below.
> 
> I think you're misreading the report.  _mapcount is -1.  Which means
> mapcount is 0.
> 
>> > Feb 06 08:54:47 archvm kernel: BUG: Bad page state in process rnote  pfn:67587
>> > Feb 06 08:54:47 archvm kernel: page: refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x67587

refcount of -1 doesn't look healthy too, should be 0 at this point?

>> > Feb 06 08:54:47 archvm kernel: flags: 0xfffffc8000020(lru|node=0|zone=1|lastcpupid=0x1fffff)
>> > Feb 06 08:54:47 archvm kernel: raw: 000fffffc8000020 dead000000000100 dead000000000122 0000000000000000
> 
> flags lru.next lru.prev mapping
> 
>> > Feb 06 08:54:47 archvm kernel: raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000
> 
> index private mapcount:refcount memcg_data
> 
>> > Feb 06 08:54:47 archvm kernel: page dumped because: PAGE_FLAGS_CHECK_AT_PREP flag(s) set
> 
> So the problem is the lru flag is set.
> 
>> > Feb 06 08:54:47 archvm kernel:  dump_stack_lvl+0x5d/0x80
>> > Feb 06 08:54:47 archvm kernel:  bad_page.cold+0x7a/0x91
>> > Feb 06 08:54:47 archvm kernel:  __rmqueue_pcplist+0x200/0xc50
>> > Feb 06 08:54:47 archvm kernel:  get_page_from_freelist+0x2ae/0x1740
>> > Feb 06 08:54:47 archvm kernel:  __alloc_frozen_pages_noprof+0x184/0x330
>> > Feb 06 08:54:47 archvm kernel:  alloc_pages_mpol+0x7d/0x160
>> > Feb 06 08:54:47 archvm kernel:  folio_alloc_mpol_noprof+0x14/0x40
>> > Feb 06 08:54:47 archvm kernel:  vma_alloc_folio_noprof+0x69/0xb0
>> > Feb 06 08:54:47 archvm kernel:  do_anonymous_page+0x32a/0x8b0
> 
> It's very weird, because PG_lru is also in PAGE_FLAGS_CHECK_AT_FREE.
> So it should already have been checked and not be set.  I'm on holiday

Could be a use-after free of the page, which sets PG_lru again. The list
corruptions in __rmqueue_pcplist also suggest some page manipulation after
free. The -1 refcount suggests somebody was using the page while it was
freed due to refcount dropping to 0 and then did a put_page()?

> until Monday, so I'm not going to dive into this any further.





^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-07 10:25     ` Vlastimil Babka
@ 2025-02-07 10:43       ` Miklos Szeredi
  2025-02-07 10:55         ` Vlastimil Babka
  0 siblings, 1 reply; 34+ messages in thread
From: Miklos Szeredi @ 2025-02-07 10:43 UTC (permalink / raw)
  To: Vlastimil Babka
  Cc: Matthew Wilcox, Christian Heusel, Josef Bacik, Miklos Szeredi,
	regressions, linux-kernel, linux-fsdevel, Joanne Koong, linux-mm

On Fri, 7 Feb 2025 at 11:25, Vlastimil Babka <vbabka@suse.cz> wrote:

> Could be a use-after free of the page, which sets PG_lru again. The list
> corruptions in __rmqueue_pcplist also suggest some page manipulation after
> free. The -1 refcount suggests somebody was using the page while it was
> freed due to refcount dropping to 0 and then did a put_page()?

Can you suggest any debug options that could help pinpoint the offender?

Thanks,
Miklos


^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-07 10:43       ` Miklos Szeredi
@ 2025-02-07 10:55         ` Vlastimil Babka
  2025-02-07 11:16           ` Bernd Schubert
  0 siblings, 1 reply; 34+ messages in thread
From: Vlastimil Babka @ 2025-02-07 10:55 UTC (permalink / raw)
  To: Miklos Szeredi
  Cc: Matthew Wilcox, Christian Heusel, Josef Bacik, Miklos Szeredi,
	regressions, linux-kernel, linux-fsdevel, Joanne Koong, linux-mm

On 2/7/25 11:43, Miklos Szeredi wrote:
> On Fri, 7 Feb 2025 at 11:25, Vlastimil Babka <vbabka@suse.cz> wrote:
> 
>> Could be a use-after free of the page, which sets PG_lru again. The list
>> corruptions in __rmqueue_pcplist also suggest some page manipulation after
>> free. The -1 refcount suggests somebody was using the page while it was
>> freed due to refcount dropping to 0 and then did a put_page()?
> 
> Can you suggest any debug options that could help pinpoint the offender?

CONFIG_DEBUG_VM enables a check in put_page_testzero() that would catch the
underflow (modulo a tiny race window where it wouldn't). Worth trying.

> Thanks,
> Miklos



^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-07 10:55         ` Vlastimil Babka
@ 2025-02-07 11:16           ` Bernd Schubert
  2025-02-07 18:21             ` Bernd Schubert
                               ` (2 more replies)
  0 siblings, 3 replies; 34+ messages in thread
From: Bernd Schubert @ 2025-02-07 11:16 UTC (permalink / raw)
  To: Vlastimil Babka, Miklos Szeredi
  Cc: Matthew Wilcox, Christian Heusel, Josef Bacik, Miklos Szeredi,
	regressions, linux-kernel, linux-fsdevel, Joanne Koong, linux-mm,
	Mantas Mikulėnas



On 2/7/25 11:55, Vlastimil Babka wrote:
> On 2/7/25 11:43, Miklos Szeredi wrote:
>> On Fri, 7 Feb 2025 at 11:25, Vlastimil Babka <vbabka@suse.cz> wrote:
>>
>>> Could be a use-after free of the page, which sets PG_lru again. The list
>>> corruptions in __rmqueue_pcplist also suggest some page manipulation after
>>> free. The -1 refcount suggests somebody was using the page while it was
>>> freed due to refcount dropping to 0 and then did a put_page()?
>>
>> Can you suggest any debug options that could help pinpoint the offender?
> 
> CONFIG_DEBUG_VM enables a check in put_page_testzero() that would catch the
> underflow (modulo a tiny race window where it wouldn't). Worth trying.

I typically run all of my tests with these options enabled

https://github.com/bsbernd/tiny-qemu-virtio-kernel-config


If Christian or Mantas could tell me what I need to install and run, I
could probably quickly give it a try.



Thanks,
Bernd


^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-07 11:16           ` Bernd Schubert
@ 2025-02-07 18:21             ` Bernd Schubert
  2025-02-07 18:40             ` Joanne Koong
  2025-02-07 20:35             ` Mantas Mikulėnas
  2 siblings, 0 replies; 34+ messages in thread
From: Bernd Schubert @ 2025-02-07 18:21 UTC (permalink / raw)
  To: Vlastimil Babka, Miklos Szeredi
  Cc: Matthew Wilcox, Christian Heusel, Josef Bacik, Miklos Szeredi,
	regressions, linux-kernel, linux-fsdevel, Joanne Koong, linux-mm,
	Mantas Mikulėnas



On 2/7/25 12:16, Bernd Schubert wrote:
> 
> 
> On 2/7/25 11:55, Vlastimil Babka wrote:
>> On 2/7/25 11:43, Miklos Szeredi wrote:
>>> On Fri, 7 Feb 2025 at 11:25, Vlastimil Babka <vbabka@suse.cz> wrote:
>>>
>>>> Could be a use-after free of the page, which sets PG_lru again. The list
>>>> corruptions in __rmqueue_pcplist also suggest some page manipulation after
>>>> free. The -1 refcount suggests somebody was using the page while it was
>>>> freed due to refcount dropping to 0 and then did a put_page()?
>>>
>>> Can you suggest any debug options that could help pinpoint the offender?
>>
>> CONFIG_DEBUG_VM enables a check in put_page_testzero() that would catch the
>> underflow (modulo a tiny race window where it wouldn't). Worth trying.
> 
> I typically run all of my tests with these options enabled
> 
> https://github.com/bsbernd/tiny-qemu-virtio-kernel-config
> 
> 
> If Christian or Mantas could tell me what I need to install and run, I
> could probably quickly give it a try.

Got firefox through flatpak working with 6.13 + patches, 
but the flatpak fuse mount is basically empty and I didn't observe
any issue. Would be great if you could post, what exactly triggers
it.

Thanks,
Bernd


^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-07 11:16           ` Bernd Schubert
  2025-02-07 18:21             ` Bernd Schubert
@ 2025-02-07 18:40             ` Joanne Koong
  2025-02-08  0:02               ` Bernd Schubert
  2025-02-07 20:35             ` Mantas Mikulėnas
  2 siblings, 1 reply; 34+ messages in thread
From: Joanne Koong @ 2025-02-07 18:40 UTC (permalink / raw)
  To: Bernd Schubert
  Cc: Vlastimil Babka, Miklos Szeredi, Matthew Wilcox,
	Christian Heusel, Josef Bacik, Miklos Szeredi, regressions,
	linux-kernel, linux-fsdevel, linux-mm, Mantas Mikulėnas

On Fri, Feb 7, 2025 at 3:16 AM Bernd Schubert <bernd@bsbernd.com> wrote:
>
>
>
> On 2/7/25 11:55, Vlastimil Babka wrote:
> > On 2/7/25 11:43, Miklos Szeredi wrote:
> >> On Fri, 7 Feb 2025 at 11:25, Vlastimil Babka <vbabka@suse.cz> wrote:
> >>
> >>> Could be a use-after free of the page, which sets PG_lru again. The list
> >>> corruptions in __rmqueue_pcplist also suggest some page manipulation after
> >>> free. The -1 refcount suggests somebody was using the page while it was
> >>> freed due to refcount dropping to 0 and then did a put_page()?
> >>
> >> Can you suggest any debug options that could help pinpoint the offender?
> >
> > CONFIG_DEBUG_VM enables a check in put_page_testzero() that would catch the
> > underflow (modulo a tiny race window where it wouldn't). Worth trying.
>
> I typically run all of my tests with these options enabled
>
> https://github.com/bsbernd/tiny-qemu-virtio-kernel-config
>
>
> If Christian or Mantas could tell me what I need to install and run, I
> could probably quickly give it a try.
>

Copying/pasting from [1], these are the repro steps that's listed:

1) Install Bottles: flatpak install flathub com.usebottles.bottles
2) Open Bottles and create a bottle
3) In a terminal open the kernel log using dmesg/journalctl in follow mode
4) Once the bottle has been initialized, open it, select "Run
Executable" and point it at any Windows executable
Note that at that same moment a BUG: Bad page state in process fuse
mainloop error message will appear and the system will become
unresponsive (keyboard and mouse might still work but you'll be unable
to actually do anything, open or close any application, or even reboot
or shutdown; you are able to ping the device and initiate an SSH
connection but all it does is just display the banner)


Thanks,
Joanne

[1] https://gitlab.archlinux.org/archlinux/packaging/packages/linux/-/issues/110

>
>
> Thanks,
> Bernd


^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-07 18:40             ` Joanne Koong
@ 2025-02-08  0:02               ` Bernd Schubert
  2025-02-08 12:25                 ` Mantas Mikulėnas
  0 siblings, 1 reply; 34+ messages in thread
From: Bernd Schubert @ 2025-02-08  0:02 UTC (permalink / raw)
  To: Joanne Koong
  Cc: Vlastimil Babka, Miklos Szeredi, Matthew Wilcox,
	Christian Heusel, Josef Bacik, Miklos Szeredi, regressions,
	linux-kernel, linux-fsdevel, linux-mm, Mantas Mikulėnas



On 2/7/25 19:40, Joanne Koong wrote:
> On Fri, Feb 7, 2025 at 3:16 AM Bernd Schubert <bernd@bsbernd.com> wrote:
>>
>>
>>
>> On 2/7/25 11:55, Vlastimil Babka wrote:
>>> On 2/7/25 11:43, Miklos Szeredi wrote:
>>>> On Fri, 7 Feb 2025 at 11:25, Vlastimil Babka <vbabka@suse.cz> wrote:
>>>>
>>>>> Could be a use-after free of the page, which sets PG_lru again. The list
>>>>> corruptions in __rmqueue_pcplist also suggest some page manipulation after
>>>>> free. The -1 refcount suggests somebody was using the page while it was
>>>>> freed due to refcount dropping to 0 and then did a put_page()?
>>>>
>>>> Can you suggest any debug options that could help pinpoint the offender?
>>>
>>> CONFIG_DEBUG_VM enables a check in put_page_testzero() that would catch the
>>> underflow (modulo a tiny race window where it wouldn't). Worth trying.
>>
>> I typically run all of my tests with these options enabled
>>
>> https://github.com/bsbernd/tiny-qemu-virtio-kernel-config
>>
>>
>> If Christian or Mantas could tell me what I need to install and run, I
>> could probably quickly give it a try.
>>
> 
> Copying/pasting from [1], these are the repro steps that's listed:
> 
> 1) Install Bottles: flatpak install flathub com.usebottles.bottles
> 2) Open Bottles and create a bottle
> 3) In a terminal open the kernel log using dmesg/journalctl in follow mode
> 4) Once the bottle has been initialized, open it, select "Run
> Executable" and point it at any Windows executable
> Note that at that same moment a BUG: Bad page state in process fuse
> mainloop error message will appear and the system will become
> unresponsive (keyboard and mouse might still work but you'll be unable
> to actually do anything, open or close any application, or even reboot
> or shutdown; you are able to ping the device and initiate an SSH
> connection but all it does is just display the banner)
> 

Thanks Joanne! Hmm, I found "wmplayer" in a c drive, but there doesn't
happen much

   5241 pts/0    Ss     0:00 -bash
   5317 pts/1    S+     0:00 /home/bernd/.var/app/com.usebottles.bottles/data/bottles/runners/soda-9.0-1/bin/wi
   5319 ?        Ss     0:01 /home/bernd/.var/app/com.usebottles.bottles/data/bottles/runners/soda-9.0-1/bin/wi
   5321 pts/1    S+     0:01 C:\windows\system32\wineboot.exe --init
   5345 ?        Ssl    0:01 C:\windows\system32\services.exe
   5348 ?        Ssl    0:00 C:\windows\system32\winedevice.exe
   5359 ?        Ssl    0:01 C:\windows\system32\winedevice.exe
   5360 ?        I      0:00 [kworker/u130:0-rpciod]

It runs it, but no system issue. I had also tried "Obfuscate", but didn't
manage to feed it a file - it runs in the sandbox and no access to
my $HOME.

I need to see is if I can find some other files, but very late here
and busy with something else. It also runs in x2gokdrive and wine
then over another ssh hope to the vm guest, which has a kernel with all
these debug options - slow.

Bernd







^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-08  0:02               ` Bernd Schubert
@ 2025-02-08 12:25                 ` Mantas Mikulėnas
  0 siblings, 0 replies; 34+ messages in thread
From: Mantas Mikulėnas @ 2025-02-08 12:25 UTC (permalink / raw)
  To: Bernd Schubert, Joanne Koong
  Cc: Vlastimil Babka, Miklos Szeredi, Matthew Wilcox,
	Christian Heusel, Josef Bacik, Miklos Szeredi, regressions,
	linux-kernel, linux-fsdevel, linux-mm

On 2025-02-08 2:02, Bernd Schubert wrote:
> 
> 
> On 2/7/25 19:40, Joanne Koong wrote:
>> On Fri, Feb 7, 2025 at 3:16 AM Bernd Schubert <bernd@bsbernd.com> wrote:
>>>
>>>
>>>
>>> On 2/7/25 11:55, Vlastimil Babka wrote:
>>>> On 2/7/25 11:43, Miklos Szeredi wrote:
>>>>> On Fri, 7 Feb 2025 at 11:25, Vlastimil Babka <vbabka@suse.cz> wrote:
>>>>>
>>>>>> Could be a use-after free of the page, which sets PG_lru again. The list
>>>>>> corruptions in __rmqueue_pcplist also suggest some page manipulation after
>>>>>> free. The -1 refcount suggests somebody was using the page while it was
>>>>>> freed due to refcount dropping to 0 and then did a put_page()?
>>>>>
>>>>> Can you suggest any debug options that could help pinpoint the offender?
>>>>
>>>> CONFIG_DEBUG_VM enables a check in put_page_testzero() that would catch the
>>>> underflow (modulo a tiny race window where it wouldn't). Worth trying.
>>>
>>> I typically run all of my tests with these options enabled
>>>
>>> https://github.com/bsbernd/tiny-qemu-virtio-kernel-config
>>>
>>>
>>> If Christian or Mantas could tell me what I need to install and run, I
>>> could probably quickly give it a try.
>>>
>>
>> Copying/pasting from [1], these are the repro steps that's listed:
>>
>> 1) Install Bottles: flatpak install flathub com.usebottles.bottles
>> 2) Open Bottles and create a bottle
>> 3) In a terminal open the kernel log using dmesg/journalctl in follow mode
>> 4) Once the bottle has been initialized, open it, select "Run
>> Executable" and point it at any Windows executable
>> Note that at that same moment a BUG: Bad page state in process fuse
>> mainloop error message will appear and the system will become
>> unresponsive (keyboard and mouse might still work but you'll be unable
>> to actually do anything, open or close any application, or even reboot
>> or shutdown; you are able to ping the device and initiate an SSH
>> connection but all it does is just display the banner)
>>
> 
> Thanks Joanne! Hmm, I found "wmplayer" in a c drive, but there doesn't
> happen much
> 
>     5241 pts/0    Ss     0:00 -bash
>     5317 pts/1    S+     0:00 /home/bernd/.var/app/com.usebottles.bottles/data/bottles/runners/soda-9.0-1/bin/wi
>     5319 ?        Ss     0:01 /home/bernd/.var/app/com.usebottles.bottles/data/bottles/runners/soda-9.0-1/bin/wi
>     5321 pts/1    S+     0:01 C:\windows\system32\wineboot.exe --init
>     5345 ?        Ssl    0:01 C:\windows\system32\services.exe
>     5348 ?        Ssl    0:00 C:\windows\system32\winedevice.exe
>     5359 ?        Ssl    0:01 C:\windows\system32\winedevice.exe
>     5360 ?        I      0:00 [kworker/u130:0-rpciod]
> 
> It runs it, but no system issue. I had also tried "Obfuscate", but didn't
> manage to feed it a file - it runs in the sandbox and no access to
> my $HOME.

That is the point -- the bug is triggered by using Flatpak's FUSE-based 
"sandboxed file access" mechanism. The sandboxed app is supposed to ask 
'xdg-desktop-portal' to give it some file, which then lets you select a 
file and exposes it through its FUSE mount inside the sandbox (which is 
also visible at /run/user/1000/doc outside the sandbox).

So the specific app probably doesn't matter, as long as it *is* in fact 
sandboxed without direct access to your $HOME, and as long as you have 
xdg-desktop-portal installed.

I had suggested "Obfuscate" both because it was what originally led to 
the crash in my case, and because it's a fairly basic app where opening 
a file happens to be step 1 of its usual workflow so it's quick to test. 
Other similar ones might be:
https://flathub.org/apps/com.belmoussaoui.ashpd.demo ("File chooser")

The actual FUSE code is at:
https://github.com/flatpak/xdg-desktop-portal/blob/main/document-portal/document-portal-fuse.c#L2041

I guess any other filesystem that relies on libfuse's direct splice 
support would also be able to repro? I don't know if there are any.


^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-07 11:16           ` Bernd Schubert
  2025-02-07 18:21             ` Bernd Schubert
  2025-02-07 18:40             ` Joanne Koong
@ 2025-02-07 20:35             ` Mantas Mikulėnas
  2 siblings, 0 replies; 34+ messages in thread
From: Mantas Mikulėnas @ 2025-02-07 20:35 UTC (permalink / raw)
  To: Bernd Schubert, Vlastimil Babka, Miklos Szeredi
  Cc: Matthew Wilcox, Christian Heusel, Josef Bacik, Miklos Szeredi,
	regressions, linux-kernel, linux-fsdevel, Joanne Koong, linux-mm

On 2025-02-07 13:16, Bernd Schubert wrote:
> On 2/7/25 11:55, Vlastimil Babka wrote:
>> On 2/7/25 11:43, Miklos Szeredi wrote:
>>> On Fri, 7 Feb 2025 at 11:25, Vlastimil Babka <vbabka@suse.cz> wrote:
>>>
>>>> Could be a use-after free of the page, which sets PG_lru again. The list
>>>> corruptions in __rmqueue_pcplist also suggest some page manipulation after
>>>> free. The -1 refcount suggests somebody was using the page while it was
>>>> freed due to refcount dropping to 0 and then did a put_page()?
>>>
>>> Can you suggest any debug options that could help pinpoint the offender?
>>
>> CONFIG_DEBUG_VM enables a check in put_page_testzero() that would catch the
>> underflow (modulo a tiny race window where it wouldn't). Worth trying.
> 
> I typically run all of my tests with these options enabled
> 
> https://github.com/bsbernd/tiny-qemu-virtio-kernel-config
> 
> 
> If Christian or Mantas could tell me what I need to install and run, I
> could probably quickly give it a try.

I used the "Obfuscate" app:
https://flathub.org/apps/com.belmoussaoui.Obfuscate

Selecting a JPEG/PNG file in GNOME's file browser (Nautilus) and 
choosing "Open with > Obfuscate" reliably triggers the bug. (Running 
`com.belmoussaoui.Obfuscate` and opening a file from within the app 
likely would, too, but at the time I didn't try that.)


^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-07  9:34 ` [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13 Miklos Szeredi
  2025-02-07  9:45   ` Matthew Wilcox
@ 2025-02-07 11:00   ` Mantas Mikulėnas
  2025-02-07 16:49   ` Vlastimil Babka
  2025-02-10  8:52   ` [PATCH] fuse: prevent folio use-after-free in readahead Vlastimil Babka
  3 siblings, 0 replies; 34+ messages in thread
From: Mantas Mikulėnas @ 2025-02-07 11:00 UTC (permalink / raw)
  To: Miklos Szeredi, Christian Heusel
  Cc: Josef Bacik, Miklos Szeredi, regressions, linux-kernel,
	linux-fsdevel, Joanne Koong, Matthew Wilcox, linux-mm

Hello,

>> Feb 06 08:54:47 archvm kernel: BUG: Bad page state in process rnote  pfn:67587
>> Feb 06 08:54:47 archvm kernel: page: refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x67587
>> Feb 06 08:54:47 archvm kernel: flags: 0xfffffc8000020(lru|node=0|zone=1|lastcpupid=0x1fffff)
>> Feb 06 08:54:47 archvm kernel: raw: 000fffffc8000020 dead000000000100 dead000000000122 0000000000000000
>> Feb 06 08:54:47 archvm kernel: raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000
>> Feb 06 08:54:47 archvm kernel: page dumped because: PAGE_FLAGS_CHECK_AT_PREP flag(s) set

I'm not sure if the following will be of any use (given the out-of-tree 
modules and everything), but in my case -- same situation with v6.13.1 
when opening a file through Flatpak's FUSE thing -- the dmesg output is 
quite different at first, only reaching "BUG: Bad page state:" after a 
ton of "list_add corruption" messages. I don't know whether they are 
related to the cause or whether they're just fallout.

Specifically:

> Feb 06 11:03:48 archlinux kernel: Linux version 6.13.1-arch1-1 (linux@archlinux) (gcc (GCC) 14.2.1 20250128, GNU ld (GNU Binutils) 2.43.1) #1 SMP PREEMPT_DYNAMIC Sun, 02 Feb 2025 01:02:29 +0000
> Feb 06 11:03:48 archlinux kernel: Command line: initrd=intel-ucode.img initrd=initramfs-linux.img root=/dev/mapper/sys rw fb_tunnels=none net.ifnames=0 quiet
 > [...]
> Feb 06 11:07:34 frost kernel: ------------[ cut here ]------------
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffff889940066a10. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2184 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G     U     OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037c3a60 EFLAGS: 00010282
> Feb 06 11:07:34 frost kernel: RAX: 0000000000000000 RBX: ffff889c8f5bd5c0 RCX: 0000000000000027
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037c38e0
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4cb5408 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d67fc6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? __warn.cold+0x93/0xf6
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  ? handle_bug+0x58/0x90
> Feb 06 11:07:34 frost kernel:  ? exc_invalid_op+0x17/0x70
> Feb 06 11:07:34 frost kernel:  ? asm_exc_invalid_op+0x1a/0x20
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  free_unref_page_commit.cold+0x9/0x12
> Feb 06 11:07:34 frost kernel:  free_unref_page+0x46e/0x570
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x37e/0x6c0
> Feb 06 11:07:34 frost kernel:  fuse_copy_args+0x186/0x210
> Feb 06 11:07:34 frost kernel:  fuse_dev_do_write+0x796/0x12a0
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  fuse_dev_splice_write+0x29d/0x380
> Feb 06 11:07:34 frost kernel:  do_splice+0x308/0x890
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  __x64_sys_splice+0x84/0xf0
> Feb 06 11:07:34 frost kernel:  do_syscall_64+0x82/0x190
> Feb 06 11:07:34 frost kernel:  ? sched_clock+0x10/0x30
> Feb 06 11:07:34 frost kernel:  ? sched_clock_cpu+0xf/0x1d0
> Feb 06 11:07:34 frost kernel:  ? irqtime_account_irq+0x3e/0xc0
> Feb 06 11:07:34 frost kernel:  ? handle_softirqs+0x19a/0x2b0
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: Code: 89 df e8 7d bd 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 75 15 83 e2 39 83 fa 08 75 0d e8 32 ff ff ff 66 90 48 8b 45 10 0f 05 <48> 8b 5d f8 c9 c3 0f 1f 40 00 f3 0f 1e fa 55 48 89 e5 48 83 ec 08
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d67fb9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: RAX: ffffffffffffffda RBX: 000077e0d67fc6c0 RCX: 000077e0dde36e56
> Feb 06 11:07:34 frost kernel: RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000009
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d67fb9b0 R08: 0000000000004010 R09: 0000000000000001
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d67fbb30
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: 000000000000149f R15: 0000000000000000
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 11:07:34 frost kernel: ------------[ cut here ]------------
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffff889940066a10. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2184 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037c3a60 EFLAGS: 00010282
> Feb 06 11:07:34 frost kernel: RAX: 0000000000000000 RBX: ffff889c8f5bd5c0 RCX: 0000000000000027
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037c38e0
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4cb5408 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d67fc6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? __warn.cold+0x93/0xf6
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  ? handle_bug+0x58/0x90
> Feb 06 11:07:34 frost kernel:  ? exc_invalid_op+0x17/0x70
> Feb 06 11:07:34 frost kernel:  ? asm_exc_invalid_op+0x1a/0x20
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  free_unref_page_commit.cold+0x9/0x12
> Feb 06 11:07:34 frost kernel:  free_unref_page+0x46e/0x570
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x37e/0x6c0
> Feb 06 11:07:34 frost kernel:  fuse_copy_args+0x186/0x210
> Feb 06 11:07:34 frost kernel:  fuse_dev_do_write+0x796/0x12a0
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  fuse_dev_splice_write+0x29d/0x380
> Feb 06 11:07:34 frost kernel:  do_splice+0x308/0x890
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  __x64_sys_splice+0x84/0xf0
> Feb 06 11:07:34 frost kernel:  do_syscall_64+0x82/0x190
> Feb 06 11:07:34 frost kernel:  ? sched_clock+0x10/0x30
> Feb 06 11:07:34 frost kernel:  ? sched_clock_cpu+0xf/0x1d0
> Feb 06 11:07:34 frost kernel:  ? irqtime_account_irq+0x3e/0xc0
> Feb 06 11:07:34 frost kernel:  ? handle_softirqs+0x19a/0x2b0
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: Code: 89 df e8 7d bd 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 75 15 83 e2 39 83 fa 08 75 0d e8 32 ff ff ff 66 90 48 8b 45 10 0f 05 <48> 8b 5d f8 c9 c3 0f 1f 40 00 f3 0f 1e fa 55 48 89 e5 48 83 ec 08
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d67fb9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: RAX: ffffffffffffffda RBX: 000077e0d67fc6c0 RCX: 000077e0dde36e56
> Feb 06 11:07:34 frost kernel: RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000009
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d67fb9b0 R08: 0000000000004010 R09: 0000000000000001
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d67fbb30
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: 000000000000149f R15: 0000000000000000
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 11:07:34 frost kernel: ------------[ cut here ]------------
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffff889940066a10. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2184 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037c3a60 EFLAGS: 00010282
> Feb 06 11:07:34 frost kernel: RAX: 0000000000000000 RBX: ffff889c8f5bd5c0 RCX: 0000000000000027
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037c38e0
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4cb5408 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d67fc6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? __warn.cold+0x93/0xf6
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  ? handle_bug+0x58/0x90
> Feb 06 11:07:34 frost kernel:  ? exc_invalid_op+0x17/0x70
> Feb 06 11:07:34 frost kernel:  ? asm_exc_invalid_op+0x1a/0x20
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  free_unref_page_commit.cold+0x9/0x12
> Feb 06 11:07:34 frost kernel:  free_unref_page+0x46e/0x570
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x37e/0x6c0
> Feb 06 11:07:34 frost kernel:  fuse_copy_args+0x186/0x210
> Feb 06 11:07:34 frost kernel:  fuse_dev_do_write+0x796/0x12a0
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  fuse_dev_splice_write+0x29d/0x380
> Feb 06 11:07:34 frost kernel:  do_splice+0x308/0x890
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  __x64_sys_splice+0x84/0xf0
> Feb 06 11:07:34 frost kernel:  do_syscall_64+0x82/0x190
> Feb 06 11:07:34 frost kernel:  ? sched_clock+0x10/0x30
> Feb 06 11:07:34 frost kernel:  ? sched_clock_cpu+0xf/0x1d0
> Feb 06 11:07:34 frost kernel:  ? irqtime_account_irq+0x3e/0xc0
> Feb 06 11:07:34 frost kernel:  ? handle_softirqs+0x19a/0x2b0
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: Code: 89 df e8 7d bd 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 75 15 83 e2 39 83 fa 08 75 0d e8 32 ff ff ff 66 90 48 8b 45 10 0f 05 <48> 8b 5d f8 c9 c3 0f 1f 40 00 f3 0f 1e fa 55 48 89 e5 48 83 ec 08
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d67fb9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: RAX: ffffffffffffffda RBX: 000077e0d67fc6c0 RCX: 000077e0dde36e56
> Feb 06 11:07:34 frost kernel: RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000009
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d67fb9b0 R08: 0000000000004010 R09: 0000000000000001
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d67fbb30
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: 000000000000149f R15: 0000000000000000
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 11:07:34 frost kernel: ------------[ cut here ]------------
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffff889940066a10. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2184 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037c3a60 EFLAGS: 00010282
> Feb 06 11:07:34 frost kernel: RAX: 0000000000000000 RBX: ffff889c8f5bd5c0 RCX: 0000000000000027
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037c38e0
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4cb5408 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d67fc6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? __warn.cold+0x93/0xf6
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  ? handle_bug+0x58/0x90
> Feb 06 11:07:34 frost kernel:  ? exc_invalid_op+0x17/0x70
> Feb 06 11:07:34 frost kernel:  ? asm_exc_invalid_op+0x1a/0x20
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  free_unref_page_commit.cold+0x9/0x12
> Feb 06 11:07:34 frost kernel:  free_unref_page+0x46e/0x570
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x37e/0x6c0
> Feb 06 11:07:34 frost kernel:  fuse_copy_args+0x186/0x210
> Feb 06 11:07:34 frost kernel:  fuse_dev_do_write+0x796/0x12a0
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  fuse_dev_splice_write+0x29d/0x380
> Feb 06 11:07:34 frost kernel:  do_splice+0x308/0x890
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  __x64_sys_splice+0x84/0xf0
> Feb 06 11:07:34 frost kernel:  do_syscall_64+0x82/0x190
> Feb 06 11:07:34 frost kernel:  ? sched_clock+0x10/0x30
> Feb 06 11:07:34 frost kernel:  ? sched_clock_cpu+0xf/0x1d0
> Feb 06 11:07:34 frost kernel:  ? irqtime_account_irq+0x3e/0xc0
> Feb 06 11:07:34 frost kernel:  ? handle_softirqs+0x19a/0x2b0
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: Code: 89 df e8 7d bd 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 75 15 83 e2 39 83 fa 08 75 0d e8 32 ff ff ff 66 90 48 8b 45 10 0f 05 <48> 8b 5d f8 c9 c3 0f 1f 40 00 f3 0f 1e fa 55 48 89 e5 48 83 ec 08
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d67fb9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: RAX: ffffffffffffffda RBX: 000077e0d67fc6c0 RCX: 000077e0dde36e56
> Feb 06 11:07:34 frost kernel: RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000009
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d67fb9b0 R08: 0000000000004010 R09: 0000000000000001
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d67fbb30
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: 000000000000149f R15: 0000000000000000
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 11:07:34 frost kernel: ------------[ cut here ]------------
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffff889940066a10. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2185 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2185 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037cbb10 EFLAGS: 00010286
> Feb 06 11:07:34 frost kernel: RAX: 0000000000000000 RBX: ffff889c8f5bd5c0 RCX: 0000000000000027
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037cb990
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4cb5408 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d5ffb6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? __warn.cold+0x93/0xf6
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  ? handle_bug+0x58/0x90
> Feb 06 11:07:34 frost kernel:  ? exc_invalid_op+0x17/0x70
> Feb 06 11:07:34 frost kernel:  ? asm_exc_invalid_op+0x1a/0x20
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  free_unref_page_commit.cold+0x9/0x12
> Feb 06 11:07:34 frost kernel:  free_unref_page+0x46e/0x570
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x37e/0x6c0
> Feb 06 11:07:34 frost kernel:  fuse_copy_args+0x186/0x210
> Feb 06 11:07:34 frost kernel:  fuse_dev_do_write+0x796/0x12a0
> Feb 06 11:07:34 frost kernel:  fuse_dev_splice_write+0x29d/0x380
> Feb 06 11:07:34 frost kernel:  do_splice+0x308/0x890
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  __x64_sys_splice+0x84/0xf0
> Feb 06 11:07:34 frost kernel:  do_syscall_64+0x82/0x190
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d5ffab30
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2185 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037cbb10 EFLAGS: 00010286
> Feb 06 11:07:34 frost kernel: RAX: 0000000000000000 RBX: ffff889c8f5bd5c0 RCX: 0000000000000027
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037cb990
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4cb5408 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d5ffb6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2185 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037cbb10 EFLAGS: 00010286
> Feb 06 11:07:34 frost kernel: RAX: 0000000000000000 RBX: ffff889c8f5bd5c0 RCX: 0000000000000027
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037cb990
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4cb5408 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d5ffa9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2185 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2185 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037cbb10 EFLAGS: 00010286
> Feb 06 11:07:34 frost kernel: RAX: 0000000000000000 RBX: ffff889c8f5bd5c0 RCX: 0000000000000027
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  fuse_dev_do_write+0x796/0x12a0
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d5ffa9b0 R08: 0000000000004010 R09: 0000000000000001
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037c39e0 EFLAGS: 00010286
> Feb 06 11:07:34 frost kernel: FS:  000077e0d67fc6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel:  ? __warn.cold+0x93/0xf6
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: Code: 89 df e8 7d bd 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 75 15 83 e2 39 83 fa 08 75 0d e8 32 ff ff ff 66 90 48 8b 45 10 0f 05 <48> 8b 5d f8 c9 c3 0f 1f 40 00 f3 0f 1e fa 55 48 89 e5 48 83 ec 08
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d67fb9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: RAX: ffffffffffffffda RBX: 000077e0d67fc6c0 RCX: 000077e0dde36e56
> Feb 06 11:07:34 frost kernel: RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000009
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d67fb9b0 R08: 0000000000004010 R09: 0000000000000001
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d67fbb30
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: 000000000000149f R15: 0000000000000000
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 11:07:34 frost kernel: ------------[ cut here ]------------
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffff889940066a10. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  fuse_dev_splice_write+0x29d/0x380
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d67fb9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4cb5408 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel:  ? __warn.cold+0x93/0xf6
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  do_syscall_64+0x82/0x190
> Feb 06 11:07:34 frost kernel: Code: 89 df e8 7d bd 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 75 15 83 e2 39 83 fa 08 75 0d e8 32 ff ff ff 66 90 48 8b 45 10 0f 05 <48> 8b 5d f8 c9 c3 0f 1f 40 00 f3 0f 1e fa 55 48 89 e5 48 83 ec 08
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2185 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x37e/0x6c0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2185 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2185 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037cb8f0 EFLAGS: 00010282
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  ? filemap_get_pages+0xa7/0x6f0
> Feb 06 11:07:34 frost kernel:  __x64_sys_splice+0x84/0xf0
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d5ffa9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d5ffab30
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: 000000000000149f R15: 0000000000000000
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 11:07:34 frost kernel: ------------[ cut here ]------------
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffff889940066a10. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2185 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x37e/0x6c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: 000000000000149f R15: 0000000000000000
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2185 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2184 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel:  ? handle_bug+0x58/0x90
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d67fb9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffffe3ce8b511288. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037c3830 EFLAGS: 00010282
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel:  ? do_splice+0x427/0x890
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d67fbb30
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d67fb9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2185 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2185 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037cb960 EFLAGS: 00010282
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2185 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2185 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037cb960 EFLAGS: 00010282
> Feb 06 11:07:34 frost kernel:  free_unref_page_commit.cold+0x9/0x12
> Feb 06 11:07:34 frost kernel:  free_unref_page+0x46e/0x570
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x37e/0x6c0
> Feb 06 11:07:34 frost kernel:  fuse_copy_args+0x186/0x210
> Feb 06 11:07:34 frost kernel:  do_splice+0x308/0x890
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d5ffa9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2185 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037cb7e0
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d5ffa9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi
> Feb 06 11:07:34 frost systemd-journald[426]: /dev/kmsg buffer overrun, some messages lost.
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2185 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037cb960 EFLAGS: 00010282
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037cb7e0
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d5ffa9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffffe3ce8b511288. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost systemd-journald[426]: /dev/kmsg buffer overrun, some messages lost.
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4cb5408 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d67fb9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037c3680
> Feb 06 11:07:34 frost kernel:  ? __fsnotify_parent+0x153/0x3a0
> Feb 06 11:07:34 frost kernel:  ? do_splice+0x427/0x890
> Feb 06 11:07:34 frost kernel:  ? do_splice+0x427/0x890
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2184 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037c3800 EFLAGS: 00010282
> Feb 06 11:07:34 frost kernel:  ? dput+0x32/0x1b0
> Feb 06 11:07:34 frost kernel: ------------[ cut here ]------------
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  ? switch_fpu_return+0x4e/0xd0
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d67fb9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2185 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2185 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037cb7b0 EFLAGS: 00010286
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037cb630
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  ? __fsnotify_parent+0x153/0x3a0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel: RAX: ffffffffffffffda RBX: 000077e0d5ffb6c0 RCX: 000077e0dde36e56
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2185 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2185 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037cb7b0 EFLAGS: 00010286
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel:  fuse_dev_splice_write+0x29d/0x380
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  __x64_sys_splice+0x84/0xf0
> Feb 06 11:07:34 frost kernel:  do_syscall_64+0x82/0x190
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2185 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037cb7b0 EFLAGS: 00010286
> Feb 06 11:07:34 frost kernel:  ? do_splice+0x427/0x890
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2185 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037cb630
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4cb5408 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d5ffb6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? __warn.cold+0x93/0xf6
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  ? handle_bug+0x58/0x90
> Feb 06 11:07:34 frost kernel:  ? exc_invalid_op+0x17/0x70
> Feb 06 11:07:34 frost kernel:  ? asm_exc_invalid_op+0x1a/0x20
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  free_unref_page_commit.cold+0x9/0x12
> Feb 06 11:07:34 frost kernel:  free_unref_page+0x46e/0x570
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x65d/0x6c0
> Feb 06 11:07:34 frost kernel:  fuse_copy_args+0x186/0x210
> Feb 06 11:07:34 frost kernel:  fuse_dev_do_write+0x796/0x12a0
> Feb 06 11:07:34 frost kernel:  ? gup_fast_fallback+0x4a8/0xde0
> Feb 06 11:07:34 frost kernel:  fuse_dev_splice_write+0x29d/0x380
> Feb 06 11:07:34 frost kernel:  do_splice+0x308/0x890
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  __x64_sys_splice+0x84/0xf0
> Feb 06 11:07:34 frost kernel:  do_syscall_64+0x82/0x190
> Feb 06 11:07:34 frost kernel:  ? dput+0x32/0x1b0
> Feb 06 11:07:34 frost kernel:  ? __fsnotify_parent+0x153/0x3a0
> Feb 06 11:07:34 frost kernel:  ? do_splice+0x427/0x890
> Feb 06 11:07:34 frost kernel:  ? do_splice+0x427/0x890
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: Code: 89 df e8 7d bd 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 75 15 83 e2 39 83 fa 08 75 0d e8 32 ff ff ff 66 90 48 8b 45 10 0f 05 <48> 8b 5d f8 c9 c3 0f 1f 40 00 f3 0f 1e fa 55 48 89 e5 48 83 ec 08
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d5ffa9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: RAX: ffffffffffffffda RBX: 000077e0d5ffb6c0 RCX: 000077e0dde36e56
> Feb 06 11:07:34 frost kernel: RDX: 0000000000000007 RSI: 0000000000000000 RDI: 000000000000000b
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d5ffa9b0 R08: 0000000000004010 R09: 0000000000000001
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d5ffab30
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: 000000000000149f R15: 0000000000000000
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 11:07:34 frost kernel: ------------[ cut here ]------------
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffffe3ce8b511288. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2184 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037c3880 EFLAGS: 00010286
> Feb 06 11:07:34 frost kernel: RAX: 0000000000000000 RBX: ffff889c8f5bd5c0 RCX: 0000000000000027
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037c3700
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4cb5408 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d67fc6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? __warn.cold+0x93/0xf6
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  ? handle_bug+0x58/0x90
> Feb 06 11:07:34 frost kernel:  ? exc_invalid_op+0x17/0x70
> Feb 06 11:07:34 frost kernel:  ? asm_exc_invalid_op+0x1a/0x20
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  free_unref_page_commit.cold+0x9/0x12
> Feb 06 11:07:34 frost kernel:  free_unref_page+0x46e/0x570
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x37e/0x6c0
> Feb 06 11:07:34 frost kernel:  fuse_copy_args+0x186/0x210
> Feb 06 11:07:34 frost kernel:  fuse_dev_do_write+0x796/0x12a0
> Feb 06 11:07:34 frost kernel:  fuse_dev_splice_write+0x29d/0x380
> Feb 06 11:07:34 frost kernel:  do_splice+0x308/0x890
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  __x64_sys_splice+0x84/0xf0
> Feb 06 11:07:34 frost kernel:  do_syscall_64+0x82/0x190
> Feb 06 11:07:34 frost kernel:  ? __do_sys_vmsplice+0x129/0x730
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: Code: 89 df e8 7d bd 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 75 15 83 e2 39 83 fa 08 75 0d e8 32 ff ff ff 66 90 48 8b 45 10 0f 05 <48> 8b 5d f8 c9 c3 0f 1f 40 00 f3 0f 1e fa 55 48 89 e5 48 83 ec 08
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d67fb9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: RAX: ffffffffffffffda RBX: 000077e0d67fc6c0 RCX: 000077e0dde36e56
> Feb 06 11:07:34 frost kernel: RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000009
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d67fb9b0 R08: 0000000000004010 R09: 0000000000000001
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d67fbb30
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: 000000000000149f R15: 0000000000000000
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 11:07:34 frost kernel: ------------[ cut here ]------------
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffffe3ce8b511288. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2184 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037c3880 EFLAGS: 00010286
> Feb 06 11:07:34 frost kernel: RAX: 0000000000000000 RBX: ffff889c8f5bd5c0 RCX: 0000000000000027
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037c3700
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4cb5408 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d67fc6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? __warn.cold+0x93/0xf6
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  ? handle_bug+0x58/0x90
> Feb 06 11:07:34 frost kernel:  ? exc_invalid_op+0x17/0x70
> Feb 06 11:07:34 frost kernel:  ? asm_exc_invalid_op+0x1a/0x20
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  free_unref_page_commit.cold+0x9/0x12
> Feb 06 11:07:34 frost kernel:  free_unref_page+0x46e/0x570
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x37e/0x6c0
> Feb 06 11:07:34 frost kernel:  fuse_copy_args+0x186/0x210
> Feb 06 11:07:34 frost kernel:  fuse_dev_do_write+0x796/0x12a0
> Feb 06 11:07:34 frost kernel:  fuse_dev_splice_write+0x29d/0x380
> Feb 06 11:07:34 frost kernel:  do_splice+0x308/0x890
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  __x64_sys_splice+0x84/0xf0
> Feb 06 11:07:34 frost kernel:  do_syscall_64+0x82/0x190
> Feb 06 11:07:34 frost kernel:  ? __do_sys_vmsplice+0x129/0x730
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: Code: 89 df e8 7d bd 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 75 15 83 e2 39 83 fa 08 75 0d e8 32 ff ff ff 66 90 48 8b 45 10 0f 05 <48> 8b 5d f8 c9 c3 0f 1f 40 00 f3 0f 1e fa 55 48 89 e5 48 83 ec 08
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d67fb9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: RAX: ffffffffffffffda RBX: 000077e0d67fc6c0 RCX: 000077e0dde36e56
> Feb 06 11:07:34 frost kernel: RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000009
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d67fb9b0 R08: 0000000000004010 R09: 0000000000000001
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d67fbb30
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: 000000000000149f R15: 0000000000000000
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 11:07:34 frost kernel: ------------[ cut here ]------------
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffffe3ce8b511288. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2184 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037c3880 EFLAGS: 00010286
> Feb 06 11:07:34 frost kernel: RAX: 0000000000000000 RBX: ffff889c8f5bd5c0 RCX: 0000000000000027
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037c3700
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4cb5408 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d67fc6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? __warn.cold+0x93/0xf6
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  ? handle_bug+0x58/0x90
> Feb 06 11:07:34 frost kernel:  ? exc_invalid_op+0x17/0x70
> Feb 06 11:07:34 frost kernel:  ? asm_exc_invalid_op+0x1a/0x20
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  free_unref_page_commit.cold+0x9/0x12
> Feb 06 11:07:34 frost kernel:  free_unref_page+0x46e/0x570
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x37e/0x6c0
> Feb 06 11:07:34 frost kernel:  fuse_copy_args+0x186/0x210
> Feb 06 11:07:34 frost kernel:  fuse_dev_do_write+0x796/0x12a0
> Feb 06 11:07:34 frost kernel:  fuse_dev_splice_write+0x29d/0x380
> Feb 06 11:07:34 frost kernel:  do_splice+0x308/0x890
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  __x64_sys_splice+0x84/0xf0
> Feb 06 11:07:34 frost kernel:  do_syscall_64+0x82/0x190
> Feb 06 11:07:34 frost kernel:  ? __do_sys_vmsplice+0x129/0x730
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: Code: 89 df e8 7d bd 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 75 15 83 e2 39 83 fa 08 75 0d e8 32 ff ff ff 66 90 48 8b 45 10 0f 05 <48> 8b 5d f8 c9 c3 0f 1f 40 00 f3 0f 1e fa 55 48 89 e5 48 83 ec 08
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d67fb9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: RAX: ffffffffffffffda RBX: 000077e0d67fc6c0 RCX: 000077e0dde36e56
> Feb 06 11:07:34 frost kernel: RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000009
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d67fb9b0 R08: 0000000000004010 R09: 0000000000000001
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d67fbb30
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: 000000000000149f R15: 0000000000000000
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 11:07:34 frost kernel: ------------[ cut here ]------------
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffffe3ce8b511288. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2184 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037c3880 EFLAGS: 00010286
> Feb 06 11:07:34 frost kernel: RAX: 0000000000000000 RBX: ffff889c8f5bd5c0 RCX: 0000000000000027
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037c3700
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4cb5408 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d67fc6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? __warn.cold+0x93/0xf6
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  ? handle_bug+0x58/0x90
> Feb 06 11:07:34 frost kernel:  ? exc_invalid_op+0x17/0x70
> Feb 06 11:07:34 frost kernel:  ? asm_exc_invalid_op+0x1a/0x20
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  free_unref_page_commit.cold+0x9/0x12
> Feb 06 11:07:34 frost kernel:  free_unref_page+0x46e/0x570
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x37e/0x6c0
> Feb 06 11:07:34 frost kernel:  fuse_copy_args+0x186/0x210
> Feb 06 11:07:34 frost kernel:  fuse_dev_do_write+0x796/0x12a0
> Feb 06 11:07:34 frost kernel:  fuse_dev_splice_write+0x29d/0x380
> Feb 06 11:07:34 frost kernel:  do_splice+0x308/0x890
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  __x64_sys_splice+0x84/0xf0
> Feb 06 11:07:34 frost kernel:  do_syscall_64+0x82/0x190
> Feb 06 11:07:34 frost kernel:  ? __do_sys_vmsplice+0x129/0x730
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: Code: 89 df e8 7d bd 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 75 15 83 e2 39 83 fa 08 75 0d e8 32 ff ff ff 66 90 48 8b 45 10 0f 05 <48> 8b 5d f8 c9 c3 0f 1f 40 00 f3 0f 1e fa 55 48 89 e5 48 83 ec 08
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d67fb9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: RAX: ffffffffffffffda RBX: 000077e0d67fc6c0 RCX: 000077e0dde36e56
> Feb 06 11:07:34 frost kernel: RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000009
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d67fb9b0 R08: 0000000000004010 R09: 0000000000000001
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d67fbb30
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: 000000000000149f R15: 0000000000000000
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 11:07:34 frost kernel: ------------[ cut here ]------------
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffffe3ce8b511288. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2185 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2185 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037cba90 EFLAGS: 00010282
> Feb 06 11:07:34 frost kernel: RAX: 0000000000000000 RBX: ffff889c8f5bd5c0 RCX: 0000000000000027
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037cb910
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4cb5408 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d5ffb6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? __warn.cold+0x93/0xf6
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  ? handle_bug+0x58/0x90
> Feb 06 11:07:34 frost kernel:  ? exc_invalid_op+0x17/0x70
> Feb 06 11:07:34 frost kernel:  ? asm_exc_invalid_op+0x1a/0x20
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  free_unref_page_commit.cold+0x9/0x12
> Feb 06 11:07:34 frost kernel:  free_unref_page+0x46e/0x570
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x37e/0x6c0
> Feb 06 11:07:34 frost kernel:  ? do_splice+0x427/0x890
> Feb 06 11:07:34 frost kernel:  fuse_copy_args+0x186/0x210
> Feb 06 11:07:34 frost kernel:  fuse_dev_do_write+0x796/0x12a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  fuse_dev_splice_write+0x29d/0x380
> Feb 06 11:07:34 frost kernel:  do_splice+0x308/0x890
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  __x64_sys_splice+0x84/0xf0
> Feb 06 11:07:34 frost kernel:  do_syscall_64+0x82/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: Code: 89 df e8 7d bd 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 75 15 83 e2 39 83 fa 08 75 0d e8 32 ff ff ff 66 90 48 8b 45 10 0f 05 <48> 8b 5d f8 c9 c3 0f 1f 40 00 f3 0f 1e fa 55 48 89 e5 48 83 ec 08
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d5ffa9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: RAX: ffffffffffffffda RBX: 000077e0d5ffb6c0 RCX: 000077e0dde36e56
> Feb 06 11:07:34 frost kernel: RDX: 0000000000000007 RSI: 0000000000000000 RDI: 000000000000000b
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d5ffa9b0 R08: 0000000000004010 R09: 0000000000000001
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d5ffab30
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: 000000000000149f R15: 0000000000000000
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 11:07:34 frost kernel: ------------[ cut here ]------------
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffffe3ce8b511288. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2185 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2185 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037cba90 EFLAGS: 00010282
> Feb 06 11:07:34 frost kernel: RAX: 0000000000000000 RBX: ffff889c8f5bd5c0 RCX: 0000000000000027
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037cb910
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4cb5408 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d5ffb6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? __warn.cold+0x93/0xf6
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  ? handle_bug+0x58/0x90
> Feb 06 11:07:34 frost kernel:  ? exc_invalid_op+0x17/0x70
> Feb 06 11:07:34 frost kernel:  ? asm_exc_invalid_op+0x1a/0x20
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  free_unref_page_commit.cold+0x9/0x12
> Feb 06 11:07:34 frost kernel:  free_unref_page+0x46e/0x570
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x37e/0x6c0
> Feb 06 11:07:34 frost kernel:  ? do_splice+0x427/0x890
> Feb 06 11:07:34 frost kernel:  fuse_copy_args+0x186/0x210
> Feb 06 11:07:34 frost kernel:  fuse_dev_do_write+0x796/0x12a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  fuse_dev_splice_write+0x29d/0x380
> Feb 06 11:07:34 frost kernel:  do_splice+0x308/0x890
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  __x64_sys_splice+0x84/0xf0
> Feb 06 11:07:34 frost kernel:  do_syscall_64+0x82/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: Code: 89 df e8 7d bd 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 75 15 83 e2 39 83 fa 08 75 0d e8 32 ff ff ff 66 90 48 8b 45 10 0f 05 <48> 8b 5d f8 c9 c3 0f 1f 40 00 f3 0f 1e fa 55 48 89 e5 48 83 ec 08
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d5ffa9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: RAX: ffffffffffffffda RBX: 000077e0d5ffb6c0 RCX: 000077e0dde36e56
> Feb 06 11:07:34 frost kernel: RDX: 0000000000000007 RSI: 0000000000000000 RDI: 000000000000000b
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d5ffa9b0 R08: 0000000000004010 R09: 0000000000000001
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d5ffab30
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: 000000000000149f R15: 0000000000000000
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 11:07:34 frost kernel: ------------[ cut here ]------------
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffffe3ce8b511288. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2185 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2185 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037cba90 EFLAGS: 00010282
> Feb 06 11:07:34 frost kernel: RAX: 0000000000000000 RBX: ffff889c8f5bd5c0 RCX: 0000000000000027
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037cb910
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4cb5408 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d5ffb6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? __warn.cold+0x93/0xf6
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  ? handle_bug+0x58/0x90
> Feb 06 11:07:34 frost kernel:  ? exc_invalid_op+0x17/0x70
> Feb 06 11:07:34 frost kernel:  ? asm_exc_invalid_op+0x1a/0x20
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  free_unref_page_commit.cold+0x9/0x12
> Feb 06 11:07:34 frost kernel:  free_unref_page+0x46e/0x570
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x37e/0x6c0
> Feb 06 11:07:34 frost kernel:  ? do_splice+0x427/0x890
> Feb 06 11:07:34 frost kernel:  fuse_copy_args+0x186/0x210
> Feb 06 11:07:34 frost kernel:  fuse_dev_do_write+0x796/0x12a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  fuse_dev_splice_write+0x29d/0x380
> Feb 06 11:07:34 frost kernel:  do_splice+0x308/0x890
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  __x64_sys_splice+0x84/0xf0
> Feb 06 11:07:34 frost kernel:  do_syscall_64+0x82/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: Code: 89 df e8 7d bd 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 75 15 83 e2 39 83 fa 08 75 0d e8 32 ff ff ff 66 90 48 8b 45 10 0f 05 <48> 8b 5d f8 c9 c3 0f 1f 40 00 f3 0f 1e fa 55 48 89 e5 48 83 ec 08
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d5ffa9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: RAX: ffffffffffffffda RBX: 000077e0d5ffb6c0 RCX: 000077e0dde36e56
> Feb 06 11:07:34 frost kernel: RDX: 0000000000000007 RSI: 0000000000000000 RDI: 000000000000000b
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d5ffa9b0 R08: 0000000000004010 R09: 0000000000000001
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d5ffab30
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: 000000000000149f R15: 0000000000000000
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 11:07:34 frost kernel: ------------[ cut here ]------------
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffffe3ce8b511288. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2185 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2185 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037cba90 EFLAGS: 00010282
> Feb 06 11:07:34 frost kernel: RAX: 0000000000000000 RBX: ffff889c8f5bd5c0 RCX: 0000000000000027
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037cb910
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4cb5408 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d5ffb6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? __warn.cold+0x93/0xf6
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  ? handle_bug+0x58/0x90
> Feb 06 11:07:34 frost kernel:  ? exc_invalid_op+0x17/0x70
> Feb 06 11:07:34 frost kernel:  ? asm_exc_invalid_op+0x1a/0x20
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  free_unref_page_commit.cold+0x9/0x12
> Feb 06 11:07:34 frost kernel:  free_unref_page+0x46e/0x570
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x37e/0x6c0
> Feb 06 11:07:34 frost kernel:  ? do_splice+0x427/0x890
> Feb 06 11:07:34 frost kernel:  fuse_copy_args+0x186/0x210
> Feb 06 11:07:34 frost kernel:  fuse_dev_do_write+0x796/0x12a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  fuse_dev_splice_write+0x29d/0x380
> Feb 06 11:07:34 frost kernel:  do_splice+0x308/0x890
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  __x64_sys_splice+0x84/0xf0
> Feb 06 11:07:34 frost kernel:  do_syscall_64+0x82/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: Code: 89 df e8 7d bd 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 75 15 83 e2 39 83 fa 08 75 0d e8 32 ff ff ff 66 90 48 8b 45 10 0f 05 <48> 8b 5d f8 c9 c3 0f 1f 40 00 f3 0f 1e fa 55 48 89 e5 48 83 ec 08
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d5ffa9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: RAX: ffffffffffffffda RBX: 000077e0d5ffb6c0 RCX: 000077e0dde36e56
> Feb 06 11:07:34 frost kernel: RDX: 0000000000000007 RSI: 0000000000000000 RDI: 000000000000000b
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d5ffa9b0 R08: 0000000000004010 R09: 0000000000000001
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d5ffab30
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: 000000000000149f R15: 0000000000000000
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 11:07:34 frost kernel: ------------[ cut here ]------------
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffffe3ce8b511288. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2184 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037c3720 EFLAGS: 00010286
> Feb 06 11:07:34 frost kernel: RAX: 0000000000000000 RBX: ffff889c8f5bd5c0 RCX: 0000000000000027
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037c35a0
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4cb5408 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d67fc6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? __warn.cold+0x93/0xf6
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  ? handle_bug+0x58/0x90
> Feb 06 11:07:34 frost kernel:  ? exc_invalid_op+0x17/0x70
> Feb 06 11:07:34 frost kernel:  ? asm_exc_invalid_op+0x1a/0x20
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  free_unref_page_commit.cold+0x9/0x12
> Feb 06 11:07:34 frost kernel:  free_unref_page+0x46e/0x570
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x37e/0x6c0
> Feb 06 11:07:34 frost kernel:  fuse_copy_args+0x186/0x210
> Feb 06 11:07:34 frost kernel:  fuse_dev_do_write+0x796/0x12a0
> Feb 06 11:07:34 frost kernel:  ? try_get_folio+0x5c/0x180
> Feb 06 11:07:34 frost kernel:  ? try_get_folio+0x5c/0x180
> Feb 06 11:07:34 frost kernel:  fuse_dev_splice_write+0x29d/0x380
> Feb 06 11:07:34 frost kernel:  do_splice+0x308/0x890
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  __x64_sys_splice+0x84/0xf0
> Feb 06 11:07:34 frost kernel:  do_syscall_64+0x82/0x190
> Feb 06 11:07:34 frost kernel:  ? dput+0x32/0x1b0
> Feb 06 11:07:34 frost kernel:  ? __fsnotify_parent+0x153/0x3a0
> Feb 06 11:07:34 frost kernel:  ? do_splice+0x427/0x890
> Feb 06 11:07:34 frost kernel:  ? do_splice+0x427/0x890
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? switch_fpu_return+0x4e/0xd0
> Feb 06 11:07:34 frost kernel:  ? arch_exit_to_user_mode_prepare.isra.0+0x79/0x90
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: Code: 89 df e8 7d bd 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 75 15 83 e2 39 83 fa 08 75 0d e8 32 ff ff ff 66 90 48 8b 45 10 0f 05 <48> 8b 5d f8 c9 c3 0f 1f 40 00 f3 0f 1e fa 55 48 89 e5 48 83 ec 08
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d67fb9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: RAX: ffffffffffffffda RBX: 000077e0d67fc6c0 RCX: 000077e0dde36e56
> Feb 06 11:07:34 frost kernel: RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000009
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d67fb9b0 R08: 0000000000004010 R09: 0000000000000001
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d67fbb30
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: 000000000000149f R15: 0000000000000000
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 11:07:34 frost kernel: ------------[ cut here ]------------
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffffe3ce8b511288. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2184 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037c3720 EFLAGS: 00010286
> Feb 06 11:07:34 frost kernel: RAX: 0000000000000000 RBX: ffff889c8f5bd5c0 RCX: 0000000000000027
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037c35a0
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4cb5408 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d67fc6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? __warn.cold+0x93/0xf6
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  ? handle_bug+0x58/0x90
> Feb 06 11:07:34 frost kernel:  ? exc_invalid_op+0x17/0x70
> Feb 06 11:07:34 frost kernel:  ? asm_exc_invalid_op+0x1a/0x20
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  free_unref_page_commit.cold+0x9/0x12
> Feb 06 11:07:34 frost kernel:  free_unref_page+0x46e/0x570
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x37e/0x6c0
> Feb 06 11:07:34 frost kernel:  fuse_copy_args+0x186/0x210
> Feb 06 11:07:34 frost kernel:  fuse_dev_do_write+0x796/0x12a0
> Feb 06 11:07:34 frost kernel:  ? try_get_folio+0x5c/0x180
> Feb 06 11:07:34 frost kernel:  ? try_get_folio+0x5c/0x180
> Feb 06 11:07:34 frost kernel:  fuse_dev_splice_write+0x29d/0x380
> Feb 06 11:07:34 frost kernel:  do_splice+0x308/0x890
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  __x64_sys_splice+0x84/0xf0
> Feb 06 11:07:34 frost kernel:  do_syscall_64+0x82/0x190
> Feb 06 11:07:34 frost kernel:  ? dput+0x32/0x1b0
> Feb 06 11:07:34 frost kernel:  ? __fsnotify_parent+0x153/0x3a0
> Feb 06 11:07:34 frost kernel:  ? do_splice+0x427/0x890
> Feb 06 11:07:34 frost kernel:  ? do_splice+0x427/0x890
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? switch_fpu_return+0x4e/0xd0
> Feb 06 11:07:34 frost kernel:  ? arch_exit_to_user_mode_prepare.isra.0+0x79/0x90
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: Code: 89 df e8 7d bd 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 75 15 83 e2 39 83 fa 08 75 0d e8 32 ff ff ff 66 90 48 8b 45 10 0f 05 <48> 8b 5d f8 c9 c3 0f 1f 40 00 f3 0f 1e fa 55 48 89 e5 48 83 ec 08
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d67fb9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: RAX: ffffffffffffffda RBX: 000077e0d67fc6c0 RCX: 000077e0dde36e56
> Feb 06 11:07:34 frost kernel: RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000009
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d67fb9b0 R08: 0000000000004010 R09: 0000000000000001
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d67fbb30
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: 000000000000149f R15: 0000000000000000
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 11:07:34 frost kernel: ------------[ cut here ]------------
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffffe3ce8b511288. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2184 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037c3720 EFLAGS: 00010286
> Feb 06 11:07:34 frost kernel: RAX: 0000000000000000 RBX: ffff889c8f5bd5c0 RCX: 0000000000000027
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037c35a0
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4cb5408 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d67fc6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? __warn.cold+0x93/0xf6
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  ? handle_bug+0x58/0x90
> Feb 06 11:07:34 frost kernel:  ? exc_invalid_op+0x17/0x70
> Feb 06 11:07:34 frost kernel:  ? asm_exc_invalid_op+0x1a/0x20
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  free_unref_page_commit.cold+0x9/0x12
> Feb 06 11:07:34 frost kernel:  free_unref_page+0x46e/0x570
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x37e/0x6c0
> Feb 06 11:07:34 frost kernel:  fuse_copy_args+0x186/0x210
> Feb 06 11:07:34 frost kernel:  fuse_dev_do_write+0x796/0x12a0
> Feb 06 11:07:34 frost kernel:  ? try_get_folio+0x5c/0x180
> Feb 06 11:07:34 frost kernel:  ? try_get_folio+0x5c/0x180
> Feb 06 11:07:34 frost kernel:  fuse_dev_splice_write+0x29d/0x380
> Feb 06 11:07:34 frost kernel:  do_splice+0x308/0x890
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  __x64_sys_splice+0x84/0xf0
> Feb 06 11:07:34 frost kernel:  do_syscall_64+0x82/0x190
> Feb 06 11:07:34 frost kernel:  ? dput+0x32/0x1b0
> Feb 06 11:07:34 frost kernel:  ? __fsnotify_parent+0x153/0x3a0
> Feb 06 11:07:34 frost kernel:  ? do_splice+0x427/0x890
> Feb 06 11:07:34 frost kernel:  ? do_splice+0x427/0x890
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? switch_fpu_return+0x4e/0xd0
> Feb 06 11:07:34 frost kernel:  ? arch_exit_to_user_mode_prepare.isra.0+0x79/0x90
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: Code: 89 df e8 7d bd 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 75 15 83 e2 39 83 fa 08 75 0d e8 32 ff ff ff 66 90 48 8b 45 10 0f 05 <48> 8b 5d f8 c9 c3 0f 1f 40 00 f3 0f 1e fa 55 48 89 e5 48 83 ec 08
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d67fb9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: RAX: ffffffffffffffda RBX: 000077e0d67fc6c0 RCX: 000077e0dde36e56
> Feb 06 11:07:34 frost kernel: RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000009
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d67fb9b0 R08: 0000000000004010 R09: 0000000000000001
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d67fbb30
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: 000000000000149f R15: 0000000000000000
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 11:07:34 frost kernel: ------------[ cut here ]------------
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffffe3ce8b511288. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2184 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037c3720 EFLAGS: 00010286
> Feb 06 11:07:34 frost kernel: RAX: 0000000000000000 RBX: ffff889c8f5bd5c0 RCX: 0000000000000027
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037c35a0
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4cb5408 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d67fc6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? __warn.cold+0x93/0xf6
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  ? handle_bug+0x58/0x90
> Feb 06 11:07:34 frost kernel:  ? exc_invalid_op+0x17/0x70
> Feb 06 11:07:34 frost kernel:  ? asm_exc_invalid_op+0x1a/0x20
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  free_unref_page_commit.cold+0x9/0x12
> Feb 06 11:07:34 frost kernel:  free_unref_page+0x46e/0x570
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x37e/0x6c0
> Feb 06 11:07:34 frost kernel:  fuse_copy_args+0x186/0x210
> Feb 06 11:07:34 frost kernel:  fuse_dev_do_write+0x796/0x12a0
> Feb 06 11:07:34 frost kernel:  ? try_get_folio+0x5c/0x180
> Feb 06 11:07:34 frost kernel:  ? try_get_folio+0x5c/0x180
> Feb 06 11:07:34 frost kernel:  fuse_dev_splice_write+0x29d/0x380
> Feb 06 11:07:34 frost kernel:  do_splice+0x308/0x890
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  __x64_sys_splice+0x84/0xf0
> Feb 06 11:07:34 frost kernel:  do_syscall_64+0x82/0x190
> Feb 06 11:07:34 frost kernel:  ? dput+0x32/0x1b0
> Feb 06 11:07:34 frost kernel:  ? __fsnotify_parent+0x153/0x3a0
> Feb 06 11:07:34 frost kernel:  ? do_splice+0x427/0x890
> Feb 06 11:07:34 frost kernel:  ? do_splice+0x427/0x890
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? switch_fpu_return+0x4e/0xd0
> Feb 06 11:07:34 frost kernel:  ? arch_exit_to_user_mode_prepare.isra.0+0x79/0x90
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: Code: 89 df e8 7d bd 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 75 15 83 e2 39 83 fa 08 75 0d e8 32 ff ff ff 66 90 48 8b 45 10 0f 05 <48> 8b 5d f8 c9 c3 0f 1f 40 00 f3 0f 1e fa 55 48 89 e5 48 83 ec 08
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d67fb9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: RAX: ffffffffffffffda RBX: 000077e0d67fc6c0 RCX: 000077e0dde36e56
> Feb 06 11:07:34 frost kernel: RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000009
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d67fb9b0 R08: 0000000000004010 R09: 0000000000000001
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d67fbb30
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: 000000000000149f R15: 0000000000000000
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 11:07:34 frost kernel: ------------[ cut here ]------------
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffffe3ce8b511288. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2185 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2185 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037cb8f0 EFLAGS: 00010282
> Feb 06 11:07:34 frost kernel: RAX: 0000000000000000 RBX: ffff889c8f5bd5c0 RCX: 0000000000000027
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037cb770
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4c5d988 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d5ffb6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? __warn.cold+0x93/0xf6
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  ? handle_bug+0x58/0x90
> Feb 06 11:07:34 frost kernel:  ? exc_invalid_op+0x17/0x70
> Feb 06 11:07:34 frost kernel:  ? asm_exc_invalid_op+0x1a/0x20
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  free_unref_page_commit.cold+0x9/0x12
> Feb 06 11:07:34 frost kernel:  free_unref_page+0x46e/0x570
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x65d/0x6c0
> Feb 06 11:07:34 frost kernel:  fuse_copy_args+0x186/0x210
> Feb 06 11:07:34 frost kernel:  fuse_dev_do_write+0x796/0x12a0
> Feb 06 11:07:34 frost kernel:  fuse_dev_splice_write+0x29d/0x380
> Feb 06 11:07:34 frost kernel:  do_splice+0x308/0x890
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  __x64_sys_splice+0x84/0xf0
> Feb 06 11:07:34 frost kernel:  do_syscall_64+0x82/0x190
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: Code: 89 df e8 7d bd 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 75 15 83 e2 39 83 fa 08 75 0d e8 32 ff ff ff 66 90 48 8b 45 10 0f 05 <48> 8b 5d f8 c9 c3 0f 1f 40 00 f3 0f 1e fa 55 48 89 e5 48 83 ec 08
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d5ffa9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: RAX: ffffffffffffffda RBX: 000077e0d5ffb6c0 RCX: 000077e0dde36e56
> Feb 06 11:07:34 frost kernel: RDX: 0000000000000007 RSI: 0000000000000000 RDI: 000000000000000b
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d5ffa9b0 R08: 0000000000004010 R09: 0000000000000001
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d5ffab30
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: 000000000000149f R15: 0000000000000000
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 11:07:34 frost kernel: ------------[ cut here ]------------
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffffe3ce8b511288. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2185 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2185 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037cb8f0 EFLAGS: 00010282
> Feb 06 11:07:34 frost kernel: RAX: 0000000000000000 RBX: ffff889c8f5bd5c0 RCX: 0000000000000027
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037cb770
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4c5f140 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d5ffb6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? __warn.cold+0x93/0xf6
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  ? handle_bug+0x58/0x90
> Feb 06 11:07:34 frost kernel:  ? exc_invalid_op+0x17/0x70
> Feb 06 11:07:34 frost kernel:  ? asm_exc_invalid_op+0x1a/0x20
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  free_unref_page_commit.cold+0x9/0x12
> Feb 06 11:07:34 frost kernel:  free_unref_page+0x46e/0x570
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x65d/0x6c0
> Feb 06 11:07:34 frost kernel:  fuse_copy_args+0x186/0x210
> Feb 06 11:07:34 frost kernel:  fuse_dev_do_write+0x796/0x12a0
> Feb 06 11:07:34 frost kernel:  fuse_dev_splice_write+0x29d/0x380
> Feb 06 11:07:34 frost kernel:  do_splice+0x308/0x890
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  __x64_sys_splice+0x84/0xf0
> Feb 06 11:07:34 frost kernel:  do_syscall_64+0x82/0x190
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: Code: 89 df e8 7d bd 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 75 15 83 e2 39 83 fa 08 75 0d e8 32 ff ff ff 66 90 48 8b 45 10 0f 05 <48> 8b 5d f8 c9 c3 0f 1f 40 00 f3 0f 1e fa 55 48 89 e5 48 83 ec 08
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d5ffa9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: RAX: ffffffffffffffda RBX: 000077e0d5ffb6c0 RCX: 000077e0dde36e56
> Feb 06 11:07:34 frost kernel: RDX: 0000000000000007 RSI: 0000000000000000 RDI: 000000000000000b
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d5ffa9b0 R08: 0000000000004010 R09: 0000000000000001
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d5ffab30
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: 000000000000149f R15: 0000000000000000
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 11:07:34 frost kernel: ------------[ cut here ]------------
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffffe3ce8b511288. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2185 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2185 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037cb8f0 EFLAGS: 00010282
> Feb 06 11:07:34 frost kernel: RAX: 0000000000000000 RBX: ffff889c8f5bd5c0 RCX: 0000000000000027
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037cb770
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4c608f8 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d5ffb6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? __warn.cold+0x93/0xf6
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  ? handle_bug+0x58/0x90
> Feb 06 11:07:34 frost kernel:  ? exc_invalid_op+0x17/0x70
> Feb 06 11:07:34 frost kernel:  ? asm_exc_invalid_op+0x1a/0x20
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  free_unref_page_commit.cold+0x9/0x12
> Feb 06 11:07:34 frost kernel:  free_unref_page+0x46e/0x570
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x65d/0x6c0
> Feb 06 11:07:34 frost kernel:  fuse_copy_args+0x186/0x210
> Feb 06 11:07:34 frost kernel:  fuse_dev_do_write+0x796/0x12a0
> Feb 06 11:07:34 frost kernel:  fuse_dev_splice_write+0x29d/0x380
> Feb 06 11:07:34 frost kernel:  do_splice+0x308/0x890
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  __x64_sys_splice+0x84/0xf0
> Feb 06 11:07:34 frost kernel:  do_syscall_64+0x82/0x190
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: Code: 89 df e8 7d bd 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 75 15 83 e2 39 83 fa 08 75 0d e8 32 ff ff ff 66 90 48 8b 45 10 0f 05 <48> 8b 5d f8 c9 c3 0f 1f 40 00 f3 0f 1e fa 55 48 89 e5 48 83 ec 08
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d5ffa9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: RAX: ffffffffffffffda RBX: 000077e0d5ffb6c0 RCX: 000077e0dde36e56
> Feb 06 11:07:34 frost kernel: RDX: 0000000000000007 RSI: 0000000000000000 RDI: 000000000000000b
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d5ffa9b0 R08: 0000000000004010 R09: 0000000000000001
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d5ffab30
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: 000000000000149f R15: 0000000000000000
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 11:07:34 frost kernel: ------------[ cut here ]------------
> Feb 06 11:07:34 frost kernel: list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffffe3ce8b511288. (next=ffffe3ce8b683548).
> Feb 06 11:07:34 frost kernel: WARNING: CPU: 3 PID: 2185 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2185 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel: Code: e8 33 41 10 00 0f 0b 31 c0 c3 cc cc cc cc 4c 8b 02 49 39 f0 74 18 eb 27 48 89 f1 48 c7 c7 c8 5c 2c a4 48 89 c6 e8 0e 41 10 00 <0f> 0b eb d9 48 39 fa 74 22 49 39 f8 74 1d b0 01 c3 cc cc cc cc 48
> Feb 06 11:07:34 frost kernel: RSP: 0018:ffffae4f037cb8f0 EFLAGS: 00010282
> Feb 06 11:07:34 frost kernel: RAX: 0000000000000000 RBX: ffff889c8f5bd5c0 RCX: 0000000000000027
> Feb 06 11:07:34 frost kernel: RDX: ffff889c8f5a18c8 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: ffff889c9f7d6040 R08: 0000000000000000 R09: ffffae4f037cb770
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4c620b0 R11: 0000000000000003 R12: 0000000000000001
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d5ffb6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0d5ff9bc8 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? __warn.cold+0x93/0xf6
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  ? report_bug+0xff/0x140
> Feb 06 11:07:34 frost kernel:  ? handle_bug+0x58/0x90
> Feb 06 11:07:34 frost kernel:  ? exc_invalid_op+0x17/0x70
> Feb 06 11:07:34 frost kernel:  ? asm_exc_invalid_op+0x1a/0x20
> Feb 06 11:07:34 frost kernel:  ? __list_add_valid_or_report+0x62/0xb0
> Feb 06 11:07:34 frost kernel:  free_unref_page_commit.cold+0x9/0x12
> Feb 06 11:07:34 frost kernel:  free_unref_page+0x46e/0x570
> Feb 06 11:07:34 frost kernel:  fuse_copy_page+0x37e/0x6c0
> Feb 06 11:07:34 frost kernel:  fuse_copy_args+0x186/0x210
> Feb 06 11:07:34 frost kernel:  fuse_dev_do_write+0x796/0x12a0
> Feb 06 11:07:34 frost kernel:  fuse_dev_splice_write+0x29d/0x380
> Feb 06 11:07:34 frost kernel:  do_splice+0x308/0x890
> Feb 06 11:07:34 frost kernel:  __do_splice+0x204/0x220
> Feb 06 11:07:34 frost kernel:  __x64_sys_splice+0x84/0xf0
> Feb 06 11:07:34 frost kernel:  do_syscall_64+0x82/0x190
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode_prepare+0x15e/0x1a0
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? syscall_exit_to_user_mode+0x37/0x1c0
> Feb 06 11:07:34 frost kernel:  ? do_syscall_64+0x8e/0x190
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  ? clear_bhb_loop+0x25/0x80
> Feb 06 11:07:34 frost kernel:  entry_SYSCALL_64_after_hwframe+0x76/0x7e
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde36e56
> Feb 06 11:07:34 frost kernel: Code: 89 df e8 7d bd 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 75 15 83 e2 39 83 fa 08 75 0d e8 32 ff ff ff 66 90 48 8b 45 10 0f 05 <48> 8b 5d f8 c9 c3 0f 1f 40 00 f3 0f 1e fa 55 48 89 e5 48 83 ec 08
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d5ffa9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000113
> Feb 06 11:07:34 frost kernel: RAX: ffffffffffffffda RBX: 000077e0d5ffb6c0 RCX: 000077e0dde36e56
> Feb 06 11:07:34 frost kernel: RDX: 0000000000000007 RSI: 0000000000000000 RDI: 000000000000000b
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d5ffa9b0 R08: 0000000000004010 R09: 0000000000000001
> Feb 06 11:07:34 frost kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 000077e0d5ffab30
> Feb 06 11:07:34 frost kernel: R13: 0000000000000001 R14: 000000000000149f R15: 0000000000000000
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 11:07:34 frost kernel: BUG: Bad page state in process fuse mainloop  pfn:2da0d5
> Feb 06 11:07:34 frost kernel: page: refcount:-1 mapcount:0 mapping:0000000000000000 index:0xf pfn:0x2da0d5
> Feb 06 11:07:34 frost kernel: flags: 0x17ffffd0000020(lru|node=0|zone=2|lastcpupid=0x1fffff)
> Feb 06 11:07:34 frost kernel: raw: 0017ffffd0000020 dead000000000100 dead000000000122 0000000000000000
> Feb 06 11:07:34 frost kernel: raw: 000000000000000f 0000000000000000 ffffffffffffffff 0000000000000000
> Feb 06 11:07:34 frost kernel: page dumped because: PAGE_FLAGS_CHECK_AT_PREP flag(s) set
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G     U  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  dump_stack_lvl+0x5d/0x80
> Feb 06 11:07:34 frost kernel:  bad_page.cold+0x7a/0x91
> Feb 06 11:07:34 frost kernel:  __rmqueue_pcplist+0x200/0xc50
> Feb 06 11:07:34 frost kernel:  ? atime_needs_update+0xa0/0x120
> Feb 06 11:07:34 frost kernel:  ? touch_atime+0x1e/0x120
> Feb 06 11:07:34 frost kernel:  get_page_from_freelist+0x2b0/0x1730
> Feb 06 11:07:34 frost kernel:  ? dput+0x32/0x1b0
> Feb 06 11:07:34 frost kernel:  ? __fsnotify_parent+0x153/0x3a0
> Feb 06 11:07:34 frost kernel:  __alloc_pages_noprof+0x184/0x330
> Feb 06 11:07:34 frost kernel:  alloc_pages_mpol_noprof+0x8d/0x1e0
> Feb 06 11:07:34 frost kernel:  ? do_splice+0x427/0x890
> Feb 06 11:07:34 frost kernel:  folio_alloc_mpol_noprof+0x14/0x30
> Feb 06 11:07:34 frost kernel:  vma_alloc_folio_noprof+0x69/0xb0
> Feb 06 11:07:34 frost kernel:  do_anonymous_page+0x32c/0x860
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? ___pte_offset_map+0x1b/0x180
> Feb 06 11:07:34 frost kernel:  __handle_mm_fault+0xb26/0xfb0
> Feb 06 11:07:34 frost kernel:  handle_mm_fault+0xe2/0x2c0
> Feb 06 11:07:34 frost kernel:  do_user_addr_fault+0x217/0x620
> Feb 06 11:07:34 frost kernel:  exc_page_fault+0x81/0x190
> Feb 06 11:07:34 frost kernel:  asm_exc_page_fault+0x26/0x30
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde4a6ef
> Feb 06 11:07:34 frost kernel: Code: 34 19 49 39 d4 49 89 74 24 60 0f 95 c2 48 29 d8 48 83 c1 10 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 51 f8 <48> 89 46 08 eb af 48 8d 3c 1a 48 29 d8 66 48 0f 6e c7 49 89 7c 24
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d67fb8f0 EFLAGS: 00010202
> Feb 06 11:07:34 frost kernel: RAX: 000000000001cb01 RBX: 0000000000003040 RCX: 000077e0c40014d0
> Feb 06 11:07:34 frost kernel: RDX: 0000000000003045 RSI: 000077e0c4004500 RDI: 0000000000000000
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d67fb940 R08: 000077e0c4000090 R09: 0000000000000000
> Feb 06 11:07:34 frost kernel: R10: 0000000000000004 R11: 000077e0d67fbb40 R12: 000077e0c4000030
> Feb 06 11:07:34 frost kernel: R13: 0000000000003030 R14: 0000000000000000 R15: fffffffffffffed8
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: Disabling lock debugging due to kernel taint
> Feb 06 11:07:34 frost kernel: Oops: general protection fault, probably for non-canonical address 0xdead000000000122: 0000 [#1] PREEMPT SMP NOPTI
> Feb 06 11:07:34 frost kernel: CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G    BU  W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:07:34 frost kernel: Tainted: [B]=BAD_PAGE, [U]=USER, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:07:34 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:07:34 frost kernel: RIP: 0010:__rmqueue_pcplist+0xb0/0xc50
> Feb 06 11:07:34 frost kernel: Code: 00 4c 01 f0 48 89 7c 24 30 48 89 44 24 20 49 8b 04 24 49 39 c4 0f 84 6c 01 00 00 49 8b 14 24 48 8b 42 08 48 8b 0a 48 8d 5a f8 <48> 3b 10 0f 85 8d 0b 00 00 48 3b 51 08 0f 85 c0 49 be ff 48 89 41
> Feb 06 11:07:34 frost kernel: RSP: 0000:ffffae4f037c3a98 EFLAGS: 00010293
> Feb 06 11:07:34 frost kernel: RAX: dead000000000122 RBX: ffffe3ce8b683540 RCX: dead000000000100
> Feb 06 11:07:34 frost kernel: RDX: ffffe3ce8b683548 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: 0000000000000010 R08: 0000000000000000 R09: ffffae4f037c3918
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4c64788 R11: 0000000000000003 R12: ffff889c8f5bd5f0
> Feb 06 11:07:34 frost kernel: R13: 0000000000000000 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d67fc6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0c4004508 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: Call Trace:
> Feb 06 11:07:34 frost kernel:  <TASK>
> Feb 06 11:07:34 frost kernel:  ? __die_body.cold+0x19/0x27
> Feb 06 11:07:34 frost kernel:  ? die_addr+0x3c/0x60
> Feb 06 11:07:34 frost kernel:  ? exc_general_protection+0x17d/0x400
> Feb 06 11:07:34 frost kernel:  ? asm_exc_general_protection+0x26/0x30
> Feb 06 11:07:34 frost kernel:  ? __rmqueue_pcplist+0xb0/0xc50
> Feb 06 11:07:34 frost kernel:  ? __rmqueue_pcplist+0x200/0xc50
> Feb 06 11:07:34 frost kernel:  ? atime_needs_update+0xa0/0x120
> Feb 06 11:07:34 frost kernel:  ? touch_atime+0x1e/0x120
> Feb 06 11:07:34 frost kernel:  get_page_from_freelist+0x2b0/0x1730
> Feb 06 11:07:34 frost kernel:  ? dput+0x32/0x1b0
> Feb 06 11:07:34 frost kernel:  ? __fsnotify_parent+0x153/0x3a0
> Feb 06 11:07:34 frost kernel:  __alloc_pages_noprof+0x184/0x330
> Feb 06 11:07:34 frost kernel:  alloc_pages_mpol_noprof+0x8d/0x1e0
> Feb 06 11:07:34 frost kernel:  ? do_splice+0x427/0x890
> Feb 06 11:07:34 frost kernel:  folio_alloc_mpol_noprof+0x14/0x30
> Feb 06 11:07:34 frost kernel:  vma_alloc_folio_noprof+0x69/0xb0
> Feb 06 11:07:34 frost kernel:  do_anonymous_page+0x32c/0x860
> Feb 06 11:07:34 frost kernel:  ? audit_reset_context+0x25d/0x330
> Feb 06 11:07:34 frost kernel:  ? ___pte_offset_map+0x1b/0x180
> Feb 06 11:07:34 frost kernel:  __handle_mm_fault+0xb26/0xfb0
> Feb 06 11:07:34 frost kernel:  handle_mm_fault+0xe2/0x2c0
> Feb 06 11:07:34 frost kernel:  do_user_addr_fault+0x217/0x620
> Feb 06 11:07:34 frost kernel:  exc_page_fault+0x81/0x190
> Feb 06 11:07:34 frost kernel:  asm_exc_page_fault+0x26/0x30
> Feb 06 11:07:34 frost kernel: RIP: 0033:0x77e0dde4a6ef
> Feb 06 11:07:34 frost kernel: Code: 34 19 49 39 d4 49 89 74 24 60 0f 95 c2 48 29 d8 48 83 c1 10 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 51 f8 <48> 89 46 08 eb af 48 8d 3c 1a 48 29 d8 66 48 0f 6e c7 49 89 7c 24
> Feb 06 11:07:34 frost kernel: RSP: 002b:000077e0d67fb8f0 EFLAGS: 00010202
> Feb 06 11:07:34 frost kernel: RAX: 000000000001cb01 RBX: 0000000000003040 RCX: 000077e0c40014d0
> Feb 06 11:07:34 frost kernel: RDX: 0000000000003045 RSI: 000077e0c4004500 RDI: 0000000000000000
> Feb 06 11:07:34 frost kernel: RBP: 000077e0d67fb940 R08: 000077e0c4000090 R09: 0000000000000000
> Feb 06 11:07:34 frost kernel: R10: 0000000000000004 R11: 000077e0d67fbb40 R12: 000077e0c4000030
> Feb 06 11:07:34 frost kernel: R13: 0000000000003030 R14: 0000000000000000 R15: fffffffffffffed8
> Feb 06 11:07:34 frost kernel:  </TASK>
> Feb 06 11:07:34 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:07:34 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:07:34 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:07:34 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:07:34 frost kernel: ---[ end trace 0000000000000000 ]---
> Feb 06 11:07:34 frost kernel: RIP: 0010:__rmqueue_pcplist+0xb0/0xc50
> Feb 06 11:07:34 frost kernel: Code: 00 4c 01 f0 48 89 7c 24 30 48 89 44 24 20 49 8b 04 24 49 39 c4 0f 84 6c 01 00 00 49 8b 14 24 48 8b 42 08 48 8b 0a 48 8d 5a f8 <48> 3b 10 0f 85 8d 0b 00 00 48 3b 51 08 0f 85 c0 49 be ff 48 89 41
> Feb 06 11:07:34 frost kernel: RSP: 0000:ffffae4f037c3a98 EFLAGS: 00010293
> Feb 06 11:07:34 frost kernel: RAX: dead000000000122 RBX: ffffe3ce8b683540 RCX: dead000000000100
> Feb 06 11:07:34 frost kernel: RDX: ffffe3ce8b683548 RSI: 0000000000000001 RDI: ffff889c8f5a18c0
> Feb 06 11:07:34 frost kernel: RBP: 0000000000000010 R08: 0000000000000000 R09: ffffae4f037c3918
> Feb 06 11:07:34 frost kernel: R10: ffffffffa4c64788 R11: 0000000000000003 R12: ffff889c8f5bd5f0
> Feb 06 11:07:34 frost kernel: R13: 0000000000000000 R14: ffff889c9f7d6040 R15: ffff889c8f5bd5c0
> Feb 06 11:07:34 frost kernel: FS:  000077e0d67fc6c0(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:07:34 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:07:34 frost kernel: CR2: 000077e0c4004508 CR3: 00000001975f8003 CR4: 00000000003706f0
> Feb 06 11:07:34 frost kernel: note: fuse mainloop[2184] exited with preempt_count 2
> Feb 06 11:08:02 frost kernel: watchdog: BUG: soft lockup - CPU#3 stuck for 26s! [kworker/3:2:407]
> Feb 06 11:08:02 frost kernel: CPU#3 Utilization every 4s during lockup:
> Feb 06 11:08:02 frost kernel:         #1: 100% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:08:02 frost kernel:         #2: 100% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:08:02 frost kernel:         #3: 100% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:08:02 frost kernel:         #4: 100% system,          0% softirq,          1% hardirq,          0% idle
> Feb 06 11:08:02 frost kernel:         #5: 101% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:08:02 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:08:02 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:08:02 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:08:02 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:08:02 frost kernel: CPU: 3 UID: 0 PID: 407 Comm: kworker/3:2 Tainted: G    BUD W  OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:08:02 frost kernel: Tainted: [B]=BAD_PAGE, [U]=USER, [D]=DIE, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
> Feb 06 11:08:02 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:08:02 frost kernel: Workqueue: mm_percpu_wq vmstat_update
> Feb 06 11:08:02 frost kernel: RIP: 0010:native_queued_spin_lock_slowpath+0x70/0x2e0
> Feb 06 11:08:02 frost kernel: Code: 77 7f f0 0f ba 2b 08 0f 92 c2 8b 03 0f b6 d2 c1 e2 08 30 e4 09 d0 3d ff 00 00 00 77 5b 85 c0 74 10 0f b6 03 84 c0 74 09 f3 90 <0f> b6 03 84 c0 75 f7 b8 01 00 00 00 66 89 03 65 48 ff 05 e1 31 74
> Feb 06 11:08:02 frost kernel: RSP: 0018:ffffae4f008efcd0 EFLAGS: 00000202
> Feb 06 11:08:02 frost kernel: RAX: 0000000000000001 RBX: ffff889c8f5bd5c0 RCX: 00000000000008e8
> Feb 06 11:08:02 frost kernel: RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff889c8f5bd5c0
> Feb 06 11:08:02 frost kernel: RBP: 0000000000000004 R08: ffff889c9f7d66a0 R09: 8080808080808080
> Feb 06 11:08:02 frost kernel: R10: ffff889945d37500 R11: fefefefefefefeff R12: ffff889c9f7d6040
> Feb 06 11:08:02 frost kernel: R13: 0000000000000002 R14: 0000000000000000 R15: 000000000003d5c0
> Feb 06 11:08:02 frost kernel: FS:  0000000000000000(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:08:02 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:08:02 frost kernel: CR2: 000077e0c4004508 CR3: 0000000278822006 CR4: 00000000003706f0
> Feb 06 11:08:02 frost kernel: Call Trace:
> Feb 06 11:08:02 frost kernel:  <IRQ>
> Feb 06 11:08:02 frost kernel:  ? watchdog_timer_fn.cold+0x226/0x22b
> Feb 06 11:08:02 frost kernel:  ? __pfx_watchdog_timer_fn+0x10/0x10
> Feb 06 11:08:02 frost kernel:  ? __hrtimer_run_queues+0x12f/0x2a0
> Feb 06 11:08:02 frost kernel:  ? hrtimer_interrupt+0xff/0x230
> Feb 06 11:08:02 frost kernel:  ? __sysvec_apic_timer_interrupt+0x52/0x100
> Feb 06 11:08:02 frost kernel:  ? sysvec_apic_timer_interrupt+0x6c/0x90
> Feb 06 11:08:02 frost kernel:  </IRQ>
> Feb 06 11:08:02 frost kernel:  <TASK>
> Feb 06 11:08:02 frost kernel:  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
> Feb 06 11:08:02 frost kernel:  ? native_queued_spin_lock_slowpath+0x70/0x2e0
> Feb 06 11:08:02 frost kernel:  _raw_spin_lock+0x29/0x30
> Feb 06 11:08:02 frost kernel:  decay_pcp_high+0x63/0x90
> Feb 06 11:08:02 frost kernel:  refresh_cpu_vm_stats+0xf7/0x240
> Feb 06 11:08:02 frost kernel:  vmstat_update+0x13/0x50
> Feb 06 11:08:02 frost kernel:  process_one_work+0x17b/0x330
> Feb 06 11:08:02 frost kernel:  worker_thread+0x2ce/0x3f0
> Feb 06 11:08:02 frost kernel:  ? __pfx_worker_thread+0x10/0x10
> Feb 06 11:08:02 frost kernel:  kthread+0xcf/0x100
> Feb 06 11:08:02 frost kernel:  ? __pfx_kthread+0x10/0x10
> Feb 06 11:08:02 frost kernel:  ret_from_fork+0x31/0x50
> Feb 06 11:08:02 frost kernel:  ? __pfx_kthread+0x10/0x10
> Feb 06 11:08:02 frost kernel:  ret_from_fork_asm+0x1a/0x30
> Feb 06 11:08:02 frost kernel:  </TASK>
> Feb 06 11:08:30 frost kernel: watchdog: BUG: soft lockup - CPU#3 stuck for 52s! [kworker/3:2:407]
> Feb 06 11:08:30 frost kernel: CPU#3 Utilization every 4s during lockup:
> Feb 06 11:08:30 frost kernel:         #1: 100% system,          0% softirq,          1% hardirq,          0% idle
> Feb 06 11:08:30 frost kernel:         #2: 100% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:08:30 frost kernel:         #3: 100% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:08:30 frost kernel:         #4: 101% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:08:30 frost kernel:         #5: 100% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:08:30 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:08:30 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:08:30 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:08:30 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:08:30 frost kernel: CPU: 3 UID: 0 PID: 407 Comm: kworker/3:2 Tainted: G    BUD W  OEL     6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:08:30 frost kernel: Tainted: [B]=BAD_PAGE, [U]=USER, [D]=DIE, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE, [L]=SOFTLOCKUP
> Feb 06 11:08:30 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:08:30 frost kernel: Workqueue: mm_percpu_wq vmstat_update
> Feb 06 11:08:30 frost kernel: RIP: 0010:native_queued_spin_lock_slowpath+0x70/0x2e0
> Feb 06 11:08:30 frost kernel: Code: 77 7f f0 0f ba 2b 08 0f 92 c2 8b 03 0f b6 d2 c1 e2 08 30 e4 09 d0 3d ff 00 00 00 77 5b 85 c0 74 10 0f b6 03 84 c0 74 09 f3 90 <0f> b6 03 84 c0 75 f7 b8 01 00 00 00 66 89 03 65 48 ff 05 e1 31 74
> Feb 06 11:08:30 frost kernel: RSP: 0018:ffffae4f008efcd0 EFLAGS: 00000202
> Feb 06 11:08:30 frost kernel: RAX: 0000000000000001 RBX: ffff889c8f5bd5c0 RCX: 00000000000008e8
> Feb 06 11:08:30 frost kernel: RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff889c8f5bd5c0
> Feb 06 11:08:30 frost kernel: RBP: 0000000000000004 R08: ffff889c9f7d66a0 R09: 8080808080808080
> Feb 06 11:08:30 frost kernel: R10: ffff889945d37500 R11: fefefefefefefeff R12: ffff889c9f7d6040
> Feb 06 11:08:30 frost kernel: R13: 0000000000000002 R14: 0000000000000000 R15: 000000000003d5c0
> Feb 06 11:08:30 frost kernel: FS:  0000000000000000(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:08:30 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:08:30 frost kernel: CR2: 000077e0c4004508 CR3: 0000000278822006 CR4: 00000000003706f0
> Feb 06 11:08:30 frost kernel: Call Trace:
> Feb 06 11:08:30 frost kernel:  <IRQ>
> Feb 06 11:08:30 frost kernel:  ? watchdog_timer_fn.cold+0x226/0x22b
> Feb 06 11:08:30 frost kernel:  ? __pfx_watchdog_timer_fn+0x10/0x10
> Feb 06 11:08:30 frost kernel:  ? __hrtimer_run_queues+0x12f/0x2a0
> Feb 06 11:08:30 frost kernel:  ? hrtimer_interrupt+0xff/0x230
> Feb 06 11:08:30 frost kernel:  ? __sysvec_apic_timer_interrupt+0x52/0x100
> Feb 06 11:08:30 frost kernel:  ? sysvec_apic_timer_interrupt+0x6c/0x90
> Feb 06 11:08:30 frost kernel:  </IRQ>
> Feb 06 11:08:30 frost kernel:  <TASK>
> Feb 06 11:08:30 frost kernel:  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
> Feb 06 11:08:30 frost kernel:  ? native_queued_spin_lock_slowpath+0x70/0x2e0
> Feb 06 11:08:30 frost kernel:  _raw_spin_lock+0x29/0x30
> Feb 06 11:08:30 frost kernel:  decay_pcp_high+0x63/0x90
> Feb 06 11:08:30 frost kernel:  refresh_cpu_vm_stats+0xf7/0x240
> Feb 06 11:08:30 frost kernel:  vmstat_update+0x13/0x50
> Feb 06 11:08:30 frost kernel:  process_one_work+0x17b/0x330
> Feb 06 11:08:30 frost kernel:  worker_thread+0x2ce/0x3f0
> Feb 06 11:08:30 frost kernel:  ? __pfx_worker_thread+0x10/0x10
> Feb 06 11:08:30 frost kernel:  kthread+0xcf/0x100
> Feb 06 11:08:30 frost kernel:  ? __pfx_kthread+0x10/0x10
> Feb 06 11:08:30 frost kernel:  ret_from_fork+0x31/0x50
> Feb 06 11:08:30 frost kernel:  ? __pfx_kthread+0x10/0x10
> Feb 06 11:08:30 frost kernel:  ret_from_fork_asm+0x1a/0x30
> Feb 06 11:08:30 frost kernel:  </TASK>
> Feb 06 11:08:36 frost kernel: rcu: INFO: rcu_preempt self-detected stall on CPU
> Feb 06 11:08:36 frost kernel: rcu:         3-....: (59995 ticks this GP) idle=5ce4/1/0x4000000000000000 softirq=19367/19367 fqs=14994
> Feb 06 11:08:36 frost kernel: rcu:         (t=60000 jiffies g=36465 q=18164 ncpus=8)
> Feb 06 11:08:36 frost kernel: CPU: 3 UID: 0 PID: 407 Comm: kworker/3:2 Tainted: G    BUD W  OEL     6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:08:36 frost kernel: Tainted: [B]=BAD_PAGE, [U]=USER, [D]=DIE, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE, [L]=SOFTLOCKUP
> Feb 06 11:08:36 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:08:36 frost kernel: Workqueue: mm_percpu_wq vmstat_update
> Feb 06 11:08:36 frost kernel: RIP: 0010:native_queued_spin_lock_slowpath+0x70/0x2e0
> Feb 06 11:08:36 frost kernel: Code: 77 7f f0 0f ba 2b 08 0f 92 c2 8b 03 0f b6 d2 c1 e2 08 30 e4 09 d0 3d ff 00 00 00 77 5b 85 c0 74 10 0f b6 03 84 c0 74 09 f3 90 <0f> b6 03 84 c0 75 f7 b8 01 00 00 00 66 89 03 65 48 ff 05 e1 31 74
> Feb 06 11:08:36 frost kernel: RSP: 0018:ffffae4f008efcd0 EFLAGS: 00000202
> Feb 06 11:08:36 frost kernel: RAX: 0000000000000001 RBX: ffff889c8f5bd5c0 RCX: 00000000000008e8
> Feb 06 11:08:36 frost kernel: RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff889c8f5bd5c0
> Feb 06 11:08:36 frost kernel: RBP: 0000000000000004 R08: ffff889c9f7d66a0 R09: 8080808080808080
> Feb 06 11:08:36 frost kernel: R10: ffff889945d37500 R11: fefefefefefefeff R12: ffff889c9f7d6040
> Feb 06 11:08:36 frost kernel: R13: 0000000000000002 R14: 0000000000000000 R15: 000000000003d5c0
> Feb 06 11:08:36 frost kernel: FS:  0000000000000000(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:08:36 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:08:36 frost kernel: CR2: 000077e0c4004508 CR3: 0000000278822006 CR4: 00000000003706f0
> Feb 06 11:08:36 frost kernel: Call Trace:
> Feb 06 11:08:36 frost kernel:  <IRQ>
> Feb 06 11:08:36 frost kernel:  ? rcu_dump_cpu_stacks+0xe4/0x130
> Feb 06 11:08:36 frost kernel:  ? rcu_sched_clock_irq.cold+0x1e4/0x496
> Feb 06 11:08:36 frost kernel:  ? notifier_call_chain+0x5a/0xd0
> Feb 06 11:08:36 frost kernel:  ? timekeeping_update_from_shadow.constprop.0+0x102/0x150
> Feb 06 11:08:36 frost kernel:  ? timekeeping_advance+0x344/0x530
> Feb 06 11:08:36 frost kernel:  ? update_process_times+0x80/0xd0
> Feb 06 11:08:36 frost kernel:  ? tick_nohz_handler+0x8f/0x140
> Feb 06 11:08:36 frost kernel:  ? __pfx_tick_nohz_handler+0x10/0x10
> Feb 06 11:08:36 frost kernel:  ? __hrtimer_run_queues+0x12f/0x2a0
> Feb 06 11:08:36 frost kernel:  ? hrtimer_interrupt+0xff/0x230
> Feb 06 11:08:36 frost kernel:  ? __sysvec_apic_timer_interrupt+0x52/0x100
> Feb 06 11:08:36 frost kernel:  ? sysvec_apic_timer_interrupt+0x6c/0x90
> Feb 06 11:08:36 frost kernel:  </IRQ>
> Feb 06 11:08:36 frost kernel:  <TASK>
> Feb 06 11:08:36 frost kernel:  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
> Feb 06 11:08:36 frost kernel:  ? native_queued_spin_lock_slowpath+0x70/0x2e0
> Feb 06 11:08:36 frost kernel:  _raw_spin_lock+0x29/0x30
> Feb 06 11:08:36 frost kernel:  decay_pcp_high+0x63/0x90
> Feb 06 11:08:36 frost kernel:  refresh_cpu_vm_stats+0xf7/0x240
> Feb 06 11:08:36 frost kernel:  vmstat_update+0x13/0x50
> Feb 06 11:08:36 frost kernel:  process_one_work+0x17b/0x330
> Feb 06 11:08:36 frost kernel:  worker_thread+0x2ce/0x3f0
> Feb 06 11:08:36 frost kernel:  ? __pfx_worker_thread+0x10/0x10
> Feb 06 11:08:36 frost kernel:  kthread+0xcf/0x100
> Feb 06 11:08:36 frost kernel:  ? __pfx_kthread+0x10/0x10
> Feb 06 11:08:36 frost kernel:  ret_from_fork+0x31/0x50
> Feb 06 11:08:36 frost kernel:  ? __pfx_kthread+0x10/0x10
> Feb 06 11:08:36 frost kernel:  ret_from_fork_asm+0x1a/0x30
> Feb 06 11:08:36 frost kernel:  </TASK>
> Feb 06 11:08:52 frost kernel: rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 3-.... } 60157 jiffies s: 1561 root: 0x8/.
> Feb 06 11:08:52 frost kernel: rcu: blocking rcu_node structures (internal RCU debug):
> Feb 06 11:08:52 frost kernel: Sending NMI from CPU 7 to CPUs 3:
> Feb 06 11:08:52 frost kernel: NMI backtrace for cpu 3
> Feb 06 11:08:52 frost kernel: CPU: 3 UID: 0 PID: 407 Comm: kworker/3:2 Tainted: G    BUD W  OEL     6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:08:52 frost kernel: Tainted: [B]=BAD_PAGE, [U]=USER, [D]=DIE, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE, [L]=SOFTLOCKUP
> Feb 06 11:08:52 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:08:52 frost kernel: Workqueue: mm_percpu_wq vmstat_update
> Feb 06 11:08:52 frost kernel: RIP: 0010:native_queued_spin_lock_slowpath+0x70/0x2e0
> Feb 06 11:08:52 frost kernel: Code: 77 7f f0 0f ba 2b 08 0f 92 c2 8b 03 0f b6 d2 c1 e2 08 30 e4 09 d0 3d ff 00 00 00 77 5b 85 c0 74 10 0f b6 03 84 c0 74 09 f3 90 <0f> b6 03 84 c0 75 f7 b8 01 00 00 00 66 89 03 65 48 ff 05 e1 31 74
> Feb 06 11:08:52 frost kernel: RSP: 0018:ffffae4f008efcd0 EFLAGS: 00000202
> Feb 06 11:08:52 frost kernel: RAX: 0000000000000001 RBX: ffff889c8f5bd5c0 RCX: 00000000000008e8
> Feb 06 11:08:52 frost kernel: RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff889c8f5bd5c0
> Feb 06 11:08:52 frost kernel: RBP: 0000000000000004 R08: ffff889c9f7d66a0 R09: 8080808080808080
> Feb 06 11:08:52 frost kernel: R10: ffff889945d37500 R11: fefefefefefefeff R12: ffff889c9f7d6040
> Feb 06 11:08:52 frost kernel: R13: 0000000000000002 R14: 0000000000000000 R15: 000000000003d5c0
> Feb 06 11:08:52 frost kernel: FS:  0000000000000000(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:08:52 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:08:52 frost kernel: CR2: 000077e0c4004508 CR3: 0000000278822006 CR4: 00000000003706f0
> Feb 06 11:08:52 frost kernel: Call Trace:
> Feb 06 11:08:52 frost kernel:  <NMI>
> Feb 06 11:08:52 frost kernel:  ? nmi_cpu_backtrace.cold+0x32/0x68
> Feb 06 11:08:52 frost kernel:  ? nmi_cpu_backtrace_handler+0x11/0x20
> Feb 06 11:08:52 frost kernel:  ? nmi_handle+0x5e/0x120
> Feb 06 11:08:52 frost kernel:  ? default_do_nmi+0x40/0x130
> Feb 06 11:08:52 frost kernel:  ? exc_nmi+0x122/0x1a0
> Feb 06 11:08:52 frost kernel:  ? end_repeat_nmi+0xf/0x53
> Feb 06 11:08:52 frost kernel:  ? native_queued_spin_lock_slowpath+0x70/0x2e0
> Feb 06 11:08:52 frost kernel:  ? native_queued_spin_lock_slowpath+0x70/0x2e0
> Feb 06 11:08:52 frost kernel:  ? native_queued_spin_lock_slowpath+0x70/0x2e0
> Feb 06 11:08:52 frost kernel:  </NMI>
> Feb 06 11:08:52 frost kernel:  <TASK>
> Feb 06 11:08:52 frost kernel:  _raw_spin_lock+0x29/0x30
> Feb 06 11:08:52 frost kernel:  decay_pcp_high+0x63/0x90
> Feb 06 11:08:52 frost kernel:  refresh_cpu_vm_stats+0xf7/0x240
> Feb 06 11:08:52 frost kernel:  vmstat_update+0x13/0x50
> Feb 06 11:08:52 frost kernel:  process_one_work+0x17b/0x330
> Feb 06 11:08:52 frost kernel:  worker_thread+0x2ce/0x3f0
> Feb 06 11:08:52 frost kernel:  ? __pfx_worker_thread+0x10/0x10
> Feb 06 11:08:52 frost kernel:  kthread+0xcf/0x100
> Feb 06 11:08:52 frost kernel:  ? __pfx_kthread+0x10/0x10
> Feb 06 11:08:52 frost kernel:  ret_from_fork+0x31/0x50
> Feb 06 11:08:52 frost kernel:  ? __pfx_kthread+0x10/0x10
> Feb 06 11:08:52 frost kernel:  ret_from_fork_asm+0x1a/0x30
> Feb 06 11:08:52 frost kernel:  </TASK>
> Feb 06 11:09:18 frost kernel: watchdog: BUG: soft lockup - CPU#3 stuck for 97s! [kworker/3:2:407]
> Feb 06 11:09:18 frost kernel: CPU#3 Utilization every 4s during lockup:
> Feb 06 11:09:18 frost kernel:         #1: 100% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:09:18 frost kernel:         #2: 101% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:09:18 frost kernel:         #3: 100% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:09:18 frost kernel:         #4: 100% system,          0% softirq,          1% hardirq,          0% idle
> Feb 06 11:09:18 frost kernel:         #5: 100% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:09:18 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:09:18 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:09:18 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:09:18 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:09:18 frost kernel: CPU: 3 UID: 0 PID: 407 Comm: kworker/3:2 Tainted: G    BUD W  OEL     6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:09:18 frost kernel: Tainted: [B]=BAD_PAGE, [U]=USER, [D]=DIE, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE, [L]=SOFTLOCKUP
> Feb 06 11:09:18 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:09:18 frost kernel: Workqueue: mm_percpu_wq vmstat_update
> Feb 06 11:09:18 frost kernel: RIP: 0010:native_queued_spin_lock_slowpath+0x70/0x2e0
> Feb 06 11:09:18 frost kernel: Code: 77 7f f0 0f ba 2b 08 0f 92 c2 8b 03 0f b6 d2 c1 e2 08 30 e4 09 d0 3d ff 00 00 00 77 5b 85 c0 74 10 0f b6 03 84 c0 74 09 f3 90 <0f> b6 03 84 c0 75 f7 b8 01 00 00 00 66 89 03 65 48 ff 05 e1 31 74
> Feb 06 11:09:18 frost kernel: RSP: 0018:ffffae4f008efcd0 EFLAGS: 00000202
> Feb 06 11:09:18 frost kernel: RAX: 0000000000000001 RBX: ffff889c8f5bd5c0 RCX: 00000000000008e8
> Feb 06 11:09:18 frost kernel: RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff889c8f5bd5c0
> Feb 06 11:09:18 frost kernel: RBP: 0000000000000004 R08: ffff889c9f7d66a0 R09: 8080808080808080
> Feb 06 11:09:18 frost kernel: R10: ffff889945d37500 R11: fefefefefefefeff R12: ffff889c9f7d6040
> Feb 06 11:09:18 frost kernel: R13: 0000000000000002 R14: 0000000000000000 R15: 000000000003d5c0
> Feb 06 11:09:18 frost kernel: FS:  0000000000000000(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:09:18 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:09:18 frost kernel: CR2: 000077e0c4004508 CR3: 0000000278822006 CR4: 00000000003706f0
> Feb 06 11:09:18 frost kernel: Call Trace:
> Feb 06 11:09:18 frost kernel:  <IRQ>
> Feb 06 11:09:18 frost kernel:  ? watchdog_timer_fn.cold+0x226/0x22b
> Feb 06 11:09:18 frost kernel:  ? __pfx_watchdog_timer_fn+0x10/0x10
> Feb 06 11:09:18 frost kernel:  ? __hrtimer_run_queues+0x12f/0x2a0
> Feb 06 11:09:18 frost kernel:  ? hrtimer_interrupt+0xff/0x230
> Feb 06 11:09:18 frost kernel:  ? __sysvec_apic_timer_interrupt+0x52/0x100
> Feb 06 11:09:18 frost kernel:  ? sysvec_apic_timer_interrupt+0x6c/0x90
> Feb 06 11:09:18 frost kernel:  </IRQ>
> Feb 06 11:09:18 frost kernel:  <TASK>
> Feb 06 11:09:18 frost kernel:  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
> Feb 06 11:09:18 frost kernel:  ? native_queued_spin_lock_slowpath+0x70/0x2e0
> Feb 06 11:09:18 frost kernel:  _raw_spin_lock+0x29/0x30
> Feb 06 11:09:18 frost kernel:  decay_pcp_high+0x63/0x90
> Feb 06 11:09:18 frost kernel:  refresh_cpu_vm_stats+0xf7/0x240
> Feb 06 11:09:18 frost kernel:  vmstat_update+0x13/0x50
> Feb 06 11:09:18 frost kernel:  process_one_work+0x17b/0x330
> Feb 06 11:09:18 frost kernel:  worker_thread+0x2ce/0x3f0
> Feb 06 11:09:18 frost kernel:  ? __pfx_worker_thread+0x10/0x10
> Feb 06 11:09:18 frost kernel:  kthread+0xcf/0x100
> Feb 06 11:09:18 frost kernel:  ? __pfx_kthread+0x10/0x10
> Feb 06 11:09:18 frost kernel:  ret_from_fork+0x31/0x50
> Feb 06 11:09:18 frost kernel:  ? __pfx_kthread+0x10/0x10
> Feb 06 11:09:18 frost kernel:  ret_from_fork_asm+0x1a/0x30
> Feb 06 11:09:18 frost kernel:  </TASK>
> Feb 06 11:09:46 frost kernel: watchdog: BUG: soft lockup - CPU#3 stuck for 123s! [kworker/3:2:407]
> Feb 06 11:09:46 frost kernel: CPU#3 Utilization every 4s during lockup:
> Feb 06 11:09:46 frost kernel:         #1: 100% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:09:46 frost kernel:         #2: 100% system,          0% softirq,          1% hardirq,          0% idle
> Feb 06 11:09:46 frost kernel:         #3: 100% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:09:46 frost kernel:         #4: 101% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:09:46 frost kernel:         #5: 100% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:09:46 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:09:46 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:09:46 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:09:46 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:09:46 frost kernel: CPU: 3 UID: 0 PID: 407 Comm: kworker/3:2 Tainted: G    BUD W  OEL     6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:09:46 frost kernel: Tainted: [B]=BAD_PAGE, [U]=USER, [D]=DIE, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE, [L]=SOFTLOCKUP
> Feb 06 11:09:46 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:09:46 frost kernel: Workqueue: mm_percpu_wq vmstat_update
> Feb 06 11:09:46 frost kernel: RIP: 0010:native_queued_spin_lock_slowpath+0x70/0x2e0
> Feb 06 11:09:46 frost kernel: Code: 77 7f f0 0f ba 2b 08 0f 92 c2 8b 03 0f b6 d2 c1 e2 08 30 e4 09 d0 3d ff 00 00 00 77 5b 85 c0 74 10 0f b6 03 84 c0 74 09 f3 90 <0f> b6 03 84 c0 75 f7 b8 01 00 00 00 66 89 03 65 48 ff 05 e1 31 74
> Feb 06 11:09:46 frost kernel: RSP: 0018:ffffae4f008efcd0 EFLAGS: 00000202
> Feb 06 11:09:46 frost kernel: RAX: 0000000000000001 RBX: ffff889c8f5bd5c0 RCX: 00000000000008e8
> Feb 06 11:09:46 frost kernel: RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff889c8f5bd5c0
> Feb 06 11:09:46 frost kernel: RBP: 0000000000000004 R08: ffff889c9f7d66a0 R09: 8080808080808080
> Feb 06 11:09:46 frost kernel: R10: ffff889945d37500 R11: fefefefefefefeff R12: ffff889c9f7d6040
> Feb 06 11:09:46 frost kernel: R13: 0000000000000002 R14: 0000000000000000 R15: 000000000003d5c0
> Feb 06 11:09:46 frost kernel: FS:  0000000000000000(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:09:46 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:09:46 frost kernel: CR2: 000077e0c4004508 CR3: 0000000278822006 CR4: 00000000003706f0
> Feb 06 11:09:46 frost kernel: Call Trace:
> Feb 06 11:09:46 frost kernel:  <IRQ>
> Feb 06 11:09:46 frost kernel:  ? watchdog_timer_fn.cold+0x226/0x22b
> Feb 06 11:09:46 frost kernel:  ? __pfx_watchdog_timer_fn+0x10/0x10
> Feb 06 11:09:46 frost kernel:  ? __hrtimer_run_queues+0x12f/0x2a0
> Feb 06 11:09:46 frost kernel:  ? hrtimer_interrupt+0xff/0x230
> Feb 06 11:09:46 frost kernel:  ? __sysvec_apic_timer_interrupt+0x52/0x100
> Feb 06 11:09:46 frost kernel:  ? sysvec_apic_timer_interrupt+0x6c/0x90
> Feb 06 11:09:46 frost kernel:  </IRQ>
> Feb 06 11:09:46 frost kernel:  <TASK>
> Feb 06 11:09:46 frost kernel:  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
> Feb 06 11:09:46 frost kernel:  ? native_queued_spin_lock_slowpath+0x70/0x2e0
> Feb 06 11:09:46 frost kernel:  _raw_spin_lock+0x29/0x30
> Feb 06 11:09:46 frost kernel:  decay_pcp_high+0x63/0x90
> Feb 06 11:09:46 frost kernel:  refresh_cpu_vm_stats+0xf7/0x240
> Feb 06 11:09:46 frost kernel:  vmstat_update+0x13/0x50
> Feb 06 11:09:46 frost kernel:  process_one_work+0x17b/0x330
> Feb 06 11:09:46 frost kernel:  worker_thread+0x2ce/0x3f0
> Feb 06 11:09:46 frost kernel:  ? __pfx_worker_thread+0x10/0x10
> Feb 06 11:09:46 frost kernel:  kthread+0xcf/0x100
> Feb 06 11:09:46 frost kernel:  ? __pfx_kthread+0x10/0x10
> Feb 06 11:09:46 frost kernel:  ret_from_fork+0x31/0x50
> Feb 06 11:09:46 frost kernel:  ? __pfx_kthread+0x10/0x10
> Feb 06 11:09:46 frost kernel:  ret_from_fork_asm+0x1a/0x30
> Feb 06 11:09:46 frost kernel:  </TASK>
> Feb 06 11:10:14 frost kernel: watchdog: BUG: soft lockup - CPU#3 stuck for 149s! [kworker/3:2:407]
> Feb 06 11:10:14 frost kernel: CPU#3 Utilization every 4s during lockup:
> Feb 06 11:10:14 frost kernel:         #1: 100% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:10:14 frost kernel:         #2: 100% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:10:14 frost kernel:         #3: 101% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:10:14 frost kernel:         #4: 100% system,          0% softirq,          1% hardirq,          0% idle
> Feb 06 11:10:14 frost kernel:         #5: 100% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:10:14 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:10:14 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:10:14 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:10:14 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:10:14 frost kernel: CPU: 3 UID: 0 PID: 407 Comm: kworker/3:2 Tainted: G    BUD W  OEL     6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:10:14 frost kernel: Tainted: [B]=BAD_PAGE, [U]=USER, [D]=DIE, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE, [L]=SOFTLOCKUP
> Feb 06 11:10:14 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:10:14 frost kernel: Workqueue: mm_percpu_wq vmstat_update
> Feb 06 11:10:14 frost kernel: RIP: 0010:native_queued_spin_lock_slowpath+0x70/0x2e0
> Feb 06 11:10:14 frost kernel: Code: 77 7f f0 0f ba 2b 08 0f 92 c2 8b 03 0f b6 d2 c1 e2 08 30 e4 09 d0 3d ff 00 00 00 77 5b 85 c0 74 10 0f b6 03 84 c0 74 09 f3 90 <0f> b6 03 84 c0 75 f7 b8 01 00 00 00 66 89 03 65 48 ff 05 e1 31 74
> Feb 06 11:10:14 frost kernel: RSP: 0018:ffffae4f008efcd0 EFLAGS: 00000202
> Feb 06 11:10:14 frost kernel: RAX: 0000000000000001 RBX: ffff889c8f5bd5c0 RCX: 00000000000008e8
> Feb 06 11:10:14 frost kernel: RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff889c8f5bd5c0
> Feb 06 11:10:14 frost kernel: RBP: 0000000000000004 R08: ffff889c9f7d66a0 R09: 8080808080808080
> Feb 06 11:10:14 frost kernel: R10: ffff889945d37500 R11: fefefefefefefeff R12: ffff889c9f7d6040
> Feb 06 11:10:14 frost kernel: R13: 0000000000000002 R14: 0000000000000000 R15: 000000000003d5c0
> Feb 06 11:10:14 frost kernel: FS:  0000000000000000(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:10:14 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:10:14 frost kernel: CR2: 000077e0c4004508 CR3: 0000000278822006 CR4: 00000000003706f0
> Feb 06 11:10:14 frost kernel: Call Trace:
> Feb 06 11:10:14 frost kernel:  <IRQ>
> Feb 06 11:10:14 frost kernel:  ? watchdog_timer_fn.cold+0x226/0x22b
> Feb 06 11:10:14 frost kernel:  ? __pfx_watchdog_timer_fn+0x10/0x10
> Feb 06 11:10:14 frost kernel:  ? __hrtimer_run_queues+0x12f/0x2a0
> Feb 06 11:10:14 frost kernel:  ? hrtimer_interrupt+0xff/0x230
> Feb 06 11:10:14 frost kernel:  ? __sysvec_apic_timer_interrupt+0x52/0x100
> Feb 06 11:10:14 frost kernel:  ? sysvec_apic_timer_interrupt+0x6c/0x90
> Feb 06 11:10:14 frost kernel:  </IRQ>
> Feb 06 11:10:14 frost kernel:  <TASK>
> Feb 06 11:10:14 frost kernel:  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
> Feb 06 11:10:14 frost kernel:  ? native_queued_spin_lock_slowpath+0x70/0x2e0
> Feb 06 11:10:14 frost kernel:  _raw_spin_lock+0x29/0x30
> Feb 06 11:10:14 frost kernel:  decay_pcp_high+0x63/0x90
> Feb 06 11:10:14 frost kernel:  refresh_cpu_vm_stats+0xf7/0x240
> Feb 06 11:10:14 frost kernel:  vmstat_update+0x13/0x50
> Feb 06 11:10:14 frost kernel:  process_one_work+0x17b/0x330
> Feb 06 11:10:14 frost kernel:  worker_thread+0x2ce/0x3f0
> Feb 06 11:10:14 frost kernel:  ? __pfx_worker_thread+0x10/0x10
> Feb 06 11:10:14 frost kernel:  kthread+0xcf/0x100
> Feb 06 11:10:14 frost kernel:  ? __pfx_kthread+0x10/0x10
> Feb 06 11:10:14 frost kernel:  ret_from_fork+0x31/0x50
> Feb 06 11:10:14 frost kernel:  ? __pfx_kthread+0x10/0x10
> Feb 06 11:10:14 frost kernel:  ret_from_fork_asm+0x1a/0x30
> Feb 06 11:10:14 frost kernel:  </TASK>
> Feb 06 11:10:42 frost kernel: watchdog: BUG: soft lockup - CPU#3 stuck for 175s! [kworker/3:2:407]
> Feb 06 11:10:42 frost kernel: CPU#3 Utilization every 4s during lockup:
> Feb 06 11:10:42 frost kernel:         #1: 100% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:10:42 frost kernel:         #2: 100% system,          0% softirq,          1% hardirq,          0% idle
> Feb 06 11:10:42 frost kernel:         #3: 100% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:10:42 frost kernel:         #4: 100% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:10:42 frost kernel:         #5: 101% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:10:42 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:10:42 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:10:42 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:10:42 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:10:42 frost kernel: CPU: 3 UID: 0 PID: 407 Comm: kworker/3:2 Tainted: G    BUD W  OEL     6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:10:42 frost kernel: Tainted: [B]=BAD_PAGE, [U]=USER, [D]=DIE, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE, [L]=SOFTLOCKUP
> Feb 06 11:10:42 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:10:42 frost kernel: Workqueue: mm_percpu_wq vmstat_update
> Feb 06 11:10:42 frost kernel: RIP: 0010:native_queued_spin_lock_slowpath+0x70/0x2e0
> Feb 06 11:10:42 frost kernel: Code: 77 7f f0 0f ba 2b 08 0f 92 c2 8b 03 0f b6 d2 c1 e2 08 30 e4 09 d0 3d ff 00 00 00 77 5b 85 c0 74 10 0f b6 03 84 c0 74 09 f3 90 <0f> b6 03 84 c0 75 f7 b8 01 00 00 00 66 89 03 65 48 ff 05 e1 31 74
> Feb 06 11:10:42 frost kernel: RSP: 0018:ffffae4f008efcd0 EFLAGS: 00000202
> Feb 06 11:10:42 frost kernel: RAX: 0000000000000001 RBX: ffff889c8f5bd5c0 RCX: 00000000000008e8
> Feb 06 11:10:42 frost kernel: RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff889c8f5bd5c0
> Feb 06 11:10:42 frost kernel: RBP: 0000000000000004 R08: ffff889c9f7d66a0 R09: 8080808080808080
> Feb 06 11:10:42 frost kernel: R10: ffff889945d37500 R11: fefefefefefefeff R12: ffff889c9f7d6040
> Feb 06 11:10:42 frost kernel: R13: 0000000000000002 R14: 0000000000000000 R15: 000000000003d5c0
> Feb 06 11:10:42 frost kernel: FS:  0000000000000000(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:10:42 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:10:42 frost kernel: CR2: 000077e0c4004508 CR3: 0000000278822006 CR4: 00000000003706f0
> Feb 06 11:10:42 frost kernel: Call Trace:
> Feb 06 11:10:42 frost kernel:  <IRQ>
> Feb 06 11:10:42 frost kernel:  ? watchdog_timer_fn.cold+0x226/0x22b
> Feb 06 11:10:42 frost kernel:  ? __pfx_watchdog_timer_fn+0x10/0x10
> Feb 06 11:10:42 frost kernel:  ? __hrtimer_run_queues+0x12f/0x2a0
> Feb 06 11:10:42 frost kernel:  ? hrtimer_interrupt+0xff/0x230
> Feb 06 11:10:42 frost kernel:  ? __sysvec_apic_timer_interrupt+0x52/0x100
> Feb 06 11:10:42 frost kernel:  ? sysvec_apic_timer_interrupt+0x6c/0x90
> Feb 06 11:10:42 frost kernel:  </IRQ>
> Feb 06 11:10:42 frost kernel:  <TASK>
> Feb 06 11:10:42 frost kernel:  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
> Feb 06 11:10:42 frost kernel:  ? native_queued_spin_lock_slowpath+0x70/0x2e0
> Feb 06 11:10:42 frost kernel:  _raw_spin_lock+0x29/0x30
> Feb 06 11:10:42 frost kernel:  decay_pcp_high+0x63/0x90
> Feb 06 11:10:42 frost kernel:  refresh_cpu_vm_stats+0xf7/0x240
> Feb 06 11:10:42 frost kernel:  vmstat_update+0x13/0x50
> Feb 06 11:10:42 frost kernel:  process_one_work+0x17b/0x330
> Feb 06 11:10:42 frost kernel:  worker_thread+0x2ce/0x3f0
> Feb 06 11:10:42 frost kernel:  ? __pfx_worker_thread+0x10/0x10
> Feb 06 11:10:42 frost kernel:  kthread+0xcf/0x100
> Feb 06 11:10:42 frost kernel:  ? __pfx_kthread+0x10/0x10
> Feb 06 11:10:42 frost kernel:  ret_from_fork+0x31/0x50
> Feb 06 11:10:42 frost kernel:  ? __pfx_kthread+0x10/0x10
> Feb 06 11:10:42 frost kernel:  ret_from_fork_asm+0x1a/0x30
> Feb 06 11:10:42 frost kernel:  </TASK>
> Feb 06 11:11:10 frost kernel: watchdog: BUG: soft lockup - CPU#3 stuck for 201s! [kworker/3:2:407]
> Feb 06 11:11:10 frost kernel: CPU#3 Utilization every 4s during lockup:
> Feb 06 11:11:10 frost kernel:         #1: 100% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:11:10 frost kernel:         #2: 100% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:11:10 frost kernel:         #3: 101% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:11:10 frost kernel:         #4: 100% system,          0% softirq,          1% hardirq,          0% idle
> Feb 06 11:11:10 frost kernel:         #5: 100% system,          0% softirq,          0% hardirq,          0% idle
> Feb 06 11:11:10 frost kernel: Modules linked in: cts rpcsec_gss_krb5 nfsv4 dns_resolver nfs netfs uinput ccm snd_seq_dummy rfcomm snd_hrtimer snd_seq snd_seq_device rpcrdma rdma_cm iw_cm ib_cm ib_core cmac algif_hash algif_skcipher af_alg wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nf_conntrack_tftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bnep nf_tables joydev rmi_smbus rmi_core snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_sof_board_helpers snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_acpi_intel_match intel_uncore_frequency snd_soc_acpi_intel_sdca_quirks
> Feb 06 11:11:10 frost kernel:  intel_uncore_frequency_common soundwire_generic_allocation intel_pmc_core_pltdrv snd_soc_acpi intel_pmc_core soundwire_bus intel_vsec pmt_telemetry snd_soc_sdca pmt_class intel_tcc_cooling snd_soc_avs x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp coretemp snd_hda_ext_core snd_soc_core kvm_intel snd_compress processor_thermal_device_pci_legacy ac97_bus processor_thermal_device kvm snd_pcm_dmaengine uvcvideo btusb iwlmvm iTCO_wdt snd_hda_intel videobuf2_vmalloc intel_pmc_bxt btrtl processor_thermal_wt_hint snd_intel_dspcfg uvc intel_rapl_msr iTCO_vendor_support ee1004 mei_hdcp mei_pxp rapl processor_thermal_rfim btintel snd_intel_sdw_acpi videobuf2_memops mac80211 btbcm intel_cstate processor_thermal_rapl videobuf2_v4l2 snd_hda_codec btmtk vfat videobuf2_common libarc4 intel_rapl_common fat snd_hda_core iwlwifi bluetooth e1000e snd_hwdep videodev intel_uncore snd_pcm ptp spi_nor processor_thermal_wt_req think_lmi i2c_i801 psmouse pcspkr ucsi_acpi intel_wmi_thunderbolt wmi_bmof thunderbolt
> Feb 06 11:11:10 frost kernel:  firmware_attributes_class mc mtd crc16 snd_timer processor_thermal_power_floor i2c_smbus pps_core cfg80211 typec_ucsi mei_me i2c_mux processor_thermal_mbox mei mousedev typec intel_soc_dts_iosf intel_pch_thermal roles int3403_thermal int340x_thermal_zone intel_hid int3400_thermal pinctrl_cannonlake acpi_thermal_rel acpi_pad mac_hid nfsd nfs_acl vboxnetadp(OE) vboxnetflt(OE) lockd grace vboxdrv(OE) tcp_lp nfs_localio auth_rpcgss drivetemp sg crypto_user sunrpc loop nfnetlink ip_tables x_tables btrfs blake2b_generic libcrc32c crc32c_generic xor raid6_pq dm_crypt cbc encrypted_keys trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid dm_mod i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw i2c_algo_bit thinkpad_acpi atkbd aesni_intel drm_buddy rtsx_pci_sdmmc libps2 sparse_keymap mmc_core vivaldi_fmap ttm gf128mul platform_profile nvme crypto_simd intel_gtt snd cryptd drm_display_helper
> Feb 06 11:11:10 frost kernel:  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
> Feb 06 11:11:10 frost kernel: CPU: 3 UID: 0 PID: 407 Comm: kworker/3:2 Tainted: G    BUD W  OEL     6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
> Feb 06 11:11:10 frost kernel: Tainted: [B]=BAD_PAGE, [U]=USER, [D]=DIE, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE, [L]=SOFTLOCKUP
> Feb 06 11:11:10 frost kernel: Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
> Feb 06 11:11:10 frost kernel: Workqueue: mm_percpu_wq vmstat_update
> Feb 06 11:11:10 frost kernel: RIP: 0010:native_queued_spin_lock_slowpath+0x70/0x2e0
> Feb 06 11:11:10 frost kernel: Code: 77 7f f0 0f ba 2b 08 0f 92 c2 8b 03 0f b6 d2 c1 e2 08 30 e4 09 d0 3d ff 00 00 00 77 5b 85 c0 74 10 0f b6 03 84 c0 74 09 f3 90 <0f> b6 03 84 c0 75 f7 b8 01 00 00 00 66 89 03 65 48 ff 05 e1 31 74
> Feb 06 11:11:10 frost kernel: RSP: 0018:ffffae4f008efcd0 EFLAGS: 00000202
> Feb 06 11:11:10 frost kernel: RAX: 0000000000000001 RBX: ffff889c8f5bd5c0 RCX: 00000000000008e8
> Feb 06 11:11:10 frost kernel: RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff889c8f5bd5c0
> Feb 06 11:11:10 frost kernel: RBP: 0000000000000004 R08: ffff889c9f7d66a0 R09: 8080808080808080
> Feb 06 11:11:10 frost kernel: R10: ffff889945d37500 R11: fefefefefefefeff R12: ffff889c9f7d6040
> Feb 06 11:11:10 frost kernel: R13: 0000000000000002 R14: 0000000000000000 R15: 000000000003d5c0
> Feb 06 11:11:10 frost kernel: FS:  0000000000000000(0000) GS:ffff889c8f580000(0000) knlGS:0000000000000000
> Feb 06 11:11:10 frost kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> Feb 06 11:11:10 frost kernel: CR2: 000077e0c4004508 CR3: 0000000278822006 CR4: 00000000003706f0
> Feb 06 11:11:10 frost kernel: Call Trace:
> Feb 06 11:11:10 frost kernel:  <IRQ>
> Feb 06 11:11:10 frost kernel:  ? watchdog_timer_fn.cold+0x226/0x22b
> Feb 06 11:11:10 frost kernel:  ? __pfx_watchdog_timer_fn+0x10/0x10
> Feb 06 11:11:10 frost kernel:  ? __hrtimer_run_queues+0x12f/0x2a0
> Feb 06 11:11:10 frost kernel:  ? hrtimer_interrupt+0xff/0x230
> Feb 06 11:11:10 frost kernel:  ? __sysvec_apic_timer_interrupt+0x52/0x100
> Feb 06 11:11:10 frost kernel:  ? sysvec_apic_timer_interrupt+0x6c/0x90
> Feb 06 11:11:10 frost kernel:  </IRQ>
> Feb 06 11:11:10 frost kernel:  <TASK>
> Feb 06 11:11:10 frost kernel:  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
> Feb 06 11:11:10 frost kernel:  ? native_queued_spin_lock_slowpath+0x70/0x2e0
> Feb 06 11:11:10 frost kernel:  _raw_spin_lock+0x29/0x30
> Feb 06 11:11:10 frost kernel:  decay_pcp_high+0x63/0x90
> Feb 06 11:11:10 frost kernel:  refresh_cpu_vm_stats+0xf7/0x240
> Feb 06 11:11:10 frost kernel:  vmstat_update+0x13/0x50
> Feb 06 11:11:10 frost kernel:  process_one_work+0x17b/0x330
> Feb 06 11:11:10 frost kernel:  worker_thread+0x2ce/0x3f0
> Feb 06 11:11:10 frost kernel:  ? __pfx_worker_thread+0x10/0x10
> Feb 06 11:11:10 frost kernel:  kthread+0xcf/0x100
> Feb 06 11:11:10 frost kernel:  ? __pfx_kthread+0x10/0x10
> Feb 06 11:11:10 frost kernel:  ret_from_fork+0x31/0x50
> Feb 06 11:11:10 frost kernel:  ? __pfx_kthread+0x10/0x10
> Feb 06 11:11:10 frost kernel:  ret_from_fork_asm+0x1a/0x30
> Feb 06 11:11:10 frost kernel:  </TASK>
> Feb 06 11:11:36 frost kernel: rcu: INFO: rcu_preempt self-detected stall on CPU
> Feb 06 11:11:36 frost kernel: rcu:         3-....: (239994 ticks this GP) idle=5ce4/1/0x4000000000000000 softirq=19367/19367 fqs=59993
> Feb 06 11:11:36 frost kernel: rcu:         (t=240003 jiffies g=36465 q=37177 ncpus=8)


^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-07  9:34 ` [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13 Miklos Szeredi
  2025-02-07  9:45   ` Matthew Wilcox
  2025-02-07 11:00   ` Mantas Mikulėnas
@ 2025-02-07 16:49   ` Vlastimil Babka
  2025-02-07 17:29     ` Josef Bacik
  2025-02-10  8:52   ` [PATCH] fuse: prevent folio use-after-free in readahead Vlastimil Babka
  3 siblings, 1 reply; 34+ messages in thread
From: Vlastimil Babka @ 2025-02-07 16:49 UTC (permalink / raw)
  To: Miklos Szeredi, Christian Heusel
  Cc: Josef Bacik, Miklos Szeredi, regressions, linux-kernel,
	linux-fsdevel, Joanne Koong, Matthew Wilcox, linux-mm,
	Mantas Mikulėnas

On 2/7/25 10:34, Miklos Szeredi wrote:
> [Adding Joanne, Willy and linux-mm].
> 
> 
> On Thu, 6 Feb 2025 at 11:54, Christian Heusel <christian@heusel.eu> wrote:
>>
>> Hello everyone,
>>
>> we have recently received [a report][0] on the Arch Linux Gitlab about
>> multiple users having system crashes when using Flatpak programs and
>> related FUSE errors in their dmesg logs.
>>
>> We have subsequently bisected the issue within the mainline kernel tree
>> to the following commit:
>>
>>     3eab9d7bc2f4 ("fuse: convert readahead to use folios")

I see that commit removes folio_put() from fuse_readpages_end(). Also it now
uses readahead_folio() in fuse_readahead() which does folio_put(). So that's
suspicious to me. It might be storing pointers to pages to ap->pages without
pinning them with a refcount.

But I don't understand the code enough to know what's the proper fix. A
probably stupid fix would be to use __readahead_folio() instead and keep the
folio_put() in fuse_readpages_end().

>>
>> The error is still present in the latest mainline release 6.14-rc1 and
>> sadly testing a revert is not trivially possible due to conflicts.
>>
>> I have attached a dmesg output from a boot where the failure occurs and
>> I'm happy to test any debug patches with the help of the other reporters
>> on our GitLab.
>>
>> We also noticed that there already was [a discussion][1] about a related
>> commit but the fix for the issue back then 7a4f54187373 ("fuse: fix
>> direct io folio offset and length calculation") was already included in
>> the revisions we have tested.
>>
>> Cheers,
>> Christian
>>
>> [0]: https://gitlab.archlinux.org/archlinux/packaging/packages/linux/-/issues/110
>> [1]: https://lore.kernel.org/all/p3iss6hssbvtdutnwmuddvdadubrhfkdoosgmbewvo674f7f3y@cwnwffjqltzw/
> 
> Thanks for the report.
> 
> Seems like page allocation gets an inconsistent page (mapcount != -1)
> in the report below.
> 
> Any ideas why this could be happening?
> 
> Thanks,
> Miklos
> 
>> Feb 06 08:54:47 archvm kernel: BUG: Bad page state in process rnote  pfn:67587
>> Feb 06 08:54:47 archvm kernel: page: refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x67587
>> Feb 06 08:54:47 archvm kernel: flags: 0xfffffc8000020(lru|node=0|zone=1|lastcpupid=0x1fffff)
>> Feb 06 08:54:47 archvm kernel: raw: 000fffffc8000020 dead000000000100 dead000000000122 0000000000000000
>> Feb 06 08:54:47 archvm kernel: raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000
>> Feb 06 08:54:47 archvm kernel: page dumped because: PAGE_FLAGS_CHECK_AT_PREP flag(s) set
>> Feb 06 08:54:47 archvm kernel: Modules linked in: snd_seq_dummy snd_hrtimer snd_seq snd_seq_device rfkill vfat fat intel_rapl_msr intel_rapl_common kvm_amd ccp snd_hda_codec_hdmi snd_hda_codec_generic snd_hda_intel snd_intel_dspcfg kvm snd_intel_sdw_acpi snd_hda_codec polyval_clmulni snd_hda_core polyval_generic ghash_clmulni_intel snd_hwdep iTCO_wdt sha512_ssse3 intel_pmc_bxt sha256_ssse3 snd_pcm joydev iTCO_vendor_support sha1_ssse3 snd_timer aesni_intel snd crypto_simd i2c_i801 psmouse cryptd pcspkr i2c_smbus soundcore lpc_ich i2c_mux mousedev mac_hid crypto_user loop dm_mod nfnetlink vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock vmw_vmci qemu_fw_cfg ip_tables x_tables ext4 crc16 mbcache jbd2 nouveau drm_ttm_helper ttm video gpu_sched i2c_algo_bit drm_gpuvm serio_raw drm_exec atkbd mxm_wmi wmi libps2 vivaldi_fmap drm_display_helper virtio_net net_failover cec intel_agp virtio_input virtio_rng virtio_console failover virtio_blk i8042 intel_gtt serio
>> Feb 06 08:54:47 archvm kernel: CPU: 0 UID: 1000 PID: 1962 Comm: rnote Not tainted 6.14.0-rc1-1-mainline #1 715c0460cf5d3cc18e3178ef3209cee42e97ae1c
>> Feb 06 08:54:47 archvm kernel: Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS unknown 02/02/2022
>> Feb 06 08:54:47 archvm kernel: Call Trace:
>> Feb 06 08:54:47 archvm kernel:
>> Feb 06 08:54:47 archvm kernel:  dump_stack_lvl+0x5d/0x80
>> Feb 06 08:54:47 archvm kernel:  bad_page.cold+0x7a/0x91
>> Feb 06 08:54:47 archvm kernel:  __rmqueue_pcplist+0x200/0xc50
>> Feb 06 08:54:47 archvm kernel:  get_page_from_freelist+0x2ae/0x1740
>> Feb 06 08:54:47 archvm kernel:  ? srso_return_thunk+0x5/0x5f
>> Feb 06 08:54:47 archvm kernel:  ? __pm_runtime_suspend+0x69/0xc0
>> Feb 06 08:54:47 archvm kernel:  ? srso_return_thunk+0x5/0x5f
>> Feb 06 08:54:47 archvm kernel:  ? __seccomp_filter+0x303/0x520
>> Feb 06 08:54:47 archvm kernel:  ? srso_return_thunk+0x5/0x5f
>> Feb 06 08:54:47 archvm kernel:  __alloc_frozen_pages_noprof+0x184/0x330
>> Feb 06 08:54:47 archvm kernel:  alloc_pages_mpol+0x7d/0x160
>> Feb 06 08:54:47 archvm kernel:  folio_alloc_mpol_noprof+0x14/0x40
>> Feb 06 08:54:47 archvm kernel:  vma_alloc_folio_noprof+0x69/0xb0
>> Feb 06 08:54:47 archvm kernel:  do_anonymous_page+0x32a/0x8b0
>> Feb 06 08:54:47 archvm kernel:  ? srso_return_thunk+0x5/0x5f
>> Feb 06 08:54:47 archvm kernel:  ? ___pte_offset_map+0x1b/0x180
>> Feb 06 08:54:47 archvm kernel:  __handle_mm_fault+0xb5e/0xfe0
>> Feb 06 08:54:47 archvm kernel:  handle_mm_fault+0xe2/0x2c0
>> Feb 06 08:54:47 archvm kernel:  do_user_addr_fault+0x217/0x620
>> Feb 06 08:54:47 archvm kernel:  exc_page_fault+0x81/0x1b0
>> Feb 06 08:54:47 archvm kernel:  asm_exc_page_fault+0x26/0x30
>> Feb 06 08:54:47 archvm kernel: RIP: 0033:0x7fcfc31c8cf9
>> Feb 06 08:54:47 archvm kernel: Code: 34 19 49 39 d4 49 89 74 24 60 0f 95 c2 48 29 d8 48 83 c1 10 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 51 f8 <48> 89 46 08 e9 22 ff ff ff 48 8d 3d 07 ed 10 00 e8 62 c3 ff ff 48
>> Feb 06 08:54:47 archvm kernel: RSP: 002b:00007fff1f931850 EFLAGS: 00010206
>> Feb 06 08:54:47 archvm kernel: RAX: 000000000000bee1 RBX: 0000000000000140 RCX: 000056541d491ff0
>> Feb 06 08:54:47 archvm kernel: RDX: 0000000000000141 RSI: 000056541d492120 RDI: 0000000000000000
>> Feb 06 08:54:47 archvm kernel: RBP: 00007fff1f9318a0 R08: 0000000000000140 R09: 0000000000000001
>> Feb 06 08:54:47 archvm kernel: R10: 0000000000000004 R11: 0000565419567488 R12: 00007fcfc3308ac0
>> Feb 06 08:54:47 archvm kernel: R13: 0000000000000130 R14: 00007fcfc3308b20 R15: 0000000000000140
>> Feb 06 08:54:47 archvm kernel:
>> Feb 06 08:54:47 archvm kernel: Disabling lock debugging due to kernel taint
>> Feb 06 08:54:47 archvm kernel: Oops: general protection fault, probably for non-canonical address 0xdead000000000122: 0000 [#1] PREEMPT SMP NOPTI
>> Feb 06 08:54:47 archvm kernel: CPU: 0 UID: 1000 PID: 1962 Comm: rnote Tainted: G    B              6.14.0-rc1-1-mainline #1 715c0460cf5d3cc18e3178ef3209cee42e97ae1c
>> Feb 06 08:54:47 archvm kernel: Tainted: [B]=BAD_PAGE
>> Feb 06 08:54:47 archvm kernel: Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS unknown 02/02/2022
>> Feb 06 08:54:47 archvm kernel: RIP: 0010:__rmqueue_pcplist+0xb0/0xc50
>> Feb 06 08:54:47 archvm kernel: Code: 00 4c 01 f0 48 89 7c 24 30 48 89 44 24 20 49 8b 04 24 49 39 c4 0f 84 6c 01 00 00 49 8b 14 24 48 8b 42 08 48 8b 0a 48 8d 5a f8 <48> 3b 10 0f 85 8d 0b 00 00 48 3b 51 08 0f 85 d5 0f be ff 48 89 41
>> Feb 06 08:54:47 archvm kernel: RSP: 0000:ffffab3b84a2faa0 EFLAGS: 00010297
>> Feb 06 08:54:47 archvm kernel: RAX: dead000000000122 RBX: ffffdd38819d61c0 RCX: dead000000000100
>> Feb 06 08:54:47 archvm kernel: RDX: ffffdd38819d61c8 RSI: ffff9b31fd2218c0 RDI: ffff9b31fd2218c0
>> Feb 06 08:54:47 archvm kernel: RBP: 0000000000000010 R08: 0000000000000000 R09: ffffab3b84a2f920
>> Feb 06 08:54:47 archvm kernel: R10: ffffffffbdeb44a8 R11: 0000000000000003 R12: ffff9b31fd23d4b0
>> Feb 06 08:54:47 archvm kernel: R13: 0000000000000000 R14: ffff9b31fef21980 R15: ffff9b31fd23d480
>> Feb 06 08:54:47 archvm kernel: FS:  00007fcfbead5140(0000) GS:ffff9b31fd200000(0000) knlGS:0000000000000000
>> Feb 06 08:54:47 archvm kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
>> Feb 06 08:54:47 archvm kernel: CR2: 000056541d492128 CR3: 000000001ed94000 CR4: 00000000003506f0
>> Feb 06 08:54:47 archvm kernel: Call Trace:
>> Feb 06 08:54:47 archvm kernel:
>> Feb 06 08:54:47 archvm kernel:  ? __die_body.cold+0x19/0x27
>> Feb 06 08:54:47 archvm kernel:  ? die_addr+0x3c/0x60
>> Feb 06 08:54:47 archvm kernel:  ? exc_general_protection+0x17d/0x400
>> Feb 06 08:54:47 archvm kernel:  ? asm_exc_general_protection+0x26/0x30
>> Feb 06 08:54:47 archvm kernel:  ? __rmqueue_pcplist+0xb0/0xc50
>> Feb 06 08:54:47 archvm kernel:  get_page_from_freelist+0x2ae/0x1740
>> Feb 06 08:54:47 archvm kernel:  ? srso_return_thunk+0x5/0x5f
>> Feb 06 08:54:47 archvm kernel:  ? __pm_runtime_suspend+0x69/0xc0
>> Feb 06 08:54:47 archvm kernel:  ? srso_return_thunk+0x5/0x5f
>> Feb 06 08:54:47 archvm kernel:  ? __seccomp_filter+0x303/0x520
>> Feb 06 08:54:47 archvm kernel:  ? srso_return_thunk+0x5/0x5f
>> Feb 06 08:54:47 archvm kernel:  __alloc_frozen_pages_noprof+0x184/0x330
>> Feb 06 08:54:47 archvm kernel:  alloc_pages_mpol+0x7d/0x160
>> Feb 06 08:54:47 archvm kernel:  folio_alloc_mpol_noprof+0x14/0x40
>> Feb 06 08:54:47 archvm kernel:  vma_alloc_folio_noprof+0x69/0xb0
>> Feb 06 08:54:47 archvm kernel:  do_anonymous_page+0x32a/0x8b0
>> Feb 06 08:54:47 archvm kernel:  ? srso_return_thunk+0x5/0x5f
>> Feb 06 08:54:47 archvm kernel:  ? ___pte_offset_map+0x1b/0x180
>> Feb 06 08:54:47 archvm kernel:  __handle_mm_fault+0xb5e/0xfe0
>> Feb 06 08:54:47 archvm kernel:  handle_mm_fault+0xe2/0x2c0
>> Feb 06 08:54:47 archvm kernel:  do_user_addr_fault+0x217/0x620
>> Feb 06 08:54:47 archvm kernel:  exc_page_fault+0x81/0x1b0
>> Feb 06 08:54:47 archvm kernel:  asm_exc_page_fault+0x26/0x30
>> Feb 06 08:54:47 archvm kernel: RIP: 0033:0x7fcfc31c8cf9
>> Feb 06 08:54:47 archvm kernel: Code: 34 19 49 39 d4 49 89 74 24 60 0f 95 c2 48 29 d8 48 83 c1 10 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 51 f8 <48> 89 46 08 e9 22 ff ff ff 48 8d 3d 07 ed 10 00 e8 62 c3 ff ff 48
>> Feb 06 08:54:47 archvm kernel: RSP: 002b:00007fff1f931850 EFLAGS: 00010206
>> Feb 06 08:54:47 archvm kernel: RAX: 000000000000bee1 RBX: 0000000000000140 RCX: 000056541d491ff0
>> Feb 06 08:54:47 archvm kernel: RDX: 0000000000000141 RSI: 000056541d492120 RDI: 0000000000000000
>> Feb 06 08:54:47 archvm kernel: RBP: 00007fff1f9318a0 R08: 0000000000000140 R09: 0000000000000001
>> Feb 06 08:54:47 archvm kernel: R10: 0000000000000004 R11: 0000565419567488 R12: 00007fcfc3308ac0
>> Feb 06 08:54:47 archvm kernel: R13: 0000000000000130 R14: 00007fcfc3308b20 R15: 0000000000000140
>> Feb 06 08:54:47 archvm kernel:
>> Feb 06 08:54:47 archvm kernel: Modules linked in: snd_seq_dummy snd_hrtimer snd_seq snd_seq_device rfkill vfat fat intel_rapl_msr intel_rapl_common kvm_amd ccp snd_hda_codec_hdmi snd_hda_codec_generic snd_hda_intel snd_intel_dspcfg kvm snd_intel_sdw_acpi snd_hda_codec polyval_clmulni snd_hda_core polyval_generic ghash_clmulni_intel snd_hwdep iTCO_wdt sha512_ssse3 intel_pmc_bxt sha256_ssse3 snd_pcm joydev iTCO_vendor_support sha1_ssse3 snd_timer aesni_intel snd crypto_simd i2c_i801 psmouse cryptd pcspkr i2c_smbus soundcore lpc_ich i2c_mux mousedev mac_hid crypto_user loop dm_mod nfnetlink vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock vmw_vmci qemu_fw_cfg ip_tables x_tables ext4 crc16 mbcache jbd2 nouveau drm_ttm_helper ttm video gpu_sched i2c_algo_bit drm_gpuvm serio_raw drm_exec atkbd mxm_wmi wmi libps2 vivaldi_fmap drm_display_helper virtio_net net_failover cec intel_agp virtio_input virtio_rng virtio_console failover virtio_blk i8042 intel_gtt serio
>> Feb 06 08:54:47 archvm kernel: ---[ end trace 0000000000000000 ]---
>> Feb 06 08:54:47 archvm kernel: RIP: 0010:__rmqueue_pcplist+0xb0/0xc50
>> Feb 06 08:54:47 archvm kernel: Code: 00 4c 01 f0 48 89 7c 24 30 48 89 44 24 20 49 8b 04 24 49 39 c4 0f 84 6c 01 00 00 49 8b 14 24 48 8b 42 08 48 8b 0a 48 8d 5a f8 <48> 3b 10 0f 85 8d 0b 00 00 48 3b 51 08 0f 85 d5 0f be ff 48 89 41
>> Feb 06 08:54:47 archvm kernel: RSP: 0000:ffffab3b84a2faa0 EFLAGS: 00010297
>> Feb 06 08:54:47 archvm kernel: RAX: dead000000000122 RBX: ffffdd38819d61c0 RCX: dead000000000100
>> Feb 06 08:54:47 archvm kernel: RDX: ffffdd38819d61c8 RSI: ffff9b31fd2218c0 RDI: ffff9b31fd2218c0
>> Feb 06 08:54:47 archvm kernel: RBP: 0000000000000010 R08: 0000000000000000 R09: ffffab3b84a2f920
>> Feb 06 08:54:47 archvm kernel: R10: ffffffffbdeb44a8 R11: 0000000000000003 R12: ffff9b31fd23d4b0
>> Feb 06 08:54:47 archvm kernel: R13: 0000000000000000 R14: ffff9b31fef21980 R15: ffff9b31fd23d480
>> Feb 06 08:54:47 archvm kernel: FS:  00007fcfbead5140(0000) GS:ffff9b31fd200000(0000) knlGS:0000000000000000
>> Feb 06 08:54:47 archvm kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
>> Feb 06 08:54:47 archvm kernel: CR2: 000056541d492128 CR3: 000000001ed94000 CR4: 00000000003506f0
>> Feb 06 08:54:47 archvm kernel: note: rnote[1962] exited with preempt_count 2
>> Feb 06 08:54:50 archvm geoclue[844]: Service not used for 60 seconds. Shutting down..
>> Feb 06 08:55:01 archvm systemd[990]: Starting Virtual filesystem metadata service...
>> Feb 06 08:55:14 archvm kernel: watchdog: BUG: soft lockup - CPU#0 stuck for 26s! [kworker/0:3:370]
>> Feb 06 08:55:14 archvm kernel: CPU#0 Utilization every 4s during lockup:
>> Feb 06 08:55:14 archvm kernel:         #1: 100% system,          0% softirq,          1% hardirq,          0% idle
>> Feb 06 08:55:14 archvm kernel:         #2: 100% system,          0% softirq,          1% hardirq,          0% idle
>> Feb 06 08:55:14 archvm kernel:         #3: 100% system,          0% softirq,          1% hardirq,          0% idle
>> Feb 06 08:55:14 archvm kernel:         #4: 100% system,          0% softirq,          1% hardirq,          0% idle
>> Feb 06 08:55:14 archvm kernel:         #5: 100% system,          0% softirq,          1% hardirq,          0% idle
>> Feb 06 08:55:14 archvm kernel: Modules linked in: snd_seq_dummy snd_hrtimer snd_seq snd_seq_device rfkill vfat fat intel_rapl_msr intel_rapl_common kvm_amd ccp snd_hda_codec_hdmi snd_hda_codec_generic snd_hda_intel snd_intel_dspcfg kvm snd_intel_sdw_acpi snd_hda_codec polyval_clmulni snd_hda_core polyval_generic ghash_clmulni_intel snd_hwdep iTCO_wdt sha512_ssse3 intel_pmc_bxt sha256_ssse3 snd_pcm joydev iTCO_vendor_support sha1_ssse3 snd_timer aesni_intel snd crypto_simd i2c_i801 psmouse cryptd pcspkr i2c_smbus soundcore lpc_ich i2c_mux mousedev mac_hid crypto_user loop dm_mod nfnetlink vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock vmw_vmci qemu_fw_cfg ip_tables x_tables ext4 crc16 mbcache jbd2 nouveau drm_ttm_helper ttm video gpu_sched i2c_algo_bit drm_gpuvm serio_raw drm_exec atkbd mxm_wmi wmi libps2 vivaldi_fmap drm_display_helper virtio_net net_failover cec intel_agp virtio_input virtio_rng virtio_console failover virtio_blk i8042 intel_gtt serio
>> Feb 06 08:55:14 archvm kernel: CPU: 0 UID: 0 PID: 370 Comm: kworker/0:3 Tainted: G    B D            6.14.0-rc1-1-mainline #1 715c0460cf5d3cc18e3178ef3209cee42e97ae1c
>> Feb 06 08:55:14 archvm kernel: Tainted: [B]=BAD_PAGE, [D]=DIE
>> Feb 06 08:55:14 archvm kernel: Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS unknown 02/02/2022
>> Feb 06 08:55:14 archvm kernel: Workqueue: mm_percpu_wq vmstat_update
>> Feb 06 08:55:14 archvm kernel: RIP: 0010:__pv_queued_spin_lock_slowpath+0x267/0x490
>> Feb 06 08:55:14 archvm kernel: Code: 14 0f 85 5c fe ff ff 41 c6 45 00 03 4c 89 fe 4c 89 ef e8 8c 2d 2e ff e9 47 fe ff ff f3 90 4d 8b 3e 4d 85 ff 74 f6 eb c1 f3 90 <83> ea 01 75 8a 48 83 3c 24 00 41 c6 45 01 00 0f 84 de 01 00 00 41
>> Feb 06 08:55:14 archvm kernel: RSP: 0018:ffffab3b80907c98 EFLAGS: 00000206
>> Feb 06 08:55:14 archvm kernel: RAX: 0000000000000003 RBX: 0000000000040000 RCX: 0000000000000008
>> Feb 06 08:55:14 archvm kernel: RDX: 00000000000053b7 RSI: 0000000000000003 RDI: ffff9b31fd23d480
>> Feb 06 08:55:14 archvm kernel: RBP: 0000000000000001 R08: ffff9b31fd237bc0 R09: 0000000000000000
>> Feb 06 08:55:14 archvm kernel: R10: 0000000000000000 R11: fefefefefefefeff R12: 0000000000000100
>> Feb 06 08:55:14 archvm kernel: R13: ffff9b31fd23d480 R14: ffff9b31fd237bc0 R15: 0000000000000000
>> Feb 06 08:55:14 archvm kernel: FS:  0000000000000000(0000) GS:ffff9b31fd200000(0000) knlGS:0000000000000000
>> Feb 06 08:55:14 archvm kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
>> Feb 06 08:55:14 archvm kernel: CR2: 00007fa8ba718100 CR3: 0000000016022000 CR4: 00000000003506f0
>> Feb 06 08:55:14 archvm kernel: Call Trace:
>> Feb 06 08:55:14 archvm kernel:
>> Feb 06 08:55:14 archvm kernel:  ? watchdog_timer_fn.cold+0x226/0x22b
>> Feb 06 08:55:14 archvm kernel:  ? srso_return_thunk+0x5/0x5f
>> Feb 06 08:55:14 archvm kernel:  ? __pfx_watchdog_timer_fn+0x10/0x10
>> Feb 06 08:55:14 archvm kernel:  ? __hrtimer_run_queues+0x132/0x2a0
>> Feb 06 08:55:14 archvm kernel:  ? hrtimer_interrupt+0xff/0x230
>> Feb 06 08:55:14 archvm kernel:  ? __sysvec_apic_timer_interrupt+0x55/0x100
>> Feb 06 08:55:14 archvm kernel:  ? sysvec_apic_timer_interrupt+0x6c/0x90
>> Feb 06 08:55:14 archvm kernel:
>> Feb 06 08:55:14 archvm kernel:
>> Feb 06 08:55:14 archvm kernel:  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
>> Feb 06 08:55:14 archvm kernel:  ? __pv_queued_spin_lock_slowpath+0x267/0x490
>> Feb 06 08:55:14 archvm kernel:  ? __pv_queued_spin_lock_slowpath+0x2be/0x490
>> Feb 06 08:55:14 archvm kernel:  _raw_spin_lock+0x29/0x30
>> Feb 06 08:55:14 archvm kernel:  decay_pcp_high+0x63/0x90
>> Feb 06 08:55:14 archvm kernel:  refresh_cpu_vm_stats+0xf7/0x240
>> Feb 06 08:55:14 archvm kernel:  vmstat_update+0x13/0x50
>> Feb 06 08:55:14 archvm kernel:  process_one_work+0x17e/0x330
>> Feb 06 08:55:14 archvm kernel:  worker_thread+0x2ce/0x3f0
>> Feb 06 08:55:14 archvm kernel:  ? __pfx_worker_thread+0x10/0x10
>> Feb 06 08:55:14 archvm kernel:  kthread+0xef/0x230
>> Feb 06 08:55:14 archvm kernel:  ? __pfx_kthread+0x10/0x10
>> Feb 06 08:55:14 archvm kernel:  ret_from_fork+0x34/0x50
>> Feb 06 08:55:14 archvm kernel:  ? __pfx_kthread+0x10/0x10
>> Feb 06 08:55:14 archvm kernel:  ret_from_fork_asm+0x1a/0x30
>> Feb 06 08:55:14 archvm kernel:
> 



^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-07 16:49   ` Vlastimil Babka
@ 2025-02-07 17:29     ` Josef Bacik
  2025-02-07 18:39       ` Vlastimil Babka
  0 siblings, 1 reply; 34+ messages in thread
From: Josef Bacik @ 2025-02-07 17:29 UTC (permalink / raw)
  To: Vlastimil Babka
  Cc: Miklos Szeredi, Christian Heusel, Miklos Szeredi, regressions,
	linux-kernel, linux-fsdevel, Joanne Koong, Matthew Wilcox,
	linux-mm, Mantas Mikulėnas

On Fri, Feb 07, 2025 at 05:49:34PM +0100, Vlastimil Babka wrote:
> On 2/7/25 10:34, Miklos Szeredi wrote:
> > [Adding Joanne, Willy and linux-mm].
> > 
> > 
> > On Thu, 6 Feb 2025 at 11:54, Christian Heusel <christian@heusel.eu> wrote:
> >>
> >> Hello everyone,
> >>
> >> we have recently received [a report][0] on the Arch Linux Gitlab about
> >> multiple users having system crashes when using Flatpak programs and
> >> related FUSE errors in their dmesg logs.
> >>
> >> We have subsequently bisected the issue within the mainline kernel tree
> >> to the following commit:
> >>
> >>     3eab9d7bc2f4 ("fuse: convert readahead to use folios")
> 
> I see that commit removes folio_put() from fuse_readpages_end(). Also it now
> uses readahead_folio() in fuse_readahead() which does folio_put(). So that's
> suspicious to me. It might be storing pointers to pages to ap->pages without
> pinning them with a refcount.
> 
> But I don't understand the code enough to know what's the proper fix. A
> probably stupid fix would be to use __readahead_folio() instead and keep the
> folio_put() in fuse_readpages_end().

Agreed, I'm also confused as to what the right thing is here.  It appears the
rules are "if the folio is locked, nobody messes with it", so it's not "correct"
to hold a reference on the folio while it's being read.  I don't love this way
of dealing with folios, but that seems to be the way it's always worked.

I went and looked at a few of the other file systems and we have NFS which holds
it's own reference to the folio while the IO is outstanding, which FUSE is most
similar to NFS so this would make sense to do.

Btrfs however doesn't do this, BUT we do set_folio_private (or whatever it's
called) so that keeps us from being reclaimed since we'll try to lock the folio
before we do the reclaim.

So perhaps that's the issue here?  We need to have a private on the folio + the
folio locked to make sure it doesn't get reclaimed while it's out being read?

I'm knee deep in other things, if we want a quick fix then I think your
suggestion is correct Vlastimil.  But I definitely want to know what Willy
expects to be the proper order of operations here, and if this is exactly what
we're supposed to be doing then something else is going wrong and we should try
to reproduce locally and figure out what's happening.  Thanks,

Josef

^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-07 17:29     ` Josef Bacik
@ 2025-02-07 18:39       ` Vlastimil Babka
  2025-02-07 22:29         ` Matthew Wilcox
  2025-02-08  0:22         ` Joanne Koong
  0 siblings, 2 replies; 34+ messages in thread
From: Vlastimil Babka @ 2025-02-07 18:39 UTC (permalink / raw)
  To: Josef Bacik
  Cc: Miklos Szeredi, Christian Heusel, Miklos Szeredi, regressions,
	linux-kernel, linux-fsdevel, Joanne Koong, Matthew Wilcox,
	linux-mm, Mantas Mikulėnas

On 2/7/25 18:29, Josef Bacik wrote:
> On Fri, Feb 07, 2025 at 05:49:34PM +0100, Vlastimil Babka wrote:
>> On 2/7/25 10:34, Miklos Szeredi wrote:
>> > [Adding Joanne, Willy and linux-mm].
>> > 
>> > 
>> > On Thu, 6 Feb 2025 at 11:54, Christian Heusel <christian@heusel.eu> wrote:
>> >>
>> >> Hello everyone,
>> >>
>> >> we have recently received [a report][0] on the Arch Linux Gitlab about
>> >> multiple users having system crashes when using Flatpak programs and
>> >> related FUSE errors in their dmesg logs.
>> >>
>> >> We have subsequently bisected the issue within the mainline kernel tree
>> >> to the following commit:
>> >>
>> >>     3eab9d7bc2f4 ("fuse: convert readahead to use folios")
>> 
>> I see that commit removes folio_put() from fuse_readpages_end(). Also it now
>> uses readahead_folio() in fuse_readahead() which does folio_put(). So that's
>> suspicious to me. It might be storing pointers to pages to ap->pages without
>> pinning them with a refcount.
>> 
>> But I don't understand the code enough to know what's the proper fix. A
>> probably stupid fix would be to use __readahead_folio() instead and keep the
>> folio_put() in fuse_readpages_end().
> 
> Agreed, I'm also confused as to what the right thing is here.  It appears the
> rules are "if the folio is locked, nobody messes with it", so it's not "correct"
> to hold a reference on the folio while it's being read.  I don't love this way
> of dealing with folios, but that seems to be the way it's always worked.
> 
> I went and looked at a few of the other file systems and we have NFS which holds
> it's own reference to the folio while the IO is outstanding, which FUSE is most
> similar to NFS so this would make sense to do.
> 
> Btrfs however doesn't do this, BUT we do set_folio_private (or whatever it's
> called) so that keeps us from being reclaimed since we'll try to lock the folio
> before we do the reclaim.
> 
> So perhaps that's the issue here?  We need to have a private on the folio + the
> folio locked to make sure it doesn't get reclaimed while it's out being read?
> 
> I'm knee deep in other things, if we want a quick fix then I think your
> suggestion is correct Vlastimil.  But I definitely want to know what Willy
> expects to be the proper order of operations here, and if this is exactly what
> we're supposed to be doing then something else is going wrong and we should try
> to reproduce locally and figure out what's happening.  Thanks,

Thanks, Josef. I guess we can at least try to confirm we're on the right track.
Can anyone affected see if this (only compile tested) patch fixes the issue?
Created on top of 6.13.1.

----8<----
From c0fdf9174f6c17c93a709606384efe2877a3a596 Mon Sep 17 00:00:00 2001
From: Vlastimil Babka <vbabka@suse.cz>
Date: Fri, 7 Feb 2025 19:35:25 +0100
Subject: [PATCH] fuse: prevent folio use-after-free in readahead

Signed-off-by: Vlastimil Babka <vbabka@suse.cz>
---
 fs/fuse/file.c | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/fs/fuse/file.c b/fs/fuse/file.c
index 7d92a5479998..a40d65ffb94d 100644
--- a/fs/fuse/file.c
+++ b/fs/fuse/file.c
@@ -955,8 +955,10 @@ static void fuse_readpages_end(struct fuse_mount *fm, struct fuse_args *args,
 		fuse_invalidate_atime(inode);
 	}
 
-	for (i = 0; i < ap->num_folios; i++)
+	for (i = 0; i < ap->num_folios; i++) {
 		folio_end_read(ap->folios[i], !err);
+		folio_put(ap->folios[i]);
+	}
 	if (ia->ff)
 		fuse_file_put(ia->ff, false);
 
@@ -1048,7 +1050,7 @@ static void fuse_readahead(struct readahead_control *rac)
 		ap = &ia->ap;
 
 		while (ap->num_folios < cur_pages) {
-			folio = readahead_folio(rac);
+			folio = __readahead_folio(rac);
 			ap->folios[ap->num_folios] = folio;
 			ap->descs[ap->num_folios].length = folio_size(folio);
 			ap->num_folios++;
-- 
2.48.1




^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-07 18:39       ` Vlastimil Babka
@ 2025-02-07 22:29         ` Matthew Wilcox
  2025-02-08  0:22         ` Joanne Koong
  1 sibling, 0 replies; 34+ messages in thread
From: Matthew Wilcox @ 2025-02-07 22:29 UTC (permalink / raw)
  To: Vlastimil Babka
  Cc: Josef Bacik, Miklos Szeredi, Christian Heusel, Miklos Szeredi,
	regressions, linux-kernel, linux-fsdevel, Joanne Koong, linux-mm,
	Mantas Mikulėnas

On Fri, Feb 07, 2025 at 07:39:02PM +0100, Vlastimil Babka wrote:
> On 2/7/25 18:29, Josef Bacik wrote:
> > On Fri, Feb 07, 2025 at 05:49:34PM +0100, Vlastimil Babka wrote:
> >> On 2/7/25 10:34, Miklos Szeredi wrote:
> >> > [Adding Joanne, Willy and linux-mm].
> >> > 
> >> > 
> >> > On Thu, 6 Feb 2025 at 11:54, Christian Heusel <christian@heusel.eu> wrote:
> >> >>
> >> >> Hello everyone,
> >> >>
> >> >> we have recently received [a report][0] on the Arch Linux Gitlab about
> >> >> multiple users having system crashes when using Flatpak programs and
> >> >> related FUSE errors in their dmesg logs.
> >> >>
> >> >> We have subsequently bisected the issue within the mainline kernel tree
> >> >> to the following commit:
> >> >>
> >> >>     3eab9d7bc2f4 ("fuse: convert readahead to use folios")
> >> 
> >> I see that commit removes folio_put() from fuse_readpages_end(). Also it now
> >> uses readahead_folio() in fuse_readahead() which does folio_put(). So that's
> >> suspicious to me. It might be storing pointers to pages to ap->pages without
> >> pinning them with a refcount.

you don't need to pin them with a refcount.  the folio is locked, so the
page cache has a refcount until you unlock it (possibly by calling
folio_end_read()).



^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-07 18:39       ` Vlastimil Babka
  2025-02-07 22:29         ` Matthew Wilcox
@ 2025-02-08  0:22         ` Joanne Koong
  2025-02-08 10:11           ` Matthew Wilcox
  1 sibling, 1 reply; 34+ messages in thread
From: Joanne Koong @ 2025-02-08  0:22 UTC (permalink / raw)
  To: Vlastimil Babka
  Cc: Josef Bacik, Miklos Szeredi, Christian Heusel, Miklos Szeredi,
	regressions, linux-kernel, linux-fsdevel, Matthew Wilcox,
	linux-mm, Mantas Mikulėnas

On Fri, Feb 7, 2025 at 10:39 AM Vlastimil Babka <vbabka@suse.cz> wrote:
>
> On 2/7/25 18:29, Josef Bacik wrote:
> > On Fri, Feb 07, 2025 at 05:49:34PM +0100, Vlastimil Babka wrote:
> >> On 2/7/25 10:34, Miklos Szeredi wrote:
> >> > [Adding Joanne, Willy and linux-mm].
> >> >
> >> >
> >> > On Thu, 6 Feb 2025 at 11:54, Christian Heusel <christian@heusel.eu> wrote:
> >> >>
> >> >> Hello everyone,
> >> >>
> >> >> we have recently received [a report][0] on the Arch Linux Gitlab about
> >> >> multiple users having system crashes when using Flatpak programs and
> >> >> related FUSE errors in their dmesg logs.
> >> >>
> >> >> We have subsequently bisected the issue within the mainline kernel tree
> >> >> to the following commit:
> >> >>
> >> >>     3eab9d7bc2f4 ("fuse: convert readahead to use folios")
> >>
> >> I see that commit removes folio_put() from fuse_readpages_end(). Also it now
> >> uses readahead_folio() in fuse_readahead() which does folio_put(). So that's
> >> suspicious to me. It might be storing pointers to pages to ap->pages without
> >> pinning them with a refcount.
> >>
> >> But I don't understand the code enough to know what's the proper fix. A
> >> probably stupid fix would be to use __readahead_folio() instead and keep the
> >> folio_put() in fuse_readpages_end().
> >
> > Agreed, I'm also confused as to what the right thing is here.  It appears the
> > rules are "if the folio is locked, nobody messes with it", so it's not "correct"
> > to hold a reference on the folio while it's being read.  I don't love this way
> > of dealing with folios, but that seems to be the way it's always worked.
> >
> > I went and looked at a few of the other file systems and we have NFS which holds
> > it's own reference to the folio while the IO is outstanding, which FUSE is most
> > similar to NFS so this would make sense to do.
> >
> > Btrfs however doesn't do this, BUT we do set_folio_private (or whatever it's
> > called) so that keeps us from being reclaimed since we'll try to lock the folio
> > before we do the reclaim.
> >
> > So perhaps that's the issue here?  We need to have a private on the folio + the
> > folio locked to make sure it doesn't get reclaimed while it's out being read?
> >
> > I'm knee deep in other things, if we want a quick fix then I think your
> > suggestion is correct Vlastimil.  But I definitely want to know what Willy
> > expects to be the proper order of operations here, and if this is exactly what
> > we're supposed to be doing then something else is going wrong and we should try
> > to reproduce locally and figure out what's happening.  Thanks,
>
> Thanks, Josef. I guess we can at least try to confirm we're on the right track.
> Can anyone affected see if this (only compile tested) patch fixes the issue?
> Created on top of 6.13.1.

This fixes the crash for me on 6.14.0-rc1. I ran the repro using
Mantas's instructions for Obfuscate. I was able to trigger the crash
on a clean build and then with this patch, I'm not seeing the crash
anymore.

>
> ----8<----
> From c0fdf9174f6c17c93a709606384efe2877a3a596 Mon Sep 17 00:00:00 2001
> From: Vlastimil Babka <vbabka@suse.cz>
> Date: Fri, 7 Feb 2025 19:35:25 +0100
> Subject: [PATCH] fuse: prevent folio use-after-free in readahead
>
> Signed-off-by: Vlastimil Babka <vbabka@suse.cz>
> ---
>  fs/fuse/file.c | 6 ++++--
>  1 file changed, 4 insertions(+), 2 deletions(-)
>
> diff --git a/fs/fuse/file.c b/fs/fuse/file.c
> index 7d92a5479998..a40d65ffb94d 100644
> --- a/fs/fuse/file.c
> +++ b/fs/fuse/file.c
> @@ -955,8 +955,10 @@ static void fuse_readpages_end(struct fuse_mount *fm, struct fuse_args *args,
>                 fuse_invalidate_atime(inode);
>         }
>
> -       for (i = 0; i < ap->num_folios; i++)
> +       for (i = 0; i < ap->num_folios; i++) {
>                 folio_end_read(ap->folios[i], !err);
> +               folio_put(ap->folios[i]);
> +       }
>         if (ia->ff)
>                 fuse_file_put(ia->ff, false);
>
> @@ -1048,7 +1050,7 @@ static void fuse_readahead(struct readahead_control *rac)
>                 ap = &ia->ap;
>
>                 while (ap->num_folios < cur_pages) {
> -                       folio = readahead_folio(rac);
> +                       folio = __readahead_folio(rac);
>                         ap->folios[ap->num_folios] = folio;
>                         ap->descs[ap->num_folios].length = folio_size(folio);
>                         ap->num_folios++;
> --
> 2.48.1
>
>


^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-08  0:22         ` Joanne Koong
@ 2025-02-08 10:11           ` Matthew Wilcox
  2025-02-08 15:46             ` Joanne Koong
  0 siblings, 1 reply; 34+ messages in thread
From: Matthew Wilcox @ 2025-02-08 10:11 UTC (permalink / raw)
  To: Joanne Koong
  Cc: Vlastimil Babka, Josef Bacik, Miklos Szeredi, Christian Heusel,
	Miklos Szeredi, regressions, linux-kernel, linux-fsdevel,
	linux-mm, Mantas Mikulėnas

On Fri, Feb 07, 2025 at 04:22:56PM -0800, Joanne Koong wrote:
> > Thanks, Josef. I guess we can at least try to confirm we're on the right track.
> > Can anyone affected see if this (only compile tested) patch fixes the issue?
> > Created on top of 6.13.1.
> 
> This fixes the crash for me on 6.14.0-rc1. I ran the repro using
> Mantas's instructions for Obfuscate. I was able to trigger the crash
> on a clean build and then with this patch, I'm not seeing the crash
> anymore.

Since this patch fixes the bug, we're looking for one call to folio_put()
too many.  Is it possibly in fuse_try_move_page()?  In particular, this
one:

        /* Drop ref for ap->pages[] array */
        folio_put(oldfolio);

I don't know fuse very well.  Maybe this isn't it.


^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-08 10:11           ` Matthew Wilcox
@ 2025-02-08 15:46             ` Joanne Koong
  2025-02-10  8:27               ` Vlastimil Babka
  2025-02-12 18:48               ` Joanne Koong
  0 siblings, 2 replies; 34+ messages in thread
From: Joanne Koong @ 2025-02-08 15:46 UTC (permalink / raw)
  To: Matthew Wilcox
  Cc: Vlastimil Babka, Josef Bacik, Miklos Szeredi, Christian Heusel,
	Miklos Szeredi, regressions, linux-kernel, linux-fsdevel,
	linux-mm, Mantas Mikulėnas

On Sat, Feb 8, 2025 at 2:11 AM Matthew Wilcox <willy@infradead.org> wrote:
>
> On Fri, Feb 07, 2025 at 04:22:56PM -0800, Joanne Koong wrote:
> > > Thanks, Josef. I guess we can at least try to confirm we're on the right track.
> > > Can anyone affected see if this (only compile tested) patch fixes the issue?
> > > Created on top of 6.13.1.
> >
> > This fixes the crash for me on 6.14.0-rc1. I ran the repro using
> > Mantas's instructions for Obfuscate. I was able to trigger the crash
> > on a clean build and then with this patch, I'm not seeing the crash
> > anymore.
>
> Since this patch fixes the bug, we're looking for one call to folio_put()
> too many.  Is it possibly in fuse_try_move_page()?  In particular, this
> one:
>
>         /* Drop ref for ap->pages[] array */
>         folio_put(oldfolio);
>
> I don't know fuse very well.  Maybe this isn't it.

Yeah, this looks it to me. We don't grab a folio reference for the
ap->pages[] array for readahead and it tracks with Mantas's
fuse_dev_splice_write() dmesg. this patch fixed the crash for me when
I tested it yesterday:

diff --git a/fs/fuse/file.c b/fs/fuse/file.c
index 7d92a5479998..172cab8e2caf 100644
--- a/fs/fuse/file.c
+++ b/fs/fuse/file.c
@@ -955,8 +955,10 @@ static void fuse_readpages_end(struct fuse_mount
*fm, struct fuse_args *args,
                fuse_invalidate_atime(inode);
        }

-       for (i = 0; i < ap->num_folios; i++)
+       for (i = 0; i < ap->num_folios; i++) {
                folio_end_read(ap->folios[i], !err);
+               folio_put(ap->folios[i]);
+       }
        if (ia->ff)
                fuse_file_put(ia->ff, false);

@@ -1049,6 +1051,7 @@ static void fuse_readahead(struct readahead_control *rac)

                while (ap->num_folios < cur_pages) {
                        folio = readahead_folio(rac);
+                       folio_get(folio);
                        ap->folios[ap->num_folios] = folio;
                        ap->descs[ap->num_folios].length = folio_size(folio);
                        ap->num_folios++;


I reran it just now with a printk by that ref drop in
fuse_try_move_page() and I'm indeed seeing that path get hit.

Not sure why fstests didn't pick this up though since splice is
enabled by default in passthrough_hp, i'll look into this next week.


^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-08 15:46             ` Joanne Koong
@ 2025-02-10  8:27               ` Vlastimil Babka
  2025-02-10 18:13                 ` Joanne Koong
  2025-02-10 18:58                 ` Jeff Layton
  2025-02-12 18:48               ` Joanne Koong
  1 sibling, 2 replies; 34+ messages in thread
From: Vlastimil Babka @ 2025-02-10  8:27 UTC (permalink / raw)
  To: Joanne Koong, Matthew Wilcox
  Cc: Josef Bacik, Miklos Szeredi, Christian Heusel, Miklos Szeredi,
	regressions, linux-kernel, linux-fsdevel, linux-mm,
	Mantas Mikulėnas

On 2/8/25 16:46, Joanne Koong wrote:
> On Sat, Feb 8, 2025 at 2:11 AM Matthew Wilcox <willy@infradead.org> wrote:
>>
>> On Fri, Feb 07, 2025 at 04:22:56PM -0800, Joanne Koong wrote:
>> > > Thanks, Josef. I guess we can at least try to confirm we're on the right track.
>> > > Can anyone affected see if this (only compile tested) patch fixes the issue?
>> > > Created on top of 6.13.1.
>> >
>> > This fixes the crash for me on 6.14.0-rc1. I ran the repro using
>> > Mantas's instructions for Obfuscate. I was able to trigger the crash
>> > on a clean build and then with this patch, I'm not seeing the crash
>> > anymore.
>>
>> Since this patch fixes the bug, we're looking for one call to folio_put()
>> too many.  Is it possibly in fuse_try_move_page()?  In particular, this
>> one:
>>
>>         /* Drop ref for ap->pages[] array */
>>         folio_put(oldfolio);
>>
>> I don't know fuse very well.  Maybe this isn't it.
> 
> Yeah, this looks it to me. We don't grab a folio reference for the
> ap->pages[] array for readahead and it tracks with Mantas's
> fuse_dev_splice_write() dmesg. this patch fixed the crash for me when
> I tested it yesterday:
> 
> diff --git a/fs/fuse/file.c b/fs/fuse/file.c
> index 7d92a5479998..172cab8e2caf 100644
> --- a/fs/fuse/file.c
> +++ b/fs/fuse/file.c
> @@ -955,8 +955,10 @@ static void fuse_readpages_end(struct fuse_mount
> *fm, struct fuse_args *args,
>                 fuse_invalidate_atime(inode);
>         }
> 
> -       for (i = 0; i < ap->num_folios; i++)
> +       for (i = 0; i < ap->num_folios; i++) {
>                 folio_end_read(ap->folios[i], !err);
> +               folio_put(ap->folios[i]);
> +       }
>         if (ia->ff)
>                 fuse_file_put(ia->ff, false);
> 
> @@ -1049,6 +1051,7 @@ static void fuse_readahead(struct readahead_control *rac)
> 
>                 while (ap->num_folios < cur_pages) {
>                         folio = readahead_folio(rac);
> +                       folio_get(folio);

This is almost the same as my patch, but balances the folio_put() in
readahead_folio() with another folio_get(), while mine uses
__readahead_folio() that does not do folio_put() in the first place.

But I think neither patch proves the extraneous folio_put() comes from
fuse_try_move_page().

>                         ap->folios[ap->num_folios] = folio;
>                         ap->descs[ap->num_folios].length = folio_size(folio);
>                         ap->num_folios++;
> 
> 
> I reran it just now with a printk by that ref drop in
> fuse_try_move_page() and I'm indeed seeing that path get hit.

It might get hit, but is it hit in the readahead paths? One way to test
would be to instead of yours above or mine change, to stop doing the
foio_put() in fuse_try_move_page(). But maybe it's called also from other
contexts that do expect it, and will leak memory otherwise.

> Not sure why fstests didn't pick this up though since splice is
> enabled by default in passthrough_hp, i'll look into this next week.
> 



^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-10  8:27               ` Vlastimil Babka
@ 2025-02-10 18:13                 ` Joanne Koong
  2025-02-10 19:12                   ` Josef Bacik
  2025-02-10 18:58                 ` Jeff Layton
  1 sibling, 1 reply; 34+ messages in thread
From: Joanne Koong @ 2025-02-10 18:13 UTC (permalink / raw)
  To: Vlastimil Babka
  Cc: Matthew Wilcox, Josef Bacik, Miklos Szeredi, Christian Heusel,
	Miklos Szeredi, regressions, linux-kernel, linux-fsdevel,
	linux-mm, Mantas Mikulėnas

On Mon, Feb 10, 2025 at 12:27 AM Vlastimil Babka <vbabka@suse.cz> wrote:
>
> On 2/8/25 16:46, Joanne Koong wrote:
> > On Sat, Feb 8, 2025 at 2:11 AM Matthew Wilcox <willy@infradead.org> wrote:
> >>
> >> On Fri, Feb 07, 2025 at 04:22:56PM -0800, Joanne Koong wrote:
> >> > > Thanks, Josef. I guess we can at least try to confirm we're on the right track.
> >> > > Can anyone affected see if this (only compile tested) patch fixes the issue?
> >> > > Created on top of 6.13.1.
> >> >
> >> > This fixes the crash for me on 6.14.0-rc1. I ran the repro using
> >> > Mantas's instructions for Obfuscate. I was able to trigger the crash
> >> > on a clean build and then with this patch, I'm not seeing the crash
> >> > anymore.
> >>
> >> Since this patch fixes the bug, we're looking for one call to folio_put()
> >> too many.  Is it possibly in fuse_try_move_page()?  In particular, this
> >> one:
> >>
> >>         /* Drop ref for ap->pages[] array */
> >>         folio_put(oldfolio);
> >>
> >> I don't know fuse very well.  Maybe this isn't it.
> >
> > Yeah, this looks it to me. We don't grab a folio reference for the
> > ap->pages[] array for readahead and it tracks with Mantas's
> > fuse_dev_splice_write() dmesg. this patch fixed the crash for me when
> > I tested it yesterday:
> >
> > diff --git a/fs/fuse/file.c b/fs/fuse/file.c
> > index 7d92a5479998..172cab8e2caf 100644
> > --- a/fs/fuse/file.c
> > +++ b/fs/fuse/file.c
> > @@ -955,8 +955,10 @@ static void fuse_readpages_end(struct fuse_mount
> > *fm, struct fuse_args *args,
> >                 fuse_invalidate_atime(inode);
> >         }
> >
> > -       for (i = 0; i < ap->num_folios; i++)
> > +       for (i = 0; i < ap->num_folios; i++) {
> >                 folio_end_read(ap->folios[i], !err);
> > +               folio_put(ap->folios[i]);
> > +       }
> >         if (ia->ff)
> >                 fuse_file_put(ia->ff, false);
> >
> > @@ -1049,6 +1051,7 @@ static void fuse_readahead(struct readahead_control *rac)
> >
> >                 while (ap->num_folios < cur_pages) {
> >                         folio = readahead_folio(rac);
> > +                       folio_get(folio);
>
> This is almost the same as my patch, but balances the folio_put() in
> readahead_folio() with another folio_get(), while mine uses
> __readahead_folio() that does not do folio_put() in the first place.
>
> But I think neither patch proves the extraneous folio_put() comes from
> fuse_try_move_page().
>
> >                         ap->folios[ap->num_folios] = folio;
> >                         ap->descs[ap->num_folios].length = folio_size(folio);
> >                         ap->num_folios++;
> >
> >
> > I reran it just now with a printk by that ref drop in
> > fuse_try_move_page() and I'm indeed seeing that path get hit.
>
> It might get hit, but is it hit in the readahead paths? One way to test
> would be to instead of yours above or mine change, to stop doing the
> foio_put() in fuse_try_move_page(). But maybe it's called also from other
> contexts that do expect it, and will leak memory otherwise.

When I tested it a few days ago, I printk-ed the address of the folio
and it matched in fuse_readahead() and try_move_page(). I think that
proves that the extra folio_put() came from fuse_try_move_page()
through the readahead path.

>
> > Not sure why fstests didn't pick this up though since splice is
> > enabled by default in passthrough_hp, i'll look into this next week.
> >
>


^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-10 18:13                 ` Joanne Koong
@ 2025-02-10 19:12                   ` Josef Bacik
  2025-02-10 19:42                     ` Jeff Layton
  2025-02-10 20:36                     ` Matthew Wilcox
  0 siblings, 2 replies; 34+ messages in thread
From: Josef Bacik @ 2025-02-10 19:12 UTC (permalink / raw)
  To: Joanne Koong
  Cc: Vlastimil Babka, Matthew Wilcox, Miklos Szeredi,
	Christian Heusel, Miklos Szeredi, regressions, linux-kernel,
	linux-fsdevel, linux-mm, Mantas Mikulėnas

On Mon, Feb 10, 2025 at 10:13:51AM -0800, Joanne Koong wrote:
> On Mon, Feb 10, 2025 at 12:27 AM Vlastimil Babka <vbabka@suse.cz> wrote:
> >
> > On 2/8/25 16:46, Joanne Koong wrote:
> > > On Sat, Feb 8, 2025 at 2:11 AM Matthew Wilcox <willy@infradead.org> wrote:
> > >>
> > >> On Fri, Feb 07, 2025 at 04:22:56PM -0800, Joanne Koong wrote:
> > >> > > Thanks, Josef. I guess we can at least try to confirm we're on the right track.
> > >> > > Can anyone affected see if this (only compile tested) patch fixes the issue?
> > >> > > Created on top of 6.13.1.
> > >> >
> > >> > This fixes the crash for me on 6.14.0-rc1. I ran the repro using
> > >> > Mantas's instructions for Obfuscate. I was able to trigger the crash
> > >> > on a clean build and then with this patch, I'm not seeing the crash
> > >> > anymore.
> > >>
> > >> Since this patch fixes the bug, we're looking for one call to folio_put()
> > >> too many.  Is it possibly in fuse_try_move_page()?  In particular, this
> > >> one:
> > >>
> > >>         /* Drop ref for ap->pages[] array */
> > >>         folio_put(oldfolio);
> > >>
> > >> I don't know fuse very well.  Maybe this isn't it.
> > >
> > > Yeah, this looks it to me. We don't grab a folio reference for the
> > > ap->pages[] array for readahead and it tracks with Mantas's
> > > fuse_dev_splice_write() dmesg. this patch fixed the crash for me when
> > > I tested it yesterday:
> > >
> > > diff --git a/fs/fuse/file.c b/fs/fuse/file.c
> > > index 7d92a5479998..172cab8e2caf 100644
> > > --- a/fs/fuse/file.c
> > > +++ b/fs/fuse/file.c
> > > @@ -955,8 +955,10 @@ static void fuse_readpages_end(struct fuse_mount
> > > *fm, struct fuse_args *args,
> > >                 fuse_invalidate_atime(inode);
> > >         }
> > >
> > > -       for (i = 0; i < ap->num_folios; i++)
> > > +       for (i = 0; i < ap->num_folios; i++) {
> > >                 folio_end_read(ap->folios[i], !err);
> > > +               folio_put(ap->folios[i]);
> > > +       }
> > >         if (ia->ff)
> > >                 fuse_file_put(ia->ff, false);
> > >
> > > @@ -1049,6 +1051,7 @@ static void fuse_readahead(struct readahead_control *rac)
> > >
> > >                 while (ap->num_folios < cur_pages) {
> > >                         folio = readahead_folio(rac);
> > > +                       folio_get(folio);
> >
> > This is almost the same as my patch, but balances the folio_put() in
> > readahead_folio() with another folio_get(), while mine uses
> > __readahead_folio() that does not do folio_put() in the first place.
> >
> > But I think neither patch proves the extraneous folio_put() comes from
> > fuse_try_move_page().
> >
> > >                         ap->folios[ap->num_folios] = folio;
> > >                         ap->descs[ap->num_folios].length = folio_size(folio);
> > >                         ap->num_folios++;
> > >
> > >
> > > I reran it just now with a printk by that ref drop in
> > > fuse_try_move_page() and I'm indeed seeing that path get hit.
> >
> > It might get hit, but is it hit in the readahead paths? One way to test
> > would be to instead of yours above or mine change, to stop doing the
> > foio_put() in fuse_try_move_page(). But maybe it's called also from other
> > contexts that do expect it, and will leak memory otherwise.
> 
> When I tested it a few days ago, I printk-ed the address of the folio
> and it matched in fuse_readahead() and try_move_page(). I think that
> proves that the extra folio_put() came from fuse_try_move_page()
> through the readahead path.

This patch should fix the problem, let me know if it's stil happening

From 964c798ee9e8f2e8e2c37cfd060c76a772cc45b7 Mon Sep 17 00:00:00 2001
Message-ID: <964c798ee9e8f2e8e2c37cfd060c76a772cc45b7.1739214698.git.josef@toxicpanda.com>
From: Josef Bacik <josef@toxicpanda.com>
Date: Mon, 10 Feb 2025 14:06:40 -0500
Subject: [PATCH] fuse: drop extra put of folio when using pipe splice

In 3eab9d7bc2f4 ("fuse: convert readahead to use folios"), I converted
us to using the new folio readahead code, which drops the reference on
the folio once it is locked, using an inferred reference on the folio.
Previously we held a reference on the folio for the entire duration of
the readpages call.

This is fine, however I failed to catch the case for splice pipe
responses where we will remove the old folio and splice in the new
folio.  Here we assumed that there is a reference held on the folio for
ap->folios, which is no longer the case.

To fix this, simply drop the extra put to keep us consistent with the
non-splice variation.  This will fix the UAF bug that was reported.

Link: https://lore.kernel.org/linux-fsdevel/2f681f48-00f5-4e09-8431-2b3dbfaa881e@heusel.eu/
Fixes: 3eab9d7bc2f4 ("fuse: convert readahead to use folios")
Signed-off-by: Josef Bacik <josef@toxicpanda.com>
---
 fs/fuse/dev.c | 2 --
 1 file changed, 2 deletions(-)

diff --git a/fs/fuse/dev.c b/fs/fuse/dev.c
index 5b5f789b37eb..5bd6e2e184c0 100644
--- a/fs/fuse/dev.c
+++ b/fs/fuse/dev.c
@@ -918,8 +918,6 @@ static int fuse_try_move_page(struct fuse_copy_state *cs, struct page **pagep)
 	}
 
 	folio_unlock(oldfolio);
-	/* Drop ref for ap->pages[] array */
-	folio_put(oldfolio);
 	cs->len = 0;
 
 	err = 0;
-- 
2.43.0



^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-10 19:12                   ` Josef Bacik
@ 2025-02-10 19:42                     ` Jeff Layton
  2025-02-10 20:36                     ` Matthew Wilcox
  1 sibling, 0 replies; 34+ messages in thread
From: Jeff Layton @ 2025-02-10 19:42 UTC (permalink / raw)
  To: Josef Bacik, Joanne Koong
  Cc: Vlastimil Babka, Matthew Wilcox, Miklos Szeredi,
	Christian Heusel, Miklos Szeredi, regressions, linux-kernel,
	linux-fsdevel, linux-mm, Mantas Mikulėnas

On Mon, 2025-02-10 at 14:12 -0500, Josef Bacik wrote:
> On Mon, Feb 10, 2025 at 10:13:51AM -0800, Joanne Koong wrote:
> > On Mon, Feb 10, 2025 at 12:27 AM Vlastimil Babka <vbabka@suse.cz> wrote:
> > > 
> > > On 2/8/25 16:46, Joanne Koong wrote:
> > > > On Sat, Feb 8, 2025 at 2:11 AM Matthew Wilcox <willy@infradead.org> wrote:
> > > > > 
> > > > > On Fri, Feb 07, 2025 at 04:22:56PM -0800, Joanne Koong wrote:
> > > > > > > Thanks, Josef. I guess we can at least try to confirm we're on the right track.
> > > > > > > Can anyone affected see if this (only compile tested) patch fixes the issue?
> > > > > > > Created on top of 6.13.1.
> > > > > > 
> > > > > > This fixes the crash for me on 6.14.0-rc1. I ran the repro using
> > > > > > Mantas's instructions for Obfuscate. I was able to trigger the crash
> > > > > > on a clean build and then with this patch, I'm not seeing the crash
> > > > > > anymore.
> > > > > 
> > > > > Since this patch fixes the bug, we're looking for one call to folio_put()
> > > > > too many.  Is it possibly in fuse_try_move_page()?  In particular, this
> > > > > one:
> > > > > 
> > > > >         /* Drop ref for ap->pages[] array */
> > > > >         folio_put(oldfolio);
> > > > > 
> > > > > I don't know fuse very well.  Maybe this isn't it.
> > > > 
> > > > Yeah, this looks it to me. We don't grab a folio reference for the
> > > > ap->pages[] array for readahead and it tracks with Mantas's
> > > > fuse_dev_splice_write() dmesg. this patch fixed the crash for me when
> > > > I tested it yesterday:
> > > > 
> > > > diff --git a/fs/fuse/file.c b/fs/fuse/file.c
> > > > index 7d92a5479998..172cab8e2caf 100644
> > > > --- a/fs/fuse/file.c
> > > > +++ b/fs/fuse/file.c
> > > > @@ -955,8 +955,10 @@ static void fuse_readpages_end(struct fuse_mount
> > > > *fm, struct fuse_args *args,
> > > >                 fuse_invalidate_atime(inode);
> > > >         }
> > > > 
> > > > -       for (i = 0; i < ap->num_folios; i++)
> > > > +       for (i = 0; i < ap->num_folios; i++) {
> > > >                 folio_end_read(ap->folios[i], !err);
> > > > +               folio_put(ap->folios[i]);
> > > > +       }
> > > >         if (ia->ff)
> > > >                 fuse_file_put(ia->ff, false);
> > > > 
> > > > @@ -1049,6 +1051,7 @@ static void fuse_readahead(struct readahead_control *rac)
> > > > 
> > > >                 while (ap->num_folios < cur_pages) {
> > > >                         folio = readahead_folio(rac);
> > > > +                       folio_get(folio);
> > > 
> > > This is almost the same as my patch, but balances the folio_put() in
> > > readahead_folio() with another folio_get(), while mine uses
> > > __readahead_folio() that does not do folio_put() in the first place.
> > > 
> > > But I think neither patch proves the extraneous folio_put() comes from
> > > fuse_try_move_page().
> > > 
> > > >                         ap->folios[ap->num_folios] = folio;
> > > >                         ap->descs[ap->num_folios].length = folio_size(folio);
> > > >                         ap->num_folios++;
> > > > 
> > > > 
> > > > I reran it just now with a printk by that ref drop in
> > > > fuse_try_move_page() and I'm indeed seeing that path get hit.
> > > 
> > > It might get hit, but is it hit in the readahead paths? One way to test
> > > would be to instead of yours above or mine change, to stop doing the
> > > foio_put() in fuse_try_move_page(). But maybe it's called also from other
> > > contexts that do expect it, and will leak memory otherwise.
> > 
> > When I tested it a few days ago, I printk-ed the address of the folio
> > and it matched in fuse_readahead() and try_move_page(). I think that
> > proves that the extra folio_put() came from fuse_try_move_page()
> > through the readahead path.
> 
> This patch should fix the problem, let me know if it's stil happening
> 
> From 964c798ee9e8f2e8e2c37cfd060c76a772cc45b7 Mon Sep 17 00:00:00 2001
> Message-ID: <964c798ee9e8f2e8e2c37cfd060c76a772cc45b7.1739214698.git.josef@toxicpanda.com>
> From: Josef Bacik <josef@toxicpanda.com>
> Date: Mon, 10 Feb 2025 14:06:40 -0500
> Subject: [PATCH] fuse: drop extra put of folio when using pipe splice
> 
> In 3eab9d7bc2f4 ("fuse: convert readahead to use folios"), I converted
> us to using the new folio readahead code, which drops the reference on
> the folio once it is locked, using an inferred reference on the folio.
> Previously we held a reference on the folio for the entire duration of
> the readpages call.
> 
> This is fine, however I failed to catch the case for splice pipe
> responses where we will remove the old folio and splice in the new
> folio.  Here we assumed that there is a reference held on the folio for
> ap->folios, which is no longer the case.
> 
> To fix this, simply drop the extra put to keep us consistent with the
> non-splice variation.  This will fix the UAF bug that was reported.
> 
> Link: https://lore.kernel.org/linux-fsdevel/2f681f48-00f5-4e09-8431-2b3dbfaa881e@heusel.eu/
> Fixes: 3eab9d7bc2f4 ("fuse: convert readahead to use folios")
> Signed-off-by: Josef Bacik <josef@toxicpanda.com>
> ---
>  fs/fuse/dev.c | 2 --
>  1 file changed, 2 deletions(-)
> 
> diff --git a/fs/fuse/dev.c b/fs/fuse/dev.c
> index 5b5f789b37eb..5bd6e2e184c0 100644
> --- a/fs/fuse/dev.c
> +++ b/fs/fuse/dev.c
> @@ -918,8 +918,6 @@ static int fuse_try_move_page(struct fuse_copy_state *cs, struct page **pagep)
>  	}
>  
>  	folio_unlock(oldfolio);
> -	/* Drop ref for ap->pages[] array */
> -	folio_put(oldfolio);
>  	cs->len = 0;
>  
>  	err = 0;

Reviewed-by: Jeff Layton <jlayton@kernel.org>


^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-10 19:12                   ` Josef Bacik
  2025-02-10 19:42                     ` Jeff Layton
@ 2025-02-10 20:36                     ` Matthew Wilcox
  2025-02-10 22:38                       ` Jeff Layton
  1 sibling, 1 reply; 34+ messages in thread
From: Matthew Wilcox @ 2025-02-10 20:36 UTC (permalink / raw)
  To: Josef Bacik
  Cc: Joanne Koong, Vlastimil Babka, Miklos Szeredi, Christian Heusel,
	Miklos Szeredi, regressions, linux-kernel, linux-fsdevel,
	linux-mm, Mantas Mikulėnas

On Mon, Feb 10, 2025 at 02:12:35PM -0500, Josef Bacik wrote:
> From: Josef Bacik <josef@toxicpanda.com>
> Date: Mon, 10 Feb 2025 14:06:40 -0500
> Subject: [PATCH] fuse: drop extra put of folio when using pipe splice
> 
> In 3eab9d7bc2f4 ("fuse: convert readahead to use folios"), I converted
> us to using the new folio readahead code, which drops the reference on
> the folio once it is locked, using an inferred reference on the folio.
> Previously we held a reference on the folio for the entire duration of
> the readpages call.
> 
> This is fine, however I failed to catch the case for splice pipe
> responses where we will remove the old folio and splice in the new
> folio.  Here we assumed that there is a reference held on the folio for
> ap->folios, which is no longer the case.
> 
> To fix this, simply drop the extra put to keep us consistent with the
> non-splice variation.  This will fix the UAF bug that was reported.
> 
> Link: https://lore.kernel.org/linux-fsdevel/2f681f48-00f5-4e09-8431-2b3dbfaa881e@heusel.eu/
> Fixes: 3eab9d7bc2f4 ("fuse: convert readahead to use folios")
> Signed-off-by: Josef Bacik <josef@toxicpanda.com>
> ---
>  fs/fuse/dev.c | 2 --
>  1 file changed, 2 deletions(-)
> 
> diff --git a/fs/fuse/dev.c b/fs/fuse/dev.c
> index 5b5f789b37eb..5bd6e2e184c0 100644
> --- a/fs/fuse/dev.c
> +++ b/fs/fuse/dev.c
> @@ -918,8 +918,6 @@ static int fuse_try_move_page(struct fuse_copy_state *cs, struct page **pagep)
>  	}
>  
>  	folio_unlock(oldfolio);
> -	/* Drop ref for ap->pages[] array */
> -	folio_put(oldfolio);
>  	cs->len = 0;

But aren't we now leaking a reference to newfolio?  ie shouldn't
we also:

-	folio_get(newfolio);

a few lines earlier?


^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-10 20:36                     ` Matthew Wilcox
@ 2025-02-10 22:38                       ` Jeff Layton
  2025-02-11 14:01                         ` Jeff Layton
  0 siblings, 1 reply; 34+ messages in thread
From: Jeff Layton @ 2025-02-10 22:38 UTC (permalink / raw)
  To: Matthew Wilcox, Josef Bacik
  Cc: Joanne Koong, Vlastimil Babka, Miklos Szeredi, Christian Heusel,
	Miklos Szeredi, regressions, linux-kernel, linux-fsdevel,
	linux-mm, Mantas Mikulėnas

On Mon, 2025-02-10 at 20:36 +0000, Matthew Wilcox wrote:
> On Mon, Feb 10, 2025 at 02:12:35PM -0500, Josef Bacik wrote:
> > From: Josef Bacik <josef@toxicpanda.com>
> > Date: Mon, 10 Feb 2025 14:06:40 -0500
> > Subject: [PATCH] fuse: drop extra put of folio when using pipe splice
> > 
> > In 3eab9d7bc2f4 ("fuse: convert readahead to use folios"), I converted
> > us to using the new folio readahead code, which drops the reference on
> > the folio once it is locked, using an inferred reference on the folio.
> > Previously we held a reference on the folio for the entire duration of
> > the readpages call.
> > 
> > This is fine, however I failed to catch the case for splice pipe
> > responses where we will remove the old folio and splice in the new
> > folio.  Here we assumed that there is a reference held on the folio for
> > ap->folios, which is no longer the case.
> > 
> > To fix this, simply drop the extra put to keep us consistent with the
> > non-splice variation.  This will fix the UAF bug that was reported.
> > 
> > Link: https://lore.kernel.org/linux-fsdevel/2f681f48-00f5-4e09-8431-2b3dbfaa881e@heusel.eu/
> > Fixes: 3eab9d7bc2f4 ("fuse: convert readahead to use folios")
> > Signed-off-by: Josef Bacik <josef@toxicpanda.com>
> > ---
> >  fs/fuse/dev.c | 2 --
> >  1 file changed, 2 deletions(-)
> > 
> > diff --git a/fs/fuse/dev.c b/fs/fuse/dev.c
> > index 5b5f789b37eb..5bd6e2e184c0 100644
> > --- a/fs/fuse/dev.c
> > +++ b/fs/fuse/dev.c
> > @@ -918,8 +918,6 @@ static int fuse_try_move_page(struct fuse_copy_state *cs, struct page **pagep)
> >  	}
> >  
> >  	folio_unlock(oldfolio);
> > -	/* Drop ref for ap->pages[] array */
> > -	folio_put(oldfolio);
> >  	cs->len = 0;
> 
> But aren't we now leaking a reference to newfolio?  ie shouldn't
> we also:
> 
> -	folio_get(newfolio);
> 
> a few lines earlier?
> 


I think that ref was leaking without Josef's patch, but your proposed
fix seems correct to me. There is:

- 1 reference stolen from the pipe_buffer
- 1 reference taken for the pagecache in replace_page_cache_folio()
- the folio_get(newfolio) just after that

The pagecache ref doesn't count here, and we only need the reference
that was stolen from the pipe_buffer to replace the one in pagep.
-- 
Jeff Layton <jlayton@kernel.org>


^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-10 22:38                       ` Jeff Layton
@ 2025-02-11 14:01                         ` Jeff Layton
  2025-02-11 19:23                           ` Joanne Koong
  0 siblings, 1 reply; 34+ messages in thread
From: Jeff Layton @ 2025-02-11 14:01 UTC (permalink / raw)
  To: Matthew Wilcox, Josef Bacik
  Cc: Joanne Koong, Vlastimil Babka, Miklos Szeredi, Christian Heusel,
	Miklos Szeredi, regressions, linux-kernel, linux-fsdevel,
	linux-mm, Mantas Mikulėnas

On Mon, 2025-02-10 at 17:38 -0500, Jeff Layton wrote:
> On Mon, 2025-02-10 at 20:36 +0000, Matthew Wilcox wrote:
> > On Mon, Feb 10, 2025 at 02:12:35PM -0500, Josef Bacik wrote:
> > > From: Josef Bacik <josef@toxicpanda.com>
> > > Date: Mon, 10 Feb 2025 14:06:40 -0500
> > > Subject: [PATCH] fuse: drop extra put of folio when using pipe splice
> > > 
> > > In 3eab9d7bc2f4 ("fuse: convert readahead to use folios"), I converted
> > > us to using the new folio readahead code, which drops the reference on
> > > the folio once it is locked, using an inferred reference on the folio.
> > > Previously we held a reference on the folio for the entire duration of
> > > the readpages call.
> > > 
> > > This is fine, however I failed to catch the case for splice pipe
> > > responses where we will remove the old folio and splice in the new
> > > folio.  Here we assumed that there is a reference held on the folio for
> > > ap->folios, which is no longer the case.
> > > 
> > > To fix this, simply drop the extra put to keep us consistent with the
> > > non-splice variation.  This will fix the UAF bug that was reported.
> > > 
> > > Link: https://lore.kernel.org/linux-fsdevel/2f681f48-00f5-4e09-8431-2b3dbfaa881e@heusel.eu/
> > > Fixes: 3eab9d7bc2f4 ("fuse: convert readahead to use folios")
> > > Signed-off-by: Josef Bacik <josef@toxicpanda.com>
> > > ---
> > >  fs/fuse/dev.c | 2 --
> > >  1 file changed, 2 deletions(-)
> > > 
> > > diff --git a/fs/fuse/dev.c b/fs/fuse/dev.c
> > > index 5b5f789b37eb..5bd6e2e184c0 100644
> > > --- a/fs/fuse/dev.c
> > > +++ b/fs/fuse/dev.c
> > > @@ -918,8 +918,6 @@ static int fuse_try_move_page(struct fuse_copy_state *cs, struct page **pagep)
> > >  	}
> > >  
> > >  	folio_unlock(oldfolio);
> > > -	/* Drop ref for ap->pages[] array */
> > > -	folio_put(oldfolio);
> > >  	cs->len = 0;
> > 
> > But aren't we now leaking a reference to newfolio?  ie shouldn't
> > we also:
> > 
> > -	folio_get(newfolio);
> > 
> > a few lines earlier?
> > 
> 
> 
> I think that ref was leaking without Josef's patch, but your proposed
> fix seems correct to me. There is:
> 
> - 1 reference stolen from the pipe_buffer
> - 1 reference taken for the pagecache in replace_page_cache_folio()
> - the folio_get(newfolio) just after that
> 
> The pagecache ref doesn't count here, and we only need the reference
> that was stolen from the pipe_buffer to replace the one in pagep.

Actually, no. I'm wrong here. A little after the folio_get(newfolio)
call, we do:

        /*
         * Release while we have extra ref on stolen page.  Otherwise
         * anon_pipe_buf_release() might think the page can be reused.
         */
        pipe_buf_release(cs->pipe, buf);

...so that accounts for the extra reference. I think the newfolio
refcounting is correct as-is.
-- 
Jeff Layton <jlayton@kernel.org>


^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-11 14:01                         ` Jeff Layton
@ 2025-02-11 19:23                           ` Joanne Koong
  2025-02-11 19:41                             ` Jeff Layton
  2025-02-11 21:01                             ` Vlastimil Babka
  0 siblings, 2 replies; 34+ messages in thread
From: Joanne Koong @ 2025-02-11 19:23 UTC (permalink / raw)
  To: Jeff Layton
  Cc: Matthew Wilcox, Josef Bacik, Vlastimil Babka, Miklos Szeredi,
	Christian Heusel, Miklos Szeredi, regressions, linux-kernel,
	linux-fsdevel, linux-mm, Mantas Mikulėnas

On Tue, Feb 11, 2025 at 6:01 AM Jeff Layton <jlayton@kernel.org> wrote:
>
> On Mon, 2025-02-10 at 17:38 -0500, Jeff Layton wrote:
> > On Mon, 2025-02-10 at 20:36 +0000, Matthew Wilcox wrote:
> > > On Mon, Feb 10, 2025 at 02:12:35PM -0500, Josef Bacik wrote:
> > > > From: Josef Bacik <josef@toxicpanda.com>
> > > > Date: Mon, 10 Feb 2025 14:06:40 -0500
> > > > Subject: [PATCH] fuse: drop extra put of folio when using pipe splice
> > > >
> > > > In 3eab9d7bc2f4 ("fuse: convert readahead to use folios"), I converted
> > > > us to using the new folio readahead code, which drops the reference on
> > > > the folio once it is locked, using an inferred reference on the folio.
> > > > Previously we held a reference on the folio for the entire duration of
> > > > the readpages call.
> > > >
> > > > This is fine, however I failed to catch the case for splice pipe
> > > > responses where we will remove the old folio and splice in the new
> > > > folio.  Here we assumed that there is a reference held on the folio for
> > > > ap->folios, which is no longer the case.
> > > >
> > > > To fix this, simply drop the extra put to keep us consistent with the
> > > > non-splice variation.  This will fix the UAF bug that was reported.
> > > >
> > > > Link: https://lore.kernel.org/linux-fsdevel/2f681f48-00f5-4e09-8431-2b3dbfaa881e@heusel.eu/
> > > > Fixes: 3eab9d7bc2f4 ("fuse: convert readahead to use folios")
> > > > Signed-off-by: Josef Bacik <josef@toxicpanda.com>
> > > > ---
> > > >  fs/fuse/dev.c | 2 --
> > > >  1 file changed, 2 deletions(-)
> > > >
> > > > diff --git a/fs/fuse/dev.c b/fs/fuse/dev.c
> > > > index 5b5f789b37eb..5bd6e2e184c0 100644
> > > > --- a/fs/fuse/dev.c
> > > > +++ b/fs/fuse/dev.c
> > > > @@ -918,8 +918,6 @@ static int fuse_try_move_page(struct fuse_copy_state *cs, struct page **pagep)
> > > >   }
> > > >
> > > >   folio_unlock(oldfolio);
> > > > - /* Drop ref for ap->pages[] array */
> > > > - folio_put(oldfolio);
> > > >   cs->len = 0;
> > >
> > > But aren't we now leaking a reference to newfolio?  ie shouldn't
> > > we also:
> > >
> > > -   folio_get(newfolio);
> > >
> > > a few lines earlier?
> > >
> >
> >
> > I think that ref was leaking without Josef's patch, but your proposed
> > fix seems correct to me. There is:
> >
> > - 1 reference stolen from the pipe_buffer
> > - 1 reference taken for the pagecache in replace_page_cache_folio()
> > - the folio_get(newfolio) just after that
> >
> > The pagecache ref doesn't count here, and we only need the reference
> > that was stolen from the pipe_buffer to replace the one in pagep.
>
> Actually, no. I'm wrong here. A little after the folio_get(newfolio)
> call, we do:
>
>         /*
>          * Release while we have extra ref on stolen page.  Otherwise
>          * anon_pipe_buf_release() might think the page can be reused.
>          */
>         pipe_buf_release(cs->pipe, buf);
>
> ...so that accounts for the extra reference. I think the newfolio
> refcounting is correct as-is.

I think we do need to remove the folio_get(newfolio); here or we are
leaking the reference.

new_folio = page_folio(buf->page) # ref is 1
replace_page_cache_folio() # ref is 2
folio_get() # ref is 3
pipe_buf_release() # ref is 2

One ref belongs to the page cache and will get dropped by that, but
the other ref is unaccounted for (since the original patch removed
"folio_put()" from fuse_readpages_end()).

I still think acquiring an explicit reference on the folio before we
add it to ap->folio and then dropping it when we're completely done
with it in fuse_readpages_end() is the best solution, as that imo
makes the refcounting / lifetimes the most explicit / clear. For
example, in try_move_pages(), if we get rid of that "folio_get()"
call, the page cache is the holder of the remaining reference on it,
and we rely on the earlier "folio_clear_uptodate(newfolio);" line in
try_move_pages() to guarantee that the newfolio isn't freed out from
under us if memory gets tight and it's evicted from the page cache.

imo, a patch like this makes the refcounting the most clear:

From 923fa98b97cf6dfba3bb486833179c349d566d64 Mon Sep 17 00:00:00 2001
From: Joanne Koong <joannelkoong@gmail.com>
Date: Tue, 11 Feb 2025 10:59:40 -0800
Subject: [PATCH] fuse: acquire explicit folio refcount for readahead

In 3eab9d7bc2f4 ("fuse: convert readahead to use folios"), the logic
was converted to using the new folio readahead code, which drops the
reference on the folio once it is locked, using an inferred reference
on the folio. Previously we held a reference on the folio for the
entire duration of the readpages call.

This is fine, however for the case for splice pipe responses where we
will remove the old folio and splice in the new folio (see
fuse_try_move_page()), we assume that there is a reference held on the
folio for ap->folios, which is no longer the case.

To fix this and make the refcounting explicit, acquire a refcount on the
folio before we add it to ap->folios[] and drop it when we are done with
the folio in fuse_readpages_end(). This will fix the UAF bug that was
reported.

Link: https://lore.kernel.org/linux-fsdevel/2f681f48-00f5-4e09-8431-2b3dbfaa881e@heusel.eu/
Fixes: 3eab9d7bc2f4 ("fuse: convert readahead to use folios")
Signed-off-by: Joanne Koong <joannelkoong@gmail.com>
---
 fs/fuse/file.c | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/fs/fuse/file.c b/fs/fuse/file.c
index 7d92a5479998..6fa535c73d93 100644
--- a/fs/fuse/file.c
+++ b/fs/fuse/file.c
@@ -955,8 +955,10 @@ static void fuse_readpages_end(struct fuse_mount
*fm, struct fuse_args *args,
                fuse_invalidate_atime(inode);
        }

-       for (i = 0; i < ap->num_folios; i++)
+       for (i = 0; i < ap->num_folios; i++) {
                folio_end_read(ap->folios[i], !err);
+               folio_put(ap->folios[i]);
+       }
        if (ia->ff)
                fuse_file_put(ia->ff, false);

@@ -1049,6 +1051,12 @@ static void fuse_readahead(struct readahead_control *rac)

                while (ap->num_folios < cur_pages) {
                        folio = readahead_folio(rac);
+                       /*
+                        * Acquire an explicit reference on the folio in case
+                        * it's replaced in the page cache in the splice case
+                        * (see fuse_try_move_page()).
+                        */
+                       folio_get(folio);
                        ap->folios[ap->num_folios] = folio;
                        ap->descs[ap->num_folios].length = folio_size(folio);
                        ap->num_folios++;
--
2.43.5

> --
> Jeff Layton <jlayton@kernel.org>


^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-11 19:23                           ` Joanne Koong
@ 2025-02-11 19:41                             ` Jeff Layton
  2025-02-11 21:10                               ` Joanne Koong
  2025-02-11 21:01                             ` Vlastimil Babka
  1 sibling, 1 reply; 34+ messages in thread
From: Jeff Layton @ 2025-02-11 19:41 UTC (permalink / raw)
  To: Joanne Koong
  Cc: Matthew Wilcox, Josef Bacik, Vlastimil Babka, Miklos Szeredi,
	Christian Heusel, Miklos Szeredi, regressions, linux-kernel,
	linux-fsdevel, linux-mm, Mantas Mikulėnas

On Tue, 2025-02-11 at 11:23 -0800, Joanne Koong wrote:
> On Tue, Feb 11, 2025 at 6:01 AM Jeff Layton <jlayton@kernel.org> wrote:
> > 
> > On Mon, 2025-02-10 at 17:38 -0500, Jeff Layton wrote:
> > > On Mon, 2025-02-10 at 20:36 +0000, Matthew Wilcox wrote:
> > > > On Mon, Feb 10, 2025 at 02:12:35PM -0500, Josef Bacik wrote:
> > > > > From: Josef Bacik <josef@toxicpanda.com>
> > > > > Date: Mon, 10 Feb 2025 14:06:40 -0500
> > > > > Subject: [PATCH] fuse: drop extra put of folio when using pipe splice
> > > > > 
> > > > > In 3eab9d7bc2f4 ("fuse: convert readahead to use folios"), I converted
> > > > > us to using the new folio readahead code, which drops the reference on
> > > > > the folio once it is locked, using an inferred reference on the folio.
> > > > > Previously we held a reference on the folio for the entire duration of
> > > > > the readpages call.
> > > > > 
> > > > > This is fine, however I failed to catch the case for splice pipe
> > > > > responses where we will remove the old folio and splice in the new
> > > > > folio.  Here we assumed that there is a reference held on the folio for
> > > > > ap->folios, which is no longer the case.
> > > > > 
> > > > > To fix this, simply drop the extra put to keep us consistent with the
> > > > > non-splice variation.  This will fix the UAF bug that was reported.
> > > > > 
> > > > > Link: https://lore.kernel.org/linux-fsdevel/2f681f48-00f5-4e09-8431-2b3dbfaa881e@heusel.eu/
> > > > > Fixes: 3eab9d7bc2f4 ("fuse: convert readahead to use folios")
> > > > > Signed-off-by: Josef Bacik <josef@toxicpanda.com>
> > > > > ---
> > > > >  fs/fuse/dev.c | 2 --
> > > > >  1 file changed, 2 deletions(-)
> > > > > 
> > > > > diff --git a/fs/fuse/dev.c b/fs/fuse/dev.c
> > > > > index 5b5f789b37eb..5bd6e2e184c0 100644
> > > > > --- a/fs/fuse/dev.c
> > > > > +++ b/fs/fuse/dev.c
> > > > > @@ -918,8 +918,6 @@ static int fuse_try_move_page(struct fuse_copy_state *cs, struct page **pagep)
> > > > >   }
> > > > > 
> > > > >   folio_unlock(oldfolio);
> > > > > - /* Drop ref for ap->pages[] array */
> > > > > - folio_put(oldfolio);
> > > > >   cs->len = 0;
> > > > 
> > > > But aren't we now leaking a reference to newfolio?  ie shouldn't
> > > > we also:
> > > > 
> > > > -   folio_get(newfolio);
> > > > 
> > > > a few lines earlier?
> > > > 
> > > 
> > > 
> > > I think that ref was leaking without Josef's patch, but your proposed
> > > fix seems correct to me. There is:
> > > 
> > > - 1 reference stolen from the pipe_buffer
> > > - 1 reference taken for the pagecache in replace_page_cache_folio()
> > > - the folio_get(newfolio) just after that
> > > 
> > > The pagecache ref doesn't count here, and we only need the reference
> > > that was stolen from the pipe_buffer to replace the one in pagep.
> > 
> > Actually, no. I'm wrong here. A little after the folio_get(newfolio)
> > call, we do:
> > 
> >         /*
> >          * Release while we have extra ref on stolen page.  Otherwise
> >          * anon_pipe_buf_release() might think the page can be reused.
> >          */
> >         pipe_buf_release(cs->pipe, buf);
> > 
> > ...so that accounts for the extra reference. I think the newfolio
> > refcounting is correct as-is.
> 
> I think we do need to remove the folio_get(newfolio); here or we are
> leaking the reference.
> 
> new_folio = page_folio(buf->page) # ref is 1
> replace_page_cache_folio() # ref is 2
> folio_get() # ref is 3
> pipe_buf_release() # ref is 2
> 
> One ref belongs to the page cache and will get dropped by that, but
> the other ref is unaccounted for (since the original patch removed
> "folio_put()" from fuse_readpages_end()).
> 
> I still think acquiring an explicit reference on the folio before we
> add it to ap->folio and then dropping it when we're completely done
> with it in fuse_readpages_end() is the best solution, as that imo
> makes the refcounting / lifetimes the most explicit / clear. For
> example, in try_move_pages(), if we get rid of that "folio_get()"
> call, the page cache is the holder of the remaining reference on it,
> and we rely on the earlier "folio_clear_uptodate(newfolio);" line in
> try_move_pages() to guarantee that the newfolio isn't freed out from
> under us if memory gets tight and it's evicted from the page cache.
> 
> imo, a patch like this makes the refcounting the most clear:
> 
> From 923fa98b97cf6dfba3bb486833179c349d566d64 Mon Sep 17 00:00:00 2001
> From: Joanne Koong <joannelkoong@gmail.com>
> Date: Tue, 11 Feb 2025 10:59:40 -0800
> Subject: [PATCH] fuse: acquire explicit folio refcount for readahead
> 
> In 3eab9d7bc2f4 ("fuse: convert readahead to use folios"), the logic
> was converted to using the new folio readahead code, which drops the
> reference on the folio once it is locked, using an inferred reference
> on the folio. Previously we held a reference on the folio for the
> entire duration of the readpages call.
> 
> This is fine, however for the case for splice pipe responses where we
> will remove the old folio and splice in the new folio (see
> fuse_try_move_page()), we assume that there is a reference held on the
> folio for ap->folios, which is no longer the case.
> 
> To fix this and make the refcounting explicit, acquire a refcount on the
> folio before we add it to ap->folios[] and drop it when we are done with
> the folio in fuse_readpages_end(). This will fix the UAF bug that was
> reported.
> 
> Link: https://lore.kernel.org/linux-fsdevel/2f681f48-00f5-4e09-8431-2b3dbfaa881e@heusel.eu/
> Fixes: 3eab9d7bc2f4 ("fuse: convert readahead to use folios")
> Signed-off-by: Joanne Koong <joannelkoong@gmail.com>
> ---
>  fs/fuse/file.c | 10 +++++++++-
>  1 file changed, 9 insertions(+), 1 deletion(-)
> 
> diff --git a/fs/fuse/file.c b/fs/fuse/file.c
> index 7d92a5479998..6fa535c73d93 100644
> --- a/fs/fuse/file.c
> +++ b/fs/fuse/file.c
> @@ -955,8 +955,10 @@ static void fuse_readpages_end(struct fuse_mount
> *fm, struct fuse_args *args,
>                 fuse_invalidate_atime(inode);
>         }
> 
> -       for (i = 0; i < ap->num_folios; i++)
> +       for (i = 0; i < ap->num_folios; i++) {
>                 folio_end_read(ap->folios[i], !err);
> +               folio_put(ap->folios[i]);
> +       }
>         if (ia->ff)
>                 fuse_file_put(ia->ff, false);
> 
> @@ -1049,6 +1051,12 @@ static void fuse_readahead(struct readahead_control *rac)
> 
>                 while (ap->num_folios < cur_pages) {
>                         folio = readahead_folio(rac);
> +                       /*
> +                        * Acquire an explicit reference on the folio in case
> +                        * it's replaced in the page cache in the splice case
> +                        * (see fuse_try_move_page()).
> +                        */
> +                       folio_get(folio);
>                         ap->folios[ap->num_folios] = folio;
>                         ap->descs[ap->num_folios].length = folio_size(folio);
>                         ap->num_folios++;

That makes sense. My mistake was assuming the pointer in passed in via
pagep would hold a reference, and that the replacement folio would
carry one. I like the above better than assuming we have implicit
reference due to readpages. It's slightly more expensive due to the
refcounting, but it seems less brittle.

We should couple this with a comment over fuse_try_move_page().
Something like this maybe?

/*
 * Attempt to steal a page from the splice() pipe and move it into the
 * pagecache. If successful, the pointer in @pagep will be updated. The
 * folio that was originally in @pagep will lose a reference and the new
 * folio returned in @pagep will carry a reference.
 */

...

In any case, for this patch:

Reviewed-by: Jeff Layton <jlayton@kernel.org>


^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-11 19:41                             ` Jeff Layton
@ 2025-02-11 21:10                               ` Joanne Koong
  0 siblings, 0 replies; 34+ messages in thread
From: Joanne Koong @ 2025-02-11 21:10 UTC (permalink / raw)
  To: Jeff Layton
  Cc: Matthew Wilcox, Josef Bacik, Vlastimil Babka, Miklos Szeredi,
	Christian Heusel, Miklos Szeredi, regressions, linux-kernel,
	linux-fsdevel, linux-mm, Mantas Mikulėnas

On Tue, Feb 11, 2025 at 11:41 AM Jeff Layton <jlayton@kernel.org> wrote:
>
> On Tue, 2025-02-11 at 11:23 -0800, Joanne Koong wrote:
> > On Tue, Feb 11, 2025 at 6:01 AM Jeff Layton <jlayton@kernel.org> wrote:
> > >
> > > On Mon, 2025-02-10 at 17:38 -0500, Jeff Layton wrote:
> > > > On Mon, 2025-02-10 at 20:36 +0000, Matthew Wilcox wrote:
> > > > > On Mon, Feb 10, 2025 at 02:12:35PM -0500, Josef Bacik wrote:
> > > > > > From: Josef Bacik <josef@toxicpanda.com>
> > > > > > Date: Mon, 10 Feb 2025 14:06:40 -0500
> > > > > > Subject: [PATCH] fuse: drop extra put of folio when using pipe splice
> > > > > >
> > > > > > In 3eab9d7bc2f4 ("fuse: convert readahead to use folios"), I converted
> > > > > > us to using the new folio readahead code, which drops the reference on
> > > > > > the folio once it is locked, using an inferred reference on the folio.
> > > > > > Previously we held a reference on the folio for the entire duration of
> > > > > > the readpages call.
> > > > > >
> > > > > > This is fine, however I failed to catch the case for splice pipe
> > > > > > responses where we will remove the old folio and splice in the new
> > > > > > folio.  Here we assumed that there is a reference held on the folio for
> > > > > > ap->folios, which is no longer the case.
> > > > > >
> > > > > > To fix this, simply drop the extra put to keep us consistent with the
> > > > > > non-splice variation.  This will fix the UAF bug that was reported.
> > > > > >
> > > > > > Link: https://lore.kernel.org/linux-fsdevel/2f681f48-00f5-4e09-8431-2b3dbfaa881e@heusel.eu/
> > > > > > Fixes: 3eab9d7bc2f4 ("fuse: convert readahead to use folios")
> > > > > > Signed-off-by: Josef Bacik <josef@toxicpanda.com>
> > > > > > ---
> > > > > >  fs/fuse/dev.c | 2 --
> > > > > >  1 file changed, 2 deletions(-)
> > > > > >
> > > > > > diff --git a/fs/fuse/dev.c b/fs/fuse/dev.c
> > > > > > index 5b5f789b37eb..5bd6e2e184c0 100644
> > > > > > --- a/fs/fuse/dev.c
> > > > > > +++ b/fs/fuse/dev.c
> > > > > > @@ -918,8 +918,6 @@ static int fuse_try_move_page(struct fuse_copy_state *cs, struct page **pagep)
> > > > > >   }
> > > > > >
> > > > > >   folio_unlock(oldfolio);
> > > > > > - /* Drop ref for ap->pages[] array */
> > > > > > - folio_put(oldfolio);
> > > > > >   cs->len = 0;
> > > > >
> > > > > But aren't we now leaking a reference to newfolio?  ie shouldn't
> > > > > we also:
> > > > >
> > > > > -   folio_get(newfolio);
> > > > >
> > > > > a few lines earlier?
> > > > >
> > > >
> > > >
> > > > I think that ref was leaking without Josef's patch, but your proposed
> > > > fix seems correct to me. There is:
> > > >
> > > > - 1 reference stolen from the pipe_buffer
> > > > - 1 reference taken for the pagecache in replace_page_cache_folio()
> > > > - the folio_get(newfolio) just after that
> > > >
> > > > The pagecache ref doesn't count here, and we only need the reference
> > > > that was stolen from the pipe_buffer to replace the one in pagep.
> > >
> > > Actually, no. I'm wrong here. A little after the folio_get(newfolio)
> > > call, we do:
> > >
> > >         /*
> > >          * Release while we have extra ref on stolen page.  Otherwise
> > >          * anon_pipe_buf_release() might think the page can be reused.
> > >          */
> > >         pipe_buf_release(cs->pipe, buf);
> > >
> > > ...so that accounts for the extra reference. I think the newfolio
> > > refcounting is correct as-is.
> >
> > I think we do need to remove the folio_get(newfolio); here or we are
> > leaking the reference.
> >
> > new_folio = page_folio(buf->page) # ref is 1
> > replace_page_cache_folio() # ref is 2
> > folio_get() # ref is 3
> > pipe_buf_release() # ref is 2
> >
> > One ref belongs to the page cache and will get dropped by that, but
> > the other ref is unaccounted for (since the original patch removed
> > "folio_put()" from fuse_readpages_end()).
> >
> > I still think acquiring an explicit reference on the folio before we
> > add it to ap->folio and then dropping it when we're completely done
> > with it in fuse_readpages_end() is the best solution, as that imo
> > makes the refcounting / lifetimes the most explicit / clear. For
> > example, in try_move_pages(), if we get rid of that "folio_get()"
> > call, the page cache is the holder of the remaining reference on it,
> > and we rely on the earlier "folio_clear_uptodate(newfolio);" line in
> > try_move_pages() to guarantee that the newfolio isn't freed out from
> > under us if memory gets tight and it's evicted from the page cache.
> >
> > imo, a patch like this makes the refcounting the most clear:
> >
> > From 923fa98b97cf6dfba3bb486833179c349d566d64 Mon Sep 17 00:00:00 2001
> > From: Joanne Koong <joannelkoong@gmail.com>
> > Date: Tue, 11 Feb 2025 10:59:40 -0800
> > Subject: [PATCH] fuse: acquire explicit folio refcount for readahead
> >
> > In 3eab9d7bc2f4 ("fuse: convert readahead to use folios"), the logic
> > was converted to using the new folio readahead code, which drops the
> > reference on the folio once it is locked, using an inferred reference
> > on the folio. Previously we held a reference on the folio for the
> > entire duration of the readpages call.
> >
> > This is fine, however for the case for splice pipe responses where we
> > will remove the old folio and splice in the new folio (see
> > fuse_try_move_page()), we assume that there is a reference held on the
> > folio for ap->folios, which is no longer the case.
> >
> > To fix this and make the refcounting explicit, acquire a refcount on the
> > folio before we add it to ap->folios[] and drop it when we are done with
> > the folio in fuse_readpages_end(). This will fix the UAF bug that was
> > reported.
> >
> > Link: https://lore.kernel.org/linux-fsdevel/2f681f48-00f5-4e09-8431-2b3dbfaa881e@heusel.eu/
> > Fixes: 3eab9d7bc2f4 ("fuse: convert readahead to use folios")
> > Signed-off-by: Joanne Koong <joannelkoong@gmail.com>
> > ---
> >  fs/fuse/file.c | 10 +++++++++-
> >  1 file changed, 9 insertions(+), 1 deletion(-)
> >
> > diff --git a/fs/fuse/file.c b/fs/fuse/file.c
> > index 7d92a5479998..6fa535c73d93 100644
> > --- a/fs/fuse/file.c
> > +++ b/fs/fuse/file.c
> > @@ -955,8 +955,10 @@ static void fuse_readpages_end(struct fuse_mount
> > *fm, struct fuse_args *args,
> >                 fuse_invalidate_atime(inode);
> >         }
> >
> > -       for (i = 0; i < ap->num_folios; i++)
> > +       for (i = 0; i < ap->num_folios; i++) {
> >                 folio_end_read(ap->folios[i], !err);
> > +               folio_put(ap->folios[i]);
> > +       }
> >         if (ia->ff)
> >                 fuse_file_put(ia->ff, false);
> >
> > @@ -1049,6 +1051,12 @@ static void fuse_readahead(struct readahead_control *rac)
> >
> >                 while (ap->num_folios < cur_pages) {
> >                         folio = readahead_folio(rac);
> > +                       /*
> > +                        * Acquire an explicit reference on the folio in case
> > +                        * it's replaced in the page cache in the splice case
> > +                        * (see fuse_try_move_page()).
> > +                        */
> > +                       folio_get(folio);
> >                         ap->folios[ap->num_folios] = folio;
> >                         ap->descs[ap->num_folios].length = folio_size(folio);
> >                         ap->num_folios++;
>
> That makes sense. My mistake was assuming the pointer in passed in via
> pagep would hold a reference, and that the replacement folio would
> carry one. I like the above better than assuming we have implicit
> reference due to readpages. It's slightly more expensive due to the
> refcounting, but it seems less brittle.
>
> We should couple this with a comment over fuse_try_move_page().
> Something like this maybe?
>
> /*
>  * Attempt to steal a page from the splice() pipe and move it into the
>  * pagecache. If successful, the pointer in @pagep will be updated. The
>  * folio that was originally in @pagep will lose a reference and the new
>  * folio returned in @pagep will carry a reference.
>  */

Great idea, I'll add this in.

>
> ...
>
> In any case, for this patch:
>
> Reviewed-by: Jeff Layton <jlayton@kernel.org>


^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-11 19:23                           ` Joanne Koong
  2025-02-11 19:41                             ` Jeff Layton
@ 2025-02-11 21:01                             ` Vlastimil Babka
  2025-02-11 21:21                               ` Joanne Koong
  1 sibling, 1 reply; 34+ messages in thread
From: Vlastimil Babka @ 2025-02-11 21:01 UTC (permalink / raw)
  To: Joanne Koong, Jeff Layton
  Cc: Matthew Wilcox, Josef Bacik, Miklos Szeredi, Christian Heusel,
	Miklos Szeredi, regressions, linux-kernel, linux-fsdevel,
	linux-mm, Mantas Mikulėnas

On 2/11/25 20:23, Joanne Koong wrote:
> On Tue, Feb 11, 2025 at 6:01 AM Jeff Layton <jlayton@kernel.org> wrote:
>>
>> On Mon, 2025-02-10 at 17:38 -0500, Jeff Layton wrote:
>> > On Mon, 2025-02-10 at 20:36 +0000, Matthew Wilcox wrote:
>> > > On Mon, Feb 10, 2025 at 02:12:35PM -0500, Josef Bacik wrote:
>> > > > From: Josef Bacik <josef@toxicpanda.com>
>> > > > Date: Mon, 10 Feb 2025 14:06:40 -0500
>> > > > Subject: [PATCH] fuse: drop extra put of folio when using pipe splice
>> > > >
>> > > > In 3eab9d7bc2f4 ("fuse: convert readahead to use folios"), I converted
>> > > > us to using the new folio readahead code, which drops the reference on
>> > > > the folio once it is locked, using an inferred reference on the folio.
>> > > > Previously we held a reference on the folio for the entire duration of
>> > > > the readpages call.
>> > > >
>> > > > This is fine, however I failed to catch the case for splice pipe
>> > > > responses where we will remove the old folio and splice in the new
>> > > > folio.  Here we assumed that there is a reference held on the folio for
>> > > > ap->folios, which is no longer the case.
>> > > >
>> > > > To fix this, simply drop the extra put to keep us consistent with the
>> > > > non-splice variation.  This will fix the UAF bug that was reported.
>> > > >
>> > > > Link: https://lore.kernel.org/linux-fsdevel/2f681f48-00f5-4e09-8431-2b3dbfaa881e@heusel.eu/
>> > > > Fixes: 3eab9d7bc2f4 ("fuse: convert readahead to use folios")
>> > > > Signed-off-by: Josef Bacik <josef@toxicpanda.com>
>> > > > ---
>> > > >  fs/fuse/dev.c | 2 --
>> > > >  1 file changed, 2 deletions(-)
>> > > >
>> > > > diff --git a/fs/fuse/dev.c b/fs/fuse/dev.c
>> > > > index 5b5f789b37eb..5bd6e2e184c0 100644
>> > > > --- a/fs/fuse/dev.c
>> > > > +++ b/fs/fuse/dev.c
>> > > > @@ -918,8 +918,6 @@ static int fuse_try_move_page(struct fuse_copy_state *cs, struct page **pagep)
>> > > >   }
>> > > >
>> > > >   folio_unlock(oldfolio);
>> > > > - /* Drop ref for ap->pages[] array */
>> > > > - folio_put(oldfolio);
>> > > >   cs->len = 0;
>> > >
>> > > But aren't we now leaking a reference to newfolio?  ie shouldn't
>> > > we also:
>> > >
>> > > -   folio_get(newfolio);
>> > >
>> > > a few lines earlier?
>> > >
>> >
>> >
>> > I think that ref was leaking without Josef's patch, but your proposed
>> > fix seems correct to me. There is:
>> >
>> > - 1 reference stolen from the pipe_buffer
>> > - 1 reference taken for the pagecache in replace_page_cache_folio()
>> > - the folio_get(newfolio) just after that
>> >
>> > The pagecache ref doesn't count here, and we only need the reference
>> > that was stolen from the pipe_buffer to replace the one in pagep.
>>
>> Actually, no. I'm wrong here. A little after the folio_get(newfolio)
>> call, we do:
>>
>>         /*
>>          * Release while we have extra ref on stolen page.  Otherwise
>>          * anon_pipe_buf_release() might think the page can be reused.
>>          */
>>         pipe_buf_release(cs->pipe, buf);
>>
>> ...so that accounts for the extra reference. I think the newfolio
>> refcounting is correct as-is.
> 
> I think we do need to remove the folio_get(newfolio); here or we are
> leaking the reference.
> 
> new_folio = page_folio(buf->page) # ref is 1
> replace_page_cache_folio() # ref is 2
> folio_get() # ref is 3
> pipe_buf_release() # ref is 2
> 
> One ref belongs to the page cache and will get dropped by that, but
> the other ref is unaccounted for (since the original patch removed
> "folio_put()" from fuse_readpages_end()).
> 
> I still think acquiring an explicit reference on the folio before we
> add it to ap->folio and then dropping it when we're completely done
> with it in fuse_readpages_end() is the best solution, as that imo
> makes the refcounting / lifetimes the most explicit / clear. For
> example, in try_move_pages(), if we get rid of that "folio_get()"
> call, the page cache is the holder of the remaining reference on it,
> and we rely on the earlier "folio_clear_uptodate(newfolio);" line in
> try_move_pages() to guarantee that the newfolio isn't freed out from
> under us if memory gets tight and it's evicted from the page cache.
> 
> imo, a patch like this makes the refcounting the most clear:
> 
> From 923fa98b97cf6dfba3bb486833179c349d566d64 Mon Sep 17 00:00:00 2001
> From: Joanne Koong <joannelkoong@gmail.com>
> Date: Tue, 11 Feb 2025 10:59:40 -0800
> Subject: [PATCH] fuse: acquire explicit folio refcount for readahead
> 
> In 3eab9d7bc2f4 ("fuse: convert readahead to use folios"), the logic
> was converted to using the new folio readahead code, which drops the
> reference on the folio once it is locked, using an inferred reference
> on the folio. Previously we held a reference on the folio for the
> entire duration of the readpages call.
> 
> This is fine, however for the case for splice pipe responses where we
> will remove the old folio and splice in the new folio (see
> fuse_try_move_page()), we assume that there is a reference held on the
> folio for ap->folios, which is no longer the case.
> 
> To fix this and make the refcounting explicit, acquire a refcount on the
> folio before we add it to ap->folios[] and drop it when we are done with
> the folio in fuse_readpages_end(). This will fix the UAF bug that was
> reported.
> 
> Link: https://lore.kernel.org/linux-fsdevel/2f681f48-00f5-4e09-8431-2b3dbfaa881e@heusel.eu/
> Fixes: 3eab9d7bc2f4 ("fuse: convert readahead to use folios")

Can we add some tags?

Reported-by: Christian Heusel <christian@heusel.eu>
Closes: https://lore.kernel.org/all/2f681f48-00f5-4e09-8431-2b3dbfaa881e@heusel.eu/
Closes: https://gitlab.archlinux.org/archlinux/packaging/packages/linux/-/issues/110
Reported-by: Mantas Mikulėnas <grawity@gmail.com>
Closes: https://lore.kernel.org/all/34feb867-09e2-46e4-aa31-d9660a806d1a@gmail.com/
Closes: https://bugzilla.opensuse.org/show_bug.cgi?id=1236660
Cc: <stable@vger.kernel.org>

> Signed-off-by: Joanne Koong <joannelkoong@gmail.com>
> ---
>  fs/fuse/file.c | 10 +++++++++-
>  1 file changed, 9 insertions(+), 1 deletion(-)
> 
> diff --git a/fs/fuse/file.c b/fs/fuse/file.c
> index 7d92a5479998..6fa535c73d93 100644
> --- a/fs/fuse/file.c
> +++ b/fs/fuse/file.c
> @@ -955,8 +955,10 @@ static void fuse_readpages_end(struct fuse_mount
> *fm, struct fuse_args *args,
>                 fuse_invalidate_atime(inode);
>         }
> 
> -       for (i = 0; i < ap->num_folios; i++)
> +       for (i = 0; i < ap->num_folios; i++) {
>                 folio_end_read(ap->folios[i], !err);
> +               folio_put(ap->folios[i]);
> +       }
>         if (ia->ff)
>                 fuse_file_put(ia->ff, false);
> 
> @@ -1049,6 +1051,12 @@ static void fuse_readahead(struct readahead_control *rac)
> 
>                 while (ap->num_folios < cur_pages) {
>                         folio = readahead_folio(rac);
> +                       /*
> +                        * Acquire an explicit reference on the folio in case
> +                        * it's replaced in the page cache in the splice case
> +                        * (see fuse_try_move_page()).
> +                        */
> +                       folio_get(folio);

It would be more efficient to use __readahead_folio() instead of doing a folio_get()
to counter a folio_put() in readahead_folio(). An adjusted comment can explain why
we use __readahead_folio().

>                         ap->folios[ap->num_folios] = folio;
>                         ap->descs[ap->num_folios].length = folio_size(folio);
>                         ap->num_folios++;
> --
> 2.43.5
> 
>> --
>> Jeff Layton <jlayton@kernel.org>



^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-11 21:01                             ` Vlastimil Babka
@ 2025-02-11 21:21                               ` Joanne Koong
  0 siblings, 0 replies; 34+ messages in thread
From: Joanne Koong @ 2025-02-11 21:21 UTC (permalink / raw)
  To: Vlastimil Babka
  Cc: Jeff Layton, Matthew Wilcox, Josef Bacik, Miklos Szeredi,
	Christian Heusel, Miklos Szeredi, regressions, linux-kernel,
	linux-fsdevel, linux-mm, Mantas Mikulėnas

On Tue, Feb 11, 2025 at 1:01 PM Vlastimil Babka <vbabka@suse.cz> wrote:
>
> On 2/11/25 20:23, Joanne Koong wrote:
> > On Tue, Feb 11, 2025 at 6:01 AM Jeff Layton <jlayton@kernel.org> wrote:
> >>
> >> On Mon, 2025-02-10 at 17:38 -0500, Jeff Layton wrote:
> >> > On Mon, 2025-02-10 at 20:36 +0000, Matthew Wilcox wrote:
> >> > > On Mon, Feb 10, 2025 at 02:12:35PM -0500, Josef Bacik wrote:
> >> > > > From: Josef Bacik <josef@toxicpanda.com>
> >> > > > Date: Mon, 10 Feb 2025 14:06:40 -0500
> >> > > > Subject: [PATCH] fuse: drop extra put of folio when using pipe splice
> >> > > >
> >> > > > In 3eab9d7bc2f4 ("fuse: convert readahead to use folios"), I converted
> >> > > > us to using the new folio readahead code, which drops the reference on
> >> > > > the folio once it is locked, using an inferred reference on the folio.
> >> > > > Previously we held a reference on the folio for the entire duration of
> >> > > > the readpages call.
> >> > > >
> >> > > > This is fine, however I failed to catch the case for splice pipe
> >> > > > responses where we will remove the old folio and splice in the new
> >> > > > folio.  Here we assumed that there is a reference held on the folio for
> >> > > > ap->folios, which is no longer the case.
> >> > > >
> >> > > > To fix this, simply drop the extra put to keep us consistent with the
> >> > > > non-splice variation.  This will fix the UAF bug that was reported.
> >> > > >
> >> > > > Link: https://lore.kernel.org/linux-fsdevel/2f681f48-00f5-4e09-8431-2b3dbfaa881e@heusel.eu/
> >> > > > Fixes: 3eab9d7bc2f4 ("fuse: convert readahead to use folios")
> >> > > > Signed-off-by: Josef Bacik <josef@toxicpanda.com>
> >> > > > ---
> >> > > >  fs/fuse/dev.c | 2 --
> >> > > >  1 file changed, 2 deletions(-)
> >> > > >
> >> > > > diff --git a/fs/fuse/dev.c b/fs/fuse/dev.c
> >> > > > index 5b5f789b37eb..5bd6e2e184c0 100644
> >> > > > --- a/fs/fuse/dev.c
> >> > > > +++ b/fs/fuse/dev.c
> >> > > > @@ -918,8 +918,6 @@ static int fuse_try_move_page(struct fuse_copy_state *cs, struct page **pagep)
> >> > > >   }
> >> > > >
> >> > > >   folio_unlock(oldfolio);
> >> > > > - /* Drop ref for ap->pages[] array */
> >> > > > - folio_put(oldfolio);
> >> > > >   cs->len = 0;
> >> > >
> >> > > But aren't we now leaking a reference to newfolio?  ie shouldn't
> >> > > we also:
> >> > >
> >> > > -   folio_get(newfolio);
> >> > >
> >> > > a few lines earlier?
> >> > >
> >> >
> >> >
> >> > I think that ref was leaking without Josef's patch, but your proposed
> >> > fix seems correct to me. There is:
> >> >
> >> > - 1 reference stolen from the pipe_buffer
> >> > - 1 reference taken for the pagecache in replace_page_cache_folio()
> >> > - the folio_get(newfolio) just after that
> >> >
> >> > The pagecache ref doesn't count here, and we only need the reference
> >> > that was stolen from the pipe_buffer to replace the one in pagep.
> >>
> >> Actually, no. I'm wrong here. A little after the folio_get(newfolio)
> >> call, we do:
> >>
> >>         /*
> >>          * Release while we have extra ref on stolen page.  Otherwise
> >>          * anon_pipe_buf_release() might think the page can be reused.
> >>          */
> >>         pipe_buf_release(cs->pipe, buf);
> >>
> >> ...so that accounts for the extra reference. I think the newfolio
> >> refcounting is correct as-is.
> >
> > I think we do need to remove the folio_get(newfolio); here or we are
> > leaking the reference.
> >
> > new_folio = page_folio(buf->page) # ref is 1
> > replace_page_cache_folio() # ref is 2
> > folio_get() # ref is 3
> > pipe_buf_release() # ref is 2
> >
> > One ref belongs to the page cache and will get dropped by that, but
> > the other ref is unaccounted for (since the original patch removed
> > "folio_put()" from fuse_readpages_end()).
> >
> > I still think acquiring an explicit reference on the folio before we
> > add it to ap->folio and then dropping it when we're completely done
> > with it in fuse_readpages_end() is the best solution, as that imo
> > makes the refcounting / lifetimes the most explicit / clear. For
> > example, in try_move_pages(), if we get rid of that "folio_get()"
> > call, the page cache is the holder of the remaining reference on it,
> > and we rely on the earlier "folio_clear_uptodate(newfolio);" line in
> > try_move_pages() to guarantee that the newfolio isn't freed out from
> > under us if memory gets tight and it's evicted from the page cache.
> >
> > imo, a patch like this makes the refcounting the most clear:
> >
> > From 923fa98b97cf6dfba3bb486833179c349d566d64 Mon Sep 17 00:00:00 2001
> > From: Joanne Koong <joannelkoong@gmail.com>
> > Date: Tue, 11 Feb 2025 10:59:40 -0800
> > Subject: [PATCH] fuse: acquire explicit folio refcount for readahead
> >
> > In 3eab9d7bc2f4 ("fuse: convert readahead to use folios"), the logic
> > was converted to using the new folio readahead code, which drops the
> > reference on the folio once it is locked, using an inferred reference
> > on the folio. Previously we held a reference on the folio for the
> > entire duration of the readpages call.
> >
> > This is fine, however for the case for splice pipe responses where we
> > will remove the old folio and splice in the new folio (see
> > fuse_try_move_page()), we assume that there is a reference held on the
> > folio for ap->folios, which is no longer the case.
> >
> > To fix this and make the refcounting explicit, acquire a refcount on the
> > folio before we add it to ap->folios[] and drop it when we are done with
> > the folio in fuse_readpages_end(). This will fix the UAF bug that was
> > reported.
> >
> > Link: https://lore.kernel.org/linux-fsdevel/2f681f48-00f5-4e09-8431-2b3dbfaa881e@heusel.eu/
> > Fixes: 3eab9d7bc2f4 ("fuse: convert readahead to use folios")
>
> Can we add some tags?
>
> Reported-by: Christian Heusel <christian@heusel.eu>
> Closes: https://lore.kernel.org/all/2f681f48-00f5-4e09-8431-2b3dbfaa881e@heusel.eu/
> Closes: https://gitlab.archlinux.org/archlinux/packaging/packages/linux/-/issues/110
> Reported-by: Mantas Mikulėnas <grawity@gmail.com>
> Closes: https://lore.kernel.org/all/34feb867-09e2-46e4-aa31-d9660a806d1a@gmail.com/
> Closes: https://bugzilla.opensuse.org/show_bug.cgi?id=1236660
> Cc: <stable@vger.kernel.org>
>

Ok, I'll add these tags in and formally submit this patch to Miklos's tree.

> > Signed-off-by: Joanne Koong <joannelkoong@gmail.com>
> > ---
> >  fs/fuse/file.c | 10 +++++++++-
> >  1 file changed, 9 insertions(+), 1 deletion(-)
> >
> > diff --git a/fs/fuse/file.c b/fs/fuse/file.c
> > index 7d92a5479998..6fa535c73d93 100644
> > --- a/fs/fuse/file.c
> > +++ b/fs/fuse/file.c
> > @@ -955,8 +955,10 @@ static void fuse_readpages_end(struct fuse_mount
> > *fm, struct fuse_args *args,
> >                 fuse_invalidate_atime(inode);
> >         }
> >
> > -       for (i = 0; i < ap->num_folios; i++)
> > +       for (i = 0; i < ap->num_folios; i++) {
> >                 folio_end_read(ap->folios[i], !err);
> > +               folio_put(ap->folios[i]);
> > +       }
> >         if (ia->ff)
> >                 fuse_file_put(ia->ff, false);
> >
> > @@ -1049,6 +1051,12 @@ static void fuse_readahead(struct readahead_control *rac)
> >
> >                 while (ap->num_folios < cur_pages) {
> >                         folio = readahead_folio(rac);
> > +                       /*
> > +                        * Acquire an explicit reference on the folio in case
> > +                        * it's replaced in the page cache in the splice case
> > +                        * (see fuse_try_move_page()).
> > +                        */
> > +                       folio_get(folio);
>
> It would be more efficient to use __readahead_folio() instead of doing a folio_get()
> to counter a folio_put() in readahead_folio(). An adjusted comment can explain why
> we use __readahead_folio().

imo, the explicit get makes the code the most readable, but I also
don't feel strongly enough about it to insist. I'll make this change
in the patch.

>
> >                         ap->folios[ap->num_folios] = folio;
> >                         ap->descs[ap->num_folios].length = folio_size(folio);
> >                         ap->num_folios++;
> > --
> > 2.43.5
> >
> >> --
> >> Jeff Layton <jlayton@kernel.org>
>


^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-10  8:27               ` Vlastimil Babka
  2025-02-10 18:13                 ` Joanne Koong
@ 2025-02-10 18:58                 ` Jeff Layton
  1 sibling, 0 replies; 34+ messages in thread
From: Jeff Layton @ 2025-02-10 18:58 UTC (permalink / raw)
  To: Vlastimil Babka, Joanne Koong, Matthew Wilcox
  Cc: Josef Bacik, Miklos Szeredi, Christian Heusel, Miklos Szeredi,
	regressions, linux-kernel, linux-fsdevel, linux-mm,
	Mantas Mikulėnas

On Mon, 2025-02-10 at 09:27 +0100, Vlastimil Babka wrote:
> On 2/8/25 16:46, Joanne Koong wrote:
> > On Sat, Feb 8, 2025 at 2:11 AM Matthew Wilcox <willy@infradead.org> wrote:
> > > 
> > > On Fri, Feb 07, 2025 at 04:22:56PM -0800, Joanne Koong wrote:
> > > > > Thanks, Josef. I guess we can at least try to confirm we're on the right track.
> > > > > Can anyone affected see if this (only compile tested) patch fixes the issue?
> > > > > Created on top of 6.13.1.
> > > > 
> > > > This fixes the crash for me on 6.14.0-rc1. I ran the repro using
> > > > Mantas's instructions for Obfuscate. I was able to trigger the crash
> > > > on a clean build and then with this patch, I'm not seeing the crash
> > > > anymore.
> > > 
> > > Since this patch fixes the bug, we're looking for one call to folio_put()
> > > too many.  Is it possibly in fuse_try_move_page()?  In particular, this
> > > one:
> > > 
> > >         /* Drop ref for ap->pages[] array */
> > >         folio_put(oldfolio);
> > > 
> > > I don't know fuse very well.  Maybe this isn't it.
> > 
> > Yeah, this looks it to me. We don't grab a folio reference for the
> > ap->pages[] array for readahead and it tracks with Mantas's
> > fuse_dev_splice_write() dmesg. this patch fixed the crash for me when
> > I tested it yesterday:
> > 
> > diff --git a/fs/fuse/file.c b/fs/fuse/file.c
> > index 7d92a5479998..172cab8e2caf 100644
> > --- a/fs/fuse/file.c
> > +++ b/fs/fuse/file.c
> > @@ -955,8 +955,10 @@ static void fuse_readpages_end(struct fuse_mount
> > *fm, struct fuse_args *args,
> >                 fuse_invalidate_atime(inode);
> >         }
> > 
> > -       for (i = 0; i < ap->num_folios; i++)
> > +       for (i = 0; i < ap->num_folios; i++) {
> >                 folio_end_read(ap->folios[i], !err);
> > +               folio_put(ap->folios[i]);
> > +       }
> >         if (ia->ff)
> >                 fuse_file_put(ia->ff, false);
> > 
> > @@ -1049,6 +1051,7 @@ static void fuse_readahead(struct readahead_control *rac)
> > 
> >                 while (ap->num_folios < cur_pages) {
> >                         folio = readahead_folio(rac);
> > +                       folio_get(folio);
> 
> This is almost the same as my patch, but balances the folio_put() in
> readahead_folio() with another folio_get(), while mine uses
> __readahead_folio() that does not do folio_put() in the first place.
> 
> But I think neither patch proves the extraneous folio_put() comes from
> fuse_try_move_page().
> 
> >                         ap->folios[ap->num_folios] = folio;
> >                         ap->descs[ap->num_folios].length = folio_size(folio);
> >                         ap->num_folios++;
> > 
> > 
> > I reran it just now with a printk by that ref drop in
> > fuse_try_move_page() and I'm indeed seeing that path get hit.
> 
> It might get hit, but is it hit in the readahead paths? One way to test
> would be to instead of yours above or mine change, to stop doing the
> foio_put() in fuse_try_move_page(). But maybe it's called also from other
> contexts that do expect it, and will leak memory otherwise.
> 

I think you're right that there is a double put in
fuse_try_move_page(). Let's assume that we enter that function and the
refcount on "oldpage" is 1:

1/ We take a reference to "oldfolio" when we enter the function, now
refcount is 2.

2/ We drop a reference on "oldfolio" with the call to
replace_page_cache_folio. Now refcount is 1.

3/ Now there are 2 folio_put(oldfolio) calls on the way out of the
function, refcount goes to -1.

Maybe it's expected that this function consumes an extra folio
reference, but it's certainly not evident why that is if so. I don't
see why the callers would expect that either.

> > Not sure why fstests didn't pick this up though since splice is
> > enabled by default in passthrough_hp, i'll look into this next week.
> > 
> 
> 

-- 
Jeff Layton <jlayton@kernel.org>


^ permalink raw reply	[flat|nested] 34+ messages in thread

* Re: [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13
  2025-02-08 15:46             ` Joanne Koong
  2025-02-10  8:27               ` Vlastimil Babka
@ 2025-02-12 18:48               ` Joanne Koong
  1 sibling, 0 replies; 34+ messages in thread
From: Joanne Koong @ 2025-02-12 18:48 UTC (permalink / raw)
  To: Matthew Wilcox
  Cc: Vlastimil Babka, Josef Bacik, Miklos Szeredi, Christian Heusel,
	Miklos Szeredi, regressions, linux-kernel, linux-fsdevel,
	linux-mm, Mantas Mikulėnas

On Sat, Feb 8, 2025 at 7:46 AM Joanne Koong <joannelkoong@gmail.com> wrote:
>
> On Sat, Feb 8, 2025 at 2:11 AM Matthew Wilcox <willy@infradead.org> wrote:
> >
> > On Fri, Feb 07, 2025 at 04:22:56PM -0800, Joanne Koong wrote:
> > > > Thanks, Josef. I guess we can at least try to confirm we're on the right track.
> > > > Can anyone affected see if this (only compile tested) patch fixes the issue?
> > > > Created on top of 6.13.1.
> > >
> > > This fixes the crash for me on 6.14.0-rc1. I ran the repro using
> > > Mantas's instructions for Obfuscate. I was able to trigger the crash
> > > on a clean build and then with this patch, I'm not seeing the crash
> > > anymore.
> >
> > Since this patch fixes the bug, we're looking for one call to folio_put()
> > too many.  Is it possibly in fuse_try_move_page()?  In particular, this
> > one:
> >
> >         /* Drop ref for ap->pages[] array */
> >         folio_put(oldfolio);
> >
> > I don't know fuse very well.  Maybe this isn't it.
>
> Yeah, this looks it to me. We don't grab a folio reference for the
> ap->pages[] array for readahead and it tracks with Mantas's
> fuse_dev_splice_write() dmesg. this patch fixed the crash for me when
> I tested it yesterday:
>
> diff --git a/fs/fuse/file.c b/fs/fuse/file.c
> index 7d92a5479998..172cab8e2caf 100644
> --- a/fs/fuse/file.c
> +++ b/fs/fuse/file.c
> @@ -955,8 +955,10 @@ static void fuse_readpages_end(struct fuse_mount
> *fm, struct fuse_args *args,
>                 fuse_invalidate_atime(inode);
>         }
>
> -       for (i = 0; i < ap->num_folios; i++)
> +       for (i = 0; i < ap->num_folios; i++) {
>                 folio_end_read(ap->folios[i], !err);
> +               folio_put(ap->folios[i]);
> +       }
>         if (ia->ff)
>                 fuse_file_put(ia->ff, false);
>
> @@ -1049,6 +1051,7 @@ static void fuse_readahead(struct readahead_control *rac)
>
>                 while (ap->num_folios < cur_pages) {
>                         folio = readahead_folio(rac);
> +                       folio_get(folio);
>                         ap->folios[ap->num_folios] = folio;
>                         ap->descs[ap->num_folios].length = folio_size(folio);
>                         ap->num_folios++;
>
>
> I reran it just now with a printk by that ref drop in
> fuse_try_move_page() and I'm indeed seeing that path get hit.
>
> Not sure why fstests didn't pick this up though since splice is
> enabled by default in passthrough_hp, i'll look into this next week.

This wasn't hit in fstests because passthrough_hp doesn't set
SPLICE_F_MOVE. After adding that, I was able to trigger this crash by
running generic/075. I'll send out a libfuse pr for this


^ permalink raw reply	[flat|nested] 34+ messages in thread

* [PATCH] fuse: prevent folio use-after-free in readahead
  2025-02-07  9:34 ` [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13 Miklos Szeredi
                     ` (2 preceding siblings ...)
  2025-02-07 16:49   ` Vlastimil Babka
@ 2025-02-10  8:52   ` Vlastimil Babka
  3 siblings, 0 replies; 34+ messages in thread
From: Vlastimil Babka @ 2025-02-10  8:52 UTC (permalink / raw)
  To: miklos
  Cc: christian, joannelkoong, josef, linux-fsdevel, linux-kernel,
	linux-mm, mszeredi, regressions, willy, Vlastimil Babka,
	Mantas Mikulėnas, stable

There have been crash reports in 6.13+ kernels related to FUSE and
Flatpak, such as from Christian:

 BUG: Bad page state in process rnote  pfn:67587
 page: refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x67587
 flags: 0xfffffc8000020(lru|node=0|zone=1|lastcpupid=0x1fffff)
 raw: 000fffffc8000020 dead000000000100 dead000000000122 0000000000000000
 raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000
 page dumped because: PAGE_FLAGS_CHECK_AT_PREP flag(s) set
 CPU: 0 UID: 1000 PID: 1962 Comm: rnote Not tainted 6.14.0-rc1-1-mainline #1 715c0460cf5d3cc18e3178ef3209cee42e97ae1c
 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS unknown 02/02/2022
 Call Trace:

  dump_stack_lvl+0x5d/0x80
  bad_page.cold+0x7a/0x91
  __rmqueue_pcplist+0x200/0xc50
  get_page_from_freelist+0x2ae/0x1740
  ? srso_return_thunk+0x5/0x5f
  ? __pm_runtime_suspend+0x69/0xc0
  ? srso_return_thunk+0x5/0x5f
  ? __seccomp_filter+0x303/0x520
  ? srso_return_thunk+0x5/0x5f
  __alloc_frozen_pages_noprof+0x184/0x330
  alloc_pages_mpol+0x7d/0x160
  folio_alloc_mpol_noprof+0x14/0x40
  vma_alloc_folio_noprof+0x69/0xb0
  do_anonymous_page+0x32a/0x8b0
  ? srso_return_thunk+0x5/0x5f
  ? ___pte_offset_map+0x1b/0x180
  __handle_mm_fault+0xb5e/0xfe0
  handle_mm_fault+0xe2/0x2c0
  do_user_addr_fault+0x217/0x620
  exc_page_fault+0x81/0x1b0
  asm_exc_page_fault+0x26/0x30
 RIP: 0033:0x7fcfc31c8cf9

Or Mantas:

 list_add corruption. next->prev should be prev (ffff889c8f5bd5f0), but was ffff889940066a10. (next=ffffe3ce8b683548).
 WARNING: CPU: 3 PID: 2184 at lib/list_debug.c:29 __list_add_valid_or_report+0x62/0xb0
  spi_intel_pci soundcore nvme_core spi_intel rfkill rtsx_pci nvme_auth cec i8042 video serio wmi
 CPU: 3 UID: 1000 PID: 2184 Comm: fuse mainloop Tainted: G     U     OE      6.13.1-arch1-1 #1 c1258adae10e6ad423427764ae6ad3679b7d8e8a
 Tainted: [U]=USER, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
 Hardware name: LENOVO 20S6003QPB/20S6003QPB, BIOS N2XET42W (1.32 ) 06/12/2024
 RIP: 0010:__list_add_valid_or_report+0x62/0xb0

 Call Trace:
  <TASK>
  ? __list_add_valid_or_report+0x62/0xb0
  ? __warn.cold+0x93/0xf6
  ? __list_add_valid_or_report+0x62/0xb0
  ? report_bug+0xff/0x140
  ? handle_bug+0x58/0x90
  ? exc_invalid_op+0x17/0x70
  ? asm_exc_invalid_op+0x1a/0x20
  ? __list_add_valid_or_report+0x62/0xb0
  free_unref_page_commit.cold+0x9/0x12
  free_unref_page+0x46e/0x570
  fuse_copy_page+0x37e/0x6c0
  fuse_copy_args+0x186/0x210
  fuse_dev_do_write+0x796/0x12a0
  fuse_dev_splice_write+0x29d/0x380
  do_splice+0x308/0x890
  __do_splice+0x204/0x220
  __x64_sys_splice+0x84/0xf0
  do_syscall_64+0x82/0x190
  entry_SYSCALL_64_after_hwframe+0x76/0x7e
 RIP: 0033:0x77e0dde36e56

Christian bisected the issue to 3eab9d7bc2f4 ("fuse: convert readahead
to use folios"). The bug reports suggest a refcount underflow on struct
page due to a use after free or double free. The bisected commit
switches fuse_readahead() to readahead_folio() which includes a
folio_put() and removes folio_put() from fuse_readpages_end(). As a
result folios on the ap->folios (previously ap->pages) don't have an
elevated refcount. According to Matthew the folio lock should protect
them from being freed prematurely. It's unclear why not, but before this
is fully resolved we can stop the kernels from crashing by having the
refcount relevated again. Thus switch to __readahead_folio() that does
not drop the refcount, and reinstate folio_put() in
fuse_readpages_end().

Fixes: 3eab9d7bc2f4 ("fuse: convert readahead to use folios")
Reported-by: Christian Heusel <christian@heusel.eu>
Closes: https://lore.kernel.org/all/2f681f48-00f5-4e09-8431-2b3dbfaa881e@heusel.eu/
Closes: https://gitlab.archlinux.org/archlinux/packaging/packages/linux/-/issues/110
Reported-by: Mantas Mikulėnas <grawity@gmail.com>
Closes: https://lore.kernel.org/all/34feb867-09e2-46e4-aa31-d9660a806d1a@gmail.com/
Closes: https://bugzilla.opensuse.org/show_bug.cgi?id=1236660
Tested-by: Joanne Koong <joannelkoong@gmail.com>
Cc: Vlastimil Babka <vbabka@suse.cz>
Cc: Matthew Wilcox <willy@infradead.org>
Cc: <stable@vger.kernel.org>
Signed-off-by: Vlastimil Babka <vbabka@suse.cz>
---
Given the impact on users and positive testing feedback, this is the
proper patch in case Miklos decides to mainline and stable it before the
full picture is known.

 fs/fuse/file.c | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/fs/fuse/file.c b/fs/fuse/file.c
index 7d92a5479998..a40d65ffb94d 100644
--- a/fs/fuse/file.c
+++ b/fs/fuse/file.c
@@ -955,8 +955,10 @@ static void fuse_readpages_end(struct fuse_mount *fm, struct fuse_args *args,
 		fuse_invalidate_atime(inode);
 	}

-	for (i = 0; i < ap->num_folios; i++)
+	for (i = 0; i < ap->num_folios; i++) {
 		folio_end_read(ap->folios[i], !err);
+		folio_put(ap->folios[i]);
+	}
 	if (ia->ff)
 		fuse_file_put(ia->ff, false);

@@ -1048,7 +1050,7 @@ static void fuse_readahead(struct readahead_control *rac)
 		ap = &ia->ap;

 		while (ap->num_folios < cur_pages) {
-			folio = readahead_folio(rac);
+			folio = __readahead_folio(rac);
 			ap->folios[ap->num_folios] = folio;
 			ap->descs[ap->num_folios].length = folio_size(folio);
 			ap->num_folios++;
-- 
2.48.1

^ permalink raw reply	[flat|nested] 34+ messages in thread

end of thread, other threads:[~2025-02-12 18:48 UTC | newest]

Thread overview: 34+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
     [not found] <2f681f48-00f5-4e09-8431-2b3dbfaa881e@heusel.eu>
2025-02-07  9:34 ` [REGRESSION][BISECTED] Crash with Bad page state for FUSE/Flatpak related applications since v6.13 Miklos Szeredi
2025-02-07  9:45   ` Matthew Wilcox
2025-02-07 10:25     ` Vlastimil Babka
2025-02-07 10:43       ` Miklos Szeredi
2025-02-07 10:55         ` Vlastimil Babka
2025-02-07 11:16           ` Bernd Schubert
2025-02-07 18:21             ` Bernd Schubert
2025-02-07 18:40             ` Joanne Koong
2025-02-08  0:02               ` Bernd Schubert
2025-02-08 12:25                 ` Mantas Mikulėnas
2025-02-07 20:35             ` Mantas Mikulėnas
2025-02-07 11:00   ` Mantas Mikulėnas
2025-02-07 16:49   ` Vlastimil Babka
2025-02-07 17:29     ` Josef Bacik
2025-02-07 18:39       ` Vlastimil Babka
2025-02-07 22:29         ` Matthew Wilcox
2025-02-08  0:22         ` Joanne Koong
2025-02-08 10:11           ` Matthew Wilcox
2025-02-08 15:46             ` Joanne Koong
2025-02-10  8:27               ` Vlastimil Babka
2025-02-10 18:13                 ` Joanne Koong
2025-02-10 19:12                   ` Josef Bacik
2025-02-10 19:42                     ` Jeff Layton
2025-02-10 20:36                     ` Matthew Wilcox
2025-02-10 22:38                       ` Jeff Layton
2025-02-11 14:01                         ` Jeff Layton
2025-02-11 19:23                           ` Joanne Koong
2025-02-11 19:41                             ` Jeff Layton
2025-02-11 21:10                               ` Joanne Koong
2025-02-11 21:01                             ` Vlastimil Babka
2025-02-11 21:21                               ` Joanne Koong
2025-02-10 18:58                 ` Jeff Layton
2025-02-12 18:48               ` Joanne Koong
2025-02-10  8:52   ` [PATCH] fuse: prevent folio use-after-free in readahead Vlastimil Babka

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox