Bug in case of allocation fails #2539
Description
Stacktrace or debug log
[ 2532.595462] [tdb] Start Tempesta DB
[ 2532.680255] [tempesta fw] Initializing Tempesta FW kernel module...
[ 2533.556856] [tempesta fw] Warning: Vhost default doesn't have certificate with matching SAN/CN.
[ 2533.556856] Maybe that's fine, but it's worth checking the
[ 2533.556856] config - if there is no relations between the
[ 2533.556856] names, then host name confusion attack is possible.
[ 2533.601662] [tempesta fw] Configuration processing is completed.
[ 2533.631084] [tdb] Opened table /opt/tempesta/db/filter0.tdb: size=16777216 rec_size=20 base=0000000093f7da8c
[ 2533.838652] [tdb] Opened table /opt/tempesta/db/cache0.tdb: size=268435456 rec_size=0 base=000000002148e842
[ 2533.859736] [tdb] Opened table /opt/tempesta/db/sessions0.tdb: size=16777216 rec_size=328 base=00000000b27d2276
[ 2533.876297] [tdb] Opened table /opt/tempesta/db/client0.tdb: size=16777216 rec_size=920 base=00000000fc8a008d
[ 2533.877314] [tempesta fw] Open listen socket on: 0.0.0.0:443
[ 2533.877875] [tempesta fw] Open listen socket on: 0.0.0.0
[ 2533.893628] [tempesta fw] Tempesta FW is ready
[ 2534.175221] [tempesta fw] Live reconfiguration of Tempesta.
[ 2534.176864] FAULT_INJECTION: forcing a failure.
[ 2534.176865] name fail_function, interval 0, probability 100, space 1, times -1
[ 2534.176866] CPU: 2 PID: 30103 Comm: tempesta.sh Tainted: G OE 5.10.35+ #719
[ 2534.176866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2534.176867] Call Trace:
[ 2534.176867] dump_stack+0x96/0xc4
[ 2534.176868] should_fail.cold+0x5/0xa
[ 2534.176868] fei_kprobe_handler+0x1e/0x60
[ 2534.176869] aggr_pre_handler+0x5c/0xa0
[ 2534.176869] kprobe_int3_handler+0x118/0x190
[ 2534.176870] do_int3+0x39/0x80
[ 2534.176870] exc_int3+0x2f/0x70
[ 2534.176871] asm_exc_int3+0x31/0x40
[ 2534.176871] RIP: 0010:tfw_sg_new+0x1/0x100 [tempesta_fw]
[ 2534.176872] Code: 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c7 80 09 b0 c1 31 db e8 42 63 da ee eb b2 e8 4b 15 e1 ef 66 66 2e 0f 1f 84 00 00 00 00 00 cc <48> 89 e5 41 57 41 56 41 89 f6 41 55 49 89 fd 41 54 53 89 d3 e8 d6
[ 2534.176873] RSP: 0018:ffff88815243f9b0 EFLAGS: 00000202
[ 2534.176874] RAX: ffff888101b8c688 RBX: ffff888101b8c688 RCX: 0000000000000000
[ 2534.176875] RDX: 0000000000000cc0 RSI: 0000000000000007 RDI: ffffffffc1ad0800
[ 2534.176875] RBP: ffff88815243f9d0 R08: 0000000000000001 R09: ffff888101b8c688
[ 2534.176876] R10: ffffed10203718d8 R11: 0000000080180015 R12: ffffffffc1ad0800
[ 2534.176877] R13: 0000000000000007 R14: ffff88815243fd88 R15: ffff88815243fa90
[ 2534.176877] ? tfw_sg_new+0x1/0x100 [tempesta_fw]
[ 2534.176878] ? __tfw_cfgop_new_sg_cfg+0x47/0xa0 [tempesta_fw]
[ 2534.176878] tfw_sock_srv_cfgstart+0x4f/0xd0 [tempesta_fw]
[ 2534.176879] tfw_ctlfn_state_io+0x391/0x530 [tempesta_fw]
[ 2534.176879] ? tfw_cleanup+0x30/0x30 [tempesta_fw]
[ 2534.176880] ? tfw_cleanup+0x30/0x30 [tempesta_fw]
[ 2534.176880] ? __cgroup_bpf_run_filter_sysctl+0x26c/0x440
[ 2534.176881] ? create_object.isra.0+0x339/0x4f0
[ 2534.176881] ? iov_iter_advance+0x133/0x640
[ 2534.176882] ? _copy_from_iter_full+0x11e/0x3f0
[ 2534.176882] ? __kasan_check_read+0x11/0x20
[ 2534.176883] proc_sys_call_handler+0x212/0x3a0
[ 2534.176883] ? proc_sys_lookup+0x320/0x320
[ 2534.176884] ? __do_fault+0x240/0x240
[ 2534.176884] proc_sys_write+0xe/0x10
[ 2534.176885] new_sync_write+0x291/0x3c0
[ 2534.176885] ? new_sync_read+0x3b0/0x3b0
[ 2534.176886] ? handle_mm_fault+0x74e/0x2c50
[ 2534.176886] ? rw_verify_area+0x77/0x140
[ 2534.176886] vfs_write+0x2ad/0x350
[ 2534.176887] ksys_write+0xd2/0x170
[ 2534.176887] ? __ia32_sys_read+0x50/0x50
[ 2534.176888] ? __kasan_check_read+0x11/0x20
[ 2534.176888] ? fpregs_assert_state_consistent+0x55/0x60
[ 2534.176889] __x64_sys_write+0x3d/0x50
[ 2534.176889] do_syscall_64+0x37/0x80
[ 2534.176890] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2534.176890] RIP: 0033:0x7f3b1b9d35a4
[ 2534.176891] Code: c7 00 16 00 00 00 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 80 3d a5 ea 0e 00 00 74 13 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 54 c3 0f 1f 00 55 48 89 e5 48 83 ec 20 48 89
[ 2534.176892] RSP: 002b:00007ffc15a28808 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[ 2534.176893] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f3b1b9d35a4
[ 2534.176894] RDX: 0000000000000006 RSI: 000056534391d400 RDI: 0000000000000001
[ 2534.176894] RBP: 00007ffc15a28830 R08: 0000000000000073 R09: 0000000000000000
[ 2534.176895] R10: 00000000ffffffff R11: 0000000000000202 R12: 0000000000000006
[ 2534.176896] R13: 000056534391d400 R14: 00007f3b1babb5c0 R15: 00007f3b1bab8ee0
[ 2534.202605] [tempesta fw] ERROR: Unable to prepare for the configuration of module 'sock_srv': -12
[ 2534.203368] [tempesta fw] Warning: Configuration parsing has failed. Clean up...
[ 2534.420628] ==================================================================
[ 2534.421334] BUG: KASAN: use-after-free in tfw_cfgop_cleanup_srv_cfg+0x1a/0x170 [tempesta_fw]
[ 2534.422014] Read of size 8 at addr ffff888101b8da08 by task tempesta.sh/30103
[ 2534.422685]
[ 2534.422809] CPU: 2 PID: 30103 Comm: tempesta.sh Tainted: G OE 5.10.35+ #719
[ 2534.423427] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2534.424146] Call Trace:
[ 2534.424376] dump_stack+0x96/0xc4
[ 2534.424673] ? tfw_cfgop_cleanup_srv_cfg+0x1a/0x170 [tempesta_fw]
[ 2534.425137] print_address_description.constprop.0+0x21/0x2c0
[ 2534.425573] ? irq_work_claim+0x23/0x50
[ 2534.425887] ? tfw_cfgop_cleanup_srv_cfg+0x1a/0x170 [tempesta_fw]
[ 2534.426372] ? tfw_cfgop_cleanup_srv_cfg+0x1a/0x170 [tempesta_fw]
[ 2534.426834] kasan_report.cold+0x20/0x37
[ 2534.427138] ? rwsem_down_read_slowpath+0x7c0/0x7c0
[ 2534.427529] ? tfw_cfgop_cleanup_srv_cfg+0x1a/0x170 [tempesta_fw]
[ 2534.427992] __asan_load8+0x69/0x90
[ 2534.428286] tfw_cfgop_cleanup_srv_cfg+0x1a/0x170 [tempesta_fw]
[ 2534.428899] tfw_cfgop_cleanup_srv_cfgs+0xc7/0x100 [tempesta_fw]
[ 2534.429377] tfw_sock_srv_cfgclean+0x13/0x20 [tempesta_fw]
[ 2534.429811] tfw_cfg_cleanup+0x46/0x70 [tempesta_fw]
[ 2534.430209] tfw_cleanup+0x10/0x30 [tempesta_fw]
[ 2534.430581] tfw_ctlfn_state_io.cold+0x64/0x10f [tempesta_fw]
[ 2534.431066] ? tfw_cleanup+0x30/0x30 [tempesta_fw]
[ 2534.431452] ? tfw_cleanup+0x30/0x30 [tempesta_fw]
[ 2534.431820] ? __cgroup_bpf_run_filter_sysctl+0x26c/0x440
[ 2534.432233] ? create_object.isra.0+0x339/0x4f0
[ 2534.432612] ? iov_iter_advance+0x133/0x640
[ 2534.432933] ? _copy_from_iter_full+0x11e/0x3f0
[ 2534.433278] ? __kasan_check_read+0x11/0x20
[ 2534.433599] proc_sys_call_handler+0x212/0x3a0
[ 2534.433938] ? proc_sys_lookup+0x320/0x320
[ 2534.434252] ? __do_fault+0x240/0x240
[ 2534.434536] proc_sys_write+0xe/0x10
[ 2534.434915] new_sync_write+0x291/0x3c0
[ 2534.435213] ? new_sync_read+0x3b0/0x3b0
[ 2534.435514] ? handle_mm_fault+0x74e/0x2c50
[ 2534.435835] ? rw_verify_area+0x77/0x140
[ 2534.436147] vfs_write+0x2ad/0x350
[ 2534.436617] ksys_write+0xd2/0x170
[ 2534.436905] ? __ia32_sys_read+0x50/0x50
[ 2534.437235] ? __kasan_check_read+0x11/0x20
[ 2534.437584] ? fpregs_assert_state_consistent+0x55/0x60
[ 2534.438021] __x64_sys_write+0x3d/0x50
[ 2534.438359] do_syscall_64+0x37/0x80
[ 2534.438659] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2534.439082] RIP: 0033:0x7f3b1b9d35a4
[ 2534.439383] Code: c7 00 16 00 00 00 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 80 3d a5 ea 0e 00 00 74 13 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 54 c3 0f 1f 00 55 48 89 e5 48 83 ec 20 48 89
[ 2534.441110] RSP: 002b:00007ffc15a28808 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[ 2534.441727] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f3b1b9d35a4
[ 2534.442281] RDX: 0000000000000006 RSI: 000056534391d400 RDI: 0000000000000001
[ 2534.442834] RBP: 00007ffc15a28830 R08: 0000000000000073 R09: 0000000000000000
[ 2534.443386] R10: 00000000ffffffff R11: 0000000000000202 R12: 0000000000000006
[ 2534.443938] R13: 000056534391d400 R14: 00007f3b1babb5c0 R15: 00007f3b1bab8ee0
[ 2534.444552]
[ 2534.444682] Allocated by task 30103:
[ 2534.444969] kasan_save_stack+0x21/0x50
[ 2534.445274] __kasan_kmalloc.isra.0+0xea/0x100
[ 2534.445625] kasan_slab_alloc+0xe/0x10
[ 2534.445922] kmem_cache_alloc+0x153/0x2d0
[ 2534.446277] __tfw_cfgop_new_sg_cfg+0x20/0xa0 [tempesta_fw]
[ 2534.446842] tfw_sock_srv_cfgstart+0x2e/0xd0 [tempesta_fw]
[ 2534.447294] tfw_ctlfn_state_io+0x391/0x530 [tempesta_fw]
[ 2534.447718] proc_sys_call_handler+0x212/0x3a0
[ 2534.448067] proc_sys_write+0xe/0x10
[ 2534.448395] new_sync_write+0x291/0x3c0
[ 2534.448714] vfs_write+0x2ad/0x350
[ 2534.448984] ksys_write+0xd2/0x170
[ 2534.449253] __x64_sys_write+0x3d/0x50
[ 2534.449550] do_syscall_64+0x37/0x80
[ 2534.449833] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2534.450229]
[ 2534.450354] Freed by task 30103:
[ 2534.450611] kasan_save_stack+0x21/0x50
[ 2534.450914] kasan_set_track+0x20/0x30
[ 2534.451229] kasan_set_free_info+0x1f/0x40
[ 2534.451559] __kasan_slab_free+0x117/0x160
[ 2534.451912] kasan_slab_free+0xe/0x10
[ 2534.452214] slab_free_freelist_hook+0x4e/0x170
[ 2534.452710] kmem_cache_free+0xfc/0x3e0
[ 2534.453043] tfw_cfgop_cleanup_srv_cfg+0x138/0x170 [tempesta_fw]
[ 2534.453544] tfw_sock_srv_cfgstart+0xc1/0xd0 [tempesta_fw]
[ 2534.454003] tfw_ctlfn_state_io+0x391/0x530 [tempesta_fw]
[ 2534.454436] proc_sys_call_handler+0x212/0x3a0
[ 2534.454806] proc_sys_write+0xe/0x10
[ 2534.455097] new_sync_write+0x291/0x3c0
[ 2534.455409] vfs_write+0x2ad/0x350
[ 2534.455688] ksys_write+0xd2/0x170
[ 2534.455964] __x64_sys_write+0x3d/0x50
[ 2534.456297] do_syscall_64+0x37/0x80
[ 2534.456608] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2534.457013]
[ 2534.457142] The buggy address belongs to the object at ffff888101b8da08
[ 2534.457142] which belongs to the cache tfw_sg_cfg_cache of size 64
[ 2534.458159] The buggy address is located 0 bytes inside of
[ 2534.458159] 64-byte region [ffff888101b8da08, ffff888101b8da48)
[ 2534.459165] The buggy address belongs to the page:
[ 2534.459552] page:000000005b7e3e61 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888101b8c008 pfn:0x101b8c
[ 2534.460535] head:000000005b7e3e61 order:2 compound_mapcount:0 compound_pincount:0
[ 2534.461455] flags: 0x17ffffc0010200(slab|head)
[ 2534.461815] raw: 0017ffffc0010200 ffff888113144a60 ffff888113144a60 ffff888015c08040
[ 2534.462444] raw: ffff888101b8c008 0000000000270004 00000001ffffffff 0000000000000000
[ 2534.463080] page dumped because: kasan: bad access detected
[ 2534.463525]
[ 2534.463652] Memory state around the buggy address:
[ 2534.464037] ffff888101b8d900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2534.464760] ffff888101b8d980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2534.465338] >ffff888101b8da00: fc fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc
[ 2534.465911] ^
[ 2534.466212] ffff888101b8da80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2534.466791] ffff888101b8db00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2534.467391] ==================================================================
[ 2534.467985] Disabling lock debugging due to kernel taint
[ 2534.468959] general protection fault, probably for non-canonical address 0xf580032a00007597: 0000 [#1] SMP DEBUG_PAGEALLOC KASAN NOPTI
[ 2534.470339] CPU: 2 PID: 30103 Comm: tempesta.sh Tainted: G B OE 5.10.35+ #719
[ 2534.471071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2534.471909] RIP: 0010:tfw_sg_release+0x1b/0xd0 [tempesta_fw]
[ 2534.472414] Code: 23 ff ff ff 31 c0 eb a6 0f 1f 80 00 00 00 00 55 48 89 e5 41 56 41 55 49 89 fd 48 83 c7 30 41 54 53 48 83 ec 08 e8 b5 9b fe ee <49> 8b 5d 30 48 85 db 74 1a 48 8d 7b 20 e8 a3 9b fe ee 48 8b 43 20
[ 2534.473916] RSP: 0018:ffff88815243f928 EFLAGS: 00010282
[ 2534.474335] RAX: 0000000000000000 RBX: ffff888101b8da08 RCX: ffffffffc1a8403b
[ 2534.474903] RDX: 0000000000000000 RSI: 0000000000000008 RDI: f580032a000075c7
[ 2534.475476] RBP: ffff88815243f950 R08: 0000000000000000 R09: ffffffffb97cf1f3
[ 2534.476043] R10: fffffbfff72f9e3e R11: 6e696c6261736944 R12: f580032a00007597
[ 2534.476730] R13: f580032a00007597 R14: ffff888101b8da10 R15: ffff88815243fa90
[ 2534.477295] FS: 00007f3b1b8b4740(0000) GS:ffff8882c1e80000(0000) knlGS:0000000000000000
[ 2534.477936] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2534.478395] CR2: 000056534391d401 CR3: 000000011b69c000 CR4: 0000000000750ee0
[ 2534.478965] PKRU: 55555554
[ 2534.479188] Call Trace:
[ 2534.479412] tfw_cfgop_cleanup_srv_cfg+0x42/0x170 [tempesta_fw]
[ 2534.479908] tfw_cfgop_cleanup_srv_cfgs+0xc7/0x100 [tempesta_fw]
[ 2534.480448] tfw_sock_srv_cfgclean+0x13/0x20 [tempesta_fw]
[ 2534.480922] tfw_cfg_cleanup+0x46/0x70 [tempesta_fw]
[ 2534.481342] tfw_cleanup+0x10/0x30 [tempesta_fw]
[ 2534.481754] tfw_ctlfn_state_io.cold+0x64/0x10f [tempesta_fw]
[ 2534.482238] ? tfw_cleanup+0x30/0x30 [tempesta_fw]
[ 2534.482683] ? tfw_cleanup+0x30/0x30 [tempesta_fw]
[ 2534.483073] ? __cgroup_bpf_run_filter_sysctl+0x26c/0x440
[ 2534.483510] ? create_object.isra.0+0x339/0x4f0
[ 2534.483878] ? iov_iter_advance+0x133/0x640
[ 2534.484245] ? _copy_from_iter_full+0x11e/0x3f0
[ 2534.484650] ? __kasan_check_read+0x11/0x20
[ 2534.484993] proc_sys_call_handler+0x212/0x3a0
[ 2534.485354] ? proc_sys_lookup+0x320/0x320
[ 2534.485687] ? __do_fault+0x240/0x240
[ 2534.485986] proc_sys_write+0xe/0x10
[ 2534.486301] new_sync_write+0x291/0x3c0
[ 2534.486641] ? new_sync_read+0x3b0/0x3b0
[ 2534.486961] ? handle_mm_fault+0x74e/0x2c50
[ 2534.487299] ? rw_verify_area+0x77/0x140
[ 2534.487615] vfs_write+0x2ad/0x350
[ 2534.487890] ksys_write+0xd2/0x170
[ 2534.488165] ? __ia32_sys_read+0x50/0x50
[ 2534.488551] ? __kasan_check_read+0x11/0x20
[ 2534.488920] ? fpregs_assert_state_consistent+0x55/0x60
[ 2534.489341] __x64_sys_write+0x3d/0x50
[ 2534.489685] do_syscall_64+0x37/0x80
[ 2534.489977] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2534.490384] RIP: 0033:0x7f3b1b9d35a4
[ 2534.490679] Code: c7 00 16 00 00 00 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 80 3d a5 ea 0e 00 00 74 13 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 54 c3 0f 1f 00 55 48 89 e5 48 83 ec 20 48 89
[ 2534.492269] RSP: 002b:00007ffc15a28808 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[ 2534.492946] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f3b1b9d35a4
[ 2534.493536] RDX: 0000000000000006 RSI: 000056534391d400 RDI: 0000000000000001
[ 2534.494128] RBP: 00007ffc15a28830 R08: 0000000000000073 R09: 0000000000000000
[ 2534.494742] R10: 00000000ffffffff R11: 0000000000000202 R12: 0000000000000006
[ 2534.495324] R13: 000056534391d400 R14: 00007f3b1babb5c0 R15: 00007f3b1bab8ee0
[ 2534.495917] Modules linked in: tempesta_fw(OE) tempesta_db(OE) tempesta_tls(OE) tempesta_lib(OE) tls vhost_vsock vmw_vsock_virtio_transport_common vhost vhost_iotlb vsock xt_conntrack xt_MASQUERADE xt_set ip_set xt_addrtype nft_compat xfrm_user xfrm_algo nft_masq nft_counter nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bridge stp llc nf_tables nfnetlink overlay binfmt_misc nls_iso8859_1 virtio_gpu virtio_dma_buf drm_kms_helper kvm_intel kvm joydev cec input_leds fb_sys_fops syscopyarea sysfillrect sysimgblt serio_raw mac_hid i2c_piix4 qemu_fw_cfg sch_fq_codel msr parport_pc ppdev lp parport drm efi_pstore ip_tables x_tables ipv6 autofs4 btrfs xor raid6_pq psmouse e1000 pata_acpi floppy [last unloaded: tempesta_lib]
[ 2534.501407] ---[ end trace a5c72b0c4f9ed5b2 ]---
[ 2534.501915] RIP: 0010:tfw_sg_release+0x1b/0xd0 [tempesta_fw]
[ 2534.502518] Code: 23 ff ff ff 31 c0 eb a6 0f 1f 80 00 00 00 00 55 48 89 e5 41 56 41 55 49 89 fd 48 83 c7 30 41 54 53 48 83 ec 08 e8 b5 9b fe ee <49> 8b 5d 30 48 85 db 74 1a 48 8d 7b 20 e8 a3 9b fe ee 48 8b 43 20
[ 2534.504037] RSP: 0018:ffff88815243f928 EFLAGS: 00010282
[ 2534.504539] RAX: 0000000000000000 RBX: ffff888101b8da08 RCX: ffffffffc1a8403b
[ 2534.505169] RDX: 0000000000000000 RSI: 0000000000000008 RDI: f580032a000075c7
[ 2534.505751] RBP: ffff88815243f950 R08: 0000000000000000 R09: ffffffffb97cf1f3
[ 2534.506342] R10: fffffbfff72f9e3e R11: 6e696c6261736944 R12: f580032a00007597
[ 2534.507039] R13: f580032a00007597 R14: ffff888101b8da10 R15: ffff88815243fa90
[ 2534.507642] FS: 00007f3b1b8b4740(0000) GS:ffff8882c1e80000(0000) knlGS:0000000000000000
[ 2534.508356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2534.508943] CR2: 000056534391d401 CR3: 000000011b69c000 CR4: 0000000000750ee0
[ 2534.509526] PKRU: 55555554
[ 2534.509754] Kernel panic - not syncing: Fatal exception