Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program [ 56.537206][ T5218] loop1: detected capacity change from 0 to 32768 [ 56.590619][ T5218] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor425 (5218) [ 56.619987][ T5216] loop0: detected capacity change from 0 to 32768 [ 56.643320][ T5216] BTRFS: device /dev/loop0 (7:0) using temp-fsid 947900d7-ba0c-4cfd-b85b-0c306356cc3f [ 56.664864][ T5218] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 56.675260][ T5220] loop3: detected capacity change from 0 to 32768 [ 56.682799][ T5221] loop2: detected capacity change from 0 to 32768 [ 56.689396][ T5216] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor425 (5216) [ 56.704752][ T5218] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 56.707379][ T5222] loop4: detected capacity change from 0 to 32768 [ 56.720099][ T5218] BTRFS info (device loop1): using free-space-tree [ 56.731453][ T5216] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 56.742033][ T5220] BTRFS: device /dev/loop3 (7:3) using temp-fsid 00ad05f5-436f-4fb6-8033-ef618136bc7e [ 56.743914][ T5216] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 56.762978][ T5216] BTRFS info (device loop0): using free-space-tree [ 56.769941][ T5220] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor425 (5220) [ 56.792431][ T5221] BTRFS: device /dev/loop2 (7:2) using temp-fsid 931d6d42-6743-47c5-aae4-edb54fda3573 [ 56.802723][ T5221] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor425 (5221) [ 56.816214][ T5220] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 56.828538][ T5220] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 56.841226][ T5222] BTRFS: device /dev/loop4 (7:4) using temp-fsid 6a808e4e-da58-41ba-8008-9428038cd7de [ 56.851471][ T5220] BTRFS info (device loop3): using free-space-tree [ 56.867758][ T5221] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 56.880895][ T5222] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor425 (5222) [ 56.899569][ T5221] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 56.910433][ T5221] BTRFS info (device loop2): using free-space-tree [ 56.966125][ T5222] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 56.990048][ T5222] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 56.999138][ T5222] BTRFS info (device loop4): using free-space-tree [ 57.171643][ T5218] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 57.445212][ T5285] BTRFS warning (device loop1): failed to trim 1 block group(s), last error -512 [ 57.488517][ T5220] BTRFS info (device loop3): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 57.534340][ T5216] BTRFS info (device loop0): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 57.578055][ T5221] BTRFS info (device loop2): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 57.587790][ T5222] BTRFS info (device loop4): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 57.791543][ T5319] BTRFS warning (device loop0): failed to trim 3 block group(s), last error -512 [ 57.826253][ T5316] BTRFS warning (device loop3): failed to trim 3 block group(s), last error -512 [ 58.056958][ T5318] BTRFS warning (device loop2): failed to trim 4 block group(s), last error -512 [ 58.064296][ T5320] BTRFS warning (device loop4): failed to trim 3 block group(s), last error -512 [ 58.095981][ T5319] BTRFS warning (device loop0): failed to trim 1 device(s), last error -512 [ 58.096247][ T5209] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 58.117798][ T5316] BTRFS warning (device loop3): failed to trim 1 device(s), last error -512 [ 58.213026][ T5209] BTRFS warning (device loop1): qgroup 0/5 has unreleased space, type 0 rsv 987136 [ 58.268406][ T5209] BTRFS warning (device loop1): qgroup 0/5 has unreleased space, type 2 rsv 4096 [ 58.307674][ T5209] BTRFS error (device loop1): qgroup reserved space leaked [ 58.315246][ T5214] BTRFS info (device loop4): last unmount of filesystem 6a808e4e-da58-41ba-8008-9428038cd7de [ 58.326327][ T5209] assertion failed: list_empty(&fs_info->delalloc_roots), in fs/btrfs/disk-io.c:4340 [ 58.336749][ T5208] BTRFS info (device loop0): last unmount of filesystem 947900d7-ba0c-4cfd-b85b-0c306356cc3f [ 58.349287][ T5213] BTRFS info (device loop3): last unmount of filesystem 00ad05f5-436f-4fb6-8033-ef618136bc7e [ 58.377974][ T5209] ------------[ cut here ]------------ [ 58.383479][ T5209] kernel BUG at fs/btrfs/disk-io.c:4340! [ 58.393688][ T5214] BTRFS warning (device loop4): qgroup 0/5 has unreleased space, type 0 rsv 659456 [ 58.407624][ T5209] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 58.414616][ T5209] CPU: 0 UID: 0 PID: 5209 Comm: syz-executor425 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 58.425743][ T5209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 58.435812][ T5209] RIP: 0010:close_ctree+0x915/0xd20 [ 58.441246][ T5209] Code: ff ff 90 0f 0b e8 ab ce e7 f5 48 c7 c7 a0 b8 2b 8c 48 c7 c6 e0 e8 2b 8c 48 c7 c2 20 b9 2b 8c b9 f4 10 00 00 e8 4c 9d ff ff 90 <0f> 0b e8 84 ce e7 f5 48 c7 c7 a0 b8 2b 8c 48 c7 c6 80 04 2c 8c 48 [ 58.461044][ T5209] RSP: 0018:ffffc9000328fb60 EFLAGS: 00010246 [ 58.467131][ T5209] RAX: 0000000000000052 RBX: ffff88806f934f28 RCX: 6ec5ddf288fcc900 [ 58.475123][ T5209] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 58.483102][ T5209] RBP: ffffc9000328fd00 R08: ffffffff817400cc R09: 1ffff92000651f0c [ 58.491080][ T5209] R10: dffffc0000000000 R11: fffff52000651f0d R12: ffff88806f934000 [ 58.499042][ T5209] R13: ffff88806f934fa0 R14: 1ffff1100df26a72 R15: 0000000000000000 [ 58.507001][ T5209] FS: 00005555627173c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 58.515917][ T5209] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.522581][ T5209] CR2: 0000555562720738 CR3: 0000000076ce0000 CR4: 00000000003506f0 [ 58.530544][ T5209] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.538518][ T5209] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.546475][ T5209] Call Trace: [ 58.549744][ T5209] [ 58.552749][ T5209] ? __die_body+0x88/0xe0 [ 58.557082][ T5209] ? die+0xcf/0x110 [ 58.560881][ T5209] ? do_trap+0x15a/0x3a0 [ 58.565200][ T5209] ? close_ctree+0x915/0xd20 [ 58.569780][ T5209] ? do_error_trap+0x1dc/0x2c0 [ 58.574538][ T5209] ? close_ctree+0x915/0xd20 [ 58.579122][ T5209] ? __pfx_do_error_trap+0x10/0x10 [ 58.584223][ T5209] ? report_bug+0x3e8/0x500 [ 58.588728][ T5209] ? handle_invalid_op+0x34/0x40 [ 58.593654][ T5209] ? close_ctree+0x915/0xd20 [ 58.598229][ T5209] ? exc_invalid_op+0x38/0x50 [ 58.602895][ T5209] ? asm_exc_invalid_op+0x1a/0x20 [ 58.607918][ T5209] ? __wake_up_klogd+0xcc/0x110 [ 58.612763][ T5209] ? close_ctree+0x915/0xd20 [ 58.617345][ T5209] ? hook_sb_delete+0x846/0xb90 [ 58.622197][ T5209] ? __pfx_close_ctree+0x10/0x10 [ 58.627124][ T5209] ? hook_sb_delete+0x1a3/0xb90 [ 58.631981][ T5209] ? __pfx_fsnotify_sb_delete+0x10/0x10 [ 58.637532][ T5209] ? __pfx_evict_inodes+0x10/0x10 [ 58.642545][ T5209] ? btrfs_attach_transaction_barrier+0x34/0xa0 [ 58.648776][ T5209] ? btrfs_sync_fs+0x1d4/0x700 [ 58.653532][ T5209] ? __pfx_btrfs_put_super+0x10/0x10 [ 58.658833][ T5209] generic_shutdown_super+0x136/0x2d0 [ 58.664197][ T5209] kill_anon_super+0x3b/0x70 [ 58.668798][ T5209] btrfs_kill_super+0x41/0x50 [ 58.673476][ T5209] deactivate_locked_super+0xc4/0x130 [ 58.678840][ T5209] cleanup_mnt+0x41f/0x4b0 [ 58.683247][ T5209] ? lockdep_hardirqs_on+0x99/0x150 [ 58.688439][ T5209] task_work_run+0x24f/0x310 [ 58.693050][ T5209] ? __pfx_task_work_run+0x10/0x10 [ 58.698163][ T5209] ? __x64_sys_umount+0x123/0x170 [ 58.703358][ T5209] ? syscall_exit_to_user_mode+0xa3/0x370 [ 58.709068][ T5209] syscall_exit_to_user_mode+0x168/0x370 [ 58.714693][ T5209] do_syscall_64+0x100/0x230 [ 58.719283][ T5209] ? clear_bhb_loop+0x35/0x90 [ 58.723954][ T5209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.729846][ T5209] RIP: 0033:0x7fa008a14f67 [ 58.734254][ T5209] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 58.753847][ T5209] RSP: 002b:00007ffc9779c028 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 58.762264][ T5209] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa008a14f67 [ 58.770228][ T5209] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9779c0e0 [ 58.778188][ T5209] RBP: 00007ffc9779c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 58.786146][ T5209] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc9779d1a0 [ 58.794108][ T5209] R13: 0000555562718700 R14: 431bde82d7b634db R15: 00007ffc9779d144 [ 58.802072][ T5209] [ 58.805101][ T5209] Modules linked in: [ 58.816032][ T5209] ---[ end trace 0000000000000000 ]--- [ 58.819726][ T5214] BTRFS warning (device loop4): qgroup 0/5 has unreleased space, type 2 rsv 8192 [ 58.845425][ T5209] RIP: 0010:close_ctree+0x915/0xd20 [ 58.858819][ T5209] Code: ff ff 90 0f 0b e8 ab ce e7 f5 48 c7 c7 a0 b8 2b 8c 48 c7 c6 e0 e8 2b 8c 48 c7 c2 20 b9 2b 8c b9 f4 10 00 00 e8 4c 9d ff ff 90 <0f> 0b e8 84 ce e7 f5 48 c7 c7 a0 b8 2b 8c 48 c7 c6 80 04 2c 8c 48 [ 58.876250][ T53] ================================================================== [ 58.886529][ T53] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x299/0x370 [ 58.888918][ T5214] BTRFS error (device loop4): qgroup reserved space leaked [ 58.894333][ T53] Read of size 4 at addr ffff888076d1c604 by task kworker/u8:3/53 [ 58.909872][ T53] [ 58.912210][ T53] CPU: 1 UID: 0 PID: 53 Comm: kworker/u8:3 Tainted: G D 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 58.920004][ T5211] BTRFS info (device loop2): last unmount of filesystem 931d6d42-6743-47c5-aae4-edb54fda3573 [ 58.924351][ T53] Tainted: [D]=DIE [ 58.938220][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 58.948291][ T53] Workqueue: btrfs-fixup btrfs_work_helper [ 58.954110][ T53] Call Trace: [ 58.957392][ T53] [ 58.960312][ T53] dump_stack_lvl+0x241/0x360 [ 58.964989][ T53] ? __pfx_dump_stack_lvl+0x10/0x10 [ 58.970172][ T53] ? __pfx__printk+0x10/0x10 [ 58.974757][ T53] ? _printk+0xd5/0x120 [ 58.978909][ T53] ? __virt_addr_valid+0x183/0x530 [ 58.984008][ T53] ? __virt_addr_valid+0x183/0x530 [ 58.989103][ T53] print_report+0x169/0x550 [ 58.993598][ T53] ? __virt_addr_valid+0x183/0x530 [ 58.998779][ T53] ? __virt_addr_valid+0x183/0x530 [ 59.003875][ T53] ? __virt_addr_valid+0x45f/0x530 [ 59.008969][ T53] ? __phys_addr+0xba/0x170 [ 59.013458][ T53] ? do_raw_spin_lock+0x299/0x370 [ 59.018470][ T53] kasan_report+0x143/0x180 [ 59.022960][ T53] ? rcu_is_watching+0x15/0xb0 [ 59.027729][ T53] ? do_raw_spin_lock+0x299/0x370 [ 59.032762][ T53] do_raw_spin_lock+0x299/0x370 [ 59.037618][ T53] ? poison_slab_object+0xe0/0x150 [ 59.042726][ T53] ? __kasan_slab_free+0x37/0x60 [ 59.047667][ T53] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 59.053098][ T53] ? rcu_is_watching+0x15/0xb0 [ 59.057943][ T53] _raw_spin_lock_irqsave+0xe1/0x120 [ 59.063243][ T53] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 59.069175][ T53] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 59.075509][ T53] try_to_wake_up+0xb0/0x1470 [ 59.080189][ T53] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 59.086075][ T53] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 59.092393][ T53] ? __pfx_try_to_wake_up+0x10/0x10 [ 59.097585][ T53] ? rcu_is_watching+0x15/0xb0 [ 59.102356][ T53] ? btrfs_add_delayed_iput+0x26b/0x310 [ 59.107899][ T53] btrfs_writepage_fixup_worker+0xe08/0x1140 [ 59.113965][ T53] ? __pfx_btrfs_writepage_fixup_worker+0x10/0x10 [ 59.120371][ T53] ? __pfx_lock_acquire+0x10/0x10 [ 59.125385][ T53] ? debug_object_deactivate+0x2d5/0x390 [ 59.131005][ T53] ? __pfx_lock_release+0x10/0x10 [ 59.136019][ T53] btrfs_work_helper+0x390/0xc50 [ 59.140956][ T53] ? rcu_is_watching+0x15/0xb0 [ 59.145712][ T53] ? process_scheduled_works+0x945/0x1830 [ 59.151423][ T53] process_scheduled_works+0xa2c/0x1830 [ 59.156969][ T53] ? __pfx_process_scheduled_works+0x10/0x10 [ 59.162940][ T53] ? assign_work+0x364/0x3d0 [ 59.167522][ T53] worker_thread+0x86d/0xd10 [ 59.172225][ T53] ? __kthread_parkme+0x169/0x1d0 [ 59.177239][ T53] ? __pfx_worker_thread+0x10/0x10 [ 59.182340][ T53] kthread+0x2f0/0x390 [ 59.186401][ T53] ? __pfx_worker_thread+0x10/0x10 [ 59.191509][ T53] ? __pfx_kthread+0x10/0x10 [ 59.196096][ T53] ret_from_fork+0x4b/0x80 [ 59.200503][ T53] ? __pfx_kthread+0x10/0x10 [ 59.205089][ T53] ret_from_fork_asm+0x1a/0x30 [ 59.209856][ T53] [ 59.212863][ T53] [ 59.215181][ T53] Allocated by task 2: [ 59.219228][ T53] kasan_save_track+0x3f/0x80 [ 59.223892][ T53] __kasan_slab_alloc+0x66/0x80 [ 59.228905][ T53] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 59.234787][ T53] dup_task_struct+0x57/0x8c0 [ 59.239474][ T53] copy_process+0x5d1/0x3dc0 [ 59.244049][ T53] kernel_clone+0x223/0x880 [ 59.248543][ T53] kernel_thread+0x1bc/0x240 [ 59.253148][ T53] kthreadd+0x60d/0x810 [ 59.257297][ T53] ret_from_fork+0x4b/0x80 [ 59.261700][ T53] ret_from_fork_asm+0x1a/0x30 [ 59.266449][ T53] [ 59.268766][ T53] Freed by task 4009: [ 59.272723][ T53] kasan_save_track+0x3f/0x80 [ 59.277382][ T53] kasan_save_free_info+0x40/0x50 [ 59.282439][ T53] poison_slab_object+0xe0/0x150 [ 59.287361][ T53] __kasan_slab_free+0x37/0x60 [ 59.292111][ T53] kmem_cache_free+0x145/0x350 [ 59.296886][ T53] delayed_put_task_struct+0x125/0x300 [ 59.302371][ T53] rcu_core+0xafd/0x1830 [ 59.306601][ T53] handle_softirqs+0x2c4/0x970 [ 59.311366][ T53] __irq_exit_rcu+0xf4/0x1c0 [ 59.315947][ T53] irq_exit_rcu+0x9/0x30 [ 59.320173][ T53] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 59.325796][ T53] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 59.331778][ T53] [ 59.334085][ T53] Last potentially related work creation: [ 59.339786][ T53] kasan_save_stack+0x3f/0x60 [ 59.344551][ T53] __kasan_record_aux_stack+0xac/0xc0 [ 59.349910][ T53] call_rcu+0x167/0xa70 [ 59.354055][ T53] __schedule+0x17b6/0x4a10 [ 59.358543][ T53] schedule+0x14b/0x320 [ 59.362682][ T53] schedule_timeout+0xb0/0x310 [ 59.367432][ T53] wait_for_completion+0x355/0x620 [ 59.372532][ T53] btrfs_wait_ordered_extents+0xe2e/0xef0 [ 59.378240][ T53] btrfs_wait_ordered_roots+0x641/0x940 [ 59.383769][ T53] flush_space+0x83c/0xd00 [ 59.388169][ T53] btrfs_async_reclaim_data_space+0x2ab/0x510 [ 59.394217][ T53] process_scheduled_works+0xa2c/0x1830 [ 59.399764][ T53] worker_thread+0x86d/0xd10 [ 59.404362][ T53] kthread+0x2f0/0x390 [ 59.408430][ T53] ret_from_fork+0x4b/0x80 [ 59.412845][ T53] ret_from_fork_asm+0x1a/0x30 [ 59.417597][ T53] [ 59.419921][ T53] The buggy address belongs to the object at ffff888076d1bc00 [ 59.419921][ T53] which belongs to the cache task_struct of size 7424 [ 59.434040][ T53] The buggy address is located 2564 bytes inside of [ 59.434040][ T53] freed 7424-byte region [ffff888076d1bc00, ffff888076d1d900) [ 59.447988][ T53] [ 59.450294][ T53] The buggy address belongs to the physical page: [ 59.456693][ T53] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76d18 [ 59.465446][ T53] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 59.473924][ T53] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 59.481455][ T53] page_type: 0xfdffffff(slab) [ 59.486115][ T53] raw: 00fff00000000040 ffff8880162fd500 dead000000000122 0000000000000000 [ 59.494694][ T53] raw: 0000000000000000 0000000000040004 00000001fdffffff 0000000000000000 [ 59.503262][ T53] head: 00fff00000000040 ffff8880162fd500 dead000000000122 0000000000000000 [ 59.511917][ T53] head: 0000000000000000 0000000000040004 00000001fdffffff 0000000000000000 [ 59.520581][ T53] head: 00fff00000000003 ffffea0001db4601 ffffffffffffffff 0000000000000000 [ 59.529233][ T53] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 59.537885][ T53] page dumped because: kasan: bad access detected [ 59.544285][ T53] page_owner tracks the page as allocated [ 59.549978][ T53] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 56963738709, free_ts 15889210314 [ 59.570537][ T53] post_alloc_hook+0x1f3/0x230 [ 59.575294][ T53] get_page_from_freelist+0x2e4c/0x2f10 [ 59.580825][ T53] __alloc_pages_noprof+0x256/0x6c0 [ 59.586013][ T53] alloc_slab_page+0x5f/0x120 [ 59.590691][ T53] allocate_slab+0x5a/0x2f0 [ 59.595174][ T53] ___slab_alloc+0xcd1/0x14b0 [ 59.599850][ T53] __slab_alloc+0x58/0xa0 [ 59.604171][ T53] kmem_cache_alloc_node_noprof+0x1fe/0x320 [ 59.610048][ T53] dup_task_struct+0x57/0x8c0 [ 59.614721][ T53] copy_process+0x5d1/0x3dc0 [ 59.619302][ T53] kernel_clone+0x223/0x880 [ 59.623812][ T53] kernel_thread+0x1bc/0x240 [ 59.628406][ T53] kthreadd+0x60d/0x810 [ 59.632561][ T53] ret_from_fork+0x4b/0x80 [ 59.636966][ T53] ret_from_fork_asm+0x1a/0x30 [ 59.641717][ T53] page last free pid 1 tgid 1 stack trace: [ 59.647519][ T53] free_unref_page+0xd19/0xea0 [ 59.652289][ T53] free_contig_range+0x9e/0x160 [ 59.657132][ T53] destroy_args+0x8a/0x890 [ 59.661539][ T53] debug_vm_pgtable+0x4be/0x550 [ 59.666398][ T53] do_one_initcall+0x248/0x880 [ 59.671155][ T53] do_initcall_level+0x157/0x210 [ 59.676076][ T53] do_initcalls+0x3f/0x80 [ 59.680396][ T53] kernel_init_freeable+0x435/0x5d0 [ 59.685585][ T53] kernel_init+0x1d/0x2b0 [ 59.689901][ T53] ret_from_fork+0x4b/0x80 [ 59.694309][ T53] ret_from_fork_asm+0x1a/0x30 [ 59.699060][ T53] [ 59.701370][ T53] Memory state around the buggy address: [ 59.706991][ T53] ffff888076d1c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.715038][ T53] ffff888076d1c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.723097][ T53] >ffff888076d1c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.731150][ T53] ^ [ 59.735283][ T53] ffff888076d1c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.743346][ T53] ffff888076d1c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.751387][ T53] ================================================================== [ 59.759438][ T53] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 59.766830][ T53] Kernel Offset: disabled [ 59.771138][ T53] Rebooting in 86400 seconds..