Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts. 2026/09/20 15:04:10 ignoring optional flag "type"="gce" 2026/09/20 15:04:10 parsed 1 programs [ 28.176663][ T24] kauditd_printk_skb: 16 callbacks suppressed [ 28.176673][ T24] audit: type=1400 audit(1789916650.160:90): avc: denied { unlink } for pid=446 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.277893][ T446] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.347035][ T468] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.354070][ T468] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.361593][ T468] device bridge_slave_0 entered promiscuous mode [ 28.368404][ T468] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.375542][ T468] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.382928][ T468] device bridge_slave_1 entered promiscuous mode [ 28.411763][ T468] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.418828][ T468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.426082][ T468] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.433092][ T468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.448933][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.456142][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.463349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.470841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.479798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.488016][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.495039][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.503932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.512162][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.519242][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.530152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.539148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.552400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.562827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.571126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.578642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.587478][ T468] device veth0_vlan entered promiscuous mode [ 28.596573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.605471][ T468] device veth1_macvtap entered promiscuous mode [ 28.614163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.623603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/09/20 15:04:10 executed programs: 0 [ 28.973011][ T508] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.980427][ T508] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.987943][ T508] device bridge_slave_0 entered promiscuous mode [ 28.994896][ T508] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.001919][ T508] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.009237][ T508] device bridge_slave_1 entered promiscuous mode [ 29.040568][ T508] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.047639][ T508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.054894][ T508] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.061908][ T508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.079922][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.087440][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.094703][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.103581][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.111792][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.118819][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.127308][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.135703][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.142727][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.155736][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.164758][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.177023][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.188513][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.196704][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.204055][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.212205][ T508] device veth0_vlan entered promiscuous mode [ 29.223246][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.232030][ T508] device veth1_macvtap entered promiscuous mode [ 29.240952][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.252703][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.295287][ T513] ====================================================== [ 29.295287][ T513] WARNING: the mand mount option is being deprecated and [ 29.295287][ T513] will be removed in v5.15! [ 29.295287][ T513] ====================================================== [ 29.304410][ T24] audit: type=1400 audit(1789916651.280:91): avc: denied { mounton } for pid=512 comm="syz-executor" path="/root/syzkaller-testdir2517936839/syzkaller.oVrkRZ/0/file1" dev="sda1" ino=2035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.336455][ T513] EXT4-fs (loop0): 1 orphan inode deleted [ 29.353429][ T513] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 29.372689][ T513] ext4 filesystem being mounted at /root/syzkaller-testdir2517936839/syzkaller.oVrkRZ/0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.372869][ T24] audit: type=1400 audit(1789916651.350:92): avc: denied { mount } for pid=512 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.399658][ T517] EXT4-fs error (device loop0): ext4_ext_remove_space:2856: inode #16: comm syz-executor: path[1].p_hdr == NULL [ 29.409138][ T24] audit: type=1400 audit(1789916651.370:93): avc: denied { write } for pid=512 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.422083][ T517] EXT4-fs (loop0): Remounting filesystem read-only [ 29.443114][ T24] audit: type=1400 audit(1789916651.370:94): avc: denied { add_name } for pid=512 comm="syz-executor" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.449463][ T517] EXT4-fs error (device loop0): __ext4_get_inode_loc:4451: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 29.469665][ T24] audit: type=1400 audit(1789916651.370:95): avc: denied { create } for pid=512 comm="syz-executor" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.482471][ T517] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 29.502605][ T24] audit: type=1400 audit(1789916651.370:96): avc: denied { write open } for pid=512 comm="syz-executor" path="/root/syzkaller-testdir2517936839/syzkaller.oVrkRZ/0/file1/bus" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.512019][ T517] EXT4-fs error (device loop0): ext4_punch_hole:4238: inode #16: comm syz-executor: mark_inode_dirty error [ 29.539168][ T24] audit: type=1400 audit(1789916651.370:97): avc: denied { read } for pid=512 comm="syz-executor" name="bus" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.566076][ T508] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 29.572621][ T24] audit: type=1400 audit(1789916651.370:98): avc: denied { mounton } for pid=512 comm="syz-executor" path="/root/syzkaller-testdir2517936839/syzkaller.oVrkRZ/0/file1/bus" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.612744][ T24] audit: type=1400 audit(1789916651.530:99): avc: denied { unmount } for pid=508 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.715774][ T112] device bridge_slave_1 left promiscuous mode [ 29.721890][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.729378][ T112] device bridge_slave_0 left promiscuous mode [ 29.735525][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.743017][ T112] device veth1_macvtap left promiscuous mode [ 29.749167][ T112] device veth0_vlan left promiscuous mode [ 29.851878][ T519] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.858970][ T519] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.866937][ T519] device bridge_slave_0 entered promiscuous mode [ 29.873931][ T519] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.881233][ T519] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.888722][ T519] device bridge_slave_1 entered promiscuous mode [ 29.918373][ T519] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.925446][ T519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.932662][ T519] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.939706][ T519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.955110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.962660][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.969898][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.978665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.987095][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.994104][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.002485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.010653][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.017679][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.028562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.037774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.050127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.061801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.070005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.077450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.085860][ T519] device veth0_vlan entered promiscuous mode [ 30.096223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.105392][ T519] device veth1_macvtap entered promiscuous mode [ 30.115228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.125037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.185998][ T524] EXT4-fs (loop0): 1 orphan inode deleted [ 30.191744][ T524] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 30.210843][ T524] ext4 filesystem being mounted at /root/syzkaller-testdir1267354886/syzkaller.9coXwF/0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.231345][ T528] EXT4-fs error (device loop0): ext4_ext_remove_space:2856: inode #16: comm syz-executor: path[1].p_hdr == NULL [ 30.243487][ T528] EXT4-fs (loop0): Remounting filesystem read-only [ 30.250136][ T528] EXT4-fs error (device loop0): __ext4_get_inode_loc:4451: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 30.263137][ T528] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 30.272890][ T528] EXT4-fs error (device loop0): ext4_punch_hole:4238: inode #16: comm syz-executor: mark_inode_dirty error [ 30.290120][ T519] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 30.470098][ T530] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.477182][ T530] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.484891][ T530] device bridge_slave_0 entered promiscuous mode [ 30.494146][ T530] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.501297][ T530] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.508586][ T530] device bridge_slave_1 entered promiscuous mode [ 30.538225][ T530] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.545286][ T530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.552490][ T530] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.559519][ T530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.574940][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.582437][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.589715][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.600534][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.609218][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.616252][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.624591][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.632753][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.639787][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.653439][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.662772][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.676592][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.690075][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.698712][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.706285][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.714141][ T530] device veth0_vlan entered promiscuous mode [ 30.725636][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.734368][ T530] device veth1_macvtap entered promiscuous mode [ 30.742814][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.752133][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.785171][ T112] device bridge_slave_1 left promiscuous mode [ 30.791324][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.799078][ T112] device bridge_slave_0 left promiscuous mode [ 30.805226][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.812734][ T112] device veth1_macvtap left promiscuous mode [ 30.818770][ T112] device veth0_vlan left promiscuous mode [ 30.856079][ T535] EXT4-fs (loop0): 1 orphan inode deleted [ 30.861822][ T535] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 30.880731][ T535] ext4 filesystem being mounted at /root/syzkaller-testdir1794452285/syzkaller.NqVJ4m/0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.902993][ T539] EXT4-fs error (device loop0): ext4_free_blocks:5690: comm syz-executor: Freeing blocks not in datazone - block = 41, count = 1 [ 30.916857][ T539] EXT4-fs (loop0): Remounting filesystem read-only [ 30.923406][ T539] ================================================================== [ 30.931470][ T539] BUG: KASAN: out-of-bounds in ext4_ext_remove_space+0x2218/0x42d0 [ 30.939350][ T539] Read of size 18446744073709551604 at addr ffff888124064018 by task syz-executor/539 [ 30.948859][ T539] [ 30.951177][ T539] CPU: 1 PID: 539 Comm: syz-executor Not tainted syzkaller #0 [ 30.958602][ T539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.968631][ T539] Call Trace: [ 30.971903][ T539] __dump_stack+0x21/0x24 [ 30.976203][ T539] dump_stack_lvl+0x1a7/0x208 [ 30.980850][ T539] ? show_regs_print_info+0x18/0x18 [ 30.986026][ T539] ? thaw_kernel_threads+0x220/0x220 [ 30.991286][ T539] print_address_description+0x7f/0x2c0 [ 30.996810][ T539] ? ext4_ext_remove_space+0x2218/0x42d0 [ 31.002414][ T539] kasan_report+0x100/0x140 [ 31.006893][ T539] ? ext4_ext_remove_space+0x2218/0x42d0 [ 31.012498][ T539] ? ext4_ext_remove_space+0x2218/0x42d0 [ 31.018103][ T539] kasan_check_range+0x249/0x2a0 [ 31.023015][ T539] ? ext4_ext_remove_space+0x2218/0x42d0 [ 31.028641][ T539] memmove+0x2d/0x70 [ 31.032510][ T539] ext4_ext_remove_space+0x2218/0x42d0 [ 31.037949][ T539] ? __kasan_slab_free+0x11/0x20 [ 31.042870][ T539] ? ext4_ext_index_trans_blocks+0x100/0x100 [ 31.048826][ T539] ? ext4_da_release_space+0x184/0x420 [ 31.054257][ T539] ? ext4_es_remove_extent+0x229/0x370 [ 31.059689][ T539] ext4_punch_hole+0x6f1/0xac0 [ 31.064431][ T539] ext4_fallocate+0x275/0x1a60 [ 31.069177][ T539] ? fsnotify_perm+0x66/0x4a0 [ 31.073827][ T539] ? preempt_count_add+0x90/0x1b0 [ 31.078839][ T539] vfs_fallocate+0x4b9/0x590 [ 31.083400][ T539] __x64_sys_fallocate+0xc0/0x110 [ 31.088402][ T539] do_syscall_64+0x31/0x40 [ 31.092790][ T539] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.098653][ T539] RIP: 0033:0x7f449b8ffe39 [ 31.103043][ T539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 31.122645][ T539] RSP: 002b:00007f449b4730b8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 31.131047][ T539] RAX: ffffffffffffffda RBX: 00007f449ba59050 RCX: 00007f449b8ffe39 [ 31.138994][ T539] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 31.147033][ T539] RBP: 00007f449b9795ae R08: 0000000000000000 R09: 0000000000000000 [ 31.154983][ T539] R10: 0000000000001a00 R11: 0000000000000246 R12: 0000000000000000 [ 31.162932][ T539] R13: 000000000000000b R14: 00007f449ba59050 R15: 00007fffe80dfb58 [ 31.170887][ T539] [ 31.173200][ T539] The buggy address belongs to the page: [ 31.178840][ T539] page:ffffea0004901900 refcount:2 mapcount:0 mapping:ffff88810919e050 index:0x27 pfn:0x124064 [ 31.189137][ T539] aops:def_blk_aops ino:0 [ 31.193445][ T539] flags: 0x4000000000002036(referenced|uptodate|lru|active|private) [ 31.201399][ T539] raw: 4000000000002036 ffffea00045eb208 ffffea0004903388 ffff88810919e050 [ 31.209956][ T539] raw: 0000000000000027 ffff88811064f1f8 00000002ffffffff ffff8881041f6000 [ 31.218514][ T539] page dumped because: kasan: bad access detected [ 31.224918][ T539] page->mem_cgroup:ffff8881041f6000 [ 31.230087][ T539] page_owner tracks the page as allocated [ 31.235804][ T539] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 535, ts 30901967688, free_ts 30899992820 [ 31.253146][ T539] prep_new_page+0x176/0x190 [ 31.257724][ T539] get_page_from_freelist+0x225f/0x23f0 [ 31.263244][ T539] __alloc_pages_nodemask+0x29a/0x640 [ 31.268588][ T539] pagecache_get_page+0x63e/0x930 [ 31.273604][ T539] __getblk_gfp+0x212/0x780 [ 31.278090][ T539] ext4_ext_insert_extent+0x10a0/0x45f0 [ 31.283605][ T539] ext4_split_extent_at+0x768/0xe40 [ 31.288775][ T539] ext4_split_extent+0x1a9/0x490 [ 31.293686][ T539] ext4_ext_map_blocks+0x22e7/0x5da0 [ 31.298958][ T539] ext4_map_blocks+0x979/0x1b10 [ 31.303782][ T539] _ext4_get_block+0x1d1/0x4e0 [ 31.308519][ T539] ext4_get_block_unwritten+0x2a/0x40 [ 31.313868][ T539] ext4_block_write_begin+0x527/0x1220 [ 31.319297][ T539] ext4_write_begin+0x6c1/0x1730 [ 31.324205][ T539] ext4_da_write_begin+0x32b/0xec0 [ 31.329290][ T539] generic_perform_write+0x2ce/0x540 [ 31.334545][ T539] page last free stack trace: [ 31.339197][ T539] free_unref_page_prepare+0x2b7/0x2d0 [ 31.344627][ T539] free_unref_page_list+0x129/0x9c0 [ 31.349799][ T539] release_pages+0xe41/0xe90 [ 31.354365][ T539] free_pages_and_swap_cache+0x86/0xa0 [ 31.359796][ T539] tlb_finish_mmu+0x17e/0x310 [ 31.364446][ T539] unmap_region+0x355/0x3c0 [ 31.368919][ T539] __do_munmap+0x63c/0x850 [ 31.373312][ T539] __se_sys_munmap+0x12c/0x1c0 [ 31.378046][ T539] __x64_sys_munmap+0x5b/0x70 [ 31.382696][ T539] do_syscall_64+0x31/0x40 [ 31.387091][ T539] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.392952][ T539] [ 31.395254][ T539] Memory state around the buggy address: [ 31.400865][ T539] ffff888124063f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 31.408933][ T539] ffff888124063f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 31.416969][ T539] >ffff888124064000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 31.424998][ T539] ^ [ 31.429832][ T539] ffff888124064080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 31.437870][ T539] ffff888124064100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 31.445904][ T539] ================================================================== [ 31.453934][ T539] Disabling lock debugging due to kernel taint [ 31.460712][ T539] EXT4-fs error (device loop0): __ext4_get_inode_loc:4451: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 31.475038][ T539] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 31.484781][ T539] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #16: comm syz-executor: mark_inode_dirty error [ 31.496372][ T539] EXT4-fs error (device loop0): __ext4_get_inode_loc:4451: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 31.509573][ T539] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 31.519090][ T539] EXT4-fs error (device loop0): ext4_punch_hole:4238: inode #16: comm syz-executor: mark_inode_dirty error [ 31.532708][ T530] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 31.752340][ T541] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.759506][ T541] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.766828][ T541] device bridge_slave_0 entered promiscuous mode [ 31.773501][ T541] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.780606][ T541] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.787827][ T541] device bridge_slave_1 entered promiscuous mode [ 31.818672][ T541] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.825720][ T541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.832961][ T541] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.840017][ T541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.857955][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.865716][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.872856][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.881638][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.889774][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.896823][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.907844][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.916028][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.923023][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.933706][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.945303][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.958567][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.970867][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.978987][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.986539][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.994500][ T541] device veth0_vlan entered promiscuous mode [ 32.005609][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.014480][ T541] device veth1_macvtap entered promiscuous mode [ 32.022839][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.034933][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.085975][ T546] EXT4-fs (loop0): 1 orphan inode deleted [ 32.091717][ T546] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 32.110638][ T546] ext4 filesystem being mounted at /root/syzkaller-testdir1606069881/syzkaller.xTJV7L/0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.134062][ T550] EXT4-fs error (device loop0): ext4_ext_remove_space:2856: inode #16: comm syz-executor: path[1].p_hdr == NULL [ 32.146244][ T550] EXT4-fs (loop0): Remounting filesystem read-only [ 32.152772][ T550] EXT4-fs error (device loop0): __ext4_get_inode_loc:4451: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 32.165905][ T550] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 32.175826][ T550] EXT4-fs error (device loop0): ext4_punch_hole:4238: inode #16: comm syz-executor: mark_inode_dirty error [ 32.190899][ T541] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 32.225052][ T112] device bridge_slave_1 left promiscuous mode [ 32.231189][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.239193][ T112] device bridge_slave_0 left promiscuous mode [ 32.245457][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.253025][ T112] device bridge_slave_1 left promiscuous mode [ 32.259300][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.266850][ T112] device bridge_slave_0 left promiscuous mode [ 32.273010][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.280838][ T112] device veth1_macvtap left promiscuous mode [ 32.286888][ T112] device veth0_vlan left promiscuous mode [ 32.292691][ T112] device veth1_macvtap left promiscuous mode [ 32.298710][ T112] device veth0_vlan left promiscuous mode [ 32.521532][ T552] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.528923][ T552] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.536385][ T552] device bridge_slave_0 entered promiscuous mode [ 32.543244][ T552] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.550526][ T552] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.557862][ T552] device bridge_slave_1 entered promiscuous mode [ 32.585353][ T552] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.592412][ T552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.599662][ T552] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.606688][ T552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.621576][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.629027][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.636301][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.645174][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.653310][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.660339][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.669888][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.678166][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.685192][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.696412][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.706146][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.718235][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.728530][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.736717][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.744062][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.752885][ T552] device veth0_vlan entered promiscuous mode [ 32.762223][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.770974][ T552] device veth1_macvtap entered promiscuous mode [ 32.779628][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.789503][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.846322][ T557] EXT4-fs (loop0): 1 orphan inode deleted [ 32.852095][ T557] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 32.870980][ T557] ext4 filesystem being mounted at /root/syzkaller-testdir3977893337/syzkaller.AoHB4P/0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.891066][ T561] EXT4-fs error (device loop0): ext4_ext_remove_space:2856: inode #16: comm syz-executor: path[1].p_hdr == NULL [ 32.903110][ T561] EXT4-fs (loop0): Remounting filesystem read-only [ 32.909939][ T561] EXT4-fs error (device loop0): __ext4_get_inode_loc:4451: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 32.923159][ T561] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 32.932790][ T561] EXT4-fs error (device loop0): ext4_punch_hole:4238: inode #16: comm syz-executor: mark_inode_dirty error [ 32.946983][ T552] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 33.112926][ T563] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.120000][ T563] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.127561][ T563] device bridge_slave_0 entered promiscuous mode [ 33.134212][ T563] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.141291][ T563] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.148695][ T563] device bridge_slave_1 entered promiscuous mode [ 33.179672][ T563] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.186731][ T563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.193933][ T563] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.200960][ T563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.218017][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.225918][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.233030][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.242290][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.250780][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.257825][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.267335][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.275542][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.282550][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.293178][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.302614][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.315890][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.326677][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.334788][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.342161][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.351354][ T563] device veth0_vlan entered promiscuous mode [ 33.360241][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.369066][ T563] device veth1_macvtap entered promiscuous mode [ 33.379141][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.388621][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.424829][ T112] device bridge_slave_1 left promiscuous mode [ 33.431023][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.439826][ T112] device bridge_slave_0 left promiscuous mode [ 33.446170][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.454161][ T112] device veth1_macvtap left promiscuous mode [ 33.460246][ T112] device veth0_vlan left promiscuous mode [ 33.461865][ T568] EXT4-fs (loop0): 1 orphan inode deleted [ 33.471810][ T568] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 33.490752][ T568] ext4 filesystem being mounted at /root/syzkaller-testdir3497050612/syzkaller.CoUD82/0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.517202][ T573] EXT4-fs error (device loop0): ext4_ext_remove_space:2856: inode #16: comm syz-executor: path[1].p_hdr == NULL [ 33.529232][ T573] EXT4-fs (loop0): Remounting filesystem read-only [ 33.535807][ T573] EXT4-fs error (device loop0): __ext4_get_inode_loc:4451: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 33.549063][ T573] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 33.558953][ T573] EXT4-fs error (device loop0): ext4_punch_hole:4238: inode #16: comm syz-executor: mark_inode_dirty error [ 33.573279][ T563] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 33.702206][ T575] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.709486][ T575] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.717143][ T575] device bridge_slave_0 entered promiscuous mode [ 33.724698][ T575] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.731713][ T575] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.739165][ T575] device bridge_slave_1 entered promiscuous mode [ 33.767371][ T575] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.774421][ T575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.781645][ T575] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.788680][ T575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.804037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.811523][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.818879][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.835625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.843740][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.850768][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.858080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.866518][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.873532][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.880889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.888904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.901278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.911757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.919675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.927303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.935252][ T575] device veth0_vlan entered promiscuous mode [ 33.943817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.953537][ T575] device veth1_macvtap entered promiscuous mode [ 33.962284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.972748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.037010][ T580] EXT4-fs (loop0): 1 orphan inode deleted [ 34.042742][ T580] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 34.061584][ T580] ext4 filesystem being mounted at /root/syzkaller-testdir2376090041/syzkaller.eKGVw2/0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.081973][ T584] EXT4-fs error (device loop0): ext4_ext_remove_space:2856: inode #16: comm syz-executor: path[1].p_hdr == NULL [ 34.094072][ T584] EXT4-fs (loop0): Remounting filesystem read-only [ 34.100782][ T584] EXT4-fs error (device loop0): __ext4_get_inode_loc:4451: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 34.113808][ T584] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 34.123498][ T584] EXT4-fs error (device loop0): ext4_punch_hole:4238: inode #16: comm syz-executor: mark_inode_dirty error 2026/09/20 15:04:16 executed programs: 19 [ 34.137287][ T575] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 34.271924][ T586] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.279164][ T586] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.286507][ T586] device bridge_slave_0 entered promiscuous mode [ 34.295891][ T586] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.302904][ T586] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.310347][ T586] device bridge_slave_1 entered promiscuous mode [ 34.340467][ T586] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.347521][ T586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.354783][ T586] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.361789][ T586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.376170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.383689][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.391133][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.402629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.410757][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.417784][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.426271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.434778][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.441798][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.454911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.464242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.478583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.489336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.497537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.505132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.514917][ T586] device veth0_vlan entered promiscuous mode [ 34.523703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.533025][ T586] device veth1_macvtap entered promiscuous mode [ 34.541616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.550802][ T112] device bridge_slave_1 left promiscuous mode [ 34.557045][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.564320][ T112] device bridge_slave_0 left promiscuous mode [ 34.570840][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.578671][ T112] device bridge_slave_1 left promiscuous mode [ 34.584923][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.592195][ T112] device bridge_slave_0 left promiscuous mode [ 34.598617][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.606347][ T112] device veth1_macvtap left promiscuous mode [ 34.612321][ T112] device veth0_vlan left promiscuous mode [ 34.618285][ T112] device veth1_macvtap left promiscuous mode [ 34.624274][ T112] device veth0_vlan left promiscuous mode [ 34.779158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.916224][ T591] EXT4-fs (loop0): 1 orphan inode deleted [ 34.921967][ T591] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 34.940873][ T591] ext4 filesystem being mounted at /root/syzkaller-testdir1186104206/syzkaller.lu0vTo/0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.958250][ T595] EXT4-fs error (device loop0): ext4_free_blocks:5690: comm syz-executor: Freeing blocks not in datazone - block = 41, count = 1 [ 34.971795][ T595] EXT4-fs (loop0): Remounting filesystem read-only [ 34.988577][ T586] general protection fault, probably for non-canonical address 0xe1182c0800000c2c: 0000 [#1] PREEMPT SMP KASAN [ 35.000329][ T586] KASAN: maybe wild-memory-access in range [0x08c1804000006160-0x08c1804000006167] [ 35.009586][ T586] CPU: 1 PID: 586 Comm: syz-executor Tainted: G B syzkaller #0 [ 35.018396][ T586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.028431][ T586] RIP: 0010:cpuacct_charge+0xbd/0x180 [ 35.033771][ T586] Code: 8d 34 c5 c0 46 bf 85 4d 89 f4 49 c1 ec 03 eb 0c 4d 8b 3f 4d 85 ff 0f 84 8c 00 00 00 4d 8d af e8 00 00 00 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 15 58 54 00 4d 8b 6d 00 83 7d d0 08 [ 35.053357][ T586] RSP: 0018:ffffc90003a2f840 EFLAGS: 00010003 [ 35.059399][ T586] RAX: 0118300800000c2c RBX: dffffc0000000000 RCX: 0000000000000001 [ 35.067345][ T586] RDX: ffff8881049894b8 RSI: 0000000000002fa1 RDI: ffff888104989400 [ 35.075291][ T586] RBP: ffffc90003a2f878 R08: ffffffff864fc117 R09: 1ffffffff0c9f822 [ 35.083235][ T586] R10: dffffc0000000000 R11: fffffbfff0c9f823 R12: 1ffffffff0b7e8d9 [ 35.091196][ T586] R13: 08c1804000006166 R14: ffffffff85bf46c8 R15: 08c180400000607e [ 35.099142][ T586] FS: 000055557695c480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 35.108050][ T586] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.114617][ T586] CR2: 00007f3812cfffd0 CR3: 000000011cdb8000 CR4: 00000000003506a0 [ 35.122561][ T586] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.130512][ T586] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.138453][ T586] Call Trace: [ 35.141717][ T586] update_curr+0x30d/0x5e0 [ 35.146103][ T586] dequeue_task_fair+0x273/0x1d20 [ 35.151097][ T586] ? sched_clock+0x3a/0x40 [ 35.155487][ T586] ? sched_clock_cpu+0x1b/0x3d0 [ 35.160313][ T586] ? psi_group_change+0x7cb/0xe00 [ 35.165303][ T586] ? enqueue_task_fair+0x2250/0x2250 [ 35.170556][ T586] dequeue_task+0x15a/0x750 [ 35.175028][ T586] __schedule+0x388/0x13e0 [ 35.179412][ T586] ? __sched_text_start+0x8/0x8 [ 35.184233][ T586] ? hrtimer_start_range_ns+0x994/0xa90 [ 35.189745][ T586] schedule+0x13c/0x1d0 [ 35.193897][ T586] do_nanosleep+0x1b1/0x620 [ 35.198372][ T586] ? usleep_range+0x130/0x130 [ 35.203018][ T586] ? memset+0x35/0x40 [ 35.206976][ T586] ? hrtimer_init_sleeper+0x10c/0x370 [ 35.212328][ T586] hrtimer_nanosleep+0x1b6/0x400 [ 35.217252][ T586] ? nanosleep_copyout+0x120/0x120 [ 35.222338][ T586] ? kernel_waitid+0x3d0/0x3d0 [ 35.227072][ T586] ? enqueue_hrtimer+0x1e0/0x1e0 [ 35.231992][ T586] ? get_timespec64+0x116/0x1b0 [ 35.236810][ T586] ? timespec64_add_safe+0x1f0/0x1f0 [ 35.242062][ T586] ? __x64_sys_wait4+0x1b4/0x230 [ 35.246966][ T586] common_nsleep+0x8f/0xb0 [ 35.251351][ T586] __se_sys_clock_nanosleep+0x30b/0x3a0 [ 35.256867][ T586] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 35.262483][ T586] ? debug_smp_processor_id+0x17/0x20 [ 35.267836][ T586] __x64_sys_clock_nanosleep+0x9b/0xb0 [ 35.273273][ T586] do_syscall_64+0x31/0x40 [ 35.277660][ T586] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.283518][ T586] RIP: 0033:0x7f38131aea97 [ 35.287908][ T586] Code: Unable to access opcode bytes at RIP 0x7f38131aea6d. [ 35.295241][ T586] RSP: 002b:00007ffe87bc7030 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 35.303622][ T586] RAX: ffffffffffffffda RBX: 000055557695c480 RCX: 00007f38131aea97 [ 35.311575][ T586] RDX: 00007ffe87bc7070 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.319517][ T586] RBP: 00007ffe87bc70ec R08: 0000000000000000 R09: 0000000000000000 [ 35.327458][ T586] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 35.335401][ T586] R13: 0000000000008879 R14: 00000000000087d1 R15: 0000000000000007 [ 35.343357][ T586] Modules linked in: [ 35.347256][ T586] ---[ end trace 7f2305c86612c846 ]--- [ 35.347295][ C0] BUG: unable to handle page fault for address: fffff52000222f78 [ 35.352702][ T586] RIP: 0010:cpuacct_charge+0xbd/0x180 [ 35.360388][ C0] #PF: supervisor read access in kernel mode [ 35.365731][ T586] Code: 8d 34 c5 c0 46 bf 85 4d 89 f4 49 c1 ec 03 eb 0c 4d 8b 3f 4d 85 ff 0f 84 8c 00 00 00 4d 8d af e8 00 00 00 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 15 58 54 00 4d 8b 6d 00 83 7d d0 08 [ 35.371674][ C0] #PF: error_code(0x0009) - reserved bit violation [ 35.391252][ T586] RSP: 0018:ffffc90003a2f840 EFLAGS: 00010003 [ 35.397717][ C0] PGD 23ffef067 [ 35.397719][ T586] [ 35.397732][ T586] RAX: 0118300800000c2c RBX: dffffc0000000000 RCX: 0000000000000001 [ 35.403766][ C0] P4D 23ffef067 [ 35.407287][ T586] RDX: ffff8881049894b8 RSI: 0000000000002fa1 RDI: ffff888104989400 [ 35.409584][ C0] PUD 10012b067 [ 35.417533][ T586] RBP: ffffc90003a2f878 R08: ffffffff864fc117 R09: 1ffffffff0c9f822 [ 35.421052][ C0] PMD 12194f067 [ 35.428998][ T586] R10: dffffc0000000000 R11: fffffbfff0c9f823 R12: 1ffffffff0b7e8d9 [ 35.432513][ C0] PTE 21a8b16380000001 [ 35.440457][ T586] R13: 08c1804000006166 R14: ffffffff85bf46c8 R15: 08c180400000607e [ 35.443974][ C0] [ 35.451922][ T586] FS: 000055557695c480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 35.455962][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 35.463903][ T586] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.466203][ C0] #PF: supervisor read access in kernel mode [ 35.475101][ T586] CR2: 00007f38131aea6d CR3: 000000011cdb8000 CR4: 00000000003506a0 [ 35.482786][ C0] #PF: error_code(0x0009) - reserved bit violation [ 35.489356][ T586] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.495305][ C0] PGD 23ffef067 [ 35.503253][ T586] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.509719][ C0] P4D 23ffef067 [ 35.517671][ T586] Kernel panic - not syncing: Fatal exception [ 35.521189][ C0] PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 35.545174][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 35.552862][ C0] #PF: supervisor read access in kernel mode [ 35.558823][ C0] #PF: error_code(0x0009) - reserved bit violation [ 35.565304][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 35.574259][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 35.581963][ C0] #PF: supervisor read access in kernel mode [ 35.587919][ C0] #PF: error_code(0x0009) - reserved bit violation [ 35.594394][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 35.603331][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 35.611022][ C0] #PF: supervisor read access in kernel mode [ 35.616972][ C0] #PF: error_code(0x0009) - reserved bit violation [ 35.623443][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 35.632494][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 35.640199][ C0] #PF: supervisor read access in kernel mode [ 35.646271][ C0] #PF: error_code(0x0009) - reserved bit violation [ 35.652753][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 35.661698][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 35.669392][ C0] #PF: supervisor read access in kernel mode [ 35.675347][ C0] #PF: error_code(0x0009) - reserved bit violation [ 35.681822][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 35.690774][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 35.698512][ C0] #PF: supervisor read access in kernel mode [ 35.704477][ C0] #PF: error_code(0x0009) - reserved bit violation [ 35.710984][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 35.719930][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 35.727621][ C0] #PF: supervisor read access in kernel mode [ 35.733578][ C0] #PF: error_code(0x0009) - reserved bit violation [ 35.740050][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 35.748982][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 35.756672][ C0] #PF: supervisor read access in kernel mode [ 35.762629][ C0] #PF: error_code(0x0009) - reserved bit violation [ 35.769101][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 35.778028][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 35.785719][ C0] #PF: supervisor read access in kernel mode [ 35.791672][ C0] #PF: error_code(0x0009) - reserved bit violation [ 35.798145][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 35.807074][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 35.814764][ C0] #PF: supervisor read access in kernel mode [ 35.820720][ C0] #PF: error_code(0x0009) - reserved bit violation [ 35.827192][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 35.836120][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 35.843810][ C0] #PF: supervisor read access in kernel mode [ 35.849762][ C0] #PF: error_code(0x0009) - reserved bit violation [ 35.856235][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 35.865168][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 35.872859][ C0] #PF: supervisor read access in kernel mode [ 35.878812][ C0] #PF: error_code(0x0009) - reserved bit violation [ 35.885286][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 35.894212][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 35.901902][ C0] #PF: supervisor read access in kernel mode [ 35.907859][ C0] #PF: error_code(0x0009) - reserved bit violation [ 35.914336][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 35.923263][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 35.930954][ C0] #PF: supervisor read access in kernel mode [ 35.936909][ C0] #PF: error_code(0x0009) - reserved bit violation [ 35.943386][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 35.952328][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 35.960018][ C0] #PF: supervisor read access in kernel mode [ 35.965970][ C0] #PF: error_code(0x0009) - reserved bit violation [ 35.972442][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 35.981371][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 35.989060][ C0] #PF: supervisor read access in kernel mode [ 35.995011][ C0] #PF: error_code(0x0009) - reserved bit violation [ 36.001486][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 36.010417][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 36.018105][ C0] #PF: supervisor read access in kernel mode [ 36.024059][ C0] #PF: error_code(0x0009) - reserved bit violation [ 36.030531][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 36.039465][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 36.047154][ C0] #PF: supervisor read access in kernel mode [ 36.053111][ C0] #PF: error_code(0x0009) - reserved bit violation [ 36.059584][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 36.068516][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 36.076207][ C0] #PF: supervisor read access in kernel mode [ 36.082159][ C0] #PF: error_code(0x0009) - reserved bit violation [ 36.088633][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 36.097561][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 36.105248][ C0] #PF: supervisor read access in kernel mode [ 36.111200][ C0] #PF: error_code(0x0009) - reserved bit violation [ 36.117673][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 36.126602][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 36.134290][ C0] #PF: supervisor read access in kernel mode [ 36.140243][ C0] #PF: error_code(0x0009) - reserved bit violation [ 36.146718][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 36.155646][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 36.163354][ C0] #PF: supervisor read access in kernel mode [ 36.169309][ C0] #PF: error_code(0x0009) - reserved bit violation [ 36.175783][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 36.184717][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 36.192413][ C0] #PF: supervisor read access in kernel mode [ 36.198366][ C0] #PF: error_code(0x0009) - reserved bit violation [ 36.204861][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 36.213790][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 36.221480][ C0] #PF: supervisor read access in kernel mode [ 36.227437][ C0] #PF: error_code(0x0009) - reserved bit violation [ 36.233910][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 36.242837][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 36.250526][ C0] #PF: supervisor read access in kernel mode [ 36.256480][ C0] #PF: error_code(0x0009) - reserved bit violation [ 36.262956][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 36.271883][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 36.279575][ C0] #PF: supervisor read access in kernel mode [ 36.285528][ C0] #PF: error_code(0x0009) - reserved bit violation [ 36.292000][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 36.300929][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 36.308617][ C0] #PF: supervisor read access in kernel mode [ 36.314569][ C0] #PF: error_code(0x0009) - reserved bit violation [ 36.321040][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 36.329966][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 36.337653][ C0] #PF: supervisor read access in kernel mode [ 36.343603][ C0] #PF: error_code(0x0009) - reserved bit violation [ 36.350074][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 36.359004][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 36.366692][ C0] #PF: supervisor read access in kernel mode [ 36.372645][ C0] #PF: error_code(0x0009) - reserved bit violation [ 36.379115][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 36.388042][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 36.395741][ C0] #PF: supervisor read access in kernel mode [ 36.401707][ C0] #PF: error_code(0x0009) - reserved bit violation [ 36.408189][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 36.417133][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 36.424827][ C0] #PF: supervisor read access in kernel mode [ 36.430785][ C0] #PF: error_code(0x0009) - reserved bit violation [ 36.437260][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 36.446195][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 36.453898][ C0] #PF: supervisor read access in kernel mode [ 36.459857][ C0] #PF: error_code(0x0009) - reserved bit violation [ 36.466337][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 36.475286][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 36.482984][ C0] #PF: supervisor read access in kernel mode [ 36.488941][ C0] #PF: error_code(0x0009) - reserved bit violation [ 36.495419][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 36.504355][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 36.512065][ C0] #PF: supervisor read access in kernel mode [ 36.518023][ C0] #PF: error_code(0x0009) - reserved bit violation [ 36.524502][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 36.533433][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 36.541123][ C0] #PF: supervisor read access in kernel mode [ 36.547077][ C0] #PF: error_code(0x0009) - reserved bit violation [ 36.553550][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 36.562481][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 36.570176][ C0] #PF: supervisor read access in kernel mode [ 36.576139][ C0] #PF: error_code(0x0009) - reserved bit violation [ 36.582754][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 36.591707][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 36.599403][ C0] #PF: supervisor read access in kernel mode [ 36.605374][ C0] #PF: error_code(0x0009) - reserved bit violation [ 36.611855][ C0] PGD 23ffef067 P4D 23ffef067 PUD 10012b067 PMD 12194f067 PTE 2303316380000001 [ 36.620791][ C0] BUG: unable to handle page fault for address: fffff520003b4000 [ 36.628483][ C0] #PF: supervisor read access in kernel mode [ 36.634435][ C0] #PF: error_code(0x0009) - reserved bit violation