Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts.
2025/02/04 22:09:28 ignoring optional flag "sandboxArg"="0"
2025/02/04 22:09:28 parsed 1 programs
[ 53.249873][ T28] kauditd_printk_skb: 32 callbacks suppressed
[ 53.249891][ T28] audit: type=1400 audit(1738706969.643:108): avc: denied { unlink } for pid=406 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 53.356199][ T406] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 54.071004][ T28] audit: type=1401 audit(1738706970.463:109): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 54.423857][ T461] bridge0: port 1(bridge_slave_0) entered blocking state
[ 54.431270][ T461] bridge0: port 1(bridge_slave_0) entered disabled state
[ 54.438663][ T461] device bridge_slave_0 entered promiscuous mode
[ 54.445612][ T461] bridge0: port 2(bridge_slave_1) entered blocking state
[ 54.452585][ T461] bridge0: port 2(bridge_slave_1) entered disabled state
[ 54.460220][ T461] device bridge_slave_1 entered promiscuous mode
[ 54.510718][ T461] bridge0: port 2(bridge_slave_1) entered blocking state
[ 54.517578][ T461] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 54.524767][ T461] bridge0: port 1(bridge_slave_0) entered blocking state
[ 54.531742][ T461] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 54.554845][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 54.562731][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 54.570346][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 54.580569][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 54.588610][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 54.595490][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 54.603985][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 54.612093][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 54.618959][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 54.632391][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 54.642360][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 54.657745][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 54.669607][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 54.677691][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 54.685964][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 54.694319][ T461] device veth0_vlan entered promiscuous mode
2025/02/04 22:09:31 executed programs: 0
[ 54.706675][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 54.716057][ T461] device veth1_macvtap entered promiscuous mode
[ 54.726576][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 54.737072][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 54.818037][ T469] bridge0: port 1(bridge_slave_0) entered blocking state
[ 54.825313][ T469] bridge0: port 1(bridge_slave_0) entered disabled state
[ 54.832709][ T469] device bridge_slave_0 entered promiscuous mode
[ 54.846913][ T469] bridge0: port 2(bridge_slave_1) entered blocking state
[ 54.854102][ T469] bridge0: port 2(bridge_slave_1) entered disabled state
[ 54.861487][ T469] device bridge_slave_1 entered promiscuous mode
[ 54.922692][ T469] bridge0: port 2(bridge_slave_1) entered blocking state
[ 54.929599][ T469] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 54.936880][ T469] bridge0: port 1(bridge_slave_0) entered blocking state
[ 54.943770][ T469] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 54.973232][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 54.980997][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 54.988002][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 54.997462][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 55.006030][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 55.012925][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 55.030441][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 55.038494][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 55.045383][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 55.057203][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 55.067900][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 55.087127][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 55.098371][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 55.106458][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 55.113862][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 55.122239][ T469] device veth0_vlan entered promiscuous mode
[ 55.140234][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 55.149627][ T469] device veth1_macvtap entered promiscuous mode
[ 55.159641][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 55.167865][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 55.186746][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 55.195015][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 55.220030][ T474] loop2: detected capacity change from 0 to 512
[ 55.227318][ T474] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[ 55.240614][ T474] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 55.253746][ T474] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[ 55.266917][ T474] EXT4-fs (loop2): 1 truncate cleaned up
[ 55.272522][ T474] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 55.281960][ T28] audit: type=1400 audit(1738706971.683:110): avc: denied { mount } for pid=473 comm="syz.2.15" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 55.290001][ T474] ==================================================================
[ 55.309740][ T28] audit: type=1400 audit(1738706971.683:111): avc: denied { setattr } for pid=473 comm="syz.2.15" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 55.311204][ T474] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x909/0x1fa0
[ 55.333440][ T28] audit: type=1400 audit(1738706971.683:112): avc: denied { write } for pid=473 comm="syz.2.15" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 55.340722][ T474] Read of size 18446744073709551572 at addr ffff88811b9cd050 by task syz.2.15/474
[ 55.340744][ T474]
[ 55.340758][ T474] CPU: 0 PID: 474 Comm: syz.2.15 Not tainted 6.1.124-syzkaller-1167536-g7658169f5f5f #0
[ 55.362633][ T28] audit: type=1400 audit(1738706971.683:113): avc: denied { add_name } for pid=473 comm="syz.2.15" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 55.370840][ T474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 55.370863][ T474] Call Trace:
[ 55.370870][ T474]
[ 55.370879][ T474] dump_stack_lvl+0x151/0x1b7
[ 55.372999][ T28] audit: type=1400 audit(1738706971.683:114): avc: denied { create } for pid=473 comm="syz.2.15" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 55.382979][ T474] ? nf_tcp_handle_invalid+0x3f1/0x3f1
[ 55.383008][ T474] ? _printk+0xd1/0x111
[ 55.403139][ T28] audit: type=1400 audit(1738706971.683:115): avc: denied { write } for pid=473 comm="syz.2.15" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 55.413183][ T474] ? __virt_addr_valid+0x242/0x2f0
[ 55.416325][ T28] audit: type=1400 audit(1738706971.683:116): avc: denied { open } for pid=473 comm="syz.2.15" path="/0/file2/file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 55.419082][ T474] print_report+0x158/0x4e0
[ 55.423823][ T28] audit: type=1400 audit(1738706971.683:117): avc: denied { remove_name } for pid=473 comm="syz.2.15" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 55.443913][ T474] ? __virt_addr_valid+0x242/0x2f0
[ 55.443948][ T474] ? kasan_complete_mode_report_info+0x57/0x1b0
[ 55.443970][ T474] ? ext4_xattr_set_entry+0x909/0x1fa0
[ 55.545200][ T474] kasan_report+0x13c/0x170
[ 55.549503][ T474] ? ext4_xattr_set_entry+0x909/0x1fa0
[ 55.554813][ T474] kasan_check_range+0x294/0x2a0
[ 55.559675][ T474] ? ext4_xattr_set_entry+0x909/0x1fa0
[ 55.565145][ T474] memmove+0x2d/0x70
[ 55.568869][ T474] ext4_xattr_set_entry+0x909/0x1fa0
[ 55.574088][ T474] ? ext4_xattr_inode_lookup_create+0x1a60/0x1a60
[ 55.580412][ T474] ? memcpy+0x56/0x70
[ 55.584229][ T474] ext4_xattr_block_set+0x99c/0x37f0
[ 55.589359][ T474] ? ext4_drop_inode+0x90/0x1a0
[ 55.594221][ T474] ? __getblk_gfp+0x3d/0x7d0
[ 55.598827][ T474] ? ext4_xattr_block_find+0x320/0x320
[ 55.604114][ T474] ? xattr_find_entry+0x23c/0x300
[ 55.608967][ T474] ? ext4_xattr_block_find+0x2ac/0x320
[ 55.614261][ T474] ext4_expand_extra_isize_ea+0x10eb/0x1c40
[ 55.620173][ T474] ? ext4_xattr_set+0x3d0/0x3d0
[ 55.624851][ T474] ? rwsem_write_trylock+0x153/0x340
[ 55.630303][ T474] ? dquot_initialize_needed+0x13d/0x370
[ 55.635746][ T474] __ext4_expand_extra_isize+0x31a/0x420
[ 55.641215][ T474] __ext4_mark_inode_dirty+0x4bb/0x7d0
[ 55.646622][ T474] ? sb_end_intwrite+0x130/0x130
[ 55.651476][ T474] ? current_time+0x1ba/0x300
[ 55.656016][ T474] ? atime_needs_update+0x810/0x810
[ 55.661117][ T474] ? __kasan_check_write+0x14/0x20
[ 55.666261][ T474] ? drop_nlink+0xa9/0x110
[ 55.670572][ T474] __ext4_unlink+0x6ed/0xba0
[ 55.675005][ T474] ? __ext4_read_dirblock+0x8e0/0x8e0
[ 55.680211][ T474] ? rwsem_mark_wake+0x770/0x770
[ 55.685062][ T474] ext4_unlink+0x142/0x3f0
[ 55.689316][ T474] vfs_unlink+0x38c/0x630
[ 55.693484][ T474] do_unlinkat+0x483/0x920
[ 55.697744][ T474] ? getname_flags+0xba/0x520
[ 55.702264][ T474] ? fsnotify_link_count+0x100/0x100
[ 55.707381][ T474] ? strncpy_from_user+0x169/0x2b0
[ 55.712492][ T474] ? getname_flags+0x1fd/0x520
[ 55.717343][ T474] __x64_sys_unlink+0x49/0x50
[ 55.721921][ T474] x64_sys_call+0x289/0x9a0
[ 55.726258][ T474] do_syscall_64+0x3b/0xb0
[ 55.730512][ T474] ? clear_bhb_loop+0x55/0xb0
[ 55.735037][ T474] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 55.740798][ T474] RIP: 0033:0x7f32b037e719
[ 55.745016][ T474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 55.764549][ T474] RSP: 002b:00007f32b11aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[ 55.772781][ T474] RAX: ffffffffffffffda RBX: 00007f32b0535f80 RCX: 00007f32b037e719
[ 55.780592][ T474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180
[ 55.788402][ T474] RBP: 00007f32b03f132e R08: 0000000000000000 R09: 0000000000000000
[ 55.796221][ T474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 55.804117][ T474] R13: 0000000000000000 R14: 00007f32b0535f80 R15: 00007ffe192fe328
[ 55.811935][ T474]
[ 55.814784][ T474]
[ 55.816956][ T474] Allocated by task 474:
[ 55.821039][ T474] kasan_set_track+0x4b/0x70
[ 55.825460][ T474] kasan_save_alloc_info+0x1f/0x30
[ 55.830409][ T474] __kasan_kmalloc+0x9c/0xb0
[ 55.834832][ T474] __kmalloc_node_track_caller+0xb3/0x1e0
[ 55.840398][ T474] kmemdup+0x29/0x60
[ 55.844120][ T474] ext4_xattr_block_set+0x80f/0x37f0
[ 55.849267][ T474] ext4_expand_extra_isize_ea+0x10eb/0x1c40
[ 55.854970][ T474] __ext4_expand_extra_isize+0x31a/0x420
[ 55.860446][ T474] __ext4_mark_inode_dirty+0x4bb/0x7d0
[ 55.865732][ T474] __ext4_unlink+0x6ed/0xba0
[ 55.870158][ T474] ext4_unlink+0x142/0x3f0
[ 55.874498][ T474] vfs_unlink+0x38c/0x630
[ 55.878667][ T474] do_unlinkat+0x483/0x920
[ 55.882915][ T474] __x64_sys_unlink+0x49/0x50
[ 55.887429][ T474] x64_sys_call+0x289/0x9a0
[ 55.891771][ T474] do_syscall_64+0x3b/0xb0
[ 55.896024][ T474] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 55.901925][ T474]
[ 55.904182][ T474] The buggy address belongs to the object at ffff88811b9cd000
[ 55.904182][ T474] which belongs to the cache kmalloc-1k of size 1024
[ 55.918086][ T474] The buggy address is located 80 bytes inside of
[ 55.918086][ T474] 1024-byte region [ffff88811b9cd000, ffff88811b9cd400)
[ 55.931262][ T474]
[ 55.933528][ T474] The buggy address belongs to the physical page:
[ 55.939795][ T474] page:ffffea00046e7200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11b9c8
[ 55.950032][ T474] head:ffffea00046e7200 order:3 compound_mapcount:0 compound_pincount:0
[ 55.958209][ T474] flags: 0x4000000000010200(slab|head|zone=1)
[ 55.964103][ T474] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043080
[ 55.972786][ T474] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 55.981191][ T474] page dumped because: kasan: bad access detected
[ 55.987454][ T474] page_owner tracks the page as allocated
[ 55.993243][ T474] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 469, tgid 469 (syz-executor), ts 55208267253, free_ts 55176196967
[ 56.015111][ T474] post_alloc_hook+0x213/0x220
[ 56.019714][ T474] prep_new_page+0x1b/0x110
[ 56.024043][ T474] get_page_from_freelist+0x2f41/0x2fc0
[ 56.029424][ T474] __alloc_pages+0x234/0x610
[ 56.033851][ T474] alloc_slab_page+0x6c/0xf0
[ 56.038277][ T474] new_slab+0x90/0x3e0
[ 56.042183][ T474] ___slab_alloc+0x6f9/0xb80
[ 56.046783][ T474] __slab_alloc+0x5d/0xa0
[ 56.050953][ T474] __kmem_cache_alloc_node+0x207/0x2a0
[ 56.056240][ T474] __kmalloc_node_track_caller+0xa2/0x1e0
[ 56.061797][ T474] __alloc_skb+0x125/0x2d0
[ 56.066051][ T474] inet6_rt_notify+0x2db/0x560
[ 56.070656][ T474] fib6_add+0x23ac/0x3df0
[ 56.074813][ T474] ip6_route_add+0x8a/0x130
[ 56.079155][ T474] addrconf_add_dev+0x419/0x5f0
[ 56.083840][ T474] addrconf_init_auto_addrs+0xadc/0x1050
[ 56.089306][ T474] page last free stack trace:
[ 56.093818][ T474] free_unref_page_prepare+0x9f1/0xa00
[ 56.099114][ T474] free_unref_page+0xb2/0x5c0
[ 56.103628][ T474] __free_pages+0x61/0xf0
[ 56.107795][ T474] __free_slab+0xce/0x1a0
[ 56.111964][ T474] __unfreeze_partials+0x165/0x1a0
[ 56.117002][ T474] put_cpu_partial+0xa9/0x100
[ 56.121513][ T474] __slab_free+0x1c8/0x280
[ 56.125757][ T474] ___cache_free+0xc6/0xd0
[ 56.130034][ T474] qlist_free_all+0xc5/0x140
[ 56.134440][ T474] kasan_quarantine_reduce+0x15a/0x180
[ 56.139737][ T474] __kasan_slab_alloc+0x24/0x80
[ 56.144973][ T474] slab_post_alloc_hook+0x53/0x2c0
[ 56.149893][ T474] kmem_cache_alloc_node+0x188/0x330
[ 56.155107][ T474] __alloc_skb+0xcc/0x2d0
[ 56.159272][ T474] alloc_skb_with_frags+0xa6/0x680
[ 56.164412][ T474] sock_alloc_send_pskb+0x915/0xa50
[ 56.169521][ T474]
[ 56.171704][ T474] Memory state around the buggy address:
[ 56.177340][ T474] ffff88811b9ccf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 56.185735][ T474] ffff88811b9ccf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 56.193736][ T474] >ffff88811b9cd000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 56.202053][ T474] ^
[ 56.208508][ T474] ffff88811b9cd080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 56.216649][ T474] ffff88811b9cd100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 56.224627][ T474] ==================================================================
[ 56.233143][ T474] Disabling lock debugging due to kernel taint
[ 56.253194][ T469] EXT4-fs (loop2): unmounting filesystem.
[ 56.272657][ T478] loop2: detected capacity change from 0 to 512
[ 56.282574][ T478] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 56.297437][ T478] EXT4-fs (loop2): 1 truncate cleaned up
[ 56.303057][ T478] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 56.320071][ T39] general protection fault, probably for non-canonical address 0x6c7fdfa1bb56ec7: 0000 [#1] PREEMPT SMP KASAN
[ 56.332118][ T39] CPU: 1 PID: 39 Comm: kworker/1:1 Tainted: G B 6.1.124-syzkaller-1167536-g7658169f5f5f #0
[ 56.343399][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 56.353386][ T39] Workqueue: ipv6_addrconf addrconf_dad_work
[ 56.359189][ T39] RIP: 0010:kmem_cache_alloc_node+0x10f/0x330
[ 56.365099][ T39] Code: 8b 38 48 85 ff 0f 84 c8 00 00 00 48 83 78 10 00 0f 84 bd 00 00 00 41 8b 44 24 28 48 8d 0c 07 49 8b 9c 24 d8 00 00 00 48 0f c9 <48> 33 1c 07 48 31 cb 48 8d 4a 08 4d 8b 04 24 48 89 f8 65 49 0f c7
[ 56.384529][ T39] RSP: 0018:ffffc9000028f450 EFLAGS: 00010286
[ 56.390447][ T39] RAX: 0000000000000080 RBX: 06bfa9e69a3d91b8 RCX: c76eb51bfafdc706
[ 56.398241][ T39] RDX: 0000000000018689 RSI: 0000000000000100 RDI: 06c7fdfa1bb56e47
[ 56.406086][ T39] RBP: ffffc9000028f4a0 R08: ffffffff840505d9 R09: ffffed10259ce186
[ 56.414304][ T39] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881002b1800
[ 56.422067][ T39] R13: 0000000000000100 R14: 00000000ffffffff R15: 0000000000000a20
[ 56.429870][ T39] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 56.438664][ T39] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 56.445142][ T39] CR2: 000000002000f000 CR3: 000000011c09f000 CR4: 00000000003506a0
[ 56.453129][ T39] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 56.461047][ T39] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 56.468986][ T39] Call Trace:
[ 56.472098][ T39]
[ 56.474894][ T39] ? __die_body+0x62/0xb0
[ 56.479052][ T39] ? die_addr+0x9f/0xd0
[ 56.483245][ T39] ? exc_general_protection+0x317/0x4c0
[ 56.488802][ T39] ? asm_exc_general_protection+0x27/0x30
[ 56.494359][ T39] ? __alloc_skb+0x89/0x2d0
[ 56.498773][ T39] ? kmem_cache_alloc_node+0x10f/0x330
[ 56.504187][ T39] ? __alloc_skb+0xcc/0x2d0
[ 56.508532][ T39] __alloc_skb+0xcc/0x2d0
[ 56.512686][ T39] inet6_rt_notify+0x2db/0x560
[ 56.517381][ T39] ? rt6_nh_dump_exceptions+0x650/0x650
[ 56.522857][ T39] ? call_fib_notifiers+0x9f/0xc0
[ 56.527711][ T39] fib6_add+0x23ac/0x3df0
[ 56.531874][ T39] ? kfree_skbmem+0x104/0x170
[ 56.536379][ T39] ? fib6_update_sernum_stub+0x1a0/0x1a0
[ 56.541843][ T39] ? __kasan_check_write+0x14/0x20
[ 56.546799][ T39] ? _raw_spin_lock_bh+0xa4/0x1b0
[ 56.551667][ T39] ip6_ins_rt+0x102/0x170
[ 56.555820][ T39] ? rt6_lookup+0x210/0x210
[ 56.560167][ T39] ? rtnl_notify+0x9c/0xd0
[ 56.564413][ T39] __ipv6_ifa_notify+0x5ab/0x11a0
[ 56.569596][ T39] ? snmp6_fill_stats+0x7c0/0x7c0
[ 56.574460][ T39] ? __kasan_check_write+0x14/0x20
[ 56.579401][ T39] ? try_to_grab_pending+0x1de/0x5d0
[ 56.584530][ T39] ? __schedule+0xcbd/0x1560
[ 56.588956][ T39] ? mod_delayed_work_on+0x190/0x190
[ 56.594070][ T39] ? __kasan_check_write+0x14/0x20
[ 56.599102][ T39] ? __cancel_work+0x224/0x2a0
[ 56.603703][ T39] ? cancel_work+0x20/0x20
[ 56.607955][ T39] ? preempt_schedule_common+0xbe/0xf0
[ 56.613260][ T39] addrconf_dad_completed+0x177/0xdb0
[ 56.618462][ T39] ? addrconf_dad_stop+0x410/0x410
[ 56.623408][ T39] ? preempt_schedule_thunk+0x16/0x18
[ 56.628620][ T39] addrconf_dad_work+0xd95/0x16b0
[ 56.633481][ T39] ? _raw_spin_unlock+0x4c/0x70
[ 56.638169][ T39] ? ipv6_get_saddr_eval+0xf00/0xf00
[ 56.643378][ T39] ? __kasan_check_read+0x11/0x20
[ 56.648359][ T39] ? read_word_at_a_time+0x12/0x20
[ 56.653395][ T39] ? strscpy+0x9c/0x260
[ 56.657386][ T39] process_one_work+0x73d/0xcb0
[ 56.662317][ T39] worker_thread+0xa60/0x1260
[ 56.667323][ T39] kthread+0x26d/0x300
[ 56.671211][ T39] ? worker_clr_flags+0x1a0/0x1a0
[ 56.676094][ T39] ? kthread_blkcg+0xd0/0xd0
[ 56.680599][ T39] ret_from_fork+0x1f/0x30
[ 56.684859][ T39]
[ 56.687810][ T39] Modules linked in:
[ 56.691692][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#2] PREEMPT SMP KASAN
[ 56.703265][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[ 56.711907][ C0] CPU: 0 PID: 478 Comm: syz.2.16 Tainted: G B D 6.1.124-syzkaller-1167536-g7658169f5f5f #0
[ 56.723277][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 56.733181][ C0] RIP: 0010:update_blocked_averages+0xa8f/0x1280
[ 56.739334][ C0] Code: 00 00 48 01 c3 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 c0 b8 69 00 48 8b 1b 48 03 5c 24 60 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 a2 b8 69 00 4c 8b 2b 4d 85 ed 0f
[ 56.758870][ C0] RSP: 0018:ffffc90000007da0 EFLAGS: 00010046
[ 56.764854][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 4c20d5269bcde000
[ 56.772840][ C0] RDX: 1ffff92000000f98 RSI: dffffc0000000000 RDI: ffffc90000007ce0
[ 56.780656][ C0] RBP: ffffc90000007ee8 R08: 0000000000000001 R09: 000000000000012e
[ 56.788554][ C0] R10: ffff8881f6e388d8 R11: ffffffff87b71010 R12: 1ffff110249194aa
[ 56.796357][ C0] R13: 0000000cdeb4badb R14: dffffc0000000000 R15: ffff8881248ca400
[ 56.804170][ C0] FS: 00007f32b11aa6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 56.812927][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 56.819435][ C0] CR2: 0000555f3d501928 CR3: 000000011c09f000 CR4: 00000000003506b0
[ 56.827381][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 56.835166][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 56.842980][ C0] Call Trace:
[ 56.846149][ C0]
[ 56.849018][ C0] ? __die_body+0x62/0xb0
[ 56.853267][ C0] ? die_addr+0x9f/0xd0
[ 56.857342][ C0] ? exc_general_protection+0x317/0x4c0
[ 56.862727][ C0] ? asm_exc_general_protection+0x27/0x30
[ 56.868283][ C0] ? update_blocked_averages+0xa8f/0x1280
[ 56.873834][ C0] ? rebalance_domains+0xa60/0xa60
[ 56.878884][ C0] ? sched_clock+0x9/0x10
[ 56.883044][ C0] ? sched_clock_cpu+0x71/0x2b0
[ 56.887745][ C0] run_rebalance_domains+0xf0/0x1b0
[ 56.892776][ C0] handle_softirqs+0x1db/0x650
[ 56.897386][ C0] __irq_exit_rcu+0x52/0xf0
[ 56.901705][ C0] irq_exit_rcu+0x9/0x10
[ 56.905792][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0
[ 56.911388][ C0]
[ 56.914116][ C0]
[ 56.916894][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 56.922713][ C0] RIP: 0010:__memmove+0x19c/0x1a0
[ 56.927684][ C0] Code: fa 02 72 16 66 44 8b 1e 66 44 8b 54 16 fe 66 44 89 1f 66 44 89 54 17 fe eb 0c 48 83 fa 01 72 06 44 8a 1e 44 88 1f c3 48 89 d1 a4 c3 cc eb 2e 0f 1f 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03
[ 56.947210][ C0] RSP: 0018:ffffc90000a57360 EFLAGS: 00010286
[ 56.953230][ C0] RAX: ffff88811c38d870 RBX: ffffffff82059449 RCX: fffffffffc582e8e
[ 56.961033][ C0] RDX: ffffffffffffffd4 RSI: ffff88811fe0a996 RDI: ffff88811fe0a9b6
[ 56.968879][ C0] RBP: ffffc90000a57390 R08: ffff88811c38d824 R09: 0000000000000001
[ 56.976886][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffffffffd4
[ 56.984698][ C0] R13: 0000000000000000 R14: ffff88811c38d850 R15: ffff88811c38d870
[ 56.992502][ C0] ? ext4_xattr_set_entry+0x909/0x1fa0
[ 56.997795][ C0] ? memmove+0x56/0x70
[ 57.001700][ C0] ext4_xattr_set_entry+0x909/0x1fa0
[ 57.006912][ C0] ? ext4_xattr_inode_lookup_create+0x1a60/0x1a60
[ 57.013165][ C0] ? memcpy+0x56/0x70
[ 57.016988][ C0] ext4_xattr_block_set+0x99c/0x37f0
[ 57.022208][ C0] ? ext4_drop_inode+0x90/0x1a0
[ 57.026984][ C0] ? __getblk_gfp+0x3d/0x7d0
[ 57.031495][ C0] ? ext4_xattr_block_find+0x320/0x320
[ 57.036792][ C0] ? xattr_find_entry+0x23c/0x300
[ 57.041829][ C0] ? ext4_xattr_block_find+0x2ac/0x320
[ 57.047114][ C0] ext4_expand_extra_isize_ea+0x10eb/0x1c40
[ 57.052850][ C0] ? ext4_xattr_set+0x3d0/0x3d0
[ 57.057808][ C0] ? rwsem_write_trylock+0x153/0x340
[ 57.063025][ C0] ? dquot_initialize_needed+0x13d/0x370
[ 57.068681][ C0] __ext4_expand_extra_isize+0x31a/0x420
[ 57.074226][ C0] __ext4_mark_inode_dirty+0x4bb/0x7d0
[ 57.079519][ C0] ? sb_end_intwrite+0x130/0x130
[ 57.084375][ C0] ? current_time+0x1ba/0x300
[ 57.088884][ C0] ? atime_needs_update+0x810/0x810
[ 57.094117][ C0] ? __kasan_check_write+0x14/0x20
[ 57.099246][ C0] ? drop_nlink+0xa9/0x110
[ 57.103491][ C0] __ext4_unlink+0x6ed/0xba0
[ 57.107961][ C0] ? __ext4_read_dirblock+0x8e0/0x8e0
[ 57.113220][ C0] ? rwsem_mark_wake+0x770/0x770
[ 57.118104][ C0] ext4_unlink+0x142/0x3f0
[ 57.122342][ C0] vfs_unlink+0x38c/0x630
[ 57.126532][ C0] do_unlinkat+0x483/0x920
[ 57.130779][ C0] ? fsnotify_link_count+0x100/0x100
[ 57.135961][ C0] ? strncpy_from_user+0x169/0x2b0
[ 57.140920][ C0] ? getname_flags+0x1fd/0x520
[ 57.145511][ C0] __x64_sys_unlink+0x49/0x50
[ 57.150026][ C0] x64_sys_call+0x289/0x9a0
[ 57.154388][ C0] do_syscall_64+0x3b/0xb0
[ 57.158616][ C0] ? clear_bhb_loop+0x55/0xb0
[ 57.163130][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 57.168856][ C0] RIP: 0033:0x7f32b037e719
[ 57.173106][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 57.192815][ C0] RSP: 002b:00007f32b11aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[ 57.201054][ C0] RAX: ffffffffffffffda RBX: 00007f32b0535f80 RCX: 00007f32b037e719
[ 57.208865][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180
[ 57.216794][ C0] RBP: 00007f32b03f132e R08: 0000000000000000 R09: 0000000000000000
[ 57.224692][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 57.232740][ C0] R13: 0000000000000000 R14: 00007f32b0535f80 R15: 00007ffe192fe328
[ 57.240564][ C0]
[ 57.243405][ C0] Modules linked in:
[ 57.247141][ C0] ---[ end trace 0000000000000000 ]---
[ 57.252430][ C0] RIP: 0010:kmem_cache_alloc_node+0x10f/0x330
[ 57.258344][ C0] Code: 8b 38 48 85 ff 0f 84 c8 00 00 00 48 83 78 10 00 0f 84 bd 00 00 00 41 8b 44 24 28 48 8d 0c 07 49 8b 9c 24 d8 00 00 00 48 0f c9 <48> 33 1c 07 48 31 cb 48 8d 4a 08 4d 8b 04 24 48 89 f8 65 49 0f c7
[ 57.277783][ C0] RSP: 0018:ffffc9000028f450 EFLAGS: 00010286
[ 57.283875][ C0] RAX: 0000000000000080 RBX: 06bfa9e69a3d91b8 RCX: c76eb51bfafdc706
[ 57.291664][ C0] RDX: 0000000000018689 RSI: 0000000000000100 RDI: 06c7fdfa1bb56e47
[ 57.299478][ C0] RBP: ffffc9000028f4a0 R08: ffffffff840505d9 R09: ffffed10259ce186
[ 57.307285][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881002b1800
[ 57.315190][ C0] R13: 0000000000000100 R14: 00000000ffffffff R15: 0000000000000a20
[ 57.323008][ C0] FS: 00007f32b11aa6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 57.331796][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 57.338267][ C0] CR2: 0000555f3d501928 CR3: 000000011c09f000 CR4: 00000000003506b0
[ 57.346186][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 57.354131][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 57.361938][ C0] Kernel panic - not syncing: Fatal exception in interrupt
[ 58.519192][ C0] Shutting down cpus with NMI
[ 58.524103][ C0] Kernel Offset: disabled
[ 58.528353][ C0] Rebooting in 86400 seconds..