[ 44.101162][ T24] audit: type=1400 audit(1745899820.450:110): avc: denied { transition } for pid=377 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.123023][ T24] audit: type=1400 audit(1745899820.450:111): avc: denied { noatsecure } for pid=377 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.142234][ T24] audit: type=1400 audit(1745899820.460:112): avc: denied { rlimitinh } for pid=377 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.161147][ T24] audit: type=1400 audit(1745899820.460:113): avc: denied { siginh } for pid=377 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. 2025/04/29 04:10:26 ignoring optional flag "sandboxArg"="0" 2025/04/29 04:10:26 ignoring optional flag "type"="gce" 2025/04/29 04:10:26 parsed 1 programs [ 50.403000][ T24] audit: type=1400 audit(1745899826.750:114): avc: denied { unlink } for pid=388 comm="syz-executor" name="swap-file" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 50.455146][ T24] audit: type=1400 audit(1745899826.810:115): avc: denied { create } for pid=398 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.481713][ T388] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.498260][ T24] audit: type=1400 audit(1745899826.830:116): avc: denied { write } for pid=398 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.520593][ T24] audit: type=1400 audit(1745899826.830:117): avc: denied { read } for pid=398 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.670844][ T24] audit: type=1400 audit(1745899827.020:118): avc: denied { create } for pid=426 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.794338][ T432] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.801529][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.809241][ T432] device bridge_slave_0 entered promiscuous mode [ 50.816790][ T432] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.823879][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.831376][ T432] device bridge_slave_1 entered promiscuous mode [ 50.868165][ T432] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.875260][ T432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.882567][ T432] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.889712][ T432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.907869][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.915239][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.922496][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.930136][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.939696][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.948048][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.955151][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.963907][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.972252][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.979342][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.991959][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.001501][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.015113][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.027303][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.035537][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.043223][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.051443][ T432] device veth0_vlan entered promiscuous mode [ 51.064236][ T432] device veth1_macvtap entered promiscuous mode [ 51.078134][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.086630][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.095093][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 2025/04/29 04:10:27 executed programs: 0 [ 51.456185][ T458] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.463728][ T458] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.471414][ T458] device bridge_slave_0 entered promiscuous mode [ 51.480945][ T458] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.488057][ T458] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.495840][ T458] device bridge_slave_1 entered promiscuous mode [ 51.535443][ T458] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.542497][ T458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.549799][ T458] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.556973][ T458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.577465][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.585165][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.592458][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.605338][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.613714][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.620930][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.629934][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.638248][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.645305][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.659935][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.669397][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.678459][ T9] device bridge_slave_1 left promiscuous mode [ 51.684652][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.692060][ T9] device bridge_slave_0 left promiscuous mode [ 51.698405][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.706353][ T9] device veth1_macvtap left promiscuous mode [ 51.712530][ T9] device veth0_vlan left promiscuous mode [ 51.801872][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.810547][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.821162][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.829278][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.837397][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.845113][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.853622][ T458] device veth0_vlan entered promiscuous mode [ 51.862742][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.871007][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.881028][ T458] device veth1_macvtap entered promiscuous mode [ 51.889816][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.897501][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.905956][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.915523][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.923805][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.993667][ T24] audit: type=1400 audit(1745899828.350:119): avc: denied { mounton } for pid=462 comm="syz-executor" path="/root/syzkaller-testdir3254407572/syzkaller.9gnaWr/0/file1" dev="sda1" ino=1937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 52.003284][ T463] ====================================================== [ 52.003284][ T463] WARNING: the mand mount option is being deprecated and [ 52.003284][ T463] will be removed in v5.15! [ 52.003284][ T463] ====================================================== [ 52.065155][ T463] EXT4-fs (loop0): 1 orphan inode deleted [ 52.071206][ T463] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 52.090262][ T463] ext4 filesystem being mounted at /root/syzkaller-testdir3254407572/syzkaller.9gnaWr/0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.104974][ T24] audit: type=1400 audit(1745899828.440:120): avc: denied { mount } for pid=462 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 52.131725][ T24] audit: type=1400 audit(1745899828.480:121): avc: denied { write } for pid=462 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.136272][ T467] EXT4-fs error (device loop0): ext4_ext_remove_space:2839: inode #16: comm syz-executor: path[1].p_hdr == NULL [ 52.153797][ T24] audit: type=1400 audit(1745899828.480:122): avc: denied { add_name } for pid=462 comm="syz-executor" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.166504][ T467] EXT4-fs (loop0): Remounting filesystem read-only [ 52.186316][ T24] audit: type=1400 audit(1745899828.480:123): avc: denied { create } for pid=462 comm="syz-executor" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.193181][ T467] EXT4-fs error (device loop0): __ext4_get_inode_loc:4437: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 52.226012][ T467] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5900: Corrupt filesystem [ 52.235620][ T467] EXT4-fs error (device loop0): ext4_punch_hole:4229: inode #16: comm syz-executor: mark_inode_dirty error [ 52.252082][ T458] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 52.456598][ T469] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.464123][ T469] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.471451][ T469] device bridge_slave_0 entered promiscuous mode [ 52.481371][ T469] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.488738][ T469] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.496222][ T469] device bridge_slave_1 entered promiscuous mode [ 52.535110][ T469] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.542273][ T469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.549576][ T469] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.556635][ T469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.577826][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.585400][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.592621][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.601671][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.610839][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.617909][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.630919][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.639362][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.646423][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.658214][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.667480][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.684355][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.695939][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.704383][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.711921][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.723819][ T469] device veth0_vlan entered promiscuous mode [ 52.733881][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.743262][ T469] device veth1_macvtap entered promiscuous mode [ 52.752494][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.762705][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.825179][ T474] EXT4-fs (loop0): 1 orphan inode deleted [ 52.831035][ T474] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 52.850707][ T474] ext4 filesystem being mounted at /root/syzkaller-testdir1950882607/syzkaller.eNsXK4/0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.876720][ T488] EXT4-fs error (device loop0): ext4_ext_remove_space:2839: inode #16: comm syz-executor: path[1].p_hdr == NULL [ 52.888878][ T488] EXT4-fs (loop0): Remounting filesystem read-only [ 52.895991][ T488] EXT4-fs error (device loop0): __ext4_get_inode_loc:4437: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 52.909462][ T488] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5900: Corrupt filesystem [ 52.919480][ T488] EXT4-fs error (device loop0): ext4_punch_hole:4229: inode #16: comm syz-executor: mark_inode_dirty error [ 52.934780][ T469] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 53.172052][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.179434][ T492] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.187191][ T492] device bridge_slave_0 entered promiscuous mode [ 53.196222][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.203454][ T492] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.210776][ T492] device bridge_slave_1 entered promiscuous mode [ 53.248865][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.256066][ T492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.263643][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.270670][ T492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.309067][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.323393][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.333729][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.344849][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.353206][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.360409][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.369540][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.377881][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.384959][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.402741][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.411055][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.428969][ T492] device veth0_vlan entered promiscuous mode [ 53.435435][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.443913][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.451895][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.459693][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.471371][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.480493][ T492] device veth1_macvtap entered promiscuous mode [ 53.491341][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.501574][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.563861][ T9] device bridge_slave_1 left promiscuous mode [ 53.570268][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.578100][ T9] device bridge_slave_0 left promiscuous mode [ 53.578501][ T498] EXT4-fs (loop0): 1 orphan inode deleted [ 53.584302][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.597412][ T498] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 53.616622][ T498] ext4 filesystem being mounted at /root/syzkaller-testdir232538258/syzkaller.9CyR9Z/0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.616702][ T9] device veth1_macvtap left promiscuous mode [ 53.637594][ T9] device veth0_vlan left promiscuous mode [ 53.646070][ T502] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 41, count = 1 [ 53.660024][ T502] EXT4-fs (loop0): Remounting filesystem read-only [ 53.666653][ T502] ================================================================== [ 53.674823][ T502] BUG: KASAN: out-of-bounds in ext4_ext_remove_space+0x2587/0x4910 [ 53.682729][ T502] Read of size 18446744073709551604 at addr ffff88811fff2018 by task syz-executor/502 [ 53.692591][ T502] [ 53.694936][ T502] CPU: 1 PID: 502 Comm: syz-executor Not tainted 5.10.236-syzkaller-1007372-gab07aeb2c93d #0 [ 53.705146][ T502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.715193][ T502] Call Trace: [ 53.718477][ T502] __dump_stack+0x21/0x24 [ 53.722793][ T502] dump_stack_lvl+0x169/0x1d8 [ 53.727469][ T502] ? show_regs_print_info+0x18/0x18 [ 53.732680][ T502] ? thaw_kernel_threads+0x220/0x220 [ 53.737952][ T502] print_address_description+0x7f/0x2c0 [ 53.743533][ T502] ? ext4_ext_remove_space+0x2587/0x4910 [ 53.749154][ T502] kasan_report+0xe2/0x130 [ 53.753556][ T502] ? ext4_ext_remove_space+0x2587/0x4910 [ 53.759178][ T502] ? ext4_ext_remove_space+0x2587/0x4910 [ 53.764807][ T502] kasan_check_range+0x280/0x290 [ 53.769815][ T502] memmove+0x2d/0x70 [ 53.773706][ T502] ext4_ext_remove_space+0x2587/0x4910 [ 53.779268][ T502] ? __kasan_slab_free+0x11/0x20 [ 53.784283][ T502] ? ext4_ext_index_trans_blocks+0x120/0x120 [ 53.790471][ T502] ? ext4_es_remove_extent+0x1d9/0x330 [ 53.795913][ T502] ext4_punch_hole+0x6f8/0xad0 [ 53.800661][ T502] ext4_fallocate+0x271/0x1a70 [ 53.805416][ T502] ? selinux_file_permission+0x2a5/0x510 [ 53.811034][ T502] ? preempt_count_add+0x90/0x1b0 [ 53.816129][ T502] vfs_fallocate+0x4b4/0x590 [ 53.820729][ T502] __x64_sys_fallocate+0xc0/0x110 [ 53.825737][ T502] do_syscall_64+0x31/0x40 [ 53.830139][ T502] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 53.836028][ T502] RIP: 0033:0x7f18858daf69 [ 53.840441][ T502] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.860031][ T502] RSP: 002b:00007f188543c0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 53.868432][ T502] RAX: ffffffffffffffda RBX: 00007f1885a12050 RCX: 00007f18858daf69 [ 53.876389][ T502] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 53.884343][ T502] RBP: 00007f18859386fe R08: 0000000000000000 R09: 0000000000000000 [ 53.892299][ T502] R10: 0000000000001a00 R11: 0000000000000246 R12: 0000000000000000 [ 53.900257][ T502] R13: 000000000000000b R14: 00007f1885a12050 R15: 00007fff39da5548 [ 53.908233][ T502] [ 53.910547][ T502] The buggy address belongs to the page: [ 53.916170][ T502] page:ffffea00047ffc80 refcount:2 mapcount:0 mapping:ffff888100449390 index:0x27 pfn:0x11fff2 [ 53.926486][ T502] aops:def_blk_aops ino:0 [ 53.931006][ T502] flags: 0x4000000000002036(referenced|uptodate|lru|active|private) [ 53.938990][ T502] raw: 4000000000002036 ffffea00047f7188 ffff888105980030 ffff888100449390 [ 53.947581][ T502] raw: 0000000000000027 ffff888123624738 00000002ffffffff ffff88810d11c000 [ 53.956267][ T502] page dumped because: kasan: bad access detected [ 53.962664][ T502] page->mem_cgroup:ffff88810d11c000 [ 53.967876][ T502] page_owner tracks the page as allocated [ 53.973587][ T502] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 498, ts 53644885042, free_ts 53526447108 [ 53.990585][ T502] prep_new_page+0x179/0x180 [ 53.995187][ T502] get_page_from_freelist+0x2235/0x23d0 [ 54.000739][ T502] __alloc_pages_nodemask+0x268/0x5f0 [ 54.006092][ T502] pagecache_get_page+0x642/0x930 [ 54.011099][ T502] __getblk_gfp+0x212/0x780 [ 54.015588][ T502] ext4_ext_insert_extent+0x1084/0x4530 [ 54.021117][ T502] ext4_split_extent_at+0x79f/0xe90 [ 54.026296][ T502] ext4_split_extent+0x1d7/0x4e0 [ 54.031216][ T502] ext4_ext_map_blocks+0x1b38/0x5d40 [ 54.036482][ T502] ext4_map_blocks+0x993/0x1b80 [ 54.041316][ T502] _ext4_get_block+0x1bb/0x4b0 [ 54.046069][ T502] ext4_get_block_unwritten+0x2a/0x40 [ 54.051426][ T502] ext4_block_write_begin+0x567/0x1330 [ 54.056869][ T502] ext4_write_begin+0x651/0x1550 [ 54.061803][ T502] ext4_da_write_begin+0x455/0xe80 [ 54.066901][ T502] generic_perform_write+0x2be/0x510 [ 54.072188][ T502] page last free stack trace: [ 54.076860][ T502] free_unref_page_prepare+0x2b7/0x2d0 [ 54.082306][ T502] free_unref_page_list+0x12e/0x9b0 [ 54.087488][ T502] release_pages+0xe38/0xe80 [ 54.092063][ T502] free_pages_and_swap_cache+0x86/0xa0 [ 54.097507][ T502] tlb_finish_mmu+0x175/0x300 [ 54.102170][ T502] unmap_region+0x32c/0x380 [ 54.106658][ T502] __do_munmap+0x63c/0x850 [ 54.111057][ T502] __se_sys_munmap+0x127/0x1b0 [ 54.115833][ T502] __x64_sys_munmap+0x5b/0x70 [ 54.120496][ T502] do_syscall_64+0x31/0x40 [ 54.124900][ T502] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 54.130814][ T502] [ 54.133133][ T502] Memory state around the buggy address: [ 54.138756][ T502] ffff88811fff1f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.146813][ T502] ffff88811fff1f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.154858][ T502] >ffff88811fff2000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.162992][ T502] ^ [ 54.167850][ T502] ffff88811fff2080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.175919][ T502] ffff88811fff2100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.183968][ T502] ================================================================== [ 54.192013][ T502] Disabling lock debugging due to kernel taint [ 54.199673][ T502] EXT4-fs error (device loop0): __ext4_get_inode_loc:4437: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 54.216101][ T502] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5900: Corrupt filesystem [ 54.226223][ T502] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #18: comm syz-executor: mark_inode_dirty error [ 54.237977][ T502] EXT4-fs error (device loop0): __ext4_get_inode_loc:4437: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 54.251121][ T502] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5900: Corrupt filesystem [ 54.261215][ T502] EXT4-fs error (device loop0): ext4_punch_hole:4229: inode #18: comm syz-executor: mark_inode_dirty error [ 54.283298][ T492] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 54.512321][ T504] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.519429][ T504] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.527156][ T504] device bridge_slave_0 entered promiscuous mode [ 54.534067][ T504] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.541200][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.548912][ T504] device bridge_slave_1 entered promiscuous mode [ 54.592837][ T504] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.599928][ T504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.607308][ T504] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.614369][ T504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.631985][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.639682][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.647281][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.656670][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.665170][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.672319][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.683572][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.691722][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.698788][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.709159][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.718609][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.732040][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.748268][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.756481][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.764067][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.772693][ T504] device veth0_vlan entered promiscuous mode [ 54.785396][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.794614][ T504] device veth1_macvtap entered promiscuous mode [ 54.804012][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.814293][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.865518][ T509] EXT4-fs (loop0): 1 orphan inode deleted [ 54.871254][ T509] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 54.890366][ T509] ext4 filesystem being mounted at /root/syzkaller-testdir3721705098/syzkaller.Id6h8T/0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.912325][ T513] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 41, count = 1 [ 54.926143][ T513] EXT4-fs (loop0): Remounting filesystem read-only [ 54.943039][ C1] general protection fault, probably for non-canonical address 0xdac000ed00000011: 0000 [#1] PREEMPT SMP KASAN [ 54.954763][ C1] CPU: 1 PID: 513 Comm: syz-executor Tainted: G B 5.10.236-syzkaller-1007372-gab07aeb2c93d #0 [ 54.966337][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.976488][ C1] RIP: 0010:__stack_depot_save+0x1c8/0x4c0 [ 54.982293][ C1] Code: 41 29 f5 4c 8b 3d 20 c8 79 04 45 89 ee 41 81 e6 ff 0f 00 00 4b 8b 1c f7 48 85 db 74 59 44 89 e6 eb 08 48 8b 1b 48 85 db 74 4c <44> 39 6b 08 75 f2 44 39 63 0c 75 ec 45 31 c0 4e 8b 0c c7 4e 3b 4c [ 55.001886][ C1] RSP: 0018:ffffc900001706f8 EFLAGS: 00010286 [ 55.007958][ C1] RAX: 0000000000000000 RBX: dac000ed00000011 RCX: 0000000000000001 [ 55.015914][ C1] RDX: 0000000000000a20 RSI: 000000000000000c RDI: ffffc90000170760 [ 55.023862][ C1] RBP: ffffc90000170750 R08: 00000000ac4f88f8 R09: 00000000e060b1dd [ 55.031831][ C1] R10: 0000000000000003 R11: 00000000cf7e85a2 R12: 000000000000000c [ 55.039783][ C1] R13: 0000000026c33105 R14: 0000000000000105 R15: ffff8881f7340000 [ 55.047743][ C1] FS: 00007f94a16886c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 55.056650][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.063212][ C1] CR2: 00007f94a1688d58 CR3: 0000000119864000 CR4: 00000000003506a0 [ 55.071287][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.079704][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.087681][ C1] Call Trace: [ 55.090958][ C1] [ 55.093796][ C1] ? slab_post_alloc_hook+0x7d/0x2f0 [ 55.099060][ C1] ? alloc_skb_with_frags+0xa2/0x560 [ 55.104320][ C1] __kasan_slab_alloc+0xcf/0xf0 [ 55.109159][ C1] ? __kasan_slab_alloc+0xbd/0xf0 [ 55.114158][ C1] ? slab_post_alloc_hook+0x5d/0x2f0 [ 55.119435][ C1] ? kmem_cache_alloc+0x165/0x2e0 [ 55.124610][ C1] ? dst_alloc+0x176/0x4f0 [ 55.129123][ C1] ? icmp6_dst_alloc+0xf5/0x560 [ 55.133971][ C1] ? mld_sendpack+0x4b0/0xa80 [ 55.138665][ C1] ? mld_send_initial_cr+0x246/0x2b0 [ 55.143934][ C1] ? mld_dad_timer_expire+0x30/0x410 [ 55.149217][ C1] ? call_timer_fn+0x38/0x290 [ 55.153896][ C1] ? __run_timers+0x639/0x9a0 [ 55.158567][ C1] ? run_timer_softirq+0x6a/0xf0 [ 55.163503][ C1] ? __do_softirq+0x255/0x563 [ 55.168178][ C1] ? asm_call_irq_on_stack+0xf/0x20 [ 55.173386][ C1] ? do_softirq_own_stack+0x60/0x80 [ 55.178657][ C1] ? __irq_exit_rcu+0x128/0x150 [ 55.183488][ C1] ? irq_exit_rcu+0x9/0x10 [ 55.187988][ C1] ? sysvec_apic_timer_interrupt+0xbf/0xe0 [ 55.193815][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 55.199958][ C1] ? __memmove+0x19c/0x1a0 [ 55.204363][ C1] ? ext4_ext_remove_space+0x2587/0x4910 [ 55.209978][ C1] ? ext4_punch_hole+0x6f8/0xad0 [ 55.214918][ C1] ? ext4_fallocate+0x271/0x1a70 [ 55.219933][ C1] ? vfs_fallocate+0x4b4/0x590 [ 55.224717][ C1] ? __x64_sys_fallocate+0xc0/0x110 [ 55.229918][ C1] ? do_syscall_64+0x31/0x40 [ 55.234499][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 55.240758][ C1] slab_post_alloc_hook+0x5d/0x2f0 [ 55.245874][ C1] ? dst_alloc+0x176/0x4f0 [ 55.250333][ C1] ? dst_alloc+0x176/0x4f0 [ 55.254753][ C1] kmem_cache_alloc+0x165/0x2e0 [ 55.259609][ C1] ? dst_alloc+0x176/0x4f0 [ 55.264017][ C1] dst_alloc+0x176/0x4f0 [ 55.268245][ C1] icmp6_dst_alloc+0xf5/0x560 [ 55.272905][ C1] ? security_sk_classify_flow+0x7b/0x90 [ 55.278522][ C1] ? icmpv6_flow_init+0xd2/0x130 [ 55.283447][ C1] mld_sendpack+0x4b0/0xa80 [ 55.287934][ C1] ? add_grec+0x1100/0x1100 [ 55.292418][ C1] ? add_grhead+0xed/0x290 [ 55.296814][ C1] ? add_grec+0x11a/0x1100 [ 55.301214][ C1] ? _raw_spin_lock_irq+0xe0/0xe0 [ 55.306218][ C1] mld_send_initial_cr+0x246/0x2b0 [ 55.311350][ C1] mld_dad_timer_expire+0x30/0x410 [ 55.316471][ C1] ? mld_ifc_timer_expire+0xc50/0xc50 [ 55.321957][ C1] call_timer_fn+0x38/0x290 [ 55.326457][ C1] ? mld_ifc_timer_expire+0xc50/0xc50 [ 55.331856][ C1] __run_timers+0x639/0x9a0 [ 55.336425][ C1] ? calc_index+0x200/0x200 [ 55.340917][ C1] ? sched_clock_cpu+0x1b/0x3d0 [ 55.345768][ C1] run_timer_softirq+0x6a/0xf0 [ 55.350544][ C1] __do_softirq+0x255/0x563 [ 55.355038][ C1] asm_call_irq_on_stack+0xf/0x20 [ 55.360049][ C1] [ 55.362975][ C1] do_softirq_own_stack+0x60/0x80 [ 55.367991][ C1] __irq_exit_rcu+0x128/0x150 [ 55.372654][ C1] irq_exit_rcu+0x9/0x10 [ 55.377103][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 55.382984][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 55.388960][ C1] RIP: 0010:__memmove+0x19c/0x1a0 [ 55.393967][ C1] Code: fa 02 72 16 66 44 8b 1e 66 44 8b 54 16 fe 66 44 89 1f 66 44 89 54 17 fe eb 0c 48 83 fa 01 72 06 44 8a 1e 44 88 1f c3 48 89 d1 a4 c3 00 eb 2e 0f 1f 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 [ 55.413816][ C1] RSP: 0018:ffffc90004777a40 EFLAGS: 00010286 [ 55.419902][ C1] RAX: ffff88811fe7c00c RBX: fffffffffffffff4 RCX: fffffffffe91ac6d [ 55.427874][ C1] RDX: fffffffffffffff4 RSI: ffff88812156139f RDI: ffff888121561393 [ 55.435850][ C1] RBP: ffffc90004777a70 R08: ffff88811fe7c000 R09: ffffed103ee24e8b [ 55.443821][ C1] R10: ffffed103ee24e8b R11: 1ffff1103ee24e8a R12: 0000000000000000 [ 55.451781][ C1] R13: ffffffff81c89717 R14: ffff88811fe7c018 R15: ffff88811fe7c00c [ 55.459748][ C1] ? ext4_ext_remove_space+0x2587/0x4910 [ 55.465360][ C1] ? memmove+0x56/0x70 [ 55.469419][ C1] ext4_ext_remove_space+0x2587/0x4910 [ 55.474853][ C1] ? __kasan_slab_free+0x11/0x20 [ 55.479775][ C1] ? ext4_ext_index_trans_blocks+0x120/0x120 [ 55.485752][ C1] ? ext4_es_remove_extent+0x1d9/0x330 [ 55.491201][ C1] ext4_punch_hole+0x6f8/0xad0 [ 55.495954][ C1] ext4_fallocate+0x271/0x1a70 [ 55.500710][ C1] ? selinux_file_permission+0x2a5/0x510 [ 55.506353][ C1] ? preempt_count_add+0x90/0x1b0 [ 55.511457][ C1] vfs_fallocate+0x4b4/0x590 [ 55.516570][ C1] __x64_sys_fallocate+0xc0/0x110 [ 55.522203][ C1] do_syscall_64+0x31/0x40 [ 55.526633][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 55.532654][ C1] RIP: 0033:0x7f94a1b26f69 [ 55.537058][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 55.556752][ C1] RSP: 002b:00007f94a16880c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 55.565414][ C1] RAX: ffffffffffffffda RBX: 00007f94a1c5e050 RCX: 00007f94a1b26f69 [ 55.573405][ C1] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 55.581373][ C1] RBP: 00007f94a1b846fe R08: 0000000000000000 R09: 0000000000000000 [ 55.589441][ C1] R10: 0000000000001a00 R11: 0000000000000246 R12: 0000000000000000 [ 55.597492][ C1] R13: 000000000000000b R14: 00007f94a1c5e050 R15: 00007ffcbf4d5248 [ 55.605573][ C1] Modules linked in: [ 55.609527][ C0] general protection fault, probably for non-canonical address 0xc8e000f300000014: 0000 [#2] PREEMPT SMP KASAN [ 55.609573][ C1] ---[ end trace 77d306c3046a2741 ]--- [ 55.621343][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B D 5.10.236-syzkaller-1007372-gab07aeb2c93d #0 [ 55.621350][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 55.621369][ C0] RIP: 0010:__stack_depot_save+0x1c8/0x4c0 [ 55.621388][ C0] Code: 41 29 f5 4c 8b 3d 20 c8 79 04 45 89 ee 41 81 e6 ff 0f 00 00 4b 8b 1c f7 48 85 db 74 59 44 89 e6 eb 08 48 8b 1b 48 85 db 74 4c <44> 39 6b 08 75 f2 44 39 63 0c 75 ec 45 31 c0 4e 8b 0c c7 4e 3b 4c [ 55.626875][ C1] RIP: 0010:__stack_depot_save+0x1c8/0x4c0 [ 55.637940][ C0] RSP: 0018:ffffc900000076f8 EFLAGS: 00010286 [ 55.637953][ C0] RAX: 0000000000000000 RBX: c8e000f300000014 RCX: 0000000000000001 [ 55.637968][ C0] RDX: 0000000000000a20 RSI: 000000000000000b RDI: ffffc90000007760 [ 55.648028][ C1] Code: 41 29 f5 4c 8b 3d 20 c8 79 04 45 89 ee 41 81 e6 ff 0f 00 00 4b 8b 1c f7 48 85 db 74 59 44 89 e6 eb 08 48 8b 1b 48 85 db 74 4c <44> 39 6b 08 75 f2 44 39 63 0c 75 ec 45 31 c0 4e 8b 0c c7 4e 3b 4c [ 55.653793][ C0] RBP: ffffc90000007750 R08: 00000000a39b897b R09: 00000000581cdf59 [ 55.653801][ C0] R10: 0000000000000001 R11: 00000000551e7f90 R12: 000000000000000b [ 55.653817][ C0] R13: 00000000b11216e5 R14: 00000000000006e5 R15: ffff8881f7340000 [ 55.673634][ C1] RSP: 0018:ffffc900001706f8 EFLAGS: 00010286 [ 55.679675][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 55.685817][ C1] [ 55.693772][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.693779][ C0] CR2: 00000000fffffffe CR3: 0000000119864000 CR4: 00000000003506b0 [ 55.693789][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.693804][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.701762][ C1] RAX: 0000000000000000 RBX: dac000ed00000011 RCX: 0000000000000001 [ 55.722064][ C0] Call Trace: [ 55.722071][ C0] [ 55.722089][ C0] ? slab_post_alloc_hook+0x7d/0x2f0 [ 55.722102][ C0] __kasan_slab_alloc+0xcf/0xf0 [ 55.722122][ C0] ? __kasan_slab_alloc+0xbd/0xf0 [ 55.730103][ C1] RDX: 0000000000000a20 RSI: 000000000000000c RDI: ffffc90000170760 [ 55.738040][ C0] ? slab_post_alloc_hook+0x5d/0x2f0 [ 55.738051][ C0] ? kmem_cache_alloc+0x165/0x2e0 [ 55.738071][ C0] ? dst_alloc+0x176/0x4f0 [ 55.746041][ C1] RBP: ffffc90000170750 R08: 00000000ac4f88f8 R09: 00000000e060b1dd [ 55.752083][ C0] ? icmp6_dst_alloc+0xf5/0x560 [ 55.761004][ C1] R10: 0000000000000003 R11: 00000000cf7e85a2 R12: 000000000000000c [ 55.763335][ C0] ? mld_sendpack+0x4b0/0xa80 [ 55.763355][ C0] ? mld_ifc_timer_expire+0x84a/0xc50 [ 55.769918][ C1] R13: 0000000026c33105 R14: 0000000000000105 R15: ffff8881f7340000 [ 55.777873][ C0] ? call_timer_fn+0x38/0x290 [ 55.777884][ C0] ? __run_timers+0x639/0x9a0 [ 55.777907][ C0] ? run_timer_softirq+0x6a/0xf0 [ 55.785869][ C1] FS: 00007f94a16886c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 55.793977][ C0] ? __do_softirq+0x255/0x563 [ 55.793986][ C0] ? asm_call_irq_on_stack+0xf/0x20 [ 55.794006][ C0] ? do_softirq_own_stack+0x60/0x80 [ 55.801954][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.805222][ C0] ? __irq_exit_rcu+0x128/0x150 [ 55.805241][ C0] ? irq_exit_rcu+0x9/0x10 [ 55.808073][ C1] CR2: 00007f94a1688d58 CR3: 0000000119864000 CR4: 00000000003506a0 [ 55.813331][ C0] ? sysvec_apic_timer_interrupt+0xbf/0xe0 [ 55.813341][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 55.813360][ C0] ? default_idle+0x12/0x20 [ 55.818183][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.823180][ C0] ? arch_cpu_idle+0xa/0x10 [ 55.823190][ C0] ? default_idle_call+0x71/0x1d0 [ 55.823206][ C0] ? do_idle+0x1df/0x530 [ 55.831157][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.836522][ C0] ? cpu_startup_entry+0x18/0x20 [ 55.836533][ C0] ? rest_init+0xe8/0xf0 [ 55.836553][ C0] ? arch_call_rest_init+0xe/0x10 [ 55.841545][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 55.845948][ C0] ? start_kernel+0x42e/0x49c [ 56.019939][ C0] ? x86_64_start_reservations+0x2a/0x2c [ 56.025612][ C0] ? x86_64_start_kernel+0x60/0x63 [ 56.030716][ C0] ? secondary_startup_64_no_verify+0xad/0xbb [ 56.036985][ C0] slab_post_alloc_hook+0x5d/0x2f0 [ 56.042203][ C0] ? dst_alloc+0x176/0x4f0 [ 56.046634][ C0] ? dst_alloc+0x176/0x4f0 [ 56.051047][ C0] kmem_cache_alloc+0x165/0x2e0 [ 56.055886][ C0] ? dst_alloc+0x176/0x4f0 [ 56.060329][ C0] dst_alloc+0x176/0x4f0 [ 56.064650][ C0] icmp6_dst_alloc+0xf5/0x560 [ 56.069318][ C0] ? security_sk_classify_flow+0x7b/0x90 [ 56.074938][ C0] ? icmpv6_flow_init+0xd2/0x130 [ 56.079863][ C0] mld_sendpack+0x4b0/0xa80 [ 56.084355][ C0] ? add_grec+0x1100/0x1100 [ 56.088846][ C0] ? add_grec+0x11a/0x1100 [ 56.093252][ C0] mld_ifc_timer_expire+0x84a/0xc50 [ 56.098489][ C0] ? __next_timer_interrupt+0x21d/0x2a0 [ 56.104095][ C0] ? mld_gq_timer_expire+0xe0/0xe0 [ 56.109294][ C0] call_timer_fn+0x38/0x290 [ 56.113800][ C0] ? mld_gq_timer_expire+0xe0/0xe0 [ 56.118928][ C0] __run_timers+0x639/0x9a0 [ 56.123511][ C0] ? calc_index+0x200/0x200 [ 56.128005][ C0] ? sched_clock_cpu+0x1b/0x3d0 [ 56.132847][ C0] run_timer_softirq+0x6a/0xf0 [ 56.137696][ C0] __do_softirq+0x255/0x563 [ 56.142266][ C0] asm_call_irq_on_stack+0xf/0x20 [ 56.147277][ C0] [ 56.150295][ C0] do_softirq_own_stack+0x60/0x80 [ 56.155322][ C0] __irq_exit_rcu+0x128/0x150 [ 56.160008][ C0] irq_exit_rcu+0x9/0x10 [ 56.164247][ C0] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 56.169954][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 56.176009][ C0] RIP: 0010:default_idle+0x12/0x20 [ 56.181196][ C0] Code: 48 8b 7c 24 10 e8 6e 29 00 00 e9 71 ff ff ff e8 94 00 fb ff 00 00 cc cc 55 48 89 e5 0f 1f 44 00 00 0f 00 2d 30 99 50 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 41 57 41 56 [ 56.200806][ C0] RSP: 0018:ffffffff86207d58 EFLAGS: 00000242 [ 56.206862][ C0] RAX: ffff8881f7000000 RBX: ffffffff8621c040 RCX: 000000000000932a [ 56.214985][ C0] RDX: 0000000000000001 RSI: ffffffff85200d20 RDI: ffffffff85200ce0 [ 56.222966][ C0] RBP: ffffffff86207d58 R08: dffffc0000000000 R09: ffffed103ee0ae7b [ 56.230953][ C0] R10: ffffed103ee0ae7b R11: 1ffff1103ee0ae7a R12: 0000000000000000 [ 56.238929][ C0] R13: 1ffffffff0c43808 R14: 0000000000000000 R15: dffffc0000000000 [ 56.246913][ C0] arch_cpu_idle+0xa/0x10 [ 56.251234][ C0] default_idle_call+0x71/0x1d0 [ 56.256218][ C0] do_idle+0x1df/0x530 [ 56.260382][ C0] ? rcu_irq_exit+0x9/0x10 [ 56.264799][ C0] ? sysvec_call_function_single+0xc8/0xd0 [ 56.270611][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 56.275803][ C0] cpu_startup_entry+0x18/0x20 [ 56.280562][ C0] rest_init+0xe8/0xf0 [ 56.284643][ C0] ? time_init+0x38/0x38 [ 56.288874][ C0] arch_call_rest_init+0xe/0x10 [ 56.293770][ C0] start_kernel+0x42e/0x49c [ 56.298281][ C0] x86_64_start_reservations+0x2a/0x2c [ 56.303758][ C0] x86_64_start_kernel+0x60/0x63 [ 56.308686][ C0] secondary_startup_64_no_verify+0xad/0xbb [ 56.314583][ C0] Modules linked in: [ 56.318678][ C1] Kernel Offset: disabled [ 56.323000][ C1] Rebooting in 86400 seconds..