Warning: Permanently added '10.128.10.58' (ED25519) to the list of known hosts. 2023/07/23 02:46:19 ignoring optional flag "sandboxArg"="0" 2023/07/23 02:46:20 parsed 1 programs 2023/07/23 02:46:20 executed programs: 0 [ 80.690949][ T5039] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.699658][ T5039] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.708713][ T5039] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.717247][ T5039] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.725461][ T5039] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.732919][ T5039] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.837990][ T5389] chnl_net:caif_netlink_parms(): no params data found [ 80.881153][ T5389] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.888419][ T5389] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.895878][ T5389] bridge_slave_0: entered allmulticast mode [ 80.902559][ T5389] bridge_slave_0: entered promiscuous mode [ 80.910366][ T5389] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.917944][ T5389] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.925341][ T5389] bridge_slave_1: entered allmulticast mode [ 80.932029][ T5389] bridge_slave_1: entered promiscuous mode [ 80.954912][ T5389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.966665][ T5389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.990207][ T5389] team0: Port device team_slave_0 added [ 80.998373][ T5389] team0: Port device team_slave_1 added [ 81.017083][ T5389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.024079][ T5389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.050384][ T5389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.062695][ T5389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.069889][ T5389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.096243][ T5389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.124655][ T5389] hsr_slave_0: entered promiscuous mode [ 81.130994][ T5389] hsr_slave_1: entered promiscuous mode [ 81.783121][ T5389] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.793004][ T22] cfg80211: failed to load regulatory.db [ 81.794168][ T5389] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.810047][ T5389] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.821172][ T5389] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.855229][ T5389] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.862406][ T5389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.870437][ T5389] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.877646][ T5389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.896211][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.904530][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.970276][ T5389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.991669][ T5389] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.006739][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.013974][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.044439][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.051653][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.081080][ T5389] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.092650][ T5389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.269883][ T5389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.314635][ T5389] veth0_vlan: entered promiscuous mode [ 82.332374][ T5389] veth1_vlan: entered promiscuous mode [ 82.366457][ T5389] veth0_macvtap: entered promiscuous mode [ 82.377109][ T5389] veth1_macvtap: entered promiscuous mode [ 82.399687][ T5389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.414776][ T5389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.428910][ T5389] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.439127][ T5389] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.448723][ T5389] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.457648][ T5389] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.529094][ T4778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.549335][ T4778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.579324][ T22] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.590402][ T22] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.727922][ T5454] loop0: detected capacity change from 0 to 8192 [ 82.741856][ T5454] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 82.757605][ T5454] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 82.776623][ T5454] REISERFS (device loop0): using ordered data mode [ 82.783461][ T5454] reiserfs: using flush barriers [ 82.791320][ T5454] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 82.810628][ T5454] REISERFS (device loop0): checking transaction log (loop0) [ 82.840639][ T5039] Bluetooth: hci0: command 0x0409 tx timeout [ 82.939509][ T5454] REISERFS (device loop0): Using r5 hash to sort names [ 82.964686][ C1] ================================================================== [ 82.966683][ T5466] general protection fault, probably for non-canonical address 0xdffffc0040000000: 0000 [#1] PREEMPT SMP KASAN [ 82.972774][ C1] BUG: KASAN: out-of-bounds in tick_sched_handle+0x15d/0x170 [ 82.984489][ T5466] KASAN: probably user-memory-access in range [0x0000000200000000-0x0000000200000007] [ 82.991923][ C1] Read of size 8 at addr ffffc90005306f60 by task syz-executor.0/5454 [ 83.001532][ T5466] CPU: 0 PID: 5466 Comm: sed Not tainted 6.5.0-rc2-next-20230721-syzkaller #0 [ 83.009826][ C1] [ 83.009833][ C1] CPU: 1 PID: 5454 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230721-syzkaller #0 [ 83.018904][ T5466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 83.021211][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 83.030984][ T5466] RIP: 0010:debug_check_no_obj_freed+0x1fe/0x4c0 [ 83.041032][ C1] Call Trace: [ 83.041042][ C1] [ 83.051246][ T5466] Code: 02 00 00 48 be 00 01 00 00 00 00 ad de 48 89 53 08 48 89 c7 48 89 30 4c 89 68 08 e8 ec d2 ff ff 48 89 d8 48 89 c2 48 c1 ea 03 <42> 80 3c 22 00 0f 84 27 ff ff ff 48 89 c7 48 89 44 24 50 e8 ba fa [ 83.057553][ C1] dump_stack_lvl+0xd9/0x1b0 [ 83.060821][ T5466] RSP: 0018:ffffc900053a77a0 EFLAGS: 00010006 [ 83.063653][ C1] print_report+0xc4/0x620 [ 83.083314][ T5466] [ 83.083320][ T5466] RAX: 0000000200000001 RBX: 0000000200000001 RCX: ffffffff816850de [ 83.087966][ C1] ? __virt_addr_valid+0x5e/0x2d0 [ 83.094002][ T5466] RDX: 0000000040000000 RSI: ffff88807d948200 RDI: ffff8880701f2e50 [ 83.098394][ C1] kasan_report+0xda/0x110 [ 83.100696][ T5466] RBP: 0000000000000001 R08: 0000000000000001 R09: fffff52000a74ee2 [ 83.108735][ C1] ? tick_sched_handle+0x15d/0x170 [ 83.113738][ T5466] R10: 0000000000000003 R11: 0000000000094000 R12: dffffc0000000000 [ 83.121775][ C1] ? tick_sched_handle+0x15d/0x170 [ 83.126247][ T5466] R13: dead000000000122 R14: ffff88807d948200 R15: ffff88807d948300 [ 83.134376][ C1] ? tick_sched_do_timer+0x2e0/0x2e0 [ 83.139479][ T5466] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 83.147539][ C1] tick_sched_handle+0x15d/0x170 [ 83.152642][ T5466] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.160602][ C1] tick_sched_timer+0xe9/0x110 [ 83.166163][ T5466] CR2: 00007ffa30c7fba8 CR3: 0000000070adf000 CR4: 00000000003506f0 [ 83.175267][ C1] __hrtimer_run_queues+0x647/0xc10 [ 83.180280][ T5466] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.186946][ C1] ? enqueue_hrtimer+0x310/0x310 [ 83.191703][ T5466] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.199917][ C1] ? ktime_get_update_offsets_now+0x3bc/0x610 [ 83.205032][ T5466] Call Trace: [ 83.213079][ C1] hrtimer_interrupt+0x31b/0x800 [ 83.218170][ T5466] [ 83.226138][ C1] __sysvec_apic_timer_interrupt+0x14a/0x430 [ 83.232182][ T5466] ? die_addr+0x3b/0xa0 [ 83.235448][ C1] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 83.240379][ T5466] ? exc_general_protection+0x154/0x230 [ 83.243291][ C1] [ 83.249242][ T5466] ? asm_exc_general_protection+0x26/0x30 [ 83.253371][ C1] [ 83.253380][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 83.259153][ T5466] ? do_raw_spin_lock+0x12e/0x2b0 [ 83.264667][ C1] RIP: 0010:memmove+0x28/0x1b0 [ 83.267594][ T5466] ? debug_check_no_obj_freed+0x1fe/0x4c0 [ 83.273373][ C1] Code: c3 90 f3 0f 1e fa 48 89 f8 48 39 fe 7d 0f 49 89 f0 49 01 d0 49 39 f8 0f 8f b5 00 00 00 48 83 fa 20 0f 82 01 01 00 00 48 89 d1 a4 c3 48 81 fa a8 02 00 00 72 05 40 38 fe 74 47 48 83 ea 20 48 [ 83.276300][ T5466] slab_free_freelist_hook+0x18c/0x1e0 [ 83.282329][ C1] RSP: 0018:ffffc90005306f88 EFLAGS: 00010282 [ 83.287330][ T5466] ? mt_destroy_walk+0x1121/0x14f0 [ 83.292064][ C1] [ 83.292070][ C1] RAX: ffff88806f441fb4 RBX: 0000000000000002 RCX: fffffffffefc1d59 [ 83.297929][ T5466] kmem_cache_free+0xf0/0x490 [ 83.318125][ C1] RDX: ffffffffffffffe1 RSI: ffff88807048022c RDI: ffff88807048023c [ 83.323594][ T5466] mt_destroy_walk+0x1121/0x14f0 [ 83.329638][ C1] RBP: 0000000000000020 R08: ffff88806f441f85 R09: 0000766972705f73 [ 83.335076][ T5466] __mt_destroy+0x257/0x2a0 [ 83.337401][ C1] R10: 667265736965722e R11: 0000766972705f73 R12: 0000000000000001 [ 83.345446][ T5466] do_vmi_align_munmap+0x11fd/0x1710 [ 83.350107][ C1] R13: 0000000000000001 R14: ffff88806f441fa4 R15: 0000000000000010 [ 83.358083][ T5466] ? __split_vma+0x790/0x790 [ 83.363009][ C1] leaf_paste_entries+0x43c/0x920 [ 83.371042][ T5466] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 83.380138][ C1] balance_leaf+0x9476/0xcd90 [ 83.388191][ T5466] ? mtree_range_walk+0x5e1/0x9b0 [ 83.393626][ C1] ? get_num_ver.constprop.0+0xfd0/0xfd0 [ 83.401582][ T5466] do_vmi_munmap+0x20e/0x450 [ 83.406139][ C1] ? replace_key+0x150/0x150 [ 83.411571][ T5466] mmap_region+0x194/0x2640 [ 83.417538][ C1] do_balance+0x337/0x840 [ 83.422209][ T5466] ? lock_sync+0x190/0x190 [ 83.427380][ C1] ? get_right_neighbor_position+0x170/0x170 [ 83.433070][ T5466] ? find_extend_vma_locked+0x2f0/0x2f0 [ 83.437718][ C1] ? bit_wait_timeout+0x160/0x160 [ 83.442635][ T5466] ? bpf_lsm_mmap_addr+0x9/0x10 [ 83.447377][ C1] reiserfs_paste_into_item+0x62a/0x7c0 [ 83.451671][ T5466] ? security_mmap_addr+0x84/0xa0 [ 83.456066][ C1] ? reiserfs_delete_object+0x200/0x200 [ 83.462823][ T5466] ? get_unmapped_area+0x2c5/0x3e0 [ 83.468370][ C1] ? search_by_entry_key+0x940/0x940 [ 83.473338][ T5466] do_mmap+0x87c/0xed0 [ 83.478178][ C1] ? reiserfs_new_inode+0x1219/0x20b0 [ 83.483788][ T5466] vm_mmap_pgoff+0x1a6/0x3b0 [ 83.488874][ C1] ? r5_hash+0xaf/0xd0 [ 83.494398][ T5466] ? randomize_page+0xb0/0xb0 [ 83.499568][ C1] ? make_cpu_key+0x26/0x2a0 [ 83.504829][ T5466] ? __fget_files+0x279/0x410 [ 83.509047][ C1] reiserfs_add_entry+0x936/0xd20 [ 83.514393][ T5466] ksys_mmap_pgoff+0x422/0x5b0 [ 83.518967][ C1] ? reiserfs_lookup+0x690/0x690 [ 83.523188][ T5466] ? lockdep_hardirqs_on+0x7d/0x100 [ 83.528038][ C1] reiserfs_mkdir+0x68a/0x9a0 [ 83.532600][ T5466] do_syscall_64+0x38/0xb0 [ 83.537968][ C1] ? reiserfs_mknod+0x740/0x740 [ 83.543311][ T5466] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.548045][ C1] ? reiserfs_lookup_privroot+0x19b/0x200 [ 83.552952][ T5466] RIP: 0033:0x7ffa30f26b74 [ 83.558644][ C1] ? down_write_killable_nested+0x250/0x250 [ 83.563382][ T5466] Code: 63 08 44 89 e8 5b 41 5c 41 5d c3 41 89 ca 41 f7 c1 ff 0f 00 00 74 0c c7 05 f5 46 01 00 16 00 00 00 eb 17 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 0c f7 d8 89 05 dc 46 01 00 48 83 c8 ff c3 0f [ 83.567871][ C1] reiserfs_xattr_init+0x57f/0xbb0 [ 83.572776][ T5466] RSP: 002b:00007ffe3945a408 EFLAGS: 00000246 [ 83.578645][ C1] reiserfs_fill_super+0x2139/0x3150 [ 83.584335][ T5466] ORIG_RAX: 0000000000000009 [ 83.588838][ C1] ? reiserfs_remount+0x1640/0x1640 [ 83.594711][ T5466] RAX: ffffffffffffffda RBX: 00007ffe3945a4b8 RCX: 00007ffa30f26b74 [ 83.614474][ C1] ? reacquire_held_locks+0x4b0/0x4b0 [ 83.619653][ T5466] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 00007ffa30c5c000 [ 83.625755][ C1] ? snprintf+0xc8/0x100 [ 83.631010][ T5466] RBP: 00007ffe3945a7a0 R08: 0000000000000003 R09: 0000000000052000 [ 83.635753][ C1] ? reiserfs_remount+0x1640/0x1640 [ 83.640923][ T5466] R10: 0000000000000812 R11: 0000000000000246 R12: 00007ffa30f0a570 [ 83.648878][ C1] mount_bdev+0x30d/0x3d0 [ 83.654225][ T5466] R13: 00007ffe3945a828 R14: 0000000000052120 R15: 0000000000000000 [ 83.662185][ C1] ? reiserfs_kill_sb+0x1e0/0x1e0 [ 83.666432][ T5466] [ 83.674460][ C1] legacy_get_tree+0x109/0x220 [ 83.680847][ T5466] Modules linked in: [ 83.688798][ C1] vfs_get_tree+0x88/0x350 [ 83.693218][ T5466] ---[ end trace 0000000000000000 ]--- [ 83.693231][ T5466] RIP: 0010:debug_check_no_obj_freed+0x1fe/0x4c0 [ 83.701221][ C1] path_mount+0x1492/0x1ed0 [ 83.706321][ T5466] Code: 02 00 00 48 be 00 01 00 00 00 00 ad de 48 89 53 08 48 89 c7 48 89 30 4c 89 68 08 e8 ec d2 ff ff 48 89 d8 48 89 c2 48 c1 ea 03 <42> 80 3c 22 00 0f 84 27 ff ff ff 48 89 c7 48 89 44 24 50 e8 ba fa [ 83.709344][ C1] ? kmem_cache_free+0xf0/0x490 [ 83.714255][ T5466] RSP: 0018:ffffc900053a77a0 EFLAGS: 00010006 [ 83.718305][ C1] ? finish_automount+0xa50/0xa50 [ 83.722751][ T5466] [ 83.722756][ T5466] RAX: 0000000200000001 RBX: 0000000200000001 RCX: ffffffff816850de [ 83.728183][ C1] ? putname+0x101/0x140 [ 83.734584][ T5466] RDX: 0000000040000000 RSI: ffff88807d948200 RDI: ffff8880701f2e50 [ 83.739436][ C1] __x64_sys_mount+0x293/0x310 [ 83.759186][ T5466] RBP: 0000000000000001 R08: 0000000000000001 R09: fffff52000a74ee2 [ 83.764029][ C1] ? copy_mnt_ns+0xb60/0xb60 [ 83.770250][ T5466] R10: 0000000000000003 R11: 0000000000094000 R12: dffffc0000000000 [ 83.775254][ C1] ? syscall_enter_from_user_mode+0x26/0x80 [ 83.777559][ T5466] R13: dead000000000122 R14: ffff88807d948200 R15: ffff88807d948300 [ 83.785516][ C1] do_syscall_64+0x38/0xb0 [ 83.789817][ T5466] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 83.798114][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.802853][ T5466] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.810797][ C1] RIP: 0033:0x7f631447df9a [ 83.815447][ T5466] CR2: 00007ffa30c7fba8 CR3: 0000000070adf000 CR4: 00000000003506f0 [ 83.823479][ C1] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 83.829509][ T5466] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.837458][ C1] RSP: 002b:00007f63151aaee8 EFLAGS: 00000246 [ 83.841947][ T5466] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.850935][ C1] ORIG_RAX: 00000000000000a5 [ 83.857449][ T5466] Kernel panic - not syncing: Fatal exception [ 83.864017][ C1] RAX: ffffffffffffffda RBX: 00007f63151aaf80 RCX: 00007f631447df9a [ 83.868415][ C1] RDX: 0000000020001100 RSI: 0000000020000180 RDI: 00007f63151aaf40 [ 83.876374][ C1] RBP: 0000000020001100 R08: 00007f63151aaf80 R09: 0000000000000080 [ 83.896405][ C1] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000020000180 [ 83.904376][ C1] R13: 00007f63151aaf40 R14: 00000000000010e4 R15: 00000000200001c0 [ 83.910441][ C1] [ 83.918400][ C1] [ 83.923054][ C1] The buggy address belongs to stack of task syz-executor.0/5454 [ 83.929113][ C1] [ 83.937066][ C1] The buggy address belongs to the virtual mapping at [ 83.937066][ C1] [ffffc90005300000, ffffc90005309000) created by: [ 83.937066][ C1] kernel_clone+0xfd/0x930 [ 83.945218][ C1] [ 83.953361][ C1] The buggy address belongs to the physical page: [ 83.961329][ C1] page:ffffea0001c2f300 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x70bcc [ 83.969311][ C1] memcg:ffff888149f3a302 [ 83.972317][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 83.974641][ C1] page_type: 0xffffffff() [ 83.982434][ C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 83.984760][ C1] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff888149f3a302 [ 84.002264][ C1] page dumped because: kasan: bad access detected [ 84.004669][ C1] page_owner tracks the page as allocated [ 84.011241][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 5429, tgid 5429 (dhcpcd-run-hook), ts 82117961198, free_ts 74793648229 [ 84.021401][ C1] post_alloc_hook+0x2d2/0x350 [ 84.025827][ C1] get_page_from_freelist+0x10d7/0x31b0 [ 84.032947][ C1] __alloc_pages+0x1d0/0x4a0 [ 84.037297][ C1] alloc_pages+0x1a9/0x270 [ 84.045894][ C1] __vmalloc_node_range+0xa6e/0x1540 [ 84.054740][ C1] copy_process+0x13f1/0x7400 [ 84.061144][ C1] kernel_clone+0xfd/0x930 [ 84.066847][ C1] __do_sys_clone+0xba/0x100 [ 84.085706][ C1] do_syscall_64+0x38/0xb0 [ 84.090464][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 84.096006][ C1] page last free stack trace: [ 84.100831][ C1] free_unref_page_prepare+0x508/0xb90 [ 84.105243][ C1] free_unref_page_list+0xe6/0xb30 [ 84.110606][ C1] release_pages+0x32a/0x14e0 [ 84.115340][ C1] tlb_batch_pages_flush+0x9a/0x190 [ 84.119855][ C1] tlb_finish_mmu+0x14b/0x6f0 [ 84.124437][ C1] exit_mmap+0x35f/0x9e0 [ 84.128841][ C1] __mmput+0x12a/0x4d0 [ 84.134808][ C1] mmput+0x62/0x70 [ 84.139466][ C1] do_exit+0x9b4/0x2a20 [ 84.145089][ C1] do_group_exit+0xd4/0x2a0 [ 84.151241][ C1] __x64_sys_exit_group+0x3e/0x50 [ 84.156171][ C1] do_syscall_64+0x38/0xb0 [ 84.161373][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 84.166220][ C1] [ 84.170522][ C1] Memory state around the buggy address: [ 84.174657][ C1] ffffc90005306e00: 48 00 04 00 00 00 00 00 01 00 00 00 02 00 00 00 [ 84.178360][ C1] ffffc90005306e80: 48 00 04 00 00 00 00 00 01 00 00 00 02 00 00 00 [ 84.182496][ C1] >ffffc90005306f00: 48 00 04 00 00 00 00 00 01 00 00 00 02 00 00 00 [ 84.186976][ C1] ^ [ 84.192063][ C1] ffffc90005306f80: 48 00 04 00 00 00 00 00 01 00 00 00 02 00 00 00 [ 84.196646][ C1] ffffc90005307000: 48 00 04 00 00 00 00 00 01 00 00 00 02 00 00 00 [ 84.202778][ C1] ================================================================== [ 84.205630][ T5466] Kernel Offset: disabled [ 84.273201][ T5466] Rebooting in 86400 seconds..