[ 31.128700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.137177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.146598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.154854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.591253][ T7] device bridge_slave_1 left promiscuous mode [ 32.598729][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.606560][ T7] device bridge_slave_0 left promiscuous mode [ 32.613309][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.621485][ T7] device veth1_macvtap left promiscuous mode [ 32.627584][ T7] device veth0_vlan left promiscuous mode Warning: Permanently added '10.128.1.142' (ED25519) to the list of known hosts. 2024/09/12 13:06:46 ignoring optional flag "sandboxArg"="0" 2024/09/12 13:06:46 parsed 1 programs [ 49.506439][ T24] kauditd_printk_skb: 16 callbacks suppressed [ 49.506452][ T24] audit: type=1400 audit(1726146407.020:92): avc: denied { unlink } for pid=444 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.549309][ T444] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.610939][ T24] audit: type=1400 audit(1726146407.120:93): avc: denied { mounton } for pid=459 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 50.041829][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.049237][ T492] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.057146][ T492] device bridge_slave_0 entered promiscuous mode [ 50.063902][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.070785][ T492] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.078056][ T492] device bridge_slave_1 entered promiscuous mode [ 50.114514][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.121471][ T492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.128693][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.135551][ T492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.152926][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.161236][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.169478][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.178721][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.186893][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.193893][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.202562][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.211377][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.218324][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.230275][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.239698][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.252825][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.265193][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.273046][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.281677][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.294801][ T492] device veth0_vlan entered promiscuous mode [ 50.304763][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.314245][ T492] device veth1_macvtap entered promiscuous mode [ 50.323857][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.338377][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2024/09/12 13:06:47 executed programs: 0 [ 50.480960][ T505] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.488688][ T505] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.496301][ T505] device bridge_slave_0 entered promiscuous mode [ 50.503603][ T505] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.510775][ T505] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.518370][ T505] device bridge_slave_1 entered promiscuous mode [ 50.563193][ T505] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.570512][ T505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.577744][ T505] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.584616][ T505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.608165][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.616190][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.623200][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.637938][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.646464][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.653285][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.666734][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.674906][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.681909][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.693981][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.703303][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.722703][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.735501][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.743578][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.751526][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.760737][ T505] device veth0_vlan entered promiscuous mode [ 50.772757][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.782562][ T505] device veth1_macvtap entered promiscuous mode [ 50.793052][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.816275][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.875478][ T519] ====================================================== [ 50.875478][ T519] WARNING: the mand mount option is being deprecated and [ 50.875478][ T519] will be removed in v5.15! [ 50.875478][ T519] ====================================================== [ 50.876961][ T24] audit: type=1400 audit(1726146408.390:94): avc: denied { mounton } for pid=518 comm="syz-executor" path="/root/syzkaller-testdir205594043/syzkaller.q4WsCs/0/file1" dev="sda1" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 50.947398][ T519] EXT4-fs (loop0): 1 orphan inode deleted [ 50.952954][ T519] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 50.972118][ T519] ext4 filesystem being mounted at /root/syzkaller-testdir205594043/syzkaller.q4WsCs/0/file1 supports timestamps until 2038 (0x7fffffff) [ 50.972606][ T24] audit: type=1400 audit(1726146408.480:95): avc: denied { mount } for pid=518 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.013836][ T523] EXT4-fs error (device loop0): ext4_ext_remove_space:2835: inode #16: comm syz-executor: path[1].p_hdr == NULL [ 51.016983][ T24] audit: type=1400 audit(1726146408.520:96): avc: denied { write } for pid=518 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.026688][ T523] EXT4-fs (loop0): Remounting filesystem read-only [ 51.048022][ T24] audit: type=1400 audit(1726146408.520:97): avc: denied { add_name } for pid=518 comm="syz-executor" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.054168][ T523] EXT4-fs error (device loop0): __ext4_get_inode_loc:4437: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 51.076745][ T24] audit: type=1400 audit(1726146408.520:98): avc: denied { create } for pid=518 comm="syz-executor" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.088765][ T523] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5897: Corrupt filesystem [ 51.113815][ T24] audit: type=1400 audit(1726146408.520:99): avc: denied { write open } for pid=518 comm="syz-executor" path="/root/syzkaller-testdir205594043/syzkaller.q4WsCs/0/file1/bus" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.147775][ T523] EXT4-fs error (device loop0): ext4_punch_hole:4229: inode #16: comm syz-executor: mark_inode_dirty error [ 51.151990][ T24] audit: type=1400 audit(1726146408.520:100): avc: denied { read } for pid=518 comm="syz-executor" name="bus" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.182988][ T24] audit: type=1400 audit(1726146408.520:101): avc: denied { mounton } for pid=518 comm="syz-executor" path="/root/syzkaller-testdir205594043/syzkaller.q4WsCs/0/file1/bus" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.211936][ T505] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 51.441685][ T525] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.448996][ T525] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.456814][ T525] device bridge_slave_0 entered promiscuous mode [ 51.465750][ T525] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.472780][ T525] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.480336][ T525] device bridge_slave_1 entered promiscuous mode [ 51.520722][ T525] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.528141][ T525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.535334][ T525] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.542520][ T525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.561021][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.569424][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.576905][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.588328][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.596663][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.603660][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.612149][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.621036][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.627893][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.641496][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.651325][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.668055][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.679100][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.687540][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.695393][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.704028][ T7] device bridge_slave_1 left promiscuous mode [ 51.710968][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.719403][ T7] device bridge_slave_0 left promiscuous mode [ 51.725412][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.733486][ T7] device veth1_macvtap left promiscuous mode [ 51.739538][ T7] device veth0_vlan left promiscuous mode [ 51.818717][ T525] device veth0_vlan entered promiscuous mode [ 51.829410][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.838541][ T525] device veth1_macvtap entered promiscuous mode [ 51.847765][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.857723][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.916472][ T530] EXT4-fs (loop0): 1 orphan inode deleted [ 51.922026][ T530] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 51.941580][ T530] ext4 filesystem being mounted at /root/syzkaller-testdir4202627765/syzkaller.nC82cn/0/file1 supports timestamps until 2038 (0x7fffffff) [ 51.959383][ T534] EXT4-fs error (device loop0): ext4_free_blocks:5687: comm syz-executor: Freeing blocks not in datazone - block = 41, count = 1 [ 51.973324][ T534] EXT4-fs (loop0): Remounting filesystem read-only [ 51.980347][ T534] ================================================================== [ 51.988975][ T534] BUG: KASAN: out-of-bounds in ext4_ext_remove_space+0x1fbc/0x4e10 [ 51.996795][ T534] Read of size 18446744073709551604 at addr ffff88811ee6f018 by task syz-executor/534 [ 52.006394][ T534] [ 52.008754][ T534] CPU: 1 PID: 534 Comm: syz-executor Not tainted 5.10.225-syzkaller-1003235-g8d23314f588a #0 [ 52.019515][ T534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 52.029756][ T534] Call Trace: [ 52.032969][ T534] dump_stack_lvl+0x1e2/0x24b [ 52.037509][ T534] ? bfq_pos_tree_add_move+0x43b/0x43b [ 52.043044][ T534] ? panic+0x812/0x812 [ 52.046948][ T534] print_address_description+0x81/0x3b0 [ 52.052441][ T534] kasan_report+0x179/0x1c0 [ 52.056757][ T534] ? ext4_ext_remove_space+0x1fbc/0x4e10 [ 52.062220][ T534] ? ext4_ext_remove_space+0x1fbc/0x4e10 [ 52.067696][ T534] kasan_check_range+0x293/0x2a0 [ 52.072552][ T534] ? ext4_ext_remove_space+0x1fbc/0x4e10 [ 52.078233][ T534] memmove+0x2d/0x70 [ 52.082533][ T534] ext4_ext_remove_space+0x1fbc/0x4e10 [ 52.087915][ T534] ? _raw_spin_trylock_bh+0x190/0x190 [ 52.093136][ T534] ? _raw_write_lock+0xa4/0x170 [ 52.097898][ T534] ? ext4_ext_index_trans_blocks+0x120/0x120 [ 52.105641][ T534] ? ext4_es_remove_extent+0x297/0x460 [ 52.112194][ T534] ? ext4_zero_partial_blocks+0x1e5/0x220 [ 52.117919][ T534] ext4_punch_hole+0x720/0xb10 [ 52.122657][ T534] ext4_fallocate+0x2e8/0x1ca0 [ 52.128486][ T534] ? _copy_from_user+0x96/0xd0 [ 52.133237][ T534] ? ext4_ext_truncate+0x200/0x200 [ 52.138391][ T534] ? fsnotify_perm+0x67/0x4e0 [ 52.143256][ T534] ? security_file_permission+0x7b/0xb0 [ 52.149228][ T534] ? preempt_count_add+0x92/0x1a0 [ 52.154651][ T534] vfs_fallocate+0x492/0x570 [ 52.159442][ T534] __x64_sys_fallocate+0xc0/0x110 [ 52.164692][ T534] do_syscall_64+0x34/0x70 [ 52.168941][ T534] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 52.174746][ T534] RIP: 0033:0x7f403b281f69 [ 52.179206][ T534] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.198979][ T534] RSP: 002b:00007f403ade30c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 52.207828][ T534] RAX: ffffffffffffffda RBX: 00007f403b3b9050 RCX: 00007f403b281f69 [ 52.215894][ T534] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 52.223801][ T534] RBP: 00007f403b2df6fe R08: 0000000000000000 R09: 0000000000000000 [ 52.231793][ T534] R10: 0000000000001a00 R11: 0000000000000246 R12: 0000000000000000 [ 52.239853][ T534] R13: 000000000000000b R14: 00007f403b3b9050 R15: 00007ffc63965628 [ 52.247987][ T534] [ 52.250231][ T534] The buggy address belongs to the page: [ 52.256196][ T534] page:ffffea00047b9bc0 refcount:2 mapcount:0 mapping:ffff88810044a8d0 index:0x27 pfn:0x11ee6f [ 52.266663][ T534] aops:def_blk_aops ino:0 [ 52.270912][ T534] flags: 0x4000000000002036(referenced|uptodate|lru|active|private) [ 52.278991][ T534] raw: 4000000000002036 ffffea00047b9d08 ffffea000452f408 ffff88810044a8d0 [ 52.287413][ T534] raw: 0000000000000027 ffff888122c892a0 00000002ffffffff ffff888120058000 [ 52.295991][ T534] page dumped because: kasan: bad access detected [ 52.302258][ T534] page->mem_cgroup:ffff888120058000 [ 52.307288][ T534] page_owner tracks the page as allocated [ 52.312838][ T534] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 530, ts 51957793312, free_ts 51227936441 [ 52.329910][ T534] prep_new_page+0x166/0x180 [ 52.334325][ T534] get_page_from_freelist+0x2d8c/0x2f30 [ 52.339698][ T534] __alloc_pages_nodemask+0x435/0xaf0 [ 52.345020][ T534] pagecache_get_page+0x669/0x950 [ 52.349975][ T534] __getblk_gfp+0x221/0x7e0 [ 52.354305][ T534] ext4_ext_insert_extent+0xf88/0x4d20 [ 52.359600][ T534] ext4_split_extent_at+0x812/0x1110 [ 52.364714][ T534] ext4_split_extent+0x1bd/0x4e0 [ 52.369485][ T534] ext4_ext_map_blocks+0x2206/0x6ee0 [ 52.374612][ T534] ext4_map_blocks+0xa65/0x1d10 [ 52.379299][ T534] _ext4_get_block+0x21b/0x610 [ 52.383907][ T534] ext4_get_block_unwritten+0x2a/0x40 [ 52.389102][ T534] ext4_block_write_begin+0x61e/0x13b0 [ 52.394400][ T534] ext4_write_begin+0x6fa/0x1730 [ 52.399172][ T534] ext4_da_write_begin+0x49d/0xf60 [ 52.404131][ T534] generic_perform_write+0x2cd/0x570 [ 52.409329][ T534] page last free stack trace: [ 52.414030][ T534] free_unref_page_prepare+0x2ae/0x2d0 [ 52.420025][ T534] free_unref_page_list+0x122/0xb20 [ 52.425522][ T534] release_pages+0xea0/0xef0 [ 52.430032][ T534] free_pages_and_swap_cache+0x8a/0xa0 [ 52.435317][ T534] tlb_finish_mmu+0x177/0x320 [ 52.439828][ T534] exit_mmap+0x312/0x5c0 [ 52.444023][ T534] __mmput+0x95/0x2d0 [ 52.447997][ T534] mmput+0x59/0x170 [ 52.451725][ T534] do_exit+0xbda/0x2a50 [ 52.456076][ T534] do_group_exit+0x141/0x310 [ 52.460927][ T534] __x64_sys_exit_group+0x3f/0x40 [ 52.465864][ T534] do_syscall_64+0x34/0x70 [ 52.470149][ T534] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 52.475930][ T534] [ 52.478193][ T534] Memory state around the buggy address: [ 52.483935][ T534] ffff88811ee6ef00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 52.491824][ T534] ffff88811ee6ef80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 52.499902][ T534] >ffff88811ee6f000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 52.508039][ T534] ^ [ 52.513004][ T534] ffff88811ee6f080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 52.521349][ T534] ffff88811ee6f100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 52.529489][ T534] ================================================================== [ 52.537566][ T534] Disabling lock debugging due to kernel taint [ 52.546931][ T534] EXT4-fs error (device loop0): __ext4_get_inode_loc:4437: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 52.560170][ T534] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5897: Corrupt filesystem [ 52.570061][ T534] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #16: comm syz-executor: mark_inode_dirty error [ 52.582209][ T534] EXT4-fs error (device loop0): __ext4_get_inode_loc:4437: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 52.595841][ T534] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5897: Corrupt filesystem [ 52.606072][ T534] EXT4-fs error (device loop0): ext4_punch_hole:4229: inode #16: comm syz-executor: mark_inode_dirty error [ 52.629029][ T525] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 52.895379][ T537] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.902709][ T537] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.910200][ T537] device bridge_slave_0 entered promiscuous mode [ 52.917018][ T537] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.923941][ T537] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.931937][ T537] device bridge_slave_1 entered promiscuous mode [ 52.971505][ T537] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.978974][ T537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.986328][ T537] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.993269][ T537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.012794][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.020730][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.028324][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.039950][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.049190][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.056753][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.066637][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.074997][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.082367][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.096617][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.105811][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.120209][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.133742][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.143388][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.151982][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.160937][ T537] device veth0_vlan entered promiscuous mode [ 53.172700][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.182479][ T537] device veth1_macvtap entered promiscuous mode [ 53.192367][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.202913][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.266877][ T542] EXT4-fs (loop0): 1 orphan inode deleted [ 53.273062][ T542] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 53.292778][ T542] ext4 filesystem being mounted at /root/syzkaller-testdir512267436/syzkaller.gIntYT/0/file1 supports timestamps until 2038 (0x7fffffff) [ 53.312337][ T546] EXT4-fs error (device loop0): ext4_ext_remove_space:2835: inode #16: comm syz-executor: path[1].p_hdr == NULL [ 53.325063][ T546] EXT4-fs (loop0): Remounting filesystem read-only [ 53.325296][ T7] device bridge_slave_1 left promiscuous mode [ 53.331581][ T546] EXT4-fs error (device loop0): __ext4_get_inode_loc:4437: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 53.331785][ T546] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5897: Corrupt filesystem [ 53.337842][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.351162][ T546] EXT4-fs error (device loop0): ext4_punch_hole:4229: inode #16: comm syz-executor: mark_inode_dirty error [ 53.377947][ T7] device bridge_slave_0 left promiscuous mode [ 53.384563][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.392971][ T7] device veth1_macvtap left promiscuous mode [ 53.393282][ T537] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 53.398861][ T7] device veth0_vlan left promiscuous mode [ 53.605083][ T549] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.612406][ T549] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.620042][ T549] device bridge_slave_0 entered promiscuous mode [ 53.627105][ T549] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.633961][ T549] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.641539][ T549] device bridge_slave_1 entered promiscuous mode [ 53.680308][ T549] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.687730][ T549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.695294][ T549] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.702374][ T549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.723797][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.731677][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.739497][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.749294][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.758646][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.765594][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.775692][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.783783][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.790647][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.803672][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.813961][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.828632][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.840918][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.849286][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.857014][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.870927][ T549] device veth0_vlan entered promiscuous mode [ 53.880992][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.890732][ T549] device veth1_macvtap entered promiscuous mode [ 53.902977][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.911799][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.921328][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.930214][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.996925][ T554] EXT4-fs (loop0): 1 orphan inode deleted [ 54.002592][ T554] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 54.022387][ T554] ext4 filesystem being mounted at /root/syzkaller-testdir3104090246/syzkaller.dFzwM7/0/file1 supports timestamps until 2038 (0x7fffffff) [ 54.043613][ T558] EXT4-fs error (device loop0): ext4_free_blocks:5687: comm syz-executor: Freeing blocks not in datazone - block = 41, count = 1 [ 54.057960][ T558] EXT4-fs (loop0): Remounting filesystem read-only [ 54.074474][ C0] BUG: unable to handle page fault for address: ffff89c2f7200010 [ 54.082367][ C0] #PF: supervisor write access in kernel mode [ 54.088866][ C0] #PF: error_code(0x0002) - not-present page [ 54.094847][ C0] PGD 0 P4D 0 [ 54.098185][ C0] Oops: 0002 [#1] PREEMPT SMP KASAN [ 54.103534][ C0] CPU: 0 PID: 558 Comm: syz-executor Tainted: G B 5.10.225-syzkaller-1003235-g8d23314f588a #0 [ 54.115529][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 54.126362][ C0] RIP: 0010:cpuacct_account_field+0xc9/0x120 [ 54.133053][ C0] Code: 8d ab f0 00 00 00 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 85 a6 58 00 4d 8b 6d 00 41 83 ff 0b 73 29 48 8b 45 c8 <65> 4b 01 44 f5 00 48 81 c3 e0 00 00 00 48 89 d8 48 c1 e8 03 42 80 [ 54.153232][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010093 [ 54.159349][ C0] RAX: 000000000097d938 RBX: ffff88811fc07800 RCX: dffffc0000000000 [ 54.167332][ C0] RDX: 000000000097d938 RSI: ffffffff850844a0 RDI: ffffffff85602400 [ 54.175659][ C0] RBP: ffffc90000007c10 R08: ffffffff815eb4a1 R09: 0000000000000003 [ 54.184279][ C0] R10: fffff52000000fc0 R11: dffffc0000000001 R12: dffffc0000000000 [ 54.192354][ C0] R13: 0000014100000000 R14: 0000000000000002 R15: 0000000000000002 [ 54.200256][ C0] FS: 00007fe6ecba26c0(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 [ 54.209119][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.215623][ C0] CR2: ffff89c2f7200010 CR3: 000000011665d000 CR4: 00000000003506b0 [ 54.223722][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.231541][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.239437][ C0] Call Trace: [ 54.242551][ C0] [ 54.245258][ C0] ? __die_body+0x62/0xb0 [ 54.249567][ C0] ? __die+0x7e/0x90 [ 54.253573][ C0] ? no_context+0x9f9/0xd20 [ 54.258383][ C0] ? enqueue_task_fair+0xd14/0x2820 [ 54.263535][ C0] ? is_prefetch+0x5c0/0x5c0 [ 54.268038][ C0] ? __bad_area_nosemaphore+0xc4/0x430 [ 54.273332][ C0] ? bad_area_nosemaphore+0x2d/0x40 [ 54.278544][ C0] ? do_kern_addr_fault+0x69/0x80 [ 54.283595][ C0] ? exc_page_fault+0x38e/0x5b0 [ 54.288621][ C0] ? asm_exc_page_fault+0x1e/0x30 [ 54.293925][ C0] ? tick_sched_timer+0x181/0x240 [ 54.298886][ C0] ? cpuacct_account_field+0xc9/0x120 [ 54.304088][ C0] ? cpuacct_account_field+0x9e/0x120 [ 54.309292][ C0] account_system_index_time+0xf6/0x1d0 [ 54.314653][ C0] irqtime_account_process_tick+0x111/0x510 [ 54.320569][ C0] account_process_tick+0x72/0x460 [ 54.325706][ C0] update_process_times+0x7e/0x200 [ 54.330644][ C0] tick_sched_timer+0x188/0x240 [ 54.335334][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 54.341245][ C0] __hrtimer_run_queues+0x3d7/0xa50 [ 54.346556][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 54.351584][ C0] ? clockevents_program_event+0x214/0x2c0 [ 54.357227][ C0] ? ktime_get_update_offsets_now+0x266/0x280 [ 54.363315][ C0] hrtimer_interrupt+0x39a/0x8b0 [ 54.368482][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 54.374292][ C0] asm_call_irq_on_stack+0xf/0x20 [ 54.379213][ C0] [ 54.382086][ C0] sysvec_apic_timer_interrupt+0x85/0xe0 [ 54.387577][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 54.393379][ C0] RIP: 0010:__memmove+0x19c/0x1a0 [ 54.398324][ C0] Code: fa 02 72 16 66 44 8b 1e 66 44 8b 54 16 fe 66 44 89 1f 66 44 89 54 17 fe eb 0c 48 83 fa 01 72 06 44 8a 1e 44 88 1f c3 48 89 d1 a4 c3 cc eb 2e 0f 1f 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 [ 54.418407][ C0] RSP: 0018:ffffc900047cf960 EFLAGS: 00010286 [ 54.424389][ C0] RAX: ffff88811ed6e00c RBX: ffffffff81d7023c RCX: fffffffffe9f9389 [ 54.432326][ C0] RDX: fffffffffffffff4 RSI: ffff888120374c83 RDI: ffff888120374c77 [ 54.440197][ C0] RBP: ffffc900047cf990 R08: ffffffff81d70123 R09: fffff520008f9da1 [ 54.448003][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: fffffffffffffff4 [ 54.456100][ C0] R13: 0000000000000000 R14: ffff88811ed6e018 R15: ffff88811ed6e00c [ 54.464092][ C0] ? ext4_ext_remove_space+0x1fbc/0x4e10 [ 54.469551][ C0] ? ext4_ext_remove_space+0x1ea3/0x4e10 [ 54.476049][ C0] ? memmove+0x56/0x70 [ 54.480178][ C0] ext4_ext_remove_space+0x1fbc/0x4e10 [ 54.485680][ C0] ? _raw_spin_trylock_bh+0x190/0x190 [ 54.490879][ C0] ? _raw_write_lock+0xa4/0x170 [ 54.495557][ C0] ? ext4_ext_index_trans_blocks+0x120/0x120 [ 54.501380][ C0] ? ext4_es_remove_extent+0x297/0x460 [ 54.506672][ C0] ? ext4_zero_partial_blocks+0x1e5/0x220 [ 54.512221][ C0] ext4_punch_hole+0x720/0xb10 [ 54.516893][ C0] ext4_fallocate+0x2e8/0x1ca0 [ 54.521593][ C0] ? _copy_from_user+0x96/0xd0 [ 54.526212][ C0] ? ext4_ext_truncate+0x200/0x200 [ 54.531260][ C0] ? fsnotify_perm+0x67/0x4e0 [ 54.535771][ C0] ? security_file_permission+0x7b/0xb0 [ 54.541169][ C0] ? preempt_count_add+0x92/0x1a0 [ 54.546188][ C0] vfs_fallocate+0x492/0x570 [ 54.550737][ C0] __x64_sys_fallocate+0xc0/0x110 [ 54.555583][ C0] do_syscall_64+0x34/0x70 [ 54.559873][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 54.566029][ C0] RIP: 0033:0x7fe6ed040f69 [ 54.570226][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 54.589766][ C0] RSP: 002b:00007fe6ecba20c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 54.598018][ C0] RAX: ffffffffffffffda RBX: 00007fe6ed178050 RCX: 00007fe6ed040f69 [ 54.606513][ C0] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 54.614413][ C0] RBP: 00007fe6ed09e6fe R08: 0000000000000000 R09: 0000000000000000 [ 54.622569][ C0] R10: 0000000000001a00 R11: 0000000000000246 R12: 0000000000000000 [ 54.630417][ C0] R13: 000000000000000b R14: 00007fe6ed178050 R15: 00007ffcb1020e68 [ 54.638291][ C0] Modules linked in: [ 54.642138][ C0] CR2: ffff89c2f7200010 [ 54.646404][ C0] ---[ end trace 46c01c927cac68c0 ]--- [ 54.646448][ C1] general protection fault, probably for non-canonical address 0xa8a000ea00000011: 0000 [#2] PREEMPT SMP KASAN [ 54.652128][ C0] RIP: 0010:cpuacct_account_field+0xc9/0x120 [ 54.664176][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B D 5.10.225-syzkaller-1003235-g8d23314f588a #0 [ 54.670130][ C0] Code: 8d ab f0 00 00 00 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 85 a6 58 00 4d 8b 6d 00 41 83 ff 0b 73 29 48 8b 45 c8 <65> 4b 01 44 f5 00 48 81 c3 e0 00 00 00 48 89 d8 48 c1 e8 03 42 80 [ 54.681201][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 54.701020][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010093 [ 54.711273][ C1] RIP: 0010:__stack_depot_save+0x1d5/0x4d0 [ 54.711278][ C0] [ 54.711298][ C0] RAX: 000000000097d938 RBX: ffff88811fc07800 RCX: dffffc0000000000 [ 54.717337][ C1] Code: fb 48 8b 05 45 7f 40 04 44 89 e6 81 e6 ff 0f 00 00 48 89 45 a8 48 89 75 b0 4c 8b 3c f0 45 89 ee eb 03 4d 8b 3f 4d 85 ff 74 2a <45> 39 67 08 75 f2 45 39 6f 0c 75 ec 31 c0 48 8b 34 c3 49 3b 74 c7 [ 54.722973][ C0] RDX: 000000000097d938 RSI: ffffffff850844a0 RDI: ffffffff85602400 [ 54.725136][ C1] RSP: 0018:ffffc900001706c8 EFLAGS: 00010286 [ 54.733123][ C0] RBP: ffffc90000007c10 R08: ffffffff815eb4a1 R09: 0000000000000003 [ 54.755293][ C1] [ 54.764058][ C0] R10: fffff52000000fc0 R11: dffffc0000000001 R12: dffffc0000000000 [ 54.769987][ C1] RAX: ffff88823fe00000 RBX: ffffc90000170730 RCX: 0000000000000001 [ 54.769996][ C1] RDX: 0000000000000a20 RSI: 0000000000000ab4 RDI: ffffc90000170730 [ 54.770015][ C1] RBP: ffffc90000170720 R08: 0000000000000003 R09: ffffc90000170784 [ 54.777966][ C0] R13: 0000014100000000 R14: 0000000000000002 R15: 0000000000000002 [ 54.780136][ C1] R10: 00000000d95c883f R11: 0000000076d66e62 R12: 000000009e8ecab4 [ 54.788211][ C0] FS: 00007fe6ecba26c0(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 [ 54.796011][ C1] R13: 000000000000000c R14: 000000000000000c R15: a8a000ea00000011 [ 54.804007][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.804023][ C0] CR2: ffff89c2f7200010 CR3: 000000011665d000 CR4: 00000000003506b0 [ 54.811810][ C1] FS: 0000000000000000(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 [ 54.819887][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.827692][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.836471][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.847503][ C1] CR2: 000000002004007f CR3: 000000011665d000 CR4: 00000000003506a0 [ 54.853989][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 54.862158][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.916619][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.924694][ C1] Call Trace: [ 54.927998][ C1] [ 54.930712][ C1] ? __die_body+0x62/0xb0 [ 54.934884][ C1] ? die_addr+0x9f/0xd0 [ 54.938847][ C1] ? exc_general_protection+0x3ff/0x490 [ 54.944243][ C1] ? asm_exc_general_protection+0x1e/0x30 [ 54.949970][ C1] ? __stack_depot_save+0x1d5/0x4d0 [ 54.955161][ C1] __kasan_slab_alloc+0xc3/0xe0 [ 54.959846][ C1] ? __kasan_slab_alloc+0xb1/0xe0 [ 54.964800][ C1] ? slab_post_alloc_hook+0x61/0x2f0 [ 54.970002][ C1] ? kmem_cache_alloc+0x168/0x2e0 [ 54.974863][ C1] ? dst_alloc+0x17d/0x590 [ 54.979204][ C1] ? icmp6_dst_alloc+0xfc/0x560 [ 54.983895][ C1] ? mld_sendpack+0x4d8/0xb40 [ 54.988573][ C1] ? mld_send_initial_cr+0x244/0x2b0 [ 54.994166][ C1] ? mld_dad_timer_expire+0x30/0x3f0 [ 54.999364][ C1] ? call_timer_fn+0x3b/0x2d0 [ 55.004135][ C1] ? __run_timers+0x72a/0xa10 [ 55.009099][ C1] ? run_timer_softirq+0x69/0xf0 [ 55.014034][ C1] ? __do_softirq+0x268/0x5bb [ 55.018818][ C1] ? asm_call_irq_on_stack+0xf/0x20 [ 55.023856][ C1] ? do_softirq_own_stack+0x60/0x80 [ 55.028921][ C1] ? __irq_exit_rcu+0x128/0x150 [ 55.033663][ C1] ? irq_exit_rcu+0x9/0x10 [ 55.037912][ C1] ? sysvec_apic_timer_interrupt+0xbf/0xe0 [ 55.043639][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 55.049629][ C1] ? acpi_idle_enter+0x416/0x760 [ 55.054611][ C1] ? cpuidle_enter_state+0x5eb/0x17e0 [ 55.059805][ C1] ? cpuidle_enter+0x5f/0xa0 [ 55.064236][ C1] ? do_idle+0x364/0x5c0 [ 55.068401][ C1] ? cpu_startup_entry+0x18/0x20 [ 55.073297][ C1] ? start_secondary+0x2e9/0x3a0 [ 55.078062][ C1] ? secondary_startup_64_no_verify+0xad/0xbb [ 55.084062][ C1] slab_post_alloc_hook+0x61/0x2f0 [ 55.089038][ C1] ? dst_alloc+0x17d/0x590 [ 55.093337][ C1] kmem_cache_alloc+0x168/0x2e0 [ 55.098231][ C1] ? sock_kzfree_s+0x60/0x60 [ 55.102746][ C1] ? dst_alloc+0x17d/0x590 [ 55.107188][ C1] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 55.113290][ C1] dst_alloc+0x17d/0x590 [ 55.117631][ C1] icmp6_dst_alloc+0xfc/0x560 [ 55.122520][ C1] ? security_sk_classify_flow+0x7a/0x90 [ 55.128304][ C1] mld_sendpack+0x4d8/0xb40 [ 55.132700][ C1] ? add_grec+0x13b0/0x13b0 [ 55.137775][ C1] ? memcpy+0x56/0x70 [ 55.142082][ C1] ? add_grec+0x112/0x13b0 [ 55.146596][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 55.151738][ C1] mld_send_initial_cr+0x244/0x2b0 [ 55.158150][ C1] mld_dad_timer_expire+0x30/0x3f0 [ 55.163433][ C1] ? mld_ifc_timer_expire+0xbf0/0xbf0 [ 55.168733][ C1] call_timer_fn+0x3b/0x2d0 [ 55.173152][ C1] ? mld_ifc_timer_expire+0xbf0/0xbf0 [ 55.178446][ C1] __run_timers+0x72a/0xa10 [ 55.182805][ C1] ? calc_index+0x270/0x270 [ 55.187386][ C1] ? sched_clock_cpu+0x1b/0x3b0 [ 55.192355][ C1] run_timer_softirq+0x69/0xf0 [ 55.197021][ C1] __do_softirq+0x268/0x5bb [ 55.201357][ C1] asm_call_irq_on_stack+0xf/0x20 [ 55.206259][ C1] [ 55.209010][ C1] do_softirq_own_stack+0x60/0x80 [ 55.213864][ C1] __irq_exit_rcu+0x128/0x150 [ 55.218557][ C1] irq_exit_rcu+0x9/0x10 [ 55.222722][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 55.228373][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 55.234179][ C1] RIP: 0010:acpi_idle_enter+0x416/0x760 [ 55.239640][ C1] Code: 89 de 48 83 e6 08 31 ff e8 b7 6b b8 fc 48 83 e3 08 0f 85 b0 00 00 00 0f 1f 44 00 00 e8 63 67 b8 fc 0f 00 2d 7c 0e b4 00 fb f4 e9 e1 00 00 00 49 83 c7 04 4c 89 f8 48 c1 e8 03 42 0f b6 04 30 [ 55.259632][ C1] RSP: 0018:ffffc90000107c10 EFLAGS: 000002d3 [ 55.265956][ C1] RAX: ffffffff84b2457d RBX: 0000000000000000 RCX: ffff88810029a780 [ 55.273755][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.281667][ C1] RBP: ffffc90000107c50 R08: ffffffff84b24569 R09: ffffed10200534f1 [ 55.289817][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 55.297820][ C1] R13: ffff8881041d8804 R14: dffffc0000000000 R15: ffff8881063e8864 [ 55.305643][ C1] ? acpi_idle_enter+0x3f9/0x760 [ 55.310405][ C1] ? acpi_idle_enter+0x40d/0x760 [ 55.315208][ C1] ? intel_idle_ibrs+0x130/0x130 [ 55.320128][ C1] cpuidle_enter_state+0x5eb/0x17e0 [ 55.325350][ C1] ? cpuidle_enter_s2idle+0x600/0x600 [ 55.330549][ C1] ? menu_enable_device+0x380/0x380 [ 55.336068][ C1] ? rcu_nocb_flush_deferred_wakeup+0x67/0x2f0 [ 55.342146][ C1] ? sched_clock_cpu+0x1b/0x3b0 [ 55.347625][ C1] cpuidle_enter+0x5f/0xa0 [ 55.352119][ C1] do_idle+0x364/0x5c0 [ 55.356026][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 55.361068][ C1] cpu_startup_entry+0x18/0x20 [ 55.365752][ C1] start_secondary+0x2e9/0x3a0 [ 55.370348][ C1] secondary_startup_64_no_verify+0xad/0xbb [ 55.376257][ C1] Modules linked in: [ 55.380513][ C0] Kernel Offset: disabled [ 55.384869][ C0] Rebooting in 86400 seconds..