Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. [ 183.933153][ T27] audit: type=1400 audit(1702107276.960:83): avc: denied { execmem } for pid=5071 comm="syz-executor135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 183.954385][ T27] audit: type=1400 audit(1702107276.970:84): avc: denied { read write } for pid=5071 comm="syz-executor135" name="loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.981941][ T27] audit: type=1400 audit(1702107276.970:85): avc: denied { open } for pid=5071 comm="syz-executor135" path="/dev/loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.023627][ T27] audit: type=1400 audit(1702107276.970:86): avc: denied { ioctl } for pid=5071 comm="syz-executor135" path="/dev/loop0" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.050764][ T27] audit: type=1400 audit(1702107277.040:87): avc: denied { append } for pid=4493 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 184.069971][ T5072] loop0: detected capacity change from 0 to 8192 [ 184.073728][ T27] audit: type=1400 audit(1702107277.040:88): avc: denied { open } for pid=4493 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 184.084470][ T5072] ======================================================= [ 184.084470][ T5072] WARNING: The mand mount option has been deprecated and [ 184.084470][ T5072] and is ignored by this kernel. Remove the mand [ 184.084470][ T5072] option from the mount to silence this warning. [ 184.084470][ T5072] ======================================================= [ 184.101961][ T27] audit: type=1400 audit(1702107277.040:89): avc: denied { getattr } for pid=4493 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 184.159179][ T27] audit: type=1400 audit(1702107277.120:90): avc: denied { mounton } for pid=5072 comm="syz-executor135" path="/root/file0" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 184.185477][ T5072] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 184.198586][ T5072] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 184.208345][ T5072] REISERFS (device loop0): using ordered data mode [ 184.215054][ T5072] reiserfs: using flush barriers [ 184.222035][ T5072] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 184.239085][ T5072] REISERFS (device loop0): checking transaction log (loop0) [ 184.301564][ T5072] REISERFS (device loop0): Using tea hash to sort names [ 184.313188][ T0] ------------[ cut here ]------------ [ 184.313687][ T0] [ 184.313693][ T0] ====================================================== [ 184.313698][ T0] WARNING: possible circular locking dependency detected [ 184.313704][ T0] 6.7.0-rc4-syzkaller-00358-gf2e8a57ee903 #0 Not tainted [ 184.313714][ T0] ------------------------------------------------------ [ 184.313718][ T0] swapper/0/0 is trying to acquire lock: [ 184.313726][ T0] ffffffff8ceb5480 (console_owner){....}-{0:0}, at: console_flush_all+0x49a/0xd60 [ 184.313798][ T0] [ 184.313798][ T0] but task is already holding lock: [ 184.313803][ T0] ffff8880b983c758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 184.313850][ T0] [ 184.313850][ T0] which lock already depends on the new lock. [ 184.313850][ T0] [ 184.313854][ T0] [ 184.313854][ T0] the existing dependency chain (in reverse order) is: [ 184.313859][ T0] [ 184.313859][ T0] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 184.313884][ T0] _raw_spin_lock_nested+0x31/0x40 [ 184.313915][ T0] raw_spin_rq_lock_nested+0x29/0x130 [ 184.313939][ T0] task_fork_fair+0x70/0x240 [ 184.313960][ T0] sched_cgroup_fork+0x3cf/0x510 [ 184.313985][ T0] copy_process+0x4c86/0x73f0 [ 184.314007][ T0] kernel_clone+0xfd/0x930 [ 184.314027][ T0] user_mode_thread+0xb4/0xf0 [ 184.314047][ T0] rest_init+0x27/0x2b0 [ 184.314065][ T0] arch_call_rest_init+0x13/0x30 [ 184.314084][ T0] start_kernel+0x39f/0x480 [ 184.314101][ T0] x86_64_start_reservations+0x18/0x30 [ 184.314125][ T0] x86_64_start_kernel+0xb2/0xc0 [ 184.314149][ T0] secondary_startup_64_no_verify+0x166/0x16b [ 184.314175][ T0] [ 184.314175][ T0] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 184.314199][ T0] _raw_spin_lock_irqsave+0x3a/0x50 [ 184.314220][ T0] try_to_wake_up+0xb0/0x13d0 [ 184.314238][ T0] __wake_up_common+0x129/0x1d0 [ 184.314261][ T0] __wake_up+0x31/0x50 [ 184.314285][ T0] tty_port_default_wakeup+0x2a/0x40 [ 184.314313][ T0] serial8250_tx_chars+0x542/0x890 [ 184.314332][ T0] serial8250_handle_irq+0x5be/0x760 [ 184.314352][ T0] serial8250_default_handle_irq+0x94/0x210 [ 184.314374][ T0] serial8250_interrupt+0xfc/0x200 [ 184.314403][ T0] __handle_irq_event_percpu+0x22a/0x750 [ 184.314425][ T0] handle_irq_event+0xab/0x1e0 [ 184.314446][ T0] handle_edge_irq+0x261/0xcf0 [ 184.314472][ T0] __common_interrupt+0xdb/0x240 [ 184.314495][ T0] common_interrupt+0xab/0xd0 [ 184.314519][ T0] asm_common_interrupt+0x26/0x40 [ 184.314550][ T0] kasan_check_range+0x10d/0x190 [ 184.314571][ T0] page_table_check_set+0x49d/0x9a0 [ 184.314590][ T0] __page_table_check_ptes_set+0x1cc/0x220 [ 184.314610][ T0] set_pte_range+0x5a6/0xa10 [ 184.314633][ T0] filemap_map_pages+0x458/0x1290 [ 184.314657][ T0] __handle_mm_fault+0x25ac/0x3d70 [ 184.314680][ T0] handle_mm_fault+0x47a/0xa10 [ 184.314702][ T0] do_user_addr_fault+0x30b/0x1000 [ 184.314725][ T0] exc_page_fault+0x5d/0xc0 [ 184.314751][ T0] asm_exc_page_fault+0x26/0x30 [ 184.314779][ T0] [ 184.314779][ T0] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 184.314804][ T0] _raw_spin_lock_irqsave+0x3a/0x50 [ 184.314824][ T0] __wake_up+0x1c/0x50 [ 184.314849][ T0] tty_port_default_wakeup+0x2a/0x40 [ 184.314875][ T0] serial8250_tx_chars+0x542/0x890 [ 184.314896][ T0] serial8250_handle_irq+0x5be/0x760 [ 184.314921][ T0] serial8250_default_handle_irq+0x94/0x210 [ 184.314944][ T0] serial8250_interrupt+0xfc/0x200 [ 184.314972][ T0] __handle_irq_event_percpu+0x22a/0x750 [ 184.314994][ T0] handle_irq_event+0xab/0x1e0 [ 184.315015][ T0] handle_edge_irq+0x261/0xcf0 [ 184.315040][ T0] __common_interrupt+0xdb/0x240 [ 184.315062][ T0] common_interrupt+0xab/0xd0 [ 184.315086][ T0] asm_common_interrupt+0x26/0x40 [ 184.315114][ T0] _raw_spin_unlock_irqrestore+0x31/0x70 [ 184.315134][ T0] uart_write+0x316/0x5b0 [ 184.315157][ T0] n_tty_write+0x422/0x1130 [ 184.315177][ T0] file_tty_write.constprop.0+0x519/0x9b0 [ 184.315190][ T5071] list_del corruption. prev->next should be ffff88801f32f4f0, but was 0000000100040048. (prev=ffff88807d47b330) [ 184.315195][ T0] redirected_tty_write+0xa6/0xc0 [ 184.315213][ T0] vfs_write+0x64f/0xdf0 [ 184.315231][ T0] ksys_write+0x12f/0x250 [ 184.315247][ T0] do_syscall_64+0x40/0x110 [ 184.315265][ T0] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 184.315289][ T0] [ 184.315289][ T0] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 184.315308][ T0] _raw_spin_lock_irqsave+0x3a/0x50 [ 184.315324][ T0] serial8250_console_write+0xa7c/0x1060 [ 184.315342][ T0] console_flush_all+0x4d5/0xd60 [ 184.315366][ T0] console_unlock+0x10c/0x260 [ 184.315389][ T0] vprintk_emit+0x17f/0x5f0 [ 184.315402][ T0] vprintk+0x7b/0x90 [ 184.315416][ T0] _printk+0xc8/0x100 [ 184.315437][ T0] register_console+0xa74/0x1060 [ 184.315450][ T0] univ8250_console_init+0x35/0x50 [ 184.315466][ T0] console_init+0xba/0x5d0 [ 184.315480][ T0] start_kernel+0x25a/0x480 [ 184.315494][ T0] x86_64_start_reservations+0x18/0x30 [ 184.315514][ T0] x86_64_start_kernel+0xb2/0xc0 [ 184.315534][ T0] secondary_startup_64_no_verify+0x166/0x16b [ 184.315555][ T0] [ 184.315555][ T0] -> #0 (console_owner){....}-{0:0}: [ 184.315574][ T0] __lock_acquire+0x2433/0x3b20 [ 184.315597][ T0] lock_acquire+0x1ae/0x520 [ 184.315618][ T0] console_flush_all+0x4af/0xd60 [ 184.315641][ T0] console_unlock+0x10c/0x260 [ 184.315664][ T0] vprintk_emit+0x17f/0x5f0 [ 184.315677][ T0] vprintk+0x7b/0x90 [ 184.315690][ T0] _printk+0xc8/0x100 [ 184.315710][ T0] report_bug+0x492/0x580 [ 184.315726][ T0] handle_bug+0x3d/0x70 [ 184.315744][ T0] exc_invalid_op+0x17/0x40 [ 184.315763][ T0] asm_exc_invalid_op+0x1a/0x20 [ 184.315786][ T0] __phys_addr+0xd4/0x140 [ 184.315804][ T0] build_cr3+0xc/0x40 [ 184.315822][ T0] load_new_mm_cr3+0x14/0x80 [ 184.315841][ T0] switch_mm_irqs_off+0x672/0xb60 [ 184.315862][ T0] __schedule+0xcf1/0x5af0 [ 184.315882][ T0] schedule_idle+0x5b/0x90 [ 184.315902][ T0] do_idle+0x28c/0x400 [ 184.315919][ T0] cpu_startup_entry+0x50/0x60 [ 184.315933][ T0] rest_init+0x16f/0x2b0 [ 184.315946][ T0] arch_call_rest_init+0x13/0x30 [ 184.315961][ T0] start_kernel+0x39f/0x480 [ 184.315975][ T0] x86_64_start_reservations+0x18/0x30 [ 184.315995][ T0] x86_64_start_kernel+0xb2/0xc0 [ 184.316015][ T0] secondary_startup_64_no_verify+0x166/0x16b [ 184.316036][ T0] [ 184.316036][ T0] other info that might help us debug this: [ 184.316036][ T0] [ 184.316040][ T0] Chain exists of: [ 184.316040][ T0] console_owner --> &p->pi_lock --> &rq->__lock [ 184.316040][ T0] [ 184.316061][ T0] Possible unsafe locking scenario: [ 184.316061][ T0] [ 184.316064][ T0] CPU0 CPU1 [ 184.316067][ T0] ---- ---- [ 184.316070][ T0] lock(&rq->__lock); [ 184.316078][ T0] lock(&p->pi_lock); [ 184.316087][ T0] lock(&rq->__lock); [ 184.316095][ T0] lock(console_owner); [ 184.316103][ T0] [ 184.316103][ T0] *** DEADLOCK *** [ 184.316103][ T0] [ 184.316106][ T0] 3 locks held by swapper/0/0: [ 184.316114][ T0] #0: ffff8880b983c758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 184.316155][ T0] #1: ffffffff8cf958c0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0x162/0x5f0 [ 184.316189][ T0] #2: ffffffff8cf95930 (console_srcu){....}-{0:0}, at: console_flush_all+0x12a/0xd60 [ 184.316234][ T0] [ 184.316234][ T0] stack backtrace: [ 184.316238][ T0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.7.0-rc4-syzkaller-00358-gf2e8a57ee903 #0 [ 184.316255][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 184.316265][ T0] Call Trace: [ 184.316270][ T0] [ 184.316275][ T0] dump_stack_lvl+0xd9/0x1b0 [ 184.316295][ T0] check_noncircular+0x317/0x400 [ 184.316318][ T0] ? print_circular_bug+0x5c0/0x5c0 [ 184.316342][ T0] ? lockdep_lock+0xc6/0x200 [ 184.316363][ T0] ? hlock_class+0x130/0x130 [ 184.316383][ T0] __lock_acquire+0x2433/0x3b20 [ 184.316410][ T0] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 184.316436][ T0] lock_acquire+0x1ae/0x520 [ 184.316459][ T0] ? console_flush_all+0x49a/0xd60 [ 184.316485][ T0] ? lock_sync+0x190/0x190 [ 184.316507][ T0] ? reacquire_held_locks+0x4c0/0x4c0 [ 184.316530][ T0] ? do_raw_spin_lock+0x12e/0x2b0 [ 184.316555][ T0] ? spin_bug+0x1d0/0x1d0 [ 184.316579][ T0] console_flush_all+0x4af/0xd60 [ 184.316604][ T0] ? console_flush_all+0x49a/0xd60 [ 184.316630][ T0] ? devkmsg_read+0x550/0x550 [ 184.316655][ T0] ? lock_sync+0x190/0x190 [ 184.316678][ T0] console_unlock+0x10c/0x260 [ 184.316703][ T0] ? console_flush_all+0xd60/0xd60 [ 184.316729][ T0] ? __down_trylock_console_sem+0xac/0x140 [ 184.316753][ T0] ? __down_trylock_console_sem+0xb2/0x140 [ 184.316778][ T0] vprintk_emit+0x17f/0x5f0 [ 184.316793][ T0] vprintk+0x7b/0x90 [ 184.316808][ T0] _printk+0xc8/0x100 [ 184.316830][ T0] ? kmsg_dump_get_line+0x350/0x350 [ 184.316853][ T0] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 184.316878][ T0] ? report_bug+0x486/0x580 [ 184.316894][ T0] ? report_bug+0x204/0x580 [ 184.316915][ T0] ? __phys_addr+0xd4/0x140 [ 184.316934][ T0] report_bug+0x492/0x580 [ 184.316952][ T0] handle_bug+0x3d/0x70 [ 184.316971][ T0] exc_invalid_op+0x17/0x40 [ 184.316991][ T0] asm_exc_invalid_op+0x1a/0x20 [ 184.317016][ T0] RIP: 0010:__phys_addr+0xd4/0x140 [ 184.317038][ T0] Code: 89 d8 31 ff 48 d3 e8 48 89 c5 48 89 c6 e8 e4 42 4b 00 48 85 ed 75 0d e8 4a 47 4b 00 48 89 d8 5b 5d 41 5c c3 e8 3d 47 4b 00 90 <0f> 0b e8 35 47 4b 00 48 c7 c0 10 00 da 8c 48 ba 00 00 00 00 00 fc [ 184.317053][ T0] RSP: 0018:ffffffff8cc07bb0 EFLAGS: 00010012 [ 184.317066][ T0] RAX: 0000000040000000 RBX: 0000778100040048 RCX: ffffffff813b38a0 [ 184.317077][ T0] RDX: ffffffff8cc95900 RSI: ffffffff813b3923 RDI: 0000000000000006 [ 184.317088][ T0] RBP: 0000000180040048 R08: 0000000000000006 R09: 0000000180040048 [ 184.317099][ T0] R10: 0000778100040048 R11: 0000000000000000 R12: 0000000000000000 [ 184.317109][ T0] R13: 0000000100040048 R14: ffff88807d48d600 R15: 0000000200000001 [ 184.317122][ T0] ? __phys_addr+0x50/0x140 [ 184.317142][ T0] ? __phys_addr+0xd3/0x140 [ 184.317163][ T0] build_cr3+0xc/0x40 [ 184.317183][ T0] load_new_mm_cr3+0x14/0x80 [ 184.317204][ T0] switch_mm_irqs_off+0x672/0xb60 [ 184.317228][ T0] __schedule+0xcf1/0x5af0 [ 184.317249][ T0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 184.317266][ T0] ? lockdep_hardirqs_on+0x7d/0x110 [ 184.317291][ T0] ? io_schedule_timeout+0x150/0x150 [ 184.317313][ T0] ? ct_kernel_enter_state+0x12/0x50 [ 184.317338][ T0] ? cpuidle_enter_state+0x2fc/0x500 [ 184.317365][ T0] schedule_idle+0x5b/0x90 [ 184.317388][ T0] do_idle+0x28c/0x400 [ 184.317402][ T0] ? arch_cpu_idle_exit+0x30/0x30 [ 184.317420][ T0] cpu_startup_entry+0x50/0x60 [ 184.317436][ T0] rest_init+0x16f/0x2b0 [ 184.317451][ T0] ? regulator_has_full_constraints+0x9/0x20 [ 184.317475][ T0] ? trace_init_perf_perm_irq_work_exit+0x20/0x20 [ 184.317498][ T0] arch_call_rest_init+0x13/0x30 [ 184.317515][ T0] start_kernel+0x39f/0x480 [ 184.317531][ T0] x86_64_start_reservations+0x18/0x30 [ 184.317554][ T0] x86_64_start_kernel+0xb2/0xc0 [ 184.317576][ T0] secondary_startup_64_no_verify+0x166/0x16b [ 184.317600][ T0] [ 184.323081][ T0] kernel BUG at arch/x86/mm/physaddr.c:28! [ 184.325874][ T5071] ------------[ cut here ]------------ [ 184.332393][ T0] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 184.339380][ T5071] kernel BUG at lib/list_debug.c:62! [ 184.346388][ T0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.7.0-rc4-syzkaller-00358-gf2e8a57ee903 #0 [ 185.498573][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 185.508612][ T0] RIP: 0010:__phys_addr+0xd4/0x140 [ 185.513715][ T0] Code: 89 d8 31 ff 48 d3 e8 48 89 c5 48 89 c6 e8 e4 42 4b 00 48 85 ed 75 0d e8 4a 47 4b 00 48 89 d8 5b 5d 41 5c c3 e8 3d 47 4b 00 90 <0f> 0b e8 35 47 4b 00 48 c7 c0 10 00 da 8c 48 ba 00 00 00 00 00 fc [ 185.533304][ T0] RSP: 0018:ffffffff8cc07bb0 EFLAGS: 00010012 [ 185.539441][ T0] RAX: 0000000040000000 RBX: 0000778100040048 RCX: ffffffff813b38a0 [ 185.547393][ T0] RDX: ffffffff8cc95900 RSI: ffffffff813b3923 RDI: 0000000000000006 [ 185.555366][ T0] RBP: 0000000180040048 R08: 0000000000000006 R09: 0000000180040048 [ 185.563323][ T0] R10: 0000778100040048 R11: 0000000000000000 R12: 0000000000000000 [ 185.571275][ T0] R13: 0000000100040048 R14: ffff88807d48d600 R15: 0000000200000001 [ 185.579227][ T0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 185.588139][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.594707][ T0] CR2: 00007ffe7b6b3000 CR3: 000000001fbdc000 CR4: 00000000003506f0 [ 185.602663][ T0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 185.610615][ T0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 185.618568][ T0] Call Trace: [ 185.621830][ T0] [ 185.624752][ T0] ? show_regs+0x8f/0xa0 [ 185.628991][ T0] ? die+0x36/0xa0 [ 185.632806][ T0] ? do_trap+0x22b/0x420 [ 185.637035][ T0] ? __phys_addr+0xd4/0x140 [ 185.641524][ T0] ? __phys_addr+0xd4/0x140 [ 185.646009][ T0] ? do_error_trap+0xf4/0x230 [ 185.650672][ T0] ? __phys_addr+0xd4/0x140 [ 185.655161][ T0] ? handle_invalid_op+0x34/0x40 [ 185.660105][ T0] ? __phys_addr+0xd4/0x140 [ 185.664610][ T0] ? exc_invalid_op+0x2e/0x40 [ 185.669273][ T0] ? asm_exc_invalid_op+0x1a/0x20 [ 185.674286][ T0] ? __phys_addr+0x50/0x140 [ 185.678773][ T0] ? __phys_addr+0xd3/0x140 [ 185.683261][ T0] ? __phys_addr+0xd4/0x140 [ 185.687769][ T0] build_cr3+0xc/0x40 [ 185.691736][ T0] load_new_mm_cr3+0x14/0x80 [ 185.696316][ T0] switch_mm_irqs_off+0x672/0xb60 [ 185.701330][ T0] __schedule+0xcf1/0x5af0 [ 185.705736][ T0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 185.711970][ T0] ? lockdep_hardirqs_on+0x7d/0x110 [ 185.717156][ T0] ? io_schedule_timeout+0x150/0x150 [ 185.722425][ T0] ? ct_kernel_enter_state+0x12/0x50 [ 185.727696][ T0] ? cpuidle_enter_state+0x2fc/0x500 [ 185.732971][ T0] schedule_idle+0x5b/0x90 [ 185.737379][ T0] do_idle+0x28c/0x400 [ 185.741428][ T0] ? arch_cpu_idle_exit+0x30/0x30 [ 185.746444][ T0] cpu_startup_entry+0x50/0x60 [ 185.751187][ T0] rest_init+0x16f/0x2b0 [ 185.755412][ T0] ? regulator_has_full_constraints+0x9/0x20 [ 185.761380][ T0] ? trace_init_perf_perm_irq_work_exit+0x20/0x20 [ 185.767782][ T0] arch_call_rest_init+0x13/0x30 [ 185.772703][ T0] start_kernel+0x39f/0x480 [ 185.777187][ T0] x86_64_start_reservations+0x18/0x30 [ 185.782631][ T0] x86_64_start_kernel+0xb2/0xc0 [ 185.787561][ T0] secondary_startup_64_no_verify+0x166/0x16b [ 185.793618][ T0] [ 185.796617][ T0] Modules linked in: [ 185.800508][ T0] ---[ end trace 0000000000000000 ]--- [ 185.800542][ T5071] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 185.805953][ T0] RIP: 0010:__phys_addr+0xd4/0x140 [ 185.812007][ T5071] CPU: 1 PID: 5071 Comm: syz-executor135 Tainted: G D 6.7.0-rc4-syzkaller-00358-gf2e8a57ee903 #0 [ 185.817100][ T0] Code: 89 d8 31 ff 48 d3 e8 48 89 c5 48 89 c6 e8 e4 42 4b 00 48 85 ed 75 0d e8 4a 47 4b 00 48 89 d8 5b 5d 41 5c c3 e8 3d 47 4b 00 90 <0f> 0b e8 35 47 4b 00 48 c7 c0 10 00 da 8c 48 ba 00 00 00 00 00 fc [ 185.828963][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 185.848723][ T0] RSP: 0018:ffffffff8cc07bb0 EFLAGS: 00010012 [ 185.858761][ T5071] RIP: 0010:__list_del_entry_valid_or_report+0x128/0x1c0 [ 185.864826][ T0] [ 185.864831][ T0] RAX: 0000000040000000 RBX: 0000778100040048 RCX: ffffffff813b38a0 [ 185.871820][ T5071] Code: e8 fd a3 01 fd 90 0f 0b 48 89 ca 48 c7 c7 a0 eb 2e 8b e8 eb a3 01 fd 90 0f 0b 48 89 c2 48 c7 c7 00 ec 2e 8b e8 d9 a3 01 fd 90 <0f> 0b 48 89 d1 48 c7 c7 80 ec 2e 8b 48 89 c2 e8 c4 a3 01 fd 90 0f [ 185.874145][ T0] RDX: ffffffff8cc95900 RSI: ffffffff813b3923 RDI: 0000000000000006 [ 185.882270][ T5071] RSP: 0000:ffffc9000332fb68 EFLAGS: 00010086 [ 185.901876][ T0] RBP: 0000000180040048 R08: 0000000000000006 R09: 0000000180040048 [ 185.909822][ T5071] [ 185.909828][ T5071] RAX: 000000000000006d RBX: ffff88801f32e1c0 RCX: ffffffff81697219 [ 185.915893][ T0] R10: 0000778100040048 R11: 0000000000000000 R12: 0000000000000000 [ 185.923851][ T5071] RDX: 0000000000000000 RSI: ffffffff8169f6c2 RDI: 0000000000000005 [ 185.926158][ T0] R13: 0000000100040048 R14: ffff88807d48d600 R15: 0000000200000001 [ 185.934105][ T5071] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 185.942060][ T0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 185.950019][ T5071] R10: 0000000080000001 R11: 205d305420202020 R12: ffff88801f32f4f0 [ 185.957977][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.965921][ T5071] R13: ffffffff8cfefd00 R14: 0000000000000000 R15: 0000000000000000 [ 185.974824][ T0] CR2: 00007ffe7b6b3000 CR3: 000000001fbdc000 CR4: 00000000003506f0 [ 185.982770][ T5071] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 185.989333][ T0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 185.997544][ T5071] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.005487][ T0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 186.014388][ T5071] CR2: 0000000000000000 CR3: 000000000cd77000 CR4: 00000000003506f0 [ 186.022337][ T0] Kernel panic - not syncing: Fatal exception [ 186.028899][ T5071] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 186.028911][ T5071] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 186.028923][ T5071] Call Trace: [ 186.028931][ T5071] [ 186.028937][ T5071] ? show_regs+0x8f/0xa0 [ 186.028964][ T5071] ? die+0x36/0xa0 [ 186.028984][ T5071] ? do_trap+0x22b/0x420 [ 186.029008][ T5071] ? __list_del_entry_valid_or_report+0x128/0x1c0 [ 186.029036][ T5071] ? __list_del_entry_valid_or_report+0x128/0x1c0 [ 186.029061][ T5071] ? do_error_trap+0xf4/0x230 [ 186.029085][ T5071] ? __list_del_entry_valid_or_report+0x128/0x1c0 [ 186.029111][ T5071] ? handle_invalid_op+0x34/0x40 [ 186.029136][ T5071] ? __list_del_entry_valid_or_report+0x128/0x1c0 [ 186.029161][ T5071] ? exc_invalid_op+0x2e/0x40 [ 186.029184][ T5071] ? asm_exc_invalid_op+0x1a/0x20 [ 186.029213][ T5071] ? __wake_up_klogd.part.0+0x99/0xf0 [ 186.029240][ T5071] ? vprintk+0x82/0x90 [ 186.029256][ T5071] ? __list_del_entry_valid_or_report+0x128/0x1c0 [ 186.029281][ T5071] ? __list_del_entry_valid_or_report+0x127/0x1c0 [ 186.029306][ T5071] css_set_move_task+0xfa/0x5f0 [ 186.029329][ T5071] cgroup_exit+0xc4/0x9e0 [ 186.029351][ T5071] do_exit+0xaaa/0x2ae0 [ 186.029379][ T5071] ? mm_update_next_owner+0x840/0x840 [ 186.029408][ T5071] do_group_exit+0xd4/0x2a0 [ 186.029434][ T5071] get_signal+0x23be/0x2790 [ 186.029456][ T5071] ? exit_signals+0x960/0x960 [ 186.029474][ T5071] ? force_sig+0xf0/0xf0 [ 186.029493][ T5071] arch_do_signal_or_restart+0x90/0x7f0 [ 186.029520][ T5071] ? __bad_area_nosemaphore+0x325/0x6a0 [ 186.029555][ T5071] ? get_sigframe_size+0x20/0x20 [ 186.029579][ T5071] ? __bad_area_nosemaphore+0x325/0x6a0 [ 186.029603][ T5071] exit_to_user_mode_prepare+0x121/0x240 [ 186.029627][ T5071] irqentry_exit_to_user_mode+0xa/0x40 [ 186.029654][ T5071] asm_exc_page_fault+0x26/0x30 [ 186.029686][ T5071] RIP: 0033:0x7f79c4cf3715 [ 186.029699][ T5071] Code: Unable to access opcode bytes at 0x7f79c4cf36eb. [ 186.029707][ T5071] RSP: 002b:00007ffe7b6b2250 EFLAGS: 00010206 [ 186.029722][ T5071] RAX: 0000000000000000 RBX: 00000000000013d0 RCX: 00007f79c4d272e3 [ 186.029734][ T5071] RDX: 00007ffe7b6b2250 RSI: 0000000000000000 RDI: 0000000000000000 [ 186.029745][ T5071] RBP: 000000000002ce5d R08: 00000000000000b8 R09: 0000000000000001 [ 186.029756][ T5071] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe7b6b2360 [ 186.029768][ T5071] R13: 00007ffe7b6b233c R14: 431bde82d7b634db R15: 00007f79c4d3501d [ 186.029783][ T5071] [ 186.029788][ T5071] Modules linked in: [ 186.029799][ T5071] ---[ end trace 0000000000000000 ]--- [ 186.029805][ T5071] RIP: 0010:__phys_addr+0xd4/0x140 [ 186.029830][ T5071] Code: 89 d8 31 ff 48 d3 e8 48 89 c5 48 89 c6 e8 e4 42 4b 00 48 85 ed 75 0d e8 4a 47 4b 00 48 89 d8 5b 5d 41 5c c3 e8 3d 47 4b 00 90 <0f> 0b e8 35 47 4b 00 48 c7 c0 10 00 da 8c 48 ba 00 00 00 00 00 fc [ 186.029846][ T5071] RSP: 0018:ffffffff8cc07bb0 EFLAGS: 00010012 [ 186.029860][ T5071] RAX: 0000000040000000 RBX: 0000778100040048 RCX: ffffffff813b38a0 [ 186.029872][ T5071] RDX: ffffffff8cc95900 RSI: ffffffff813b3923 RDI: 0000000000000006 [ 186.029884][ T5071] RBP: 0000000180040048 R08: 0000000000000006 R09: 0000000180040048 [ 186.029896][ T5071] R10: 0000778100040048 R11: 0000000000000000 R12: 0000000000000000 [ 186.029907][ T5071] R13: 0000000100040048 R14: ffff88807d48d600 R15: 0000000200000001 [ 186.029920][ T5071] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 186.029937][ T5071] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.029950][ T5071] CR2: 0000000000000000 CR3: 000000000cd77000 CR4: 00000000003506f0 [ 186.029962][ T5071] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 186.029973][ T5071] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 187.114427][ T0] Shutting down cpus with NMI [ 187.495962][ T0] Kernel Offset: disabled [ 187.500274][ T0] Rebooting in 86400 seconds..