Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts. 2023/10/01 03:36:51 ignoring optional flag "sandboxArg"="0" 2023/10/01 03:36:51 parsed 1 programs 2023/10/01 03:36:51 executed programs: 0 [ 103.056565][ T4448] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.065007][ T4448] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.073362][ T4448] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.082544][ T4448] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.090131][ T4448] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 103.098654][ T4448] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.256356][ T5417] chnl_net:caif_netlink_parms(): no params data found [ 103.329803][ T5417] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.337781][ T5417] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.345923][ T5417] bridge_slave_0: entered allmulticast mode [ 103.354544][ T5417] bridge_slave_0: entered promiscuous mode [ 103.363638][ T5417] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.371313][ T5417] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.378494][ T5417] bridge_slave_1: entered allmulticast mode [ 103.386133][ T5417] bridge_slave_1: entered promiscuous mode [ 103.419009][ T5417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.433519][ T5417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.469226][ T5417] team0: Port device team_slave_0 added [ 103.478213][ T5417] team0: Port device team_slave_1 added [ 103.508295][ T5417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.516046][ T5417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.542680][ T5417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.556348][ T5417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.563445][ T5417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.591972][ T5417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.638995][ T5417] hsr_slave_0: entered promiscuous mode [ 103.645824][ T5417] hsr_slave_1: entered promiscuous mode [ 104.534945][ T5417] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.552313][ T5417] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.568253][ T5417] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.581225][ T5417] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.736474][ T5417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.770290][ T5417] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.793545][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.801081][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.820289][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.827929][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.122044][ T5417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.192752][ T4448] Bluetooth: hci0: command 0x0409 tx timeout [ 105.194613][ T5417] veth0_vlan: entered promiscuous mode [ 105.218968][ T5417] veth1_vlan: entered promiscuous mode [ 105.273073][ T5417] veth0_macvtap: entered promiscuous mode [ 105.287554][ T5417] veth1_macvtap: entered promiscuous mode [ 105.324163][ T5417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.343687][ T5417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.383336][ T5417] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.394054][ T5417] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.405538][ T5417] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.417588][ T5417] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.557969][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.584706][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.641407][ T782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.649557][ T782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.869972][ T5483] loop0: detected capacity change from 0 to 8192 [ 105.891892][ T5483] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 105.905894][ T5483] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 105.921219][ T5483] REISERFS (device loop0): using ordered data mode [ 105.928085][ T5483] reiserfs: using flush barriers [ 105.939970][ T5483] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 105.958496][ T5483] REISERFS (device loop0): checking transaction log (loop0) [ 106.105731][ T5483] REISERFS (device loop0): Using r5 hash to sort names [ 106.132302][ T5417] ================================================================== [ 106.140899][ T5417] BUG: KASAN: stack-out-of-bounds in __copy_from_iter_mc+0x30a/0x3f0 [ 106.149192][ T5417] Read of size 4 at addr ffffc90004d8f574 by task syz-executor.0/5417 [ 106.157489][ T5417] [ 106.159917][ T5417] CPU: 0 PID: 5417 Comm: syz-executor.0 Not tainted 6.6.0-rc3-next-20230929-syzkaller-08790-gdf964ce9ef9f #0 [ 106.171711][ T5417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 106.182228][ T5417] Call Trace: [ 106.185882][ T5417] [ 106.189016][ T5417] dump_stack_lvl+0xd9/0x1b0 [ 106.193720][ T5417] print_report+0xc4/0x620 [ 106.198275][ T5417] ? __virt_addr_valid+0x5e/0x2d0 [ 106.203603][ T5417] kasan_report+0xda/0x110 [ 106.208055][ T5417] ? __copy_from_iter_mc+0x30a/0x3f0 [ 106.213831][ T5417] ? __copy_from_iter_mc+0x30a/0x3f0 [ 106.219426][ T5417] __copy_from_iter_mc+0x30a/0x3f0 [ 106.224764][ T5417] ? ext4_dax_writepages+0xb50/0xb50 [ 106.230292][ T5417] ? page_copy_sane+0xcb/0x2c0 [ 106.235524][ T5417] copy_page_from_iter_atomic+0x471/0x11e0 [ 106.241464][ T5417] ? ext4_da_write_begin+0x228/0x8c0 [ 106.247055][ T5417] ? copy_page_from_iter+0x120/0x120 [ 106.252559][ T5417] ? ext4_write_begin+0x1100/0x1100 [ 106.258966][ T5417] ? balance_dirty_pages_ratelimited_flags+0x92/0x1280 [ 106.266038][ T5417] generic_perform_write+0x2e9/0x600 [ 106.271499][ T5417] ? folio_add_wait_queue+0x1c0/0x1c0 [ 106.277172][ T5417] ? down_write+0x14f/0x200 [ 106.281895][ T5417] ext4_buffered_write_iter+0x11f/0x3c0 [ 106.287501][ T5417] ext4_file_write_iter+0x7f7/0x1860 [ 106.292831][ T5417] ? reacquire_held_locks+0x4b0/0x4b0 [ 106.298692][ T5417] ? do_raw_spin_lock+0x12e/0x2b0 [ 106.303945][ T5417] ? spin_bug+0x1d0/0x1d0 [ 106.308321][ T5417] ? find_held_lock+0x2d/0x110 [ 106.313470][ T5417] ? ext4_buffered_write_iter+0x3c0/0x3c0 [ 106.319395][ T5417] ? _raw_spin_unlock+0x28/0x40 [ 106.324640][ T5417] ? generic_file_llseek_size+0x109/0x350 [ 106.330411][ T5417] ? ext4_llseek+0x18e/0x2f0 [ 106.335031][ T5417] __kernel_write_iter+0x261/0x7e0 [ 106.340834][ T5417] ? vfs_read+0x930/0x930 [ 106.345301][ T5417] ? get_dump_page+0x144/0x210 [ 106.350104][ T5417] ? __kernel_write+0xf6/0x140 [ 106.355164][ T5417] dump_user_range+0x299/0x790 [ 106.359971][ T5417] ? do_coredump+0x3fc0/0x3fc0 [ 106.364785][ T5417] ? dump_align+0xa3/0xc0 [ 106.369452][ T5417] ? notesize+0x90/0x90 [ 106.373658][ T1] elf_core_dump+0x2700/0x3900 [ 106.375528][ T4720] dhcpcd (4720) used greatest stack depth: 21776 bytes left [ 106.378546][ T1] ? load_elf_phdrs+0x210/0x210 [ 106.390544][ C1] general protection fault, probably for non-canonical address 0xdffffc0040000011: 0000 [#1] PREEMPT SMP KASAN [ 106.391313][ T1] ? kvmalloc_node+0x99/0x1a0 [ 106.403903][ C1] KASAN: probably user-memory-access in range [0x0000000200000088-0x000000020000008f] [ 106.408851][ T1] ? kasan_save_stack+0x43/0x50 [ 106.418640][ C1] CPU: 1 PID: 5483 Comm: syz-executor.0 Not tainted 6.6.0-rc3-next-20230929-syzkaller-08790-gdf964ce9ef9f #0 [ 106.423465][ T1] ? kasan_save_stack+0x33/0x50 [ 106.435165][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 106.439999][ T1] ? 0xffffffffff600000 [ 106.450116][ C1] RIP: 0010:psi_account_irqtime+0xeb/0x520 [ 106.454704][ T1] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 106.460675][ C1] Code: 28 13 00 00 e8 56 56 df 08 85 c0 0f 85 b8 02 00 00 49 8d bc 24 88 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 07 04 00 00 49 8b 9c 24 88 00 00 00 48 b8 00 00 [ 106.466663][ T1] ? do_coredump+0x2c97/0x3fc0 [ 106.486877][ C1] RSP: 0018:ffffc900001f0a30 EFLAGS: 00010006 [ 106.491811][ T1] do_coredump+0x2c97/0x3fc0 [ 106.497904][ C1] [ 106.497917][ C1] RAX: dffffc0000000000 RBX: ffff8880789f0000 RCX: 0000000000000001 [ 106.502612][ T1] ? dump_emit+0x330/0x330 [ 106.504906][ C1] RDX: 0000000040000011 RSI: ffffffff8a8cad20 RDI: 0000000200000089 [ 106.512959][ T1] ? kasan_set_track+0x25/0x30 [ 106.517426][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 106.525812][ T1] ? find_held_lock+0x2d/0x110 [ 106.530638][ C1] R10: 0000000000000000 R11: ffff8880b993d640 R12: 0000000200000001 [ 106.541997][ T1] get_signal+0x2434/0x2790 [ 106.548925][ C1] R13: 0000000000000000 R14: ffff8880b983d158 R15: 0000000000000000 [ 106.557494][ T1] ? exit_signals+0x960/0x960 [ 106.562134][ C1] FS: 00007feebca676c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 106.570265][ T1] ? __local_bh_enable_ip+0xa4/0x120 [ 106.574912][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.584084][ T1] arch_do_signal_or_restart+0x90/0x7f0 [ 106.589499][ C1] CR2: 0000563d5e95f72c CR3: 000000001738a000 CR4: 00000000003506f0 [ 106.596317][ T1] ? get_sigframe_size+0x20/0x20 [ 106.602366][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 106.610409][ T1] exit_to_user_mode_prepare+0x11f/0x240 [ 106.615312][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 106.623281][ T1] syscall_exit_to_user_mode+0x1d/0x60 [ 106.629169][ C1] Call Trace: [ 106.629183][ C1] [ 106.637396][ T1] do_syscall_64+0x44/0xb0 [ 106.643198][ C1] ? show_regs+0x8f/0xa0 [ 106.646484][ T1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 106.649418][ C1] ? die_addr+0x4f/0xd0 [ 106.653908][ T1] RIP: 0033:0x7feebbc276b0 [ 106.658216][ C1] ? exc_general_protection+0x154/0x230 [ 106.664171][ T1] RSP: 002b:00007ffe950422f8 EFLAGS: 00000293 [ 106.668326][ C1] ? asm_exc_general_protection+0x26/0x30 [ 106.672795][ T1] ORIG_RAX: 00000000000000e6 [ 106.672805][ T1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007feebbca7cb5 [ 106.678582][ C1] ? psi_account_irqtime+0xeb/0x520 [ 106.684731][ T1] RDX: 00007ffe95042300 RSI: 00007ffe95042430 RDI: 000000000000000b [ 106.690518][ C1] update_rq_clock+0x24a/0xb20 [ 106.695388][ T1] RBP: 00007ffe9504296c R08: 0000000000000000 R09: 0000000000000001 [ 106.703383][ C1] try_to_wake_up+0x6aa/0x15d0 [ 106.708917][ T1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 106.717600][ C1] ? sched_ttwu_pending+0x560/0x560 [ 106.722333][ T1] R13: 0000000000019cee R14: 0000000000019cee R15: 0000000000000000 [ 106.731271][ C1] ? lock_sync+0x190/0x190 [ 106.736120][ T1] [ 106.744237][ C1] autoremove_wake_function+0x16/0x150 [ 106.749509][ T1] [ 106.749520][ T1] The buggy address belongs to the virtual mapping at [ 106.749520][ T1] [ffffc90004d88000, ffffc90004d91000) created by: [ 106.749520][ T1] kernel_clone+0xfd/0x920 [ 106.758252][ C1] __wake_up_common+0x140/0x5a0 [ 106.762846][ T1] [ 106.762853][ T1] The buggy address belongs to the physical page: [ 106.765857][ C1] __wake_up_common_lock+0xd6/0x140 [ 106.771333][ T1] page:ffffea0001e6b840 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79ae1 [ 106.773640][ C1] ? __wake_up_common+0x5a0/0x5a0 [ 106.791846][ T1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 106.796925][ C1] ? cgroup_rstat_updated+0x24/0x420 [ 106.799328][ T1] page_type: 0xffffffff() [ 106.806711][ C1] ? tick_sched_do_timer+0x2e0/0x2e0 [ 106.812508][ T1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 106.822909][ C1] wake_up_klogd_work_func+0x90/0xa0 [ 106.828018][ T1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 106.836077][ C1] irq_work_single+0x1b5/0x260 [ 106.841444][ T1] page dumped because: kasan: bad access detected [ 106.846027][ C1] irq_work_run_list+0x92/0xc0 [ 106.851477][ T1] page_owner tracks the page as allocated [ 106.851487][ T1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 5416, tgid 5416 (syz-executor.0), ts 103045279421, free_ts 102930240089 [ 106.860589][ C1] update_process_times+0x1d5/0x220 [ 106.866262][ T1] post_alloc_hook+0x2cf/0x340 [ 106.875484][ C1] ? timer_clear_idle+0xa0/0xa0 [ 106.881019][ T1] get_page_from_freelist+0x98f/0x32a0 [ 106.887784][ C1] ? update_wall_time+0x1c/0x40 [ 106.892727][ T1] __alloc_pages+0x1d0/0x4a0 [ 106.898620][ C1] ? tick_do_update_jiffies64+0x22e/0x380 [ 106.918995][ T1] alloc_pages+0x1a9/0x270 [ 106.924550][ C1] tick_sched_handle+0x8e/0x170 [ 106.929567][ T1] __vmalloc_node_range+0x8f3/0x1bf0 [ 106.934959][ C1] tick_nohz_highres_handler+0xe9/0x110 [ 106.940836][ T1] copy_process+0x13e3/0x74b0 [ 106.945737][ C1] __hrtimer_run_queues+0x647/0xc10 [ 106.950342][ T1] kernel_clone+0xfd/0x920 [ 106.956264][ C1] ? enqueue_hrtimer+0x310/0x310 [ 106.961001][ T1] __do_sys_clone+0xba/0x100 [ 106.965829][ C1] ? ktime_get_update_offsets_now+0x3bc/0x610 [ 106.971245][ T1] do_syscall_64+0x38/0xb0 [ 106.976797][ C1] hrtimer_interrupt+0x31b/0x800 [ 106.981921][ T1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 106.987159][ C1] __sysvec_apic_timer_interrupt+0x105/0x3f0 [ 106.991642][ T1] page last free stack trace: [ 106.991651][ T1] free_unref_page_prepare+0x476/0xa40 [ 106.996660][ C1] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 107.001237][ T1] free_unref_page+0x33/0x3b0 [ 107.007289][ C1] [ 107.011859][ T1] vfree+0x3fb/0xe40 [ 107.016962][ C1] [ 107.023031][ T1] kcov_put+0x26/0x40 [ 107.029108][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 107.033772][ T1] kcov_close+0x10/0x20 [ 107.039224][ C1] RIP: 0010:memmove+0x28/0x1b0 [ 107.045113][ T1] __fput+0x3f7/0xa70 [ 107.049787][ C1] Code: c3 90 f3 0f 1e fa 48 89 f8 48 39 fe 7d 0f 49 89 f0 49 01 d0 49 39 f8 0f 8f b5 00 00 00 48 83 fa 20 0f 82 01 01 00 00 48 89 d1 a4 c3 48 81 fa a8 02 00 00 72 05 40 38 fe 74 47 48 83 ea 20 48 [ 107.052715][ T1] __fput_sync+0x47/0x50 [ 107.056685][ C1] RSP: 0018:ffffc90004f7ef18 EFLAGS: 00010282 [ 107.059629][ T1] __x64_sys_close+0x87/0xf0 [ 107.063588][ C1] [ 107.069625][ T1] do_syscall_64+0x38/0xb0 [ 107.073954][ C1] RAX: ffff88807614ffb4 RBX: 0000000000000002 RCX: fffffffffd127a1c [ 107.078714][ T1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 107.082694][ C1] RDX: ffffffffffffffe1 RSI: ffff888079028569 RDI: ffff888079028579 [ 107.102730][ T1] [ 107.102737][ T1] Memory state around the buggy address: [ 107.107037][ C1] RBP: 0000000000000020 R08: ffff88807614ff85 R09: 0000766972705f73 [ 107.113172][ T1] ffffc90004d8f400: f1 f1 f1 00 00 00 00 00 00 f3 f3 f3 f3 00 00 00 [ 107.117814][ C1] R10: 667265736965722e R11: 0000766972705f73 R12: 0000000000000001 [ 107.120302][ T1] ffffc90004d8f480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.124773][ C1] R13: 0000000000000001 R14: ffff88807614ffa4 R15: 0000000000000010 [ 107.133101][ T1] >ffffc90004d8f500: 00 f1 f1 f1 f1 f1 f1 00 f2 f2 f2 00 00 f2 f2 00 [ 107.139064][ C1] leaf_paste_entries+0x43c/0x920 [ 107.147113][ T1] ^ [ 107.147125][ T1] ffffc90004d8f580: 00 00 00 00 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 [ 107.149615][ C1] balance_leaf+0x9476/0xcd90 [ 107.155500][ T1] ffffc90004d8f600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.163473][ C1] ? get_num_ver.constprop.0+0xfd0/0xfd0 [ 107.172907][ T1] ================================================================== [ 107.256563][ C1] ? replace_key+0x150/0x150 [ 107.261316][ C1] do_balance+0x337/0x840 [ 107.265862][ C1] ? get_right_neighbor_position+0x170/0x170 [ 107.272142][ C1] ? bit_wait_timeout+0x160/0x160 [ 107.277458][ C1] reiserfs_paste_into_item+0x62a/0x7c0 [ 107.283214][ C1] ? reiserfs_delete_object+0x200/0x200 [ 107.289072][ C1] ? search_by_entry_key+0x940/0x940 [ 107.294385][ C1] ? reiserfs_new_inode+0x1219/0x20b0 [ 107.299772][ C1] ? r5_hash+0xaf/0xd0 [ 107.303863][ C1] ? make_cpu_key+0x26/0x2a0 [ 107.308452][ C1] reiserfs_add_entry+0x936/0xd20 [ 107.313567][ C1] ? reiserfs_lookup+0x690/0x690 [ 107.318563][ C1] reiserfs_mkdir+0x68a/0x9a0 [ 107.323347][ C1] ? reiserfs_mknod+0x740/0x740 [ 107.328412][ C1] ? reiserfs_lookup_privroot+0x19b/0x200 [ 107.334524][ C1] ? rwsem_down_write_slowpath+0x12a0/0x12a0 [ 107.341831][ C1] reiserfs_xattr_init+0x57f/0xbb0 [ 107.347797][ C1] reiserfs_fill_super+0x2139/0x3150 [ 107.353641][ C1] ? reiserfs_remount+0x1640/0x1640 [ 107.358853][ C1] ? reiserfs_remount+0x1640/0x1640 [ 107.364064][ C1] ? vsprintf+0x30/0x30 [ 107.368240][ C1] ? bit_wait_timeout+0x160/0x160 [ 107.373349][ C1] ? preempt_count_sub+0x150/0x150 [ 107.379001][ C1] ? do_raw_spin_lock+0x12e/0x2b0 [ 107.384224][ C1] ? down_write+0x14f/0x200 [ 107.389015][ C1] ? setup_bdev_super+0x366/0x6f0 [ 107.394536][ C1] ? reiserfs_remount+0x1640/0x1640 [ 107.399767][ C1] mount_bdev+0x1f3/0x2e0 [ 107.404204][ C1] ? sget+0x640/0x640 [ 107.408172][ C1] ? apparmor_capable+0x1da/0x4e0 [ 107.413192][ C1] ? reiserfs_kill_sb+0x1e0/0x1e0 [ 107.418491][ C1] legacy_get_tree+0x109/0x220 [ 107.423353][ C1] vfs_get_tree+0x8c/0x370 [ 107.427775][ C1] path_mount+0x1492/0x1ed0 [ 107.432267][ C1] ? kmem_cache_free+0xf0/0x470 [ 107.437656][ C1] ? finish_automount+0xa40/0xa40 [ 107.444140][ C1] ? putname+0x101/0x140 [ 107.448377][ C1] __x64_sys_mount+0x293/0x310 [ 107.453474][ C1] ? copy_mnt_ns+0xb60/0xb60 [ 107.458178][ C1] ? syscall_enter_from_user_mode+0x26/0x80 [ 107.464247][ C1] do_syscall_64+0x38/0xb0 [ 107.468829][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 107.474970][ C1] RIP: 0033:0x7feebbc7df9a [ 107.479559][ C1] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 107.500654][ C1] RSP: 002b:00007feebca66ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.509487][ C1] RAX: ffffffffffffffda RBX: 00007feebca66f80 RCX: 00007feebbc7df9a [ 107.517595][ C1] RDX: 0000000020001100 RSI: 0000000020000180 RDI: 00007feebca66f40 [ 107.525924][ C1] RBP: 0000000020001100 R08: 00007feebca66f80 R09: 0000000000000080 [ 107.534178][ C1] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000020000180 [ 107.542240][ C1] R13: 00007feebca66f40 R14: 00000000000010e4 R15: 00000000200001c0 [ 107.550294][ C1] [ 107.553400][ C1] Modules linked in: [ 107.557363][ C1] ---[ end trace 0000000000000000 ]--- [ 107.557408][ C0] general protection fault, probably for non-canonical address 0xdffffc000000803c: 0000 [#2] PREEMPT SMP KASAN [ 107.563018][ C1] RIP: 0010:psi_account_irqtime+0xeb/0x520 [ 107.574811][ C0] KASAN: probably user-memory-access in range [0x00000000000401e0-0x00000000000401e7] [ 107.574834][ C0] CPU: 0 PID: 1 Comm: H Tainted: G D 6.6.0-rc3-next-20230929-syzkaller-08790-gdf964ce9ef9f #0 [ 107.580898][ C1] Code: 28 13 00 00 e8 56 56 df 08 85 c0 0f 85 b8 02 00 00 49 8d bc 24 88 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 07 04 00 00 49 8b 9c 24 88 00 00 00 48 b8 00 00 [ 107.590755][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 107.602521][ C1] RSP: 0018:ffffc900001f0a30 EFLAGS: 00010006 [ 107.622822][ C0] RIP: 0010:account_system_index_time+0x88/0x300 [ 107.633278][ C1] [ 107.633285][ C1] RAX: dffffc0000000000 RBX: ffff8880789f0000 RCX: 0000000000000001 [ 107.639406][ C0] Code: 00 00 4c 8b a3 f0 08 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d bc 24 98 01 00 00 4d 8d b4 24 38 01 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 ef [ 107.646570][ C1] RDX: 0000000040000011 RSI: ffffffff8a8cad20 RDI: 0000000200000089 [ 107.648882][ C0] RSP: 0018:ffffc90000007d40 EFLAGS: 00010006 [ 107.657090][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 107.677821][ C0] [ 107.677833][ C0] RAX: dffffc0000000000 RBX: ffff8880789f0000 RCX: 1ffffffff18bc148 [ 107.687039][ C1] R10: 0000000000000000 R11: ffff8880b993d640 R12: 0000000200000001 [ 107.693531][ C0] RDX: 000000000000803c RSI: 00000000007d6d21 RDI: 00000000000401e0 [ 107.702191][ C1] R13: 0000000000000000 R14: ffff8880b983d158 R15: 0000000000000000 [ 107.704682][ C0] RBP: 00000000007d6d21 R08: 0000000000000004 R09: 0000000000202c58 [ 107.713076][ C1] FS: 00007feebca676c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 107.721531][ C0] R10: 0000000000202c58 R11: ffffffffffffffff R12: 0000000000040048 [ 107.730046][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.740161][ C0] R13: 0000000000000002 R14: 0000000000040180 R15: ffffffff817af780 [ 107.748448][ C1] CR2: 0000563d5e95f72c CR3: 000000001738a000 CR4: 00000000003506f0 [ 107.757853][ C0] FS: 0000555556434480(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 107.765852][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.772763][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.781098][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 107.789608][ C0] CR2: 0000000200000001 CR3: 0000000079ae0000 CR4: 00000000003506f0 [ 107.798718][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 107.807139][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.807162][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 107.807175][ C0] Call Trace: [ 107.807185][ C0] [ 107.807195][ C0] ? show_regs+0x8f/0xa0 [ 107.807228][ C0] ? die_addr+0x4f/0xd0 [ 107.807251][ C0] ? exc_general_protection+0x154/0x230 [ 107.807286][ C0] ? asm_exc_general_protection+0x26/0x30 [ 107.807316][ C0] ? tick_sched_do_timer+0x2e0/0x2e0 [ 107.807345][ C0] ? account_system_index_time+0x88/0x300 [ 107.807370][ C0] update_process_times+0x70/0x220 [ 107.807399][ C0] ? timer_clear_idle+0xa0/0xa0 [ 107.807424][ C0] ? tick_sched_do_timer+0x2e0/0x2e0 [ 107.807445][ C0] ? update_wall_time+0x1c/0x40 [ 107.807474][ C0] ? tick_do_update_jiffies64+0x22e/0x380 [ 107.807498][ C0] tick_sched_handle+0x8e/0x170 [ 107.807521][ C0] tick_nohz_highres_handler+0xe9/0x110 [ 107.807545][ C0] __hrtimer_run_queues+0x647/0xc10 [ 107.807578][ C0] ? enqueue_hrtimer+0x310/0x310 [ 107.807603][ C0] ? ktime_get_update_offsets_now+0x3bc/0x610 [ 107.807638][ C0] hrtimer_interrupt+0x31b/0x800 [ 107.807673][ C0] __sysvec_apic_timer_interrupt+0x105/0x3f0 [ 107.807700][ C0] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 107.807733][ C0] [ 107.807739][ C0] Modules linked in: [ 107.807756][ C0] ---[ end trace 0000000000000000 ]--- [ 107.807763][ C0] RIP: 0010:psi_account_irqtime+0xeb/0x520 [ 107.807793][ C0] Code: 28 13 00 00 e8 56 56 df 08 85 c0 0f 85 b8 02 00 00 49 8d bc 24 88 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 07 04 00 00 49 8b 9c 24 88 00 00 00 48 b8 00 00 [ 107.807814][ C0] RSP: 0018:ffffc900001f0a30 EFLAGS: 00010006 [ 107.807829][ C0] RAX: dffffc0000000000 RBX: ffff8880789f0000 RCX: 0000000000000001 [ 107.807843][ C0] RDX: 0000000040000011 RSI: ffffffff8a8cad20 RDI: 0000000200000089 [ 107.807856][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 107.807868][ C0] R10: 0000000000000000 R11: ffff8880b993d640 R12: 0000000200000001 [ 107.807881][ C0] R13: 0000000000000000 R14: ffff8880b983d158 R15: 0000000000000000 [ 107.807894][ C0] FS: 0000555556434480(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 107.807914][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.807928][ C0] CR2: 0000000200000001 CR3: 0000000079ae0000 CR4: 00000000003506f0 [ 107.807941][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.807970][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 108.902913][ C1] Shutting down cpus with NMI [ 109.193601][ C1] Kernel Offset: disabled [ 109.197913][ C1] Rebooting in 86400 seconds..