Warning: Permanently added '10.128.1.122' (ED25519) to the list of known hosts. 2024/03/05 07:30:21 ignoring optional flag "sandboxArg"="0" 2024/03/05 07:30:21 parsed 1 programs [ 41.205030][ T27] audit: type=1400 audit(1709623821.873:156): avc: denied { mounton } for pid=340 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 41.230082][ T27] audit: type=1400 audit(1709623821.873:157): avc: denied { mount } for pid=340 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2024/03/05 07:30:21 executed programs: 0 [ 41.271088][ T27] audit: type=1400 audit(1709623821.943:158): avc: denied { unlink } for pid=340 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 41.302750][ T340] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 41.351170][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.358829][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.366432][ T346] device bridge_slave_0 entered promiscuous mode [ 41.373517][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.380700][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.388323][ T346] device bridge_slave_1 entered promiscuous mode [ 41.431341][ T27] audit: type=1400 audit(1709623822.103:159): avc: denied { write } for pid=346 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.436878][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.451876][ T27] audit: type=1400 audit(1709623822.103:160): avc: denied { read } for pid=346 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.459113][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.488264][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.495430][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.513375][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.520735][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.528548][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.537129][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.546049][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.554403][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.561335][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.581433][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.590982][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.598976][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.606334][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.614055][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.623857][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.632846][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.642359][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.650288][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.659624][ T346] device veth0_vlan entered promiscuous mode [ 41.669992][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.679372][ T346] device veth1_macvtap entered promiscuous mode [ 41.689005][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.702473][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.715162][ T27] audit: type=1400 audit(1709623822.383:161): avc: denied { mounton } for pid=346 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 41.751578][ T352] loop0: detected capacity change from 0 to 512 [ 41.757988][ T27] audit: type=1400 audit(1709623822.423:162): avc: denied { mounton } for pid=351 comm="syz-executor.0" path="/root/syzkaller-testdir2041228798/syzkaller.O6woec/0/file1" dev="sda1" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 41.793020][ T352] EXT4-fs (loop0): 1 orphan inode deleted [ 41.799229][ T352] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 41.809060][ T352] ext4 filesystem being mounted at /root/syzkaller-testdir2041228798/syzkaller.O6woec/0/file1 supports timestamps until 2038 (0x7fffffff) [ 41.809129][ T27] audit: type=1400 audit(1709623822.483:163): avc: denied { mount } for pid=351 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.856116][ T357] EXT4-fs error (device loop0): ext4_ext_remove_space:2866: inode #16: comm syz-executor.0: path[1].p_hdr == NULL [ 41.857798][ T27] audit: type=1400 audit(1709623822.503:164): avc: denied { write } for pid=351 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.869949][ T357] EXT4-fs (loop0): Remounting filesystem read-only [ 41.890949][ T27] audit: type=1400 audit(1709623822.503:165): avc: denied { add_name } for pid=351 comm="syz-executor.0" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.897462][ T357] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz-executor.0: Invalid inode table block 0 in block_group 0 [ 41.932278][ T357] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 41.943138][ T357] EXT4-fs error (device loop0): ext4_punch_hole:4142: inode #16: comm syz-executor.0: mark_inode_dirty error [ 41.960022][ T346] EXT4-fs (loop0): unmounting filesystem. [ 41.978517][ T360] loop0: detected capacity change from 0 to 512 [ 42.002666][ T360] EXT4-fs (loop0): 1 orphan inode deleted [ 42.008466][ T360] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 42.018103][ T360] ext4 filesystem being mounted at /root/syzkaller-testdir2041228798/syzkaller.O6woec/1/file1 supports timestamps until 2038 (0x7fffffff) [ 42.038012][ T363] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz-executor.0: Invalid block bitmap block 0 in block_group 0 [ 42.053187][ T363] EXT4-fs (loop0): Remounting filesystem read-only [ 42.060977][ T363] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6133: Corrupt filesystem [ 42.070262][ T363] ================================================================== [ 42.078505][ T363] BUG: KASAN: out-of-bounds in ext4_ext_remove_space+0x1fa0/0x4970 [ 42.086409][ T363] Read of size 18446744073709551544 at addr ffff888124367054 by task syz-executor.0/363 [ 42.096372][ T363] [ 42.098563][ T363] CPU: 1 PID: 363 Comm: syz-executor.0 Not tainted 6.1.68-syzkaller #0 [ 42.106787][ T363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 42.117600][ T363] Call Trace: [ 42.120717][ T363] [ 42.123673][ T363] dump_stack_lvl+0x105/0x148 [ 42.128183][ T363] ? panic+0x3b4/0x3b4 [ 42.132189][ T363] ? nf_tcp_handle_invalid+0x30b/0x30b [ 42.137482][ T363] ? _printk+0xca/0x10a [ 42.141655][ T363] print_report+0x158/0x4e0 [ 42.146082][ T363] ? kasan_addr_to_slab+0xd/0x80 [ 42.150943][ T363] ? ext4_ext_remove_space+0x1fa0/0x4970 [ 42.156672][ T363] kasan_report+0x13c/0x170 [ 42.161291][ T363] ? ext4_ext_remove_space+0x1fa0/0x4970 [ 42.166747][ T363] kasan_check_range+0x294/0x2a0 [ 42.171746][ T363] ? ext4_ext_remove_space+0x1fa0/0x4970 [ 42.177450][ T363] memmove+0x2d/0x70 [ 42.181179][ T363] ext4_ext_remove_space+0x1fa0/0x4970 [ 42.186737][ T363] ? ext4_ext_index_trans_blocks+0xe0/0xe0 [ 42.192629][ T363] ? ext4_es_remove_extent+0x1fd/0x350 [ 42.198626][ T363] ? ext4_zero_partial_blocks+0x10f/0x190 [ 42.204717][ T363] ext4_punch_hole+0x5d7/0x8e0 [ 42.209681][ T363] ext4_fallocate+0x2b1/0x1730 [ 42.214277][ T363] ? avc_has_extended_perms+0x852/0xee0 [ 42.219655][ T363] ? ext4_ext_truncate+0x260/0x260 [ 42.224609][ T363] vfs_fallocate+0x330/0x410 [ 42.229024][ T363] do_vfs_ioctl+0x1aca/0x2350 [ 42.233715][ T363] ? __x64_compat_sys_ioctl+0x80/0x80 [ 42.239752][ T363] ? ioctl_has_perm+0x1f0/0x4c0 [ 42.244810][ T363] ? ioctl_has_perm+0x350/0x4c0 [ 42.249853][ T363] ? has_cap_mac_admin+0x360/0x360 [ 42.255863][ T363] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 42.260993][ T363] ? recalc_sigpending+0xfc/0x150 [ 42.265835][ T363] ? __set_current_blocked+0x27b/0x2d0 [ 42.271271][ T363] ? selinux_file_ioctl+0x2d6/0x420 [ 42.276418][ T363] ? set_current_blocked+0x40/0x40 [ 42.281356][ T363] ? selinux_file_alloc_security+0x120/0x120 [ 42.287164][ T363] ? __kasan_check_write+0x14/0x20 [ 42.292314][ T363] ? __fget_files+0x24b/0x280 [ 42.297352][ T363] ? security_file_ioctl+0x39/0x90 [ 42.302517][ T363] __se_sys_ioctl+0x5d/0x110 [ 42.307022][ T363] ? fpregs_assert_state_consistent+0x47/0x60 [ 42.313049][ T363] __x64_sys_ioctl+0x76/0x80 [ 42.317717][ T363] do_syscall_64+0x3d/0xb0 [ 42.322228][ T363] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 42.328131][ T363] RIP: 0033:0x7fbfde47cae9 [ 42.332754][ T363] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 42.353654][ T363] RSP: 002b:00007fbfdf14c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.362437][ T363] RAX: ffffffffffffffda RBX: 00007fbfde59c050 RCX: 00007fbfde47cae9 [ 42.370974][ T363] RDX: 0000000020000080 RSI: 000000004030582b RDI: 0000000000000004 [ 42.379055][ T363] RBP: 00007fbfde4c847a R08: 0000000000000000 R09: 0000000000000000 [ 42.387390][ T363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.395897][ T363] R13: 000000000000000b R14: 00007fbfde59c050 R15: 00007ffcf89f2998 [ 42.404163][ T363] [ 42.407100][ T363] [ 42.409268][ T363] The buggy address belongs to the physical page: [ 42.415781][ T363] page:ffffea000490d9c0 refcount:2 mapcount:0 mapping:ffff88810054c950 index:0x3a pfn:0x124367 [ 42.426028][ T363] memcg:ffff88811fb88000 [ 42.430191][ T363] aops:def_blk_aops ino:700000 [ 42.434785][ T363] flags: 0x4e00000000002056(referenced|uptodate|lru|workingset|private|zone=1) [ 42.443563][ T363] raw: 4e00000000002056 ffffea000490d4c8 ffffea000430ae08 ffff88810054c950 [ 42.452273][ T363] raw: 000000000000003a ffff8881230cf738 00000002ffffffff ffff88811fb88000 [ 42.461614][ T363] page dumped because: kasan: bad access detected [ 42.468379][ T363] page_owner tracks the page as allocated [ 42.474542][ T363] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 360, tgid 359 (syz-executor.0), ts 42035731521, free_ts 41978382711 [ 42.496954][ T363] prep_new_page+0x512/0x5e0 [ 42.501463][ T363] get_page_from_freelist+0x288b/0x2910 [ 42.507105][ T363] __alloc_pages+0x39f/0x780 [ 42.511690][ T363] __folio_alloc+0x15/0x40 [ 42.515943][ T363] __filemap_get_folio+0x53b/0x6a0 [ 42.521246][ T363] pagecache_get_page+0x15/0xb0 [ 42.526018][ T363] __getblk_gfp+0x1ac/0x590 [ 42.530362][ T363] ext4_ext_insert_extent+0xf76/0x5490 [ 42.535759][ T363] ext4_ext_map_blocks+0x1a04/0x64d0 [ 42.540914][ T363] ext4_map_blocks+0x821/0x1890 [ 42.545908][ T363] _ext4_get_block+0x1d0/0x540 [ 42.550848][ T363] ext4_get_block+0x12/0x20 [ 42.555373][ T363] ext4_block_write_begin+0x399/0xbc0 [ 42.560583][ T363] ext4_write_begin+0x588/0xe00 [ 42.565459][ T363] ext4_da_write_begin+0x397/0x6f0 [ 42.570485][ T363] generic_perform_write+0x2ee/0x520 [ 42.576069][ T363] page last free stack trace: [ 42.580572][ T363] free_unref_page_prepare+0x794/0x7a0 [ 42.585962][ T363] free_unref_page_list+0xf1/0x790 [ 42.590902][ T363] release_pages+0xcfc/0xd50 [ 42.595324][ T363] free_pages_and_swap_cache+0x68/0x80 [ 42.600819][ T363] tlb_finish_mmu+0x1ba/0x3b0 [ 42.605608][ T363] unmap_region+0x2a3/0x300 [ 42.610556][ T363] do_mas_align_munmap+0xb63/0x1150 [ 42.615670][ T363] do_mas_munmap+0x199/0x1e0 [ 42.620378][ T363] __vm_munmap+0x24e/0x360 [ 42.624871][ T363] __x64_sys_munmap+0x66/0x70 [ 42.629918][ T363] do_syscall_64+0x3d/0xb0 [ 42.634631][ T363] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 42.640622][ T363] [ 42.642975][ T363] Memory state around the buggy address: [ 42.648532][ T363] ffff888124366f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 42.656859][ T363] ffff888124366f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 42.665838][ T363] >ffff888124367000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 42.673876][ T363] ^ [ 42.681214][ T363] ffff888124367080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 42.689624][ T363] ffff888124367100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 42.698306][ T363] ================================================================== [ 42.708647][ T363] Disabling lock debugging due to kernel taint [ 42.715515][ T363] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz-executor.0: Invalid inode table block 0 in block_group 0 [ 42.730927][ T363] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 42.741175][ T363] EXT4-fs error (device loop0): ext4_punch_hole:4142: inode #16: comm syz-executor.0: mark_inode_dirty error [ 42.759949][ T346] EXT4-fs (loop0): unmounting filesystem. [ 42.780134][ T365] loop0: detected capacity change from 0 to 512 [ 42.793170][ T365] EXT4-fs (loop0): 1 orphan inode deleted [ 42.798864][ T365] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 42.808218][ T365] ext4 filesystem being mounted at /root/syzkaller-testdir2041228798/syzkaller.O6woec/2/file1 supports timestamps until 2038 (0x7fffffff) [ 42.830886][ T368] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz-executor.0: Invalid block bitmap block 0 in block_group 0 [ 42.846024][ T368] EXT4-fs (loop0): Remounting filesystem read-only [ 42.852805][ T368] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6133: Corrupt filesystem [ 42.865157][ C0] general protection fault, probably for non-canonical address 0xe3f70c001ffff12d: 0000 [#1] PREEMPT SMP KASAN [ 42.877491][ C0] KASAN: maybe wild-memory-access in range [0x1fb88000ffff8968-0x1fb88000ffff896f] [ 42.887031][ C0] CPU: 0 PID: 368 Comm: syz-executor.0 Tainted: G B 6.1.68-syzkaller #0 [ 42.897936][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 42.908242][ C0] RIP: 0010:cpuacct_charge+0xa8/0x140 [ 42.913771][ C0] Code: 00 00 00 4e 8d 3c f5 70 38 2f 85 4d 89 fe 49 c1 ee 03 eb 08 48 8b 1b 48 85 db 74 70 4c 8d a3 e8 00 00 00 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 49 fc 56 00 4d 8b 24 24 43 80 3c [ 42.934414][ C0] RSP: 0018:ffffc90000007968 EFLAGS: 00010006 [ 42.941358][ C0] RAX: 03f710001ffff12d RBX: 1fb88000ffff8881 RCX: dffffc0000000000 [ 42.949934][ C0] RDX: 000000000000028a RSI: 000000000010167f RDI: ffff888108c18014 [ 42.959115][ C0] RBP: ffffc90000007998 R08: dffffc0000000000 R09: fffffbfff0a9e58b [ 42.968210][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1fb88000ffff8969 [ 42.976718][ C0] R13: dffffc0000000000 R14: 1ffffffff0a5e70e R15: ffffffff852f3870 [ 42.985198][ C0] FS: 00007fbfdf14c6c0(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 [ 42.995603][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.003467][ C0] CR2: 0000000020040000 CR3: 00000001248e8000 CR4: 00000000003506b0 [ 43.011613][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.019903][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.028239][ C0] Call Trace: [ 43.031361][ C0] [ 43.034391][ C0] ? __die_body+0x62/0xb0 [ 43.038566][ C0] ? die_addr+0x9f/0xd0 [ 43.042555][ C0] ? exc_general_protection+0x317/0x4c0 [ 43.048148][ C0] ? asm_exc_general_protection+0x27/0x30 [ 43.053869][ C0] ? cpuacct_charge+0xa8/0x140 [ 43.058468][ C0] update_curr+0x2e7/0x6f0 [ 43.063057][ C0] enqueue_task_fair+0x474/0x23c0 [ 43.068274][ C0] ? sched_group_set_idle+0x6e0/0x6e0 [ 43.073887][ C0] ? sched_clock_cpu+0x71/0x270 [ 43.079268][ C0] ? psi_account_irqtime+0x68/0x720 [ 43.084756][ C0] enqueue_task+0x110/0x490 [ 43.089530][ C0] ttwu_do_activate+0x153/0x270 [ 43.094772][ C0] try_to_wake_up+0x6cb/0x1290 [ 43.099716][ C0] ? cpu_curr_snapshot+0x70/0x70 [ 43.104561][ C0] ? __kasan_check_write+0x14/0x20 [ 43.109772][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 43.114940][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 43.120506][ C0] wake_up_process+0x10/0x20 [ 43.125093][ C0] hrtimer_wakeup+0x58/0x70 [ 43.129829][ C0] ? enqueue_hrtimer+0x190/0x190 [ 43.135126][ C0] __hrtimer_run_queues+0x3ad/0x880 [ 43.140635][ C0] ? hrtimer_interrupt+0xb90/0xb90 [ 43.145840][ C0] ? ktime_get_update_offsets_now+0x77/0x240 [ 43.151733][ C0] hrtimer_interrupt+0x2e3/0xb90 [ 43.157074][ C0] __sysvec_apic_timer_interrupt+0xf4/0x3a0 [ 43.163598][ C0] sysvec_apic_timer_interrupt+0x95/0xc0 [ 43.169545][ C0] [ 43.172505][ C0] [ 43.175497][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 43.181333][ C0] RIP: 0010:__memmove+0x19c/0x1a0 [ 43.186160][ C0] Code: fa 02 72 16 66 44 8b 1e 66 44 8b 54 16 fe 66 44 89 1f 66 44 89 54 17 fe eb 0c 48 83 fa 01 72 06 44 8a 1e 44 88 1f c3 48 89 d1 a4 c3 cc eb 2e 0f 1f 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 [ 43.206048][ C0] RSP: 0018:ffffc90000e27500 EFLAGS: 00010282 [ 43.212085][ C0] RAX: ffff88812438d048 RBX: ffffffff81cb4e90 RCX: ffffffffffb6a5c8 [ 43.220146][ C0] RDX: ffffffffffffffb8 RSI: ffff888124822a44 RDI: ffff888124822a38 [ 43.228477][ C0] RBP: ffffc90000e27530 R08: 0000000000000000 R09: ffffed10246218be [ 43.237162][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffffffffb8 [ 43.245587][ C0] R13: 0000000000000000 R14: ffff88812438d054 R15: ffff88812438d048 [ 43.254565][ C0] ? ext4_ext_remove_space+0x1fa0/0x4970 [ 43.261328][ C0] ? memmove+0x56/0x70 [ 43.266562][ C0] ext4_ext_remove_space+0x1fa0/0x4970 [ 43.272838][ C0] ? ext4_ext_index_trans_blocks+0xe0/0xe0 [ 43.278558][ C0] ? ext4_es_remove_extent+0x1fd/0x350 [ 43.284367][ C0] ? ext4_zero_partial_blocks+0x10f/0x190 [ 43.290235][ C0] ext4_punch_hole+0x5d7/0x8e0 [ 43.294815][ C0] ext4_fallocate+0x2b1/0x1730 [ 43.299413][ C0] ? avc_has_extended_perms+0x852/0xee0 [ 43.305119][ C0] ? ext4_ext_truncate+0x260/0x260 [ 43.310132][ C0] vfs_fallocate+0x330/0x410 [ 43.314658][ C0] do_vfs_ioctl+0x1aca/0x2350 [ 43.319422][ C0] ? __x64_compat_sys_ioctl+0x80/0x80 [ 43.324996][ C0] ? ioctl_has_perm+0x1f0/0x4c0 [ 43.329657][ C0] ? ioctl_has_perm+0x350/0x4c0 [ 43.334348][ C0] ? has_cap_mac_admin+0x360/0x360 [ 43.339463][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 43.344461][ C0] ? recalc_sigpending+0xfc/0x150 [ 43.349396][ C0] ? __set_current_blocked+0x27b/0x2d0 [ 43.354765][ C0] ? selinux_file_ioctl+0x2d6/0x420 [ 43.359794][ C0] ? set_current_blocked+0x40/0x40 [ 43.364906][ C0] ? selinux_file_alloc_security+0x120/0x120 [ 43.370990][ C0] ? __kasan_check_write+0x14/0x20 [ 43.376286][ C0] ? __fget_files+0x24b/0x280 [ 43.381049][ C0] ? security_file_ioctl+0x39/0x90 [ 43.385994][ C0] __se_sys_ioctl+0x5d/0x110 [ 43.390793][ C0] ? fpregs_assert_state_consistent+0x47/0x60 [ 43.396818][ C0] __x64_sys_ioctl+0x76/0x80 [ 43.401241][ C0] do_syscall_64+0x3d/0xb0 [ 43.405661][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 43.411570][ C0] RIP: 0033:0x7fbfde47cae9 [ 43.415906][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.436746][ C0] RSP: 002b:00007fbfdf14c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 43.445160][ C0] RAX: ffffffffffffffda RBX: 00007fbfde59c050 RCX: 00007fbfde47cae9 [ 43.453251][ C0] RDX: 0000000020000080 RSI: 000000004030582b RDI: 0000000000000004 [ 43.461238][ C0] RBP: 00007fbfde4c847a R08: 0000000000000000 R09: 0000000000000000 [ 43.470058][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.478587][ C0] R13: 000000000000000b R14: 00007fbfde59c050 R15: 00007ffcf89f2998 [ 43.486398][ C0] [ 43.489339][ C0] Modules linked in: [ 43.493085][ C0] ---[ end trace 0000000000000000 ]--- [ 43.493135][ C1] BUG: unable to handle page fault for address: ffffef677ffff111 [ 43.498460][ C0] RIP: 0010:cpuacct_charge+0xa8/0x140 [ 43.506852][ C1] #PF: supervisor read access in kernel mode [ 43.512147][ C0] Code: 00 00 00 4e 8d 3c f5 70 38 2f 85 4d 89 fe 49 c1 ee 03 eb 08 48 8b 1b 48 85 db 74 70 4c 8d a3 e8 00 00 00 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 49 fc 56 00 4d 8b 24 24 43 80 3c [ 43.518041][ C1] #PF: error_code(0x0000) - not-present page [ 43.538177][ C0] RSP: 0018:ffffc90000007968 EFLAGS: 00010006 [ 43.544078][ C1] PGD 0 P4D 0 [ 43.550067][ C0] RAX: 03f710001ffff12d RBX: 1fb88000ffff8881 RCX: dffffc0000000000 [ 43.553303][ C1] Oops: 0000 [#2] PREEMPT SMP KASAN [ 43.561182][ C0] RDX: 000000000000028a RSI: 000000000010167f RDI: ffff888108c18014 [ 43.566247][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B D 6.1.68-syzkaller #0 [ 43.574302][ C0] RBP: ffffc90000007998 R08: dffffc0000000000 R09: fffffbfff0a9e58b [ 43.584501][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 43.594427][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1fb88000ffff8969 [ 43.605175][ C1] RIP: 0010:__run_timers+0x4d4/0x700 [ 43.613285][ C0] R13: dffffc0000000000 R14: 1ffffffff0a5e70e R15: ffffffff852f3870 [ 43.618639][ C1] Code: 3c 08 00 74 08 48 89 df e8 39 88 48 00 4c 89 33 4d 85 f6 74 26 49 83 c6 08 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 0e 88 48 00 49 89 1e 48 b8 00 00 00 [ 43.627078][ C0] FS: 00007fbfdf14c6c0(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 [ 43.647056][ C1] RSP: 0018:ffffc900001a0dc0 EFLAGS: 00010806 [ 43.656526][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.656535][ C0] CR2: 0000000020040000 CR3: 00000001248e8000 CR4: 00000000003506b0 [ 43.663040][ C1] RAX: 1ffff3677ffff111 RBX: ffffc900001a0e60 RCX: dffffc0000000000 [ 43.669624][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.678573][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00000000ffff9b40 [ 43.687250][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.695391][ C1] RBP: ffffc900001a0f08 R08: dffffc0000000000 R09: ffffed103ee64f76 [ 43.703446][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 43.711485][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888124416198 [ 43.711501][ C1] R13: 1ffff11024882c34 R14: ffff9b3bffff8889 R15: ffff8881244161a0 [ 43.711506][ C1] FS: 0000000000000000(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 [ 43.711513][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.711518][ C1] CR2: ffffef677ffff111 CR3: 000000010ed44000 CR4: 00000000003506a0 [ 43.711526][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.711529][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.711534][ C1] Call Trace: [ 43.711539][ C1] [ 43.711545][ C1] ? __die_body+0x62/0xb0 [ 43.711560][ C1] ? __die+0x7e/0x90 [ 43.711565][ C1] ? page_fault_oops+0x675/0x870 [ 43.711574][ C1] ? tick_nohz_handler+0x230/0x230 [ 43.711584][ C1] ? kernelmode_fixup_or_oops+0x190/0x190 [ 43.711591][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 43.711601][ C1] ? __raise_softirq_irqoff+0x17/0xc0 [ 43.711609][ C1] ? raise_softirq+0xa6/0x110 [ 43.711615][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 43.711622][ C1] ? kernelmode_fixup_or_oops+0x14d/0x190 [ 43.711629][ C1] ? __bad_area_nosemaphore+0x92/0x470 [ 43.711634][ C1] ? _nohz_idle_balance+0x6b0/0x6b0 [ 43.711640][ C1] ? update_irq_load_avg+0xff/0x340 [ 43.711648][ C1] ? bad_area_nosemaphore+0x11/0x20 [ 43.711654][ C1] ? do_kern_addr_fault+0x2f/0x40 [ 43.711660][ C1] ? exc_page_fault+0x513/0x700 [ 43.711667][ C1] ? asm_exc_page_fault+0x27/0x30 [ 43.711676][ C1] ? __run_timers+0x4d4/0x700 [ 43.711686][ C1] ? calc_index+0x200/0x200 [ 43.711694][ C1] run_timer_softirq+0x45/0x80 [ 43.711701][ C1] __do_softirq+0x1d2/0x5f2 [ 43.711709][ C1] __irq_exit_rcu+0x50/0xf0 [ 43.711714][ C1] irq_exit_rcu+0x9/0x10 [ 43.711719][ C1] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 43.711726][ C1] [ 43.711728][ C1] [ 43.711731][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 43.711737][ C1] RIP: 0010:acpi_idle_enter+0x2b5/0x5f0 [ 43.711746][ C1] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 53 51 83 fd 48 f7 03 08 00 00 00 0f 85 d9 00 00 00 66 90 0f 00 2d ad 72 ad 00 fb f4 e9 c8 00 00 00 49 83 c7 04 4c 89 f8 48 c1 e8 03 48 be 00 00 00 [ 43.711752][ C1] RSP: 0018:ffffc90000137c70 EFLAGS: 00000246 [ 43.711760][ C1] RAX: 1ffff1102006fa00 RBX: ffff88810037d000 RCX: dffffc0000000000 [ 43.711764][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88810037d000 [ 43.711768][ C1] RBP: ffffc90000137cb0 R08: dffffc0000000000 R09: ffffed102006fa01 [ 43.711772][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888109ab6800 [ 43.711776][ C1] R13: ffff8881003d9804 R14: 0000000000000001 R15: ffff888109ab6864 [ 43.711783][ C1] ? intel_idle_xstate+0x60/0x60 [ 43.711790][ C1] cpuidle_enter_state+0x3e6/0xf00 [ 43.711799][ C1] ? cpuidle_enter_s2idle+0x3a0/0x3a0 [ 43.711805][ C1] ? menu_enable_device+0x340/0x340 [ 43.711811][ C1] ? debug_smp_processor_id+0x17/0x20 [ 43.711819][ C1] cpuidle_enter+0x5a/0x90 [ 43.711825][ C1] do_idle+0x3d1/0x580 [ 43.711831][ C1] ? __do_set_cpus_allowed+0x15d/0x460 [ 43.711839][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 43.711845][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 43.711850][ C1] ? complete+0x16b/0x1c0 [ 43.711859][ C1] cpu_startup_entry+0x44/0x60 [ 43.711865][ C1] start_secondary+0xe3/0xf0 [ 43.711875][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 43.711885][ C1] [ 43.711887][ C1] Modules linked in: [ 43.711894][ C1] CR2: ffffef677ffff111 [ 43.719969][ C1] ---[ end trace 0000000000000000 ]--- [ 43.719980][ C1] RIP: 0010:cpuacct_charge+0xa8/0x140 [ 43.719998][ C1] Code: 00 00 00 4e 8d 3c f5 70 38 2f 85 4d 89 fe 49 c1 ee 03 eb 08 48 8b 1b 48 85 db 74 70 4c 8d a3 e8 00 00 00 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 49 fc 56 00 4d 8b 24 24 43 80 3c [ 43.720004][ C1] RSP: 0018:ffffc90000007968 EFLAGS: 00010006 [ 43.720012][ C1] RAX: 03f710001ffff12d RBX: 1fb88000ffff8881 RCX: dffffc0000000000 [ 43.720017][ C1] RDX: 000000000000028a RSI: 000000000010167f RDI: ffff888108c18014 [ 43.720022][ C1] RBP: ffffc90000007998 R08: dffffc0000000000 R09: fffffbfff0a9e58b [ 43.720026][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1fb88000ffff8969 [ 43.720030][ C1] R13: dffffc0000000000 R14: 1ffffffff0a5e70e R15: ffffffff852f3870 [ 43.720035][ C1] FS: 0000000000000000(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 [ 43.720040][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.720055][ C1] CR2: ffffef677ffff111 CR3: 000000010ed44000 CR4: 00000000003506a0 [ 43.720062][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.720077][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.864256][ C0] Shutting down cpus with NMI [ 45.346414][ C0] Kernel Offset: disabled [ 45.350549][ C0] Rebooting in 86400 seconds..