Warning: Permanently added '10.128.0.208' (ED25519) to the list of known hosts. 2026/03/24 17:41:52 ignoring optional flag "type"="gce" 2026/03/24 17:41:52 parsed 1 programs [ 37.224279][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 37.224288][ T24] audit: type=1400 audit(1774374112.790:92): avc: denied { unlink } for pid=317 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2026/03/24 17:41:52 executed programs: 0 [ 37.290393][ T317] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.330237][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.337508][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.344844][ T323] device bridge_slave_0 entered promiscuous mode [ 37.352697][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.360067][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.368153][ T323] device bridge_slave_1 entered promiscuous mode [ 37.398833][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.405960][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.413267][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.421126][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.435581][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.442964][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.450636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.458991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.468264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.476533][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.485245][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.493797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.502463][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.509726][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.520009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.529338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.541109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.552849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.560942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.568557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.576759][ T323] device veth0_vlan entered promiscuous mode [ 37.585903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.595211][ T323] device veth1_macvtap entered promiscuous mode [ 37.603577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.613134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.633459][ T24] audit: type=1400 audit(1774374113.200:93): avc: denied { mounton } for pid=327 comm="syz-executor.0" path="/root/syzkaller-testdir383462606/syzkaller.yIi4bW/0/file1" dev="sda1" ino=2035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 37.667789][ T328] EXT4-fs (loop0): 1 orphan inode deleted [ 37.673648][ T328] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,norecovery,dioread_lock,errors=remount-ro,noauto_da_alloc,resgid=0x0000000000000000,barrier,auto_da_alloc,max_dir_size_kb=0x00000000000004e1, [ 37.696463][ T328] ext4 filesystem being mounted at /root/syzkaller-testdir383462606/syzkaller.yIi4bW/0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.696470][ T24] audit: type=1400 audit(1774374113.270:94): avc: denied { mount } for pid=327 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.738047][ T24] audit: type=1400 audit(1774374113.300:95): avc: denied { write } for pid=327 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.741769][ T333] EXT4-fs error (device loop0): ext4_ext_remove_space:2841: inode #16: comm syz-executor.0: path[1].p_hdr == NULL [ 37.760647][ T24] audit: type=1400 audit(1774374113.300:96): avc: denied { add_name } for pid=327 comm="syz-executor.0" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.772411][ T333] EXT4-fs (loop0): Remounting filesystem read-only [ 37.793774][ T24] audit: type=1400 audit(1774374113.300:97): avc: denied { create } for pid=327 comm="syz-executor.0" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.800018][ T333] EXT4-fs error (device loop0): __ext4_get_inode_loc:4444: comm syz-executor.0: Invalid inode table block 0 in block_group 0 [ 37.821012][ T24] audit: type=1400 audit(1774374113.300:98): avc: denied { read write open } for pid=327 comm="syz-executor.0" path="/root/syzkaller-testdir383462606/syzkaller.yIi4bW/0/file1/bus" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.833732][ T333] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 37.861631][ T24] audit: type=1400 audit(1774374113.310:99): avc: denied { mounton } for pid=327 comm="syz-executor.0" path="/root/syzkaller-testdir383462606/syzkaller.yIi4bW/0/file1/bus" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.873113][ T333] EXT4-fs error (device loop0): ext4_punch_hole:4236: inode #16: comm syz-executor.0: mark_inode_dirty error [ 37.900681][ T24] audit: type=1400 audit(1774374113.310:100): avc: denied { ioctl } for pid=327 comm="syz-executor.0" path="/root/syzkaller-testdir383462606/syzkaller.yIi4bW/0/file1/bus" dev="loop0" ino=16 ioctlcmd=0x582b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.941866][ T24] audit: type=1400 audit(1774374113.490:101): avc: denied { unmount } for pid=323 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.006968][ T335] EXT4-fs (loop0): 1 orphan inode deleted [ 38.012749][ T335] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,norecovery,dioread_lock,errors=remount-ro,noauto_da_alloc,resgid=0x0000000000000000,barrier,auto_da_alloc,max_dir_size_kb=0x00000000000004e1, [ 38.035969][ T335] ext4 filesystem being mounted at /root/syzkaller-testdir383462606/syzkaller.yIi4bW/1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.056388][ T339] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz-executor.0: Invalid block bitmap block 0 in block_group 0 [ 38.070755][ T339] EXT4-fs (loop0): Remounting filesystem read-only [ 38.077509][ T339] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5661: Corrupt filesystem [ 38.086650][ T339] ================================================================== [ 38.095110][ T339] BUG: KASAN: out-of-bounds in ext4_ext_remove_space+0x231b/0x4570 [ 38.103507][ T339] Read of size 18446744073709551544 at addr ffff888121ff0054 by task syz-executor.0/339 [ 38.113979][ T339] [ 38.116293][ T339] CPU: 0 PID: 339 Comm: syz-executor.0 Not tainted syzkaller #0 [ 38.123906][ T339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 38.134505][ T339] Call Trace: [ 38.137781][ T339] __dump_stack+0x21/0x24 [ 38.142079][ T339] dump_stack_lvl+0x1a7/0x208 [ 38.146852][ T339] ? show_regs_print_info+0x18/0x18 [ 38.152037][ T339] ? thaw_kernel_threads+0x220/0x220 [ 38.157305][ T339] print_address_description+0x7f/0x2c0 [ 38.162838][ T339] ? ext4_ext_remove_space+0x231b/0x4570 [ 38.168623][ T339] kasan_report+0xe2/0x130 [ 38.173355][ T339] ? ext4_ext_remove_space+0x231b/0x4570 [ 38.179147][ T339] ? ext4_ext_remove_space+0x231b/0x4570 [ 38.184761][ T339] kasan_check_range+0x249/0x2a0 [ 38.189792][ T339] ? ext4_ext_remove_space+0x231b/0x4570 [ 38.195677][ T339] memmove+0x2d/0x70 [ 38.199622][ T339] ext4_ext_remove_space+0x231b/0x4570 [ 38.205177][ T339] ? __kasan_slab_free+0x11/0x20 [ 38.210113][ T339] ? ext4_ext_index_trans_blocks+0x100/0x100 [ 38.216068][ T339] ? ext4_es_remove_extent+0x1d9/0x330 [ 38.221616][ T339] ext4_punch_hole+0x6f8/0xad0 [ 38.226756][ T339] ext4_fallocate+0x271/0x1a70 [ 38.231614][ T339] ? selinux_file_permission+0x2a5/0x510 [ 38.237328][ T339] ? preempt_count_add+0x90/0x1b0 [ 38.242341][ T339] vfs_fallocate+0x4b4/0x590 [ 38.246919][ T339] do_vfs_ioctl+0x11cf/0x14c0 [ 38.251695][ T339] ? __ia32_compat_sys_ioctl+0x8e0/0x8e0 [ 38.257307][ T339] ? has_cap_mac_admin+0x370/0x370 [ 38.262742][ T339] ? __kasan_check_write+0x14/0x20 [ 38.267838][ T339] ? _raw_spin_lock_irq+0x95/0xf0 [ 38.272867][ T339] ? _raw_spin_lock_irqsave+0x130/0x130 [ 38.279425][ T339] ? selinux_file_ioctl+0x3a0/0x4d0 [ 38.284679][ T339] ? recalc_sigpending+0x1ac/0x230 [ 38.289903][ T339] ? selinux_file_alloc_security+0x120/0x120 [ 38.296106][ T339] ? __set_current_blocked+0x204/0x230 [ 38.301642][ T339] ? __fget_files+0x2c4/0x320 [ 38.306322][ T339] ? security_file_ioctl+0x84/0xa0 [ 38.311553][ T339] __se_sys_ioctl+0x9f/0x1a0 [ 38.316118][ T339] __x64_sys_ioctl+0x7b/0x90 [ 38.320820][ T339] do_syscall_64+0x31/0x40 [ 38.326102][ T339] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 38.332396][ T339] RIP: 0033:0x7f5f33316079 [ 38.337142][ T339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 38.357254][ T339] RSP: 002b:00007f5f2aac70b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 38.365879][ T339] RAX: ffffffffffffffda RBX: 00007f5f33455050 RCX: 00007f5f33316079 [ 38.373869][ T339] RDX: 0000000020000080 RSI: 000000004030582b RDI: 0000000000000004 [ 38.382018][ T339] RBP: 00007f5f33377498 R08: 0000000000000000 R09: 0000000000000000 [ 38.389976][ T339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.398228][ T339] R13: 000000000000000b R14: 00007f5f33455050 R15: 00007fffc90fc328 [ 38.407228][ T339] [ 38.409666][ T339] The buggy address belongs to the page: [ 38.416247][ T339] page:ffffea000487fc00 refcount:2 mapcount:0 mapping:ffff8881092fcb10 index:0x3a pfn:0x121ff0 [ 38.427687][ T339] aops:def_blk_aops ino:0 [ 38.433019][ T339] flags: 0x4000000000002036(referenced|uptodate|lru|active|private) [ 38.441957][ T339] raw: 4000000000002036 ffffea00048825c8 ffffea000487b2c8 ffff8881092fcb10 [ 38.451114][ T339] raw: 000000000000003a ffff88811c7dbe70 00000002ffffffff ffff888107ff8000 [ 38.459677][ T339] page dumped because: kasan: bad access detected [ 38.466672][ T339] page->mem_cgroup:ffff888107ff8000 [ 38.472355][ T339] page_owner tracks the page as allocated [ 38.478663][ T339] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 335, ts 38053880623, free_ts 37741606726 [ 38.497081][ T339] prep_new_page+0x179/0x180 [ 38.501665][ T339] get_page_from_freelist+0x223b/0x23d0 [ 38.507527][ T339] __alloc_pages_nodemask+0x290/0x620 [ 38.513071][ T339] pagecache_get_page+0x63e/0x930 [ 38.518067][ T339] __getblk_gfp+0x212/0x780 [ 38.522658][ T339] ext4_ext_insert_extent+0x10a2/0x45d0 [ 38.528178][ T339] ext4_ext_map_blocks+0x17a9/0x5dd0 [ 38.533983][ T339] ext4_map_blocks+0x985/0x1bd0 [ 38.539088][ T339] _ext4_get_block+0x1d1/0x4e0 [ 38.543849][ T339] ext4_get_block+0x39/0x50 [ 38.549053][ T339] ext4_block_write_begin+0x573/0x1340 [ 38.554601][ T339] ext4_write_begin+0x67e/0x1690 [ 38.560065][ T339] ext4_da_write_begin+0x478/0xf10 [ 38.565174][ T339] generic_perform_write+0x2ce/0x540 [ 38.570634][ T339] ext4_buffered_write_iter+0x4b8/0x640 [ 38.576373][ T339] ext4_file_write_iter+0x53f/0x1980 [ 38.581632][ T339] page last free stack trace: [ 38.586467][ T339] free_unref_page_prepare+0x2b7/0x2d0 [ 38.591911][ T339] free_unref_page_list+0x129/0x9c0 [ 38.597472][ T339] release_pages+0xe52/0xea0 [ 38.602046][ T339] __pagevec_release+0x71/0xe0 [ 38.607306][ T339] truncate_inode_pages_range+0x819/0x16d0 [ 38.613215][ T339] truncate_pagecache_range+0xa1/0xb0 [ 38.618579][ T339] ext4_punch_hole+0x41f/0xad0 [ 38.623326][ T339] ext4_fallocate+0x271/0x1a70 [ 38.628160][ T339] vfs_fallocate+0x4b4/0x590 [ 38.632716][ T339] do_vfs_ioctl+0x11cf/0x14c0 [ 38.637442][ T339] __se_sys_ioctl+0x9f/0x1a0 [ 38.642086][ T339] __x64_sys_ioctl+0x7b/0x90 [ 38.646641][ T339] do_syscall_64+0x31/0x40 [ 38.651155][ T339] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 38.657299][ T339] [ 38.659630][ T339] Memory state around the buggy address: [ 38.665241][ T339] ffff888121feff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.673560][ T339] ffff888121feff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.681791][ T339] >ffff888121ff0000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 38.689830][ T339] ^ [ 38.696481][ T339] ffff888121ff0080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 38.704532][ T339] ffff888121ff0100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 38.713184][ T339] ================================================================== [ 38.721328][ T339] Disabling lock debugging due to kernel taint [ 38.729497][ T339] EXT4-fs error (device loop0): __ext4_get_inode_loc:4444: comm syz-executor.0: Invalid inode table block 0 in block_group 0 [ 38.744706][ T339] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 38.754493][ T339] EXT4-fs error (device loop0): ext4_punch_hole:4236: inode #16: comm syz-executor.0: mark_inode_dirty error [ 38.867384][ T341] EXT4-fs (loop0): 1 orphan inode deleted [ 38.873116][ T341] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,norecovery,dioread_lock,errors=remount-ro,noauto_da_alloc,resgid=0x0000000000000000,barrier,auto_da_alloc,max_dir_size_kb=0x00000000000004e1, [ 38.894811][ T341] ext4 filesystem being mounted at /root/syzkaller-testdir383462606/syzkaller.yIi4bW/2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.915310][ T345] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz-executor.0: Invalid block bitmap block 0 in block_group 0 [ 38.929970][ T345] EXT4-fs (loop0): Remounting filesystem read-only [ 38.937187][ T345] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5661: Corrupt filesystem [ 38.948813][ C0] BUG: unable to handle page fault for address: 00000001ffff8881 [ 38.956655][ C0] #PF: supervisor instruction fetch in kernel mode [ 38.963495][ C0] #PF: error_code(0x0010) - not-present page [ 38.969757][ C0] PGD 10d79a067 P4D 10d79a067 PUD 0 [ 38.975197][ C0] Oops: 0010 [#1] PREEMPT SMP KASAN [ 38.980494][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B syzkaller #0 [ 38.989688][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 38.999918][ C0] RIP: 0010:0x1ffff8881 [ 39.004060][ C0] Code: Unable to access opcode bytes at RIP 0x1ffff8857. [ 39.011477][ C0] RSP: 0018:ffffc90000007d78 EFLAGS: 00010046 [ 39.017636][ C0] RAX: ffffffff8155c1c9 RBX: ffffc90000f67af8 RCX: ffffffff8641c100 [ 39.025979][ C0] RDX: 0000000000010001 RSI: 0000000000000806 RDI: ffffc90000f67ac0 [ 39.034045][ C0] RBP: ffffc90000007eb0 R08: 0000000000000003 R09: 0000000000000004 [ 39.042307][ C0] R10: dffffc0000000000 R11: fffff52000000fa0 R12: ffffc90000f67ac0 [ 39.050529][ C0] R13: dffffc0000000000 R14: 00000001ffff8881 R15: 1ffff920001ecf5f [ 39.058574][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 39.067690][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.074738][ C0] CR2: 00000001ffff8881 CR3: 000000010be09000 CR4: 00000000003506b0 [ 39.082708][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.091270][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.099515][ C0] Call Trace: [ 39.102971][ C0] [ 39.105897][ C0] ? __hrtimer_run_queues+0x34f/0x820 [ 39.111259][ C0] ? hrtimer_interrupt+0xdc0/0xdc0 [ 39.116341][ C0] ? ktime_get_update_offsets_now+0x293/0x2b0 [ 39.122669][ C0] hrtimer_interrupt+0x3a6/0xdc0 [ 39.127684][ C0] ? sched_clock_cpu+0x1b/0x3d0 [ 39.132532][ C0] __sysvec_apic_timer_interrupt+0xfa/0x3f0 [ 39.138768][ C0] asm_call_irq_on_stack+0xf/0x20 [ 39.143998][ C0] [ 39.147140][ C0] sysvec_apic_timer_interrupt+0x85/0xe0 [ 39.152757][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 39.159008][ C0] RIP: 0010:default_idle+0x12/0x20 [ 39.164202][ C0] Code: 44 2a 00 00 49 bd 00 00 00 00 00 fc ff df e9 67 ff ff ff e8 d0 f7 fa ff 55 48 89 e5 0f 1f 44 00 00 0f 00 2d 90 49 62 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 41 57 41 56 [ 39.185515][ C0] RSP: 0018:ffffffff86407d58 EFLAGS: 00000242 [ 39.191947][ C0] RAX: ffff8881f7000000 RBX: ffffffff8641c100 RCX: 0000000000006902 [ 39.200187][ C0] RDX: 0000000000000001 RSI: ffffffff85408080 RDI: ffffffff85408040 [ 39.208633][ C0] RBP: ffffffff86407d58 R08: ffff8881f70573d3 R09: 1ffff1103ee0ae7a [ 39.216590][ C0] R10: dffffc0000000000 R11: ffffed103ee0ae7b R12: 1ffffffff0c83820 [ 39.225286][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 39.234055][ C0] arch_cpu_idle+0xa/0x10 [ 39.238465][ C0] default_idle_call+0x71/0x1d0 [ 39.243997][ C0] do_idle+0x1dc/0x570 [ 39.248064][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 39.253444][ C0] ? radix_tree_lookup+0x183/0x1d0 [ 39.258568][ C0] ? debug_smp_processor_id+0x17/0x20 [ 39.264566][ C0] cpu_startup_entry+0x18/0x20 [ 39.269891][ C0] rest_init+0xe8/0xf0 [ 39.273952][ C0] ? time_init+0x38/0x38 [ 39.278211][ C0] arch_call_rest_init+0xe/0x10 [ 39.283056][ C0] start_kernel+0x431/0x49f [ 39.287538][ C0] x86_64_start_reservations+0x2a/0x2c [ 39.293241][ C0] x86_64_start_kernel+0x60/0x63 [ 39.298579][ C0] secondary_startup_64_no_verify+0xad/0xbb [ 39.304531][ C0] Modules linked in: [ 39.308437][ C0] CR2: 00000001ffff8881 [ 39.312587][ C0] ---[ end trace e77ee9921dbb938d ]--- [ 39.312621][ C1] general protection fault, probably for non-canonical address 0xe0ffec001ffff12e: 0000 [#2] PREEMPT SMP KASAN [ 39.318215][ C0] RIP: 0010:0x1ffff8881 [ 39.329988][ C1] KASAN: maybe wild-memory-access in range [0x07ff8000ffff8970-0x07ff8000ffff8977] [ 39.334119][ C0] Code: Unable to access opcode bytes at RIP 0x1ffff8857. [ 39.343406][ C1] CPU: 1 PID: 345 Comm: syz-executor.0 Tainted: G B D syzkaller #0 [ 39.350494][ C0] RSP: 0018:ffffc90000007d78 EFLAGS: 00010046 [ 39.360005][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 39.360019][ C0] [ 39.366086][ C1] RIP: 0010:cpuacct_account_field+0x94/0xe0 [ 39.376221][ C0] RAX: ffffffff8155c1c9 RBX: ffffc90000f67af8 RCX: ffffffff8641c100 [ 39.378541][ C1] Code: 63 ff eb 0c 4d 8b 36 49 81 fe e0 9e 4f 86 74 51 48 c7 c7 00 3a e8 84 e8 3a b2 32 03 49 8d be f0 00 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 e0 55 54 00 49 8b 86 f0 00 00 00 65 4a 01 [ 39.384640][ C0] RDX: 0000000000010001 RSI: 0000000000000806 RDI: ffffc90000f67ac0 [ 39.393040][ C1] RSP: 0018:ffffc90000170c10 EFLAGS: 00010006 [ 39.413410][ C0] RBP: ffffc90000007eb0 R08: 0000000000000003 R09: 0000000000000004 [ 39.422325][ C1] [ 39.428376][ C0] R10: dffffc0000000000 R11: fffff52000000fa0 R12: ffffc90000f67ac0 [ 39.436411][ C1] RAX: 00fff0001ffff12e RBX: 00000000009811c9 RCX: bf46e59eca37c000 [ 39.436424][ C1] RDX: 00000000009811c9 RSI: ffffffff84e83a00 RDI: 07ff8000ffff8971 [ 39.438745][ C0] R13: dffffc0000000000 R14: 00000001ffff8881 R15: 1ffff920001ecf5f [ 39.446930][ C1] RBP: ffffc90000170c30 R08: ffffffff86ea5b1f R09: 1ffffffff0dd4b63 [ 39.454880][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 39.463110][ C1] R10: dffffc0000000000 R11: fffffbfff0dd4b64 R12: dffffc0000000000 [ 39.471066][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.479318][ C1] R13: ffff88810d7c8500 R14: 07ff8000ffff8881 R15: 0000000000000002 [ 39.489094][ C0] CR2: 00000001ffff8881 CR3: 000000010be09000 CR4: 00000000003506b0 [ 39.497129][ C1] FS: 00007f5f2aac76c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 39.503946][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.511995][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.519939][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.529110][ C1] CR2: 00007f5f2aac6fd0 CR3: 000000010dc40000 CR4: 00000000003506a0 [ 39.537143][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 39.544153][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.575880][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.584067][ C1] Call Trace: [ 39.587338][ C1] [ 39.590170][ C1] account_system_index_time+0x119/0x1f0 [ 39.595777][ C1] irqtime_account_process_tick+0x107/0x4f0 [ 39.601653][ C1] account_process_tick+0x76/0x420 [ 39.607145][ C1] update_process_times+0x7d/0x200 [ 39.612358][ C1] tick_sched_timer+0x17c/0x240 [ 39.617286][ C1] ? tick_setup_sched_timer+0x450/0x450 [ 39.622911][ C1] __hrtimer_run_queues+0x34f/0x820 [ 39.628568][ C1] ? hrtimer_interrupt+0xdc0/0xdc0 [ 39.633682][ C1] ? ktime_get_update_offsets_now+0x293/0x2b0 [ 39.639919][ C1] hrtimer_interrupt+0x3a6/0xdc0 [ 39.645698][ C1] ? sched_clock_cpu+0x1b/0x3d0 [ 39.650549][ C1] __sysvec_apic_timer_interrupt+0xfa/0x3f0 [ 39.656509][ C1] asm_call_irq_on_stack+0xf/0x20 [ 39.661685][ C1] [ 39.664785][ C1] sysvec_apic_timer_interrupt+0x85/0xe0 [ 39.670589][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 39.676549][ C1] RIP: 0010:__memmove+0x19c/0x1a0 [ 39.681820][ C1] Code: fa 02 72 16 66 44 8b 1e 66 44 8b 54 16 fe 66 44 89 1f 66 44 89 54 17 fe eb 0c 48 83 fa 01 72 06 44 8a 1e 44 88 1f c3 48 89 d1 a4 c3 00 eb 2e 0f 1f 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 [ 39.701531][ C1] RSP: 0018:ffffc90000fb7740 EFLAGS: 00010282 [ 39.707575][ C1] RAX: ffff8881220fd048 RBX: ffffffffffffffb8 RCX: ffffffffff31f4ab [ 39.715528][ C1] RDX: ffffffffffffffb8 RSI: ffff888122dddb61 RDI: ffff888122dddb55 [ 39.723565][ C1] RBP: ffffc90000fb7770 R08: ffff8881220fd000 R09: 1ffff110238feca8 [ 39.731533][ C1] R10: dffffc0000000000 R11: ffffed10238feca9 R12: 0000000000000000 [ 39.739827][ C1] R13: ffffffff81cb165b R14: ffff8881220fd054 R15: ffff8881220fd048 [ 39.747897][ C1] ? ext4_ext_remove_space+0x231b/0x4570 [ 39.753539][ C1] Modules linked in: [ 39.757508][ C1] ---[ end trace e77ee9921dbb938e ]--- [ 39.763198][ C1] RIP: 0010:0x1ffff8881 [ 39.767347][ C1] Code: Unable to access opcode bytes at RIP 0x1ffff8857. [ 39.774434][ C1] RSP: 0018:ffffc90000007d78 EFLAGS: 00010046 [ 39.780713][ C1] RAX: ffffffff8155c1c9 RBX: ffffc90000f67af8 RCX: ffffffff8641c100 [ 39.788679][ C1] RDX: 0000000000010001 RSI: 0000000000000806 RDI: ffffc90000f67ac0 [ 39.796749][ C1] RBP: ffffc90000007eb0 R08: 0000000000000003 R09: 0000000000000004 [ 39.804795][ C1] R10: dffffc0000000000 R11: fffff52000000fa0 R12: ffffc90000f67ac0 [ 39.812746][ C1] R13: dffffc0000000000 R14: 00000001ffff8881 R15: 1ffff920001ecf5f [ 39.820879][ C1] FS: 00007f5f2aac76c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 39.829784][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.836445][ C1] CR2: 00007f5f2aac6fd0 CR3: 000000010dc40000 CR4: 00000000003506a0 [ 39.844519][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.852583][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.655126][ C0] Shutting down cpus with NMI [ 40.660087][ C0] Kernel Offset: disabled [ 40.664399][ C0] Rebooting in 86400 seconds..