Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts. 2023/10/18 12:27:15 ignoring optional flag "sandboxArg"="0" 2023/10/18 12:27:15 parsed 1 programs [ 41.230975][ T23] kauditd_printk_skb: 75 callbacks suppressed [ 41.230980][ T23] audit: type=1400 audit(1697632035.300:151): avc: denied { mounton } for pid=333 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 41.267857][ T23] audit: type=1400 audit(1697632035.320:152): avc: denied { mount } for pid=333 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 41.291918][ T23] audit: type=1400 audit(1697632035.320:153): avc: denied { setattr } for pid=333 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 2023/10/18 12:27:15 executed programs: 0 [ 41.316351][ T23] audit: type=1400 audit(1697632035.320:154): avc: denied { read write } for pid=333 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 41.344870][ T333] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 41.345127][ T23] audit: type=1400 audit(1697632035.320:155): avc: denied { open } for pid=333 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 41.382330][ T23] audit: type=1400 audit(1697632035.350:156): avc: denied { unlink } for pid=333 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 41.405438][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.411437][ T23] audit: type=1400 audit(1697632035.350:157): avc: denied { relabelto } for pid=335 comm="mkswap" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 41.418368][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.451061][ T23] audit: type=1400 audit(1697632035.420:158): avc: denied { mounton } for pid=339 comm="syz-executor.0" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 41.459843][ T339] device bridge_slave_0 entered promiscuous mode [ 41.491772][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.500227][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.507595][ T339] device bridge_slave_1 entered promiscuous mode [ 41.538865][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.546084][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.553562][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.561338][ T339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.579738][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.587046][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.596062][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.606803][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.615644][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.623880][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.631057][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.649102][ T339] device veth0_vlan entered promiscuous mode [ 41.656252][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.665082][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.673877][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.682096][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.690621][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.699175][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.706338][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.714071][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.722273][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.734724][ T339] device veth1_macvtap entered promiscuous mode [ 41.744612][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.753148][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.762187][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.785285][ T23] audit: type=1400 audit(1697632035.860:159): avc: denied { mounton } for pid=343 comm="syz-executor.0" path="/root/syzkaller-testdir2943582017/syzkaller.5yhKo0/0/file1" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 41.826588][ T344] EXT4-fs (loop0): 1 orphan inode deleted [ 41.832347][ T344] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,norecovery,dioread_lock,errors=remount-ro,noauto_da_alloc,resgid=0x0000000000000000,barrier,auto_da_alloc,max_dir_size_kb=0x00000000000004e1, [ 41.855225][ T23] audit: type=1400 audit(1697632035.940:160): avc: denied { mount } for pid=343 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.877790][ T344] ext4 filesystem being mounted at /root/syzkaller-testdir2943582017/syzkaller.5yhKo0/0/file1 supports timestamps until 2038 (0x7fffffff) [ 41.906509][ T349] EXT4-fs error (device loop0): ext4_ext_remove_space:2857: inode #16: comm syz-executor.0: path[1].p_hdr == NULL [ 41.919326][ T349] EXT4-fs (loop0): Remounting filesystem read-only [ 41.926379][ T349] EXT4-fs error (device loop0): __ext4_get_inode_loc:4425: comm syz-executor.0: Invalid inode table block 0 in block_group 0 [ 41.940795][ T349] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 41.950580][ T349] EXT4-fs error (device loop0): ext4_punch_hole:4218: inode #16: comm syz-executor.0: mark_inode_dirty error [ 42.025931][ T352] EXT4-fs (loop0): 1 orphan inode deleted [ 42.031733][ T352] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,norecovery,dioread_lock,errors=remount-ro,noauto_da_alloc,resgid=0x0000000000000000,barrier,auto_da_alloc,max_dir_size_kb=0x00000000000004e1, [ 42.054638][ T352] ext4 filesystem being mounted at /root/syzkaller-testdir2943582017/syzkaller.5yhKo0/1/file1 supports timestamps until 2038 (0x7fffffff) [ 42.078263][ T356] EXT4-fs error (device loop0): ext4_ext_remove_space:2857: inode #16: comm syz-executor.0: path[1].p_hdr == NULL [ 42.090690][ T356] EXT4-fs (loop0): Remounting filesystem read-only [ 42.097464][ T356] EXT4-fs error (device loop0): __ext4_get_inode_loc:4425: comm syz-executor.0: Invalid inode table block 0 in block_group 0 [ 42.111509][ T356] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 42.121486][ T356] EXT4-fs error (device loop0): ext4_punch_hole:4218: inode #16: comm syz-executor.0: mark_inode_dirty error [ 42.205938][ T358] EXT4-fs (loop0): 1 orphan inode deleted [ 42.211692][ T358] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,norecovery,dioread_lock,errors=remount-ro,noauto_da_alloc,resgid=0x0000000000000000,barrier,auto_da_alloc,max_dir_size_kb=0x00000000000004e1, [ 42.234657][ T358] ext4 filesystem being mounted at /root/syzkaller-testdir2943582017/syzkaller.5yhKo0/2/file1 supports timestamps until 2038 (0x7fffffff) [ 42.269890][ T363] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:475: comm syz-executor.0: Invalid block bitmap block 0 in block_group 0 [ 42.285962][ T363] EXT4-fs (loop0): Remounting filesystem read-only [ 42.292850][ T363] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5614: Corrupt filesystem [ 42.301855][ T363] ================================================================== [ 42.310009][ T363] BUG: KASAN: out-of-bounds in ext4_ext_remove_space+0xfae/0x3c70 [ 42.320265][ T363] Read of size 18446744073709551544 at addr ffff88812147f054 by task syz-executor.0/363 [ 42.330478][ T363] [ 42.332616][ T363] CPU: 1 PID: 363 Comm: syz-executor.0 Not tainted 5.10.194-syzkaller #0 [ 42.341814][ T363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 42.352300][ T363] Call Trace: [ 42.355457][ T363] dump_stack_lvl+0x81/0xac [ 42.359797][ T363] print_address_description.constprop.0+0x24/0x160 [ 42.366287][ T363] ? ext4_ext_remove_space+0xfae/0x3c70 [ 42.371884][ T363] kasan_report.cold+0x82/0xdb [ 42.376598][ T363] ? ext4_ext_remove_space+0xfae/0x3c70 [ 42.382061][ T363] kasan_check_range+0x148/0x190 [ 42.387044][ T363] memmove+0x24/0x60 [ 42.391484][ T363] ext4_ext_remove_space+0xfae/0x3c70 [ 42.397185][ T363] ? ext4_ext_index_trans_blocks+0x100/0x100 [ 42.402992][ T363] ? ext4_es_remove_extent+0x16f/0x250 [ 42.408281][ T363] ? ext4_es_lookup_extent+0x9b0/0x9b0 [ 42.413570][ T363] ? ext4_zero_partial_blocks+0x21b/0x520 [ 42.419119][ T363] ? __ext4_journal_start_sb+0x33/0x2d0 [ 42.424506][ T363] ext4_punch_hole+0x783/0xf90 [ 42.429190][ T363] ? rwsem_down_write_slowpath+0x1160/0x1160 [ 42.435092][ T363] ext4_fallocate+0x6fb/0x2c90 [ 42.439745][ T363] ? avc_ss_reset+0x120/0x120 [ 42.444295][ T363] ? ext4_ext_truncate+0x1c0/0x1c0 [ 42.449430][ T363] ? security_file_permission+0x4c/0x460 [ 42.455367][ T363] vfs_fallocate+0x2b1/0xb10 [ 42.459951][ T363] ioctl_preallocate+0x149/0x1c0 [ 42.464879][ T363] ? fiemap_prep+0x200/0x200 [ 42.469494][ T363] ? __kasan_check_write+0x14/0x20 [ 42.474568][ T363] ? _raw_spin_lock_irq+0x87/0x110 [ 42.479943][ T363] do_vfs_ioctl+0xaec/0xd10 [ 42.484996][ T363] ? generic_block_fiemap+0x70/0x70 [ 42.490319][ T363] ? sigsuspend+0x250/0x250 [ 42.494815][ T363] ? __kasan_check_write+0x14/0x20 [ 42.499768][ T363] ? selinux_file_ioctl+0xee/0x240 [ 42.504765][ T363] __x64_sys_ioctl+0xce/0x1a0 [ 42.509330][ T363] do_syscall_64+0x32/0x80 [ 42.513664][ T363] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 42.520084][ T363] RIP: 0033:0x7f99357e1ae9 [ 42.524432][ T363] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 42.544556][ T363] RSP: 002b:00007f992cf830c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.553230][ T363] RAX: ffffffffffffffda RBX: 00007f9935901050 RCX: 00007f99357e1ae9 [ 42.561050][ T363] RDX: 0000000020000080 RSI: 000000004030582b RDI: 0000000000000004 [ 42.568959][ T363] RBP: 00007f993582d47a R08: 0000000000000000 R09: 0000000000000000 [ 42.576881][ T363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.585048][ T363] R13: 000000000000000b R14: 00007f9935901050 R15: 00007ffc7bb72d08 [ 42.592885][ T363] [ 42.595025][ T363] The buggy address belongs to the page: [ 42.600498][ T363] page:ffffea0004851fc0 refcount:2 mapcount:0 mapping:ffff888108fb2490 index:0x3a pfn:0x12147f [ 42.610750][ T363] aops:def_blk_aops ino:0 [ 42.614907][ T363] flags: 0x4000000000002036(referenced|uptodate|lru|active|private) [ 42.622732][ T363] raw: 4000000000002036 ffffea000480fac8 ffffea0004838b48 ffff888108fb2490 [ 42.631223][ T363] raw: 000000000000003a ffff88812103c690 00000002ffffffff ffff88811c9da000 [ 42.639746][ T363] page dumped because: kasan: bad access detected [ 42.646174][ T363] page->mem_cgroup:ffff88811c9da000 [ 42.651187][ T363] page_owner tracks the page as allocated [ 42.656983][ T363] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 358, ts 42266999680, free_ts 0 [ 42.673440][ T363] get_page_from_freelist+0x1fee/0x2ad0 [ 42.678818][ T363] __alloc_pages_nodemask+0x2ae/0x2360 [ 42.684952][ T363] pagecache_get_page+0x169/0x6f0 [ 42.689948][ T363] __getblk_slow+0x1ad/0x580 [ 42.694372][ T363] __getblk_gfp+0x3d/0x50 [ 42.698716][ T363] ext4_ext_insert_extent+0xe97/0x3ff0 [ 42.704017][ T363] ext4_ext_map_blocks+0xf09/0x5100 [ 42.709038][ T363] ext4_map_blocks+0x593/0x1450 [ 42.714186][ T363] _ext4_get_block+0x206/0x5b0 [ 42.719009][ T363] ext4_get_block+0x11/0x20 [ 42.723494][ T363] ext4_block_write_begin+0x3b9/0xdc0 [ 42.729039][ T363] ext4_write_begin+0x484/0xf00 [ 42.733815][ T363] ext4_da_write_begin+0x52b/0xc30 [ 42.738747][ T363] generic_perform_write+0x202/0x4a0 [ 42.743896][ T363] ext4_buffered_write_iter+0x1e5/0x420 [ 42.749268][ T363] ext4_file_write_iter+0x358/0x18e0 [ 42.754998][ T363] page_owner free stack trace missing [ 42.760507][ T363] [ 42.762750][ T363] Memory state around the buggy address: [ 42.768788][ T363] ffff88812147ef00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 42.778168][ T363] ffff88812147ef80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 42.786157][ T363] >ffff88812147f000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 42.794714][ T363] ^ [ 42.801536][ T363] ffff88812147f080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 42.809825][ T363] ffff88812147f100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 42.818073][ T363] ================================================================== [ 42.825969][ T363] Disabling lock debugging due to kernel taint [ 42.834522][ T363] EXT4-fs error (device loop0): __ext4_get_inode_loc:4425: comm syz-executor.0: Invalid inode table block 0 in block_group 0 [ 42.847601][ T363] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 42.859525][ T363] EXT4-fs error (device loop0): ext4_punch_hole:4218: inode #16: comm syz-executor.0: mark_inode_dirty error [ 42.956158][ T365] EXT4-fs (loop0): 1 orphan inode deleted [ 42.962596][ T365] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,norecovery,dioread_lock,errors=remount-ro,noauto_da_alloc,resgid=0x0000000000000000,barrier,auto_da_alloc,max_dir_size_kb=0x00000000000004e1, [ 42.986338][ T365] ext4 filesystem being mounted at /root/syzkaller-testdir2943582017/syzkaller.5yhKo0/3/file1 supports timestamps until 2038 (0x7fffffff) [ 43.007137][ T369] EXT4-fs error (device loop0): ext4_ext_remove_space:2857: inode #16: comm syz-executor.0: path[1].p_hdr == NULL [ 43.020677][ T369] EXT4-fs (loop0): Remounting filesystem read-only [ 43.027769][ T369] EXT4-fs error (device loop0): __ext4_get_inode_loc:4425: comm syz-executor.0: Invalid inode table block 0 in block_group 0 [ 43.041297][ T369] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 43.051041][ T369] EXT4-fs error (device loop0): ext4_punch_hole:4218: inode #16: comm syz-executor.0: mark_inode_dirty error [ 43.165976][ T371] EXT4-fs (loop0): 1 orphan inode deleted [ 43.172004][ T371] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,norecovery,dioread_lock,errors=remount-ro,noauto_da_alloc,resgid=0x0000000000000000,barrier,auto_da_alloc,max_dir_size_kb=0x00000000000004e1, [ 43.194972][ T371] ext4 filesystem being mounted at /root/syzkaller-testdir2943582017/syzkaller.5yhKo0/4/file1 supports timestamps until 2038 (0x7fffffff) [ 43.217036][ T375] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:475: comm syz-executor.0: Invalid block bitmap block 0 in block_group 0 [ 43.232911][ T375] EXT4-fs (loop0): Remounting filesystem read-only [ 43.240010][ T375] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5614: Corrupt filesystem [ 43.254679][ C1] general protection fault, probably for non-canonical address 0xdffffc001ffff13c: 0000 [#1] PREEMPT SMP KASAN [ 43.267131][ C1] KASAN: probably user-memory-access in range [0x00000000ffff89e0-0x00000000ffff89e7] [ 43.277268][ C1] CPU: 1 PID: -1800490745 Comm: .0 Tainted: G B 5.10.194-syzkaller #0 [ 43.287101][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 43.297816][ C1] RIP: 0010:account_system_index_time+0x8a/0x210 [ 43.304248][ C1] Code: 01 00 00 49 8b 9c 24 c8 07 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 60 01 00 00 4c 8d bb 00 01 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 28 01 00 00 8b 83 60 01 00 00 [ 43.325523][ C1] RSP: 0018:ffffc90000160cc8 EFLAGS: 00010006 [ 43.332145][ C1] RAX: dffffc0000000000 RBX: 00000000ffff8881 RCX: 1ffffffff097f4e5 [ 43.341606][ C1] RDX: 000000001ffff13c RSI: 0000000000967b88 RDI: 00000000ffff89e1 [ 43.350296][ C1] RBP: ffffc90000160cf0 R08: 1ffffffff097f4e5 R09: ffffffff856df11f [ 43.354882][ C0] list_add corruption. next->prev should be prev (ffff8881f7556d10), but was fedcae6900000000. (next=ffff888121894ea8). [ 43.358543][ C1] R10: fffffbfff0adbe23 R11: 0000000000000000 R12: ffff888121894e00 [ 43.379831][ C1] R13: 0000000000967b88 R14: 0000000000000002 R15: 00000000ffff8981 [ 43.387919][ C1] FS: 00007f992cf836c0(0000) GS:ffff8881f7500000(0000) knlGS:0000000000000000 [ 43.397338][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.403824][ C1] CR2: 00000000200400ff CR3: 00000001098c2000 CR4: 00000000003506a0 [ 43.411990][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.420192][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.428443][ C1] Call Trace: [ 43.431681][ C1] [ 43.434464][ C1] ? show_regs.part.0+0x1e/0x20 [ 43.439328][ C1] ? die_addr.cold+0x8/0xd [ 43.443801][ C1] ? exc_general_protection+0x19b/0x2e0 [ 43.449538][ C1] ? asm_exc_general_protection+0x1e/0x30 [ 43.455369][ C1] ? account_system_index_time+0x8a/0x210 [ 43.462589][ C1] ? timekeeping_advance+0x3fa/0x660 [ 43.468126][ C1] irqtime_account_process_tick+0x437/0x5a0 [ 43.474124][ C1] account_process_tick+0x367/0x470 [ 43.479114][ C1] update_process_times+0x6c/0xb0 [ 43.484604][ C1] tick_sched_handle+0xfa/0x170 [ 43.489503][ C1] tick_sched_timer+0xb6/0xd0 [ 43.494112][ C1] ? tick_sched_do_timer+0x340/0x340 [ 43.500197][ C1] __hrtimer_run_queues+0x39a/0x790 [ 43.506386][ C1] ? enqueue_hrtimer+0x1c0/0x1c0 [ 43.513201][ C1] ? _raw_write_lock_irqsave+0xe0/0xe0 [ 43.518907][ C1] ? ktime_get_update_offsets_now+0x6e/0x200 [ 43.524729][ C1] hrtimer_interrupt+0x2f3/0x8d0 [ 43.529899][ C1] __sysvec_apic_timer_interrupt+0x10a/0x360 [ 43.536292][ C1] asm_call_irq_on_stack+0xf/0x20 [ 43.541657][ C1] [ 43.544547][ C1] Modules linked in: [ 43.548688][ C1] ---[ end trace 5c3218e42bb68821 ]--- [ 43.548731][ C0] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 43.554094][ C1] RIP: 0010:account_system_index_time+0x8a/0x210 [ 43.560134][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B D 5.10.194-syzkaller #0 [ 43.566736][ C1] Code: 01 00 00 49 8b 9c 24 c8 07 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 60 01 00 00 4c 8d bb 00 01 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 28 01 00 00 8b 83 60 01 00 00 [ 43.575858][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 43.596092][ C1] RSP: 0018:ffffc90000160cc8 EFLAGS: 00010006 [ 43.606296][ C0] RIP: 0010:__list_add_valid.cold+0xf/0x58 [ 43.606308][ C0] Code: 48 c7 c6 20 48 5f 84 4c 89 ef e8 29 d9 01 00 49 c7 c7 f0 ff ff ff e9 de 26 79 fe 4c 89 e1 48 c7 c7 40 4b 5f 84 e8 b5 e5 fd ff <0f> 0b 48 c7 c7 e0 4a 5f 84 e8 a7 e5 fd ff 0f 0b 48 c7 c7 80 4a 5f [ 43.612506][ C1] [ 43.618422][ C0] RSP: 0018:ffffc90000007a48 EFLAGS: 00010086 [ 43.638985][ C1] RAX: dffffc0000000000 RBX: 00000000ffff8881 RCX: 1ffffffff097f4e5 [ 43.641154][ C0] [ 43.647676][ C1] RDX: 000000001ffff13c RSI: 0000000000967b88 RDI: 00000000ffff89e1 [ 43.655460][ C0] RAX: 0000000000000075 RBX: dffffc0000000000 RCX: 0000000000000000 [ 43.657715][ C1] RBP: ffffc90000160cf0 R08: 1ffffffff097f4e5 R09: ffffffff856df11f [ 43.665707][ C0] RDX: 0000000000000004 RSI: 00000000000000f6 RDI: fffff52000000f3c [ 43.673512][ C1] R10: fffffbfff0adbe23 R11: 0000000000000000 R12: ffff888121894e00 [ 43.681323][ C0] RBP: ffffc90000007a60 R08: 0000000000000075 R09: ffff8881f74530a7 [ 43.689148][ C1] R13: 0000000000967b88 R14: 0000000000000002 R15: 00000000ffff8981 [ 43.697428][ C0] R10: ffffed103ee8a614 R11: 6464615f7473696c R12: ffff888121894ea8 [ 43.705400][ C1] FS: 00007f992cf836c0(0000) GS:ffff8881f7500000(0000) knlGS:0000000000000000 [ 43.714184][ C0] R13: ffff88810c519428 R14: ffff88810c519558 R15: ffff88810c519400 [ 43.722060][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.730913][ C0] FS: 0000000000000000(0000) GS:ffff8881f7400000(0000) knlGS:0000000000000000 [ 43.739136][ C1] CR2: 00000000200400ff CR3: 00000001098c2000 CR4: 00000000003506a0 [ 43.745493][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.755618][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.763495][ C0] CR2: 00007f993583c00d CR3: 0000000120445000 CR4: 00000000003506b0 [ 43.770290][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.778512][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.786404][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 43.794928][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.818135][ C0] Call Trace: [ 43.821248][ C0] [ 43.824155][ C0] ? show_regs.part.0+0x1e/0x20 [ 43.828952][ C0] ? __die+0x5d/0x9e [ 43.832920][ C0] ? die+0x2b/0x50 [ 43.836775][ C0] ? do_trap+0x1d5/0x260 [ 43.840848][ C0] ? do_error_trap+0x8a/0xe0 [ 43.845280][ C0] ? __list_add_valid.cold+0xf/0x58 [ 43.850326][ C0] ? handle_invalid_op+0x31/0x40 [ 43.855336][ C0] ? __list_add_valid.cold+0xf/0x58 [ 43.860359][ C0] ? exc_invalid_op+0x30/0x50 [ 43.865078][ C0] ? asm_exc_invalid_op+0x12/0x20 [ 43.869922][ C0] ? __list_add_valid.cold+0xf/0x58 [ 43.874972][ C0] ? __list_add_valid.cold+0xf/0x58 [ 43.880033][ C0] enqueue_task_fair+0xa3f/0x27b0 [ 43.884868][ C0] ? select_task_rq_fair+0x36d0/0x36d0 [ 43.890230][ C0] ? psi_task_change+0x154/0x280 [ 43.895027][ C0] enqueue_task+0xe9/0x560 [ 43.899255][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 43.904383][ C0] ttwu_do_activate.isra.0+0xde/0x360 [ 43.909767][ C0] try_to_wake_up+0x5fa/0x17d0 [ 43.914354][ C0] ? select_fallback_rq+0x660/0x660 [ 43.919409][ C0] ? __kasan_check_write+0x14/0x20 [ 43.924342][ C0] wake_up_process+0x10/0x20 [ 43.928765][ C0] insert_work+0x251/0x320 [ 43.933103][ C0] __queue_work+0x422/0xbb0 [ 43.937528][ C0] ? select_fallback_rq+0x660/0x660 [ 43.943037][ C0] ? queue_work_node+0x50/0x50 [ 43.947649][ C0] delayed_work_timer_fn+0x58/0x90 [ 43.952865][ C0] ? process_timeout+0x2c/0x40 [ 43.957448][ C0] call_timer_fn+0x2b/0x190 [ 43.961818][ C0] __run_timers.part.0+0x31e/0x840 [ 43.966736][ C0] ? queue_work_node+0x50/0x50 [ 43.971506][ C0] ? call_timer_fn+0x190/0x190 [ 43.976109][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 43.981258][ C0] ? sched_clock+0x2e/0x50 [ 43.985606][ C0] ? sched_clock_cpu+0x1b/0x1b0 [ 43.990365][ C0] ? hrtimer_interrupt+0x39b/0x8d0 [ 43.995671][ C0] run_timer_softirq+0x9c/0x180 [ 44.000926][ C0] __do_softirq+0x1bc/0x5f3 [ 44.005531][ C0] asm_call_irq_on_stack+0xf/0x20 [ 44.010509][ C0] [ 44.013598][ C0] do_softirq_own_stack+0x61/0x80 [ 44.018452][ C0] irq_exit_rcu+0x95/0x170 [ 44.023155][ C0] sysvec_apic_timer_interrupt+0x3f/0xe0 [ 44.028617][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 44.034729][ C0] RIP: 0010:acpi_idle_do_entry+0x191/0x200 [ 44.040350][ C0] Code: 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 5d 49 8b 04 24 a8 08 75 c5 0f 1f 44 00 00 0f 00 2d c1 d5 ae 00 fb f4 eb b4 4c 89 e7 e8 f4 f5 ff ff 4c 8b 65 f8 c9 c3 e8 19 d9 d6 fd [ 44.060611][ C0] RSP: 0018:ffffffff84e07c98 EFLAGS: 00000246 [ 44.066604][ C0] RAX: 0000000000004000 RBX: ffff888105fbd865 RCX: ffffffff83b63534 [ 44.074491][ C0] RDX: 1ffffffff09c37f0 RSI: 0000000000000008 RDI: ffffffff84e1bf80 [ 44.082387][ C0] RBP: ffffffff84e07ca0 R08: 0000000000000000 R09: ffffffff84e1bf87 [ 44.090200][ C0] R10: fffffbfff09c37f0 R11: 0000000000000001 R12: ffffffff84e1bf80 [ 44.098562][ C0] R13: ffff888103dd7800 R14: ffff888103dd7804 R15: ffff888105fbd864 [ 44.107124][ C0] ? acpi_idle_do_entry+0x164/0x200 [ 44.112252][ C0] ? acpi_idle_do_entry+0x164/0x200 [ 44.117279][ C0] acpi_idle_enter+0x2aa/0x460 [ 44.121859][ C0] ? rcu_dynticks_eqs_enter+0x11/0x30 [ 44.127172][ C0] cpuidle_enter_state+0x189/0xe00 [ 44.132103][ C0] ? cpuidle_enter_s2idle+0x420/0x420 [ 44.137306][ C0] ? nohz_balance_enter_idle+0x71/0x300 [ 44.142778][ C0] cpuidle_enter+0x4a/0xa0 [ 44.147023][ C0] do_idle+0x3ef/0x590 [ 44.151105][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 44.156138][ C0] cpu_startup_entry+0x1b/0x20 [ 44.160927][ C0] rest_init+0xd7/0xf3 [ 44.164923][ C0] arch_call_rest_init+0x9/0xc [ 44.169525][ C0] start_kernel+0x347/0x360 [ 44.173890][ C0] x86_64_start_reservations+0x29/0x2b [ 44.179532][ C0] x86_64_start_kernel+0x93/0x97 [ 44.184363][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 44.190135][ C0] Modules linked in: [ 44.194013][ C0] ---[ end trace 5c3218e42bb68822 ]--- [ 44.199804][ C0] RIP: 0010:account_system_index_time+0x8a/0x210 [ 44.206027][ C0] Code: 01 00 00 49 8b 9c 24 c8 07 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 60 01 00 00 4c 8d bb 00 01 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 28 01 00 00 8b 83 60 01 00 00 [ 44.225823][ C0] RSP: 0018:ffffc90000160cc8 EFLAGS: 00010006 [ 44.231804][ C0] RAX: dffffc0000000000 RBX: 00000000ffff8881 RCX: 1ffffffff097f4e5 [ 44.239606][ C0] RDX: 000000001ffff13c RSI: 0000000000967b88 RDI: 00000000ffff89e1 [ 44.247431][ C0] RBP: ffffc90000160cf0 R08: 1ffffffff097f4e5 R09: ffffffff856df11f [ 44.255233][ C0] R10: fffffbfff0adbe23 R11: 0000000000000000 R12: ffff888121894e00 [ 44.263042][ C0] R13: 0000000000967b88 R14: 0000000000000002 R15: 00000000ffff8981 [ 44.271025][ C0] FS: 0000000000000000(0000) GS:ffff8881f7400000(0000) knlGS:0000000000000000 [ 44.279814][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.286226][ C0] CR2: 00007f993583c00d CR3: 0000000120445000 CR4: 00000000003506b0 [ 44.294125][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.302595][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.995320][ C1] Shutting down cpus with NMI [ 45.000134][ C1] Kernel Offset: disabled [ 45.005136][ C1] Rebooting in 86400 seconds..