general protection fault, probably for non-canonical address 0xdffffcc02000800c: 0000 [#1] PREEMPT SMP KASAN
KASAN: probably user-memory-access in range [0x0000060100040060-0x0000060100040067]
CPU: 0 PID: 5464 Comm: syz-executor.0 Not tainted 6.6.0-rc2-next-20230919-syzkaller-06333-g29e400e3ea48 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
RIP: 0010:lookup_object lib/debugobjects.c:195 [inline]
RIP: 0010:debug_object_deactivate lib/debugobjects.c:785 [inline]
RIP: 0010:debug_object_deactivate+0x175/0x320 lib/debugobjects.c:771
Code: da 48 c1 ea 03 80 3c 02 00 0f 85 54 01 00 00 48 8b 1b 48 85 db 0f 84 82 00 00 00 48 8d 7b 18 41 83 c4 01 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 11 01 00 00 4c 3b 7b 18 75 c4 48 8d 7b 10 48 b8
RSP: 0018:ffffc90000007d40 EFLAGS: 00010006
RAX: dffffc0000000000 RBX: 0000060100040048 RCX: ffffffff816930ce
RDX: 000000c02000800c RSI: 0000000000000002 RDI: 0000060100040060
RBP: ffffc90000007e30 R08: 0000000000000001 R09: fffff52000000f96
R10: 0000000000000003 R11: ffffc90000007ff8 R12: 0000000000000002
R13: 1ffff92000000fac R14: ffffffff8a8f27a0 R15: ffffc900049e7d90
FS: 00007fdaf9f786c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055fb2be31008 CR3: 00000000685ec000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
debug_hrtimer_deactivate kernel/time/hrtimer.c:427 [inline]
debug_deactivate kernel/time/hrtimer.c:483 [inline]
__run_hrtimer kernel/time/hrtimer.c:1656 [inline]
__hrtimer_run_queues+0x470/0xc10 kernel/time/hrtimer.c:1752
hrtimer_interrupt+0x31b/0x800 kernel/time/hrtimer.c:1814
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1063 [inline]
__sysvec_apic_timer_interrupt+0x105/0x3f0 arch/x86/kernel/apic/apic.c:1080
sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1074
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:memmove+0x28/0x1b0 arch/x86/lib/memmove_64.S:44
Code: c3 90 f3 0f 1e fa 48 89 f8 48 39 fe 7d 0f 49 89 f0 49 01 d0 49 39 f8 0f 8f b5 00 00 00 48 83 fa 20 0f 82 01 01 00 00 48 89 d1 a4 c3 48 81 fa a8 02 00 00 72 05 40 38 fe 74 47 48 83 ea 20 48
RSP: 0018:ffffc90004bb6fe8 EFLAGS: 00010286
RAX: ffff888065f3efb4 RBX: 0000000000000002 RCX: fffffffffed24f81
RDX: ffffffffffffffe0 RSI: ffff88806721a003 RDI: ffff88806721a013
RBP: 0000000000000020 R08: ffff888065f3ef84 R09: 0000766972705f73
R10: 667265736965722e R11: 0000766972705f73 R12: 0000000000000001
R13: 0000000000000000 R14: ffff888065f3efa4 R15: 0000000000000010
leaf_paste_entries+0x43c/0x920 fs/reiserfs/lbalance.c:1377
balance_leaf_finish_node_paste_dirent fs/reiserfs/do_balan.c:1295 [inline]
balance_leaf_finish_node_paste fs/reiserfs/do_balan.c:1321 [inline]
balance_leaf_finish_node fs/reiserfs/do_balan.c:1364 [inline]
balance_leaf+0x9476/0xcd90 fs/reiserfs/do_balan.c:1452
do_balance+0x337/0x840 fs/reiserfs/do_balan.c:1888
reiserfs_paste_into_item+0x62a/0x7c0 fs/reiserfs/stree.c:2157
reiserfs_add_entry+0x936/0xd20 fs/reiserfs/namei.c:565
reiserfs_mkdir+0x68a/0x9a0 fs/reiserfs/namei.c:860
xattr_mkdir fs/reiserfs/xattr.c:77 [inline]
create_privroot fs/reiserfs/xattr.c:891 [inline]
reiserfs_xattr_init+0x57f/0xbb0 fs/reiserfs/xattr.c:1007
reiserfs_remount+0xb6e/0x1640 fs/reiserfs/super.c:1586
legacy_reconfigure+0x119/0x180 fs/fs_context.c:661
reconfigure_super+0x44f/0xb10 fs/super.c:1143
do_remount fs/namespace.c:2884 [inline]
path_mount+0x16f2/0x1ed0 fs/namespace.c:3656
do_mount fs/namespace.c:3677 [inline]
__do_sys_mount fs/namespace.c:3886 [inline]
__se_sys_mount fs/namespace.c:3863 [inline]
__x64_sys_mount+0x293/0x310 fs/namespace.c:3863
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:81
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fdaf927e1ea
Code: Unable to access opcode bytes at 0x7fdaf927e1c0.
RSP: 002b:00007fdaf9f77ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007fdaf9f77f80 RCX: 00007fdaf927e1ea
RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000
RBP: 00000000200000c0 R08: 00007fdaf9f77f80 R09: 0000000001a484bc
R10: 0000000001a484bc R11: 0000000000000246 R12: 0000000020000100
R13: 00007fdaf9f77f40 R14: 0000000000000000 R15: 0000000020000d80
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:lookup_object lib/debugobjects.c:195 [inline]
RIP: 0010:debug_object_deactivate lib/debugobjects.c:785 [inline]
RIP: 0010:debug_object_deactivate+0x175/0x320 lib/debugobjects.c:771
Code: da 48 c1 ea 03 80 3c 02 00 0f 85 54 01 00 00 48 8b 1b 48 85 db 0f 84 82 00 00 00 48 8d 7b 18 41 83 c4 01 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 11 01 00 00 4c 3b 7b 18 75 c4 48 8d 7b 10 48 b8
RSP: 0018:ffffc90000007d40 EFLAGS: 00010006
RAX: dffffc0000000000 RBX: 0000060100040048 RCX: ffffffff816930ce
RDX: 000000c02000800c RSI: 0000000000000002 RDI: 0000060100040060
RBP: ffffc90000007e30 R08: 0000000000000001 R09: fffff52000000f96
R10: 0000000000000003 R11: ffffc90000007ff8 R12: 0000000000000002
R13: 1ffff92000000fac R14: ffffffff8a8f27a0 R15: ffffc900049e7d90
FS: 00007fdaf9f786c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fdaf927e1c0 CR3: 00000000685ec000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess), 1 bytes skipped:
0: 48 c1 ea 03 shr $0x3,%rdx
4: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1)
8: 0f 85 54 01 00 00 jne 0x162
e: 48 8b 1b mov (%rbx),%rbx
11: 48 85 db test %rbx,%rbx
14: 0f 84 82 00 00 00 je 0x9c
1a: 48 8d 7b 18 lea 0x18(%rbx),%rdi
1e: 41 83 c4 01 add $0x1,%r12d
22: 48 89 fa mov %rdi,%rdx
25: 48 c1 ea 03 shr $0x3,%rdx
* 29: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction
2d: 0f 85 11 01 00 00 jne 0x144
33: 4c 3b 7b 18 cmp 0x18(%rbx),%r15
37: 75 c4 jne 0xfffffffd
39: 48 8d 7b 10 lea 0x10(%rbx),%rdi
3d: 48 rex.W
3e: b8 .byte 0xb8