ext4 filesystem being mounted at /syzkaller-testdir307646278/syzkaller.RXN0o5/4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
Oops: general protection fault, probably for non-canonical address 0xe01ffbf1100119af: 0000 [#1] SMP KASAN NOPTI
KASAN: maybe wild-memory-access in range [0x00ffff888008cd78-0x00ffff888008cd7f]
CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0H Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: kblockd blk_mq_requeue_work
RIP: 0010:kasan_byte_accessible+0x15/0x30
Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 7e 15 0e 03 66 66 2e 0f 1f 84 00 00 00
RSP: 0018:ffff88800975f650 EFLAGS: 00010086
RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff84bddf4b RDI: e01ffbf1100119af
RBP: 00ffff888008cd78 R08: 0000000000000001 R09: 0000000000000000
R10: ffff888008cd6003 R11: 0000000000000001 R12: 0000000000000000
R13: ffffffff84bddf4b R14: 0000000000000000 R15: ffff8880164f1000
FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f60e54418e0 CR3: 000000003eb53000 CR4: 0000000000350ef0
Call Trace:
__kasan_check_byte+0x14/0x50
lock_acquire+0xec/0x2f0
_raw_spin_lock+0x2b/0x40
__queue_work+0xb6e/0x1240
queue_work_on+0xd0/0xe0
loop_queue_rq+0x5c8/0x1180
blk_mq_dispatch_rq_list+0x3ad/0x1a90
__blk_mq_sched_dispatch_requests+0x212/0x13d0
blk_mq_sched_dispatch_requests+0xd7/0x1b0
blk_mq_run_hw_queue+0x3bd/0x640
blk_mq_run_hw_queues+0x111/0x430
blk_mq_requeue_work+0x4ef/0x820
process_one_work+0x8e1/0x19c0
worker_thread+0x67e/0xe90
kthread+0x3c8/0x740
ret_from_fork+0x34b/0x430
ret_from_fork_asm+0x1a/0x30
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:kasan_byte_accessible+0x15/0x30
Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 7e 15 0e 03 66 66 2e 0f 1f 84 00 00 00
RSP: 0018:ffff88800975f650 EFLAGS: 00010086
RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff84bddf4b RDI: e01ffbf1100119af
RBP: 00ffff888008cd78 R08: 0000000000000001 R09: 0000000000000000
R10: ffff888008cd6003 R11: 0000000000000001 R12: 0000000000000000
R13: ffffffff84bddf4b R14: 0000000000000000 R15: ffff8880164f1000
FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f60e54418e0 CR3: 000000003eb53000 CR4: 0000000000350ef0
note: kworker/1:0H[24] exited with irqs disabled
note: kworker/1:0H[24] exited with preempt_count 2
BUG: sleeping function called from invalid context at ./include/linux/percpu-rwsem.h:51
in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 24, name: kworker/1:0H
preempt_count: 0, expected: 0
RCU nest depth: 2, expected: 0
INFO: lockdep is turned off.
CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0H Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary)
Tainted: [D]=DIE, [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: kblockd blk_mq_requeue_work
Call Trace:
dump_stack_lvl+0xfa/0x120
__might_resched+0x2f3/0x510
exit_signals+0x25/0x940
do_exit+0x2db/0x2970
make_task_dead+0x174/0x3b0
rewind_stack_and_make_dead+0x16/0x20
RIP: 0000:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0000:0000000000000000 EFLAGS: 00000000 ORIG_RAX: 0000000000000000
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
ieee80211 phy12: Selected rate control algorithm 'minstrel_ht'
ieee80211 phy13: Selected rate control algorithm 'minstrel_ht'
wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
ieee80211 phy14: Selected rate control algorithm 'minstrel_ht'
wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
ieee80211 phy15: Selected rate control algorithm 'minstrel_ht'
ieee80211 phy16: Selected rate control algorithm 'minstrel_ht'
wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
----------------
Code disassembly (best guess):
0: 00 00 add %al,(%rax)
2: 0f 1f 00 nopl (%rax)
5: 90 nop
6: 90 nop
7: 90 nop
8: 90 nop
9: 90 nop
a: 90 nop
b: 90 nop
c: 90 nop
d: 90 nop
e: 90 nop
f: 90 nop
10: 90 nop
11: 90 nop
12: 90 nop
13: 90 nop
14: 90 nop
15: 66 0f 1f 00 nopw (%rax)
19: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax
20: fc ff df
23: 48 c1 ef 03 shr $0x3,%rdi
27: 48 01 c7 add %rax,%rdi
* 2a: 0f b6 07 movzbl (%rdi),%eax <-- trapping instruction
2d: 3c 07 cmp $0x7,%al
2f: 0f 96 c0 setbe %al
32: e9 7e 15 0e 03 jmpq 0x30e15b5
37: 66 data16
38: 66 data16
39: 2e cs
3a: 0f .byte 0xf
3b: 1f (bad)
3c: 84 00 test %al,(%rax)