RBP: 00007f60036d11d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffd9639c9af R14: 00007f60036d1300 R15: 0000000000022000
general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
CPU: 0 PID: 16811 Comm: syz-executor.7 Not tainted 6.3.0-rc6-next-20230413 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:folio_wait_stable+0x23/0xe0
Code: 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 fd 53 e8 62 58 e7 ff 48 8d 7d 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 a4 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b
RSP: 0018:ffff888047a4f7a8 EFLAGS: 00010213
RAX: dffffc0000000000 RBX: ffff88804e62be20 RCX: ffffc9001243b000
RDX: 0000000000000001 RSI: ffffffff81646e3e RDI: 000000000000000c
RBP: fffffffffffffff4 R08: 0000000000000001 R09: ffffffff856c1213
R10: fffffbfff0ad8242 R11: 0000000000000001 R12: 0000000000000000
R13: ffff88804e62c048 R14: 0000000000000000 R15: 0000000000000000
FS: 00007f60036d1700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f59112a7b70 CR3: 000000004fc2e000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
ext4_da_write_begin+0x38d/0x830
generic_perform_write+0x25a/0x580
ext4_buffered_write_iter+0x164/0x460
ext4_file_write_iter+0x3ff/0x1950
aio_write+0x34f/0x7c0
io_submit_one+0xfa0/0x1b70
__x64_sys_io_submit+0x191/0x2f0
do_syscall_64+0x3f/0x90
entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f60061b7b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f60036d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 00007f60062cb020 RCX: 00007f60061b7b19
RDX: 0000000020001a40 RSI: 0000000000000003 RDI: 00007f60036d2000
RBP: 00007f60036d11d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffd9639c9af R14: 00007f60036d1300 R15: 0000000000022000
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:folio_wait_stable+0x23/0xe0
Code: 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 fd 53 e8 62 58 e7 ff 48 8d 7d 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 a4 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b
RSP: 0018:ffff888047a4f7a8 EFLAGS: 00010213
RAX: dffffc0000000000 RBX: ffff88804e62be20 RCX: ffffc9001243b000
RDX: 0000000000000001 RSI: ffffffff81646e3e RDI: 000000000000000c
RBP: fffffffffffffff4 R08: 0000000000000001 R09: ffffffff856c1213
R10: fffffbfff0ad8242 R11: 0000000000000001 R12: 0000000000000000
R13: ffff88804e62c048 R14: 0000000000000000 R15: 0000000000000000
FS: 00007f60036d1700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f59112a7b70 CR3: 000000004fc2e000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
------------[ cut here ]------------
WARNING: CPU: 0 PID: 16811 at kernel/exit.c:815 do_exit+0x1b82/0x2720
Modules linked in:
CPU: 0 PID: 16811 Comm: syz-executor.7 Tainted: G D 6.3.0-rc6-next-20230413 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:do_exit+0x1b82/0x2720
Code: 48 c1 e0 2a 48 c1 ea 03 80 3c 02 00 0f 85 4b 0b 00 00 48 8b bd 60 05 00 00 31 f6 e8 38 67 ff ff e9 2f f6 ff ff e8 8e 2e 33 00 <0f> 0b e9 b3 e6 ff ff e8 82 2e 33 00 4c 89 f6 bf 05 06 00 00 e8 e5
RSP: 0018:ffff888047a4fe40 EFLAGS: 00010246
RAX: 0000000000040000 RBX: ffff88800e380d80 RCX: ffffc9001243b000
RDX: 0000000000040000 RSI: ffffffff81189812 RDI: ffff888046cf6130
RBP: ffff888046cf5040 R08: 0000000000000000 R09: 0000000000000000
R10: fffffbfff0ba509a R11: 0000000000000001 R12: ffff888046cf57d8
R13: ffff888044f95c80 R14: 000000000000000b R15: 0000000000000002
FS: 00007f60036d1700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f59112a7b70 CR3: 000000004fc2e000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
make_task_dead+0x175/0x3b0
rewind_stack_and_make_dead+0x17/0x20
RIP: 0033:0x7f60061b7b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f60036d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 00007f60062cb020 RCX: 00007f60061b7b19
RDX: 0000000020001a40 RSI: 0000000000000003 RDI: 00007f60036d2000
RBP: 00007f60036d11d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffd9639c9af R14: 00007f60036d1300 R15: 0000000000022000
irq event stamp: 407
hardirqs last enabled at (407): [] cond_local_irq_enable.isra.0+0x12/0x20
hardirqs last disabled at (406): [] exc_general_protection+0x28/0x220
softirqs last enabled at (404): [] __irq_exit_rcu+0xcc/0x110
softirqs last disabled at (361): [] __irq_exit_rcu+0xcc/0x110
---[ end trace 0000000000000000 ]---
netlink: 'syz-executor.2': attribute type 16 has an invalid length.
netlink: 'syz-executor.2': attribute type 16 has an invalid length.
----------------
Code disassembly (best guess):
0: 90 nop
1: 90 nop
2: 90 nop
3: 90 nop
4: 90 nop
5: 90 nop
6: 90 nop
7: f3 0f 1e fa endbr64
b: 55 push %rbp
c: 48 89 fd mov %rdi,%rbp
f: 53 push %rbx
10: e8 62 58 e7 ff callq 0xffe75877
15: 48 8d 7d 18 lea 0x18(%rbp),%rdi
19: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax
20: fc ff df
23: 48 89 fa mov %rdi,%rdx
26: 48 c1 ea 03 shr $0x3,%rdx
* 2a: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction
2e: 0f 85 a4 00 00 00 jne 0xd8
34: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax
3b: fc ff df
3e: 48 rex.W
3f: 8b .byte 0x8b