[ 86.755132][ T52] cfg80211: failed to load regulatory.db
Warning: Permanently added '[localhost]:9584' (ED25519) to the list of known hosts.
executing program
[ 88.139609][ T5092] loop0: detected capacity change from 0 to 32768
[ 88.237473][ T5092] ==================================================================
[ 88.240377][ T5092] BUG: KASAN: slab-out-of-bounds in bch2_dev_journal_init+0x7a1/0xb20
[ 88.243245][ T5092] Write of size 8 at addr ffff888037acd1b0 by task syz-executor526/5092
[ 88.246551][ T5092]
[ 88.247268][ T5092] CPU: 0 UID: 0 PID: 5092 Comm: syz-executor526 Not tainted 6.11.0-rc3-syzkaller-00338-gc3f2d783a459 #0
[ 88.250981][ T5092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 88.255046][ T5092] Call Trace:
[ 88.256568][ T5092]
[ 88.257921][ T5092] dump_stack_lvl+0x241/0x360
[ 88.260081][ T5092] ? __pfx_dump_stack_lvl+0x10/0x10
[ 88.262097][ T5092] ? __pfx__printk+0x10/0x10
[ 88.263705][ T5092] ? _printk+0xd5/0x120
[ 88.265218][ T5092] ? __virt_addr_valid+0x183/0x530
[ 88.267067][ T5092] ? __virt_addr_valid+0x183/0x530
[ 88.268958][ T5092] print_report+0x169/0x550
[ 88.270535][ T5092] ? __virt_addr_valid+0x183/0x530
[ 88.272321][ T5092] ? __virt_addr_valid+0x183/0x530
[ 88.274031][ T5092] ? __virt_addr_valid+0x45f/0x530
[ 88.275760][ T5092] ? __phys_addr+0xba/0x170
[ 88.277472][ T5092] ? bch2_dev_journal_init+0x7a1/0xb20
[ 88.279749][ T5092] kasan_report+0x143/0x180
[ 88.281699][ T5092] ? bch2_dev_journal_init+0x7a1/0xb20
[ 88.283407][ T5092] bch2_dev_journal_init+0x7a1/0xb20
[ 88.285062][ T5092] __bch2_dev_attach_bdev+0x217/0x340
[ 88.286939][ T5092] bch2_dev_attach_bdev+0x2a8/0x6f0
[ 88.288930][ T5092] ? __pfx_bch2_dev_attach_bdev+0x10/0x10
[ 88.291180][ T5092] ? down_write+0x18c/0x220
[ 88.292985][ T5092] ? __pfx_down_write+0x10/0x10
[ 88.294912][ T5092] ? bch2_fs_open+0x330/0xdf0
[ 88.296794][ T5092] bch2_fs_open+0x97c/0xdf0
[ 88.298605][ T5092] ? __pfx_bch2_fs_open+0x10/0x10
[ 88.300523][ T5092] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 88.302882][ T5092] ? __pfx_bch2_test_super+0x10/0x10
[ 88.304979][ T5092] ? sget+0x2b8/0x620
[ 88.306335][ T5092] ? __pfx_bch2_noset_super+0x10/0x10
[ 88.308300][ T5092] bch2_fs_get_tree+0x731/0x1700
[ 88.310029][ T5092] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 88.311950][ T5092] ? generic_parse_monolithic+0x387/0x400
[ 88.314017][ T5092] ? apparmor_capable+0x13b/0x1b0
[ 88.315925][ T5092] ? bpf_lsm_capable+0x9/0x10
[ 88.317746][ T5092] vfs_get_tree+0x90/0x2a0
[ 88.319394][ T5092] do_new_mount+0x2be/0xb40
[ 88.321091][ T5092] ? __pfx_do_new_mount+0x10/0x10
[ 88.322822][ T5092] __se_sys_mount+0x2d6/0x3c0
[ 88.324500][ T5092] ? __pfx___se_sys_mount+0x10/0x10
[ 88.326298][ T5092] ? do_syscall_64+0x100/0x230
[ 88.328015][ T5092] ? __x64_sys_mount+0x20/0xc0
[ 88.329664][ T5092] do_syscall_64+0xf3/0x230
[ 88.331405][ T5092] ? clear_bhb_loop+0x35/0x90
[ 88.333211][ T5092] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.335468][ T5092] RIP: 0033:0x7fbd7d15ddea
[ 88.337062][ T5092] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 88.344212][ T5092] RSP: 002b:00007ffefd8bb078 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 88.347456][ T5092] RAX: ffffffffffffffda RBX: 00007ffefd8bb090 RCX: 00007fbd7d15ddea
[ 88.350450][ T5092] RDX: 00000000200058c0 RSI: 0000000020005900 RDI: 00007ffefd8bb090
[ 88.353438][ T5092] RBP: 0000000000000004 R08: 00007ffefd8bb0d0 R09: 00000000000058a7
[ 88.356478][ T5092] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000
[ 88.359439][ T5092] R13: 00007ffefd8bb0d0 R14: 0000000000000003 R15: 0000000001000000
[ 88.362378][ T5092]
[ 88.363556][ T5092]
[ 88.364429][ T5092] Allocated by task 5092:
[ 88.366077][ T5092] kasan_save_track+0x3f/0x80
[ 88.367782][ T5092] __kasan_kmalloc+0x98/0xb0
[ 88.369463][ T5092] __kmalloc_noprof+0x1fc/0x400
[ 88.371204][ T5092] bch2_dev_journal_init+0x647/0xb20
[ 88.373047][ T5092] __bch2_dev_attach_bdev+0x217/0x340
[ 88.375010][ T5092] bch2_dev_attach_bdev+0x2a8/0x6f0
[ 88.376941][ T5092] bch2_fs_open+0x97c/0xdf0
[ 88.378595][ T5092] bch2_fs_get_tree+0x731/0x1700
[ 88.380518][ T5092] vfs_get_tree+0x90/0x2a0
[ 88.381999][ T5092] do_new_mount+0x2be/0xb40
[ 88.383741][ T5092] __se_sys_mount+0x2d6/0x3c0
[ 88.385382][ T5092] do_syscall_64+0xf3/0x230
[ 88.387103][ T5092] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.389054][ T5092]
[ 88.389891][ T5092] The buggy address belongs to the object at ffff888037acd180
[ 88.389891][ T5092] which belongs to the cache kmalloc-64 of size 64
[ 88.394902][ T5092] The buggy address is located 0 bytes to the right of
[ 88.394902][ T5092] allocated 48-byte region [ffff888037acd180, ffff888037acd1b0)
[ 88.400233][ T5092]
[ 88.401158][ T5092] The buggy address belongs to the physical page:
[ 88.403575][ T5092] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37acd
[ 88.406891][ T5092] anon flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[ 88.409721][ T5092] page_type: 0xfdffffff(slab)
[ 88.411538][ T5092] raw: 04fff00000000000 ffff8880158418c0 ffffea0000e1eb00 dead000000000005
[ 88.414927][ T5092] raw: 0000000000000000 0000000080200020 00000001fdffffff 0000000000000000
[ 88.418785][ T5092] page dumped because: kasan: bad access detected
[ 88.421217][ T5092] page_owner tracks the page as allocated
[ 88.423786][ T5092] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4863, tgid 4863 (cmp), ts 54291412922, free_ts 54229723596
[ 88.431578][ T5092] post_alloc_hook+0x1f3/0x230
[ 88.433426][ T5092] get_page_from_freelist+0x2e4c/0x2f10
[ 88.435640][ T5092] __alloc_pages_noprof+0x256/0x6c0
[ 88.437792][ T5092] alloc_slab_page+0x5f/0x120
[ 88.439734][ T5092] allocate_slab+0x5a/0x2f0
[ 88.441641][ T5092] ___slab_alloc+0xcd1/0x14b0
[ 88.443432][ T5092] __slab_alloc+0x58/0xa0
[ 88.444937][ T5092] __kmalloc_noprof+0x25a/0x400
[ 88.446711][ T5092] tomoyo_supervisor+0xe0d/0x11f0
[ 88.448685][ T5092] tomoyo_path_permission+0x243/0x360
[ 88.450741][ T5092] tomoyo_check_open_permission+0x2fb/0x500
[ 88.453030][ T5092] security_file_open+0x6a/0x750
[ 88.454872][ T5092] do_dentry_open+0x38e/0x1440
[ 88.456611][ T5092] vfs_open+0x3e/0x330
[ 88.458039][ T5092] path_openat+0x2b3e/0x3470
[ 88.459753][ T5092] do_filp_open+0x235/0x490
[ 88.461428][ T5092] page last free pid 4862 tgid 4862 stack trace:
[ 88.463788][ T5092] free_unref_page+0xd22/0xea0
[ 88.465441][ T5092] __put_partials+0xeb/0x130
[ 88.467312][ T5092] put_cpu_partial+0x17c/0x250
[ 88.469539][ T5092] __slab_free+0x2ea/0x3d0
[ 88.471614][ T5092] qlist_free_all+0x9e/0x140
[ 88.473741][ T5092] kasan_quarantine_reduce+0x14f/0x170
[ 88.476285][ T5092] __kasan_slab_alloc+0x23/0x80
[ 88.478513][ T5092] kmem_cache_alloc_noprof+0x135/0x2a0
[ 88.480711][ T5092] getname_flags+0xb7/0x540
[ 88.482128][ T5092] vfs_fstatat+0x12c/0x190
[ 88.483703][ T5092] __x64_sys_newfstatat+0x11d/0x1a0
[ 88.485619][ T5092] do_syscall_64+0xf3/0x230
[ 88.487350][ T5092] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.489575][ T5092]
[ 88.490514][ T5092] Memory state around the buggy address:
[ 88.492666][ T5092] ffff888037acd080: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 88.495637][ T5092] ffff888037acd100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 88.498508][ T5092] >ffff888037acd180: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 88.501403][ T5092] ^
[ 88.503584][ T5092] ffff888037acd200: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 88.506677][ T5092] ffff888037acd280: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 88.509817][ T5092] ==================================================================
[ 88.605312][ T5092] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 88.608115][ T5092] CPU: 0 UID: 0 PID: 5092 Comm: syz-executor526 Not tainted 6.11.0-rc3-syzkaller-00338-gc3f2d783a459 #0
[ 88.612299][ T5092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 88.616114][ T5092] Call Trace:
[ 88.617401][ T5092]
[ 88.618538][ T5092] dump_stack_lvl+0x241/0x360
[ 88.620378][ T5092] ? __pfx_dump_stack_lvl+0x10/0x10
[ 88.622313][ T5092] ? __pfx__printk+0x10/0x10
[ 88.624068][ T5092] ? preempt_schedule+0xe1/0xf0
[ 88.625598][ T5092] ? vscnprintf+0x5d/0x90
[ 88.627099][ T5092] panic+0x349/0x860
[ 88.628658][ T5092] ? check_panic_on_warn+0x21/0xb0
[ 88.630638][ T5092] ? __pfx_panic+0x10/0x10
[ 88.632240][ T5092] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 88.634363][ T5092] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 88.636403][ T5092] ? print_report+0x502/0x550
[ 88.638168][ T5092] check_panic_on_warn+0x86/0xb0
[ 88.639944][ T5092] ? bch2_dev_journal_init+0x7a1/0xb20
[ 88.641903][ T5092] end_report+0x77/0x160
[ 88.643430][ T5092] kasan_report+0x154/0x180
[ 88.645109][ T5092] ? bch2_dev_journal_init+0x7a1/0xb20
[ 88.647144][ T5092] bch2_dev_journal_init+0x7a1/0xb20
[ 88.649153][ T5092] __bch2_dev_attach_bdev+0x217/0x340
[ 88.651189][ T5092] bch2_dev_attach_bdev+0x2a8/0x6f0
[ 88.653140][ T5092] ? __pfx_bch2_dev_attach_bdev+0x10/0x10
[ 88.655335][ T5092] ? down_write+0x18c/0x220
[ 88.657097][ T5092] ? __pfx_down_write+0x10/0x10
[ 88.658973][ T5092] ? bch2_fs_open+0x330/0xdf0
[ 88.660758][ T5092] bch2_fs_open+0x97c/0xdf0
[ 88.662514][ T5092] ? __pfx_bch2_fs_open+0x10/0x10
[ 88.664382][ T5092] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 88.666432][ T5092] ? __pfx_bch2_test_super+0x10/0x10
[ 88.668161][ T5092] ? sget+0x2b8/0x620
[ 88.669598][ T5092] ? __pfx_bch2_noset_super+0x10/0x10
[ 88.671640][ T5092] bch2_fs_get_tree+0x731/0x1700
[ 88.673366][ T5092] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 88.675024][ T5092] ? generic_parse_monolithic+0x387/0x400
[ 88.676733][ T5092] ? apparmor_capable+0x13b/0x1b0
[ 88.678443][ T5092] ? bpf_lsm_capable+0x9/0x10
[ 88.680179][ T5092] vfs_get_tree+0x90/0x2a0
[ 88.681838][ T5092] do_new_mount+0x2be/0xb40
[ 88.683541][ T5092] ? __pfx_do_new_mount+0x10/0x10
[ 88.685507][ T5092] __se_sys_mount+0x2d6/0x3c0
[ 88.687282][ T5092] ? __pfx___se_sys_mount+0x10/0x10
[ 88.689185][ T5092] ? do_syscall_64+0x100/0x230
[ 88.690975][ T5092] ? __x64_sys_mount+0x20/0xc0
[ 88.692661][ T5092] do_syscall_64+0xf3/0x230
[ 88.694323][ T5092] ? clear_bhb_loop+0x35/0x90
[ 88.695966][ T5092] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.697721][ T5092] RIP: 0033:0x7fbd7d15ddea
[ 88.699035][ T5092] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 88.706268][ T5092] RSP: 002b:00007ffefd8bb078 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 88.709448][ T5092] RAX: ffffffffffffffda RBX: 00007ffefd8bb090 RCX: 00007fbd7d15ddea
[ 88.712300][ T5092] RDX: 00000000200058c0 RSI: 0000000020005900 RDI: 00007ffefd8bb090
[ 88.715105][ T5092] RBP: 0000000000000004 R08: 00007ffefd8bb0d0 R09: 00000000000058a7
[ 88.717857][ T5092] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000
[ 88.720732][ T5092] R13: 00007ffefd8bb0d0 R14: 0000000000000003 R15: 0000000001000000
[ 88.723444][ T5092]
[ 88.724871][ T5092] Kernel Offset: disabled
[ 88.726510][ T5092] Rebooting in 86400 seconds..
VM DIAGNOSIS:
11:14:48 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000020 RBX=ffffffff95256d40 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc90002d1ec90
R8 =ffffffff853f053b R9 =1ffff110031d2046 R10=dffffc0000000000 R11=ffffffff853f04f0
R12=dffffc0000000000 R13=0000000000000020 R14=0000000000000020 R15=00000000000003f8
RIP=ffffffff853f056e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555561014380 ffffffff 00c00000
GS =0000 ffff888020800000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffccee26ff8 CR3=000000003768a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000440401 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffefd8bb210 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd7d1e1560 00007fbd7d1d55d8
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd7d1c6b24 00007fbd7d1da240
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65723d73726f7272 6500747865003036 36396f7369007265 6c6c616b7a797300
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40571856574a5757 4000515d40001513 131c4a564c005740 4949444e5f5c5600
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000