./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3120716035 <...> Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts. execve("./syz-executor3120716035", ["./syz-executor3120716035"], 0x7ffe6b9a25f0 /* 10 vars */) = 0 brk(NULL) = 0x55558d23c000 brk(0x55558d23cd00) = 0x55558d23cd00 arch_prctl(ARCH_SET_FS, 0x55558d23c380) = 0 set_tid_address(0x55558d23c650) = 5228 set_robust_list(0x55558d23c660, 24) = 0 rseq(0x55558d23cca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3120716035", 4096) = 28 getrandom("\xc5\x4e\xda\x57\xe5\xfc\x32\x28", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558d23cd00 brk(0x55558d25dd00) = 0x55558d25dd00 brk(0x55558d25e000) = 0x55558d25e000 mprotect(0x7f6a1a809000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5229 attached , child_tidptr=0x55558d23c650) = 5229 [pid 5229] set_robust_list(0x55558d23c660, 24) = 0 [pid 5229] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5229] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5229] setsid() = 1 [pid 5229] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5229] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5229] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5229] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5229] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5229] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5229] unshare(CLONE_NEWNS) = 0 [pid 5229] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5229] unshare(CLONE_NEWIPC) = 0 [pid 5229] unshare(CLONE_NEWCGROUP) = 0 [pid 5229] unshare(CLONE_NEWUTS) = 0 [pid 5229] unshare(CLONE_SYSVSEM) = 0 [pid 5229] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5229] write(3, "16777216", 8) = 8 [pid 5229] close(3) = 0 [pid 5229] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5229] write(3, "536870912", 9) = 9 [pid 5229] close(3) = 0 [pid 5229] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5229] write(3, "1024", 4) = 4 [pid 5229] close(3) = 0 [pid 5229] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5229] write(3, "8192", 4) = 4 [pid 5229] close(3) = 0 [pid 5229] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5229] write(3, "1024", 4) = 4 [pid 5229] close(3) = 0 [pid 5229] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5229] write(3, "1024", 4) = 4 [pid 5229] close(3) = 0 [pid 5229] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5229] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5229] close(3) = 0 [pid 5229] getpid() = 1 [pid 5229] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<) = 0 [pid 5229] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5240 attached , child_tidptr=0x55558d23c650) = 3 [pid 5240] set_robust_list(0x55558d23c660, 24) = 0 [pid 5240] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5240] setpgid(0, 0) = 0 [pid 5240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5240] write(3, "1000", 4) = 4 [pid 5240] close(3) = 0 executing program [pid 5240] write(1, "executing program\n", 18) = 18 [pid 5240] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5240] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5240] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x65\x74\x68\x74\x6f\x6f\x6c\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5240] recvfrom(4, [{nlmsg_len=996, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x65\x74\x68\x74\x6f\x6f\x6c\x00\x06\x00\x01\x00\x16\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x00\x00\x00\x00\x88\x03\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 996 [pid 5240] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5240] close(4) = 0 [pid 5240] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5240] ioctl(4, SIOCGIFINDEX, {ifr_name="vcan0", ifr_ifindex=13}) = 0 [ 88.254496][ T5240] ================================================================== [ 88.262614][ T5240] BUG: KASAN: slab-use-after-free in __mutex_lock+0xcf5/0xd70 [ 88.270089][ T5240] Read of size 4 at addr ffff88807e615a34 by task syz-executor312/5240 [ 88.278366][ T5240] [ 88.280697][ T5240] CPU: 0 UID: 0 PID: 5240 Comm: syz-executor312 Not tainted 6.11.0-rc4-syzkaller-00565-gf9db28bb09f4 #0 [ 88.291807][ T5240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 88.301883][ T5240] Call Trace: [ 88.305169][ T5240] [ 88.308137][ T5240] dump_stack_lvl+0x241/0x360 [ 88.312828][ T5240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.318029][ T5240] ? __pfx__printk+0x10/0x10 [ 88.322622][ T5240] ? _printk+0xd5/0x120 [ 88.326777][ T5240] ? __virt_addr_valid+0x183/0x530 [ 88.331887][ T5240] ? __virt_addr_valid+0x183/0x530 [ 88.336999][ T5240] print_report+0x169/0x550 [ 88.341515][ T5240] ? __virt_addr_valid+0x183/0x530 [ 88.346625][ T5240] ? __virt_addr_valid+0x183/0x530 [ 88.351736][ T5240] ? __virt_addr_valid+0x45f/0x530 [ 88.356845][ T5240] ? __phys_addr+0xba/0x170 [ 88.361369][ T5240] ? __mutex_lock+0xcf5/0xd70 [ 88.366052][ T5240] kasan_report+0x143/0x180 [ 88.370570][ T5240] ? __mutex_lock+0xcf5/0xd70 [ 88.375282][ T5240] __mutex_lock+0xcf5/0xd70 [ 88.379789][ T5240] ? netdev_get_by_index+0x7a/0xb0 [ 88.384995][ T5240] ? ethnl_parse_header_dev_get+0x690/0x990 [ 88.390893][ T5240] ? ethnl_act_cable_test+0x187/0x3f0 [ 88.396276][ T5240] ? __pfx___mutex_lock+0x10/0x10 [ 88.401314][ T5240] ethnl_act_cable_test+0x187/0x3f0 [ 88.406590][ T5240] ? __pfx_ethnl_act_cable_test+0x10/0x10 [ 88.412348][ T5240] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 88.418712][ T5240] genl_rcv_msg+0xb14/0xec0 [ 88.423252][ T5240] ? __pfx_genl_rcv_msg+0x10/0x10 [ 88.428297][ T5240] ? do_syscall_64+0xf3/0x230 [ 88.432990][ T5240] ? rcu_is_watching+0x15/0xb0 [ 88.437771][ T5240] ? __pfx_lock_acquire+0x10/0x10 [ 88.442809][ T5240] ? __pfx_ethnl_act_cable_test+0x10/0x10 [ 88.448543][ T5240] ? __pfx___might_resched+0x10/0x10 [ 88.453840][ T5240] netlink_rcv_skb+0x1e3/0x430 [ 88.458607][ T5240] ? __pfx_genl_rcv_msg+0x10/0x10 [ 88.463641][ T5240] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 88.468925][ T5240] ? lock_release+0xbf/0xa30 [ 88.473530][ T5240] ? __netlink_deliver_tap+0x77e/0x7c0 [ 88.478999][ T5240] genl_rcv+0x28/0x40 [ 88.482986][ T5240] netlink_unicast+0x7f6/0x990 [ 88.487765][ T5240] ? __pfx_netlink_unicast+0x10/0x10 [ 88.493066][ T5240] ? __virt_addr_valid+0x183/0x530 [ 88.498182][ T5240] ? __check_object_size+0x49c/0x900 [ 88.503477][ T5240] ? bpf_lsm_netlink_send+0x9/0x10 [ 88.508598][ T5240] netlink_sendmsg+0x8e4/0xcb0 [ 88.513369][ T5240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.518663][ T5240] ? __import_iovec+0x536/0x820 [ 88.523548][ T5240] ? aa_sock_msg_perm+0x91/0x160 [ 88.528507][ T5240] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 88.533800][ T5240] ? security_socket_sendmsg+0x87/0xb0 [ 88.539268][ T5240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.544554][ T5240] __sock_sendmsg+0x221/0x270 [ 88.549246][ T5240] ____sys_sendmsg+0x525/0x7d0 [ 88.554025][ T5240] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.559345][ T5240] ? do_raw_spin_lock+0x14f/0x370 [ 88.564424][ T5240] __sys_sendmsg+0x2b0/0x3a0 [ 88.569137][ T5240] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.574283][ T5240] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.580816][ T5240] ? _raw_spin_unlock_irq+0x2e/0x50 [ 88.586029][ T5240] ? ptrace_notify+0x279/0x380 [ 88.590803][ T5240] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.597136][ T5240] ? rcu_is_watching+0x15/0xb0 [ 88.601935][ T5240] do_syscall_64+0xf3/0x230 [ 88.606443][ T5240] ? clear_bhb_loop+0x35/0x90 [ 88.611127][ T5240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.617038][ T5240] RIP: 0033:0x7f6a1a790f89 [ 88.621458][ T5240] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 88.641070][ T5240] RSP: 002b:00007ffff8de1cc8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.649512][ T5240] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f6a1a790f89 [ 88.657492][ T5240] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 88.665466][ T5240] RBP: 00000000000f4240 R08: 0000000000000001 R09: 0000000000000001 [ 88.673437][ T5240] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff8de1d20 [ 88.681411][ T5240] R13: 0000000000015769 R14: 00007ffff8de1cec R15: 00007ffff8de1d00 [ 88.689394][ T5240] [ 88.692414][ T5240] [ 88.694822][ T5240] Allocated by task 5229: [ 88.699146][ T5240] kasan_save_track+0x3f/0x80 [ 88.703843][ T5240] __kasan_slab_alloc+0x66/0x80 [ 88.708704][ T5240] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 88.714597][ T5240] dup_task_struct+0x57/0x8c0 [ 88.719282][ T5240] copy_process+0x5d1/0x3e10 [ 88.723878][ T5240] kernel_clone+0x226/0x8f0 [ 88.728397][ T5240] __x64_sys_clone+0x258/0x2a0 [ 88.733174][ T5240] do_syscall_64+0xf3/0x230 [ 88.737677][ T5240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.743576][ T5240] [ 88.745897][ T5240] Freed by task 0: [ 88.749610][ T5240] kasan_save_track+0x3f/0x80 [ 88.754291][ T5240] kasan_save_free_info+0x40/0x50 [ 88.759323][ T5240] poison_slab_object+0xe0/0x150 [ 88.764352][ T5240] __kasan_slab_free+0x37/0x60 [ 88.769120][ T5240] kmem_cache_free+0x145/0x350 [ 88.773888][ T5240] delayed_put_task_struct+0x125/0x300 [ 88.779357][ T5240] rcu_core+0xafd/0x1830 [ 88.783608][ T5240] handle_softirqs+0x2c4/0x970 [ 88.788375][ T5240] __irq_exit_rcu+0xf4/0x1c0 [ 88.792971][ T5240] irq_exit_rcu+0x9/0x30 [ 88.797215][ T5240] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 88.802858][ T5240] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 88.808849][ T5240] [ 88.811177][ T5240] Last potentially related work creation: [ 88.816883][ T5240] kasan_save_stack+0x3f/0x60 [ 88.822002][ T5240] __kasan_record_aux_stack+0xac/0xc0 [ 88.827380][ T5240] call_rcu+0x167/0xa70 [ 88.831548][ T5240] release_task+0x16ec/0x1830 [ 88.836239][ T5240] wait_consider_task+0x1a14/0x2e60 [ 88.841960][ T5240] __do_wait+0x1b0/0x850 [ 88.846202][ T5240] do_wait+0x1e9/0x560 [ 88.850267][ T5240] kernel_wait4+0x2a7/0x3e0 [ 88.854771][ T5240] __x64_sys_wait4+0x134/0x1e0 [ 88.859621][ T5240] do_syscall_64+0xf3/0x230 [ 88.864126][ T5240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.870027][ T5240] [ 88.872347][ T5240] Second to last potentially related work creation: [ 88.878921][ T5240] kasan_save_stack+0x3f/0x60 [ 88.883711][ T5240] __kasan_record_aux_stack+0xac/0xc0 [ 88.889082][ T5240] task_work_add+0xb8/0x450 [ 88.893582][ T5240] sched_tick+0x322/0x610 [ 88.897917][ T5240] update_process_times+0x202/0x230 [ 88.903131][ T5240] tick_nohz_handler+0x37c/0x500 [ 88.908077][ T5240] __hrtimer_run_queues+0x551/0xd50 [ 88.913277][ T5240] hrtimer_interrupt+0x396/0x990 [ 88.918214][ T5240] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 88.924202][ T5240] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 88.929846][ T5240] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 88.935830][ T5240] [ 88.938154][ T5240] The buggy address belongs to the object at ffff88807e615a00 [ 88.938154][ T5240] which belongs to the cache task_struct of size 7424 [ 88.952294][ T5240] The buggy address is located 52 bytes inside of [ 88.952294][ T5240] freed 7424-byte region [ffff88807e615a00, ffff88807e617700) [ 88.966091][ T5240] [ 88.968414][ T5240] The buggy address belongs to the physical page: [ 88.974826][ T5240] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e610 [ 88.983597][ T5240] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 88.992092][ T5240] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 88.999649][ T5240] page_type: 0xfdffffff(slab) [ 89.004344][ T5240] raw: 00fff00000000040 ffff8880166fd500 dead000000000122 0000000000000000 [ 89.013445][ T5240] raw: 0000000000000000 0000000080040004 00000001fdffffff 0000000000000000 [ 89.022116][ T5240] head: 00fff00000000040 ffff8880166fd500 dead000000000122 0000000000000000 [ 89.030873][ T5240] head: 0000000000000000 0000000080040004 00000001fdffffff 0000000000000000 [ 89.039541][ T5240] head: 00fff00000000003 ffffea0001f98401 ffffffffffffffff 0000000000000000 [ 89.048210][ T5240] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 89.056872][ T5240] page dumped because: kasan: bad access detected [ 89.063290][ T5240] page_owner tracks the page as allocated [ 89.068998][ T5240] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4679, tgid 4679 (udevd), ts 81273869914, free_ts 81058464845 [ 89.089751][ T5240] post_alloc_hook+0x1f3/0x230 [ 89.094525][ T5240] get_page_from_freelist+0x2e4c/0x2f10 [ 89.100079][ T5240] __alloc_pages_noprof+0x256/0x6c0 [ 89.105287][ T5240] alloc_slab_page+0x5f/0x120 [ 89.110055][ T5240] allocate_slab+0x5a/0x2f0 [ 89.114563][ T5240] ___slab_alloc+0xcd1/0x14b0 [ 89.119243][ T5240] __slab_alloc+0x58/0xa0 [ 89.123576][ T5240] kmem_cache_alloc_node_noprof+0x1fe/0x320 [ 89.129468][ T5240] dup_task_struct+0x57/0x8c0 [ 89.134152][ T5240] copy_process+0x5d1/0x3e10 [ 89.138746][ T5240] kernel_clone+0x226/0x8f0 [ 89.143254][ T5240] __x64_sys_clone+0x258/0x2a0 [ 89.148023][ T5240] do_syscall_64+0xf3/0x230 [ 89.152526][ T5240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.158426][ T5240] page last free pid 5229 tgid 5229 stack trace: [ 89.164747][ T5240] free_unref_page+0xd22/0xea0 [ 89.169514][ T5240] __slab_free+0x31b/0x3d0 [ 89.173936][ T5240] qlist_free_all+0x9e/0x140 [ 89.178527][ T5240] kasan_quarantine_reduce+0x14f/0x170 [ 89.183996][ T5240] __kasan_slab_alloc+0x23/0x80 [ 89.188854][ T5240] __kmalloc_noprof+0x1a6/0x400 [ 89.193724][ T5240] tomoyo_supervisor+0xe0d/0x11f0 [ 89.198842][ T5240] tomoyo_path_permission+0x243/0x360 [ 89.204213][ T5240] tomoyo_check_open_permission+0x479/0x500 [ 89.210107][ T5240] security_file_open+0x6a/0x750 [ 89.215048][ T5240] do_dentry_open+0x38e/0x1440 [ 89.219822][ T5240] vfs_open+0x3e/0x330 [ 89.223887][ T5240] path_openat+0x2b3e/0x3470 [ 89.228480][ T5240] do_filp_open+0x235/0x490 [ 89.232983][ T5240] do_sys_openat2+0x13e/0x1d0 [ 89.237657][ T5240] __x64_sys_openat+0x247/0x2a0 [ 89.242505][ T5240] [ 89.244825][ T5240] Memory state around the buggy address: [ 89.250449][ T5240] ffff88807e615900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.258520][ T5240] ffff88807e615980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.266595][ T5240] >ffff88807e615a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.274651][ T5240] ^ [ 89.280276][ T5240] ffff88807e615a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.288334][ T5240] ffff88807e615b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.296397][ T5240] ================================================================== [ 89.305263][ T5240] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 89.312487][ T5240] CPU: 0 UID: 0 PID: 5240 Comm: syz-executor312 Not tainted 6.11.0-rc4-syzkaller-00565-gf9db28bb09f4 #0 [ 89.323618][ T5240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 89.333711][ T5240] Call Trace: [ 89.337001][ T5240] [ 89.339998][ T5240] dump_stack_lvl+0x241/0x360 [ 89.344683][ T5240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.349901][ T5240] ? __pfx__printk+0x10/0x10 [ 89.354493][ T5240] ? rcu_is_watching+0x15/0xb0 [ 89.359267][ T5240] ? vscnprintf+0x5d/0x90 [ 89.363604][ T5240] panic+0x349/0x860 [ 89.367502][ T5240] ? check_panic_on_warn+0x21/0xb0 [ 89.372614][ T5240] ? __pfx_panic+0x10/0x10 [ 89.377031][ T5240] ? trace_irq_enable+0x2c/0x120 [ 89.382063][ T5240] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 89.387970][ T5240] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 89.393892][ T5240] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 89.400336][ T5240] ? print_report+0x502/0x550 [ 89.405045][ T5240] check_panic_on_warn+0x86/0xb0 [ 89.410098][ T5240] ? __mutex_lock+0xcf5/0xd70 [ 89.414789][ T5240] end_report+0x77/0x160 [ 89.419048][ T5240] kasan_report+0x154/0x180 [ 89.423564][ T5240] ? __mutex_lock+0xcf5/0xd70 [ 89.428251][ T5240] __mutex_lock+0xcf5/0xd70 [ 89.432779][ T5240] ? netdev_get_by_index+0x7a/0xb0 [ 89.437919][ T5240] ? ethnl_parse_header_dev_get+0x690/0x990 [ 89.443814][ T5240] ? ethnl_act_cable_test+0x187/0x3f0 [ 89.449206][ T5240] ? __pfx___mutex_lock+0x10/0x10 [ 89.454246][ T5240] ethnl_act_cable_test+0x187/0x3f0 [ 89.459456][ T5240] ? __pfx_ethnl_act_cable_test+0x10/0x10 [ 89.465187][ T5240] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 89.471527][ T5240] genl_rcv_msg+0xb14/0xec0 [ 89.476075][ T5240] ? __pfx_genl_rcv_msg+0x10/0x10 [ 89.481109][ T5240] ? do_syscall_64+0xf3/0x230 [ 89.485884][ T5240] ? rcu_is_watching+0x15/0xb0 [ 89.490657][ T5240] ? __pfx_lock_acquire+0x10/0x10 [ 89.495726][ T5240] ? __pfx_ethnl_act_cable_test+0x10/0x10 [ 89.501460][ T5240] ? __pfx___might_resched+0x10/0x10 [ 89.506756][ T5240] netlink_rcv_skb+0x1e3/0x430 [ 89.511610][ T5240] ? __pfx_genl_rcv_msg+0x10/0x10 [ 89.516674][ T5240] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 89.521964][ T5240] ? lock_release+0xbf/0xa30 [ 89.526595][ T5240] ? __netlink_deliver_tap+0x77e/0x7c0 [ 89.532065][ T5240] genl_rcv+0x28/0x40 [ 89.536051][ T5240] netlink_unicast+0x7f6/0x990 [ 89.540831][ T5240] ? __pfx_netlink_unicast+0x10/0x10 [ 89.546210][ T5240] ? __virt_addr_valid+0x183/0x530 [ 89.551326][ T5240] ? __check_object_size+0x49c/0x900 [ 89.556617][ T5240] ? bpf_lsm_netlink_send+0x9/0x10 [ 89.561736][ T5240] netlink_sendmsg+0x8e4/0xcb0 [ 89.566507][ T5240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.571794][ T5240] ? __import_iovec+0x536/0x820 [ 89.576652][ T5240] ? aa_sock_msg_perm+0x91/0x160 [ 89.581611][ T5240] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 89.586928][ T5240] ? security_socket_sendmsg+0x87/0xb0 [ 89.592417][ T5240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.597711][ T5240] __sock_sendmsg+0x221/0x270 [ 89.602406][ T5240] ____sys_sendmsg+0x525/0x7d0 [ 89.607185][ T5240] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.612485][ T5240] ? do_raw_spin_lock+0x14f/0x370 [ 89.617524][ T5240] __sys_sendmsg+0x2b0/0x3a0 [ 89.622126][ T5240] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.627248][ T5240] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 89.633589][ T5240] ? _raw_spin_unlock_irq+0x2e/0x50 [ 89.638819][ T5240] ? ptrace_notify+0x279/0x380 [ 89.643614][ T5240] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 89.649953][ T5240] ? rcu_is_watching+0x15/0xb0 [ 89.654729][ T5240] do_syscall_64+0xf3/0x230 [ 89.659242][ T5240] ? clear_bhb_loop+0x35/0x90 [ 89.663929][ T5240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.669846][ T5240] RIP: 0033:0x7f6a1a790f89 [ 89.674272][ T5240] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 89.693900][ T5240] RSP: 002b:00007ffff8de1cc8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.702334][ T5240] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f6a1a790f89 [ 89.710331][ T5240] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 89.718308][ T5240] RBP: 00000000000f4240 R08: 0000000000000001 R09: 0000000000000001 [ 89.726279][ T5240] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff8de1d20 [ 89.734253][ T5240] R13: 0000000000015769 R14: 00007ffff8de1cec R15: 00007ffff8de1d00 [ 89.742233][ T5240] [ 89.745545][ T5240] Kernel Offset: disabled [ 89.749869][ T5240] Rebooting in 86400 seconds..