forked to background, child pid 3211 no interfaces have a carrier [ 26.815759][ T3212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.828175][ T3212] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.219' (ECDSA) to the list of known hosts. syzkaller login: [ 51.617690][ T3654] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.624788][ T3656] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.625216][ T3656] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.632546][ T3654] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.639718][ T3656] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 51.646561][ T3654] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 51.653796][ T3656] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.661016][ T3654] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.674493][ T3656] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.675085][ T3654] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.681645][ T3656] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 51.689074][ T3654] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 51.696087][ T3656] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.702939][ T3654] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.709553][ T3656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.716611][ T3654] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 51.723839][ T3656] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.730678][ T3654] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 51.737870][ T3656] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 51.745093][ T3654] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.751380][ T3656] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.758748][ T3654] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.772284][ T3635] Bluetooth: hci3: HCI_REQ-0x0c1a [ 51.772874][ T3657] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.777805][ T3654] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 51.784909][ T3657] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 51.791703][ T3654] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 51.798742][ T3657] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 51.806995][ T3654] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.823002][ T3654] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.824115][ T3650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.830038][ T3654] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 51.837473][ T3658] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 51.845425][ T3636] Bluetooth: hci1: HCI_REQ-0x0c1a [ 51.856170][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 51.856182][ T3658] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 51.863317][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 51.870299][ T3650] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.886192][ T3638] Bluetooth: hci2: HCI_REQ-0x0c1a [ 51.892052][ T3634] Bluetooth: hci0: HCI_REQ-0x0c1a [ 51.897250][ T3637] Bluetooth: hci5: HCI_REQ-0x0c1a [ 51.897270][ T3646] Bluetooth: hci4: HCI_REQ-0x0c1a [ 52.054609][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.062563][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.083483][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.094940][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.103006][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.125814][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program [ 52.155136][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.155142][ T1195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.155177][ T1195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.163018][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.174555][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.194579][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program executing program [ 52.223527][ T1195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.231934][ T1195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.257059][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program executing program [ 52.280611][ T1195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.294730][ T1195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.306039][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.321665][ T1195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program [ 52.344100][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.352166][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.363461][ T1195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.380988][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program executing program [ 52.389017][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.408092][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.413501][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.434301][ T1195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program executing program [ 52.442216][ T1195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.442366][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program executing program executing program executing program [ 52.493452][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.515884][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program executing program executing program executing program [ 52.551850][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.565021][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.579279][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program executing program [ 52.595303][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program executing program executing program executing program executing program executing program [ 52.634762][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 53.924675][ T3651] Bluetooth: hci5: command 0x0409 tx timeout [ 53.924690][ T3645] Bluetooth: hci1: command 0x0409 tx timeout [ 53.924845][ T3645] Bluetooth: hci3: command 0x0409 tx timeout executing program executing program executing program executing program executing program executing program executing program [ 53.994146][ T3645] Bluetooth: hci4: command 0x0409 tx timeout [ 54.000456][ T3645] Bluetooth: hci0: command 0x0409 tx timeout [ 54.006837][ T3652] Bluetooth: hci2: command 0x0409 tx timeout executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 55.994235][ T3645] Bluetooth: hci5: command 0x041b tx timeout [ 56.000352][ T3645] Bluetooth: hci3: command 0x041b tx timeout [ 56.007231][ T3652] Bluetooth: hci1: command 0x041b tx timeout executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 56.074112][ T3645] Bluetooth: hci4: command 0x041b tx timeout [ 56.080294][ T3645] Bluetooth: hci0: command 0x041b tx timeout [ 56.084187][ T3652] Bluetooth: hci2: command 0x041b tx timeout executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 58.074126][ T3651] Bluetooth: hci5: command 0x040f tx timeout [ 58.084174][ T3651] Bluetooth: hci3: command 0x040f tx timeout [ 58.090240][ T3651] Bluetooth: hci1: command 0x040f tx timeout executing program executing program executing program executing program executing program executing program executing program executing program [ 58.154234][ T3651] Bluetooth: hci0: command 0x040f tx timeout [ 58.160399][ T3651] Bluetooth: hci2: command 0x040f tx timeout [ 58.167436][ T3652] Bluetooth: hci4: command 0x040f tx timeout executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 60.154243][ T3651] Bluetooth: hci1: command 0x0419 tx timeout [ 60.160334][ T3651] Bluetooth: hci3: command 0x0419 tx timeout [ 60.166587][ T3652] Bluetooth: hci5: command 0x0419 tx timeout executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 60.234197][ T3651] Bluetooth: hci2: command 0x0419 tx timeout [ 60.240346][ T3651] Bluetooth: hci0: command 0x0419 tx timeout [ 60.247627][ T3652] Bluetooth: hci4: command 0x0419 tx timeout executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 64.973657][ T22] ================================================================== [ 64.981763][ T22] BUG: KASAN: slab-out-of-bounds in _copy_to_iter+0xd18/0x1140 [ 64.989341][ T22] Write of size 305 at addr ffff888021580fe7 by task kworker/1:0/22 [ 64.997332][ T22] [ 64.999662][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Not tainted 6.1.0-rc6-syzkaller #0 [ 65.007821][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 65.017878][ T22] Workqueue: events p9_read_work executing program executing program [ 65.022839][ T22] Call Trace: [ 65.026128][ T22] [ 65.029062][ T22] dump_stack_lvl+0xd1/0x138 [ 65.033675][ T22] print_report+0x15e/0x45d [ 65.038194][ T22] ? __phys_addr+0xc8/0x140 [ 65.042707][ T22] ? _copy_to_iter+0xd18/0x1140 [ 65.047568][ T22] kasan_report+0xbf/0x1f0 [ 65.052045][ T22] ? _copy_to_iter+0xd18/0x1140 [ 65.056914][ T22] kasan_check_range+0x141/0x190 [ 65.061847][ T22] memcpy+0x3d/0x60 [ 65.065646][ T22] _copy_to_iter+0xd18/0x1140 [ 65.070311][ T22] ? _copy_from_iter+0xf40/0xf40 [ 65.075235][ T22] ? pipe_read+0x13d/0x1110 [ 65.079727][ T22] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 65.085261][ T22] ? lock_chain_count+0x20/0x20 [ 65.090108][ T22] ? page_copy_sane+0x28f/0x410 [ 65.094954][ T22] copy_page_to_iter+0xe0/0xa20 [ 65.099800][ T22] pipe_read+0x50e/0x1110 [ 65.104122][ T22] ? pipe_ioctl+0x2c0/0x2c0 [ 65.108614][ T22] ? aa_file_perm+0x599/0x1240 [ 65.113363][ T22] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 65.119339][ T22] __kernel_read+0x2ca/0x7c0 [ 65.123916][ T22] ? __ia32_sys_llseek+0x380/0x380 [ 65.129026][ T22] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 65.134999][ T22] ? fsnotify_perm.part.0+0x221/0x610 [ 65.140357][ T22] ? apparmor_file_permission+0x268/0x4e0 [ 65.146074][ T22] kernel_read+0xc3/0x1c0 [ 65.150392][ T22] p9_read_work+0x2b0/0x1040 [ 65.154972][ T22] ? do_raw_spin_lock+0x124/0x2b0 [ 65.159980][ T22] ? p9_conn_cancel+0x8c0/0x8c0 [ 65.164820][ T22] process_one_work+0x9bf/0x1710 [ 65.169745][ T22] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 65.175102][ T22] ? rwlock_bug.part.0+0x90/0x90 [ 65.180021][ T22] ? _raw_spin_lock_irq+0x45/0x50 [ 65.185035][ T22] worker_thread+0x669/0x1090 [ 65.189700][ T22] ? process_one_work+0x1710/0x1710 [ 65.194907][ T22] kthread+0x2e8/0x3a0 [ 65.198960][ T22] ? kthread_complete_and_exit+0x40/0x40 [ 65.204577][ T22] ret_from_fork+0x1f/0x30 [ 65.208987][ T22] [ 65.211989][ T22] [ 65.214295][ T22] Allocated by task 8120: [ 65.218602][ T22] kasan_save_stack+0x22/0x40 [ 65.223267][ T22] kasan_set_track+0x25/0x30 [ 65.227842][ T22] __kasan_kmalloc+0xa5/0xb0 [ 65.232416][ T22] __kmalloc+0x5a/0xd0 [ 65.236469][ T22] p9_fcall_init+0x97/0x210 [ 65.240954][ T22] p9_tag_alloc+0x208/0x840 [ 65.245438][ T22] p9_client_prepare_req+0x177/0x590 [ 65.250708][ T22] p9_client_rpc+0x1a1/0xd70 [ 65.255281][ T22] p9_client_walk+0x1a0/0x540 [ 65.259943][ T22] v9fs_file_open+0x40c/0xbf0 [ 65.264601][ T22] do_dentry_open+0x6cc/0x13f0 [ 65.269347][ T22] path_openat+0x1bf6/0x2860 [ 65.273929][ T22] do_filp_open+0x1ba/0x410 [ 65.278420][ T22] do_sys_openat2+0x16d/0x4c0 [ 65.283080][ T22] __x64_sys_openat+0x143/0x1f0 [ 65.287914][ T22] do_syscall_64+0x39/0xb0 [ 65.292320][ T22] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 65.298203][ T22] [ 65.300506][ T22] The buggy address belongs to the object at ffff888021580fe0 [ 65.300506][ T22] which belongs to the cache kmalloc-16 of size 16 [ 65.314372][ T22] The buggy address is located 7 bytes inside of [ 65.314372][ T22] 16-byte region [ffff888021580fe0, ffff888021580ff0) [ 65.327367][ T22] [ 65.329671][ T22] The buggy address belongs to the physical page: [ 65.336064][ T22] page:ffffea0000856000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21580 [ 65.346281][ T22] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 65.353810][ T22] raw: 00fff00000000200 ffffea00009c5ec0 dead000000000002 ffff8880120413c0 [ 65.362399][ T22] raw: 0000000000000000 0000000080800080 00000001ffffffff 0000000000000000 [ 65.371050][ T22] page dumped because: kasan: bad access detected [ 65.377442][ T22] page_owner tracks the page as allocated [ 65.383133][ T22] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 7353487812, free_ts 7286669966 [ 65.400478][ T22] get_page_from_freelist+0x10b5/0x2d50 [ 65.406020][ T22] __alloc_pages+0x1cb/0x5b0 [ 65.410600][ T22] alloc_page_interleave+0x1e/0x200 [ 65.415786][ T22] alloc_pages+0x233/0x270 [ 65.420193][ T22] allocate_slab+0x213/0x300 [ 65.424765][ T22] ___slab_alloc+0xa91/0x1400 [ 65.429426][ T22] __slab_alloc.constprop.0+0x56/0xa0 [ 65.434782][ T22] __kmem_cache_alloc_node+0x199/0x3e0 [ 65.440229][ T22] __kmalloc_node_track_caller+0x4b/0xc0 [ 65.445844][ T22] kvasprintf+0xbe/0x160 [ 65.450078][ T22] kvasprintf_const+0x64/0x190 [ 65.454829][ T22] kobject_set_name_vargs+0x5a/0x150 [ 65.460106][ T22] dev_set_name+0xbf/0xf0 [ 65.464417][ T22] usb_hub_create_port_device+0x394/0xd70 [ 65.470121][ T22] hub_probe.cold+0x2534/0x2aa3 [ 65.474967][ T22] usb_probe_interface+0x30f/0x7f0 [ 65.480065][ T22] page last free stack trace: [ 65.484716][ T22] free_pcp_prepare+0x65c/0xd90 [ 65.489554][ T22] free_unref_page+0x1d/0x4d0 [ 65.494218][ T22] __vunmap+0x85d/0xd30 [ 65.498363][ T22] free_work+0x5c/0x80 [ 65.502415][ T22] process_one_work+0x9bf/0x1710 [ 65.507337][ T22] worker_thread+0x669/0x1090 [ 65.512014][ T22] kthread+0x2e8/0x3a0 [ 65.516064][ T22] ret_from_fork+0x1f/0x30 [ 65.520471][ T22] [ 65.522775][ T22] Memory state around the buggy address: [ 65.528385][ T22] ffff888021580e80: 00 04 fc fc 00 04 fc fc 00 04 fc fc 00 04 fc fc [ 65.536427][ T22] ffff888021580f00: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 65.544472][ T22] >ffff888021580f80: fb fb fc fc fb fb fc fc fb fb fc fc 00 03 fc fc [ 65.552528][ T22] ^ [ 65.559966][ T22] ffff888021581000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 65.568012][ T22] ffff888021581080: 00 00 00 00 00 fc fc fc fc fc fc fc fc 00 00 00 executing program executing program [ 65.576051][ T22] ================================================================== [ 65.618655][ T22] Kernel panic - not syncing: panic_on_warn set ... [ 65.625366][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Not tainted 6.1.0-rc6-syzkaller #0 [ 65.633538][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 65.643602][ T22] Workqueue: events p9_read_work [ 65.648565][ T22] Call Trace: [ 65.651843][ T22] [ 65.654781][ T22] dump_stack_lvl+0xd1/0x138 [ 65.659385][ T22] panic+0x2cc/0x626 [ 65.663297][ T22] ? panic_print_sys_info.part.0+0x110/0x110 [ 65.669290][ T22] ? preempt_schedule_common+0x59/0xc0 [ 65.674775][ T22] ? preempt_schedule_thunk+0x1a/0x1c [ 65.680179][ T22] end_report.part.0+0x3f/0x7c [ 65.684952][ T22] ? _copy_to_iter+0xd18/0x1140 [ 65.689814][ T22] kasan_report.cold+0xa/0xf [ 65.694417][ T22] ? _copy_to_iter+0xd18/0x1140 [ 65.699287][ T22] kasan_check_range+0x141/0x190 [ 65.704240][ T22] memcpy+0x3d/0x60 [ 65.708044][ T22] _copy_to_iter+0xd18/0x1140 [ 65.712710][ T22] ? _copy_from_iter+0xf40/0xf40 [ 65.717638][ T22] ? pipe_read+0x13d/0x1110 [ 65.722131][ T22] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 65.727662][ T22] ? lock_chain_count+0x20/0x20 [ 65.732505][ T22] ? page_copy_sane+0x28f/0x410 [ 65.737345][ T22] copy_page_to_iter+0xe0/0xa20 [ 65.742184][ T22] pipe_read+0x50e/0x1110 [ 65.746507][ T22] ? pipe_ioctl+0x2c0/0x2c0 [ 65.751003][ T22] ? aa_file_perm+0x599/0x1240 [ 65.755753][ T22] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 65.761728][ T22] __kernel_read+0x2ca/0x7c0 [ 65.766309][ T22] ? __ia32_sys_llseek+0x380/0x380 [ 65.771415][ T22] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 65.777393][ T22] ? fsnotify_perm.part.0+0x221/0x610 [ 65.782754][ T22] ? apparmor_file_permission+0x268/0x4e0 [ 65.788469][ T22] kernel_read+0xc3/0x1c0 [ 65.792787][ T22] p9_read_work+0x2b0/0x1040 [ 65.797366][ T22] ? do_raw_spin_lock+0x124/0x2b0 [ 65.802372][ T22] ? p9_conn_cancel+0x8c0/0x8c0 [ 65.807213][ T22] process_one_work+0x9bf/0x1710 [ 65.812139][ T22] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 65.817497][ T22] ? rwlock_bug.part.0+0x90/0x90 [ 65.822421][ T22] ? _raw_spin_lock_irq+0x45/0x50 [ 65.827438][ T22] worker_thread+0x669/0x1090 [ 65.832103][ T22] ? process_one_work+0x1710/0x1710 [ 65.837291][ T22] kthread+0x2e8/0x3a0 [ 65.841345][ T22] ? kthread_complete_and_exit+0x40/0x40 [ 65.847307][ T22] ret_from_fork+0x1f/0x30 [ 65.851719][ T22] [ 65.855686][ T22] Kernel Offset: disabled [ 65.859996][ T22] Rebooting in 86400 seconds..