Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts.
2025/02/15 11:29:35 ignoring optional flag "sandboxArg"="0"
2025/02/15 11:29:36 parsed 1 programs
[ 75.319829][ T4250] cgroup: Unknown subsys name 'net'
[ 75.452362][ T4250] cgroup: Unknown subsys name 'rlimit'
[ 76.940856][ T4250] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 79.084380][ T4269] chnl_net:caif_netlink_parms(): no params data found
[ 79.144720][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.152718][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.161183][ T4269] device bridge_slave_0 entered promiscuous mode
[ 79.171719][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.179240][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.187588][ T4269] device bridge_slave_1 entered promiscuous mode
[ 79.212501][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 79.224190][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 79.258261][ T4269] team0: Port device team_slave_0 added
[ 79.267155][ T4269] team0: Port device team_slave_1 added
[ 79.288115][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 79.295090][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 79.321170][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 79.336178][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 79.343157][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 79.369704][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 79.425802][ T4269] device hsr_slave_0 entered promiscuous mode
[ 79.432779][ T4269] device hsr_slave_1 entered promiscuous mode
[ 79.540603][ T4269] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 79.557923][ T4269] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 79.567194][ T4269] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 79.577045][ T4269] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 79.601096][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.608427][ T4269] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 79.616666][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.623788][ T4269] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 79.681652][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0
[ 79.702565][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 79.712828][ T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.721652][ T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.730433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 79.746231][ T4269] 8021q: adding VLAN 0 to HW filter on device team0
[ 79.764510][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 79.773293][ T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.780483][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 79.793334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 79.802252][ T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.809434][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 79.836823][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 79.846918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 79.859869][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 79.876732][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 79.890116][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 79.900867][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 80.049426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 80.057391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 80.073272][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 80.099209][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 80.108603][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 80.138506][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 80.166040][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 80.174787][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 80.182986][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 80.194588][ T4269] device veth0_vlan entered promiscuous mode
[ 80.211117][ T4269] device veth1_vlan entered promiscuous mode
[ 80.231457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 80.239761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 80.248462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 80.257320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 80.269137][ T4269] device veth0_macvtap entered promiscuous mode
[ 80.279532][ T4269] device veth1_macvtap entered promiscuous mode
[ 80.298067][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 80.308149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 80.316411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 80.324508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 80.335465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 80.349301][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 80.357434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 80.367296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 80.379282][ T4269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.388928][ T4269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.397822][ T4269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.407609][ T4269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.512477][ T4269] syz-executor (4269) used greatest stack depth: 19416 bytes left
[ 80.533805][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 80.555123][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 80.564672][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 80.572561][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 80.581097][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 80.589240][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 80.597155][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 80.810300][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.824882][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.834622][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 80.851370][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.859866][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.869087][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 83.001161][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/02/15 11:29:46 executed programs: 0
[ 83.222243][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 83.230032][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 83.239148][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 83.247194][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 83.254786][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 83.263094][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 83.392233][ T4331] chnl_net:caif_netlink_parms(): no params data found
[ 83.444293][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.451661][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.460084][ T4331] device bridge_slave_0 entered promiscuous mode
[ 83.468516][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.476013][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.483955][ T4331] device bridge_slave_1 entered promiscuous mode
[ 83.508282][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 83.520954][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 83.547199][ T4331] team0: Port device team_slave_0 added
[ 83.554870][ T4331] team0: Port device team_slave_1 added
[ 83.575107][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 83.585329][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 83.611895][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 83.624556][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 83.631599][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 83.657929][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 83.691885][ T4331] device hsr_slave_0 entered promiscuous mode
[ 83.699548][ T4331] device hsr_slave_1 entered promiscuous mode
[ 83.706603][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 83.714479][ T4331] Cannot create hsr debugfs directory
[ 85.197075][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 85.266955][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 85.346705][ T4287] Bluetooth: hci0: command 0x0409 tx timeout
[ 86.120554][ T4331] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 86.130961][ T4331] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 86.142439][ T4331] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 86.157217][ T4331] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 86.206302][ T9] device hsr_slave_0 left promiscuous mode
[ 86.212972][ T9] device hsr_slave_1 left promiscuous mode
[ 86.220082][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 86.227886][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 86.238798][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 86.246398][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 86.254319][ T9] device bridge_slave_1 left promiscuous mode
[ 86.261518][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 86.272229][ T9] device bridge_slave_0 left promiscuous mode
[ 86.280044][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 86.300950][ T9] device veth1_macvtap left promiscuous mode
[ 86.307386][ T9] device veth0_macvtap left promiscuous mode
[ 86.313456][ T9] device veth1_vlan left promiscuous mode
[ 86.319617][ T9] device veth0_vlan left promiscuous mode
[ 86.633921][ T22] cfg80211: failed to load regulatory.db
[ 86.672196][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 86.700593][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 86.730643][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 86.760302][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 87.022911][ T9] bond0 (unregistering): Released all slaves
[ 87.113008][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0
[ 87.129140][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 87.137863][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 87.165050][ T4331] 8021q: adding VLAN 0 to HW filter on device team0
[ 87.174888][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 87.184786][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 87.193629][ T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.200798][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 87.209475][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 87.235171][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 87.244022][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 87.252798][ T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.259962][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 87.269140][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 87.288680][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 87.298379][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 87.310428][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 87.319818][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 87.329176][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 87.340048][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 87.349854][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 87.359141][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 87.384360][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 87.396207][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 87.407874][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 87.425542][ T4287] Bluetooth: hci0: command 0x041b tx timeout
[ 87.582395][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 87.591677][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 87.604460][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 87.625875][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 87.637027][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 87.657334][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 87.669105][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 87.684479][ T4331] device veth0_vlan entered promiscuous mode
[ 87.692572][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 87.701291][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 87.713686][ T4331] device veth1_vlan entered promiscuous mode
[ 87.746757][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 87.755142][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 87.764984][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 87.774740][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 87.789257][ T4331] device veth0_macvtap entered promiscuous mode
[ 87.798350][ T4331] device veth1_macvtap entered promiscuous mode
[ 87.821831][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 87.829762][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 87.839552][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 87.848635][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 87.858243][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 87.879339][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 87.887373][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 87.896716][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 87.911167][ T4331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.920121][ T4331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.933578][ T4331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.947143][ T4331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.060850][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 88.075311][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 88.088909][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 88.101707][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 88.110036][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 88.120176][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2025/02/15 11:29:51 executed programs: 3
[ 89.505722][ T4287] Bluetooth: hci0: command 0x040f tx timeout
[ 91.588288][ T48] Bluetooth: hci0: command 0x0419 tx timeout
2025/02/15 11:29:56 executed programs: 139
2025/02/15 11:30:01 executed programs: 300
[ 100.235571][ T5472] ==================================================================
[ 100.243681][ T5472] BUG: KASAN: use-after-free in cpu_map_enqueue+0xb6/0x370
[ 100.250926][ T5472] Read of size 8 at addr ffff88807e966608 by task syz.0.375/5472
[ 100.258648][ T5472]
[ 100.260985][ T5472] CPU: 0 PID: 5472 Comm: syz.0.375 Not tainted 6.1.128-syzkaller #0
[ 100.268990][ T5472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 100.279064][ T5472] Call Trace:
[ 100.282345][ T5472]
[ 100.285274][ T5472] dump_stack_lvl+0x1e3/0x2cb
[ 100.289966][ T5472] ? nf_tcp_handle_invalid+0x642/0x642
[ 100.295444][ T5472] ? panic+0x764/0x764
[ 100.299527][ T5472] ? _printk+0xd1/0x111
[ 100.303684][ T5472] ? __virt_addr_valid+0x17f/0x530
[ 100.308811][ T5472] ? __virt_addr_valid+0x17f/0x530
[ 100.313934][ T5472] print_report+0x15f/0x4f0
[ 100.318448][ T5472] ? __virt_addr_valid+0x17f/0x530
[ 100.323568][ T5472] ? __virt_addr_valid+0x17f/0x530
[ 100.328688][ T5472] ? __virt_addr_valid+0x45b/0x530
[ 100.333813][ T5472] ? __phys_addr+0xb6/0x170
[ 100.338333][ T5472] ? cpu_map_enqueue+0xb6/0x370
[ 100.343191][ T5472] kasan_report+0x136/0x160
[ 100.347710][ T5472] ? cpu_map_enqueue+0xb6/0x370
[ 100.352664][ T5472] cpu_map_enqueue+0xb6/0x370
[ 100.357353][ T5472] xdp_do_redirect_frame+0x2f0/0x660
[ 100.362672][ T5472] bpf_test_run_xdp_live+0xbf4/0x1ea0
[ 100.368162][ T5472] ? __mutex_unlock_slowpath+0x218/0x750
[ 100.373830][ T5472] ? 0xffffffffa00038c0
[ 100.378005][ T5472] ? bpf_test_run_xdp_live+0x75c/0x1ea0
[ 100.383572][ T5472] ? xdp_convert_md_to_buff+0x330/0x330
[ 100.389134][ T5472] ? bpf_dispatcher_change_prog+0xdf5/0xf80
[ 100.395046][ T5472] ? 0xffffffffa00038c0
[ 100.399213][ T5472] ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 100.405557][ T5472] ? __might_fault+0xbd/0x110
[ 100.410244][ T5472] ? _copy_from_user+0x109/0x170
[ 100.415192][ T5472] ? bpf_test_init+0x15a/0x180
[ 100.419960][ T5472] ? xdp_convert_md_to_buff+0x5b/0x330
[ 100.425518][ T5472] bpf_prog_test_run_xdp+0x7d1/0x1130
[ 100.430911][ T5472] ? dev_put+0x80/0x80
[ 100.434994][ T5472] ? dev_put+0x80/0x80
[ 100.439072][ T5472] bpf_prog_test_run+0x32f/0x3a0
[ 100.444022][ T5472] __sys_bpf+0x3eb/0x6c0
[ 100.448286][ T5472] ? bpf_link_show_fdinfo+0x300/0x300
[ 100.453686][ T5472] ? print_irqtrace_events+0x210/0x210
[ 100.459173][ T5472] ? print_irqtrace_events+0x210/0x210
[ 100.464648][ T5472] ? syscall_enter_from_user_mode+0x2e/0x230
[ 100.470631][ T5472] ? lockdep_hardirqs_on+0x94/0x130
[ 100.475833][ T5472] __x64_sys_bpf+0x78/0x90
[ 100.480265][ T5472] do_syscall_64+0x3b/0xb0
[ 100.484687][ T5472] ? clear_bhb_loop+0x45/0xa0
[ 100.489369][ T5472] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 100.495317][ T5472] RIP: 0033:0x7fdda098cde9
[ 100.499755][ T5472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 100.519385][ T5472] RSP: 002b:00007fdda17dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 100.527806][ T5472] RAX: ffffffffffffffda RBX: 00007fdda0ba5fa0 RCX: 00007fdda098cde9
[ 100.535816][ T5472] RDX: 0000000000000050 RSI: 00004000000000c0 RDI: 000000000000000a
[ 100.543807][ T5472] RBP: 00007fdda0a0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 100.551787][ T5472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 100.559778][ T5472] R13: 0000000000000000 R14: 00007fdda0ba5fa0 R15: 00007ffcf9d28948
[ 100.567774][ T5472]
[ 100.570800][ T5472]
[ 100.573124][ T5472] Allocated by task 5421:
[ 100.577463][ T5472] kasan_set_track+0x4b/0x70
[ 100.582060][ T5472] __kasan_kmalloc+0x97/0xb0
[ 100.586653][ T5472] __kmalloc_node+0xb3/0x230
[ 100.591249][ T5472] bpf_map_kmalloc_node+0xce/0x1c0
[ 100.596372][ T5472] cpu_map_update_elem+0x290/0xf90
[ 100.601487][ T5472] map_update_elem+0x503/0x680
[ 100.606266][ T5472] __sys_bpf+0x337/0x6c0
[ 100.610508][ T5472] __x64_sys_bpf+0x78/0x90
[ 100.614930][ T5472] do_syscall_64+0x3b/0xb0
[ 100.619356][ T5472] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 100.625250][ T5472]
[ 100.627571][ T5472] Freed by task 5422:
[ 100.631542][ T5472] kasan_set_track+0x4b/0x70
[ 100.636139][ T5472] kasan_save_free_info+0x27/0x40
[ 100.641173][ T5472] ____kasan_slab_free+0xd6/0x120
[ 100.646203][ T5472] __kmem_cache_free+0x25c/0x3c0
[ 100.651161][ T5472] put_cpu_map_entry+0x6eb/0x760
[ 100.656105][ T5472] cpu_map_kthread_run+0x2887/0x2940
[ 100.661414][ T5472] kthread+0x28d/0x320
[ 100.665480][ T5472] ret_from_fork+0x1f/0x30
[ 100.669906][ T5472]
[ 100.672226][ T5472] Last potentially related work creation:
[ 100.677936][ T5472] kasan_save_stack+0x3b/0x60
[ 100.682615][ T5472] __kasan_record_aux_stack+0xb0/0xc0
[ 100.688017][ T5472] insert_work+0x54/0x3d0
[ 100.692366][ T5472] __queue_work+0xb4b/0xf90
[ 100.696869][ T5472] queue_work_on+0x14b/0x250
[ 100.701458][ T5472] cpu_map_free+0xd7/0x1b0
[ 100.705881][ T5472] process_one_work+0x917/0x1260
[ 100.710820][ T5472] worker_thread+0xa47/0x1200
[ 100.715503][ T5472] kthread+0x28d/0x320
[ 100.719573][ T5472] ret_from_fork+0x1f/0x30
[ 100.724016][ T5472]
[ 100.726336][ T5472] Second to last potentially related work creation:
[ 100.732931][ T5472] kasan_save_stack+0x3b/0x60
[ 100.737610][ T5472] __kasan_record_aux_stack+0xb0/0xc0
[ 100.742988][ T5472] call_rcu+0x163/0xa10
[ 100.747151][ T5472] __cpu_map_entry_replace+0x74/0x170
[ 100.752529][ T5472] cpu_map_free+0xd7/0x1b0
[ 100.756959][ T5472] process_one_work+0x917/0x1260
[ 100.761917][ T5472] worker_thread+0xa47/0x1200
[ 100.766597][ T5472] kthread+0x28d/0x320
[ 100.770664][ T5472] ret_from_fork+0x1f/0x30
[ 100.775085][ T5472]
[ 100.777405][ T5472] The buggy address belongs to the object at ffff88807e966600
[ 100.777405][ T5472] which belongs to the cache kmalloc-cg-256 of size 256
[ 100.791734][ T5472] The buggy address is located 8 bytes inside of
[ 100.791734][ T5472] 256-byte region [ffff88807e966600, ffff88807e966700)
[ 100.804841][ T5472]
[ 100.807162][ T5472] The buggy address belongs to the physical page:
[ 100.813590][ T5472] page:ffffea0001fa5980 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e966
[ 100.823767][ T5472] head:ffffea0001fa5980 order:1 compound_mapcount:0 compound_pincount:0
[ 100.832103][ T5472] memcg:ffff88802faf3101
[ 100.836355][ T5472] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 100.844354][ T5472] raw: 00fff00000010200 ffffea0000a3ae80 dead000000000006 ffff888017c42c80
[ 100.852945][ T5472] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff88802faf3101
[ 100.861525][ T5472] page dumped because: kasan: bad access detected
[ 100.867941][ T5472] page_owner tracks the page as allocated
[ 100.873653][ T5472] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4264, tgid 4264 (syz-executor), ts 78686363011, free_ts 78480682977
[ 100.896436][ T5472] post_alloc_hook+0x18d/0x1b0
[ 100.901224][ T5472] get_page_from_freelist+0x3731/0x38d0
[ 100.906808][ T5472] __alloc_pages+0x28d/0x770
[ 100.911404][ T5472] alloc_slab_page+0x6a/0x150
[ 100.916090][ T5472] new_slab+0x84/0x2d0
[ 100.920180][ T5472] ___slab_alloc+0xc20/0x1270
[ 100.924867][ T5472] __kmem_cache_alloc_node+0x19f/0x260
[ 100.930338][ T5472] __kmalloc+0xa1/0x230
[ 100.934501][ T5472] fib_default_rule_add+0x4a/0x3a0
[ 100.939616][ T5472] fib6_rules_net_init+0x6a/0x100
[ 100.944655][ T5472] ops_init+0x35d/0x600
[ 100.948844][ T5472] setup_net+0x4f9/0xc70
[ 100.953094][ T5472] copy_net_ns+0x352/0x590
[ 100.957522][ T5472] create_new_namespaces+0x425/0x7a0
[ 100.962812][ T5472] unshare_nsproxy_namespaces+0x11e/0x170
[ 100.968553][ T5472] ksys_unshare+0x531/0xa40
[ 100.973060][ T5472] page last free stack trace:
[ 100.977728][ T5472] free_unref_page_prepare+0x12a6/0x15b0
[ 100.983367][ T5472] free_unref_page+0x33/0x3e0
[ 100.988193][ T5472] qlist_free_all+0x76/0xe0
[ 100.992716][ T5472] kasan_quarantine_reduce+0x156/0x170
[ 100.998207][ T5472] __kasan_slab_alloc+0x1f/0x70
[ 101.003066][ T5472] slab_post_alloc_hook+0x52/0x3a0
[ 101.008191][ T5472] __kmem_cache_alloc_node+0x137/0x260
[ 101.013686][ T5472] __kmalloc+0xa1/0x230
[ 101.017868][ T5472] tomoyo_supervisor+0xeda/0x12d0
[ 101.022900][ T5472] tomoyo_path_permission+0x243/0x360
[ 101.028276][ T5472] tomoyo_path_perm+0x455/0x710
[ 101.033130][ T5472] tomoyo_path_symlink+0xda/0x110
[ 101.038161][ T5472] security_path_symlink+0xd9/0x130
[ 101.043364][ T5472] do_symlinkat+0x132/0x390
[ 101.047878][ T5472] __x64_sys_symlinkat+0x95/0xa0
[ 101.052826][ T5472] do_syscall_64+0x3b/0xb0
[ 101.057257][ T5472]
[ 101.059575][ T5472] Memory state around the buggy address:
[ 101.065207][ T5472] ffff88807e966500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 101.073267][ T5472] ffff88807e966580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 101.081326][ T5472] >ffff88807e966600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 101.089380][ T5472] ^
[ 101.093702][ T5472] ffff88807e966680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 101.101763][ T5472] ffff88807e966700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 101.109818][ T5472] ==================================================================
[ 101.118031][ T5472] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 101.125247][ T5472] CPU: 0 PID: 5472 Comm: syz.0.375 Not tainted 6.1.128-syzkaller #0
[ 101.133231][ T5472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 101.143287][ T5472] Call Trace:
[ 101.146566][ T5472]
[ 101.149493][ T5472] dump_stack_lvl+0x1e3/0x2cb
[ 101.154196][ T5472] ? nf_tcp_handle_invalid+0x642/0x642
[ 101.159752][ T5472] ? panic+0x764/0x764
[ 101.163825][ T5472] ? rcu_is_watching+0x11/0xb0
[ 101.168592][ T5472] ? vscnprintf+0x59/0x80
[ 101.172927][ T5472] panic+0x318/0x764
[ 101.176826][ T5472] ? check_panic_on_warn+0x1d/0xa0
[ 101.181943][ T5472] ? memcpy_page_flushcache+0xfc/0xfc
[ 101.187326][ T5472] ? _raw_spin_unlock_irqrestore+0xd4/0x130
[ 101.193236][ T5472] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 101.199148][ T5472] ? _raw_spin_unlock+0x40/0x40
[ 101.204012][ T5472] ? print_report+0x4a3/0x4f0
[ 101.208694][ T5472] check_panic_on_warn+0x7e/0xa0
[ 101.213664][ T5472] ? cpu_map_enqueue+0xb6/0x370
[ 101.218520][ T5472] end_report+0x66/0x110
[ 101.222770][ T5472] kasan_report+0x143/0x160
[ 101.227277][ T5472] ? cpu_map_enqueue+0xb6/0x370
[ 101.232137][ T5472] cpu_map_enqueue+0xb6/0x370
[ 101.236822][ T5472] xdp_do_redirect_frame+0x2f0/0x660
[ 101.242119][ T5472] bpf_test_run_xdp_live+0xbf4/0x1ea0
[ 101.247503][ T5472] ? __mutex_unlock_slowpath+0x218/0x750
[ 101.253148][ T5472] ? 0xffffffffa00038c0
[ 101.257302][ T5472] ? bpf_test_run_xdp_live+0x75c/0x1ea0
[ 101.262858][ T5472] ? xdp_convert_md_to_buff+0x330/0x330
[ 101.268520][ T5472] ? bpf_dispatcher_change_prog+0xdf5/0xf80
[ 101.274452][ T5472] ? 0xffffffffa00038c0
[ 101.278631][ T5472] ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 101.284897][ T5472] ? __might_fault+0xbd/0x110
[ 101.289595][ T5472] ? _copy_from_user+0x109/0x170
[ 101.294561][ T5472] ? bpf_test_init+0x15a/0x180
[ 101.299332][ T5472] ? xdp_convert_md_to_buff+0x5b/0x330
[ 101.304802][ T5472] bpf_prog_test_run_xdp+0x7d1/0x1130
[ 101.310193][ T5472] ? dev_put+0x80/0x80
[ 101.314276][ T5472] ? dev_put+0x80/0x80
[ 101.318353][ T5472] bpf_prog_test_run+0x32f/0x3a0
[ 101.323297][ T5472] __sys_bpf+0x3eb/0x6c0
[ 101.327560][ T5472] ? bpf_link_show_fdinfo+0x300/0x300
[ 101.332955][ T5472] ? print_irqtrace_events+0x210/0x210
[ 101.338442][ T5472] ? print_irqtrace_events+0x210/0x210
[ 101.344092][ T5472] ? syscall_enter_from_user_mode+0x2e/0x230
[ 101.350081][ T5472] ? lockdep_hardirqs_on+0x94/0x130
[ 101.355285][ T5472] __x64_sys_bpf+0x78/0x90
[ 101.359717][ T5472] do_syscall_64+0x3b/0xb0
[ 101.364141][ T5472] ? clear_bhb_loop+0x45/0xa0
[ 101.368840][ T5472] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 101.374758][ T5472] RIP: 0033:0x7fdda098cde9
[ 101.379188][ T5472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 101.398814][ T5472] RSP: 002b:00007fdda17dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 101.407239][ T5472] RAX: ffffffffffffffda RBX: 00007fdda0ba5fa0 RCX: 00007fdda098cde9
[ 101.415213][ T5472] RDX: 0000000000000050 RSI: 00004000000000c0 RDI: 000000000000000a
[ 101.423186][ T5472] RBP: 00007fdda0a0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 101.431160][ T5472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 101.439131][ T5472] R13: 0000000000000000 R14: 00007fdda0ba5fa0 R15: 00007ffcf9d28948
[ 101.447119][ T5472]
[ 101.450389][ T5472] Kernel Offset: disabled
[ 101.454712][ T5472] Rebooting in 86400 seconds..