program: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = syz_open_dev$video(&(0x7f0000001180), 0xffffffffffff8213, 0x400401) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f00000011c0)={0x0, 0x1, @raw_data=[0xa, 0xfe6b, 0x7, 0x6, 0x6, 0x4, 0x0, 0x0, 0x8, 0xc, 0x9, 0x4, 0x3, 0x100, 0xd, 0x6]}) syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4010, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x11, 0x6c7, &(0x7f0000000a80)="$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") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18, 0x0, r2, {0x6}}, 0x18) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000001300)={0x2, 0xeab, @broadcast}, 0x10) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000080)=0xd6de2f2, 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000580)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x4e26, 0x18, 0x0, @wg=@data}}}}}}, 0x6c) socket$l2tp6(0xa, 0x2, 0x73) pwrite64(r1, &(0x7f0000001240)="bae5feedfbac4bba6937f4b8060ace73580aea59d8c7723b01184d0c8f855f67dd4a0c545482e5651e705423b3675b0bc68ad73d0fb35522cd55360cc7693c2dc49c9e0fd726e62407ad3b300974273d602a893ba8d080bfce1a0aa60b0f017892f4d36fc6f1851a593e89a6d7a989a872214a95ca7a15af17ea2dfd0a20b79e2c1d0614cd7ccbfa760adee5d94aa847b659f208f879b894883992771aef27", 0x9f, 0x0) [ 78.005097][ T4683] Bluetooth: hci0: command tx timeout [ 78.016603][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 78.027970][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 79.101643][ T5336] ================================================================== [ 79.104803][ T5336] BUG: KASAN: vmalloc-out-of-bounds in vrealloc_noprof+0x340/0x3a0 [ 79.107811][ T5336] Write of size 4064 at addr ffffc9000d191020 by task syz.0.0/5336 [ 79.110661][ T5336] [ 79.111551][ T5336] CPU: 0 UID: 0 PID: 5336 Comm: syz.0.0 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 79.115338][ T5336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.119300][ T5336] Call Trace: [ 79.120552][ T5336] [ 79.121700][ T5336] dump_stack_lvl+0x241/0x360 [ 79.123499][ T5336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.125419][ T5336] ? __pfx__printk+0x10/0x10 [ 79.127175][ T5336] ? _printk+0xd5/0x120 [ 79.128757][ T5336] print_report+0x169/0x550 [ 79.130436][ T5336] ? __virt_addr_valid+0xbd/0x530 [ 79.132381][ T5336] ? vrealloc_noprof+0x340/0x3a0 [ 79.134423][ T5336] kasan_report+0x143/0x180 [ 79.136203][ T5336] ? vrealloc_noprof+0x340/0x3a0 [ 79.138101][ T5336] kasan_check_range+0x282/0x290 [ 79.140010][ T5336] __asan_memset+0x23/0x50 [ 79.141729][ T5336] vrealloc_noprof+0x340/0x3a0 [ 79.143586][ T5336] push_insn_history+0x16c/0x6a0 [ 79.145548][ T5336] do_check+0x692f/0xfcd0 [ 79.147265][ T5336] ? __pfx_do_check+0x10/0x10 [ 79.149019][ T5336] ? mark_reg_not_init+0xd4/0x4b0 [ 79.150939][ T5336] ? __asan_memcpy+0x40/0x70 [ 79.152745][ T5336] ? mark_reg_not_init+0xd4/0x4b0 [ 79.154660][ T5336] do_check_common+0x1564/0x2010 [ 79.156585][ T5336] bpf_check+0x19380/0x1f1b0 [ 79.158327][ T5336] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 79.160634][ T5336] ? validate_chain+0x11e/0x5920 [ 79.162516][ T5336] ? page_ext_get+0x20/0x2a0 [ 79.164261][ T5336] ? post_alloc_hook+0x206/0x230 [ 79.166060][ T5336] ? __pfx_validate_chain+0x10/0x10 [ 79.167926][ T5336] ? validate_chain+0x11e/0x5920 [ 79.169693][ T5336] ? validate_chain+0x11e/0x5920 [ 79.171590][ T5336] ? mark_lock+0x9a/0x360 [ 79.173147][ T5336] ? __pfx___might_resched+0x10/0x10 [ 79.175082][ T5336] ? validate_chain+0x11e/0x5920 [ 79.176884][ T5336] ? validate_chain+0x11e/0x5920 [ 79.178625][ T5336] ? __pfx_validate_chain+0x10/0x10 [ 79.180402][ T5336] ? validate_chain+0x11e/0x5920 [ 79.182213][ T5336] ? validate_chain+0x11e/0x5920 [ 79.184025][ T5336] ? validate_chain+0x11e/0x5920 [ 79.185903][ T5336] ? __pfx_validate_chain+0x10/0x10 [ 79.187857][ T5336] ? __pfx_validate_chain+0x10/0x10 [ 79.189794][ T5336] ? __pfx_bpf_check+0x10/0x10 [ 79.191589][ T5336] ? __pfx_validate_chain+0x10/0x10 [ 79.193579][ T5336] ? mark_lock+0x9a/0x360 [ 79.195224][ T5336] ? mark_lock+0x9a/0x360 [ 79.196858][ T5336] ? __lock_acquire+0x1397/0x2100 [ 79.198820][ T5336] ? mark_lock+0x9a/0x360 [ 79.200543][ T5336] ? __lock_acquire+0x1397/0x2100 [ 79.202497][ T5336] ? __pfx_lock_acquire+0x10/0x10 [ 79.204354][ T5336] ? ktime_get_with_offset+0x8c/0x290 [ 79.206381][ T5336] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 79.208562][ T5336] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.210929][ T5336] ? ktime_get_with_offset+0x8c/0x290 [ 79.212916][ T5336] ? seqcount_lockdep_reader_access+0x157/0x220 [ 79.215240][ T5336] ? lockdep_hardirqs_on+0x99/0x150 [ 79.217184][ T5336] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 79.219431][ T5336] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 79.221491][ T5336] ? _raw_spin_unlock+0x28/0x50 [ 79.223148][ T5336] ? __asan_memset+0x23/0x50 [ 79.224755][ T5336] ? bpf_obj_name_cpy+0x18a/0x1d0 [ 79.226565][ T5336] bpf_prog_load+0x1667/0x20f0 [ 79.228283][ T5336] ? __pfx_bpf_prog_load+0x10/0x10 [ 79.230112][ T5336] ? __pfx___might_resched+0x10/0x10 [ 79.231879][ T5336] ? __might_fault+0xc6/0x120 [ 79.233558][ T5336] __sys_bpf+0x4ee/0x810 [ 79.235119][ T5336] ? __pfx___sys_bpf+0x10/0x10 [ 79.236842][ T5336] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 79.239083][ T5336] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.241394][ T5336] ? exc_page_fault+0x590/0x8b0 [ 79.243235][ T5336] __x64_sys_bpf+0x7c/0x90 [ 79.244910][ T5336] do_syscall_64+0xf3/0x230 [ 79.246619][ T5336] ? clear_bhb_loop+0x35/0x90 [ 79.248333][ T5336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.250464][ T5336] RIP: 0033:0x7fe9cef80849 [ 79.252368][ T5336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.259277][ T5336] RSP: 002b:00007fe9cfccf058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.262327][ T5336] RAX: ffffffffffffffda RBX: 00007fe9cf145fa0 RCX: 00007fe9cef80849 [ 79.265116][ T5336] RDX: 0000000000000048 RSI: 00000000200017c0 RDI: 0000000000000005 [ 79.268030][ T5336] RBP: 00007fe9ceff3986 R08: 0000000000000000 R09: 0000000000000000 [ 79.270888][ T5336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.273732][ T5336] R13: 0000000000000001 R14: 00007fe9cf145fa0 R15: 00007ffca7b09a68 [ 79.276721][ T5336] [ 79.277835][ T5336] [ 79.278795][ T5336] The buggy address belongs to the virtual mapping at [ 79.278795][ T5336] [ffffc9000d171000, ffffc9000d193000) created by: [ 79.278795][ T5336] kvrealloc_noprof+0xc7/0x120 [ 79.284989][ T5336] [ 79.285679][ T5336] The buggy address belongs to the physical page: [ 79.287735][ T5336] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x3731 pfn:0x48ca1 [ 79.290543][ T5336] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 79.292896][ T5336] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 79.295763][ T5336] raw: 0000000000003731 0000000000000000 00000001ffffffff 0000000000000000 [ 79.298578][ T5336] page dumped because: kasan: bad access detected [ 79.300805][ T5336] page_owner tracks the page as allocated [ 79.302846][ T5336] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102cc2(GFP_HIGHUSER|__GFP_NOWARN), pid 5336, tgid 5335 (syz.0.0), ts 79101479992, free_ts 79042544488 [ 79.308910][ T5336] post_alloc_hook+0x1f3/0x230 [ 79.310666][ T5336] get_page_from_freelist+0x365c/0x37a0 [ 79.312480][ T5336] __alloc_pages_slowpath+0x414/0x1020 [ 79.314612][ T5336] __alloc_pages_noprof+0x49b/0x710 [ 79.316654][ T5336] alloc_pages_mpol_noprof+0x3e8/0x680 [ 79.318555][ T5336] __vmalloc_node_range_noprof+0x9c9/0x1380 [ 79.320701][ T5336] __kvmalloc_node_noprof+0x142/0x190 [ 79.322743][ T5336] kvrealloc_noprof+0xc7/0x120 [ 79.324555][ T5336] push_insn_history+0x16c/0x6a0 [ 79.326538][ T5336] do_check+0x692f/0xfcd0 [ 79.328155][ T5336] do_check_common+0x1564/0x2010 [ 79.329900][ T5336] bpf_check+0x19380/0x1f1b0 [ 79.331407][ T5336] bpf_prog_load+0x1667/0x20f0 [ 79.332943][ T5336] __sys_bpf+0x4ee/0x810 [ 79.334302][ T5336] __x64_sys_bpf+0x7c/0x90 [ 79.335789][ T5336] do_syscall_64+0xf3/0x230 [ 79.337376][ T5336] page last free pid 5336 tgid 5335 stack trace: [ 79.339445][ T5336] free_unref_folios+0xf62/0x1a90 [ 79.341032][ T5336] shrink_folio_list+0x2d3d/0x8cb0 [ 79.342773][ T5336] evict_folios+0x5568/0x7be0 [ 79.344341][ T5336] try_to_shrink_lruvec+0x9a6/0xc70 [ 79.346362][ T5336] shrink_one+0x3b9/0x850 [ 79.348016][ T5336] shrink_node+0x37c5/0x3e50 [ 79.349707][ T5336] do_try_to_free_pages+0x78c/0x1cf0 [ 79.351724][ T5336] try_to_free_pages+0x47c/0x1050 [ 79.353464][ T5336] __alloc_pages_direct_reclaim+0x178/0x3c0 [ 79.355589][ T5336] __alloc_pages_slowpath+0x764/0x1020 [ 79.357643][ T5336] __alloc_pages_noprof+0x49b/0x710 [ 79.359636][ T5336] alloc_pages_mpol_noprof+0x3e8/0x680 [ 79.361403][ T5336] alloc_slab_page+0x6a/0x140 [ 79.363136][ T5336] allocate_slab+0x1c0/0x2f0 [ 79.364745][ T5336] ___slab_alloc+0xcd1/0x14b0 [ 79.366442][ T5336] __slab_alloc+0x58/0xa0 [ 79.367943][ T5336] [ 79.368814][ T5336] Memory state around the buggy address: [ 79.370717][ T5336] ffffc9000d190f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 79.373340][ T5336] ffffc9000d190f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 79.376000][ T5336] >ffffc9000d191000: 00 00 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 79.378233][ T5336] ^ [ 79.379810][ T5336] ffffc9000d191080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 79.382508][ T5336] ffffc9000d191100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 79.385404][ T5336] ================================================================== [ 79.538954][ T5336] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 79.541155][ T5336] CPU: 0 UID: 0 PID: 5336 Comm: syz.0.0 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 79.544188][ T5336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.547831][ T5336] Call Trace: [ 79.549081][ T5336] [ 79.550220][ T5336] dump_stack_lvl+0x241/0x360 [ 79.552094][ T5336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.554087][ T5336] ? __pfx__printk+0x10/0x10 [ 79.555921][ T5336] ? preempt_schedule+0xe1/0xf0 [ 79.557817][ T5336] ? vscnprintf+0x5d/0x90 [ 79.559481][ T5336] panic+0x349/0x880 [ 79.560991][ T5336] ? check_panic_on_warn+0x21/0xb0 [ 79.562952][ T5336] ? __pfx_panic+0x10/0x10 [ 79.564663][ T5336] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 79.566939][ T5336] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 79.569341][ T5336] ? print_report+0x502/0x550 [ 79.571166][ T5336] check_panic_on_warn+0x86/0xb0 [ 79.573100][ T5336] ? vrealloc_noprof+0x340/0x3a0 [ 79.575020][ T5336] end_report+0x77/0x160 [ 79.576667][ T5336] kasan_report+0x154/0x180 [ 79.578464][ T5336] ? vrealloc_noprof+0x340/0x3a0 [ 79.580388][ T5336] kasan_check_range+0x282/0x290 [ 79.582680][ T5336] __asan_memset+0x23/0x50 [ 79.584473][ T5336] vrealloc_noprof+0x340/0x3a0 [ 79.586405][ T5336] push_insn_history+0x16c/0x6a0 [ 79.588315][ T5336] do_check+0x692f/0xfcd0 [ 79.590032][ T5336] ? __pfx_do_check+0x10/0x10 [ 79.591821][ T5336] ? mark_reg_not_init+0xd4/0x4b0 [ 79.593721][ T5336] ? __asan_memcpy+0x40/0x70 [ 79.595525][ T5336] ? mark_reg_not_init+0xd4/0x4b0 [ 79.597454][ T5336] do_check_common+0x1564/0x2010 [ 79.599291][ T5336] bpf_check+0x19380/0x1f1b0 [ 79.601063][ T5336] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 79.603268][ T5336] ? validate_chain+0x11e/0x5920 [ 79.605185][ T5336] ? page_ext_get+0x20/0x2a0 [ 79.606607][ T5336] ? post_alloc_hook+0x206/0x230 [ 79.608169][ T5336] ? __pfx_validate_chain+0x10/0x10 [ 79.610024][ T5336] ? validate_chain+0x11e/0x5920 [ 79.611817][ T5336] ? validate_chain+0x11e/0x5920 [ 79.613335][ T5336] ? mark_lock+0x9a/0x360 [ 79.614729][ T5336] ? __pfx___might_resched+0x10/0x10 [ 79.616404][ T5336] ? validate_chain+0x11e/0x5920 [ 79.618108][ T5336] ? validate_chain+0x11e/0x5920 [ 79.619821][ T5336] ? __pfx_validate_chain+0x10/0x10 [ 79.621545][ T5336] ? validate_chain+0x11e/0x5920 [ 79.623520][ T5336] ? validate_chain+0x11e/0x5920 [ 79.625332][ T5336] ? validate_chain+0x11e/0x5920 [ 79.627327][ T5336] ? __pfx_validate_chain+0x10/0x10 [ 79.629385][ T5336] ? __pfx_validate_chain+0x10/0x10 [ 79.631353][ T5336] ? __pfx_bpf_check+0x10/0x10 [ 79.633184][ T5336] ? __pfx_validate_chain+0x10/0x10 [ 79.635179][ T5336] ? mark_lock+0x9a/0x360 [ 79.636842][ T5336] ? mark_lock+0x9a/0x360 [ 79.638508][ T5336] ? __lock_acquire+0x1397/0x2100 [ 79.640374][ T5336] ? mark_lock+0x9a/0x360 [ 79.641929][ T5336] ? __lock_acquire+0x1397/0x2100 [ 79.643847][ T5336] ? __pfx_lock_acquire+0x10/0x10 [ 79.645593][ T5336] ? ktime_get_with_offset+0x8c/0x290 [ 79.647585][ T5336] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 79.649661][ T5336] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.651963][ T5336] ? ktime_get_with_offset+0x8c/0x290 [ 79.654091][ T5336] ? seqcount_lockdep_reader_access+0x157/0x220 [ 79.656476][ T5336] ? lockdep_hardirqs_on+0x99/0x150 [ 79.658412][ T5336] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 79.660501][ T5336] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 79.662926][ T5336] ? _raw_spin_unlock+0x28/0x50 [ 79.664693][ T5336] ? __asan_memset+0x23/0x50 [ 79.666347][ T5336] ? bpf_obj_name_cpy+0x18a/0x1d0 [ 79.668094][ T5336] bpf_prog_load+0x1667/0x20f0 [ 79.669765][ T5336] ? __pfx_bpf_prog_load+0x10/0x10 [ 79.671558][ T5336] ? __pfx___might_resched+0x10/0x10 [ 79.673323][ T5336] ? __might_fault+0xc6/0x120 [ 79.674978][ T5336] __sys_bpf+0x4ee/0x810 [ 79.676530][ T5336] ? __pfx___sys_bpf+0x10/0x10 [ 79.678320][ T5336] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 79.680893][ T5336] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.683704][ T5336] ? exc_page_fault+0x590/0x8b0 [ 79.685830][ T5336] __x64_sys_bpf+0x7c/0x90 [ 79.687390][ T5336] do_syscall_64+0xf3/0x230 [ 79.689013][ T5336] ? clear_bhb_loop+0x35/0x90 [ 79.690727][ T5336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.692942][ T5336] RIP: 0033:0x7fe9cef80849 [ 79.695390][ T5336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.702368][ T5336] RSP: 002b:00007fe9cfccf058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.705459][ T5336] RAX: ffffffffffffffda RBX: 00007fe9cf145fa0 RCX: 00007fe9cef80849 [ 79.708442][ T5336] RDX: 0000000000000048 RSI: 00000000200017c0 RDI: 0000000000000005 [ 79.711297][ T5336] RBP: 00007fe9ceff3986 R08: 0000000000000000 R09: 0000000000000000 [ 79.714064][ T5336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.716853][ T5336] R13: 0000000000000001 R14: 00007fe9cf145fa0 R15: 00007ffca7b09a68 [ 79.719785][ T5336] [ 79.721151][ T5336] Kernel Offset: disabled [ 79.722817][ T5336] Rebooting in 86400 seconds..