Warning: Permanently added '10.128.0.240' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 76.835986][ T44] cfg80211: failed to load regulatory.db executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 82.195703][ T143] ================================================================== [ 82.203813][ T143] BUG: KASAN: slab-use-after-free in bpf_trace_run2+0x17b/0x530 [ 82.211484][ T143] Read of size 8 at addr ffff88801da82570 by task kworker/u8:5/143 [ 82.219391][ T143] [ 82.221708][ T143] CPU: 1 PID: 143 Comm: kworker/u8:5 Not tainted 6.8.0-syzkaller-05243-g14bb1e8c8d4a #0 [ 82.231411][ T143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 82.241474][ T143] Workqueue: events_unbound bpf_map_free_deferred [ 82.247896][ T143] Call Trace: [ 82.251198][ T143] [ 82.254131][ T143] dump_stack_lvl+0x1e7/0x2e0 [ 82.258826][ T143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.264028][ T143] ? __pfx__printk+0x10/0x10 [ 82.268636][ T143] ? _printk+0xd5/0x120 [ 82.272799][ T143] ? __virt_addr_valid+0x183/0x520 [ 82.277905][ T143] ? __virt_addr_valid+0x183/0x520 [ 82.283195][ T143] print_report+0x169/0x550 [ 82.287706][ T143] ? __virt_addr_valid+0x183/0x520 [ 82.292811][ T143] ? __virt_addr_valid+0x183/0x520 [ 82.297917][ T143] ? __virt_addr_valid+0x44e/0x520 [ 82.303025][ T143] ? __phys_addr+0xba/0x170 [ 82.307524][ T143] ? bpf_trace_run2+0x17b/0x530 [ 82.312363][ T143] kasan_report+0x143/0x180 [ 82.316860][ T143] ? bpf_trace_run2+0x17b/0x530 [ 82.321699][ T143] bpf_trace_run2+0x17b/0x530 [ 82.326364][ T143] ? sock_hash_free+0x7a7/0x820 [ 82.331217][ T143] ? __pfx_bpf_trace_run2+0x10/0x10 [ 82.336436][ T143] ? sock_hash_free+0x7a7/0x820 [ 82.341274][ T143] ? __pfx___bpf_trace_kfree+0x10/0x10 [ 82.346737][ T143] ? sock_hash_free+0x7a7/0x820 [ 82.351575][ T143] kfree+0x291/0x380 [ 82.355468][ T143] sock_hash_free+0x7a7/0x820 [ 82.360138][ T143] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 82.366115][ T143] ? __pfx_sock_hash_free+0x10/0x10 [ 82.371303][ T143] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 82.377626][ T143] bpf_map_free_deferred+0xe6/0x110 [ 82.382820][ T143] ? process_scheduled_works+0x91b/0x1770 [ 82.388551][ T143] process_scheduled_works+0xa00/0x1770 [ 82.394121][ T143] ? __pfx_process_scheduled_works+0x10/0x10 [ 82.400107][ T143] ? assign_work+0x364/0x3d0 [ 82.404688][ T143] worker_thread+0x86d/0xd70 [ 82.409269][ T143] ? __kthread_parkme+0x169/0x1d0 [ 82.414294][ T143] ? __pfx_worker_thread+0x10/0x10 [ 82.419424][ T143] kthread+0x2f0/0x390 [ 82.423510][ T143] ? __pfx_worker_thread+0x10/0x10 [ 82.428637][ T143] ? __pfx_kthread+0x10/0x10 [ 82.433218][ T143] ret_from_fork+0x4b/0x80 [ 82.437626][ T143] ? __pfx_kthread+0x10/0x10 [ 82.442207][ T143] ret_from_fork_asm+0x1a/0x30 [ 82.446980][ T143] [ 82.450020][ T143] [ 82.452327][ T143] Allocated by task 5583: [ 82.456634][ T143] kasan_save_track+0x3f/0x80 [ 82.461296][ T143] __kasan_kmalloc+0x98/0xb0 [ 82.465871][ T143] kmalloc_trace+0x1d9/0x360 [ 82.470470][ T143] bpf_raw_tp_link_attach+0x2a0/0x6e0 [ 82.475854][ T143] bpf_raw_tracepoint_open+0x1c2/0x240 [ 82.481306][ T143] __sys_bpf+0x3c0/0x810 [ 82.485537][ T143] __x64_sys_bpf+0x7c/0x90 [ 82.489940][ T143] do_syscall_64+0xfb/0x240 [ 82.494470][ T143] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 82.500355][ T143] [ 82.502692][ T143] Freed by task 5583: [ 82.506657][ T143] kasan_save_track+0x3f/0x80 [ 82.511321][ T143] kasan_save_free_info+0x40/0x50 [ 82.516343][ T143] poison_slab_object+0xa6/0xe0 [ 82.521194][ T143] __kasan_slab_free+0x37/0x60 [ 82.526021][ T143] kfree+0x14a/0x380 [ 82.529934][ T143] bpf_link_release+0x3b/0x50 [ 82.534639][ T143] __fput+0x429/0x8a0 [ 82.538632][ T143] task_work_run+0x24f/0x310 [ 82.543233][ T143] do_exit+0xa1b/0x27e0 [ 82.547386][ T143] do_group_exit+0x207/0x2c0 [ 82.551976][ T143] __x64_sys_exit_group+0x3f/0x40 [ 82.557036][ T143] do_syscall_64+0xfb/0x240 [ 82.561545][ T143] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 82.567437][ T143] [ 82.569748][ T143] The buggy address belongs to the object at ffff88801da82500 [ 82.569748][ T143] which belongs to the cache kmalloc-128 of size 128 [ 82.583784][ T143] The buggy address is located 112 bytes inside of [ 82.583784][ T143] freed 128-byte region [ffff88801da82500, ffff88801da82580) [ 82.597586][ T143] [ 82.599940][ T143] The buggy address belongs to the physical page: [ 82.606345][ T143] page:ffffea000076a080 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1da82 [ 82.616492][ T143] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 82.624027][ T143] page_type: 0xffffffff() [ 82.628344][ T143] raw: 00fff00000000800 ffff888014c418c0 dead000000000122 0000000000000000 [ 82.636931][ T143] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 82.645514][ T143] page dumped because: kasan: bad access detected [ 82.651912][ T143] page_owner tracks the page as allocated [ 82.657620][ T143] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 5584, tgid 5584 (syz-executor396), ts 82162620814, free_ts 82162483628 [ 82.676194][ T143] post_alloc_hook+0x1ea/0x210 [ 82.680957][ T143] get_page_from_freelist+0x33ea/0x3580 [ 82.686592][ T143] __alloc_pages+0x256/0x680 [ 82.691189][ T143] alloc_slab_page+0x5f/0x160 [ 82.695862][ T143] new_slab+0x84/0x2f0 [ 82.699937][ T143] ___slab_alloc+0xd1b/0x13e0 [ 82.704640][ T143] __kmalloc_node_track_caller+0x2d4/0x4e0 [ 82.710440][ T143] krealloc+0x7d/0x120 [ 82.714510][ T143] check_stack_access_within_bounds+0x5b0/0x940 [ 82.720755][ T143] check_mem_access+0x865/0x1e60 [ 82.725689][ T143] do_check+0x87dd/0x10500 [ 82.730109][ T143] do_check_common+0x14bd/0x1dd0 [ 82.735045][ T143] bpf_check+0x136ab/0x190c0 [ 82.739660][ T143] bpf_prog_load+0x1667/0x20f0 [ 82.744411][ T143] __sys_bpf+0x4ee/0x810 [ 82.748645][ T143] __x64_sys_bpf+0x7c/0x90 [ 82.753045][ T143] page last free pid 5584 tgid 5584 stack trace: [ 82.759360][ T143] free_unref_page_prepare+0x968/0xa90 [ 82.764818][ T143] free_unref_page+0x37/0x3f0 [ 82.769503][ T143] vfree+0x186/0x2e0 [ 82.773385][ T143] bpf_prog_calc_tag+0x663/0x900 [ 82.778311][ T143] resolve_pseudo_ldimm64+0xe2/0x1650 [ 82.783672][ T143] bpf_check+0x6175/0x190c0 [ 82.788187][ T143] bpf_prog_load+0x1667/0x20f0 [ 82.792953][ T143] __sys_bpf+0x4ee/0x810 [ 82.797189][ T143] __x64_sys_bpf+0x7c/0x90 [ 82.801611][ T143] do_syscall_64+0xfb/0x240 [ 82.806127][ T143] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 82.812028][ T143] [ 82.814339][ T143] Memory state around the buggy address: [ 82.819953][ T143] ffff88801da82400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.828001][ T143] ffff88801da82480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 82.836049][ T143] >ffff88801da82500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.844102][ T143] ^ [ 82.851813][ T143] ffff88801da82580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 82.859871][ T143] ffff88801da82600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.867925][ T143] ================================================================== [ 82.876208][ T143] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 82.883408][ T143] CPU: 1 PID: 143 Comm: kworker/u8:5 Not tainted 6.8.0-syzkaller-05243-g14bb1e8c8d4a #0 [ 82.893138][ T143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 82.903194][ T143] Workqueue: events_unbound bpf_map_free_deferred [ 82.909615][ T143] Call Trace: [ 82.912885][ T143] [ 82.915805][ T143] dump_stack_lvl+0x1e7/0x2e0 [ 82.920476][ T143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.925666][ T143] ? __pfx__printk+0x10/0x10 [ 82.930247][ T143] ? vscnprintf+0x5d/0x90 [ 82.934569][ T143] panic+0x349/0x860 [ 82.938454][ T143] ? check_panic_on_warn+0x21/0xb0 [ 82.943556][ T143] ? __pfx_panic+0x10/0x10 [ 82.947963][ T143] ? mark_lock+0x9a/0x350 [ 82.952282][ T143] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 82.958164][ T143] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 82.964046][ T143] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 82.970359][ T143] ? print_report+0x502/0x550 [ 82.975026][ T143] check_panic_on_warn+0x86/0xb0 [ 82.979954][ T143] ? bpf_trace_run2+0x17b/0x530 [ 82.984795][ T143] end_report+0x6e/0x140 [ 82.989027][ T143] kasan_report+0x154/0x180 [ 82.993525][ T143] ? bpf_trace_run2+0x17b/0x530 [ 82.998367][ T143] bpf_trace_run2+0x17b/0x530 [ 83.003031][ T143] ? sock_hash_free+0x7a7/0x820 [ 83.007871][ T143] ? __pfx_bpf_trace_run2+0x10/0x10 [ 83.013085][ T143] ? sock_hash_free+0x7a7/0x820 [ 83.017972][ T143] ? __pfx___bpf_trace_kfree+0x10/0x10 [ 83.023423][ T143] ? sock_hash_free+0x7a7/0x820 [ 83.028263][ T143] kfree+0x291/0x380 [ 83.032157][ T143] sock_hash_free+0x7a7/0x820 [ 83.036831][ T143] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 83.042799][ T143] ? __pfx_sock_hash_free+0x10/0x10 [ 83.047987][ T143] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.054310][ T143] bpf_map_free_deferred+0xe6/0x110 [ 83.059510][ T143] ? process_scheduled_works+0x91b/0x1770 [ 83.065219][ T143] process_scheduled_works+0xa00/0x1770 [ 83.070761][ T143] ? __pfx_process_scheduled_works+0x10/0x10 [ 83.076738][ T143] ? assign_work+0x364/0x3d0 [ 83.081315][ T143] worker_thread+0x86d/0xd70 [ 83.085900][ T143] ? __kthread_parkme+0x169/0x1d0 [ 83.090916][ T143] ? __pfx_worker_thread+0x10/0x10 [ 83.096019][ T143] kthread+0x2f0/0x390 [ 83.100078][ T143] ? __pfx_worker_thread+0x10/0x10 [ 83.105176][ T143] ? __pfx_kthread+0x10/0x10 [ 83.109766][ T143] ret_from_fork+0x4b/0x80 [ 83.114178][ T143] ? __pfx_kthread+0x10/0x10 [ 83.118757][ T143] ret_from_fork_asm+0x1a/0x30 [ 83.123521][ T143] [ 83.126723][ T143] Kernel Offset: disabled [ 83.131036][ T143] Rebooting in 86400 seconds..