Warning: Permanently added '[localhost]:49339' (ED25519) to the list of known hosts. 2024/09/17 06:10:26 ignoring optional flag "sandboxArg"="0" 2024/09/17 06:10:26 parsed 1 programs [ 137.879693][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.882331][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.817408][ T5372] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 148.801249][ T5406] chnl_net:caif_netlink_parms(): no params data found [ 148.845259][ T5406] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.848932][ T5406] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.851780][ T5406] bridge_slave_0: entered allmulticast mode [ 148.854954][ T5406] bridge_slave_0: entered promiscuous mode [ 148.859444][ T5406] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.862118][ T5406] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.864840][ T5406] bridge_slave_1: entered allmulticast mode [ 148.868744][ T5406] bridge_slave_1: entered promiscuous mode [ 148.884479][ T5406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.890184][ T5406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.905687][ T5406] team0: Port device team_slave_0 added [ 148.910467][ T5406] team0: Port device team_slave_1 added [ 148.926517][ T5406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.930392][ T5406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.940762][ T5406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.946024][ T5406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.950592][ T5406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.961159][ T5406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.984979][ T5406] hsr_slave_0: entered promiscuous mode [ 148.988694][ T5406] hsr_slave_1: entered promiscuous mode [ 149.576661][ T5406] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 149.590595][ T5406] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 149.601435][ T5406] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 149.619411][ T5406] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 149.646704][ T5406] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.649403][ T5406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.653002][ T5406] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.655750][ T5406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.722608][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.726384][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.786416][ T5406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.825606][ T5406] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.843833][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.846629][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.868930][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.871708][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.165777][ T5406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.232905][ T5406] veth0_vlan: entered promiscuous mode [ 150.250489][ T5406] veth1_vlan: entered promiscuous mode [ 150.296082][ T5406] veth0_macvtap: entered promiscuous mode [ 150.311953][ T5406] veth1_macvtap: entered promiscuous mode [ 150.340232][ T5406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.354943][ T5406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.371831][ T5406] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.375247][ T5406] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.384547][ T5406] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.399225][ T5406] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.720622][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.860122][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.200901][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.204861][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.208847][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.212290][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.215488][ T5118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.219816][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.995941][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.875694][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.882418][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.959341][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.962844][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/09/17 06:10:49 executed programs: 0 [ 154.210463][ T4531] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.214389][ T4531] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.218826][ T4531] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.222594][ T4531] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.225749][ T4531] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.229247][ T4531] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.579592][ T5522] chnl_net:caif_netlink_parms(): no params data found [ 154.729297][ T5522] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.732124][ T5522] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.735051][ T5522] bridge_slave_0: entered allmulticast mode [ 154.761870][ T5522] bridge_slave_0: entered promiscuous mode [ 154.766086][ T5522] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.775499][ T5522] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.791885][ T5522] bridge_slave_1: entered allmulticast mode [ 154.796532][ T5522] bridge_slave_1: entered promiscuous mode [ 154.859398][ T5522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.864933][ T5522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.939461][ T5522] team0: Port device team_slave_0 added [ 154.958584][ T5522] team0: Port device team_slave_1 added [ 155.003238][ T5522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.005862][ T5522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.048403][ T5522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.083618][ T5522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.086242][ T5522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.128372][ T5522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.219186][ T5522] hsr_slave_0: entered promiscuous mode [ 155.230082][ T5522] hsr_slave_1: entered promiscuous mode [ 155.258298][ T5522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.261278][ T5522] Cannot create hsr debugfs directory [ 155.401197][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.770411][ T12] bridge_slave_1: left allmulticast mode [ 155.772697][ T12] bridge_slave_1: left promiscuous mode [ 155.775130][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.809809][ T12] bridge_slave_0: left allmulticast mode [ 155.812068][ T12] bridge_slave_0: left promiscuous mode [ 155.814360][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.281652][ T4531] Bluetooth: hci0: command tx timeout [ 156.412061][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.420285][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.430619][ T12] bond0 (unregistering): Released all slaves [ 156.554570][ T12] hsr_slave_0: left promiscuous mode [ 156.570857][ T12] hsr_slave_1: left promiscuous mode [ 156.573562][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.576257][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.601474][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.604420][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.625815][ T12] veth1_macvtap: left promiscuous mode [ 156.647830][ T12] veth0_macvtap: left promiscuous mode [ 156.650106][ T12] veth1_vlan: left promiscuous mode [ 156.652147][ T12] veth0_vlan: left promiscuous mode [ 157.545768][ T12] team0 (unregistering): Port device team_slave_1 removed [ 157.615554][ T12] team0 (unregistering): Port device team_slave_0 removed [ 158.308880][ T5522] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 158.341453][ T5522] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 158.350320][ T5522] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 158.359516][ T4531] Bluetooth: hci0: command tx timeout [ 158.375510][ T5522] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 159.172860][ T5522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.205634][ T5522] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.258437][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.261220][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.265116][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.267981][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.589099][ T5522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.075858][ T5522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.167034][ T5522] veth0_vlan: entered promiscuous mode [ 160.208903][ T5522] veth1_vlan: entered promiscuous mode [ 160.242726][ T5522] veth0_macvtap: entered promiscuous mode [ 160.262368][ T5522] veth1_macvtap: entered promiscuous mode [ 160.298679][ T5522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.303787][ T5522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.322699][ T5522] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.326001][ T5522] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.338704][ T5522] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.346433][ T5522] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.431460][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.434128][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.438714][ T4531] Bluetooth: hci0: command tx timeout [ 160.486538][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.492709][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/09/17 06:10:56 executed programs: 2 [ 160.589681][ T5600] loop0: detected capacity change from 0 to 128 [ 160.614423][ T5600] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 160.708124][ T5600] loop0: detected capacity change from 128 to 0 [ 160.713161][ T5600] syz.0.15: attempt to access beyond end of device [ 160.713161][ T5600] loop0: rw=0, sector=116, nr_sectors = 1 limit=0 [ 160.741731][ T5600] syz.0.15: attempt to access beyond end of device [ 160.741731][ T5600] loop0: rw=0, sector=117, nr_sectors = 1 limit=0 [ 160.746619][ T5600] syz.0.15: attempt to access beyond end of device [ 160.746619][ T5600] loop0: rw=0, sector=117, nr_sectors = 1 limit=0 [ 160.778028][ T5600] ================================================================== [ 160.780921][ T5600] BUG: KASAN: slab-out-of-bounds in udf_get_filelongad+0x167/0x1b0 [ 160.783977][ T5600] Read of size 4 at addr ffff888011852f30 by task syz.0.15/5600 [ 160.787581][ T5600] [ 160.788555][ T5600] CPU: 0 UID: 0 PID: 5600 Comm: syz.0.15 Not tainted 6.11.0-syzkaller-ga430d95c5efa-dirty #0 [ 160.792383][ T5600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 160.796254][ T5600] Call Trace: [ 160.797520][ T5600] [ 160.798596][ T5600] dump_stack_lvl+0x241/0x360 [ 160.800481][ T5600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.802514][ T5600] ? __pfx__printk+0x10/0x10 [ 160.804294][ T5600] ? _printk+0xd5/0x120 [ 160.805920][ T5600] ? __virt_addr_valid+0x183/0x530 [ 160.807802][ T5600] ? __virt_addr_valid+0x183/0x530 [ 160.809632][ T5600] print_report+0x169/0x550 [ 160.811283][ T5600] ? __virt_addr_valid+0x183/0x530 [ 160.813132][ T5600] ? __virt_addr_valid+0x183/0x530 [ 160.815148][ T5600] ? __virt_addr_valid+0x45f/0x530 [ 160.816964][ T5600] ? __phys_addr+0xba/0x170 [ 160.818629][ T5600] ? udf_get_filelongad+0x167/0x1b0 [ 160.820663][ T5600] kasan_report+0x143/0x180 [ 160.822387][ T5600] ? udf_get_filelongad+0x167/0x1b0 [ 160.824229][ T5600] udf_get_filelongad+0x167/0x1b0 [ 160.826095][ T5600] udf_current_aext+0x435/0x9e0 [ 160.827959][ T5600] udf_next_aext+0x8c/0x4a0 [ 160.829670][ T5600] udf_setsize+0xa8a/0x1280 [ 160.831540][ T5600] ? __pfx_udf_setsize+0x10/0x10 [ 160.833423][ T5600] ? __pfx_down_write+0x10/0x10 [ 160.835203][ T5600] ? current_time+0x203/0x2b0 [ 160.837024][ T5600] udf_setattr+0x3c7/0x5d0 [ 160.838761][ T5600] ? __pfx_udf_setattr+0x10/0x10 [ 160.840693][ T5600] notify_change+0xbca/0xe90 [ 160.842474][ T5600] do_ftruncate+0x462/0x580 [ 160.844168][ T5600] ? __pfx_do_ftruncate+0x10/0x10 [ 160.845818][ T5600] ? __fget_files+0x29/0x470 [ 160.847453][ T5600] __x64_sys_ftruncate+0x95/0xf0 [ 160.849355][ T5600] do_syscall_64+0xf3/0x230 [ 160.851134][ T5600] ? clear_bhb_loop+0x35/0x90 [ 160.852936][ T5600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.855062][ T5600] RIP: 0033:0x7f61fbd79eb9 [ 160.856713][ T5600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.864206][ T5600] RSP: 002b:00007f61fcad5038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 160.867356][ T5600] RAX: ffffffffffffffda RBX: 00007f61fbf15f80 RCX: 00007f61fbd79eb9 [ 160.870372][ T5600] RDX: 0000000000000000 RSI: 0000008002007ffb RDI: 0000000000000005 [ 160.873305][ T5600] RBP: 00007f61fbde793e R08: 0000000000000000 R09: 0000000000000000 [ 160.876291][ T5600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.879325][ T5600] R13: 0000000000000000 R14: 00007f61fbf15f80 R15: 00007ffd222559c8 [ 160.882247][ T5600] [ 160.883394][ T5600] [ 160.884301][ T5600] Allocated by task 5512: [ 160.885898][ T5600] kasan_save_track+0x3f/0x80 [ 160.887722][ T5600] __kasan_kmalloc+0x98/0xb0 [ 160.889602][ T5600] __kmalloc_cache_noprof+0x19c/0x2c0 [ 160.891849][ T5600] rpc_mkpipe_data+0x5a/0x390 [ 160.893722][ T5600] nfs4blocklayout_net_init+0x85/0x1e0 [ 160.895868][ T5600] ops_init+0x31e/0x590 [ 160.897511][ T5600] setup_net+0x287/0x9e0 [ 160.899135][ T5600] copy_net_ns+0x33f/0x570 [ 160.900832][ T5600] create_new_namespaces+0x425/0x7b0 [ 160.902814][ T5600] unshare_nsproxy_namespaces+0x124/0x180 [ 160.904969][ T5600] ksys_unshare+0x619/0xc10 [ 160.906840][ T5600] __x64_sys_unshare+0x38/0x40 [ 160.908653][ T5600] do_syscall_64+0xf3/0x230 [ 160.910465][ T5600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.912702][ T5600] [ 160.913619][ T5600] Freed by task 12: [ 160.915130][ T5600] kasan_save_track+0x3f/0x80 [ 160.916918][ T5600] kasan_save_free_info+0x40/0x50 [ 160.918832][ T5600] poison_slab_object+0xe0/0x150 [ 160.920800][ T5600] __kasan_slab_free+0x37/0x60 [ 160.922787][ T5600] kfree+0x149/0x360 [ 160.924318][ T5600] nfs4blocklayout_net_exit+0xdb/0x130 [ 160.926444][ T5600] cleanup_net+0x802/0xcc0 [ 160.928189][ T5600] process_scheduled_works+0xa2c/0x1830 [ 160.930342][ T5600] worker_thread+0x870/0xd30 [ 160.932107][ T5600] kthread+0x2f0/0x390 [ 160.933686][ T5600] ret_from_fork+0x4b/0x80 [ 160.935301][ T5600] ret_from_fork_asm+0x1a/0x30 [ 160.937047][ T5600] [ 160.937986][ T5600] The buggy address belongs to the object at ffff888011852c00 [ 160.937986][ T5600] which belongs to the cache kmalloc-512 of size 512 [ 160.943226][ T5600] The buggy address is located 304 bytes to the right of [ 160.943226][ T5600] allocated 512-byte region [ffff888011852c00, ffff888011852e00) [ 160.948778][ T5600] [ 160.949700][ T5600] The buggy address belongs to the physical page: [ 160.952147][ T5600] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11852 [ 160.955452][ T5600] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 160.958612][ T5600] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 160.961586][ T5600] page_type: 0xfdffffff(slab) [ 160.963380][ T5600] raw: 00fff00000000040 ffff88801ac41c80 ffffea00006abf00 dead000000000003 [ 160.966608][ T5600] raw: 0000000000000000 0000000000080008 00000001fdffffff 0000000000000000 [ 160.969858][ T5600] head: 00fff00000000040 ffff88801ac41c80 ffffea00006abf00 dead000000000003 [ 160.973615][ T5600] head: 0000000000000000 0000000000080008 00000001fdffffff 0000000000000000 [ 160.977085][ T5600] head: 00fff00000000001 ffffea0000461481 ffffffffffffffff 0000000000000000 [ 160.980415][ T5600] head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 160.983706][ T5600] page dumped because: kasan: bad access detected [ 160.986140][ T5600] page_owner tracks the page as allocated [ 160.988324][ T5600] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5143, tgid 5143 (syz-executor), ts 90030395292, free_ts 89779664543 [ 160.996783][ T5600] post_alloc_hook+0x1f3/0x230 [ 160.998686][ T5600] get_page_from_freelist+0x2e4c/0x2f10 [ 161.000793][ T5600] __alloc_pages_noprof+0x256/0x6c0 [ 161.002828][ T5600] alloc_slab_page+0x5f/0x120 [ 161.004679][ T5600] allocate_slab+0x5a/0x2f0 [ 161.006431][ T5600] ___slab_alloc+0xcd1/0x14b0 [ 161.008244][ T5600] __slab_alloc+0x58/0xa0 [ 161.009903][ T5600] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 161.011995][ T5600] device_add+0xc1/0xbf0 [ 161.013637][ T5600] netdev_register_kobject+0x17e/0x310 [ 161.015740][ T5600] register_netdevice+0x12c5/0x1b00 [ 161.017710][ T5600] __ip_tunnel_create+0x2b4/0x380 [ 161.019607][ T5600] ip_tunnel_init_net+0x21c/0x720 [ 161.021488][ T5600] ops_init+0x31e/0x590 [ 161.023083][ T5600] setup_net+0x287/0x9e0 [ 161.024757][ T5600] copy_net_ns+0x33f/0x570 [ 161.026550][ T5600] page last free pid 5136 tgid 5136 stack trace: [ 161.028850][ T5600] free_unref_page+0xd22/0xea0 [ 161.030700][ T5600] vfree+0x186/0x2e0 [ 161.032173][ T5600] kcov_close+0x28/0x50 [ 161.033765][ T5600] __fput+0x23f/0x880 [ 161.035307][ T5600] task_work_run+0x24f/0x310 [ 161.037086][ T5600] do_exit+0xa2f/0x27f0 [ 161.038680][ T5600] do_group_exit+0x207/0x2c0 [ 161.040409][ T5600] get_signal+0x16a1/0x1740 [ 161.042156][ T5600] arch_do_signal_or_restart+0x96/0x860 [ 161.044299][ T5600] syscall_exit_to_user_mode+0xc9/0x370 [ 161.046416][ T5600] do_syscall_64+0x100/0x230 [ 161.048166][ T5600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.050396][ T5600] [ 161.051372][ T5600] Memory state around the buggy address: [ 161.053515][ T5600] ffff888011852e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 161.056666][ T5600] ffff888011852e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 161.060261][ T5600] >ffff888011852f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 161.063304][ T5600] ^ [ 161.065532][ T5600] ffff888011852f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 161.069117][ T5600] ffff888011853000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.072149][ T5600] ================================================================== [ 161.480146][ T5600] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 161.483074][ T5600] CPU: 0 UID: 0 PID: 5600 Comm: syz.0.15 Not tainted 6.11.0-syzkaller-ga430d95c5efa-dirty #0 [ 161.486959][ T5600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.491020][ T5600] Call Trace: [ 161.492301][ T5600] [ 161.493437][ T5600] dump_stack_lvl+0x241/0x360 [ 161.495266][ T5600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.497342][ T5600] ? __pfx__printk+0x10/0x10 [ 161.499114][ T5600] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 161.501378][ T5600] ? vscnprintf+0x5d/0x90 [ 161.503014][ T5600] panic+0x349/0x860 [ 161.504539][ T5600] ? check_panic_on_warn+0x21/0xb0 [ 161.506508][ T5600] ? __pfx_panic+0x10/0x10 [ 161.508453][ T5600] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 161.511110][ T5600] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 161.513679][ T5600] check_panic_on_warn+0x86/0xb0 [ 161.515579][ T5600] ? udf_get_filelongad+0x167/0x1b0 [ 161.517568][ T5600] end_report+0x77/0x160 [ 161.519174][ T5600] kasan_report+0x154/0x180 [ 161.520880][ T5600] ? udf_get_filelongad+0x167/0x1b0 [ 161.522773][ T5600] udf_get_filelongad+0x167/0x1b0 [ 161.524639][ T5600] udf_current_aext+0x435/0x9e0 [ 161.526513][ T5600] udf_next_aext+0x8c/0x4a0 [ 161.528204][ T5600] udf_setsize+0xa8a/0x1280 [ 161.529895][ T5600] ? __pfx_udf_setsize+0x10/0x10 [ 161.531755][ T5600] ? __pfx_down_write+0x10/0x10 [ 161.533586][ T5600] ? current_time+0x203/0x2b0 [ 161.535450][ T5600] udf_setattr+0x3c7/0x5d0 [ 161.537514][ T5600] ? __pfx_udf_setattr+0x10/0x10 [ 161.539446][ T5600] notify_change+0xbca/0xe90 [ 161.541191][ T5600] do_ftruncate+0x462/0x580 [ 161.542919][ T5600] ? __pfx_do_ftruncate+0x10/0x10 [ 161.544816][ T5600] ? __fget_files+0x29/0x470 [ 161.546673][ T5600] __x64_sys_ftruncate+0x95/0xf0 [ 161.548736][ T5600] do_syscall_64+0xf3/0x230 [ 161.550604][ T5600] ? clear_bhb_loop+0x35/0x90 [ 161.552521][ T5600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.554754][ T5600] RIP: 0033:0x7f61fbd79eb9 [ 161.556454][ T5600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.563683][ T5600] RSP: 002b:00007f61fcad5038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 161.566877][ T5600] RAX: ffffffffffffffda RBX: 00007f61fbf15f80 RCX: 00007f61fbd79eb9 [ 161.569845][ T5600] RDX: 0000000000000000 RSI: 0000008002007ffb RDI: 0000000000000005 [ 161.572832][ T5600] RBP: 00007f61fbde793e R08: 0000000000000000 R09: 0000000000000000 [ 161.575878][ T5600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.578815][ T5600] R13: 0000000000000000 R14: 00007f61fbf15f80 R15: 00007ffd222559c8 [ 161.581831][ T5600] [ 161.583283][ T5600] Kernel Offset: disabled [ 161.584942][ T5600] Rebooting in 86400 seconds..