Warning: Permanently added '10.128.1.112' (ED25519) to the list of known hosts. 2023/10/31 18:29:02 ignoring optional flag "sandboxArg"="0" 2023/10/31 18:29:03 parsed 1 programs [ 109.288785][ T27] kauditd_printk_skb: 74 callbacks suppressed [ 109.288801][ T27] audit: type=1400 audit(1698776943.206:203): avc: denied { getattr } for pid=5393 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 109.321221][ T27] audit: type=1400 audit(1698776943.206:204): avc: denied { read } for pid=5393 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 109.344656][ T27] audit: type=1400 audit(1698776943.206:205): avc: denied { open } for pid=5393 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 109.369008][ T27] audit: type=1400 audit(1698776943.276:206): avc: denied { mounton } for pid=5398 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 109.396500][ T27] audit: type=1400 audit(1698776943.276:207): avc: denied { mount } for pid=5398 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 109.422807][ T27] audit: type=1400 audit(1698776943.306:208): avc: denied { read write } for pid=5398 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 109.450623][ T27] audit: type=1400 audit(1698776943.306:209): avc: denied { open } for pid=5398 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 109.495539][ T27] audit: type=1400 audit(1698776943.406:210): avc: denied { unlink } for pid=5398 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 110.015516][ T27] audit: type=1400 audit(1698776943.926:211): avc: denied { relabelto } for pid=5400 comm="mkswap" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2023/10/31 18:29:05 executed programs: 0 [ 111.381695][ T5398] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 111.447224][ T4451] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.456373][ T4451] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.464191][ T4451] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.473995][ T4451] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.481653][ T4451] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 111.489206][ T4451] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.504087][ T27] audit: type=1400 audit(1698776945.416:212): avc: denied { mounton } for pid=5405 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 111.658361][ T5405] chnl_net:caif_netlink_parms(): no params data found [ 111.738189][ T5405] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.745805][ T5405] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.753045][ T5405] bridge_slave_0: entered allmulticast mode [ 111.761008][ T5405] bridge_slave_0: entered promiscuous mode [ 111.769660][ T5405] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.777920][ T5405] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.785180][ T5405] bridge_slave_1: entered allmulticast mode [ 111.792382][ T5405] bridge_slave_1: entered promiscuous mode [ 111.826895][ T5405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.839152][ T5405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.874877][ T5405] team0: Port device team_slave_0 added [ 111.885295][ T5405] team0: Port device team_slave_1 added [ 111.914432][ T5405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.921672][ T5405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.949894][ T5405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.962699][ T5405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.970146][ T5405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.997591][ T5405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.045899][ T5405] hsr_slave_0: entered promiscuous mode [ 112.052427][ T5405] hsr_slave_1: entered promiscuous mode [ 113.087941][ T5405] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.101332][ T5405] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.113515][ T5405] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.127759][ T5405] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.260501][ T5405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.295272][ T5405] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.311986][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.320453][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.350408][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.357842][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.506538][ T4451] Bluetooth: hci0: command 0x0409 tx timeout [ 113.637089][ T5405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.709051][ T5405] veth0_vlan: entered promiscuous mode [ 113.727745][ T5405] veth1_vlan: entered promiscuous mode [ 113.777554][ T5405] veth0_macvtap: entered promiscuous mode [ 113.792796][ T5405] veth1_macvtap: entered promiscuous mode [ 113.822497][ T5405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.843447][ T5405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.863799][ T5405] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.874205][ T5405] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.884571][ T5405] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.897461][ T5405] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.029868][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.054031][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.119331][ T2860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.130033][ T2860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.290685][ T5473] loop0: detected capacity change from 0 to 8192 [ 114.300359][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 114.300374][ T27] audit: type=1400 audit(1698776948.216:214): avc: denied { mounton } for pid=5471 comm="syz-executor.0" path="/root/syzkaller-testdir12874684/syzkaller.JBmFlt/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 114.344941][ T5473] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 114.361733][ T5473] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 114.372521][ T5473] REISERFS (device loop0): using ordered data mode [ 114.380952][ T5473] reiserfs: using flush barriers [ 114.392624][ T5473] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 114.412677][ T5473] REISERFS (device loop0): checking transaction log (loop0) [ 114.552154][ T5473] REISERFS (device loop0): Using r5 hash to sort names [ 114.620809][ T4713] general protection fault, probably for non-canonical address 0xdffffc0000008013: 0000 [#1] PREEMPT SMP KASAN [ 114.633303][ T4713] KASAN: probably user-memory-access in range [0x0000000000040098-0x000000000004009f] [ 114.642884][ T4713] CPU: 1 PID: 4713 Comm: dhcpcd Not tainted 6.6.0-syzkaller-03860-g5a6a09e97199 #0 [ 114.652845][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 114.663882][ T4713] RIP: 0010:locks_remove_posix+0x100/0x500 [ 114.669810][ T4713] Code: 4d 8b ae 20 02 00 00 4d 85 ed 0f 84 04 02 00 00 e8 05 57 7f ff 49 8d 55 50 48 b9 00 00 00 00 00 fc ff df 48 89 d6 48 c1 ee 03 <80> 3c 0e 00 0f 85 a4 03 00 00 49 8b 45 50 48 39 c2 0f 84 d3 01 00 [ 114.689971][ T4713] RSP: 0018:ffffc900038cf948 EFLAGS: 00010202 [ 114.696125][ T4713] RAX: 0000000000000000 RBX: ffff8880196a8a40 RCX: dffffc0000000000 [ 114.704196][ T4713] RDX: 0000000000040098 RSI: 0000000000008013 RDI: ffff888071418460 [ 114.712412][ T4713] RBP: 1ffff92000719f2b R08: 0000000000000003 R09: 0000000000004000 [ 114.720368][ T4713] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900038cf988 [ 114.728696][ T4713] R13: 0000000000040048 R14: ffff888071418240 R15: ffff8880196a8bd0 [ 114.736647][ T4713] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 114.745918][ T4713] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.752663][ T4713] CR2: 00007f7bb0038000 CR3: 000000000cb77000 CR4: 00000000003506f0 [ 114.760895][ T4713] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 114.768973][ T4713] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 114.777106][ T4713] Call Trace: [ 114.780385][ T4713] [ 114.783323][ T4713] ? show_regs+0x8f/0xa0 [ 114.787816][ T4713] ? die_addr+0x4f/0xd0 [ 114.791967][ T4713] ? exc_general_protection+0x154/0x230 [ 114.797773][ T4713] ? asm_exc_general_protection+0x26/0x30 [ 114.803568][ T4713] ? locks_remove_posix+0x100/0x500 [ 114.808839][ T4713] ? locks_remove_posix+0xeb/0x500 [ 114.813960][ T4713] ? do_lock_file_wait+0x410/0x410 [ 114.819147][ T4713] ? dnotify_flush+0x7f/0x690 [ 114.824184][ T4713] filp_flush+0x11b/0x1a0 [ 114.828588][ T4713] filp_close+0x1c/0x30 [ 114.832826][ T4713] put_files_struct+0x1df/0x360 [ 114.837690][ T4713] exit_files+0x82/0xb0 [ 114.841924][ T4713] do_exit+0xa5e/0x2a20 [ 114.846245][ T4713] ? mm_update_next_owner+0x840/0x840 [ 114.851781][ T4713] do_group_exit+0xd4/0x2a0 [ 114.857675][ T4713] get_signal+0x23ba/0x2790 [ 114.862513][ T4713] ? exit_signals+0x920/0x920 [ 114.867262][ T4713] ? kill_something_info+0x310/0x310 [ 114.872536][ T4713] ? from_kuid+0xc0/0xc0 [ 114.876935][ T4713] arch_do_signal_or_restart+0x90/0x7f0 [ 114.882540][ T4713] ? get_sigframe_size+0x20/0x20 [ 114.887487][ T4713] exit_to_user_mode_prepare+0x11f/0x240 [ 114.893208][ T4713] syscall_exit_to_user_mode+0x1d/0x60 [ 114.898661][ T4713] do_syscall_64+0x4b/0x110 [ 114.903266][ T4713] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 114.909426][ T4713] RIP: 0033:0x7f7bafec83cd [ 114.913836][ T4713] Code: Unable to access opcode bytes at 0x7f7bafec83a3. [ 114.920832][ T4713] RSP: 002b:00007ffc41dca460 EFLAGS: 00000246 ORIG_RAX: 00000000000000ea [ 114.929463][ T4713] RAX: 0000000000000000 RBX: 00007f7bafe56740 RCX: 00007f7bafec83cd [ 114.937978][ T4713] RDX: 0000000000000006 RSI: 0000000000001269 RDI: 0000000000001269 [ 114.946045][ T4713] RBP: 0000000000001269 R08: 0000000000000000 R09: 0000000000000003 [ 114.954290][ T4713] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000006 [ 114.962788][ T4713] R13: 00007ffc41dca670 R14: 0000000000001000 R15: 0000000000000000 [ 114.970820][ T4713] [ 114.974010][ T4713] Modules linked in: [ 114.978042][ T5405] BUG: unable to handle page fault for address: 0000000000040050 [ 114.986042][ T5405] #PF: supervisor read access in kernel mode [ 114.992003][ T5405] #PF: error_code(0x0000) - not-present page [ 114.998517][ T5405] PGD 65331067 P4D 65331067 PUD 0 [ 115.004335][ T5405] Oops: 0000 [#2] PREEMPT SMP KASAN [ 115.009732][ T5405] CPU: 0 PID: 5405 Comm: syz-executor.0 Tainted: G D 6.6.0-syzkaller-03860-g5a6a09e97199 #0 [ 115.021805][ T5405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 115.032247][ T5405] RIP: 0010:__stack_depot_save+0x15e/0x510 [ 115.038400][ T5405] Code: 29 c0 89 c3 48 8b 05 f9 87 f5 0d 89 d9 23 0d e9 87 f5 0d 48 8d 0c c8 48 8b 29 48 85 ed 75 0b eb 70 48 8b 6d 00 48 85 ed 74 67 <39> 5d 08 75 f2 44 3b 7d 0c 75 ec 31 c0 48 8b 74 c5 18 49 39 34 c6 [ 115.058274][ T5405] RSP: 0000:ffffc9000351f3b8 EFLAGS: 00010206 [ 115.064540][ T5405] RAX: ffff88823b400000 RBX: 00000000d413ff38 RCX: ffff88823b5ff9c0 [ 115.072855][ T5405] RDX: 000000000000000d RSI: 0000000000000002 RDI: 0000000019c1a054 [ 115.081089][ T5405] RBP: 0000000000040048 R08: 0000000024dbf589 R09: 0000000000000000 [ 115.089433][ T5405] R10: 0000000000000000 R11: 1ffffffff19b6999 R12: 0000000000000001 [ 115.097430][ T5405] R13: 0000000000000cc0 R14: ffffc9000351f420 R15: 000000000000000d [ 115.105576][ T5405] FS: 0000555555a26480(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 115.114849][ T5405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.122220][ T5405] CR2: 0000000000040050 CR3: 0000000064e1a000 CR4: 00000000003506f0 [ 115.130446][ T5405] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.139547][ T5405] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 115.147700][ T5405] Call Trace: [ 115.150966][ T5405] [ 115.153879][ T5405] ? show_regs+0x8f/0xa0 [ 115.158201][ T5405] ? __die+0x2c/0x80 [ 115.162134][ T5405] ? page_fault_oops+0x398/0xad0 [ 115.167106][ T5405] ? dump_pagetable+0x530/0x530 [ 115.172058][ T5405] ? __read_once_word_nocheck+0x9/0x10 [ 115.177605][ T5405] ? unwind_next_frame+0x51/0x2390 [ 115.182804][ T5405] ? __orc_find+0x104/0x130 [ 115.187310][ T5405] ? stack_access_ok+0xf9/0x270 [ 115.192328][ T5405] ? __orc_find+0x104/0x130 [ 115.196997][ T5405] ? stack_access_ok+0xf9/0x270 [ 115.202290][ T5405] ? __orc_find+0x104/0x130 [ 115.206872][ T5405] ? stack_access_ok+0xf9/0x270 [ 115.211816][ T5405] ? __module_address+0x55/0x3b0 [ 115.216766][ T5405] ? do_user_addr_fault+0x53d/0x1000 [ 115.222211][ T5405] ? irqentry_enter+0x2c/0x50 [ 115.226998][ T5405] ? rcu_is_watching+0x12/0xb0 [ 115.231851][ T5405] ? exc_page_fault+0x5c/0xd0 [ 115.236616][ T5405] ? asm_exc_page_fault+0x26/0x30 [ 115.241755][ T5405] ? __stack_depot_save+0x15e/0x510 [ 115.246969][ T5405] ? __stack_depot_save+0x39/0x510 [ 115.252091][ T5405] ? rcu_is_watching+0x12/0xb0 [ 115.256849][ T5405] kasan_save_stack+0x43/0x50 [ 115.261532][ T5405] ? kasan_save_stack+0x33/0x50 [ 115.266638][ T5405] ? kasan_set_track+0x25/0x30 [ 115.271505][ T5405] ? __kasan_slab_alloc+0x81/0x90 [ 115.276848][ T5405] ? kmem_cache_alloc+0x159/0x400 [ 115.281872][ T5405] ? mas_alloc_nodes+0x182/0x830 [ 115.286816][ T5405] ? mas_node_count_gfp+0x105/0x130 [ 115.292266][ T5405] ? mas_preallocate+0x2d7/0xda0 [ 115.297646][ T5405] ? expand_downwards+0x287/0xf60 [ 115.302761][ T5405] ? expand_stack_locked+0x57/0x80 [ 115.307992][ T5405] ? lock_mm_and_find_vma+0x262/0x760 [ 115.313365][ T5405] ? do_user_addr_fault+0x388/0x1000 [ 115.319507][ T5405] ? exc_page_fault+0x5c/0xd0 [ 115.324360][ T5405] ? asm_exc_page_fault+0x26/0x30 [ 115.329457][ T5405] ? rep_stos_alternative+0x40/0x80 [ 115.334644][ T5405] ? copy_fpstate_to_sigframe+0x16d/0xa60 [ 115.340552][ T5405] ? get_sigframe+0x45e/0x930 [ 115.345295][ T5405] ? x64_setup_rt_frame+0x136/0xce0 [ 115.350672][ T5405] ? arch_do_signal_or_restart+0x5ec/0x7f0 [ 115.356588][ T5405] ? exit_to_user_mode_prepare+0x11f/0x240 [ 115.362669][ T5405] ? irqentry_exit_to_user_mode+0x9/0x40 [ 115.368323][ T5405] ? asm_exc_page_fault+0x26/0x30 [ 115.373436][ T5405] kasan_set_track+0x25/0x30 [ 115.378023][ T5405] __kasan_slab_alloc+0x81/0x90 [ 115.382982][ T5405] kmem_cache_alloc+0x159/0x400 [ 115.388099][ T5405] mas_alloc_nodes+0x182/0x830 [ 115.393048][ T5405] mas_node_count_gfp+0x105/0x130 [ 115.398335][ T5405] mas_preallocate+0x2d7/0xda0 [ 115.403102][ T5405] ? __sanitizer_cov_trace_const_cmp4+0x1a/0x20 [ 115.409439][ T5405] ? mt_slot+0x4f/0x1b0 [ 115.413699][ T5405] ? mas_destroy+0x3d0/0x3d0 [ 115.419080][ T5405] ? mas_next_range+0x117/0x2f0 [ 115.423980][ T5405] expand_downwards+0x287/0xf60 [ 115.428843][ T5405] ? __ia32_sys_brk+0x40/0x40 [ 115.433554][ T5405] ? bsearch+0x9b/0xb0 [ 115.437620][ T5405] ? find_vma+0x10e/0x1b0 [ 115.442228][ T5405] ? can_vma_merge_before+0x3a0/0x3a0 [ 115.447848][ T5405] ? rep_stos_alternative+0x40/0x80 [ 115.453134][ T5405] expand_stack_locked+0x57/0x80 [ 115.458411][ T5405] lock_mm_and_find_vma+0x262/0x760 [ 115.464124][ T5405] do_user_addr_fault+0x388/0x1000 [ 115.469228][ T5405] ? irqentry_enter+0x2c/0x50 [ 115.473996][ T5405] ? rcu_is_watching+0x12/0xb0 [ 115.478744][ T5405] exc_page_fault+0x5c/0xd0 [ 115.483328][ T5405] asm_exc_page_fault+0x26/0x30 [ 115.489046][ T5405] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 115.494842][ T5405] Code: ff c7 48 ff c9 75 f6 c3 48 89 07 48 83 c7 08 83 e9 08 74 f3 83 f9 08 73 ef eb e2 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 115.514714][ T5405] RSP: 0000:ffffc9000351fb30 EFLAGS: 00050246 [ 115.520783][ T5405] RAX: 0000000000000000 RBX: 0000000000000040 RCX: 0000000000000040 [ 115.528949][ T5405] RDX: ffff88807e0fc000 RSI: ffffffff81318964 RDI: 00007ffe6e5ddfc0 [ 115.537080][ T5405] RBP: 00007ffe6e5dddc0 R08: 0000000000000000 R09: fffffbfff1dedcfa [ 115.545050][ T5405] R10: ffffffff8ef6e7d7 R11: 0000000000000001 R12: ffff88807e0fc000 [ 115.553157][ T5405] R13: 0000000000000000 R14: ffff88807e0fd940 R15: 0000000000000000 [ 115.561124][ T5405] ? copy_fpstate_to_sigframe+0x154/0xa60 [ 115.566844][ T5405] copy_fpstate_to_sigframe+0x16d/0xa60 [ 115.572497][ T5405] ? __fpu_restore_sig+0x1390/0x1390 [ 115.577890][ T5405] ? rcu_is_watching+0x12/0xb0 [ 115.582651][ T5405] get_sigframe+0x45e/0x930 [ 115.587151][ T5405] ? KSTK_ESP+0x70/0x70 [ 115.591293][ T5405] ? __might_fault+0xe6/0x1a0 [ 115.595991][ T5405] x64_setup_rt_frame+0x136/0xce0 [ 115.601265][ T5405] ? __do_sys_rseq+0x750/0x750 [ 115.606021][ T5405] ? x32_copy_siginfo_to_user+0x1a0/0x1a0 [ 115.611902][ T5405] ? force_sig+0xf0/0xf0 [ 115.616139][ T5405] arch_do_signal_or_restart+0x5ec/0x7f0 [ 115.622096][ T5405] ? get_sigframe_size+0x20/0x20 [ 115.627124][ T5405] ? __bad_area_nosemaphore+0x325/0x6a0 [ 115.632664][ T5405] exit_to_user_mode_prepare+0x11f/0x240 [ 115.638392][ T5405] irqentry_exit_to_user_mode+0x9/0x40 [ 115.644054][ T5405] asm_exc_page_fault+0x26/0x30 [ 115.648914][ T5405] RIP: 0033:0x7f572dc26120 [ 115.653584][ T5405] Code: 00 00 01 00 00 00 02 00 00 00 48 00 04 00 00 00 00 00 01 00 00 00 02 00 00 00 48 00 04 00 00 00 00 00 01 00 00 00 02 00 00 00 <48> 00 04 00 00 00 00 00 01 00 00 00 02 00 00 00 48 00 04 00 00 00 [ 115.673646][ T5405] RSP: 002b:00007ffe6e5de198 EFLAGS: 00010246 [ 115.679817][ T5405] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 115.687976][ T5405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f572dcc7224 [ 115.696049][ T5405] RBP: 00007ffe6e6ab39c R08: 0000000000000000 R09: 0000000000000001 [ 115.704236][ T5405] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 115.712200][ T5405] R13: 000000000001bdd0 R14: 000000000001bdd0 R15: 0000000000000000 [ 115.720190][ T5405] [ 115.723290][ T5405] Modules linked in: [ 115.727173][ T5405] CR2: 0000000000040050 [ 115.731320][ T5405] ---[ end trace 0000000000000000 ]--- [ 115.731357][ C1] general protection fault, probably for non-canonical address 0xdffffc000000838f: 0000 [#3] PREEMPT SMP KASAN [ 115.736849][ T5405] RIP: 0010:locks_remove_posix+0x100/0x500 [ 115.748981][ C1] KASAN: probably user-memory-access in range [0x0000000000041c78-0x0000000000041c7f] [ 115.755184][ T5405] Code: 4d 8b ae 20 02 00 00 4d 85 ed 0f 84 04 02 00 00 e8 05 57 7f ff 49 8d 55 50 48 b9 00 00 00 00 00 fc ff df 48 89 d6 48 c1 ee 03 <80> 3c 0e 00 0f 85 a4 03 00 00 49 8b 45 50 48 39 c2 0f 84 d3 01 00 [ 115.764967][ C1] CPU: 1 PID: 4713 Comm: dhcpcd Tainted: G D 6.6.0-syzkaller-03860-g5a6a09e97199 #0 [ 115.785091][ T5405] RSP: 0018:ffffc900038cf948 EFLAGS: 00010202 [ 115.796496][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 115.796515][ C1] RIP: 0010:__iterate_interfaces+0x86/0x580 [ 115.802830][ T5405] [ 115.802840][ T5405] RAX: 0000000000000000 RBX: ffff8880196a8a40 RCX: dffffc0000000000 [ 115.813156][ C1] Code: 48 1b 00 00 4c 39 f3 0f 84 8b 02 00 00 48 bd 00 00 00 00 00 fc ff df e8 78 01 8d f7 4c 8d a3 30 1c 00 00 4c 89 e0 48 c1 e8 03 <0f> b6 04 28 84 c0 74 08 3c 03 0f 8e 66 04 00 00 8b bb 30 1c 00 00 [ 115.819224][ T5405] RDX: 0000000000040098 RSI: 0000000000008013 RDI: ffff888071418460 [ 115.821646][ C1] RSP: 0018:ffffc900003f8d48 EFLAGS: 00010202 [ 115.829873][ T5405] RBP: 1ffff92000719f2b R08: 0000000000000003 R09: 0000000000004000 [ 115.850205][ C1] [ 115.850217][ C1] RAX: 000000000000838f RBX: 0000000000040048 RCX: ffffffff89fa7200 [ 115.858778][ T5405] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900038cf988 [ 115.864993][ C1] RDX: ffff888022098140 RSI: ffffffff89fa7108 RDI: 0000000000000005 [ 115.873133][ T5405] R13: 0000000000040048 R14: ffff888071418240 R15: ffff8880196a8bd0 [ 115.875624][ C1] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 115.875636][ C1] R10: 0000000000000000 R11: ffff8880b9800000 R12: 0000000000041c78 [ 115.875648][ C1] R13: 0000000000000002 R14: ffff88807d37a968 R15: 0000000000000000 [ 115.875660][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 115.875680][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.888066][ T5405] FS: 0000555555a26480(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 115.900099][ C1] CR2: 00007f7bb0038000 CR3: 000000000cb77000 CR4: 00000000003506f0 [ 115.908080][ T5405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.916179][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.924647][ T5405] CR2: 0000000000040050 CR3: 0000000064e1a000 CR4: 00000000003506f0 [ 115.932773][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 115.940999][ T5405] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.950163][ C1] Call Trace: [ 115.950176][ C1] [ 115.956815][ T5405] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 115.966245][ C1] ? show_regs+0x8f/0xa0 [ 115.974632][ T5405] Kernel panic - not syncing: Fatal exception [ 115.981629][ C1] ? die_addr+0x4f/0xd0 [ 115.981657][ C1] ? exc_general_protection+0x154/0x230 [ 115.981691][ C1] ? asm_exc_general_protection+0x26/0x30 [ 115.981715][ C1] ? __iterate_interfaces+0x170/0x580 [ 115.981738][ C1] ? __iterate_interfaces+0x78/0x580 [ 115.981760][ C1] ? __iterate_interfaces+0x86/0x580 [ 115.981782][ C1] ? __iterate_interfaces+0x78/0x580 [ 115.981804][ C1] ? reacquire_held_locks+0x4b0/0x4b0 [ 115.981834][ C1] ? __mac80211_hwsim_beacon_tx+0x5e0/0x5e0 [ 115.981862][ C1] ? __mac80211_hwsim_beacon_tx+0x5e0/0x5e0 [ 115.981888][ C1] ? mac80211_hwsim_change_chanctx+0x250/0x250 [ 115.981912][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 115.981941][ C1] mac80211_hwsim_beacon+0x101/0x200 [ 115.981965][ C1] __hrtimer_run_queues+0x203/0xc10 [ 115.981998][ C1] ? enqueue_hrtimer+0x310/0x310 [ 115.982026][ C1] ? ktime_get_update_offsets_now+0x3bc/0x610 [ 115.982068][ C1] hrtimer_run_softirq+0x17d/0x350 [ 115.982099][ C1] __do_softirq+0x21a/0x968 [ 115.982128][ C1] ? __lock_text_end+0x5/0x5 [ 115.982154][ C1] irq_exit_rcu+0xb7/0x120 [ 115.982175][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 115.982212][ C1] [ 115.982218][ C1] [ 115.982224][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 115.982249][ C1] RIP: 0010:oops_end+0xc8/0x1e0 [ 115.982275][ C1] Code: 65 58 00 48 85 db 0f 85 08 01 00 00 e8 71 69 58 00 81 e5 00 02 00 00 31 ff 48 89 ee e8 f1 64 58 00 48 85 ed 0f 85 81 00 00 00 53 69 58 00 e8 fe 36 1e 00 48 c7 c2 bf 96 73 8c be 02 00 00 00 [ 115.982297][ C1] RSP: 0018:ffffc900038cf7d8 EFLAGS: 00000293 [ 115.982314][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff812f091f [ 115.982328][ C1] RDX: ffff888022098140 RSI: ffffffff812f09ae RDI: 0000000000000007 [ 115.982343][ C1] RBP: 0000000000000200 R08: 0000000000000007 R09: 0000000000000000 [ 115.982356][ C1] R10: 0000000000000200 R11: 0000000000000001 R12: 000000000000000b [ 115.982369][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 115.982383][ C1] ? oops_end+0xbf/0x1e0 [ 115.982407][ C1] ? oops_end+0x14e/0x1e0 [ 115.982433][ C1] ? oops_end+0x14e/0x1e0 [ 115.982457][ C1] exc_general_protection+0x154/0x230 [ 115.982491][ C1] asm_exc_general_protection+0x26/0x30 [ 115.982513][ C1] RIP: 0010:locks_remove_posix+0x100/0x500 [ 115.982544][ C1] Code: 4d 8b ae 20 02 00 00 4d 85 ed 0f 84 04 02 00 00 e8 05 57 7f ff 49 8d 55 50 48 b9 00 00 00 00 00 fc ff df 48 89 d6 48 c1 ee 03 <80> 3c 0e 00 0f 85 a4 03 00 00 49 8b 45 50 48 39 c2 0f 84 d3 01 00 [ 115.982564][ C1] RSP: 0018:ffffc900038cf948 EFLAGS: 00010202 [ 115.982580][ C1] RAX: 0000000000000000 RBX: ffff8880196a8a40 RCX: dffffc0000000000 [ 115.982595][ C1] RDX: 0000000000040098 RSI: 0000000000008013 RDI: ffff888071418460 [ 115.982609][ C1] RBP: 1ffff92000719f2b R08: 0000000000000003 R09: 0000000000004000 [ 115.982622][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900038cf988 [ 115.982635][ C1] R13: 0000000000040048 R14: ffff888071418240 R15: ffff8880196a8bd0 [ 115.982655][ C1] ? locks_remove_posix+0xeb/0x500 [ 115.982683][ C1] ? do_lock_file_wait+0x410/0x410 [ 115.982718][ C1] ? dnotify_flush+0x7f/0x690 [ 115.982744][ C1] filp_flush+0x11b/0x1a0 [ 115.982767][ C1] filp_close+0x1c/0x30 [ 115.982789][ C1] put_files_struct+0x1df/0x360 [ 115.982822][ C1] exit_files+0x82/0xb0 [ 115.982850][ C1] do_exit+0xa5e/0x2a20 [ 115.982884][ C1] ? mm_update_next_owner+0x840/0x840 [ 115.982918][ C1] do_group_exit+0xd4/0x2a0 [ 115.982950][ C1] get_signal+0x23ba/0x2790 [ 115.982974][ C1] ? exit_signals+0x920/0x920 [ 115.982994][ C1] ? kill_something_info+0x310/0x310 [ 115.983017][ C1] ? from_kuid+0xc0/0xc0 [ 115.983037][ C1] arch_do_signal_or_restart+0x90/0x7f0 [ 115.983075][ C1] ? get_sigframe_size+0x20/0x20 [ 115.983109][ C1] exit_to_user_mode_prepare+0x11f/0x240 [ 115.983134][ C1] syscall_exit_to_user_mode+0x1d/0x60 [ 115.983155][ C1] do_syscall_64+0x4b/0x110 [ 115.983183][ C1] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 115.983220][ C1] RIP: 0033:0x7f7bafec83cd [ 115.983234][ C1] Code: Unable to access opcode bytes at 0x7f7bafec83a3. [ 115.983243][ C1] RSP: 002b:00007ffc41dca460 EFLAGS: 00000246 ORIG_RAX: 00000000000000ea [ 115.983262][ C1] RAX: 0000000000000000 RBX: 00007f7bafe56740 RCX: 00007f7bafec83cd [ 115.983276][ C1] RDX: 0000000000000006 RSI: 0000000000001269 RDI: 0000000000001269 [ 115.983290][ C1] RBP: 0000000000001269 R08: 0000000000000000 R09: 0000000000000003 [ 115.983303][ C1] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000006 [ 115.983315][ C1] R13: 00007ffc41dca670 R14: 0000000000001000 R15: 0000000000000000 [ 115.983332][ C1] [ 115.983338][ C1] Modules linked in: [ 115.983626][ T5405] Kernel Offset: disabled [ 116.515896][ T5405] Rebooting in 86400 seconds..