[ 81.962254][ T8] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.15.197' (ED25519) to the list of known hosts. 2024/12/01 05:04:33 ignoring optional flag "sandboxArg"="0" 2024/12/01 05:04:34 parsed 1 programs [ 91.152435][ T6302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.977678][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.985099][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.992581][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.000478][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.008278][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.015956][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.310569][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.318847][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.333039][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.340895][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.310158][ T6376] chnl_net:caif_netlink_parms(): no params data found [ 94.349251][ T6376] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.356921][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.364621][ T6376] bridge_slave_0: entered allmulticast mode [ 94.371226][ T6376] bridge_slave_0: entered promiscuous mode [ 94.378510][ T6376] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.385793][ T6376] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.393058][ T6376] bridge_slave_1: entered allmulticast mode [ 94.399422][ T6376] bridge_slave_1: entered promiscuous mode [ 94.422070][ T6376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.433371][ T6376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.450323][ T6376] team0: Port device team_slave_0 added [ 94.457131][ T6376] team0: Port device team_slave_1 added [ 94.472906][ T6376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.479867][ T6376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.506406][ T6376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.518553][ T6376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.525763][ T6376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.551850][ T6376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.578206][ T6376] hsr_slave_0: entered promiscuous mode [ 94.585313][ T6376] hsr_slave_1: entered promiscuous mode [ 94.919622][ T6376] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.934677][ T6376] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.943815][ T6376] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.953375][ T6376] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.973169][ T6376] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.980330][ T6376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.987850][ T6376] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.995073][ T6376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.052890][ T6376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.068404][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.077847][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.093645][ T6376] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.104262][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.111431][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.123665][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.130758][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.266080][ T6376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.296491][ T6376] veth0_vlan: entered promiscuous mode [ 95.308810][ T6376] veth1_vlan: entered promiscuous mode [ 95.330893][ T6376] veth0_macvtap: entered promiscuous mode [ 95.340311][ T6376] veth1_macvtap: entered promiscuous mode [ 95.355971][ T6376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.371111][ T6376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.383202][ T6376] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.393019][ T6376] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.403148][ T6376] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.412131][ T6376] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2024/12/01 05:04:41 executed programs: 0 [ 95.530494][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.532787][ T1139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.550275][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.557981][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.567588][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.577718][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.585363][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.593281][ T1139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.648167][ T1139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.703673][ T1139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.747087][ T6452] chnl_net:caif_netlink_parms(): no params data found [ 95.805310][ T6452] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.813663][ T6452] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.820871][ T6452] bridge_slave_0: entered allmulticast mode [ 95.828693][ T6452] bridge_slave_0: entered promiscuous mode [ 95.836937][ T6452] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.844822][ T6452] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.852753][ T6452] bridge_slave_1: entered allmulticast mode [ 95.859485][ T6452] bridge_slave_1: entered promiscuous mode [ 95.882455][ T6452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.893958][ T6452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.918275][ T6452] team0: Port device team_slave_0 added [ 95.925937][ T6452] team0: Port device team_slave_1 added [ 95.947116][ T6452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.954919][ T6452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.982542][ T6452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.994736][ T6452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.001713][ T6452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.029194][ T6452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.065118][ T6452] hsr_slave_0: entered promiscuous mode [ 96.073440][ T6452] hsr_slave_1: entered promiscuous mode [ 96.079597][ T6452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.087888][ T6452] Cannot create hsr debugfs directory [ 97.641895][ T54] Bluetooth: hci0: command tx timeout [ 99.142757][ T1139] bridge_slave_1: left allmulticast mode [ 99.148465][ T1139] bridge_slave_1: left promiscuous mode [ 99.155698][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.166430][ T1139] bridge_slave_0: left allmulticast mode [ 99.173851][ T1139] bridge_slave_0: left promiscuous mode [ 99.179565][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.279777][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.290852][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.301687][ T1139] bond0 (unregistering): Released all slaves [ 99.411736][ T1139] hsr_slave_0: left promiscuous mode [ 99.418569][ T1139] hsr_slave_1: left promiscuous mode [ 99.424550][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.432064][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.439790][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.449855][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.459637][ T1139] veth1_macvtap: left promiscuous mode [ 99.465308][ T1139] veth0_macvtap: left promiscuous mode [ 99.471033][ T1139] veth1_vlan: left promiscuous mode [ 99.477105][ T1139] veth0_vlan: left promiscuous mode [ 99.578140][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 99.588073][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 99.710830][ T6452] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.721955][ T54] Bluetooth: hci0: command tx timeout [ 99.730237][ T6452] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.739244][ T6452] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.748351][ T6452] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.808464][ T6452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.826865][ T6452] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.844596][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.851732][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.865540][ T3429] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.872673][ T3429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.903962][ T6452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.006535][ T6452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.040723][ T6452] veth0_vlan: entered promiscuous mode [ 100.062315][ T6452] veth1_vlan: entered promiscuous mode [ 100.086183][ T6452] veth0_macvtap: entered promiscuous mode [ 100.095767][ T6452] veth1_macvtap: entered promiscuous mode [ 100.110605][ T6452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.125136][ T6452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.136842][ T6452] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.146740][ T6452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.156584][ T6452] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.166321][ T6452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.218372][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.227518][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.249259][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.260063][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.300706][ T6812] ================================================================== [ 100.308817][ T6812] BUG: KASAN: slab-out-of-bounds in strlen+0x58/0x70 [ 100.315540][ T6812] Read of size 1 at addr ffff888141e9a3c8 by task syz.0.15/6812 [ 100.323198][ T6812] [ 100.325560][ T6812] CPU: 1 UID: 0 PID: 6812 Comm: syz.0.15 Not tainted 6.12.0-syzkaller-10681-g65ae975e97d5 #0 [ 100.335745][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 100.345829][ T6812] Call Trace: [ 100.349137][ T6812] [ 100.352178][ T6812] dump_stack_lvl+0x241/0x360 [ 100.356877][ T6812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.362106][ T6812] ? __pfx__printk+0x10/0x10 [ 100.366712][ T6812] ? _printk+0xd5/0x120 [ 100.370868][ T6812] ? __virt_addr_valid+0x183/0x530 [ 100.375971][ T6812] ? __virt_addr_valid+0x183/0x530 [ 100.381083][ T6812] print_report+0x169/0x550 [ 100.385702][ T6812] ? __virt_addr_valid+0x183/0x530 [ 100.390811][ T6812] ? __virt_addr_valid+0x183/0x530 [ 100.395919][ T6812] ? __virt_addr_valid+0x45f/0x530 [ 100.401045][ T6812] ? __phys_addr+0xba/0x170 [ 100.405535][ T6812] ? strlen+0x58/0x70 [ 100.409504][ T6812] kasan_report+0x143/0x180 [ 100.413998][ T6812] ? strlen+0x58/0x70 [ 100.417964][ T6812] strlen+0x58/0x70 [ 100.421778][ T6812] kstrdup+0x21/0xb0 [ 100.425694][ T6812] led_tg_check+0x18b/0x3c0 [ 100.430191][ T6812] xt_check_target+0x3b9/0xa40 [ 100.434957][ T6812] ? __pfx_xt_check_target+0x10/0x10 [ 100.440233][ T6812] ? kasan_save_track+0x51/0x80 [ 100.445088][ T6812] ? nft_target_init+0x174/0xc30 [ 100.450031][ T6812] nft_target_init+0x82d/0xc30 [ 100.454887][ T6812] ? __pfx_nft_target_init+0x10/0x10 [ 100.460176][ T6812] ? rcu_is_watching+0x15/0xb0 [ 100.464936][ T6812] ? trace_kmalloc+0x1f/0xd0 [ 100.469510][ T6812] ? nf_tables_newrule+0x1609/0x2980 [ 100.474792][ T6812] nf_tables_newrule+0x185e/0x2980 [ 100.479893][ T6812] ? __pfx_nf_tables_newrule+0x10/0x10 [ 100.485421][ T6812] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 100.491473][ T6812] ? __nla_parse+0x40/0x60 [ 100.495909][ T6812] nfnetlink_rcv+0x14e3/0x2ab0 [ 100.500672][ T6812] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 100.505854][ T6812] ? skb_clone+0x240/0x390 [ 100.510263][ T6812] ? __pfx_lock_release+0x10/0x10 [ 100.515280][ T6812] ? netlink_deliver_tap+0x2e/0x1b0 [ 100.520462][ T6812] netlink_unicast+0x7f6/0x990 [ 100.525219][ T6812] ? __pfx_netlink_unicast+0x10/0x10 [ 100.530493][ T6812] ? __virt_addr_valid+0x183/0x530 [ 100.535593][ T6812] ? __check_object_size+0x48e/0x900 [ 100.540893][ T6812] netlink_sendmsg+0x8e4/0xcb0 [ 100.545822][ T6812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.551122][ T6812] ? aa_sock_msg_perm+0x91/0x160 [ 100.556086][ T6812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.561354][ T6812] __sock_sendmsg+0x221/0x270 [ 100.566038][ T6812] ____sys_sendmsg+0x52a/0x7e0 [ 100.570794][ T6812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.576070][ T6812] ? __fget_files+0x2a/0x410 [ 100.580674][ T6812] ? __fget_files+0x2a/0x410 [ 100.585251][ T6812] __sys_sendmsg+0x269/0x350 [ 100.589912][ T6812] ? __pfx_futex_wake+0x10/0x10 [ 100.594854][ T6812] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.599970][ T6812] ? lock_release+0xbf/0xa30 [ 100.604572][ T6812] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 100.610889][ T6812] ? rcu_is_watching+0x15/0xb0 [ 100.615646][ T6812] ? rcu_is_watching+0x15/0xb0 [ 100.620403][ T6812] do_syscall_64+0xf3/0x230 [ 100.624904][ T6812] ? clear_bhb_loop+0x35/0x90 [ 100.629566][ T6812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.635557][ T6812] RIP: 0033:0x7f24a0b7e719 [ 100.639968][ T6812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.659565][ T6812] RSP: 002b:00007f24a19d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.668087][ T6812] RAX: ffffffffffffffda RBX: 00007f24a0d35f80 RCX: 00007f24a0b7e719 [ 100.676230][ T6812] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 100.684201][ T6812] RBP: 00007f24a0bf175e R08: 0000000000000000 R09: 0000000000000000 [ 100.692185][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.700256][ T6812] R13: 0000000000000000 R14: 00007f24a0d35f80 R15: 00007ffeb3181bd8 [ 100.708220][ T6812] [ 100.711223][ T6812] [ 100.713755][ T6812] Allocated by task 6812: [ 100.718190][ T6812] kasan_save_track+0x3f/0x80 [ 100.722873][ T6812] __kasan_kmalloc+0x98/0xb0 [ 100.727553][ T6812] __kmalloc_noprof+0x285/0x4c0 [ 100.732493][ T6812] nf_tables_newrule+0x1609/0x2980 [ 100.737622][ T6812] nfnetlink_rcv+0x14e3/0x2ab0 [ 100.742402][ T6812] netlink_unicast+0x7f6/0x990 [ 100.747158][ T6812] netlink_sendmsg+0x8e4/0xcb0 [ 100.751910][ T6812] __sock_sendmsg+0x221/0x270 [ 100.756595][ T6812] ____sys_sendmsg+0x52a/0x7e0 [ 100.761343][ T6812] __sys_sendmsg+0x269/0x350 [ 100.765933][ T6812] do_syscall_64+0xf3/0x230 [ 100.770423][ T6812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.776307][ T6812] [ 100.778614][ T6812] The buggy address belongs to the object at ffff888141e9a380 [ 100.778614][ T6812] which belongs to the cache kmalloc-cg-96 of size 96 [ 100.792741][ T6812] The buggy address is located 0 bytes to the right of [ 100.792741][ T6812] allocated 72-byte region [ffff888141e9a380, ffff888141e9a3c8) [ 100.807200][ T6812] [ 100.809522][ T6812] The buggy address belongs to the physical page: [ 100.815935][ T6812] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x141e9a [ 100.824870][ T6812] memcg:ffff88814af92401 [ 100.829179][ T6812] anon flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 100.837081][ T6812] page_type: f5(slab) [ 100.841044][ T6812] raw: 057ff00000000000 ffff88801ac4d640 ffffea0001e8a980 0000000000000005 [ 100.849618][ T6812] raw: 0000000000000000 0000000080200020 00000001f5000000 ffff88814af92401 [ 100.858193][ T6812] page dumped because: kasan: bad access detected [ 100.864608][ T6812] page_owner tracks the page as allocated [ 100.870308][ T6812] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 2791747167, free_ts 0 [ 100.888268][ T6812] post_alloc_hook+0x1f3/0x230 [ 100.893030][ T6812] get_page_from_freelist+0x3649/0x3790 [ 100.898563][ T6812] __alloc_pages_noprof+0x292/0x710 [ 100.903753][ T6812] alloc_pages_mpol_noprof+0x3e8/0x680 [ 100.909553][ T6812] alloc_slab_page+0x6a/0x140 [ 100.914216][ T6812] allocate_slab+0x5a/0x2f0 [ 100.918705][ T6812] ___slab_alloc+0xcd1/0x14b0 [ 100.923384][ T6812] __slab_alloc+0x58/0xa0 [ 100.927711][ T6812] __kmalloc_noprof+0x2e6/0x4c0 [ 100.932554][ T6812] __register_sysctl_table+0xd4/0x1430 [ 100.938117][ T6812] net_sysctl_init+0x20/0x90 [ 100.942783][ T6812] sock_init+0x6b/0x1c0 [ 100.946975][ T6812] do_one_initcall+0x248/0x880 [ 100.951745][ T6812] do_initcall_level+0x157/0x210 [ 100.956673][ T6812] do_initcalls+0x3f/0x80 [ 100.960989][ T6812] kernel_init_freeable+0x435/0x5d0 [ 100.966176][ T6812] page_owner free stack trace missing [ 100.971527][ T6812] [ 100.973839][ T6812] Memory state around the buggy address: [ 100.979457][ T6812] ffff888141e9a280: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 100.987594][ T6812] ffff888141e9a300: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 100.995741][ T6812] >ffff888141e9a380: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 101.003873][ T6812] ^ [ 101.010270][ T6812] ffff888141e9a400: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 101.018316][ T6812] ffff888141e9a480: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 101.026449][ T6812] ================================================================== [ 101.037970][ T6812] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 101.045391][ T6812] CPU: 0 UID: 0 PID: 6812 Comm: syz.0.15 Not tainted 6.12.0-syzkaller-10681-g65ae975e97d5 #0 [ 101.055561][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.065788][ T6812] Call Trace: [ 101.069070][ T6812] [ 101.072089][ T6812] dump_stack_lvl+0x241/0x360 [ 101.076853][ T6812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.082087][ T6812] ? __pfx__printk+0x10/0x10 [ 101.086691][ T6812] ? rcu_is_watching+0x15/0xb0 [ 101.091451][ T6812] ? preempt_schedule+0xe1/0xf0 [ 101.096291][ T6812] ? vscnprintf+0x5d/0x90 [ 101.100621][ T6812] panic+0x349/0x880 [ 101.104513][ T6812] ? check_panic_on_warn+0x21/0xb0 [ 101.109615][ T6812] ? __pfx_panic+0x10/0x10 [ 101.114025][ T6812] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 101.120010][ T6812] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 101.126329][ T6812] ? print_report+0x502/0x550 [ 101.131009][ T6812] check_panic_on_warn+0x86/0xb0 [ 101.135940][ T6812] ? strlen+0x58/0x70 [ 101.139911][ T6812] end_report+0x77/0x160 [ 101.144145][ T6812] kasan_report+0x154/0x180 [ 101.148726][ T6812] ? strlen+0x58/0x70 [ 101.152703][ T6812] strlen+0x58/0x70 [ 101.156490][ T6812] kstrdup+0x21/0xb0 [ 101.160395][ T6812] led_tg_check+0x18b/0x3c0 [ 101.164885][ T6812] xt_check_target+0x3b9/0xa40 [ 101.169650][ T6812] ? __pfx_xt_check_target+0x10/0x10 [ 101.174963][ T6812] ? kasan_save_track+0x51/0x80 [ 101.179824][ T6812] ? nft_target_init+0x174/0xc30 [ 101.184779][ T6812] nft_target_init+0x82d/0xc30 [ 101.189548][ T6812] ? __pfx_nft_target_init+0x10/0x10 [ 101.194940][ T6812] ? rcu_is_watching+0x15/0xb0 [ 101.199717][ T6812] ? trace_kmalloc+0x1f/0xd0 [ 101.204298][ T6812] ? nf_tables_newrule+0x1609/0x2980 [ 101.209566][ T6812] nf_tables_newrule+0x185e/0x2980 [ 101.214674][ T6812] ? __pfx_nf_tables_newrule+0x10/0x10 [ 101.220220][ T6812] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 101.226209][ T6812] ? __nla_parse+0x40/0x60 [ 101.230611][ T6812] nfnetlink_rcv+0x14e3/0x2ab0 [ 101.235371][ T6812] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 101.240481][ T6812] ? skb_clone+0x240/0x390 [ 101.244909][ T6812] ? __pfx_lock_release+0x10/0x10 [ 101.249915][ T6812] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.255101][ T6812] netlink_unicast+0x7f6/0x990 [ 101.259860][ T6812] ? __pfx_netlink_unicast+0x10/0x10 [ 101.265150][ T6812] ? __virt_addr_valid+0x183/0x530 [ 101.270341][ T6812] ? __check_object_size+0x48e/0x900 [ 101.275671][ T6812] netlink_sendmsg+0x8e4/0xcb0 [ 101.280442][ T6812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.285723][ T6812] ? aa_sock_msg_perm+0x91/0x160 [ 101.290692][ T6812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.295991][ T6812] __sock_sendmsg+0x221/0x270 [ 101.300661][ T6812] ____sys_sendmsg+0x52a/0x7e0 [ 101.305413][ T6812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.310689][ T6812] ? __fget_files+0x2a/0x410 [ 101.315281][ T6812] ? __fget_files+0x2a/0x410 [ 101.319860][ T6812] __sys_sendmsg+0x269/0x350 [ 101.324437][ T6812] ? __pfx_futex_wake+0x10/0x10 [ 101.329362][ T6812] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.334640][ T6812] ? lock_release+0xbf/0xa30 [ 101.339224][ T6812] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 101.345623][ T6812] ? rcu_is_watching+0x15/0xb0 [ 101.350376][ T6812] ? rcu_is_watching+0x15/0xb0 [ 101.355137][ T6812] do_syscall_64+0xf3/0x230 [ 101.359623][ T6812] ? clear_bhb_loop+0x35/0x90 [ 101.364286][ T6812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.370184][ T6812] RIP: 0033:0x7f24a0b7e719 [ 101.374621][ T6812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.394235][ T6812] RSP: 002b:00007f24a19d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.402748][ T6812] RAX: ffffffffffffffda RBX: 00007f24a0d35f80 RCX: 00007f24a0b7e719 [ 101.410706][ T6812] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 101.418666][ T6812] RBP: 00007f24a0bf175e R08: 0000000000000000 R09: 0000000000000000 [ 101.426679][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.434682][ T6812] R13: 0000000000000000 R14: 00007f24a0d35f80 R15: 00007ffeb3181bd8 [ 101.442664][ T6812] [ 101.446005][ T6812] Kernel Offset: disabled [ 101.450427][ T6812] Rebooting in 86400 seconds..