Warning: Permanently added '10.128.0.97' (ED25519) to the list of known hosts. 2024/07/22 14:24:53 ignoring optional flag "sandboxArg"="0" 2024/07/22 14:24:54 parsed 1 programs [ 110.159987][ T5582] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 113.363691][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.371729][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.454941][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.463938][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.563471][ T5633] chnl_net:caif_netlink_parms(): no params data found [ 114.635348][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.643031][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.650908][ T5633] bridge_slave_0: entered allmulticast mode [ 114.657692][ T5633] bridge_slave_0: entered promiscuous mode [ 114.665971][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.673256][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.681081][ T5633] bridge_slave_1: entered allmulticast mode [ 114.687936][ T5633] bridge_slave_1: entered promiscuous mode [ 114.722176][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.734486][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.767994][ T5633] team0: Port device team_slave_0 added [ 114.776033][ T5633] team0: Port device team_slave_1 added [ 114.828962][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.836413][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.863204][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.879174][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.889708][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.917414][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.959434][ T5633] hsr_slave_0: entered promiscuous mode [ 114.966824][ T5633] hsr_slave_1: entered promiscuous mode [ 115.635021][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.660560][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.673238][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.685593][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.786665][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.816217][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.833635][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.840957][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.861568][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.868762][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.087108][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.145760][ T5633] veth0_vlan: entered promiscuous mode [ 116.165300][ T5633] veth1_vlan: entered promiscuous mode [ 116.206558][ T5633] veth0_macvtap: entered promiscuous mode [ 116.219397][ T5633] veth1_macvtap: entered promiscuous mode [ 116.247828][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.269247][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.286830][ T5633] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.297899][ T5633] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.308448][ T5633] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.318459][ T5633] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.516396][ T1102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.621818][ T1102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.715391][ T1102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.736417][ T4498] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.749034][ T4498] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.759874][ T4498] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.773263][ T4498] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.782284][ T4498] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 116.794670][ T4498] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.834188][ T1102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2024/07/22 14:25:05 executed programs: 0 [ 117.762994][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.772985][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.783986][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.793511][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.805289][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 117.815977][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.036195][ T5754] chnl_net:caif_netlink_parms(): no params data found [ 118.144483][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.152176][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.159455][ T5754] bridge_slave_0: entered allmulticast mode [ 118.167400][ T5754] bridge_slave_0: entered promiscuous mode [ 118.176914][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.184371][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.192622][ T5754] bridge_slave_1: entered allmulticast mode [ 118.200190][ T5754] bridge_slave_1: entered promiscuous mode [ 118.235721][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.248543][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.293359][ T5754] team0: Port device team_slave_0 added [ 118.307319][ T5754] team0: Port device team_slave_1 added [ 118.342890][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.350159][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.376561][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.392003][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.399041][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.426797][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.486702][ T5754] hsr_slave_0: entered promiscuous mode [ 118.493579][ T5754] hsr_slave_1: entered promiscuous mode [ 118.503040][ T5754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.511020][ T5754] Cannot create hsr debugfs directory [ 119.899871][ T4498] Bluetooth: hci0: command tx timeout [ 121.406412][ T1102] bridge_slave_1: left allmulticast mode [ 121.416287][ T1102] bridge_slave_1: left promiscuous mode [ 121.422728][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.435587][ T1102] bridge_slave_0: left allmulticast mode [ 121.446708][ T1102] bridge_slave_0: left promiscuous mode [ 121.453761][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.803821][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.815778][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.827778][ T1102] bond0 (unregistering): Released all slaves [ 121.980932][ T4498] Bluetooth: hci0: command tx timeout [ 121.996190][ T1102] hsr_slave_0: left promiscuous mode [ 122.006737][ T1102] hsr_slave_1: left promiscuous mode [ 122.013882][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.021986][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.030768][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.038217][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.062148][ T1102] veth1_macvtap: left promiscuous mode [ 122.067782][ T1102] veth0_macvtap: left promiscuous mode [ 122.076746][ T1102] veth1_vlan: left promiscuous mode [ 122.082251][ T1102] veth0_vlan: left promiscuous mode [ 122.443144][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 122.472117][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 122.868921][ T5754] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.894752][ T5754] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.908938][ T5754] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.922216][ T5754] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.065366][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.098109][ T5754] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.281334][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.288677][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.334839][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.342569][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.603762][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.685000][ T5754] veth0_vlan: entered promiscuous mode [ 123.712253][ T5754] veth1_vlan: entered promiscuous mode [ 123.757474][ T5754] veth0_macvtap: entered promiscuous mode [ 123.772726][ T5754] veth1_macvtap: entered promiscuous mode [ 123.800312][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.826369][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.852156][ T5754] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.863426][ T5754] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.873951][ T5754] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.883182][ T5754] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.002689][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.023837][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/07/22 14:25:12 executed programs: 2 [ 124.057509][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.066986][ T4498] Bluetooth: hci0: command tx timeout [ 124.077392][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.140368][ T4498] Bluetooth: hci0: command tx timeout 2024/07/22 14:25:17 executed programs: 12 [ 133.742169][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.749113][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 2024/07/22 14:25:22 executed programs: 22 2024/07/22 14:25:27 executed programs: 32 2024/07/22 14:25:33 executed programs: 42 2024/07/22 14:25:38 executed programs: 52 2024/07/22 14:25:43 executed programs: 62 2024/07/22 14:25:48 executed programs: 72 2024/07/22 14:25:54 executed programs: 82 2024/07/22 14:25:59 executed programs: 92 2024/07/22 14:26:04 executed programs: 102 2024/07/22 14:26:09 executed programs: 112 2024/07/22 14:26:15 executed programs: 122 2024/07/22 14:26:20 executed programs: 132 [ 195.182197][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.190320][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 2024/07/22 14:26:25 executed programs: 142 2024/07/22 14:26:30 executed programs: 152 2024/07/22 14:26:36 executed programs: 162 2024/07/22 14:26:41 executed programs: 172 2024/07/22 14:26:46 executed programs: 182 2024/07/22 14:26:51 executed programs: 192 2024/07/22 14:26:57 executed programs: 202 2024/07/22 14:27:02 executed programs: 212 2024/07/22 14:27:07 executed programs: 222 [ 243.339813][ T55] Bluetooth: hci0: command 0x0406 tx timeout 2024/07/22 14:27:12 executed programs: 232 2024/07/22 14:27:18 executed programs: 242 2024/07/22 14:27:23 executed programs: 252 [ 256.632828][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.639264][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 2024/07/22 14:27:28 executed programs: 262 [ 265.259856][ C0] ================================================================== [ 265.268035][ C0] BUG: KASAN: slab-out-of-bounds in bq_xmit_all+0x134/0x11d0 [ 265.275432][ C0] Read of size 8 at addr ffff88807a1c2d50 by task syz.0.283/6567 [ 265.283326][ C0] [ 265.285743][ C0] CPU: 0 UID: 0 PID: 6567 Comm: syz.0.283 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 265.296265][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 265.306332][ C0] Call Trace: [ 265.309605][ C0] [ 265.312449][ C0] dump_stack_lvl+0x241/0x360 [ 265.317211][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.322408][ C0] ? __pfx__printk+0x10/0x10 [ 265.327025][ C0] ? _printk+0xd5/0x120 [ 265.331171][ C0] ? __virt_addr_valid+0x183/0x530 [ 265.336273][ C0] ? __virt_addr_valid+0x183/0x530 [ 265.341367][ C0] print_report+0x169/0x550 [ 265.345869][ C0] ? __virt_addr_valid+0x183/0x530 [ 265.350963][ C0] ? __virt_addr_valid+0x183/0x530 [ 265.356082][ C0] ? __virt_addr_valid+0x45f/0x530 [ 265.361195][ C0] ? __phys_addr+0xba/0x170 [ 265.365695][ C0] ? bq_xmit_all+0x134/0x11d0 [ 265.370374][ C0] kasan_report+0x143/0x180 [ 265.374917][ C0] ? bq_xmit_all+0x134/0x11d0 [ 265.379622][ C0] bq_xmit_all+0x134/0x11d0 [ 265.384137][ C0] ? mark_lock+0x9a/0x350 [ 265.388472][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 265.394797][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 265.401215][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 265.406365][ C0] ? __pfx_bq_xmit_all+0x10/0x10 [ 265.411312][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 265.416508][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 265.421706][ C0] ? process_backlog+0x151a/0x15b0 [ 265.426840][ C0] __dev_flush+0x81/0x160 [ 265.431252][ C0] xdp_do_check_flushed+0x129/0x240 [ 265.436585][ C0] __napi_poll+0xe4/0x490 [ 265.440983][ C0] net_rx_action+0x89b/0x1240 [ 265.445677][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 265.450791][ C0] ? sched_balance_domains+0x91b/0xa90 [ 265.456443][ C0] ? sched_balance_domains+0x1b2/0xa90 [ 265.461930][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 265.468304][ C0] handle_softirqs+0x2c4/0x970 [ 265.473190][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 265.478006][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 265.483297][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 265.488496][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 265.493295][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 265.498526][ C0] irq_exit_rcu+0x9/0x30 [ 265.502778][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 265.508507][ C0] [ 265.511519][ C0] [ 265.514522][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 265.520504][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5d/0x70 [ 265.526745][ C0] Code: f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 [ 265.546374][ C0] RSP: 0018:ffffc90003ddf398 EFLAGS: 00000293 [ 265.552459][ C0] RAX: ffffffff81d0022b RBX: dffffc0000000000 RCX: ffff888026fe8000 [ 265.560423][ C0] RDX: 0000000000000000 RSI: 000000000000000f RDI: 000000000000001f [ 265.568406][ C0] RBP: ffffc90003ddf4b0 R08: ffffffff81d001ee R09: 1ffffd40003c2f6e [ 265.576490][ C0] R10: dffffc0000000000 R11: fffff940003c2f6f R12: ffffc90003ddf5a0 [ 265.584453][ C0] R13: ffffea0001e17b80 R14: ffffc90003ddf520 R15: 000000000000000f [ 265.592422][ C0] ? folios_put_refs+0x15e/0x860 [ 265.597364][ C0] ? folios_put_refs+0x19b/0x860 [ 265.602294][ C0] folios_put_refs+0x19b/0x860 [ 265.607232][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 265.612501][ C0] ? rcu_is_watching+0x15/0xb0 [ 265.617345][ C0] ? free_swap_cache+0xb3/0x880 [ 265.622188][ C0] free_pages_and_swap_cache+0x2ea/0x690 [ 265.627906][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 265.634110][ C0] ? flush_tlb_mm_range+0x3df/0x5c0 [ 265.639314][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 265.644541][ C0] ? tlb_table_flush+0x143/0x410 [ 265.649512][ C0] tlb_flush_mmu+0x3a3/0x680 [ 265.654125][ C0] ? __pfx_down_write+0x10/0x10 [ 265.658974][ C0] tlb_finish_mmu+0xd4/0x200 [ 265.663566][ C0] exit_mmap+0x44f/0xc80 [ 265.667972][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 265.672724][ C0] ? __asan_memset+0x23/0x50 [ 265.677767][ C0] ? uprobe_clear_state+0x277/0x290 [ 265.682958][ C0] ? mm_update_next_owner+0xa4/0x810 [ 265.688230][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 265.693420][ C0] __mmput+0x115/0x390 [ 265.697479][ C0] exit_mm+0x220/0x310 [ 265.701544][ C0] ? __pfx_exit_mm+0x10/0x10 [ 265.706213][ C0] ? taskstats_exit+0x326/0xa60 [ 265.711060][ C0] do_exit+0x9b2/0x27f0 [ 265.715204][ C0] ? __pfx_do_exit+0x10/0x10 [ 265.719781][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 265.725237][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 265.731209][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 265.737528][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 265.742638][ C0] do_group_exit+0x207/0x2c0 [ 265.747216][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 265.752410][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 265.757599][ C0] get_signal+0x16a1/0x1740 [ 265.762203][ C0] ? __pfx_get_signal+0x10/0x10 [ 265.767063][ C0] arch_do_signal_or_restart+0x96/0x860 [ 265.772606][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 265.778964][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 265.784952][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 265.790664][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 265.796200][ C0] do_syscall_64+0x100/0x230 [ 265.800872][ C0] ? clear_bhb_loop+0x35/0x90 [ 265.805539][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.811425][ C0] RIP: 0033:0x7f1635175bd9 [ 265.815839][ C0] Code: Unable to access opcode bytes at 0x7f1635175baf. [ 265.822848][ C0] RSP: 002b:00007f1635e770f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 265.831336][ C0] RAX: fffffffffffffe00 RBX: 00007f1635303f68 RCX: 00007f1635175bd9 [ 265.839402][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1635303f68 [ 265.847452][ C0] RBP: 00007f1635303f60 R08: 00007f1635e776c0 R09: 00007f1635e776c0 [ 265.855503][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1635303f6c [ 265.863464][ C0] R13: 000000000000000b R14: 00007ffeb68d9450 R15: 00007ffeb68d9538 [ 265.871518][ C0] [ 265.874613][ C0] [ 265.876934][ C0] Allocated by task 5754: [ 265.881246][ C0] kasan_save_track+0x3f/0x80 [ 265.885920][ C0] __kasan_slab_alloc+0x66/0x80 [ 265.890765][ C0] kmem_cache_alloc_noprof+0x135/0x2a0 [ 265.896308][ C0] vm_area_dup+0x27/0x290 [ 265.900648][ C0] copy_mm+0xc7b/0x1f30 [ 265.904804][ C0] copy_process+0x187a/0x3dc0 [ 265.909479][ C0] kernel_clone+0x226/0x8f0 [ 265.913973][ C0] __x64_sys_clone+0x258/0x2a0 [ 265.918728][ C0] do_syscall_64+0xf3/0x230 [ 265.923323][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.929220][ C0] [ 265.931529][ C0] The buggy address belongs to the object at ffff88807a1c2c98 [ 265.931529][ C0] which belongs to the cache vm_area_struct of size 184 [ 265.945914][ C0] The buggy address is located 0 bytes to the right of [ 265.945914][ C0] allocated 184-byte region [ffff88807a1c2c98, ffff88807a1c2d50) [ 265.960391][ C0] [ 265.962701][ C0] The buggy address belongs to the physical page: [ 265.969106][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a1c2 [ 265.977861][ C0] memcg:ffff8880227b2101 [ 265.982175][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 265.989462][ C0] page_type: 0xfdffffff(slab) [ 265.994156][ C0] raw: 00fff00000000000 ffff888015eefb40 dead000000000100 dead000000000122 [ 266.002899][ C0] raw: 0000000000000000 0000000000100010 00000001fdffffff ffff8880227b2101 [ 266.011483][ C0] page dumped because: kasan: bad access detected [ 266.017982][ C0] page_owner tracks the page as allocated [ 266.023764][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5972, tgid 5972 (dhcpcd-run-hook), ts 122017798005, free_ts 121858197708 [ 266.043460][ C0] post_alloc_hook+0x1f3/0x230 [ 266.048232][ C0] get_page_from_freelist+0x2e4c/0x2f10 [ 266.053770][ C0] __alloc_pages_noprof+0x256/0x6c0 [ 266.058959][ C0] alloc_slab_page+0x5f/0x120 [ 266.063661][ C0] allocate_slab+0x5a/0x2f0 [ 266.068200][ C0] ___slab_alloc+0xcd1/0x14b0 [ 266.072891][ C0] __slab_alloc+0x58/0xa0 [ 266.077220][ C0] kmem_cache_alloc_noprof+0x1c1/0x2a0 [ 266.082667][ C0] vm_area_dup+0x27/0x290 [ 266.086994][ C0] copy_mm+0xc7b/0x1f30 [ 266.091150][ C0] copy_process+0x187a/0x3dc0 [ 266.095931][ C0] kernel_clone+0x226/0x8f0 [ 266.100599][ C0] __x64_sys_clone+0x258/0x2a0 [ 266.105363][ C0] do_syscall_64+0xf3/0x230 [ 266.109855][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.115744][ C0] page last free pid 5966 tgid 5966 stack trace: [ 266.122053][ C0] free_unref_page+0xd22/0xea0 [ 266.127104][ C0] __put_partials+0xeb/0x130 [ 266.131796][ C0] put_cpu_partial+0x17c/0x250 [ 266.136574][ C0] __slab_free+0x2ea/0x3d0 [ 266.140993][ C0] qlist_free_all+0x9e/0x140 [ 266.145753][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 266.151202][ C0] __kasan_slab_alloc+0x23/0x80 [ 266.156041][ C0] __kmalloc_noprof+0x1a6/0x400 [ 266.160880][ C0] tomoyo_realpath_from_path+0xcf/0x5e0 [ 266.166504][ C0] tomoyo_path_perm+0x2b7/0x740 [ 266.171444][ C0] security_inode_getattr+0xd8/0x130 [ 266.176807][ C0] vfs_getattr+0x45/0x430 [ 266.181123][ C0] vfs_fstatat+0xe4/0x190 [ 266.185445][ C0] __x64_sys_newfstatat+0x11d/0x1a0 [ 266.190630][ C0] do_syscall_64+0xf3/0x230 [ 266.195140][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.201036][ C0] [ 266.203432][ C0] Memory state around the buggy address: [ 266.209051][ C0] ffff88807a1c2c00: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 266.217097][ C0] ffff88807a1c2c80: fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 266.225146][ C0] >ffff88807a1c2d00: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 266.233210][ C0] ^ [ 266.239951][ C0] ffff88807a1c2d80: fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 266.248260][ C0] ffff88807a1c2e00: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 266.256301][ C0] ================================================================== [ 266.264426][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 266.271719][ C0] CPU: 0 UID: 0 PID: 6567 Comm: syz.0.283 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 266.282213][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 266.292344][ C0] Call Trace: [ 266.295710][ C0] [ 266.298542][ C0] dump_stack_lvl+0x241/0x360 [ 266.303222][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.308497][ C0] ? __pfx__printk+0x10/0x10 [ 266.313081][ C0] ? vscnprintf+0x5d/0x90 [ 266.317513][ C0] panic+0x349/0x860 [ 266.321462][ C0] ? check_panic_on_warn+0x21/0xb0 [ 266.326638][ C0] ? __pfx_panic+0x10/0x10 [ 266.331158][ C0] ? mark_lock+0x9a/0x350 [ 266.335487][ C0] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 266.341464][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 266.347435][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 266.353758][ C0] ? print_report+0x502/0x550 [ 266.358432][ C0] check_panic_on_warn+0x86/0xb0 [ 266.363541][ C0] ? bq_xmit_all+0x134/0x11d0 [ 266.368205][ C0] end_report+0x77/0x160 [ 266.372789][ C0] kasan_report+0x154/0x180 [ 266.377285][ C0] ? bq_xmit_all+0x134/0x11d0 [ 266.381981][ C0] bq_xmit_all+0x134/0x11d0 [ 266.386507][ C0] ? mark_lock+0x9a/0x350 [ 266.390993][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 266.396988][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 266.403314][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 266.408785][ C0] ? __pfx_bq_xmit_all+0x10/0x10 [ 266.413806][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 266.419142][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 266.424484][ C0] ? process_backlog+0x151a/0x15b0 [ 266.429608][ C0] __dev_flush+0x81/0x160 [ 266.433934][ C0] xdp_do_check_flushed+0x129/0x240 [ 266.439133][ C0] __napi_poll+0xe4/0x490 [ 266.443542][ C0] net_rx_action+0x89b/0x1240 [ 266.448222][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 266.453467][ C0] ? sched_balance_domains+0x91b/0xa90 [ 266.459031][ C0] ? sched_balance_domains+0x1b2/0xa90 [ 266.464491][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 266.470916][ C0] handle_softirqs+0x2c4/0x970 [ 266.475680][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 266.480442][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 266.485720][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 266.490925][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 266.495515][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 266.500709][ C0] irq_exit_rcu+0x9/0x30 [ 266.504940][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 266.510564][ C0] [ 266.513488][ C0] [ 266.516451][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.522426][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5d/0x70 [ 266.528749][ C0] Code: f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 [ 266.548354][ C0] RSP: 0018:ffffc90003ddf398 EFLAGS: 00000293 [ 266.554500][ C0] RAX: ffffffff81d0022b RBX: dffffc0000000000 RCX: ffff888026fe8000 [ 266.562460][ C0] RDX: 0000000000000000 RSI: 000000000000000f RDI: 000000000000001f [ 266.570419][ C0] RBP: ffffc90003ddf4b0 R08: ffffffff81d001ee R09: 1ffffd40003c2f6e [ 266.578379][ C0] R10: dffffc0000000000 R11: fffff940003c2f6f R12: ffffc90003ddf5a0 [ 266.586338][ C0] R13: ffffea0001e17b80 R14: ffffc90003ddf520 R15: 000000000000000f [ 266.594301][ C0] ? folios_put_refs+0x15e/0x860 [ 266.599230][ C0] ? folios_put_refs+0x19b/0x860 [ 266.604160][ C0] folios_put_refs+0x19b/0x860 [ 266.608915][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 266.614200][ C0] ? rcu_is_watching+0x15/0xb0 [ 266.618957][ C0] ? free_swap_cache+0xb3/0x880 [ 266.623800][ C0] free_pages_and_swap_cache+0x2ea/0x690 [ 266.629427][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 266.635674][ C0] ? flush_tlb_mm_range+0x3df/0x5c0 [ 266.640933][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 266.646129][ C0] ? tlb_table_flush+0x143/0x410 [ 266.651234][ C0] tlb_flush_mmu+0x3a3/0x680 [ 266.655834][ C0] ? __pfx_down_write+0x10/0x10 [ 266.660682][ C0] tlb_finish_mmu+0xd4/0x200 [ 266.665272][ C0] exit_mmap+0x44f/0xc80 [ 266.669505][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 266.674356][ C0] ? __asan_memset+0x23/0x50 [ 266.678982][ C0] ? uprobe_clear_state+0x277/0x290 [ 266.684168][ C0] ? mm_update_next_owner+0xa4/0x810 [ 266.689447][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 266.694722][ C0] __mmput+0x115/0x390 [ 266.698783][ C0] exit_mm+0x220/0x310 [ 266.702860][ C0] ? __pfx_exit_mm+0x10/0x10 [ 266.707438][ C0] ? taskstats_exit+0x326/0xa60 [ 266.712287][ C0] do_exit+0x9b2/0x27f0 [ 266.716441][ C0] ? __pfx_do_exit+0x10/0x10 [ 266.721015][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 266.726381][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 266.732526][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 266.738842][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 266.743957][ C0] do_group_exit+0x207/0x2c0 [ 266.748533][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 266.753726][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 266.758915][ C0] get_signal+0x16a1/0x1740 [ 266.763514][ C0] ? __pfx_get_signal+0x10/0x10 [ 266.768359][ C0] arch_do_signal_or_restart+0x96/0x860 [ 266.773901][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 266.780141][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 266.786120][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 266.791930][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 266.797473][ C0] do_syscall_64+0x100/0x230 [ 266.802148][ C0] ? clear_bhb_loop+0x35/0x90 [ 266.806919][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.812814][ C0] RIP: 0033:0x7f1635175bd9 [ 266.817219][ C0] Code: Unable to access opcode bytes at 0x7f1635175baf. [ 266.824570][ C0] RSP: 002b:00007f1635e770f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 266.832975][ C0] RAX: fffffffffffffe00 RBX: 00007f1635303f68 RCX: 00007f1635175bd9 [ 266.841284][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1635303f68 [ 266.849261][ C0] RBP: 00007f1635303f60 R08: 00007f1635e776c0 R09: 00007f1635e776c0 [ 266.857487][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1635303f6c [ 266.865536][ C0] R13: 000000000000000b R14: 00007ffeb68d9450 R15: 00007ffeb68d9538 [ 266.873607][ C0] [ 266.877098][ C0] Kernel Offset: disabled [ 266.881414][ C0] Rebooting in 86400 seconds..