Warning: Permanently added '10.128.15.195' (ECDSA) to the list of known hosts. 2023/06/28 01:07:37 ignoring optional flag "sandboxArg"="0" 2023/06/28 01:07:37 parsed 1 programs 2023/06/28 01:07:39 executed programs: 0 [ 71.595349][ T5339] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.647506][ T4400] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.655995][ T4400] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.664708][ T4400] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.673069][ T4400] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.680915][ T4400] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.688767][ T4400] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.822694][ T5346] chnl_net:caif_netlink_parms(): no params data found [ 71.860785][ T5346] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.867969][ T5346] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.875156][ T5346] bridge_slave_0: entered allmulticast mode [ 71.881991][ T5346] bridge_slave_0: entered promiscuous mode [ 71.890643][ T5346] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.898506][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.905883][ T5346] bridge_slave_1: entered allmulticast mode [ 71.913217][ T5346] bridge_slave_1: entered promiscuous mode [ 71.931405][ T5346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.942582][ T5346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.965109][ T5346] team0: Port device team_slave_0 added [ 71.972666][ T5346] team0: Port device team_slave_1 added [ 71.989590][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.996603][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.022957][ T5346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.034924][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.041945][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.068336][ T5346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.095280][ T5346] hsr_slave_0: entered promiscuous mode [ 72.101757][ T5346] hsr_slave_1: entered promiscuous mode [ 72.562103][ T5346] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.571863][ T5346] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.583919][ T5346] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.595980][ T5346] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.620653][ T5346] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.628409][ T5346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.636101][ T5346] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.643293][ T5346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.702734][ T5346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.718009][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.729132][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.737454][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.748126][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 72.764550][ T5346] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.775741][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.785127][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.792378][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.819393][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.829299][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.836731][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.845317][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.863228][ T5346] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.876907][ T5346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.889441][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.898729][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.910933][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.920133][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.930320][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.939448][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.949642][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.962247][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.089455][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.100039][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.113729][ T5346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.134754][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.145235][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.165846][ T5346] veth0_vlan: entered promiscuous mode [ 73.174204][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.183630][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.198004][ T5346] veth1_vlan: entered promiscuous mode [ 73.204871][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.214835][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.223981][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.247164][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.255344][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.264870][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.279175][ T5346] veth0_macvtap: entered promiscuous mode [ 73.291371][ T5346] veth1_macvtap: entered promiscuous mode [ 73.308884][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.316229][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.326162][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.336239][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.345295][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.358034][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.367325][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.376834][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.387540][ T5346] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.399168][ T5346] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.408502][ T5346] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.418775][ T5346] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.486856][ T954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.494996][ T954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.519507][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.529919][ T954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.539178][ T954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.549043][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.622648][ T27] audit: type=1804 audit(1687914461.300:2): pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3445373218/syzkaller.3MoPBn/0/bus/file0" dev="overlay" ino=1939 res=1 errno=0 [ 73.622933][ T5419] FAULT_INJECTION: forcing a failure. [ 73.622933][ T5419] name failslab, interval 1, probability 0, space 0, times 1 [ 73.664096][ T5419] CPU: 1 PID: 5419 Comm: syz-executor.0 Not tainted 6.4.0-rc2-syzkaller #0 [ 73.673407][ T5419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 73.683827][ T5419] Call Trace: [ 73.687138][ T5419] [ 73.690168][ T5419] dump_stack_lvl+0x167/0x220 [ 73.694863][ T5419] ? nf_tcp_handle_invalid+0x4e0/0x4e0 [ 73.700346][ T5419] ? panic+0x540/0x540 [ 73.704561][ T5419] should_fail_ex+0x3aa/0x4e0 [ 73.709444][ T5419] should_failslab+0x9/0x20 [ 73.714048][ T5419] slab_pre_alloc_hook+0x59/0x2b0 [ 73.719112][ T5419] kmem_cache_alloc+0x52/0x2e0 [ 73.723888][ T5419] ? security_file_alloc+0x23/0x100 [ 73.729278][ T5419] security_file_alloc+0x23/0x100 [ 73.734403][ T5419] init_file+0x8f/0x1d0 [ 73.738572][ T5419] alloc_empty_backing_file+0x62/0xb0 [ 73.743957][ T5419] backing_file_open+0x1b/0xd0 [ 73.748921][ T5419] ovl_open_realfile+0x1d4/0x310 [ 73.753888][ T5419] ovl_read_iter+0xaa7/0xcf0 [ 73.758495][ T5419] ? do_syscall_64+0x41/0xc0 [ 73.763232][ T5419] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 73.769404][ T5419] ? ovl_llseek+0x620/0x620 [ 73.773999][ T5419] generic_file_splice_read+0x23a/0x5b0 [ 73.779585][ T5419] ? direct_splice_read+0xa90/0xa90 [ 73.784794][ T5419] ? fsnotify_perm+0x29e/0x450 [ 73.789551][ T5419] splice_direct_to_actor+0x39c/0xa60 [ 73.795013][ T5419] ? do_splice_direct+0x3a0/0x3a0 [ 73.800020][ T5419] ? pipe_to_sendpage+0x310/0x310 [ 73.805117][ T5419] do_splice_direct+0x268/0x3a0 [ 73.810158][ T5419] ? splice_direct_to_actor+0xa60/0xa60 [ 73.815706][ T5419] ? rcu_read_lock_any_held+0xb7/0x160 [ 73.821195][ T5419] do_sendfile+0x4f5/0xc20 [ 73.825596][ T5419] ? do_pwritev+0x300/0x300 [ 73.830094][ T5419] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 73.836063][ T5419] __se_sys_sendfile64+0x143/0x190 [ 73.841154][ T5419] ? __x64_sys_sendfile64+0xa0/0xa0 [ 73.846416][ T5419] ? syscall_enter_from_user_mode+0x32/0x230 [ 73.852383][ T5419] ? lockdep_hardirqs_on+0x98/0x140 [ 73.857572][ T5419] ? syscall_enter_from_user_mode+0x32/0x230 [ 73.863619][ T5419] do_syscall_64+0x41/0xc0 [ 73.868200][ T5419] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 73.874160][ T5419] RIP: 0033:0x7f96afe8c389 [ 73.878611][ T5419] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 73.898378][ T5419] RSP: 002b:00007f96b0b68168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 73.907036][ T5419] RAX: ffffffffffffffda RBX: 00007f96affabf80 RCX: 00007f96afe8c389 [ 73.915073][ T5419] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 73.923025][ T5419] RBP: 00007f96b0b681d0 R08: 0000000000000000 R09: 0000000000000000 [ 73.930984][ T5419] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 73.938937][ T5419] R13: 00007fff31153f5f R14: 00007f96b0b68300 R15: 0000000000022000 [ 73.946903][ T5419] [ 73.950698][ T4400] Bluetooth: hci0: command 0x0409 tx timeout [ 74.255042][ T27] audit: type=1804 audit(1687914461.930:3): pid=5440 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3445373218/syzkaller.3MoPBn/1/bus/file0" dev="overlay" ino=1939 res=1 errno=0 [ 74.255626][ T5440] FAULT_INJECTION: forcing a failure. [ 74.255626][ T5440] name failslab, interval 1, probability 0, space 0, times 0 [ 74.295655][ T5440] CPU: 0 PID: 5440 Comm: syz-executor.0 Not tainted 6.4.0-rc2-syzkaller #0 [ 74.304710][ T5440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 74.315385][ T5440] Call Trace: [ 74.318733][ T5440] [ 74.321850][ T5440] dump_stack_lvl+0x167/0x220 [ 74.327010][ T5440] ? nf_tcp_handle_invalid+0x4e0/0x4e0 [ 74.332592][ T5440] ? panic+0x540/0x540 [ 74.336836][ T5440] should_fail_ex+0x3aa/0x4e0 [ 74.341702][ T5440] should_failslab+0x9/0x20 [ 74.346257][ T5440] slab_pre_alloc_hook+0x59/0x2b0 [ 74.351570][ T5440] kmem_cache_alloc+0x52/0x2e0 [ 74.356346][ T5440] ? security_file_alloc+0x23/0x100 [ 74.361585][ T5440] security_file_alloc+0x23/0x100 [ 74.366804][ T5440] init_file+0x8f/0x1d0 [ 74.371150][ T5440] alloc_empty_backing_file+0x62/0xb0 [ 74.376534][ T5440] backing_file_open+0x1b/0xd0 [ 74.381329][ T5440] ovl_open_realfile+0x1d4/0x310 [ 74.386291][ T5440] ovl_read_iter+0xaa7/0xcf0 [ 74.390889][ T5440] ? do_syscall_64+0x41/0xc0 [ 74.395485][ T5440] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.401751][ T5440] ? ovl_llseek+0x620/0x620 [ 74.406273][ T5440] generic_file_splice_read+0x23a/0x5b0 [ 74.411837][ T5440] ? direct_splice_read+0xa90/0xa90 [ 74.417065][ T5440] ? fsnotify_perm+0x29e/0x450 [ 74.421847][ T5440] splice_direct_to_actor+0x39c/0xa60 [ 74.427335][ T5440] ? do_splice_direct+0x3a0/0x3a0 [ 74.432470][ T5440] ? pipe_to_sendpage+0x310/0x310 [ 74.437531][ T5440] do_splice_direct+0x268/0x3a0 [ 74.442423][ T5440] ? splice_direct_to_actor+0xa60/0xa60 [ 74.447973][ T5440] ? rcu_read_lock_any_held+0xb7/0x160 [ 74.453547][ T5440] do_sendfile+0x4f5/0xc20 [ 74.458156][ T5440] ? do_pwritev+0x300/0x300 [ 74.462717][ T5440] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 74.469403][ T5440] __se_sys_sendfile64+0x143/0x190 [ 74.475342][ T5440] ? __x64_sys_sendfile64+0xa0/0xa0 [ 74.480901][ T5440] ? syscall_enter_from_user_mode+0x32/0x230 [ 74.487062][ T5440] ? lockdep_hardirqs_on+0x98/0x140 [ 74.492362][ T5440] ? syscall_enter_from_user_mode+0x32/0x230 [ 74.498568][ T5440] do_syscall_64+0x41/0xc0 [ 74.503029][ T5440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.509113][ T5440] RIP: 0033:0x7f96afe8c389 [ 74.514148][ T5440] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 74.534112][ T5440] RSP: 002b:00007f96b0b68168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 74.542573][ T5440] RAX: ffffffffffffffda RBX: 00007f96affabf80 RCX: 00007f96afe8c389 [ 74.550599][ T5440] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 74.558876][ T5440] RBP: 00007f96b0b681d0 R08: 0000000000000000 R09: 0000000000000000 [ 74.566861][ T5440] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 74.574931][ T5440] R13: 00007fff31153f5f R14: 00007f96b0b68300 R15: 0000000000022000 [ 74.583106][ T5440] [ 74.684900][ T27] audit: type=1804 audit(1687914462.360:4): pid=5458 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3445373218/syzkaller.3MoPBn/2/bus/file0" dev="overlay" ino=1939 res=1 errno=0 [ 74.686112][ T5458] FAULT_INJECTION: forcing a failure. [ 74.686112][ T5458] name failslab, interval 1, probability 0, space 0, times 0 [ 74.723483][ T5458] CPU: 1 PID: 5458 Comm: syz-executor.0 Not tainted 6.4.0-rc2-syzkaller #0 [ 74.732260][ T5458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 74.742301][ T5458] Call Trace: [ 74.745840][ T5458] [ 74.748769][ T5458] dump_stack_lvl+0x167/0x220 [ 74.753430][ T5458] ? nf_tcp_handle_invalid+0x4e0/0x4e0 [ 74.759477][ T5458] ? panic+0x540/0x540 [ 74.763626][ T5458] should_fail_ex+0x3aa/0x4e0 [ 74.768287][ T5458] should_failslab+0x9/0x20 [ 74.772771][ T5458] slab_pre_alloc_hook+0x59/0x2b0 [ 74.777877][ T5458] kmem_cache_alloc+0x52/0x2e0 [ 74.782730][ T5458] ? security_file_alloc+0x23/0x100 [ 74.787910][ T5458] security_file_alloc+0x23/0x100 [ 74.793021][ T5458] init_file+0x8f/0x1d0 [ 74.797183][ T5458] alloc_empty_backing_file+0x62/0xb0 [ 74.802888][ T5458] backing_file_open+0x1b/0xd0 [ 74.808348][ T5458] ovl_open_realfile+0x1d4/0x310 [ 74.813298][ T5458] ovl_read_iter+0xaa7/0xcf0 [ 74.817881][ T5458] ? do_syscall_64+0x41/0xc0 [ 74.822570][ T5458] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.828645][ T5458] ? ovl_llseek+0x620/0x620 [ 74.833407][ T5458] generic_file_splice_read+0x23a/0x5b0 [ 74.838973][ T5458] ? direct_splice_read+0xa90/0xa90 [ 74.844190][ T5458] ? fsnotify_perm+0x29e/0x450 [ 74.848958][ T5458] splice_direct_to_actor+0x39c/0xa60 [ 74.854956][ T5458] ? do_splice_direct+0x3a0/0x3a0 [ 74.859984][ T5458] ? pipe_to_sendpage+0x310/0x310 [ 74.865069][ T5458] do_splice_direct+0x268/0x3a0 [ 74.870190][ T5458] ? splice_direct_to_actor+0xa60/0xa60 [ 74.875739][ T5458] ? rcu_read_lock_any_held+0xb7/0x160 [ 74.881302][ T5458] do_sendfile+0x4f5/0xc20 [ 74.885710][ T5458] ? do_pwritev+0x300/0x300 [ 74.890195][ T5458] ? xfd_validate_state+0x2f/0xf0 [ 74.895229][ T5458] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 74.901225][ T5458] __se_sys_sendfile64+0x143/0x190 [ 74.906326][ T5458] ? __x64_sys_sendfile64+0xa0/0xa0 [ 74.911530][ T5458] ? syscall_enter_from_user_mode+0x32/0x230 [ 74.917518][ T5458] ? lockdep_hardirqs_on+0x98/0x140 [ 74.922736][ T5458] ? syscall_enter_from_user_mode+0x32/0x230 [ 74.928733][ T5458] do_syscall_64+0x41/0xc0 [ 74.933166][ T5458] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.939075][ T5458] RIP: 0033:0x7f96afe8c389 [ 74.943570][ T5458] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 74.963683][ T5458] RSP: 002b:00007f96b0b68168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 74.972079][ T5458] RAX: ffffffffffffffda RBX: 00007f96affabf80 RCX: 00007f96afe8c389 [ 74.980120][ T5458] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 74.988074][ T5458] RBP: 00007f96b0b681d0 R08: 0000000000000000 R09: 0000000000000000 [ 74.996730][ T5458] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 75.004709][ T5458] R13: 00007fff31153f5f R14: 00007f96b0b68300 R15: 0000000000022000 [ 75.013290][ T5458] [ 75.095530][ T27] audit: type=1804 audit(1687914462.770:5): pid=5464 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3445373218/syzkaller.3MoPBn/3/bus/file0" dev="overlay" ino=1939 res=1 errno=0 [ 75.114388][ T5464] FAULT_INJECTION: forcing a failure. [ 75.114388][ T5464] name failslab, interval 1, probability 0, space 0, times 0 [ 75.135821][ T5464] CPU: 0 PID: 5464 Comm: syz-executor.0 Not tainted 6.4.0-rc2-syzkaller #0 [ 75.144529][ T5464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 75.154859][ T5464] Call Trace: [ 75.158151][ T5464] [ 75.161111][ T5464] dump_stack_lvl+0x167/0x220 [ 75.165803][ T5464] ? nf_tcp_handle_invalid+0x4e0/0x4e0 [ 75.171357][ T5464] ? panic+0x540/0x540 [ 75.175437][ T5464] ? __might_sleep+0xc0/0xc0 [ 75.180226][ T5464] should_fail_ex+0x3aa/0x4e0 [ 75.184910][ T5464] should_failslab+0x9/0x20 [ 75.189596][ T5464] slab_pre_alloc_hook+0x59/0x2b0 [ 75.194754][ T5464] ? obj_cgroup_charge+0x21f/0x410 [ 75.200050][ T5464] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 75.205690][ T5464] __kmem_cache_alloc_node+0x4b/0x290 [ 75.211080][ T5464] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 75.216723][ T5464] __kmalloc_node+0xa7/0x230 [ 75.221328][ T5464] memcg_alloc_slab_cgroups+0x81/0x120 [ 75.226882][ T5464] slab_post_alloc_hook+0xe3/0x3a0 [ 75.232098][ T5464] __kmem_cache_alloc_node+0x14c/0x290 [ 75.237569][ T5464] ? alloc_pipe_info+0x1af/0x3f0 [ 75.242551][ T5464] ? alloc_pipe_info+0x1af/0x3f0 [ 75.247761][ T5464] __kmalloc+0xa8/0x230 [ 75.252026][ T5464] alloc_pipe_info+0x1af/0x3f0 [ 75.256808][ T5464] splice_direct_to_actor+0x8a8/0xa60 [ 75.262190][ T5464] ? __lock_acquire+0x1295/0x2000 [ 75.267235][ T5464] ? do_splice_direct+0x3a0/0x3a0 [ 75.272270][ T5464] ? pipe_to_sendpage+0x310/0x310 [ 75.277329][ T5464] do_splice_direct+0x268/0x3a0 [ 75.282282][ T5464] ? splice_direct_to_actor+0xa60/0xa60 [ 75.288023][ T5464] ? rcu_read_lock_any_held+0xb7/0x160 [ 75.293770][ T5464] do_sendfile+0x4f5/0xc20 [ 75.298223][ T5464] ? do_pwritev+0x300/0x300 [ 75.302815][ T5464] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 75.308909][ T5464] __se_sys_sendfile64+0x143/0x190 [ 75.314133][ T5464] ? __x64_sys_sendfile64+0xa0/0xa0 [ 75.319525][ T5464] ? syscall_enter_from_user_mode+0x32/0x230 [ 75.326225][ T5464] ? lockdep_hardirqs_on+0x98/0x140 [ 75.331884][ T5464] ? syscall_enter_from_user_mode+0x32/0x230 [ 75.337970][ T5464] do_syscall_64+0x41/0xc0 [ 75.342491][ T5464] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.348614][ T5464] RIP: 0033:0x7f96afe8c389 [ 75.353043][ T5464] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 75.372835][ T5464] RSP: 002b:00007f96b0b68168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 75.381784][ T5464] RAX: ffffffffffffffda RBX: 00007f96affabf80 RCX: 00007f96afe8c389 [ 75.389769][ T5464] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 75.398462][ T5464] RBP: 00007f96b0b681d0 R08: 0000000000000000 R09: 0000000000000000 [ 75.406717][ T5464] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 75.414962][ T5464] R13: 00007fff31153f5f R14: 00007f96b0b68300 R15: 0000000000022000 [ 75.423061][ T5464] [ 75.493184][ T27] audit: type=1804 audit(1687914463.170:6): pid=5484 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3445373218/syzkaller.3MoPBn/4/bus/file0" dev="overlay" ino=1939 res=1 errno=0 [ 75.519446][ T5484] FAULT_INJECTION: forcing a failure. [ 75.519446][ T5484] name failslab, interval 1, probability 0, space 0, times 0 [ 75.532854][ T5484] CPU: 1 PID: 5484 Comm: syz-executor.0 Not tainted 6.4.0-rc2-syzkaller #0 [ 75.541465][ T5484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 75.551701][ T5484] Call Trace: [ 75.554988][ T5484] [ 75.558975][ T5484] dump_stack_lvl+0x167/0x220 [ 75.563754][ T5484] ? nf_tcp_handle_invalid+0x4e0/0x4e0 [ 75.569307][ T5484] ? panic+0x540/0x540 [ 75.573393][ T5484] should_fail_ex+0x3aa/0x4e0 [ 75.578078][ T5484] should_failslab+0x9/0x20 [ 75.582606][ T5484] slab_pre_alloc_hook+0x59/0x2b0 [ 75.587643][ T5484] kmem_cache_alloc+0x52/0x2e0 [ 75.592449][ T5484] ? security_file_alloc+0x23/0x100 [ 75.597659][ T5484] security_file_alloc+0x23/0x100 [ 75.602777][ T5484] init_file+0x8f/0x1d0 [ 75.606942][ T5484] alloc_empty_backing_file+0x62/0xb0 [ 75.612320][ T5484] backing_file_open+0x1b/0xd0 [ 75.617094][ T5484] ovl_open_realfile+0x1d4/0x310 [ 75.622055][ T5484] ovl_read_iter+0xaa7/0xcf0 [ 75.626656][ T5484] ? do_syscall_64+0x41/0xc0 [ 75.631261][ T5484] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.637435][ T5484] ? ovl_llseek+0x620/0x620 [ 75.642400][ T5484] generic_file_splice_read+0x23a/0x5b0 [ 75.647974][ T5484] ? direct_splice_read+0xa90/0xa90 [ 75.653642][ T5484] ? fsnotify_perm+0x29e/0x450 [ 75.658523][ T5484] splice_direct_to_actor+0x39c/0xa60 [ 75.663954][ T5484] ? do_splice_direct+0x3a0/0x3a0 [ 75.669173][ T5484] ? pipe_to_sendpage+0x310/0x310 [ 75.674320][ T5484] do_splice_direct+0x268/0x3a0 [ 75.679200][ T5484] ? splice_direct_to_actor+0xa60/0xa60 [ 75.684857][ T5484] ? rcu_read_lock_any_held+0xb7/0x160 [ 75.690342][ T5484] do_sendfile+0x4f5/0xc20 [ 75.694797][ T5484] ? do_pwritev+0x300/0x300 [ 75.699323][ T5484] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 75.705315][ T5484] __se_sys_sendfile64+0x143/0x190 [ 75.710438][ T5484] ? __x64_sys_sendfile64+0xa0/0xa0 [ 75.715648][ T5484] ? syscall_enter_from_user_mode+0x32/0x230 [ 75.721725][ T5484] ? lockdep_hardirqs_on+0x98/0x140 [ 75.726950][ T5484] ? syscall_enter_from_user_mode+0x32/0x230 [ 75.733046][ T5484] do_syscall_64+0x41/0xc0 [ 75.737476][ T5484] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.743378][ T5484] RIP: 0033:0x7f96afe8c389 [ 75.747812][ T5484] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 75.767664][ T5484] RSP: 002b:00007f96b0b68168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 75.776107][ T5484] RAX: ffffffffffffffda RBX: 00007f96affabf80 RCX: 00007f96afe8c389 [ 75.784222][ T5484] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 75.792548][ T5484] RBP: 00007f96b0b681d0 R08: 0000000000000000 R09: 0000000000000000 [ 75.800619][ T5484] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 75.808606][ T5484] R13: 00007fff31153f5f R14: 00007f96b0b68300 R15: 0000000000022000 [ 75.816783][ T5484] [ 75.824462][ T5484] ================================================================== [ 75.832651][ T5484] BUG: KASAN: invalid-free in init_file+0x16d/0x1d0 [ 75.839256][ T5484] Free of addr ffff8880254e0400 by task syz-executor.0/5484 [ 75.846552][ T5484] [ 75.848882][ T5484] CPU: 1 PID: 5484 Comm: syz-executor.0 Not tainted 6.4.0-rc2-syzkaller #0 [ 75.857465][ T5484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 75.867522][ T5484] Call Trace: [ 75.870805][ T5484] [ 75.873743][ T5484] dump_stack_lvl+0x167/0x220 [ 75.878422][ T5484] ? nf_tcp_handle_invalid+0x4e0/0x4e0 [ 75.883881][ T5484] ? panic+0x540/0x540 [ 75.888039][ T5484] ? vprintk_emit+0x9f/0x150 [ 75.892634][ T5484] ? _printk+0xce/0x110 [ 75.896979][ T5484] ? init_file+0x16d/0x1d0 [ 75.901426][ T5484] print_report+0x163/0x540 [ 75.905940][ T5484] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 75.912025][ T5484] ? _raw_spin_unlock+0x40/0x40 [ 75.916972][ T5484] ? init_file+0x16d/0x1d0 [ 75.921568][ T5484] ? init_file+0x16d/0x1d0 [ 75.926080][ T5484] ? init_file+0x16d/0x1d0 [ 75.930498][ T5484] kasan_report_invalid_free+0xeb/0x100 [ 75.936029][ T5484] ? init_file+0x16d/0x1d0 [ 75.940423][ T5484] ____kasan_slab_free+0xfb/0x120 [ 75.945517][ T5484] kmem_cache_free+0x297/0x520 [ 75.950290][ T5484] ? init_file+0x16d/0x1d0 [ 75.954688][ T5484] init_file+0x16d/0x1d0 [ 75.958906][ T5484] alloc_empty_backing_file+0x62/0xb0 [ 75.964345][ T5484] backing_file_open+0x1b/0xd0 [ 75.969085][ T5484] ovl_open_realfile+0x1d4/0x310 [ 75.974086][ T5484] ovl_read_iter+0xaa7/0xcf0 [ 75.978744][ T5484] ? do_syscall_64+0x41/0xc0 [ 75.983308][ T5484] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.989348][ T5484] ? ovl_llseek+0x620/0x620 [ 75.993917][ T5484] generic_file_splice_read+0x23a/0x5b0 [ 75.999451][ T5484] ? direct_splice_read+0xa90/0xa90 [ 76.004801][ T5484] ? fsnotify_perm+0x29e/0x450 [ 76.009624][ T5484] splice_direct_to_actor+0x39c/0xa60 [ 76.014970][ T5484] ? do_splice_direct+0x3a0/0x3a0 [ 76.020054][ T5484] ? pipe_to_sendpage+0x310/0x310 [ 76.025142][ T5484] do_splice_direct+0x268/0x3a0 [ 76.029969][ T5484] ? splice_direct_to_actor+0xa60/0xa60 [ 76.035488][ T5484] ? rcu_read_lock_any_held+0xb7/0x160 [ 76.040945][ T5484] do_sendfile+0x4f5/0xc20 [ 76.045343][ T5484] ? do_pwritev+0x300/0x300 [ 76.049824][ T5484] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 76.055782][ T5484] __se_sys_sendfile64+0x143/0x190 [ 76.060870][ T5484] ? __x64_sys_sendfile64+0xa0/0xa0 [ 76.066124][ T5484] ? syscall_enter_from_user_mode+0x32/0x230 [ 76.072079][ T5484] ? lockdep_hardirqs_on+0x98/0x140 [ 76.077250][ T5484] ? syscall_enter_from_user_mode+0x32/0x230 [ 76.083295][ T5484] do_syscall_64+0x41/0xc0 [ 76.087774][ T5484] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.093651][ T5484] RIP: 0033:0x7f96afe8c389 [ 76.098217][ T5484] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 76.117890][ T5484] RSP: 002b:00007f96b0b68168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 76.126542][ T5484] RAX: ffffffffffffffda RBX: 00007f96affabf80 RCX: 00007f96afe8c389 [ 76.134493][ T5484] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 76.142615][ T5484] RBP: 00007f96b0b681d0 R08: 0000000000000000 R09: 0000000000000000 [ 76.150565][ T5484] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 76.158513][ T5484] R13: 00007fff31153f5f R14: 00007f96b0b68300 R15: 0000000000022000 [ 76.166480][ T5484] [ 76.169491][ T5484] [ 76.171794][ T5484] Allocated by task 5484: [ 76.176095][ T5484] kasan_set_track+0x4f/0x70 [ 76.180660][ T5484] __kasan_kmalloc+0x98/0xb0 [ 76.185222][ T5484] alloc_empty_backing_file+0x4d/0xb0 [ 76.190657][ T5484] backing_file_open+0x1b/0xd0 [ 76.195397][ T5484] ovl_open_realfile+0x1d4/0x310 [ 76.200310][ T5484] ovl_read_iter+0xaa7/0xcf0 [ 76.204887][ T5484] generic_file_splice_read+0x23a/0x5b0 [ 76.210498][ T5484] splice_direct_to_actor+0x39c/0xa60 [ 76.216139][ T5484] do_splice_direct+0x268/0x3a0 [ 76.220967][ T5484] do_sendfile+0x4f5/0xc20 [ 76.225625][ T5484] __se_sys_sendfile64+0x143/0x190 [ 76.230718][ T5484] do_syscall_64+0x41/0xc0 [ 76.235376][ T5484] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.242308][ T5484] [ 76.244619][ T5484] Last potentially related work creation: [ 76.250351][ T5484] kasan_save_stack+0x3f/0x60 [ 76.255023][ T5484] __kasan_record_aux_stack+0xb0/0xc0 [ 76.260563][ T5484] kvfree_call_rcu+0x109/0x8d0 [ 76.265746][ T5484] drop_sysctl_table+0x2d2/0x400 [ 76.270919][ T5484] drop_sysctl_table+0x2df/0x400 [ 76.276100][ T5484] unregister_sysctl_table+0x71/0x110 [ 76.281533][ T5484] mpls_dev_sysctl_unregister+0x7f/0xb0 [ 76.287340][ T5484] mpls_dev_notify+0x457/0x510 [ 76.293119][ T5484] notifier_call_chain+0x120/0x260 [ 76.298208][ T5484] unregister_netdevice_many_notify+0xbd4/0x14d0 [ 76.304511][ T5484] default_device_exit_batch+0x3da/0x540 [ 76.310127][ T5484] cleanup_net+0x6d4/0xa30 [ 76.315082][ T5484] process_one_work+0x797/0xe20 [ 76.319909][ T5484] worker_thread+0x8c9/0xfd0 [ 76.324578][ T5484] kthread+0x27c/0x2f0 [ 76.329007][ T5484] ret_from_fork+0x1f/0x30 [ 76.333399][ T5484] [ 76.335703][ T5484] The buggy address belongs to the object at ffff8880254e0400 [ 76.335703][ T5484] which belongs to the cache kmalloc-512 of size 512 [ 76.349903][ T5484] The buggy address is located 0 bytes inside of [ 76.349903][ T5484] 472-byte region [ffff8880254e0400, ffff8880254e05d8) [ 76.363157][ T5484] [ 76.365462][ T5484] The buggy address belongs to the physical page: [ 76.371937][ T5484] page:ffffea0000953800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x254e0 [ 76.382150][ T5484] head:ffffea0000953800 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 76.391134][ T5484] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 76.399176][ T5484] page_type: 0xffffffff() [ 76.403484][ T5484] raw: 00fff00000010200 ffff888011041c80 dead000000000100 dead000000000122 [ 76.412216][ T5484] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 76.421652][ T5484] page dumped because: kasan: bad access detected [ 76.428389][ T5484] page_owner tracks the page as allocated [ 76.434278][ T5484] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2300, tgid 2300 (kworker/u4:3), ts 7895328649, free_ts 0 [ 76.455002][ T5484] post_alloc_hook+0x1e6/0x210 [ 76.459751][ T5484] get_page_from_freelist+0x321c/0x33a0 [ 76.465455][ T5484] __alloc_pages+0x255/0x670 [ 76.470107][ T5484] alloc_slab_page+0x6a/0x160 [ 76.474756][ T5484] new_slab+0x84/0x2f0 [ 76.478797][ T5484] ___slab_alloc+0xa85/0x10a0 [ 76.483532][ T5484] __kmem_cache_alloc_node+0x1b8/0x290 [ 76.489065][ T5484] kmalloc_trace+0x2a/0xe0 [ 76.493461][ T5484] alloc_bprm+0x52/0x7c0 [ 76.497681][ T5484] kernel_execve+0x76/0x820 [ 76.502157][ T5484] call_usermodehelper_exec_async+0x200/0x310 [ 76.508203][ T5484] ret_from_fork+0x1f/0x30 [ 76.512606][ T5484] page_owner free stack trace missing [ 76.517946][ T5484] [ 76.520250][ T5484] Memory state around the buggy address: [ 76.526201][ T5484] ffff8880254e0300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.534421][ T5484] ffff8880254e0380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.542542][ T5484] >ffff8880254e0400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 76.550595][ T5484] ^ [ 76.554647][ T5484] ffff8880254e0480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 76.565137][ T5484] ffff8880254e0500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 76.573526][ T5484] ================================================================== [ 76.581905][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 76.588038][ T26] cfg80211: failed to load regulatory.db [ 76.597699][ T5484] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 76.604996][ T5484] CPU: 0 PID: 5484 Comm: syz-executor.0 Not tainted 6.4.0-rc2-syzkaller #0 [ 76.613580][ T5484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 76.625373][ T5484] Call Trace: [ 76.628656][ T5484] [ 76.631707][ T5484] dump_stack_lvl+0x167/0x220 [ 76.636390][ T5484] ? nf_tcp_handle_invalid+0x4e0/0x4e0 [ 76.642208][ T5484] ? panic+0x540/0x540 [ 76.646282][ T5484] ? preempt_schedule_common+0x83/0xc0 [ 76.651758][ T5484] panic+0x21e/0x540 [ 76.655746][ T5484] ? __memcpy_flushcache+0x1a0/0x1a0 [ 76.661035][ T5484] ? _raw_spin_unlock_irqrestore+0x12c/0x140 [ 76.667373][ T5484] ? _raw_spin_unlock+0x40/0x40 [ 76.672376][ T5484] ? print_report+0x4fb/0x540 [ 76.677074][ T5484] ? init_file+0x16d/0x1d0 [ 76.681494][ T5484] check_panic_on_warn+0x58/0x70 [ 76.686438][ T5484] ? init_file+0x16d/0x1d0 [ 76.690862][ T5484] end_report+0x63/0x110 [ 76.695117][ T5484] kasan_report_invalid_free+0xf6/0x100 [ 76.700672][ T5484] ? init_file+0x16d/0x1d0 [ 76.705088][ T5484] ____kasan_slab_free+0xfb/0x120 [ 76.710116][ T5484] kmem_cache_free+0x297/0x520 [ 76.715007][ T5484] ? init_file+0x16d/0x1d0 [ 76.719451][ T5484] init_file+0x16d/0x1d0 [ 76.723691][ T5484] alloc_empty_backing_file+0x62/0xb0 [ 76.729043][ T5484] backing_file_open+0x1b/0xd0 [ 76.733797][ T5484] ovl_open_realfile+0x1d4/0x310 [ 76.738848][ T5484] ovl_read_iter+0xaa7/0xcf0 [ 76.743414][ T5484] ? do_syscall_64+0x41/0xc0 [ 76.748162][ T5484] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.754215][ T5484] ? ovl_llseek+0x620/0x620 [ 76.759396][ T5484] generic_file_splice_read+0x23a/0x5b0 [ 76.764929][ T5484] ? direct_splice_read+0xa90/0xa90 [ 76.770200][ T5484] ? fsnotify_perm+0x29e/0x450 [ 76.775113][ T5484] splice_direct_to_actor+0x39c/0xa60 [ 76.780474][ T5484] ? do_splice_direct+0x3a0/0x3a0 [ 76.785482][ T5484] ? pipe_to_sendpage+0x310/0x310 [ 76.790490][ T5484] do_splice_direct+0x268/0x3a0 [ 76.795584][ T5484] ? splice_direct_to_actor+0xa60/0xa60 [ 76.801121][ T5484] ? rcu_read_lock_any_held+0xb7/0x160 [ 76.806934][ T5484] do_sendfile+0x4f5/0xc20 [ 76.811344][ T5484] ? do_pwritev+0x300/0x300 [ 76.815837][ T5484] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 76.821881][ T5484] __se_sys_sendfile64+0x143/0x190 [ 76.826973][ T5484] ? __x64_sys_sendfile64+0xa0/0xa0 [ 76.832242][ T5484] ? syscall_enter_from_user_mode+0x32/0x230 [ 76.838205][ T5484] ? lockdep_hardirqs_on+0x98/0x140 [ 76.843479][ T5484] ? syscall_enter_from_user_mode+0x32/0x230 [ 76.849790][ T5484] do_syscall_64+0x41/0xc0 [ 76.854285][ T5484] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.860257][ T5484] RIP: 0033:0x7f96afe8c389 [ 76.864658][ T5484] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 76.884941][ T5484] RSP: 002b:00007f96b0b68168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 76.893519][ T5484] RAX: ffffffffffffffda RBX: 00007f96affabf80 RCX: 00007f96afe8c389 [ 76.901525][ T5484] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 76.909715][ T5484] RBP: 00007f96b0b681d0 R08: 0000000000000000 R09: 0000000000000000 [ 76.917712][ T5484] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 76.925667][ T5484] R13: 00007fff31153f5f R14: 00007f96b0b68300 R15: 0000000000022000 [ 76.933748][ T5484] [ 76.936830][ T5484] Kernel Offset: disabled [ 76.941142][ T5484] Rebooting in 86400 seconds..