ci-upstream-rust-kasan-gce/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-rust-kasan-gce/syz-executor2236404592
<...>
Warning: Permanently added '10.128.1.145' (ED25519) to the list of known hosts.
execve("ci-upstream-rust-kasan-gce/syz-executor2236404592", ["ci-upstream-rust-kasan-gce/syz-executor2236404592"], 0x7ffe60225930 /* 10 vars */) = 0
brk(NULL) = 0x5555610dd000
brk(0x5555610ddd80) = 0x5555610ddd80
arch_prctl(ARCH_SET_FS, 0x5555610dd400) = 0
set_tid_address(0x5555610dd6d0) = 5650
set_robust_list(0x5555610dd6e0, 24) = 0
rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-rust-kasan-gce/syz-executor2236404592", 4096) = 55
getrandom("\xe2\xf2\x07\x16\xb9\xda\xb6\x85", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x5555610ddd80
brk(0x5555610fed80) = 0x5555610fed80
brk(0x5555610ff000) = 0x5555610ff000
mprotect(0x7f54dcdf5000, 20480, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-rust-kasan-gce/strace-static-x86_64: Process 5651 attached
, child_tidptr=0x5555610dd6d0) = 5651
[pid 5651] set_robust_list(0x5555610dd6e0, 24) = 0
[pid 5651] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid 5650] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid 5651] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5651] setpgid(0, 0) = 0
[pid 5651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5651] write(3, "1000", 4) = 4
[pid 5651] close(3) = 0
[pid 5651] write(1, "executing program\n", 18) = 18
executing program
[pid 5651] mkdirat(AT_FDCWD, "./debug", 0777) = 0
[pid 5651] mount(NULL, "./debug", "debugfs", 0, NULL) = 0
[pid 5651] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR) = 3
[pid 5651] write(3, "+p", 2) = 2
[pid 5651] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 4
[pid 5651] ioctl(4, USB_RAW_IOCTL_INIT, 0x7ffc917a12c0) = 0
[pid 5651] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0
[pid 5651] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc917a12c0) = 0
[pid 5651] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc917a12c0) = 0
[pid 5651] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc917a12c0) = 0
[pid 5651] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc917a12c0) = 0
[pid 5651] ioctl(4, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc917a02b0) = 18
[pid 5651] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc917a12c0) = 0
syzkaller login: [ 85.257567][ T995] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[pid 5651] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc917a12c0) = 0
[pid 5651] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc917a12c0) = 0
[pid 5651] ioctl(4, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc917a02b0) = 18
[pid 5651] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc917a12c0) = 0
[pid 5651] ioctl(4, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc917a02b0) = 9
[pid 5651] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc917a12c0) = 0
[pid 5651] ioctl(4, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc917a02b0) = 32
[pid 5651] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc917a12c0) = 0
[pid 5651] ioctl(4, USB_RAW_IOCTL_VBUS_DRAW, 0x32) = 0
[pid 5651] ioctl(4, USB_RAW_IOCTL_CONFIGURE, 0) = 0
[pid 5651] ioctl(4, USB_RAW_IOCTL_EP_ENABLE, 0x7f54dcdfbb4c) = 0
[pid 5651] ioctl(4, USB_RAW_IOCTL_EP_ENABLE, 0x7f54dcdfbb5c) = 1
[pid 5651] ioctl(4, USB_RAW_IOCTL_EP0_READ, 0x7ffc917a02b0) = 0
[ 85.409428][ T995] usb 1-1: New USB device found: idVendor=072f, idProduct=2200, bcdDevice=1.00
[ 85.449208][ T995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[pid 5651] ioctl(4, USB_RAW_IOCTL_EP_READ, 0x7ffc917a12f0) = 10
[pid 5651] ioctl(4, USB_RAW_IOCTL_EP_WRITE, 0x7ffc917a12f0) = 0
[pid 5651] ioctl(4, USB_RAW_IOCTL_EP_READ, 0x7ffc917a12f0) = -1 EOVERFLOW (Value too large for defined data type)
[ 86.084888][ T5647] eth0: xmit ffff8880274805f0 42:01:0a:80:00:01
[ 86.084928][ T5647] Added buffer head 21 to ffff888029fd6a00
[ 86.084964][ C1] virtqueue callback for ffff888029fd6a00 (ffffffff86dec870)
[ 86.085005][ C1] Sent skb ffff8880274805f0
[ 86.085026][ C1] No more buffers in queue
[ 86.085044][ C1] No more buffers in queue
[ 86.085909][ C0] virtqueue callback for ffff888029fd7000 (ffffffff86dec730)
[ 86.085945][ C0] No more buffers in queue
[ 86.086511][ C1] PN533 RX: 83 7d 7e 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086526][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086538][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086550][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086562][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086573][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086573][ C0] Receiving skb proto 0x0800 len 52 type 0
[ 86.086584][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086596][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086601][ C0] No more buffers in queue
[ 86.086608][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086618][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086628][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086639][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086649][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086659][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086670][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086682][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086693][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086705][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086715][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086727][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086739][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086751][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086763][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086774][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086785][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086795][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086806][ C1] PN533 RX: 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086817][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086826][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086838][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086850][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086862][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086873][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086884][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086896][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086907][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086917][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086929][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086939][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086959][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086969][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086980][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086991][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.086999][ C1] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.087023][ C1] ==================================================================
[ 86.087032][ C1] BUG: KASAN: slab-out-of-bounds in hex_dump_to_buffer+0x36c/0xd70
[ 86.087081][ C1] Read of size 1 at addr ffff888027737a00 by task swapper/1/0
[ 86.087099][ C1]
[ 86.087123][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full)
[ 86.087147][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 86.087169][ C1] Call Trace:
[ 86.087178][ C1]
[ 86.087188][ C1] dump_stack_lvl+0xe8/0x150
[ 86.087220][ T5647] eth0: xmit ffff888027483c70 42:01:0a:80:00:01
[ 86.087222][ C1] print_address_description+0x55/0x1e0
[ 86.087251][ T5647] Added buffer head 17 to ffff888029fd6e00
[ 86.087259][ C1] ? hex_dump_to_buffer+0x36c/0xd70
[ 86.087276][ C0] virtqueue callback for ffff888029fd6e00 (ffffffff86dec870)
[ 86.087296][ C1] print_report+0x58/0x70
[ 86.087327][ C1] kasan_report+0x117/0x150
[ 86.087368][ C0] Sent skb ffff888027483c70
[ 86.087361][ C1] ? hex_dump_to_buffer+0x36c/0xd70
[ 86.087385][ C0] No more buffers in queue
[ 86.087401][ C0] No more buffers in queue
[ 86.087397][ C1] hex_dump_to_buffer+0x36c/0xd70
[ 86.087433][ C1] print_hex_dump+0x16b/0x2b0
[ 86.087475][ C1] ? __pfx_print_hex_dump+0x10/0x10
[ 86.087512][ C1] ? kmem_cache_alloc_node_noprof+0x1f4/0x600
[ 86.087542][ C1] ? __alloc_skb+0x27a/0x7a0
[ 86.087559][ C1] ? __alloc_skb+0x27a/0x7a0
[ 86.087592][ C1] pn533_recv_frame+0x5f6/0x6d0
[ 86.087610][ C1] __usb_hcd_giveback_urb+0x378/0x540
[ 86.087638][ C1] dummy_timer+0xa9a/0x4ce0
[ 86.087677][ C1] ? __pfx_dummy_timer+0x10/0x10
[ 86.087694][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 86.087714][ C1] ? __pfx_dummy_timer+0x10/0x10
[ 86.087730][ C1] __hrtimer_run_queues+0x3bc/0xa10
[ 86.087751][ C1] hrtimer_run_softirq+0x1e3/0x2e0
[ 86.087768][ C1] handle_softirqs+0x265/0x8d0
[ 86.087792][ C1] __irq_exit_rcu+0xc6/0x220
[ 86.087811][ C1] irq_exit_rcu+0x9/0x30
[ 86.087828][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 86.087848][ C1]
[ 86.087853][ C1]
[ 86.087859][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 86.087877][ C1] RIP: 0010:finish_task_switch+0x413/0xc60
[ 86.087898][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 c7 56 89 0a e8 22 92 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 18 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[ 86.087912][ C1] RSP: 0018:ffffc900001c7be0 EFLAGS: 00000206
[ 86.087932][ C1] RAX: 000000000008812b RBX: ffff8880b833d3a0 RCX: 8000000000000001
[ 86.087949][ C1] RDX: 0000000000000000 RSI: ffffffff8e9ef560 RDI: ffffffff8cb01080
[ 86.087960][ C1] RBP: ffffc900001c7c30 R08: ffffffff91e104bf R09: 1ffffffff23c2097
[ 86.087972][ C1] R10: dffffc0000000000 R11: fffffbfff23c2098 R12: ffff88801fa99f40
[ 86.087984][ C1] R13: ffff88801fa99f40 R14: dffffc0000000000 R15: 1ffff11017067a74
[ 86.088006][ C1] __schedule+0x17e5/0x5830
[ 86.088032][ C1] ? ct_kernel_exit_state+0x2b/0x80
[ 86.088054][ C1] ? ct_nmi_exit+0xf1/0x1d0
[ 86.088074][ C1] ? trace_irq_disable+0x3b/0x140
[ 86.088095][ C1] ? __pfx___schedule+0x10/0x10
[ 86.088133][ C0] virtqueue callback for ffff888029fd7000 (ffffffff86dec730)
[ 86.088145][ C1] ? lockdep_hardirqs_on+0x7b/0x110
[ 86.088160][ C0] No more buffers in queue
[ 86.088179][ C1] ? tick_nohz_idle_exit+0x34f/0x470
[ 86.088208][ C1] ? lockdep_hardirqs_on+0x7b/0x110
[ 86.088229][ C0] Receiving skb proto 0x0800 len 52 type 0
[ 86.088238][ C1] schedule_idle+0x51/0x90
[ 86.088252][ C0] No more buffers in queue
[ 86.088265][ C1] do_idle+0x4ad/0x540
[ 86.088287][ C1] ? __pfx_do_idle+0x10/0x10
[ 86.088309][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 86.088339][ C1] cpu_startup_entry+0x43/0x60
[ 86.088361][ C1] start_secondary+0x101/0x110
[ 86.088381][ C1] common_startup_64+0x13e/0x157
[ 86.088419][ C1]
[ 86.088427][ C1]
[ 86.088432][ C1] Allocated by task 0:
[ 86.088442][ C1] kasan_save_track+0x3f/0x90
[ 86.088472][ C1] __kasan_slab_alloc+0x6c/0x80
[ 86.088490][ C1] kmem_cache_alloc_node_noprof+0x34f/0x600
[ 86.088506][ C1] __alloc_skb+0x27a/0x7a0
[ 86.088518][ C1] pn533_recv_response+0xc4/0x230
[ 86.088537][ C1] __usb_hcd_giveback_urb+0x378/0x540
[ 86.088560][ C1] dummy_timer+0xa9a/0x4ce0
[ 86.088574][ C1] __hrtimer_run_queues+0x3bc/0xa10
[ 86.088586][ C1] hrtimer_run_softirq+0x1e3/0x2e0
[ 86.088600][ C1] handle_softirqs+0x265/0x8d0
[ 86.088616][ C1] __irq_exit_rcu+0xc6/0x220
[ 86.088633][ C1] irq_exit_rcu+0x9/0x30
[ 86.088649][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 86.088667][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 86.088682][ C1]
[ 86.088685][ C1] The buggy address belongs to the object at ffff888027737740
[ 86.088685][ C1] which belongs to the cache skbuff_small_head of size 704
[ 86.088697][ C1] The buggy address is located 0 bytes to the right of
[ 86.088697][ C1] allocated 704-byte region [ffff888027737740, ffff888027737a00)
[ 86.088713][ C1]
[ 86.088717][ C1] The buggy address belongs to the physical page:
[ 86.088734][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27734
[ 86.088754][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 86.088766][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 86.088784][ C1] page_type: f5(slab)
[ 86.088797][ C1] raw: 00fff00000000040 ffff888140a9bdc0 dead000000000100 dead000000000122
[ 86.088810][ C1] raw: 0000000000000000 0000000200130013 00000000f5000000 0000000000000000
[ 86.088825][ C1] head: 00fff00000000040 ffff888140a9bdc0 dead000000000100 dead000000000122
[ 86.088838][ C1] head: 0000000000000000 0000000200130013 00000000f5000000 0000000000000000
[ 86.088851][ C1] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[ 86.088864][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 86.088872][ C1] page dumped because: kasan: bad access detected
[ 86.088883][ C1] page_owner tracks the page as allocated
[ 86.088888][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5650, tgid 5650 (syz-executor223), ts 84263979260
[ 86.088913][ C1] post_alloc_hook+0x1f9/0x250
[ 86.088927][ C1] prep_new_page+0x22/0xb0
[ 86.088942][ C1] get_page_from_freelist+0x22a1/0x22e0
[ 86.088965][ C1] __alloc_frozen_pages_noprof+0x211/0x450
[ 86.088983][ C1] allocate_slab+0x7d/0x5e0
[ 86.089003][ C1] refill_objects+0x2d5/0x350
[ 86.089024][ C1] __pcs_replace_empty_main+0x2c8/0x6c0
[ 86.089044][ C1] kmem_cache_alloc_node_noprof+0x432/0x600
[ 86.089059][ C1] __alloc_skb+0x27a/0x7a0
[ 86.089071][ C1] napi_alloc_skb+0x86/0xaf0
[ 86.089084][ C1] page_to_skb+0x240/0x1780
[ 86.089106][ C1] receive_buf+0x720/0x1b60
[ 86.089126][ C1] virtnet_poll+0x22bf/0x3100
[ 86.089146][ C1] __napi_poll+0xaa/0x330
[ 86.089167][ C1] net_rx_action+0x61d/0xf50
[ 86.089180][ C1] handle_softirqs+0x265/0x8d0
[ 86.089199][ C1] page last free pid 5317 tgid 5317 ts 54559667751 stack trace:
[ 86.089210][ C1] __free_frozen_pages+0xd1a/0xe10
[ 86.089224][ C1] __slab_free+0x269/0x2c0
[ 86.089239][ C1] qlist_free_all+0x99/0x100
[ 86.089255][ C1] kasan_quarantine_reduce+0x148/0x160
[ 86.089272][ C1] __kasan_slab_alloc+0x22/0x80
[ 86.089291][ C1] kmem_cache_alloc_noprof+0x2b4/0x600
[ 86.089305][ C1] vm_area_alloc+0x24/0x140
[ 86.089317][ C1] mmap_region+0x18e8/0x2820
[ 86.089337][ C1] do_mmap+0xe0a/0x1300
[ 86.089357][ C1] vm_mmap_pgoff+0x27a/0x520
[ 86.089371][ C1] ksys_mmap_pgoff+0x4dc/0x760
[ 86.089392][ C1] do_syscall_64+0x16a/0x530
[ 86.089411][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.089425][ C1]
[ 86.089428][ C1] Memory state around the buggy address:
[ 86.089436][ C1] ffff888027737900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.089446][ C1] ffff888027737980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 86.089456][ C1] >ffff888027737a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 86.089463][ C1] ^
[ 86.089471][ C1] ffff888027737a80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 86.089481][ C1] ffff888027737b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 86.089489][ C1] ==================================================================
[ 86.089501][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 87.294567][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full)
[ 87.303517][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 87.313604][ C1] Call Trace:
[ 87.316938][ C1]
[ 87.319815][ C1] vpanic+0x26f/0x710
[ 87.323844][ C1] panic+0xc5/0xd0
[ 87.327596][ C1] ? __pfx_panic+0x10/0x10
[ 87.332129][ C1] ? hex_dump_to_buffer+0x36c/0xd70
[ 87.337353][ C1] ? rcu_is_watching+0x16/0xb0
[ 87.342143][ C1] ? hex_dump_to_buffer+0x36c/0xd70
[ 87.347371][ C1] ? hex_dump_to_buffer+0x36c/0xd70
[ 87.352609][ C1] check_panic_on_warn+0x89/0xb0
[ 87.357568][ C1] ? hex_dump_to_buffer+0x36c/0xd70
[ 87.362792][ C1] end_report+0x73/0x170
[ 87.367057][ C1] ? hex_dump_to_buffer+0x36c/0xd70
[ 87.372279][ C1] kasan_report+0x128/0x150
[ 87.376804][ C1] ? hex_dump_to_buffer+0x36c/0xd70
[ 87.382028][ C1] hex_dump_to_buffer+0x36c/0xd70
[ 87.387101][ C1] print_hex_dump+0x16b/0x2b0
[ 87.391804][ C1] ? __pfx_print_hex_dump+0x10/0x10
[ 87.397051][ C1] ? kmem_cache_alloc_node_noprof+0x1f4/0x600
[ 87.403165][ C1] ? __alloc_skb+0x27a/0x7a0
[ 87.407777][ C1] ? __alloc_skb+0x27a/0x7a0
[ 87.412391][ C1] pn533_recv_frame+0x5f6/0x6d0
[ 87.417255][ C1] __usb_hcd_giveback_urb+0x378/0x540
[ 87.422661][ C1] dummy_timer+0xa9a/0x4ce0
[ 87.427203][ C1] ? __pfx_dummy_timer+0x10/0x10
[ 87.432153][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 87.437978][ C1] ? __pfx_dummy_timer+0x10/0x10
[ 87.442929][ C1] __hrtimer_run_queues+0x3bc/0xa10
[ 87.448150][ C1] hrtimer_run_softirq+0x1e3/0x2e0
[ 87.453293][ C1] handle_softirqs+0x265/0x8d0
[ 87.458078][ C1] __irq_exit_rcu+0xc6/0x220
[ 87.462774][ C1] irq_exit_rcu+0x9/0x30
[ 87.467034][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 87.472687][ C1]
[ 87.475639][ C1]
[ 87.478585][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 87.484581][ C1] RIP: 0010:finish_task_switch+0x413/0xc60
[ 87.490416][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 c7 56 89 0a e8 22 92 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 18 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[ 87.510141][ C1] RSP: 0018:ffffc900001c7be0 EFLAGS: 00000206
[ 87.516226][ C1] RAX: 000000000008812b RBX: ffff8880b833d3a0 RCX: 8000000000000001
[ 87.524208][ C1] RDX: 0000000000000000 RSI: ffffffff8e9ef560 RDI: ffffffff8cb01080
[ 87.532190][ C1] RBP: ffffc900001c7c30 R08: ffffffff91e104bf R09: 1ffffffff23c2097
[ 87.540173][ C1] R10: dffffc0000000000 R11: fffffbfff23c2098 R12: ffff88801fa99f40
[ 87.548159][ C1] R13: ffff88801fa99f40 R14: dffffc0000000000 R15: 1ffff11017067a74
[ 87.556166][ C1] __schedule+0x17e5/0x5830
[ 87.560699][ C1] ? ct_kernel_exit_state+0x2b/0x80
[ 87.565918][ C1] ? ct_nmi_exit+0xf1/0x1d0
[ 87.570453][ C1] ? trace_irq_disable+0x3b/0x140
[ 87.575502][ C1] ? __pfx___schedule+0x10/0x10
[ 87.580372][ C1] ? lockdep_hardirqs_on+0x7b/0x110
[ 87.585595][ C1] ? tick_nohz_idle_exit+0x34f/0x470
[ 87.590901][ C1] ? lockdep_hardirqs_on+0x7b/0x110
[ 87.596205][ C1] schedule_idle+0x51/0x90
[ 87.600657][ C1] do_idle+0x4ad/0x540
[ 87.604744][ C1] ? __pfx_do_idle+0x10/0x10
[ 87.609376][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 87.615203][ C1] cpu_startup_entry+0x43/0x60
[ 87.619985][ C1] start_secondary+0x101/0x110
[ 87.624765][ C1] common_startup_64+0x13e/0x157
[ 87.629731][ C1]
[ 87.633352][ C1] Kernel Offset: disabled
[ 87.637692][ C1] Rebooting in 86400 seconds..