Warning: Permanently added '10.128.1.229' (ED25519) to the list of known hosts. 2024/09/21 05:18:02 ignoring optional flag "sandboxArg"="0" 2024/09/21 05:18:02 parsed 1 programs 2024/09/21 05:18:05 executed programs: 0 [ 62.324957][ T2598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.042193][ T2604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.051577][ T2604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.060645][ T2604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.073177][ T2604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.052471][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.060548][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.077547][ T1185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.085645][ T1185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.303816][ T3325] loop0: detected capacity change from 0 to 32768 [ 70.322239][ T3325] ================================================================== [ 70.330364][ T3325] BUG: KASAN: slab-out-of-bounds in diWrite+0xac8/0x14a0 [ 70.337438][ T3325] Write of size 32 at addr ffff88811f4e90c0 by task syz-executor.0/3325 [ 70.345860][ T3325] [ 70.348223][ T3325] CPU: 1 UID: 0 PID: 3325 Comm: syz-executor.0 Not tainted 6.11.0-syzkaller #0 [ 70.357181][ T3325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 70.367274][ T3325] Call Trace: [ 70.370583][ T3325] [ 70.373516][ T3325] dump_stack_lvl+0x231/0x330 [ 70.378290][ T3325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.383515][ T3325] ? __pfx__printk+0x10/0x10 [ 70.388399][ T3325] ? _printk+0xd5/0x120 [ 70.392872][ T3325] ? __virt_addr_valid+0x169/0x380 [ 70.398014][ T3325] print_report+0x169/0x550 [ 70.402643][ T3325] ? __virt_addr_valid+0x169/0x380 [ 70.407817][ T3325] ? __virt_addr_valid+0x2c1/0x380 [ 70.412956][ T3325] ? __phys_addr+0x90/0x130 [ 70.417579][ T3325] ? diWrite+0xac8/0x14a0 [ 70.421928][ T3325] kasan_report+0x143/0x180 [ 70.426458][ T3325] ? diWrite+0xac8/0x14a0 [ 70.430798][ T3325] kasan_check_range+0x282/0x290 [ 70.436037][ T3325] ? diWrite+0xac8/0x14a0 [ 70.440381][ T3325] __asan_memcpy+0x40/0x70 [ 70.444807][ T3325] diWrite+0xac8/0x14a0 [ 70.448973][ T3325] txCommit+0xa1a/0x6a50 [ 70.453222][ T3325] ? add_index+0x30e/0x1400 [ 70.457743][ T3325] ? __pfx_add_index+0x10/0x10 [ 70.462657][ T3325] ? __pfx_txCommit+0x10/0x10 [ 70.467601][ T3325] ? rcu_is_watching+0x1f/0xa0 [ 70.472375][ T3325] ? __mark_inode_dirty+0x33e/0xc70 [ 70.477668][ T3325] jfs_readdir+0x27a0/0x4500 [ 70.482308][ T3325] ? __pfx_jfs_readdir+0x10/0x10 [ 70.487387][ T3325] ? down_write+0x12e/0x190 [ 70.491926][ T3325] ? __pfx_down_write+0x10/0x10 [ 70.496791][ T3325] ? do_sys_openat2+0x17a/0x1d0 [ 70.501678][ T3325] ? __pfx_jfs_readdir+0x10/0x10 [ 70.506627][ T3325] wrap_directory_iterator+0x91/0xd0 [ 70.512009][ T3325] iterate_dir+0x1c8/0x580 [ 70.516432][ T3325] __se_sys_getdents64+0x1c5/0x470 [ 70.521639][ T3325] ? __pfx___se_sys_getdents64+0x10/0x10 [ 70.527271][ T3325] ? __pfx_filldir64+0x10/0x10 [ 70.532049][ T3325] ? switch_fpu_return+0x10f/0x180 [ 70.537252][ T3325] do_syscall_64+0x8d/0x190 [ 70.541764][ T3325] ? clear_bhb_loop+0x35/0x90 [ 70.546540][ T3325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.552457][ T3325] RIP: 0033:0x7f8fca8bdea9 [ 70.556881][ T3325] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 70.576776][ T3325] RSP: 002b:00007f8fca43f0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 70.585393][ T3325] RAX: ffffffffffffffda RBX: 00007f8fca9ebf80 RCX: 00007f8fca8bdea9 [ 70.593368][ T3325] RDX: 000000000000005d RSI: 00000000200002c0 RDI: 0000000000000005 [ 70.601429][ T3325] RBP: 00007f8fca90a4a4 R08: 0000000000000000 R09: 0000000000000000 [ 70.609494][ T3325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.617479][ T3325] R13: 0000000000000006 R14: 00007f8fca9ebf80 R15: 00007fff9255bc28 [ 70.625464][ T3325] [ 70.628485][ T3325] [ 70.630901][ T3325] Allocated by task 3323: [ 70.635238][ T3325] kasan_save_track+0x3f/0x80 [ 70.639926][ T3325] __kasan_slab_alloc+0x66/0x80 [ 70.644894][ T3325] kmem_cache_alloc_noprof+0x12b/0x350 [ 70.650555][ T3325] vm_area_alloc+0xea/0x1b0 [ 70.655067][ T3325] mmap_region+0xcc9/0x1f10 [ 70.659580][ T3325] do_mmap+0x8e6/0xff0 [ 70.663770][ T3325] vm_mmap_pgoff+0x1d7/0x3a0 [ 70.668921][ T3325] ksys_mmap_pgoff+0x367/0x4b0 [ 70.673721][ T3325] do_syscall_64+0x8d/0x190 [ 70.678246][ T3325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.684160][ T3325] [ 70.686786][ T3325] Freed by task 15: [ 70.690772][ T3325] kasan_save_track+0x3f/0x80 [ 70.695716][ T3325] kasan_save_free_info+0x40/0x50 [ 70.700896][ T3325] __kasan_slab_free+0x59/0x70 [ 70.705952][ T3325] kmem_cache_free+0x189/0x480 [ 70.710924][ T3325] vm_area_free_rcu_cb+0x9a/0xd0 [ 70.715885][ T3325] rcu_core+0xc96/0x1510 [ 70.720220][ T3325] handle_softirqs+0x1b5/0x570 [ 70.724999][ T3325] run_ksoftirqd+0x28/0x40 [ 70.729422][ T3325] smpboot_thread_fn+0x460/0x8e0 [ 70.734379][ T3325] kthread+0x290/0x300 [ 70.738538][ T3325] ret_from_fork+0x4b/0x80 [ 70.742961][ T3325] ret_from_fork_asm+0x1a/0x30 [ 70.747771][ T3325] [ 70.750201][ T3325] The buggy address belongs to the object at ffff88811f4e9000 [ 70.750201][ T3325] which belongs to the cache vma_lock of size 152 [ 70.764094][ T3325] The buggy address is located 40 bytes to the right of [ 70.764094][ T3325] allocated 152-byte region [ffff88811f4e9000, ffff88811f4e9098) [ 70.779123][ T3325] [ 70.781450][ T3325] The buggy address belongs to the physical page: [ 70.788050][ T3325] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88811f4e9d80 pfn:0x11f4e9 [ 70.798299][ T3325] flags: 0x200000000000200(workingset|node=0|zone=2) [ 70.805015][ T3325] page_type: 0xfdffffff(slab) [ 70.809734][ T3325] raw: 0200000000000200 ffff888100ea3c80 ffffea00047f7d90 ffffea00044ea7d0 [ 70.818346][ T3325] raw: ffff88811f4e9d80 000000000012000a 00000001fdffffff 0000000000000000 [ 70.826947][ T3325] page dumped because: kasan: bad access detected [ 70.833374][ T3325] page_owner tracks the page as allocated [ 70.839136][ T3325] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 2040, tgid 2040 (modprobe), ts 35535093439, free_ts 35530024086 [ 70.858338][ T3325] post_alloc_hook+0x10f/0x130 [ 70.863200][ T3325] get_page_from_freelist+0x37f4/0x3920 [ 70.868758][ T3325] __alloc_pages_noprof+0x256/0x670 [ 70.874063][ T3325] alloc_pages_mpol_noprof+0x14f/0x370 [ 70.879613][ T3325] alloc_slab_page+0x6a/0x130 [ 70.884291][ T3325] allocate_slab+0x5d/0x290 [ 70.888803][ T3325] ___slab_alloc+0xa7f/0x11d0 [ 70.893493][ T3325] kmem_cache_alloc_noprof+0x1eb/0x350 [ 70.898996][ T3325] vm_area_alloc+0xea/0x1b0 [ 70.903500][ T3325] mmap_region+0xcc9/0x1f10 [ 70.908036][ T3325] do_mmap+0x8e6/0xff0 [ 70.912120][ T3325] vm_mmap_pgoff+0x1d7/0x3a0 [ 70.916717][ T3325] ksys_mmap_pgoff+0x367/0x4b0 [ 70.921493][ T3325] do_syscall_64+0x8d/0x190 [ 70.926002][ T3325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.931900][ T3325] page last free pid 2039 tgid 2039 stack trace: [ 70.938331][ T3325] free_unref_folios+0xdb9/0x1660 [ 70.943538][ T3325] folios_put_refs+0x5b0/0x6d0 [ 70.948325][ T3325] free_pages_and_swap_cache+0x513/0x610 [ 70.954071][ T3325] tlb_flush_mmu+0x3a3/0x660 [ 70.958842][ T3325] tlb_finish_mmu+0xd4/0x200 [ 70.963460][ T3325] exit_mmap+0x43f/0xb90 [ 70.967705][ T3325] __mmput+0xc9/0x320 [ 70.971775][ T3325] exit_mm+0x132/0x200 [ 70.975858][ T3325] do_exit+0x928/0x2b20 [ 70.980019][ T3325] do_group_exit+0x207/0x2c0 [ 70.984628][ T3325] __x64_sys_exit_group+0x3f/0x40 [ 70.989714][ T3325] x64_sys_call+0x2634/0x2640 [ 70.994487][ T3325] do_syscall_64+0x8d/0x190 [ 70.998996][ T3325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.005065][ T3325] [ 71.007471][ T3325] Memory state around the buggy address: [ 71.013529][ T3325] ffff88811f4e8f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 71.021615][ T3325] ffff88811f4e9000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.029769][ T3325] >ffff88811f4e9080: fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb [ 71.037844][ T3325] ^ [ 71.044091][ T3325] ffff88811f4e9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 71.052169][ T3325] ffff88811f4e9180: fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb [ 71.060398][ T3325] ================================================================== [ 71.068829][ T3325] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 71.076399][ T3325] Kernel Offset: disabled [ 71.080922][ T3325] Rebooting in 86400 seconds..