Warning: Permanently added '10.128.1.205' (ED25519) to the list of known hosts. 2024/09/19 04:28:39 ignoring optional flag "sandboxArg"="0" 2024/09/19 04:28:39 parsed 1 programs [ 93.225053][ T3406] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.516604][ T3428] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.528158][ T3428] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.545604][ T3428] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.556290][ T3428] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.040857][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.049131][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.072155][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.080578][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/09/19 04:28:55 executed programs: 0 [ 109.927822][ T4316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.948942][ T4316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.959782][ T4316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.971181][ T4316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.394033][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.401936][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.421270][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.429476][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/09/19 04:29:04 executed programs: 2 [ 116.538240][ T28] audit: type=1400 audit(1726720144.933:2): lsm=SMACK fn=smack_watch_key action=denied subject="_" object=203BAE86FFFFFFFFA03DAE86FFFFFFFF requested=r pid=4942 comm="syz.0.15" key_serial=463740199 key_desc="fscrypt:0000111122223333" [ 116.568864][ T4945] ================================================================== [ 116.577134][ T4945] BUG: KASAN: slab-use-after-free in smk_access+0xab/0x3f0 [ 116.584457][ T4945] Read of size 8 at addr ffff8881046ab380 by task syz.0.16/4945 [ 116.592186][ T4945] [ 116.594533][ T4945] CPU: 1 UID: 3327 PID: 4945 Comm: syz.0.16 Not tainted 6.11.0-rc1-syzkaller #0 [ 116.603839][ T4945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 116.614285][ T4945] Call Trace: [ 116.617656][ T4945] [ 116.620592][ T4945] dump_stack_lvl+0x231/0x330 [ 116.625329][ T4945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.630559][ T4945] ? __pfx__printk+0x10/0x10 [ 116.635153][ T4945] ? _printk+0xd5/0x120 [ 116.639409][ T4945] ? __virt_addr_valid+0x169/0x380 [ 116.644628][ T4945] print_report+0x169/0x550 [ 116.649163][ T4945] ? __virt_addr_valid+0x169/0x380 [ 116.654550][ T4945] ? __virt_addr_valid+0x2c1/0x380 [ 116.659687][ T4945] ? __phys_addr+0x90/0x130 [ 116.664432][ T4945] ? smk_access+0xab/0x3f0 [ 116.668885][ T4945] kasan_report+0x143/0x180 [ 116.673412][ T4945] ? smk_access+0xab/0x3f0 [ 116.677841][ T4945] smk_access+0xab/0x3f0 [ 116.682101][ T4945] smack_watch_key+0x2ac/0x370 [ 116.686957][ T4945] ? __pfx_smack_watch_key+0x10/0x10 [ 116.692257][ T4945] ? __kasan_kmalloc+0x98/0xb0 [ 116.697033][ T4945] security_watch_key+0x65/0x90 [ 116.701895][ T4945] keyctl_watch_key+0x2b7/0x480 [ 116.706863][ T4945] __se_sys_keyctl+0x409/0xc10 [ 116.711718][ T4945] ? do_futex+0x33b/0x560 [ 116.716064][ T4945] ? __pfx___se_sys_keyctl+0x10/0x10 [ 116.721655][ T4945] ? __pfx_do_futex+0x10/0x10 [ 116.726607][ T4945] ? __se_sys_futex+0x3f9/0x480 [ 116.731490][ T4945] ? __pfx___se_sys_futex+0x10/0x10 [ 116.736704][ T4945] ? switch_fpu_return+0x10f/0x180 [ 116.741941][ T4945] ? __x64_sys_keyctl+0x20/0xc0 [ 116.746812][ T4945] do_syscall_64+0x8d/0x190 [ 116.751524][ T4945] ? clear_bhb_loop+0x35/0x90 [ 116.756579][ T4945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.762498][ T4945] RIP: 0033:0x7ff9e68ddef9 [ 116.767009][ T4945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.787118][ T4945] RSP: 002b:00007ff9e6359038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 116.795577][ T4945] RAX: ffffffffffffffda RBX: 00007ff9e6a95f80 RCX: 00007ff9e68ddef9 [ 116.803591][ T4945] RDX: 0000000000000004 RSI: 000000003f1cf8d0 RDI: 0000000000000020 [ 116.811662][ T4945] RBP: 00007ff9e6950b76 R08: 0000000000000000 R09: 0000000000000000 [ 116.819908][ T4945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.828097][ T4945] R13: 0000000000000000 R14: 00007ff9e6a95f80 R15: 00007ffcd6e8a018 [ 116.836170][ T4945] [ 116.839280][ T4945] [ 116.841604][ T4945] Allocated by task 2438: [ 116.845921][ T4945] kasan_save_track+0x3f/0x80 [ 116.850606][ T4945] __kasan_kmalloc+0x98/0xb0 [ 116.855226][ T4945] __kmalloc_node_track_caller_noprof+0x1fb/0x460 [ 116.861652][ T4945] strndup_user+0x75/0x150 [ 116.866112][ T4945] __se_sys_mount+0xe2/0x3b0 [ 116.870791][ T4945] do_syscall_64+0x8d/0x190 [ 116.875403][ T4945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.881400][ T4945] [ 116.883735][ T4945] Freed by task 2438: [ 116.887911][ T4945] kasan_save_track+0x3f/0x80 [ 116.892593][ T4945] kasan_save_free_info+0x40/0x50 [ 116.897718][ T4945] poison_slab_object+0xe0/0x150 [ 116.902663][ T4945] __kasan_slab_free+0x37/0x60 [ 116.907523][ T4945] kfree+0x12f/0x310 [ 116.911446][ T4945] __se_sys_mount+0x360/0x3b0 [ 116.916125][ T4945] do_syscall_64+0x8d/0x190 [ 116.920655][ T4945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.926643][ T4945] [ 116.928968][ T4945] The buggy address belongs to the object at ffff8881046ab380 [ 116.928968][ T4945] which belongs to the cache kmalloc-8 of size 8 [ 116.942964][ T4945] The buggy address is located 0 bytes inside of [ 116.942964][ T4945] freed 8-byte region [ffff8881046ab380, ffff8881046ab388) [ 116.956624][ T4945] [ 116.959036][ T4945] The buggy address belongs to the physical page: [ 116.965488][ T4945] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8881046abb80 pfn:0x1046ab [ 116.975659][ T4945] flags: 0x200000000000000(node=0|zone=2) [ 116.981407][ T4945] page_type: 0xfdffffff(slab) [ 116.986114][ T4945] raw: 0200000000000000 ffff888100041500 ffffea00041daf80 dead000000000002 [ 116.994782][ T4945] raw: ffff8881046abb80 000000008080006e 00000001fdffffff 0000000000000000 [ 117.003360][ T4945] page dumped because: kasan: bad access detected [ 117.009872][ T4945] page_owner tracks the page as allocated [ 117.015685][ T4945] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 3658111035, free_ts 3525992713 [ 117.034012][ T4945] post_alloc_hook+0x10f/0x130 [ 117.038912][ T4945] get_page_from_freelist+0x37f4/0x3920 [ 117.044591][ T4945] __alloc_pages_noprof+0x256/0x670 [ 117.049824][ T4945] alloc_slab_page+0x5f/0x120 [ 117.054538][ T4945] allocate_slab+0x5d/0x290 [ 117.059065][ T4945] ___slab_alloc+0xa7f/0x11d0 [ 117.063743][ T4945] __kmalloc_noprof+0x25a/0x440 [ 117.068593][ T4945] acpi_ns_internalize_name+0x419/0x610 [ 117.074606][ T4945] acpi_ns_get_node+0x1b7/0x3c0 [ 117.079657][ T4945] acpi_ns_evaluate+0x35f/0xa40 [ 117.084512][ T4945] acpi_ut_evaluate_object+0x154/0x4a0 [ 117.090082][ T4945] acpi_rs_get_method_data+0xb4/0x160 [ 117.095552][ T4945] acpi_walk_resources+0x183/0x5a0 [ 117.100865][ T4945] acpi_dev_get_resources+0x257/0x380 [ 117.106262][ T4945] acpi_init_device_object+0x27d0/0x34b0 [ 117.111911][ T4945] acpi_add_single_object+0x106/0x1e00 [ 117.117395][ T4945] page last free pid 1 tgid 1 stack trace: [ 117.123198][ T4945] free_unref_page+0xbae/0xcf0 [ 117.128092][ T4945] __put_partials+0x18e/0x1d0 [ 117.132792][ T4945] put_cpu_partial+0x151/0x1b0 [ 117.137571][ T4945] __slab_free+0x2b8/0x3a0 [ 117.141990][ T4945] qlist_free_all+0x9e/0x140 [ 117.146584][ T4945] kasan_quarantine_remove_cache+0x14a/0x170 [ 117.152571][ T4945] kmem_cache_shrink+0xd/0x20 [ 117.157474][ T4945] acpi_os_purge_cache+0x15/0x20 [ 117.162438][ T4945] acpi_purge_cached_objects+0x8f/0xc0 [ 117.167992][ T4945] acpi_initialize_objects+0x2e/0xa0 [ 117.173316][ T4945] acpi_bus_init+0xda/0xbc0 [ 117.177845][ T4945] acpi_init+0xb4/0x240 [ 117.182010][ T4945] do_one_initcall+0x211/0x6e0 [ 117.187036][ T4945] do_initcall_level+0x15a/0x280 [ 117.191990][ T4945] do_initcalls+0x3f/0x80 [ 117.196327][ T4945] kernel_init_freeable+0x3f2/0x580 [ 117.201640][ T4945] [ 117.204090][ T4945] Memory state around the buggy address: [ 117.209889][ T4945] ffff8881046ab280: 00 fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 117.217961][ T4945] ffff8881046ab300: fa fc fc fc fa fc fc fc fa fc fc fc 00 fc fc fc [ 117.226030][ T4945] >ffff8881046ab380: fa fc fc fc fa fc fc fc 00 fc fc fc 05 fc fc fc [ 117.234184][ T4945] ^ [ 117.238251][ T4945] ffff8881046ab400: fa fc fc fc 05 fc fc fc 00 fc fc fc fa fc fc fc [ 117.246415][ T4945] ffff8881046ab480: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 117.254475][ T4945] ================================================================== [ 117.263020][ T4945] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 117.270825][ T4945] Kernel Offset: disabled [ 117.275237][ T4945] Rebooting in 86400 seconds..