Warning: Permanently added '10.128.10.34' (ED25519) to the list of known hosts. 2024/11/23 02:23:47 ignoring optional flag "sandboxArg"="0" 2024/11/23 02:23:47 parsed 1 programs [ 70.948770][ T29] audit: type=1400 audit(1732328629.285:138): avc: denied { unlink } for pid=5335 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 70.985291][ T5335] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 72.667045][ T29] audit: type=1401 audit(1732328630.995:139): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 72.735397][ T5350] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.746302][ T5350] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.756873][ T5350] bridge_slave_0: entered allmulticast mode [ 72.763719][ T5350] bridge_slave_0: entered promiscuous mode [ 72.796294][ T5350] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.817032][ T5350] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.828737][ T5350] bridge_slave_1: entered allmulticast mode [ 72.835266][ T5350] bridge_slave_1: entered promiscuous mode [ 72.967732][ T948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.972915][ T3041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.983486][ T948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.018396][ T3041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.151860][ T5350] team0: Port device team_slave_0 added [ 73.160078][ T5350] team0: Port device team_slave_1 added [ 73.552681][ T5350] hsr_slave_0: entered promiscuous mode [ 73.560991][ T5350] hsr_slave_1: entered promiscuous mode [ 73.717910][ T5350] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.732573][ T5350] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.746579][ T5350] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.760866][ T5350] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.072316][ T5350] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.082034][ T3041] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.089111][ T3041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.100122][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.107176][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.434164][ T5350] veth0_vlan: entered promiscuous mode [ 74.443621][ T5350] veth1_vlan: entered promiscuous mode [ 74.571055][ T5350] veth0_macvtap: entered promiscuous mode [ 74.579338][ T5350] veth1_macvtap: entered promiscuous mode [ 74.594456][ T5350] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.603428][ T5350] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.612632][ T5350] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.621357][ T5350] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2024/11/23 02:23:53 executed programs: 0 [ 75.115365][ T38] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.299460][ T5533] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.312873][ T5533] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.324416][ T5533] bridge_slave_0: entered allmulticast mode [ 75.331054][ T5533] bridge_slave_0: entered promiscuous mode [ 75.337780][ T5533] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.344927][ T5533] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.354006][ T5533] bridge_slave_1: entered allmulticast mode [ 75.360519][ T5533] bridge_slave_1: entered promiscuous mode [ 75.469464][ T5535] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.476592][ T5535] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.484687][ T5535] bridge_slave_0: entered allmulticast mode [ 75.492699][ T5535] bridge_slave_0: entered promiscuous mode [ 75.511771][ T5535] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.518972][ T5535] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.526038][ T5535] bridge_slave_1: entered allmulticast mode [ 75.532779][ T5535] bridge_slave_1: entered promiscuous mode [ 75.578718][ T38] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.591825][ T5533] team0: Port device team_slave_0 added [ 75.597693][ T5544] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.605169][ T5544] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.612929][ T5544] bridge_slave_0: entered allmulticast mode [ 75.619877][ T5544] bridge_slave_0: entered promiscuous mode [ 75.637741][ T5533] team0: Port device team_slave_1 added [ 75.650095][ T5544] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.658077][ T5544] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.665162][ T5544] bridge_slave_1: entered allmulticast mode [ 75.671850][ T5544] bridge_slave_1: entered promiscuous mode [ 75.695178][ T38] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.724220][ T5539] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.732350][ T5539] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.739727][ T5539] bridge_slave_0: entered allmulticast mode [ 75.746306][ T5539] bridge_slave_0: entered promiscuous mode [ 75.754465][ T5539] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.762016][ T5539] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.769135][ T5539] bridge_slave_1: entered allmulticast mode [ 75.775374][ T5539] bridge_slave_1: entered promiscuous mode [ 75.781778][ T5541] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.788911][ T5541] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.795962][ T5541] bridge_slave_0: entered allmulticast mode [ 75.802288][ T5541] bridge_slave_0: entered promiscuous mode [ 75.836777][ T5541] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.853613][ T5541] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.862287][ T5541] bridge_slave_1: entered allmulticast mode [ 75.870251][ T5541] bridge_slave_1: entered promiscuous mode [ 75.877488][ T5535] team0: Port device team_slave_0 added [ 75.903723][ T38] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.916376][ T5535] team0: Port device team_slave_1 added [ 75.935943][ T5544] team0: Port device team_slave_0 added [ 75.971109][ T5533] hsr_slave_0: entered promiscuous mode [ 75.977143][ T5533] hsr_slave_1: entered promiscuous mode [ 75.997353][ T5533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.006471][ T5533] Cannot create hsr debugfs directory [ 76.016317][ T5544] team0: Port device team_slave_1 added [ 76.076050][ T5539] team0: Port device team_slave_0 added [ 76.106830][ T5539] team0: Port device team_slave_1 added [ 76.129847][ T5541] team0: Port device team_slave_0 added [ 76.137115][ T5541] team0: Port device team_slave_1 added [ 76.171470][ T5535] hsr_slave_0: entered promiscuous mode [ 76.177440][ T5535] hsr_slave_1: entered promiscuous mode [ 76.184374][ T5535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.192159][ T5535] Cannot create hsr debugfs directory [ 76.269317][ T38] bridge_slave_1: left allmulticast mode [ 76.274976][ T38] bridge_slave_1: left promiscuous mode [ 76.281450][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.290411][ T38] bridge_slave_0: left allmulticast mode [ 76.296053][ T38] bridge_slave_0: left promiscuous mode [ 76.302162][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.479775][ T5544] hsr_slave_0: entered promiscuous mode [ 76.486959][ T5544] hsr_slave_1: entered promiscuous mode [ 76.494036][ T5544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.501610][ T5544] Cannot create hsr debugfs directory [ 76.546241][ T5539] hsr_slave_0: entered promiscuous mode [ 76.552460][ T5539] hsr_slave_1: entered promiscuous mode [ 76.559542][ T5539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.567073][ T5539] Cannot create hsr debugfs directory [ 76.595963][ T5541] hsr_slave_0: entered promiscuous mode [ 76.602010][ T5541] hsr_slave_1: entered promiscuous mode [ 76.607765][ T5541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.615427][ T5541] Cannot create hsr debugfs directory [ 76.716157][ T38] hsr_slave_0: left promiscuous mode [ 76.735047][ T38] hsr_slave_1: left promiscuous mode [ 76.745295][ T38] veth1_macvtap: left promiscuous mode [ 76.751099][ T38] veth0_macvtap: left promiscuous mode [ 76.756638][ T38] veth1_vlan: left promiscuous mode [ 76.762241][ T38] veth0_vlan: left promiscuous mode [ 76.921189][ T38] team0 (unregistering): Port device team_slave_1 removed [ 76.934502][ T38] team0 (unregistering): Port device team_slave_0 removed [ 77.302556][ T5533] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.329415][ T5533] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.342584][ T5535] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 77.352934][ T5535] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 77.366320][ T5533] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.376136][ T5535] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 77.387708][ T5535] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 77.397287][ T5533] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.441442][ T5544] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.455612][ T5544] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.476835][ T5539] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.486544][ T5539] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.495312][ T5544] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.504647][ T5544] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.519313][ T5539] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.530199][ T5539] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.858639][ T5541] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.881726][ T5541] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.902645][ T5541] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.925636][ T5541] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.891723][ T5535] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.921096][ T948] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.928188][ T948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.982457][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.989548][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.010832][ T5533] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.033327][ T5544] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.084422][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.091517][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.119383][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.126574][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.145318][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.152413][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.160820][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.167842][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.177634][ T5539] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.209105][ T5556] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.216176][ T5556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.236495][ T5556] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.243584][ T5556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.303257][ T5544] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.326306][ T5544] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.467250][ T5541] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.490897][ T948] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.497983][ T948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.550954][ T948] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.558046][ T948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.640987][ T5541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.661670][ T5541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.846883][ T5535] veth0_vlan: entered promiscuous mode [ 80.905932][ T5535] veth1_vlan: entered promiscuous mode [ 80.967236][ T5533] veth0_vlan: entered promiscuous mode [ 81.002907][ T5533] veth1_vlan: entered promiscuous mode [ 81.070155][ T5539] veth0_vlan: entered promiscuous mode [ 81.092014][ T5539] veth1_vlan: entered promiscuous mode [ 81.170398][ T5541] veth0_vlan: entered promiscuous mode [ 81.200288][ T5541] veth1_vlan: entered promiscuous mode [ 81.479558][ T5544] veth0_vlan: entered promiscuous mode [ 81.512391][ T5544] veth1_vlan: entered promiscuous mode [ 81.554890][ T5535] veth0_macvtap: entered promiscuous mode [ 81.608930][ T5535] veth1_macvtap: entered promiscuous mode [ 81.642539][ T5535] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.658146][ T5535] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.666846][ T5535] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.698049][ T5535] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.723084][ T5533] veth0_macvtap: entered promiscuous mode [ 81.746912][ T5533] veth1_macvtap: entered promiscuous mode [ 81.798934][ T5533] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.818864][ T5533] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.827564][ T5533] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.853489][ T5533] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.881300][ T5541] veth0_macvtap: entered promiscuous mode [ 81.898350][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.906161][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.921170][ T5539] veth0_macvtap: entered promiscuous mode [ 81.931277][ T5541] veth1_macvtap: entered promiscuous mode [ 81.951116][ T5539] veth1_macvtap: entered promiscuous mode [ 81.963399][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.979367][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.004392][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.016039][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.029205][ T5539] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.037898][ T5539] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.058037][ T5539] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.066730][ T5539] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.111621][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.120853][ T5541] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.129912][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.137242][ T5541] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.146084][ T5541] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.154852][ T5541] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.198458][ T5556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.206282][ T5556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.225539][ T5544] veth0_macvtap: entered promiscuous mode 2024/11/23 02:24:00 executed programs: 10 [ 82.274093][ T5544] veth1_macvtap: entered promiscuous mode [ 82.306638][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.324589][ T5556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.333344][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.345531][ T5556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.391511][ T5544] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.403814][ T29] audit: type=1400 audit(1732328640.725:140): avc: denied { create } for pid=6179 comm="syz.5.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.428121][ T5544] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.436823][ T5544] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.447393][ T5544] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.458459][ T29] audit: type=1400 audit(1732328640.725:141): avc: denied { connect } for pid=6179 comm="syz.5.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.475892][ T5556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.500943][ T5556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.526560][ T29] audit: type=1400 audit(1732328640.815:142): avc: denied { recv } for pid=24 comm="ksoftirqd/1" saddr=127.0.0.1 src=44607 daddr=127.0.0.1 dest=53378 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 82.673365][ T5556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.714444][ T5556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.718532][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.728833][ C0] ================================================================== [ 82.737608][ C0] BUG: KASAN: slab-out-of-bounds in selinux_ip_output+0x1b8/0x1c0 [ 82.744674][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.745415][ C0] Read of size 8 at addr ffff8880666985f0 by task kworker/u8:1/12 [ 82.760476][ C0] [ 82.762782][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.12.0-rc2-syzkaller #0 [ 82.771703][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 82.781746][ C0] Workqueue: krdsd rds_tcp_accept_worker [ 82.787402][ C0] Call Trace: [ 82.790682][ C0] [ 82.793523][ C0] dump_stack_lvl+0xc7/0x130 [ 82.798154][ C0] print_report+0xc3/0x620 [ 82.802595][ C0] ? __virt_addr_valid+0x2ba/0x380 [ 82.807719][ C0] ? __phys_addr+0xa2/0x120 [ 82.812244][ C0] kasan_report+0xd9/0x110 [ 82.816680][ C0] ? selinux_ip_output+0x1b8/0x1c0 [ 82.821804][ C0] ? selinux_ip_output+0x1b8/0x1c0 [ 82.826938][ C0] ? __pfx_selinux_ip_output+0x10/0x10 [ 82.832418][ C0] selinux_ip_output+0x1b8/0x1c0 [ 82.837375][ C0] nf_hook_slow+0xbb/0x1f0 [ 82.841808][ C0] __ip_local_out+0x428/0x710 [ 82.846511][ C0] ? __pfx___ip_local_out+0x10/0x10 [ 82.851737][ C0] ? __ip_make_skb+0x118e/0x1f30 [ 82.856684][ C0] ? __pfx_dst_output+0x10/0x10 [ 82.861565][ C0] ip_push_pending_frames+0x9b/0x4d0 [ 82.866864][ C0] ip_send_unicast_reply+0xe14/0x13e0 [ 82.872245][ C0] ? __pfx_ip_send_unicast_reply+0x10/0x10 [ 82.878056][ C0] ? register_lock_class+0x325/0x1130 [ 82.883443][ C0] ? __pfx_lock_release+0x10/0x10 [ 82.888482][ C0] ? __lock_acquire.constprop.0+0x591/0x1050 [ 82.894480][ C0] ? lock_acquire+0x12f/0x2c0 [ 82.899175][ C0] tcp_v4_send_ack+0x8c9/0x1150 [ 82.904036][ C0] ? __pfx_tcp_v4_send_ack+0x10/0x10 [ 82.909328][ C0] ? ktime_get+0xbf/0x100 [ 82.913677][ C0] ? lock_acquire+0x12f/0x2c0 [ 82.918373][ C0] ? read_tsc+0x9/0x20 [ 82.922458][ C0] ? timekeeping_debug_get_ns+0x30d/0x4c0 [ 82.928194][ C0] ? tcp_v4_rcv+0x3116/0x4530 [ 82.932875][ C0] tcp_v4_rcv+0x3116/0x4530 [ 82.937379][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 82.942222][ C0] ? find_held_lock+0x2d/0x110 [ 82.946974][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 82.951813][ C0] ip_protocol_deliver_rcu+0x6e/0x400 [ 82.957180][ C0] ip_local_deliver_finish+0x2c7/0x3f0 [ 82.962632][ C0] ip_local_deliver+0x1be/0x360 [ 82.967474][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 82.972845][ C0] ? ip_rcv+0x16a/0x6a0 [ 82.976998][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 82.982975][ C0] ? ip_rcv_finish_core.constprop.0+0x84a/0x1e10 [ 82.989298][ C0] ? nf_hook_slow+0x132/0x1f0 [ 82.993967][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 82.999334][ C0] ip_rcv+0x400/0x6a0 [ 83.003310][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 83.007804][ C0] ? find_held_lock+0x2d/0x110 [ 83.012557][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 83.017673][ C0] ? sched_balance_rq+0x1505/0x2c60 [ 83.022856][ C0] ? __pfx_lock_release+0x10/0x10 [ 83.027874][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 83.032371][ C0] __netif_receive_skb_one_core+0x199/0x1e0 [ 83.038258][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 83.044664][ C0] ? lock_acquire+0x12f/0x2c0 [ 83.049333][ C0] ? process_backlog+0x246/0xd40 [ 83.054261][ C0] __netif_receive_skb+0x1d/0x160 [ 83.059279][ C0] process_backlog+0x288/0xd40 [ 83.064033][ C0] ? process_backlog+0x246/0xd40 [ 83.068961][ C0] __napi_poll+0xbb/0x6d0 [ 83.073280][ C0] ? __rb_insert_augmented+0x4c0/0x880 [ 83.078738][ C0] net_rx_action+0xa37/0xf80 [ 83.083322][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 83.088425][ C0] ? rcu_is_watching+0x15/0xb0 [ 83.093181][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 83.098375][ C0] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 83.104179][ C0] handle_softirqs+0x248/0x660 [ 83.108940][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 83.114222][ C0] do_softirq+0x7a/0xa0 [ 83.118375][ C0] [ 83.121306][ C0] [ 83.124229][ C0] ? __dev_queue_xmit+0xb8d/0x3a20 [ 83.129336][ C0] __local_bh_enable_ip+0x60/0x70 [ 83.134365][ C0] __dev_queue_xmit+0xba2/0x3a20 [ 83.139300][ C0] ? avc_lookup+0x16b/0x1d0 [ 83.143802][ C0] ? avc_has_perm_noaudit+0x105/0x1a0 [ 83.149173][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 83.154539][ C0] ? avc_has_perm+0x11b/0x1c0 [ 83.159215][ C0] ? __pfx_avc_has_perm+0x10/0x10 [ 83.164236][ C0] ? sel_netnode_sid+0xeb/0x910 [ 83.169077][ C0] ? find_held_lock+0x2d/0x110 [ 83.173830][ C0] ? __ip_finish_output.part.0+0x1bf/0x360 [ 83.179644][ C0] ? __pfx_lock_release+0x10/0x10 [ 83.184663][ C0] ? lock_acquire+0x12f/0x2c0 [ 83.189334][ C0] ip_finish_output2+0xbc7/0x1a60 [ 83.194358][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 83.199822][ C0] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 83.205022][ C0] __ip_finish_output.part.0+0x1bf/0x360 [ 83.210674][ C0] ip_output+0x2b5/0xa10 [ 83.214913][ C0] ? __pfx_ip_output+0x10/0x10 [ 83.219676][ C0] ? stack_trace_save+0x95/0xd0 [ 83.224519][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 83.229895][ C0] ? __pfx_ip_output+0x10/0x10 [ 83.234656][ C0] __ip_queue_xmit+0x1792/0x1d60 [ 83.239595][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 83.244704][ C0] __tcp_transmit_skb+0x2d34/0x3ab0 [ 83.249900][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 83.255439][ C0] ? __pfx_lock_release+0x10/0x10 [ 83.260459][ C0] tcp_write_xmit+0x101f/0x7610 [ 83.265304][ C0] __tcp_push_pending_frames+0xaf/0x390 [ 83.270842][ C0] tcp_send_fin+0x154/0xc70 [ 83.275339][ C0] ? __pfx_tcp_send_fin+0x10/0x10 [ 83.280359][ C0] __tcp_close+0x94c/0xed0 [ 83.284767][ C0] tcp_close+0x28/0x120 [ 83.288918][ C0] inet_release+0xea/0x200 [ 83.293334][ C0] inet6_release+0x4f/0x70 [ 83.297741][ C0] sock_release+0x8e/0x1d0 [ 83.302152][ C0] rds_tcp_accept_one+0x348/0xcf0 [ 83.307171][ C0] ? __lock_acquire.constprop.0+0x591/0x1050 [ 83.313146][ C0] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 83.318683][ C0] ? __pfx_lock_release+0x10/0x10 [ 83.323700][ C0] ? lock_acquire+0x12f/0x2c0 [ 83.328372][ C0] rds_tcp_accept_worker+0x46/0x70 [ 83.333480][ C0] process_one_work+0x8a9/0x18a0 [ 83.338412][ C0] ? __pfx_process_one_work+0x10/0x10 [ 83.343777][ C0] ? assign_work+0x1a0/0x230 [ 83.348363][ C0] worker_thread+0x86d/0x1110 [ 83.353040][ C0] ? do_raw_spin_unlock+0x147/0x230 [ 83.358234][ C0] ? __pfx_worker_thread+0x10/0x10 [ 83.363336][ C0] kthread+0x2a6/0x380 [ 83.367390][ C0] ? __pfx_kthread+0x10/0x10 [ 83.371979][ C0] ret_from_fork+0x45/0x80 [ 83.376391][ C0] ? __pfx_kthread+0x10/0x10 [ 83.380975][ C0] ret_from_fork_asm+0x1a/0x30 [ 83.385735][ C0] [ 83.388737][ C0] [ 83.391043][ C0] The buggy address belongs to the object at ffff888066698580 [ 83.391043][ C0] which belongs to the cache tw_sock_TCP of size 288 [ 83.405078][ C0] The buggy address is located 112 bytes inside of [ 83.405078][ C0] allocated 288-byte region [ffff888066698580, ffff8880666986a0) [ 83.419204][ C0] [ 83.421508][ C0] The buggy address belongs to the physical page: [ 83.427904][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x66698 [ 83.436659][ C0] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 83.445138][ C0] memcg:ffff88801d1b6901 [ 83.449354][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 83.456885][ C0] page_type: f5(slab) [ 83.460850][ C0] raw: 00fff00000000040 ffff888014aa3dc0 dead000000000122 0000000000000000 [ 83.469420][ C0] raw: 0000000000000000 0000000080170017 00000001f5000000 ffff88801d1b6901 [ 83.477987][ C0] head: 00fff00000000040 ffff888014aa3dc0 dead000000000122 0000000000000000 [ 83.486641][ C0] head: 0000000000000000 0000000080170017 00000001f5000000 ffff88801d1b6901 [ 83.495298][ C0] head: 00fff00000000001 ffffea000199a601 ffffffffffffffff 0000000000000000 [ 83.503955][ C0] head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 83.512606][ C0] page dumped because: kasan: bad access detected [ 83.519002][ C0] page_owner tracks the page as allocated [ 83.524692][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4693, tgid 4691 (syz-execprog), ts 48388902073, free_ts 48387971279 [ 83.543959][ C0] post_alloc_hook+0x283/0x300 [ 83.548724][ C0] get_page_from_freelist+0xff0/0x3a40 [ 83.554167][ C0] __alloc_pages_noprof+0x1cf/0x4a0 [ 83.559348][ C0] alloc_pages_mpol_noprof+0x2c9/0x5f0 [ 83.564794][ C0] allocate_slab+0x280/0x390 [ 83.569378][ C0] ___slab_alloc+0xc2a/0x13f0 [ 83.574046][ C0] __slab_alloc.constprop.0+0x4d/0x90 [ 83.579413][ C0] kmem_cache_alloc_noprof+0x30c/0x350 [ 83.584870][ C0] inet_twsk_alloc+0x120/0x970 [ 83.589627][ C0] tcp_time_wait+0x5a/0xd70 [ 83.594118][ C0] tcp_fin+0x442/0x670 [ 83.598170][ C0] tcp_data_queue+0x1f9f/0x4dc0 [ 83.603007][ C0] tcp_rcv_state_process+0x193a/0x4db0 [ 83.608452][ C0] tcp_v4_do_rcv+0x397/0xac0 [ 83.613028][ C0] tcp_v4_rcv+0x34e9/0x4530 [ 83.617517][ C0] ip_protocol_deliver_rcu+0x6e/0x400 [ 83.622884][ C0] page last free pid 1 tgid 1 stack trace: [ 83.628668][ C0] free_unref_page+0x687/0xe60 [ 83.633430][ C0] __mmdrop+0x59/0x370 [ 83.637482][ C0] finish_task_switch.isra.0+0x569/0x7b0 [ 83.643104][ C0] __schedule+0x10ee/0x4f40 [ 83.647598][ C0] schedule+0x7c/0x2c0 [ 83.651661][ C0] schedule_hrtimeout_range_clock+0x2f5/0x320 [ 83.657719][ C0] do_sigtimedwait+0x3ee/0x560 [ 83.662473][ C0] __x64_sys_rt_sigtimedwait+0x1ec/0x2e0 [ 83.668094][ C0] do_syscall_64+0x6d/0x1a0 [ 83.672593][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.678485][ C0] [ 83.680791][ C0] Memory state around the buggy address: [ 83.686401][ C0] ffff888066698480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.694445][ C0] ffff888066698500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.702489][ C0] >ffff888066698580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.710532][ C0] ^ [ 83.718228][ C0] ffff888066698600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.726272][ C0] ffff888066698680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.734311][ C0] ================================================================== [ 83.742377][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 83.749765][ C0] Kernel Offset: disabled [ 83.754065][ C0] Rebooting in 86400 seconds..