[ 48.912476][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.935188][ T44] device veth1_macvtap left promiscuous mode [ 48.943060][ T44] device veth0_macvtap left promiscuous mode [ 48.950245][ T44] device veth1_vlan left promiscuous mode [ 48.957860][ T44] device veth0_vlan left promiscuous mode [ 49.168231][ T44] team0 (unregistering): Port device team_slave_1 removed [ 49.182084][ T44] team0 (unregistering): Port device team_slave_0 removed [ 49.195420][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.212142][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.262795][ T44] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.25' (ECDSA) to the list of known hosts. [ 62.987759][ T4048] ================================================================== [ 62.997147][ T4048] BUG: KASAN: vmalloc-out-of-bounds in ringbuf_map_alloc+0x618/0x6a0 [ 63.006030][ T4048] Write of size 8 at addr ffffc9000c4b9078 by task syz-executor383/4048 [ 63.014794][ T4048] [ 63.017116][ T4048] CPU: 0 PID: 4048 Comm: syz-executor383 Not tainted 5.17.0-rc2-syzkaller #0 [ 63.026713][ T4048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.038091][ T4048] Call Trace: [ 63.041636][ T4048] [ 63.044828][ T4048] dump_stack_lvl+0x57/0x7d [ 63.049673][ T4048] print_address_description.constprop.0.cold+0xf/0x336 [ 63.057268][ T4048] ? ringbuf_map_alloc+0x618/0x6a0 [ 63.063061][ T4048] ? ringbuf_map_alloc+0x618/0x6a0 [ 63.068842][ T4048] kasan_report.cold+0x83/0xdf [ 63.074363][ T4048] ? ringbuf_map_alloc+0x618/0x6a0 [ 63.081928][ T4048] ringbuf_map_alloc+0x618/0x6a0 [ 63.088083][ T4048] __sys_bpf+0x8bd/0x4400 [ 63.092447][ T4048] ? bpf_link_get_from_fd+0xe0/0xe0 [ 63.098939][ T4048] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 63.106846][ T4048] ? find_held_lock+0x2d/0x110 [ 63.112762][ T4048] __x64_sys_bpf+0x70/0xb0 [ 63.117211][ T4048] ? syscall_enter_from_user_mode+0x21/0x70 [ 63.123445][ T4048] do_syscall_64+0x35/0xb0 [ 63.127901][ T4048] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 63.134051][ T4048] RIP: 0033:0x7f31c3a41b49 [ 63.139028][ T4048] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 63.159645][ T4048] RSP: 002b:00007ffd6ca26ab8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 63.169299][ T4048] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f31c3a41b49 [ 63.179385][ T4048] RDX: 0000000000000048 RSI: 0000000020000280 RDI: 0000000000000000 [ 63.188972][ T4048] RBP: 00007f31c3a05cf0 R08: 0000000000000000 R09: 0000000000000000 [ 63.197763][ T4048] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007f31c3a05d80 [ 63.205892][ T4048] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.214144][ T4048] [ 63.217174][ T4048] [ 63.219491][ T4048] [ 63.221809][ T4048] Memory state around the buggy address: [ 63.227865][ T4048] ffffc9000c4b8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 63.236360][ T4048] ffffc9000c4b8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 63.245369][ T4048] >ffffc9000c4b9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 63.253884][ T4048] ^ [ 63.262043][ T4048] ffffc9000c4b9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 63.271686][ T4048] ffffc9000c4b9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 63.280160][ T4048] ================================================================== [ 63.288748][ T4048] Disabling lock debugging due to kernel taint [ 63.295841][ T4048] Kernel panic - not syncing: panic_on_warn set ... [ 63.302690][ T4048] CPU: 0 PID: 4048 Comm: syz-executor383 Tainted: G B 5.17.0-rc2-syzkaller #0 [ 63.312820][ T4048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.325334][ T4048] Call Trace: [ 63.328623][ T4048] [ 63.331538][ T4048] dump_stack_lvl+0x57/0x7d [ 63.336020][ T4048] panic+0x214/0x49f [ 63.339890][ T4048] ? __warn_printk+0xee/0xee [ 63.344453][ T4048] ? preempt_schedule_common+0x59/0xc0 [ 63.350154][ T4048] ? ringbuf_map_alloc+0x618/0x6a0 [ 63.355515][ T4048] ? preempt_schedule_thunk+0x16/0x18 [ 63.361078][ T4048] ? ringbuf_map_alloc+0x618/0x6a0 [ 63.366161][ T4048] ? ringbuf_map_alloc+0x618/0x6a0 [ 63.371250][ T4048] end_report.cold+0x63/0x6f [ 63.375994][ T4048] kasan_report.cold+0x71/0xdf [ 63.380731][ T4048] ? ringbuf_map_alloc+0x618/0x6a0 [ 63.385817][ T4048] ringbuf_map_alloc+0x618/0x6a0 [ 63.390732][ T4048] __sys_bpf+0x8bd/0x4400 [ 63.395592][ T4048] ? bpf_link_get_from_fd+0xe0/0xe0 [ 63.400782][ T4048] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 63.407182][ T4048] ? find_held_lock+0x2d/0x110 [ 63.412027][ T4048] __x64_sys_bpf+0x70/0xb0 [ 63.416524][ T4048] ? syscall_enter_from_user_mode+0x21/0x70 [ 63.422614][ T4048] do_syscall_64+0x35/0xb0 [ 63.427193][ T4048] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 63.433241][ T4048] RIP: 0033:0x7f31c3a41b49 [ 63.437859][ T4048] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 63.458055][ T4048] RSP: 002b:00007ffd6ca26ab8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 63.466616][ T4048] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f31c3a41b49 [ 63.475161][ T4048] RDX: 0000000000000048 RSI: 0000000020000280 RDI: 0000000000000000 [ 63.483377][ T4048] RBP: 00007f31c3a05cf0 R08: 0000000000000000 R09: 0000000000000000 [ 63.491412][ T4048] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007f31c3a05d80 [ 63.499565][ T4048] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.507972][ T4048] [ 63.511467][ T4048] Kernel Offset: disabled [ 63.515945][ T4048] Rebooting in 86400 seconds..