Warning: Permanently added '[localhost]:64737' (ED25519) to the list of known hosts.
2024/07/22 11:09:24 ignoring optional flag "sandboxArg"="0"
2024/07/22 11:09:24 parsed 1 programs
[ 102.882755][ T39] audit: type=1400 audit(1721646567.860:140): avc: denied { unlink } for pid=5478 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 103.470502][ T39] audit: type=1400 audit(1721646568.440:141): avc: denied { relabelto } for pid=5504 comm="mkswap" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 103.484401][ T39] audit: type=1400 audit(1721646568.450:142): avc: denied { write } for pid=5504 comm="mkswap" path="/swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 103.504203][ T39] audit: type=1400 audit(1721646568.480:143): avc: denied { read } for pid=5478 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 103.519131][ T39] audit: type=1400 audit(1721646568.480:144): avc: denied { open } for pid=5478 comm="syz-executor" path="/swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 104.625912][ T5478] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 107.214470][ T39] audit: type=1400 audit(1721646572.190:145): avc: denied { mount } for pid=5513 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 108.903629][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.907028][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.930761][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.933635][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 109.389261][ T39] audit: type=1401 audit(1721646574.360:146): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 109.700173][ T5570] chnl_net:caif_netlink_parms(): no params data found
[ 109.808292][ T5570] bridge0: port 1(bridge_slave_0) entered blocking state
[ 109.811924][ T5570] bridge0: port 1(bridge_slave_0) entered disabled state
[ 109.815225][ T5570] bridge_slave_0: entered allmulticast mode
[ 109.819067][ T5570] bridge_slave_0: entered promiscuous mode
[ 109.824244][ T5570] bridge0: port 2(bridge_slave_1) entered blocking state
[ 109.827135][ T5570] bridge0: port 2(bridge_slave_1) entered disabled state
[ 109.830408][ T5570] bridge_slave_1: entered allmulticast mode
[ 109.833658][ T5570] bridge_slave_1: entered promiscuous mode
[ 109.886915][ T5570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 109.894009][ T5570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 109.949671][ T5570] team0: Port device team_slave_0 added
[ 109.955357][ T5570] team0: Port device team_slave_1 added
[ 110.027779][ T5570] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 110.034005][ T5570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 110.053463][ T5570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 110.059924][ T5570] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 110.063366][ T5570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 110.073853][ T5570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 110.168115][ T5570] hsr_slave_0: entered promiscuous mode
[ 110.173696][ T5570] hsr_slave_1: entered promiscuous mode
[ 110.384603][ T39] audit: type=1400 audit(1721646575.360:147): avc: denied { create } for pid=5577 comm="dhcpcd-run-hook" name="resolv.conf.lapb10.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 110.401857][ T39] audit: type=1400 audit(1721646575.360:148): avc: denied { write open } for pid=5577 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb10.link" dev="tmpfs" ino=1815 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 110.418096][ T39] audit: type=1400 audit(1721646575.360:149): avc: denied { append } for pid=5577 comm="dhcpcd-run-hook" name="resolv.conf.lapb10.link" dev="tmpfs" ino=1815 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 110.429521][ T39] audit: type=1400 audit(1721646575.360:150): avc: denied { getattr } for pid=5577 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 110.440897][ T39] audit: type=1400 audit(1721646575.370:151): avc: denied { read } for pid=5579 comm="cmp" name="resolv.conf" dev="tmpfs" ino=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 110.470319][ T39] audit: type=1400 audit(1721646575.430:152): avc: denied { unlink } for pid=5580 comm="rm" name="resolv.conf.lapb10.link" dev="tmpfs" ino=1815 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 111.020764][ T5570] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 111.028296][ T5570] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 111.039197][ T5570] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 111.045565][ T5570] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 111.113980][ T5570] 8021q: adding VLAN 0 to HW filter on device bond0
[ 111.136560][ T5570] 8021q: adding VLAN 0 to HW filter on device team0
[ 111.149046][ T5259] bridge0: port 1(bridge_slave_0) entered blocking state
[ 111.152372][ T5259] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 111.162073][ T25] bridge0: port 2(bridge_slave_1) entered blocking state
[ 111.165140][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 111.246288][ T39] audit: type=1400 audit(1721646576.220:153): avc: denied { sys_module } for pid=5570 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 111.330850][ T5570] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 111.363220][ T5570] veth0_vlan: entered promiscuous mode
[ 111.371069][ T5570] veth1_vlan: entered promiscuous mode
[ 111.399713][ T5570] veth0_macvtap: entered promiscuous mode
[ 111.407716][ T5570] veth1_macvtap: entered promiscuous mode
[ 111.424270][ T5570] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 111.432884][ T5570] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 111.440372][ T5570] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.444282][ T5570] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.448189][ T5570] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.452786][ T5570] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.555541][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 111.562306][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 111.566533][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 111.575208][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 111.585275][ T67] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 111.592612][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 111.595162][ T45] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 111.708105][ T45] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2024/07/22 11:09:36 executed programs: 0
[ 111.772490][ T4646] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 111.779814][ T4646] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 111.785092][ T4646] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 111.790475][ T4646] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 111.802559][ T4646] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 111.808353][ T4646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 111.832068][ T45] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 111.902787][ T45] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 112.022834][ T5636] chnl_net:caif_netlink_parms(): no params data found
[ 112.119269][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state
[ 112.122619][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state
[ 112.125785][ T5636] bridge_slave_0: entered allmulticast mode
[ 112.129651][ T5636] bridge_slave_0: entered promiscuous mode
[ 112.136338][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state
[ 112.139554][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state
[ 112.142871][ T5636] bridge_slave_1: entered allmulticast mode
[ 112.146921][ T5636] bridge_slave_1: entered promiscuous mode
[ 112.199461][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 112.208700][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 112.258625][ T5636] team0: Port device team_slave_0 added
[ 112.264479][ T5636] team0: Port device team_slave_1 added
[ 112.309074][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 112.311614][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 112.321636][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 112.327737][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 112.330605][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 112.340583][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 112.405771][ T5636] hsr_slave_0: entered promiscuous mode
[ 112.408981][ T5636] hsr_slave_1: entered promiscuous mode
[ 112.413864][ T5636] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 112.416993][ T5636] Cannot create hsr debugfs directory
[ 113.841483][ T4646] Bluetooth: hci1: command tx timeout
[ 115.920316][ T4646] Bluetooth: hci1: command tx timeout
[ 116.550456][ T45] bridge_slave_1: left allmulticast mode
[ 116.553035][ T45] bridge_slave_1: left promiscuous mode
[ 116.555712][ T45] bridge0: port 2(bridge_slave_1) entered disabled state
[ 116.561294][ T45] bridge_slave_0: left allmulticast mode
[ 116.563853][ T45] bridge_slave_0: left promiscuous mode
[ 116.566548][ T45] bridge0: port 1(bridge_slave_0) entered disabled state
[ 116.823250][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 116.830123][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 116.836995][ T45] bond0 (unregistering): Released all slaves
[ 117.015926][ T45] hsr_slave_0: left promiscuous mode
[ 117.019174][ T45] hsr_slave_1: left promiscuous mode
[ 117.022970][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 117.026602][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 117.029900][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 117.033682][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 117.062126][ T45] veth1_macvtap: left promiscuous mode
[ 117.064331][ T45] veth0_macvtap: left promiscuous mode
[ 117.066844][ T45] veth1_vlan: left promiscuous mode
[ 117.069301][ T45] veth0_vlan: left promiscuous mode
[ 117.716649][ T45] team0 (unregistering): Port device team_slave_1 removed
[ 117.767737][ T45] team0 (unregistering): Port device team_slave_0 removed
[ 118.011505][ T4646] Bluetooth: hci1: command tx timeout
[ 118.505931][ T5636] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 118.512179][ T5636] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 118.517600][ T5636] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 118.523138][ T5636] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 118.606661][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0
[ 118.618580][ T5636] 8021q: adding VLAN 0 to HW filter on device team0
[ 118.628000][ T5007] bridge0: port 1(bridge_slave_0) entered blocking state
[ 118.631269][ T5007] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 118.642292][ T827] bridge0: port 2(bridge_slave_1) entered blocking state
[ 118.646399][ T827] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 118.841471][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 118.875937][ T5636] veth0_vlan: entered promiscuous mode
[ 118.886715][ T5636] veth1_vlan: entered promiscuous mode
[ 118.913753][ T5636] veth0_macvtap: entered promiscuous mode
[ 118.918847][ T5636] veth1_macvtap: entered promiscuous mode
[ 118.936231][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 118.945894][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 118.953305][ T5636] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.957128][ T5636] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.961169][ T5636] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.964158][ T5636] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.031222][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.034408][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.064752][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.067744][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2024/07/22 11:09:44 executed programs: 2
[ 119.106110][ T39] audit: type=1400 audit(1721646584.080:154): avc: denied { prog_load } for pid=5766 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 119.113934][ T39] audit: type=1400 audit(1721646584.080:155): avc: denied { bpf } for pid=5766 comm="syz.0.15" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 119.121891][ T39] audit: type=1400 audit(1721646584.080:156): avc: denied { perfmon } for pid=5766 comm="syz.0.15" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 119.133950][ T39] audit: type=1400 audit(1721646584.110:157): avc: denied { prog_run } for pid=5766 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 119.142179][ T39] audit: type=1400 audit(1721646584.110:158): avc: denied { create } for pid=5766 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 119.150763][ T39] audit: type=1400 audit(1721646584.110:159): avc: denied { ioctl } for pid=5766 comm="syz.0.15" path="socket:[9758]" dev="sockfs" ino=9758 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 120.080023][ T4646] Bluetooth: hci1: command tx timeout
[ 121.400324][ C1] ==================================================================
[ 121.404159][ C1] BUG: KASAN: stack-out-of-bounds in xdp_do_check_flushed+0x41c/0x4e0
[ 121.407999][ C1] Read of size 4 at addr ffffc9000167fa50 by task syz.0.111/5959
[ 121.414096][ C1]
[ 121.415459][ C1] CPU: 1 UID: 0 PID: 5959 Comm: syz.0.111 Not tainted 6.10.0-syzkaller-g933069701c1b #0
[ 121.419917][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 121.424949][ C1] Call Trace:
[ 121.426334][ C1]
[ 121.427549][ C1] dump_stack_lvl+0x116/0x1f0
[ 121.429656][ C1] print_report+0xc3/0x620
[ 121.431685][ C1] ? __virt_addr_valid+0x5e/0x590
[ 121.433915][ C1] kasan_report+0xd9/0x110
[ 121.436283][ C1] ? xdp_do_check_flushed+0x41c/0x4e0
[ 121.438829][ C1] ? xdp_do_check_flushed+0x41c/0x4e0
[ 121.441191][ C1] xdp_do_check_flushed+0x41c/0x4e0
[ 121.443707][ C1] __napi_poll.constprop.0+0xd1/0x550
[ 121.446076][ C1] net_rx_action+0xa92/0x1010
[ 121.448175][ C1] ? __pfx_net_rx_action+0x10/0x10
[ 121.449895][ C1] ? __pfx_mark_lock+0x10/0x10
[ 121.451938][ C1] ? rcu_qs+0x80/0xe0
[ 121.453627][ C1] ? trace_rcu_utilization+0x100/0x160
[ 121.455466][ C1] ? mark_held_locks+0x9f/0xe0
[ 121.457204][ C1] handle_softirqs+0x216/0x8f0
[ 121.459106][ C1] ? __pfx_handle_softirqs+0x10/0x10
[ 121.461163][ C1] irq_exit_rcu+0xbb/0x120
[ 121.462929][ C1] sysvec_apic_timer_interrupt+0x95/0xb0
[ 121.465090][ C1]
[ 121.466335][ C1]
[ 121.467585][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 121.470047][ C1] RIP: 0010:write_comp_data+0x0/0x90
[ 121.472136][ C1] Code: 48 8b 05 e3 5c 79 7e 48 8b 80 10 16 00 00 c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <49> 89 d2 49 89 f8 49 89 f1 65 48 8b 15 af 5c 79 7e 65 8b 05 b0 5c
[ 121.479358][ C1] RSP: 0018:ffffc9000167f618 EFLAGS: 00000246
[ 121.481715][ C1] RAX: 0000000000000003 RBX: ffffea0000d86e40 RCX: ffffffff81d6e231
[ 121.485296][ C1] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000005
[ 121.488511][ C1] RBP: ffffea0000d86e40 R08: 0000000000000007 R09: 0000000000000000
[ 121.491600][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 121.494596][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffc9000167fab8
[ 121.498436][ C1] ? __folio_rmap_sanity_checks+0x61/0x550
[ 121.501231][ C1] ? arch_check_zapped_pte+0x9e/0x140
[ 121.503714][ C1] __folio_rmap_sanity_checks+0x61/0x550
[ 121.505853][ C1] folio_remove_rmap_ptes+0x31/0x3d0
[ 121.508026][ C1] unmap_page_range+0x1997/0x3c10
[ 121.510104][ C1] ? __pfx_unmap_page_range+0x10/0x10
[ 121.512309][ C1] ? uprobe_munmap+0x20/0x5d0
[ 121.514236][ C1] unmap_single_vma+0x194/0x2b0
[ 121.516214][ C1] unmap_vmas+0x22f/0x490
[ 121.517944][ C1] ? __pfx_unmap_vmas+0x10/0x10
[ 121.519922][ C1] ? __pfx_lock_release+0x10/0x10
[ 121.521942][ C1] ? lru_add_drain_cpu+0x454/0x860
[ 121.524038][ C1] exit_mmap+0x1b8/0xb20
[ 121.525615][ C1] ? __pfx_exit_mmap+0x10/0x10
[ 121.527561][ C1] __mmput+0x12a/0x480
[ 121.529234][ C1] mmput+0x62/0x70
[ 121.530636][ C1] do_exit+0x9bf/0x2bb0
[ 121.532133][ C1] ? get_signal+0x8f2/0x2770
[ 121.533788][ C1] ? __pfx_do_exit+0x10/0x10
[ 121.535450][ C1] ? do_raw_spin_lock+0x12d/0x2c0
[ 121.537334][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 121.539268][ C1] do_group_exit+0xd3/0x2a0
[ 121.540977][ C1] get_signal+0x25fd/0x2770
[ 121.542942][ C1] ? vfs_write+0x917/0x1140
[ 121.544914][ C1] ? vfs_write+0x14d/0x1140
[ 121.546794][ C1] ? __pfx_get_signal+0x10/0x10
[ 121.548808][ C1] ? __pfx_do_futex+0x10/0x10
[ 121.550713][ C1] arch_do_signal_or_restart+0x90/0x7e0
[ 121.552890][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 121.555221][ C1] syscall_exit_to_user_mode+0x150/0x2a0
[ 121.557460][ C1] do_syscall_64+0xda/0x250
[ 121.559337][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.561725][ C1] RIP: 0033:0x7f66e7375b59
[ 121.563534][ C1] Code: Unable to access opcode bytes at 0x7f66e7375b2f.
[ 121.566367][ C1] RSP: 002b:00007f66e809c0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 121.569740][ C1] RAX: fffffffffffffe00 RBX: 00007f66e7505f68 RCX: 00007f66e7375b59
[ 121.572837][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f66e7505f68
[ 121.575957][ C1] RBP: 00007f66e7505f60 R08: 00007f66e809c6c0 R09: 00007f66e809c6c0
[ 121.578849][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66e7505f6c
[ 121.581870][ C1] R13: 000000000000000b R14: 00007ffd814e49e0 R15: 00007ffd814e4ac8
[ 121.585088][ C1]
[ 121.586429][ C1]
[ 121.587467][ C1] The buggy address belongs to stack of task syz.0.111/5959
[ 121.590510][ C1] and is located at offset 24 in frame:
[ 121.592809][ C1] exit_mmap+0x0/0xb20
[ 121.594228][ C1]
[ 121.595135][ C1] This frame has 2 objects:
[ 121.596819][ C1] [32, 96) 'vmi'
[ 121.596829][ C1] [128, 256) 'tlb'
[ 121.598273][ C1]
[ 121.600908][ C1] The buggy address belongs to the virtual mapping at
[ 121.600908][ C1] [ffffc90001678000, ffffc90001681000) created by:
[ 121.600908][ C1] kernel_clone+0xfd/0x980
[ 121.608366][ C1]
[ 121.609407][ C1] The buggy address belongs to the physical page:
[ 121.612139][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801ec13150 pfn:0x1ec13
[ 121.616457][ C1] memcg:ffff8880261f3b82
[ 121.618181][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 121.621134][ C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[ 121.624602][ C1] raw: ffff88801ec13150 0000000000000000 00000001ffffffff ffff8880261f3b82
[ 121.628044][ C1] page dumped because: kasan: bad access detected
[ 121.630481][ C1] page_owner tracks the page as allocated
[ 121.632594][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 5636, tgid 5636 (syz-executor), ts 121181133330, free_ts 121100052787
[ 121.639724][ C1] post_alloc_hook+0x2d1/0x350
[ 121.641679][ C1] get_page_from_freelist+0x1351/0x2e50
[ 121.643961][ C1] __alloc_pages_noprof+0x22b/0x2460
[ 121.646137][ C1] alloc_pages_mpol_noprof+0x275/0x610
[ 121.648431][ C1] __vmalloc_node_range_noprof+0xa6a/0x1520
[ 121.651001][ C1] copy_process+0x2f3b/0x8de0
[ 121.652789][ C1] kernel_clone+0xfd/0x980
[ 121.654471][ C1] __do_sys_clone+0xba/0x100
[ 121.656191][ C1] do_syscall_64+0xcd/0x250
[ 121.657922][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.660684][ C1] page last free pid 0 tgid 0 stack trace:
[ 121.663131][ C1] free_unref_page+0x64a/0xe40
[ 121.665176][ C1] __folio_put+0x31c/0x3e0
[ 121.667094][ C1] free_page_and_swap_cache+0x249/0x2c0
[ 121.669534][ C1] tlb_remove_table_rcu+0x89/0xe0
[ 121.671710][ C1] rcu_core+0x828/0x16b0
[ 121.673587][ C1] handle_softirqs+0x216/0x8f0
[ 121.675963][ C1] irq_exit_rcu+0xbb/0x120
[ 121.677861][ C1] sysvec_apic_timer_interrupt+0x95/0xb0
[ 121.680286][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 121.682797][ C1]
[ 121.683807][ C1] Memory state around the buggy address:
[ 121.686210][ C1] ffffc9000167f900: 00 f2 f2 f2 00 f2 f2 f2 00 00 f2 f2 00 00 00 00
[ 121.689643][ C1] ffffc9000167f980: 00 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00
[ 121.692929][ C1] >ffffc9000167fa00: 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 00
[ 121.695998][ C1] ^
[ 121.698489][ C1] ffffc9000167fa80: 00 00 00 f2 f2 f2 f2 00 00 00 00 00 00 00 00 00
[ 121.701433][ C1] ffffc9000167fb00: 00 00 00 00 00 00 00 f3 f3 f3 f3 00 00 00 00 00
[ 121.704734][ C1] ==================================================================
[ 121.708157][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 121.711400][ C1] CPU: 1 UID: 0 PID: 5959 Comm: syz.0.111 Not tainted 6.10.0-syzkaller-g933069701c1b #0
[ 121.715571][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 121.720246][ C1] Call Trace:
[ 121.721666][ C1]
[ 121.722903][ C1] dump_stack_lvl+0x3d/0x1f0
[ 121.724966][ C1] panic+0x6f5/0x7a0
[ 121.726718][ C1] ? __pfx_panic+0x10/0x10
[ 121.728676][ C1] ? check_panic_on_warn+0x1f/0xb0
[ 121.730828][ C1] check_panic_on_warn+0xab/0xb0
[ 121.732648][ C1] end_report+0x117/0x180
[ 121.734271][ C1] kasan_report+0xe9/0x110
[ 121.736783][ C1] ? xdp_do_check_flushed+0x41c/0x4e0
[ 121.739370][ C1] ? xdp_do_check_flushed+0x41c/0x4e0
[ 121.741777][ C1] xdp_do_check_flushed+0x41c/0x4e0
[ 121.744244][ C1] __napi_poll.constprop.0+0xd1/0x550
[ 121.746779][ C1] net_rx_action+0xa92/0x1010
[ 121.748903][ C1] ? __pfx_net_rx_action+0x10/0x10
[ 121.751160][ C1] ? __pfx_mark_lock+0x10/0x10
[ 121.753389][ C1] ? rcu_qs+0x80/0xe0
[ 121.755194][ C1] ? trace_rcu_utilization+0x100/0x160
[ 121.757602][ C1] ? mark_held_locks+0x9f/0xe0
[ 121.759690][ C1] handle_softirqs+0x216/0x8f0
[ 121.761595][ C1] ? __pfx_handle_softirqs+0x10/0x10
[ 121.763602][ C1] irq_exit_rcu+0xbb/0x120
[ 121.765343][ C1] sysvec_apic_timer_interrupt+0x95/0xb0
[ 121.767562][ C1]
[ 121.768736][ C1]
[ 121.769895][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 121.773390][ C1] RIP: 0010:write_comp_data+0x0/0x90
[ 121.776101][ C1] Code: 48 8b 05 e3 5c 79 7e 48 8b 80 10 16 00 00 c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <49> 89 d2 49 89 f8 49 89 f1 65 48 8b 15 af 5c 79 7e 65 8b 05 b0 5c
[ 121.784434][ C1] RSP: 0018:ffffc9000167f618 EFLAGS: 00000246
[ 121.786815][ C1] RAX: 0000000000000003 RBX: ffffea0000d86e40 RCX: ffffffff81d6e231
[ 121.789871][ C1] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000005
[ 121.793136][ C1] RBP: ffffea0000d86e40 R08: 0000000000000007 R09: 0000000000000000
[ 121.796537][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 121.800095][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffc9000167fab8
[ 121.803482][ C1] ? __folio_rmap_sanity_checks+0x61/0x550
[ 121.805982][ C1] ? arch_check_zapped_pte+0x9e/0x140
[ 121.808347][ C1] __folio_rmap_sanity_checks+0x61/0x550
[ 121.810862][ C1] folio_remove_rmap_ptes+0x31/0x3d0
[ 121.813076][ C1] unmap_page_range+0x1997/0x3c10
[ 121.814866][ C1] ? __pfx_unmap_page_range+0x10/0x10
[ 121.816709][ C1] ? uprobe_munmap+0x20/0x5d0
[ 121.818307][ C1] unmap_single_vma+0x194/0x2b0
[ 121.820167][ C1] unmap_vmas+0x22f/0x490
[ 121.821846][ C1] ? __pfx_unmap_vmas+0x10/0x10
[ 121.823591][ C1] ? __pfx_lock_release+0x10/0x10
[ 121.825341][ C1] ? lru_add_drain_cpu+0x454/0x860
[ 121.827417][ C1] exit_mmap+0x1b8/0xb20
[ 121.829082][ C1] ? __pfx_exit_mmap+0x10/0x10
[ 121.830885][ C1] __mmput+0x12a/0x480
[ 121.832497][ C1] mmput+0x62/0x70
[ 121.833949][ C1] do_exit+0x9bf/0x2bb0
[ 121.835893][ C1] ? get_signal+0x8f2/0x2770
[ 121.837786][ C1] ? __pfx_do_exit+0x10/0x10
[ 121.839554][ C1] ? do_raw_spin_lock+0x12d/0x2c0
[ 121.841606][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 121.843924][ C1] do_group_exit+0xd3/0x2a0
[ 121.846277][ C1] get_signal+0x25fd/0x2770
[ 121.848219][ C1] ? vfs_write+0x917/0x1140
[ 121.850087][ C1] ? vfs_write+0x14d/0x1140
[ 121.852565][ C1] ? __pfx_get_signal+0x10/0x10
[ 121.854955][ C1] ? __pfx_do_futex+0x10/0x10
[ 121.857048][ C1] arch_do_signal_or_restart+0x90/0x7e0
[ 121.859506][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 121.862242][ C1] syscall_exit_to_user_mode+0x150/0x2a0
[ 121.864662][ C1] do_syscall_64+0xda/0x250
[ 121.866633][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.869251][ C1] RIP: 0033:0x7f66e7375b59
[ 121.871119][ C1] Code: Unable to access opcode bytes at 0x7f66e7375b2f.
[ 121.873520][ C1] RSP: 002b:00007f66e809c0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 121.876322][ C1] RAX: fffffffffffffe00 RBX: 00007f66e7505f68 RCX: 00007f66e7375b59
[ 121.879229][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f66e7505f68
[ 121.881891][ C1] RBP: 00007f66e7505f60 R08: 00007f66e809c6c0 R09: 00007f66e809c6c0
[ 121.884865][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66e7505f6c
[ 121.887868][ C1] R13: 000000000000000b R14: 00007ffd814e49e0 R15: 00007ffd814e4ac8
[ 121.890987][ C1]
[ 121.892745][ C1] Kernel Offset: disabled
[ 121.894387][ C1] Rebooting in 86400 seconds..