Warning: Permanently added '10.128.10.1' (ED25519) to the list of known hosts.
2024/04/23 07:04:33 ignoring optional flag "sandboxArg"="0"
2024/04/23 07:04:33 parsed 1 programs
2024/04/23 07:04:35 executed programs: 0
[ 85.549411][ T5427] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 85.601541][ T4480] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 85.609734][ T4480] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 85.617663][ T4480] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 85.625656][ T4480] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 85.633257][ T4480] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 85.640716][ T4480] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 85.754307][ T5433] chnl_net:caif_netlink_parms(): no params data found
[ 85.806666][ T5433] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.814058][ T5433] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.821153][ T5433] bridge_slave_0: entered allmulticast mode
[ 85.828228][ T5433] bridge_slave_0: entered promiscuous mode
[ 85.836482][ T5433] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.843971][ T5433] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.851083][ T5433] bridge_slave_1: entered allmulticast mode
[ 85.858515][ T5433] bridge_slave_1: entered promiscuous mode
[ 85.882346][ T5433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 85.893689][ T5433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 85.920932][ T5433] team0: Port device team_slave_0 added
[ 85.929694][ T5433] team0: Port device team_slave_1 added
[ 85.951018][ T5433] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 85.958568][ T5433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 85.984886][ T5433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 85.997694][ T5433] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 86.005157][ T5433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 86.031601][ T5433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 86.065932][ T5433] hsr_slave_0: entered promiscuous mode
[ 86.072330][ T5433] hsr_slave_1: entered promiscuous mode
[ 86.691400][ T5433] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 86.703170][ T5433] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 86.714875][ T5433] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 86.725834][ T5433] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 86.756109][ T5433] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.763368][ T5433] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 86.770894][ T5433] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.778100][ T5433] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 86.790346][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state
[ 86.799382][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state
[ 86.884965][ T5433] 8021q: adding VLAN 0 to HW filter on device bond0
[ 86.909725][ T5433] 8021q: adding VLAN 0 to HW filter on device team0
[ 86.925151][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.932311][ T5095] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 86.961363][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.968561][ T5095] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 87.000407][ T5433] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 87.011295][ T5433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 87.172110][ T5433] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 87.223433][ T5433] veth0_vlan: entered promiscuous mode
[ 87.236743][ T5433] veth1_vlan: entered promiscuous mode
[ 87.270510][ T5433] veth0_macvtap: entered promiscuous mode
[ 87.280975][ T5433] veth1_macvtap: entered promiscuous mode
[ 87.304881][ T5433] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 87.320176][ T5433] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 87.332967][ T5433] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.342844][ T5433] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.352218][ T5433] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.361963][ T5433] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.450760][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.460515][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.492420][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.500747][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.576499][ T5500] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 87.640073][ T5505] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 87.693339][ T5510] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 87.727419][ T4480] Bluetooth: hci0: command tx timeout
[ 87.757706][ T5514] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 87.799559][ T5517] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 87.857113][ T5521] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 87.901662][ T5524] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 87.957521][ T5527] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 88.016936][ T5530] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 88.067946][ T5535] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 89.803922][ T4480] Bluetooth: hci0: command tx timeout
2024/04/23 07:04:40 executed programs: 74
[ 91.885356][ T4480] Bluetooth: hci0: command tx timeout
[ 92.609366][ T5897] __nla_validate_parse: 114 callbacks suppressed
[ 92.609384][ T5897] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 92.669836][ T5902] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 92.720066][ T5906] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 92.779011][ T5910] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 92.817604][ T5912] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 92.856287][ T5915] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 92.912359][ T5919] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 92.956318][ T5922] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 93.012669][ T5926] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 93.066623][ T5931] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 93.963701][ T4480] Bluetooth: hci0: command tx timeout
2024/04/23 07:04:45 executed programs: 199
[ 97.621486][ T6390] __nla_validate_parse: 165 callbacks suppressed
[ 97.621499][ T6390] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 97.651185][ T6392] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 97.676400][ T6394] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 97.699941][ T6396] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 97.722599][ T6398] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 97.746679][ T6400] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 97.770420][ T6402] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 97.793234][ T6404] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 97.817575][ T6406] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 97.840581][ T6408] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
2024/04/23 07:04:50 executed programs: 504
[ 102.623965][ T7086] __nla_validate_parse: 337 callbacks suppressed
[ 102.623979][ T7086] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 102.657196][ T7088] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 102.680908][ T7090] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 102.706526][ T7092] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 102.729816][ T7094] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 102.753287][ T7096] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 102.777496][ T7098] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 102.801388][ T7100] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 102.826333][ T7102] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 102.849096][ T7104] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
2024/04/23 07:04:55 executed programs: 848
[ 107.647094][ T7787] __nla_validate_parse: 340 callbacks suppressed
[ 107.647112][ T7787] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 107.677913][ T7789] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 107.701821][ T7791] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 107.726297][ T7793] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 107.749352][ T7795] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 107.772507][ T7797] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 107.797873][ T7799] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 107.821434][ T7801] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 107.844314][ T7803] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 107.867523][ T7805] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 109.038002][ T7978] ==================================================================
[ 109.046082][ T7978] BUG: KASAN: slab-use-after-free in taprio_dump+0x857/0xd50
[ 109.053578][ T7978] Read of size 4 at addr ffff88801122b4c0 by task syz-executor.0/7978
[ 109.061734][ T7978]
[ 109.064089][ T7978] CPU: 1 PID: 7978 Comm: syz-executor.0 Not tainted 6.9.0-rc5-syzkaller-00031-g71b1543c83d6 #0
[ 109.074416][ T7978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 109.084978][ T7978] Call Trace:
[ 109.088262][ T7978]
[ 109.091190][ T7978] dump_stack_lvl+0x241/0x360
[ 109.095869][ T7978] ? __pfx_dump_stack_lvl+0x10/0x10
[ 109.101058][ T7978] ? __pfx__printk+0x10/0x10
[ 109.105635][ T7978] ? _printk+0xd5/0x120
[ 109.109789][ T7978] ? __virt_addr_valid+0x183/0x520
[ 109.114892][ T7978] ? __virt_addr_valid+0x183/0x520
[ 109.120009][ T7978] print_report+0x169/0x550
[ 109.124505][ T7978] ? __virt_addr_valid+0x183/0x520
[ 109.129602][ T7978] ? __virt_addr_valid+0x183/0x520
[ 109.134816][ T7978] ? __virt_addr_valid+0x44e/0x520
[ 109.139961][ T7978] ? __phys_addr+0xba/0x170
[ 109.144455][ T7978] ? taprio_dump+0x857/0xd50
[ 109.149048][ T7978] kasan_report+0x143/0x180
[ 109.153633][ T7978] ? taprio_dump+0x857/0xd50
[ 109.158251][ T7978] taprio_dump+0x857/0xd50
[ 109.162651][ T7978] ? __alloc_skb+0x1f3/0x440
[ 109.167233][ T7978] ? __pfx_taprio_dump+0x10/0x10
[ 109.172188][ T7978] ? __asan_memcpy+0x40/0x70
[ 109.176772][ T7978] ? nla_put+0x131/0x1e0
[ 109.181024][ T7978] tc_fill_qdisc+0x6a9/0x1210
[ 109.185711][ T7978] ? __alloc_skb+0x1f3/0x440
[ 109.190586][ T7978] ? __pfx_tc_fill_qdisc+0x10/0x10
[ 109.195691][ T7978] ? __build_skb_around+0x245/0x3d0
[ 109.200897][ T7978] ? __pfx___alloc_skb+0x10/0x10
[ 109.205843][ T7978] qdisc_notify+0x2ec/0x4b0
[ 109.210362][ T7978] tc_modify_qdisc+0x1c58/0x1e40
[ 109.215302][ T7978] ? __pfx_tc_modify_qdisc+0x10/0x10
[ 109.220612][ T7978] ? __pfx_tc_modify_qdisc+0x10/0x10
[ 109.225882][ T7978] rtnetlink_rcv_msg+0x89b/0x10d0
[ 109.230897][ T7978] ? rtnetlink_rcv_msg+0x208/0x10d0
[ 109.236095][ T7978] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 109.242405][ T7978] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 109.247850][ T7978] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 109.253817][ T7978] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 109.260129][ T7978] ? __local_bh_enable_ip+0x168/0x200
[ 109.265486][ T7978] ? lockdep_hardirqs_on+0x99/0x150
[ 109.270697][ T7978] ? __local_bh_enable_ip+0x168/0x200
[ 109.276058][ T7978] ? dev_hard_start_xmit+0x773/0x7e0
[ 109.281329][ T7978] ? __dev_queue_xmit+0x2c7/0x3ca0
[ 109.286428][ T7978] ? __pfx___local_bh_enable_ip+0x10/0x10
[ 109.292134][ T7978] ? __dev_queue_xmit+0x2c7/0x3ca0
[ 109.297315][ T7978] ? __dev_queue_xmit+0x1697/0x3ca0
[ 109.302608][ T7978] ? __dev_queue_xmit+0x2c7/0x3ca0
[ 109.307735][ T7978] ? ref_tracker_free+0x643/0x7e0
[ 109.312757][ T7978] netlink_rcv_skb+0x1e3/0x430
[ 109.317509][ T7978] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 109.323043][ T7978] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 109.328415][ T7978] ? netlink_deliver_tap+0x2e/0x1b0
[ 109.333610][ T7978] netlink_unicast+0x7ea/0x980
[ 109.338385][ T7978] ? __pfx_netlink_unicast+0x10/0x10
[ 109.343674][ T7978] ? __virt_addr_valid+0x44e/0x520
[ 109.348788][ T7978] ? __phys_addr_symbol+0x2f/0x70
[ 109.353802][ T7978] ? __check_object_size+0x4bc/0xa00
[ 109.359071][ T7978] ? bpf_lsm_netlink_send+0x9/0x10
[ 109.364186][ T7978] netlink_sendmsg+0x8e1/0xcb0
[ 109.368955][ T7978] ? __pfx_netlink_sendmsg+0x10/0x10
[ 109.374336][ T7978] ? __import_iovec+0x536/0x820
[ 109.379177][ T7978] ? aa_sock_msg_perm+0x91/0x160
[ 109.384097][ T7978] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 109.389453][ T7978] ? security_socket_sendmsg+0x87/0xb0
[ 109.394902][ T7978] ? __pfx_netlink_sendmsg+0x10/0x10
[ 109.400178][ T7978] __sock_sendmsg+0x221/0x270
[ 109.404872][ T7978] ____sys_sendmsg+0x525/0x7d0
[ 109.409639][ T7978] ? __pfx_____sys_sendmsg+0x10/0x10
[ 109.414913][ T7978] __sys_sendmsg+0x2b0/0x3a0
[ 109.419490][ T7978] ? __pfx___sys_sendmsg+0x10/0x10
[ 109.424594][ T7978] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 109.430918][ T7978] ? do_syscall_64+0x102/0x240
[ 109.435683][ T7978] ? do_syscall_64+0xb6/0x240
[ 109.440348][ T7978] do_syscall_64+0xf5/0x240
[ 109.444841][ T7978] ? clear_bhb_loop+0x35/0x90
[ 109.449519][ T7978] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.455397][ T7978] RIP: 0033:0x7f9f0907dda9
[ 109.459798][ T7978] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 109.479394][ T7978] RSP: 002b:00007f9f08bff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 109.487805][ T7978] RAX: ffffffffffffffda RBX: 00007f9f091abf80 RCX: 00007f9f0907dda9
[ 109.495767][ T7978] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004
[ 109.503730][ T7978] RBP: 00007f9f090ca47a R08: 0000000000000000 R09: 0000000000000000
[ 109.511712][ T7978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 109.519676][ T7978] R13: 000000000000000b R14: 00007f9f091abf80 R15: 00007ffeb2fbaa28
[ 109.527644][ T7978]
[ 109.530647][ T7978]
[ 109.532953][ T7978] Allocated by task 7974:
[ 109.537261][ T7978] kasan_save_track+0x3f/0x80
[ 109.541939][ T7978] __kasan_kmalloc+0x98/0xb0
[ 109.546528][ T7978] kmalloc_trace+0x1db/0x360
[ 109.551117][ T7978] taprio_change+0x1030/0x42d0
[ 109.555879][ T7978] tc_modify_qdisc+0x190d/0x1e40
[ 109.560815][ T7978] rtnetlink_rcv_msg+0x89b/0x10d0
[ 109.565892][ T7978] netlink_rcv_skb+0x1e3/0x430
[ 109.570657][ T7978] netlink_unicast+0x7ea/0x980
[ 109.575413][ T7978] netlink_sendmsg+0x8e1/0xcb0
[ 109.580181][ T7978] __sock_sendmsg+0x221/0x270
[ 109.584849][ T7978] ____sys_sendmsg+0x525/0x7d0
[ 109.589596][ T7978] __sys_sendmsg+0x2b0/0x3a0
[ 109.594171][ T7978] do_syscall_64+0xf5/0x240
[ 109.598665][ T7978] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.604545][ T7978]
[ 109.606850][ T7978] Freed by task 15:
[ 109.610637][ T7978] kasan_save_track+0x3f/0x80
[ 109.615305][ T7978] kasan_save_free_info+0x40/0x50
[ 109.620319][ T7978] poison_slab_object+0xa6/0xe0
[ 109.625185][ T7978] __kasan_slab_free+0x37/0x60
[ 109.629940][ T7978] kfree+0x153/0x3a0
[ 109.633822][ T7978] rcu_core+0xafd/0x1830
[ 109.638049][ T7978] __do_softirq+0x2c6/0x980
[ 109.642539][ T7978]
[ 109.644873][ T7978] Last potentially related work creation:
[ 109.650576][ T7978] kasan_save_stack+0x3f/0x60
[ 109.655240][ T7978] __kasan_record_aux_stack+0xac/0xc0
[ 109.660621][ T7978] call_rcu+0x167/0xa70
[ 109.664767][ T7978] taprio_change+0x32d9/0x42d0
[ 109.669519][ T7978] tc_modify_qdisc+0x190d/0x1e40
[ 109.674447][ T7978] rtnetlink_rcv_msg+0x89b/0x10d0
[ 109.679480][ T7978] netlink_rcv_skb+0x1e3/0x430
[ 109.684249][ T7978] netlink_unicast+0x7ea/0x980
[ 109.689002][ T7978] netlink_sendmsg+0x8e1/0xcb0
[ 109.693748][ T7978] __sock_sendmsg+0x221/0x270
[ 109.698414][ T7978] ____sys_sendmsg+0x525/0x7d0
[ 109.703241][ T7978] __sys_sendmsg+0x2b0/0x3a0
[ 109.707815][ T7978] do_syscall_64+0xf5/0x240
[ 109.712308][ T7978] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.718278][ T7978]
[ 109.720597][ T7978] The buggy address belongs to the object at ffff88801122b400
[ 109.720597][ T7978] which belongs to the cache kmalloc-512 of size 512
[ 109.734647][ T7978] The buggy address is located 192 bytes inside of
[ 109.734647][ T7978] freed 512-byte region [ffff88801122b400, ffff88801122b600)
[ 109.748426][ T7978]
[ 109.750756][ T7978] The buggy address belongs to the physical page:
[ 109.757168][ T7978] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11228
[ 109.765926][ T7978] head: order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 109.773454][ T7978] anon flags: 0xfff80000000840(slab|head|node=0|zone=1|lastcpupid=0xfff)
[ 109.781866][ T7978] page_type: 0xffffffff()
[ 109.786197][ T7978] raw: 00fff80000000840 ffff888015041c80 0000000000000000 dead000000000001
[ 109.794762][ T7978] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 109.803329][ T7978] head: 00fff80000000840 ffff888015041c80 0000000000000000 dead000000000001
[ 109.811990][ T7978] head: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 109.820657][ T7978] head: 00fff80000000002 ffffea0000448a01 dead000000000122 00000000ffffffff
[ 109.829311][ T7978] head: 0000000400000000 0000000000000000 00000000ffffffff 0000000000000000
[ 109.837966][ T7978] page dumped because: kasan: bad access detected
[ 109.844384][ T7978] page_owner tracks the page as allocated
[ 109.850093][ T7978] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4542, tgid -277939987 (udevd), ts 4542, free_ts 21183856870
[ 109.870750][ T7978] post_alloc_hook+0x1ea/0x210
[ 109.875500][ T7978] get_page_from_freelist+0x3410/0x35b0
[ 109.881032][ T7978] __alloc_pages+0x256/0x6c0
[ 109.885629][ T7978] alloc_slab_page+0x5f/0x160
[ 109.890304][ T7978] new_slab+0x84/0x2f0
[ 109.894375][ T7978] ___slab_alloc+0xc73/0x1260
[ 109.899037][ T7978] kmalloc_trace+0x269/0x360
[ 109.903622][ T7978] kernfs_fop_open+0x3e0/0xd10
[ 109.908399][ T7978] do_dentry_open+0x907/0x15a0
[ 109.913184][ T7978] path_openat+0x2860/0x3240
[ 109.917759][ T7978] do_filp_open+0x235/0x490
[ 109.922246][ T7978] do_sys_openat2+0x13e/0x1d0
[ 109.926923][ T7978] __x64_sys_openat+0x247/0x2a0
[ 109.931757][ T7978] do_syscall_64+0xf5/0x240
[ 109.936246][ T7978] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.942138][ T7978] page last free pid 4550 tgid 4550 stack trace:
[ 109.948444][ T7978] free_unref_page_prepare+0x986/0xab0
[ 109.953906][ T7978] free_unref_page+0x37/0x3f0
[ 109.958565][ T7978] __slab_free+0x31b/0x3d0
[ 109.962969][ T7978] qlist_free_all+0x5e/0xc0
[ 109.967459][ T7978] kasan_quarantine_reduce+0x14f/0x170
[ 109.972904][ T7978] __kasan_slab_alloc+0x23/0x80
[ 109.977743][ T7978] kmem_cache_alloc+0x174/0x340
[ 109.982575][ T7978] getname_flags+0xbd/0x4f0
[ 109.987058][ T7978] do_sys_openat2+0xd2/0x1d0
[ 109.991630][ T7978] __x64_sys_openat+0x247/0x2a0
[ 109.996461][ T7978] do_syscall_64+0xf5/0x240
[ 110.000950][ T7978] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.006831][ T7978]
[ 110.009153][ T7978] Memory state around the buggy address:
[ 110.014767][ T7978] ffff88801122b380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 110.022811][ T7978] ffff88801122b400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 110.030852][ T7978] >ffff88801122b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 110.038896][ T7978] ^
[ 110.045050][ T7978] ffff88801122b500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 110.053180][ T7978] ffff88801122b580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 110.061221][ T7978] ==================================================================
[ 110.072679][ T7978] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 110.079902][ T7978] CPU: 1 PID: 7978 Comm: syz-executor.0 Not tainted 6.9.0-rc5-syzkaller-00031-g71b1543c83d6 #0
[ 110.090216][ T7978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 110.100268][ T7978] Call Trace:
[ 110.103539][ T7978]
[ 110.106462][ T7978] dump_stack_lvl+0x241/0x360
[ 110.111142][ T7978] ? __pfx_dump_stack_lvl+0x10/0x10
[ 110.116345][ T7978] ? __pfx__printk+0x10/0x10
[ 110.120929][ T7978] ? preempt_schedule+0xe1/0xf0
[ 110.125775][ T7978] ? vscnprintf+0x5d/0x90
[ 110.130097][ T7978] panic+0x349/0x860
[ 110.133988][ T7978] ? check_panic_on_warn+0x21/0xb0
[ 110.139090][ T7978] ? __pfx_panic+0x10/0x10
[ 110.143499][ T7978] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 110.149483][ T7978] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 110.155801][ T7978] ? print_report+0x502/0x550
[ 110.160472][ T7978] check_panic_on_warn+0x86/0xb0
[ 110.165410][ T7978] ? taprio_dump+0x857/0xd50
[ 110.169997][ T7978] end_report+0x77/0x160
[ 110.174923][ T7978] kasan_report+0x154/0x180
[ 110.179423][ T7978] ? taprio_dump+0x857/0xd50
[ 110.184008][ T7978] taprio_dump+0x857/0xd50
[ 110.188410][ T7978] ? __alloc_skb+0x1f3/0x440
[ 110.192998][ T7978] ? __pfx_taprio_dump+0x10/0x10
[ 110.197929][ T7978] ? __asan_memcpy+0x40/0x70
[ 110.202507][ T7978] ? nla_put+0x131/0x1e0
[ 110.206739][ T7978] tc_fill_qdisc+0x6a9/0x1210
[ 110.211413][ T7978] ? __alloc_skb+0x1f3/0x440
[ 110.216000][ T7978] ? __pfx_tc_fill_qdisc+0x10/0x10
[ 110.221104][ T7978] ? __build_skb_around+0x245/0x3d0
[ 110.226391][ T7978] ? __pfx___alloc_skb+0x10/0x10
[ 110.231321][ T7978] qdisc_notify+0x2ec/0x4b0
[ 110.235820][ T7978] tc_modify_qdisc+0x1c58/0x1e40
[ 110.240753][ T7978] ? __pfx_tc_modify_qdisc+0x10/0x10
[ 110.246062][ T7978] ? __pfx_tc_modify_qdisc+0x10/0x10
[ 110.251334][ T7978] rtnetlink_rcv_msg+0x89b/0x10d0
[ 110.256349][ T7978] ? rtnetlink_rcv_msg+0x208/0x10d0
[ 110.261649][ T7978] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 110.268056][ T7978] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 110.273505][ T7978] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 110.279484][ T7978] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 110.285803][ T7978] ? __local_bh_enable_ip+0x168/0x200
[ 110.291163][ T7978] ? lockdep_hardirqs_on+0x99/0x150
[ 110.296354][ T7978] ? __local_bh_enable_ip+0x168/0x200
[ 110.301736][ T7978] ? dev_hard_start_xmit+0x773/0x7e0
[ 110.307009][ T7978] ? __dev_queue_xmit+0x2c7/0x3ca0
[ 110.312115][ T7978] ? __pfx___local_bh_enable_ip+0x10/0x10
[ 110.317832][ T7978] ? __dev_queue_xmit+0x2c7/0x3ca0
[ 110.322974][ T7978] ? __dev_queue_xmit+0x1697/0x3ca0
[ 110.328164][ T7978] ? __dev_queue_xmit+0x2c7/0x3ca0
[ 110.333264][ T7978] ? ref_tracker_free+0x643/0x7e0
[ 110.338276][ T7978] netlink_rcv_skb+0x1e3/0x430
[ 110.343033][ T7978] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 110.348480][ T7978] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 110.353761][ T7978] ? netlink_deliver_tap+0x2e/0x1b0
[ 110.358946][ T7978] netlink_unicast+0x7ea/0x980
[ 110.363798][ T7978] ? __pfx_netlink_unicast+0x10/0x10
[ 110.369093][ T7978] ? __virt_addr_valid+0x44e/0x520
[ 110.374200][ T7978] ? __phys_addr_symbol+0x2f/0x70
[ 110.379214][ T7978] ? __check_object_size+0x4bc/0xa00
[ 110.384489][ T7978] ? bpf_lsm_netlink_send+0x9/0x10
[ 110.389592][ T7978] netlink_sendmsg+0x8e1/0xcb0
[ 110.394354][ T7978] ? __pfx_netlink_sendmsg+0x10/0x10
[ 110.399626][ T7978] ? __import_iovec+0x536/0x820
[ 110.404469][ T7978] ? aa_sock_msg_perm+0x91/0x160
[ 110.409392][ T7978] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 110.414843][ T7978] ? security_socket_sendmsg+0x87/0xb0
[ 110.420294][ T7978] ? __pfx_netlink_sendmsg+0x10/0x10
[ 110.425564][ T7978] __sock_sendmsg+0x221/0x270
[ 110.430237][ T7978] ____sys_sendmsg+0x525/0x7d0
[ 110.435165][ T7978] ? __pfx_____sys_sendmsg+0x10/0x10
[ 110.440443][ T7978] __sys_sendmsg+0x2b0/0x3a0
[ 110.445025][ T7978] ? __pfx___sys_sendmsg+0x10/0x10
[ 110.450161][ T7978] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 110.456476][ T7978] ? do_syscall_64+0x102/0x240
[ 110.461234][ T7978] ? do_syscall_64+0xb6/0x240
[ 110.465902][ T7978] do_syscall_64+0xf5/0x240
[ 110.470397][ T7978] ? clear_bhb_loop+0x35/0x90
[ 110.475063][ T7978] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.480944][ T7978] RIP: 0033:0x7f9f0907dda9
[ 110.485375][ T7978] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 110.505332][ T7978] RSP: 002b:00007f9f08bff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 110.513858][ T7978] RAX: ffffffffffffffda RBX: 00007f9f091abf80 RCX: 00007f9f0907dda9
[ 110.521833][ T7978] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004
[ 110.529799][ T7978] RBP: 00007f9f090ca47a R08: 0000000000000000 R09: 0000000000000000
[ 110.537769][ T7978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 110.545734][ T7978] R13: 000000000000000b R14: 00007f9f091abf80 R15: 00007ffeb2fbaa28
[ 110.553704][ T7978]
[ 110.557058][ T7978] Kernel Offset: disabled
[ 110.561366][ T7978] Rebooting in 86400 seconds..