Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts.
2024/04/23 08:15:21 ignoring optional flag "sandboxArg"="0"
2024/04/23 08:15:21 parsed 1 programs
2024/04/23 08:15:23 executed programs: 0
[ 90.097769][ T5425] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 90.156740][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 90.165355][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 90.173815][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 90.183190][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 90.191134][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 90.198445][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 90.317431][ T5432] chnl_net:caif_netlink_parms(): no params data found
[ 90.369715][ T5432] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.376807][ T5432] bridge0: port 1(bridge_slave_0) entered disabled state
[ 90.384912][ T5432] bridge_slave_0: entered allmulticast mode
[ 90.391857][ T5432] bridge_slave_0: entered promiscuous mode
[ 90.400383][ T5432] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.407820][ T5432] bridge0: port 2(bridge_slave_1) entered disabled state
[ 90.415364][ T5432] bridge_slave_1: entered allmulticast mode
[ 90.423160][ T5432] bridge_slave_1: entered promiscuous mode
[ 90.447541][ T5432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 90.459166][ T5432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 90.489585][ T5432] team0: Port device team_slave_0 added
[ 90.498883][ T5432] team0: Port device team_slave_1 added
[ 90.521862][ T5432] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 90.528838][ T5432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 90.555153][ T5432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 90.567677][ T5432] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 90.574708][ T5432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 90.600823][ T5432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 90.636218][ T5432] hsr_slave_0: entered promiscuous mode
[ 90.643174][ T5432] hsr_slave_1: entered promiscuous mode
[ 91.220519][ T5432] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 91.232681][ T5432] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 91.243668][ T5432] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 91.255465][ T5432] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 91.289286][ T5432] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.296824][ T5432] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 91.305095][ T5432] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.313068][ T5432] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 91.328796][ T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 91.338390][ T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 91.423225][ T5432] 8021q: adding VLAN 0 to HW filter on device bond0
[ 91.450696][ T5432] 8021q: adding VLAN 0 to HW filter on device team0
[ 91.466343][ T927] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.473614][ T927] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 91.511422][ T927] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.518634][ T927] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 91.746583][ T5432] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 91.811910][ T5432] veth0_vlan: entered promiscuous mode
[ 91.831315][ T5432] veth1_vlan: entered promiscuous mode
[ 91.872520][ T5432] veth0_macvtap: entered promiscuous mode
[ 91.885419][ T5432] veth1_macvtap: entered promiscuous mode
[ 91.915396][ T5432] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 91.941278][ T5432] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 91.956061][ T5432] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.967815][ T5432] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.977853][ T5432] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.989506][ T5432] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.097051][ T954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.117095][ T954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.153526][ T2443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.164150][ T2443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.235642][ T5502] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 92.261409][ T4480] Bluetooth: hci0: command tx timeout
[ 92.296320][ T5506] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 92.378466][ T5512] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 92.429272][ T5515] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 92.493279][ T5519] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 92.546926][ T5522] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 92.622343][ T5526] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 92.668203][ T5529] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 92.726709][ T5533] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 92.800727][ T5537] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 94.339684][ T4480] Bluetooth: hci0: command tx timeout
2024/04/23 08:15:28 executed programs: 60
[ 96.419761][ T4480] Bluetooth: hci0: command tx timeout
[ 97.252021][ T5861] __nla_validate_parse: 99 callbacks suppressed
[ 97.252043][ T5861] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 97.302991][ T5865] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 97.342383][ T5869] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 97.383545][ T5873] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 97.422150][ T5876] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 97.456990][ T5880] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 97.494369][ T5883] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 97.529112][ T5886] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 97.568981][ T5889] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 97.606912][ T5892] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 98.499631][ T4480] Bluetooth: hci0: command tx timeout
2024/04/23 08:15:33 executed programs: 211
[ 102.259873][ T6403] __nla_validate_parse: 186 callbacks suppressed
[ 102.259895][ T6403] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 102.292885][ T6405] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 102.318562][ T6407] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 102.345498][ T6409] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 102.371223][ T6411] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 102.398013][ T6413] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 102.424022][ T6415] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 102.448525][ T6417] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 102.476754][ T6419] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 102.503197][ T6421] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
2024/04/23 08:15:38 executed programs: 477
[ 107.201419][ T7000] ==================================================================
[ 107.209628][ T7000] BUG: KASAN: slab-use-after-free in taprio_dump+0x857/0xd50
[ 107.217124][ T7000] Read of size 4 at addr ffff8880221ef4c0 by task syz-executor.0/7000
[ 107.225472][ T7000]
[ 107.227893][ T7000] CPU: 0 PID: 7000 Comm: syz-executor.0 Not tainted 6.9.0-rc5-syzkaller-00031-g71b1543c83d6 #0
[ 107.238221][ T7000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 107.248432][ T7000] Call Trace:
[ 107.252717][ T7000]
[ 107.255653][ T7000] dump_stack_lvl+0x241/0x360
[ 107.260447][ T7000] ? __pfx_dump_stack_lvl+0x10/0x10
[ 107.265662][ T7000] ? __pfx__printk+0x10/0x10
[ 107.270538][ T7000] ? _printk+0xd5/0x120
[ 107.274710][ T7000] ? __virt_addr_valid+0x183/0x520
[ 107.280187][ T7000] ? __virt_addr_valid+0x183/0x520
[ 107.285321][ T7000] print_report+0x169/0x550
[ 107.289957][ T7000] ? __virt_addr_valid+0x183/0x520
[ 107.295389][ T7000] ? __virt_addr_valid+0x183/0x520
[ 107.300552][ T7000] ? __virt_addr_valid+0x44e/0x520
[ 107.306033][ T7000] ? __phys_addr+0xba/0x170
[ 107.310540][ T7000] ? taprio_dump+0x857/0xd50
[ 107.315529][ T7000] kasan_report+0x143/0x180
[ 107.320291][ T7000] ? taprio_dump+0x857/0xd50
[ 107.325340][ T7000] taprio_dump+0x857/0xd50
[ 107.329961][ T7000] ? __alloc_skb+0x1f3/0x440
[ 107.334703][ T7000] ? __pfx_taprio_dump+0x10/0x10
[ 107.339648][ T7000] ? __asan_memcpy+0x40/0x70
[ 107.344326][ T7000] ? nla_put+0x131/0x1e0
[ 107.348680][ T7000] tc_fill_qdisc+0x6a9/0x1210
[ 107.353487][ T7000] ? __alloc_skb+0x1f3/0x440
[ 107.358306][ T7000] ? __pfx_tc_fill_qdisc+0x10/0x10
[ 107.364735][ T7000] ? __build_skb_around+0x245/0x3d0
[ 107.370033][ T7000] ? __pfx___alloc_skb+0x10/0x10
[ 107.375261][ T7000] qdisc_notify+0x2ec/0x4b0
[ 107.379873][ T7000] tc_modify_qdisc+0x1c58/0x1e40
[ 107.384923][ T7000] ? __pfx_tc_modify_qdisc+0x10/0x10
[ 107.390260][ T7000] ? __pfx_tc_modify_qdisc+0x10/0x10
[ 107.395565][ T7000] rtnetlink_rcv_msg+0x89b/0x10d0
[ 107.400828][ T7000] ? rtnetlink_rcv_msg+0x208/0x10d0
[ 107.406022][ T7000] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 107.411503][ T7000] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 107.417547][ T7000] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 107.424361][ T7000] ? _raw_spin_unlock_irqrestore+0x8f/0x140
[ 107.430396][ T7000] ? lockdep_hardirqs_on+0x99/0x150
[ 107.435681][ T7000] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 107.441579][ T7000] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 107.447903][ T7000] ? __dev_queue_xmit+0x1697/0x3ca0
[ 107.453099][ T7000] ? rcu_preempt_deferred_qs_irqrestore+0x87b/0xc70
[ 107.459692][ T7000] ? __dev_queue_xmit+0x2c7/0x3ca0
[ 107.464910][ T7000] netlink_rcv_skb+0x1e3/0x430
[ 107.469670][ T7000] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 107.475187][ T7000] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 107.480617][ T7000] ? __rcu_read_unlock+0xa1/0x110
[ 107.485685][ T7000] ? netlink_deliver_tap+0x2e/0x1b0
[ 107.490907][ T7000] netlink_unicast+0x7ea/0x980
[ 107.495690][ T7000] ? __pfx_netlink_unicast+0x10/0x10
[ 107.501003][ T7000] ? __virt_addr_valid+0x44e/0x520
[ 107.506128][ T7000] ? __phys_addr_symbol+0x2f/0x70
[ 107.511159][ T7000] ? __check_object_size+0x4bc/0xa00
[ 107.516615][ T7000] ? bpf_lsm_netlink_send+0x9/0x10
[ 107.521907][ T7000] netlink_sendmsg+0x8e1/0xcb0
[ 107.526779][ T7000] ? __pfx_netlink_sendmsg+0x10/0x10
[ 107.532272][ T7000] ? __import_iovec+0x536/0x820
[ 107.537202][ T7000] ? aa_sock_msg_perm+0x91/0x160
[ 107.542240][ T7000] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 107.547798][ T7000] ? security_socket_sendmsg+0x87/0xb0
[ 107.553267][ T7000] ? __pfx_netlink_sendmsg+0x10/0x10
[ 107.558548][ T7000] __sock_sendmsg+0x221/0x270
[ 107.563226][ T7000] ____sys_sendmsg+0x525/0x7d0
[ 107.567995][ T7000] ? __pfx_____sys_sendmsg+0x10/0x10
[ 107.573326][ T7000] __sys_sendmsg+0x2b0/0x3a0
[ 107.577927][ T7000] ? __pfx___sys_sendmsg+0x10/0x10
[ 107.583081][ T7000] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 107.589497][ T7000] ? do_syscall_64+0x102/0x240
[ 107.594286][ T7000] ? do_syscall_64+0xb6/0x240
[ 107.598985][ T7000] do_syscall_64+0xf5/0x240
[ 107.603607][ T7000] ? clear_bhb_loop+0x35/0x90
[ 107.608297][ T7000] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.614479][ T7000] RIP: 0033:0x7f73ad87dda9
[ 107.619702][ T7000] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 107.639591][ T7000] RSP: 002b:00007f73ae6a70c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 107.648054][ T7000] RAX: ffffffffffffffda RBX: 00007f73ad9abf80 RCX: 00007f73ad87dda9
[ 107.656030][ T7000] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004
[ 107.664629][ T7000] RBP: 00007f73ad8ca47a R08: 0000000000000000 R09: 0000000000000000
[ 107.673569][ T7000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 107.681746][ T7000] R13: 000000000000000b R14: 00007f73ad9abf80 R15: 00007fffd5f598f8
[ 107.690182][ T7000]
[ 107.693456][ T7000]
[ 107.695860][ T7000] Allocated by task 6994:
[ 107.700360][ T7000] kasan_save_track+0x3f/0x80
[ 107.705128][ T7000] __kasan_kmalloc+0x98/0xb0
[ 107.709742][ T7000] kmalloc_trace+0x1db/0x360
[ 107.714327][ T7000] taprio_change+0x1030/0x42d0
[ 107.720132][ T7000] tc_modify_qdisc+0x190d/0x1e40
[ 107.725335][ T7000] rtnetlink_rcv_msg+0x89b/0x10d0
[ 107.730523][ T7000] netlink_rcv_skb+0x1e3/0x430
[ 107.735298][ T7000] netlink_unicast+0x7ea/0x980
[ 107.740072][ T7000] netlink_sendmsg+0x8e1/0xcb0
[ 107.745000][ T7000] __sock_sendmsg+0x221/0x270
[ 107.749667][ T7000] ____sys_sendmsg+0x525/0x7d0
[ 107.754512][ T7000] __sys_sendmsg+0x2b0/0x3a0
[ 107.759176][ T7000] do_syscall_64+0xf5/0x240
[ 107.763667][ T7000] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.769740][ T7000]
[ 107.772080][ T7000] Freed by task 7000:
[ 107.776180][ T7000] kasan_save_track+0x3f/0x80
[ 107.780874][ T7000] kasan_save_free_info+0x40/0x50
[ 107.785903][ T7000] poison_slab_object+0xa6/0xe0
[ 107.790754][ T7000] __kasan_slab_free+0x37/0x60
[ 107.795515][ T7000] kfree+0x153/0x3a0
[ 107.799402][ T7000] rcu_core+0xafd/0x1830
[ 107.803810][ T7000] __do_softirq+0x2c6/0x980
[ 107.808940][ T7000]
[ 107.811274][ T7000] Last potentially related work creation:
[ 107.817441][ T7000] kasan_save_stack+0x3f/0x60
[ 107.822127][ T7000] __kasan_record_aux_stack+0xac/0xc0
[ 107.827781][ T7000] call_rcu+0x167/0xa70
[ 107.831958][ T7000] taprio_change+0x32d9/0x42d0
[ 107.836812][ T7000] tc_modify_qdisc+0x190d/0x1e40
[ 107.841846][ T7000] rtnetlink_rcv_msg+0x89b/0x10d0
[ 107.846865][ T7000] netlink_rcv_skb+0x1e3/0x430
[ 107.852050][ T7000] netlink_unicast+0x7ea/0x980
[ 107.856815][ T7000] netlink_sendmsg+0x8e1/0xcb0
[ 107.861653][ T7000] __sock_sendmsg+0x221/0x270
[ 107.866512][ T7000] ____sys_sendmsg+0x525/0x7d0
[ 107.871371][ T7000] __sys_sendmsg+0x2b0/0x3a0
[ 107.875999][ T7000] do_syscall_64+0xf5/0x240
[ 107.880947][ T7000] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.887100][ T7000]
[ 107.889413][ T7000] The buggy address belongs to the object at ffff8880221ef400
[ 107.889413][ T7000] which belongs to the cache kmalloc-512 of size 512
[ 107.903626][ T7000] The buggy address is located 192 bytes inside of
[ 107.903626][ T7000] freed 512-byte region [ffff8880221ef400, ffff8880221ef600)
[ 107.918113][ T7000]
[ 107.920428][ T7000] The buggy address belongs to the physical page:
[ 107.927372][ T7000] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x221ec
[ 107.936398][ T7000] head: order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 107.944017][ T7000] anon flags: 0xfff80000000840(slab|head|node=0|zone=1|lastcpupid=0xfff)
[ 107.952519][ T7000] page_type: 0xffffffff()
[ 107.956928][ T7000] raw: 00fff80000000840 ffff888015041c80 0000000000000000 dead000000000001
[ 107.965511][ T7000] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 107.974190][ T7000] head: 00fff80000000840 ffff888015041c80 0000000000000000 dead000000000001
[ 107.983132][ T7000] head: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 107.992083][ T7000] head: 00fff80000000002 ffffea0000887b01 ffffea0000887b48 00000000ffffffff
[ 108.000752][ T7000] head: 0000000400000000 0000000000000000 00000000ffffffff 0000000000000000
[ 108.009950][ T7000] page dumped because: kasan: bad access detected
[ 108.016444][ T7000] page_owner tracks the page as allocated
[ 108.022246][ T7000] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4537, tgid -1636907152 (udevd), ts 4537, free_ts 32660301973
[ 108.043507][ T7000] post_alloc_hook+0x1ea/0x210
[ 108.048266][ T7000] get_page_from_freelist+0x3410/0x35b0
[ 108.053806][ T7000] __alloc_pages+0x256/0x6c0
[ 108.058387][ T7000] alloc_slab_page+0x5f/0x160
[ 108.063056][ T7000] new_slab+0x84/0x2f0
[ 108.067113][ T7000] ___slab_alloc+0xc73/0x1260
[ 108.071866][ T7000] kmalloc_trace+0x269/0x360
[ 108.076474][ T7000] kernfs_fop_open+0x3e0/0xd10
[ 108.081450][ T7000] do_dentry_open+0x907/0x15a0
[ 108.086229][ T7000] path_openat+0x2860/0x3240
[ 108.091014][ T7000] do_filp_open+0x235/0x490
[ 108.095521][ T7000] do_sys_openat2+0x13e/0x1d0
[ 108.100194][ T7000] __x64_sys_openat+0x247/0x2a0
[ 108.105123][ T7000] do_syscall_64+0xf5/0x240
[ 108.109624][ T7000] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.115597][ T7000] page last free pid 4538 tgid 4538 stack trace:
[ 108.121995][ T7000] free_unref_page_prepare+0x986/0xab0
[ 108.127454][ T7000] free_unref_page+0x37/0x3f0
[ 108.132304][ T7000] __slab_free+0x31b/0x3d0
[ 108.136977][ T7000] qlist_free_all+0x5e/0xc0
[ 108.141559][ T7000] kasan_quarantine_reduce+0x14f/0x170
[ 108.147014][ T7000] __kasan_slab_alloc+0x23/0x80
[ 108.152034][ T7000] kmem_cache_alloc+0x174/0x340
[ 108.156885][ T7000] security_file_alloc+0x28/0x130
[ 108.161986][ T7000] init_file+0x99/0x200
[ 108.166307][ T7000] alloc_empty_file+0xb8/0x1d0
[ 108.171563][ T7000] path_openat+0xfb/0x3240
[ 108.176023][ T7000] do_filp_open+0x235/0x490
[ 108.180553][ T7000] do_sys_openat2+0x13e/0x1d0
[ 108.185426][ T7000] __x64_sys_openat+0x247/0x2a0
[ 108.190281][ T7000] do_syscall_64+0xf5/0x240
[ 108.195138][ T7000] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.201023][ T7000]
[ 108.203683][ T7000] Memory state around the buggy address:
[ 108.209391][ T7000] ffff8880221ef380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 108.217448][ T7000] ffff8880221ef400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 108.225581][ T7000] >ffff8880221ef480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 108.233627][ T7000] ^
[ 108.239761][ T7000] ffff8880221ef500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 108.247896][ T7000] ffff8880221ef580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 108.256000][ T7000] ==================================================================
[ 108.269041][ T7000] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 108.276500][ T7000] CPU: 0 PID: 7000 Comm: syz-executor.0 Not tainted 6.9.0-rc5-syzkaller-00031-g71b1543c83d6 #0
[ 108.286964][ T7000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 108.297390][ T7000] Call Trace:
[ 108.300868][ T7000]
[ 108.304334][ T7000] dump_stack_lvl+0x241/0x360
[ 108.309163][ T7000] ? __pfx_dump_stack_lvl+0x10/0x10
[ 108.314552][ T7000] ? __pfx__printk+0x10/0x10
[ 108.319160][ T7000] ? preempt_schedule+0xe1/0xf0
[ 108.324034][ T7000] ? vscnprintf+0x5d/0x90
[ 108.328364][ T7000] panic+0x349/0x860
[ 108.332524][ T7000] ? check_panic_on_warn+0x21/0xb0
[ 108.337900][ T7000] ? __pfx_panic+0x10/0x10
[ 108.342748][ T7000] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 108.348774][ T7000] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 108.355274][ T7000] ? print_report+0x502/0x550
[ 108.360032][ T7000] check_panic_on_warn+0x86/0xb0
[ 108.364977][ T7000] ? taprio_dump+0x857/0xd50
[ 108.369650][ T7000] end_report+0x77/0x160
[ 108.373893][ T7000] kasan_report+0x154/0x180
[ 108.378559][ T7000] ? taprio_dump+0x857/0xd50
[ 108.383230][ T7000] taprio_dump+0x857/0xd50
[ 108.387897][ T7000] ? __alloc_skb+0x1f3/0x440
[ 108.392490][ T7000] ? __pfx_taprio_dump+0x10/0x10
[ 108.397437][ T7000] ? __asan_memcpy+0x40/0x70
[ 108.402045][ T7000] ? nla_put+0x131/0x1e0
[ 108.406296][ T7000] tc_fill_qdisc+0x6a9/0x1210
[ 108.411527][ T7000] ? __alloc_skb+0x1f3/0x440
[ 108.416348][ T7000] ? __pfx_tc_fill_qdisc+0x10/0x10
[ 108.421481][ T7000] ? __build_skb_around+0x245/0x3d0
[ 108.426781][ T7000] ? __pfx___alloc_skb+0x10/0x10
[ 108.431996][ T7000] qdisc_notify+0x2ec/0x4b0
[ 108.436513][ T7000] tc_modify_qdisc+0x1c58/0x1e40
[ 108.441592][ T7000] ? __pfx_tc_modify_qdisc+0x10/0x10
[ 108.447068][ T7000] ? __pfx_tc_modify_qdisc+0x10/0x10
[ 108.452353][ T7000] rtnetlink_rcv_msg+0x89b/0x10d0
[ 108.457838][ T7000] ? rtnetlink_rcv_msg+0x208/0x10d0
[ 108.463049][ T7000] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 108.468513][ T7000] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 108.474503][ T7000] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 108.480843][ T7000] ? _raw_spin_unlock_irqrestore+0x8f/0x140
[ 108.486821][ T7000] ? lockdep_hardirqs_on+0x99/0x150
[ 108.492291][ T7000] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 108.498271][ T7000] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 108.504884][ T7000] ? __dev_queue_xmit+0x1697/0x3ca0
[ 108.510098][ T7000] ? rcu_preempt_deferred_qs_irqrestore+0x87b/0xc70
[ 108.516782][ T7000] ? __dev_queue_xmit+0x2c7/0x3ca0
[ 108.521934][ T7000] netlink_rcv_skb+0x1e3/0x430
[ 108.526780][ T7000] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 108.532249][ T7000] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 108.537529][ T7000] ? __rcu_read_unlock+0xa1/0x110
[ 108.542550][ T7000] ? netlink_deliver_tap+0x2e/0x1b0
[ 108.547738][ T7000] netlink_unicast+0x7ea/0x980
[ 108.552593][ T7000] ? __pfx_netlink_unicast+0x10/0x10
[ 108.557918][ T7000] ? __virt_addr_valid+0x44e/0x520
[ 108.563052][ T7000] ? __phys_addr_symbol+0x2f/0x70
[ 108.568117][ T7000] ? __check_object_size+0x4bc/0xa00
[ 108.573528][ T7000] ? bpf_lsm_netlink_send+0x9/0x10
[ 108.578740][ T7000] netlink_sendmsg+0x8e1/0xcb0
[ 108.583518][ T7000] ? __pfx_netlink_sendmsg+0x10/0x10
[ 108.588803][ T7000] ? __import_iovec+0x536/0x820
[ 108.593654][ T7000] ? aa_sock_msg_perm+0x91/0x160
[ 108.598757][ T7000] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 108.604122][ T7000] ? security_socket_sendmsg+0x87/0xb0
[ 108.609758][ T7000] ? __pfx_netlink_sendmsg+0x10/0x10
[ 108.615035][ T7000] __sock_sendmsg+0x221/0x270
[ 108.619717][ T7000] ____sys_sendmsg+0x525/0x7d0
[ 108.624481][ T7000] ? __pfx_____sys_sendmsg+0x10/0x10
[ 108.629767][ T7000] __sys_sendmsg+0x2b0/0x3a0
[ 108.634352][ T7000] ? __pfx___sys_sendmsg+0x10/0x10
[ 108.639826][ T7000] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 108.646409][ T7000] ? do_syscall_64+0x102/0x240
[ 108.651174][ T7000] ? do_syscall_64+0xb6/0x240
[ 108.656034][ T7000] do_syscall_64+0xf5/0x240
[ 108.660723][ T7000] ? clear_bhb_loop+0x35/0x90
[ 108.665526][ T7000] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.671449][ T7000] RIP: 0033:0x7f73ad87dda9
[ 108.676000][ T7000] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 108.695979][ T7000] RSP: 002b:00007f73ae6a70c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 108.704429][ T7000] RAX: ffffffffffffffda RBX: 00007f73ad9abf80 RCX: 00007f73ad87dda9
[ 108.712714][ T7000] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004
[ 108.720799][ T7000] RBP: 00007f73ad8ca47a R08: 0000000000000000 R09: 0000000000000000
[ 108.728861][ T7000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 108.737001][ T7000] R13: 000000000000000b R14: 00007f73ad9abf80 R15: 00007fffd5f598f8
[ 108.745067][ T7000]
[ 108.748482][ T7000] Kernel Offset: disabled
[ 108.752792][ T7000] Rebooting in 86400 seconds..