BUG: TASK stack guard page was hit at ffffc90002dd7ff8 (stack is ffffc90002dd8000..ffffc90002de0000) stack guard page: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 397 Comm: syz-executor.0 Not tainted 6.4.0-rc6-syzkaller-gfd37b884003c #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 RIP: 0010:kasan_check_range+0x8/0x2a0 mm/kasan/generic.c:186 Code: 89 c7 e8 5b fd 4d 03 31 c0 5d c3 0f 0b eb 02 0f 0b b8 ea ff ff ff 5d c3 cc cc cc cc cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 <41> 55 41 54 53 b0 01 48 85 f6 0f 84 a4 01 00 00 48 89 fb 48 01 f3 RSP: 0018:ffffc90002dd8000 EFLAGS: 00010246 RAX: ffffffff86513540 RBX: ffffffff8159e634 RCX: ffffffff8159e634 RDX: 0000000000000000 RSI: 0000000000000010 RDI: ffffffff86517b20 RBP: ffffc90002dd8010 R08: 0000000000000005 R09: ffffffff8159e596 R10: 0000000000000002 R11: ffff8881134d3240 R12: 0000000000000010 R13: 0000000000000000 R14: ffffffff86517b20 R15: ffffc90002dd8258 FS: 00007f16cdf43700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90002dd7ff8 CR3: 0000000122afa000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <#DF> __asan_memcpy+0x2d/0x70 mm/kasan/shadow.c:105 desc_read+0x214/0x420 kernel/printk/printk_ringbuffer.c:478 desc_read_finalized_seq kernel/printk/printk_ringbuffer.c:1763 [inline] prb_read kernel/printk/printk_ringbuffer.c:1811 [inline] _prb_read_valid+0x2aa/0xbe0 kernel/printk/printk_ringbuffer.c:1891 prb_read_valid+0xa5/0xf0 kernel/printk/printk_ringbuffer.c:1940 printk_get_next_message+0x1e7/0x9c0 kernel/printk/printk.c:2783 console_emit_next_record kernel/printk/printk.c:2844 [inline] console_flush_all+0x301/0xb80 kernel/printk/printk.c:2933 console_unlock+0x1b8/0x3b0 kernel/printk/printk.c:3007 vprintk_emit+0x141/0x440 kernel/printk/printk.c:2307 vprintk_default+0x26/0x30 kernel/printk/printk.c:2318 vprintk+0x86/0x90 kernel/printk/printk_safe.c:50 _printk+0xd1/0x120 kernel/printk/printk.c:2328 __dev_queue_xmit+0x19b8/0x3270 dev_queue_xmit include/linux/netdevice.h:3088 [inline] neigh_connected_output+0x41b/0x4b0 net/core/neighbour.c:1581 neigh_output include/net/neighbour.h:544 [inline] ip_finish_output2+0xbe4/0xf30 net/ipv4/ip_output.c:229 __ip_finish_output+0x162/0x370 ip_finish_output+0x31/0x2a0 net/ipv4/ip_output.c:317 NF_HOOK_COND include/linux/netfilter.h:292 [inline] ip_mc_output+0x3d7/0xa40 net/ipv4/ip_output.c:416 dst_output include/net/dst.h:458 [inline] ip_local_out+0x92/0xb0 net/ipv4/ip_output.c:126 iptunnel_xmit+0x516/0x950 net/ipv4/ip_tunnel_core.c:82 ip_tunnel_xmit+0x1f45/0x2be0 net/ipv4/ip_tunnel.c:831 __gre_xmit net/ipv4/ip_gre.c:469 [inline] ipgre_xmit+0x79b/0xa90 net/ipv4/ip_gre.c:661 __netdev_start_xmit include/linux/netdevice.h:4918 [inline] netdev_start_xmit include/linux/netdevice.h:4932 [inline] xmit_one net/core/dev.c:3578 [inline] dev_hard_start_xmit+0x1de/0x630 net/core/dev.c:3594 __dev_queue_xmit+0x1672/0x3270 net/core/dev.c:4244 dev_queue_xmit include/linux/netdevice.h:3088 [inline] neigh_connected_output+0x41b/0x4b0 net/core/neighbour.c:1581 neigh_output include/net/neighbour.h:544 [inline] ip_finish_output2+0xbe4/0xf30 net/ipv4/ip_output.c:229 __ip_finish_output+0x162/0x370 ip_finish_output+0x31/0x2a0 net/ipv4/ip_output.c:317 NF_HOOK_COND include/linux/netfilter.h:292 [inline] ip_mc_output+0x3d7/0xa40 net/ipv4/ip_output.c:416 dst_output include/net/dst.h:458 [inline] ip_local_out+0x92/0xb0 net/ipv4/ip_output.c:126 iptunnel_xmit+0x516/0x950 net/ipv4/ip_tunnel_core.c:82 ip_tunnel_xmit+0x1f45/0x2be0 net/ipv4/ip_tunnel.c:831 sit_tunnel_xmit__ net/ipv6/sit.c:1057 [inline] sit_tunnel_xmit+0x94b/0x2510 net/ipv6/sit.c:1073 __netdev_start_xmit include/linux/netdevice.h:4918 [inline] netdev_start_xmit include/linux/netdevice.h:4932 [inline] xmit_one net/core/dev.c:3578 [inline] dev_hard_start_xmit+0x1de/0x630 net/core/dev.c:3594 __dev_queue_xmit+0x1672/0x3270 net/core/dev.c:4244 dev_queue_xmit include/linux/netdevice.h:3088 [inline] neigh_connected_output+0x41b/0x4b0 net/core/neighbour.c:1581 neigh_output include/net/neighbour.h:544 [inline] ip_finish_output2+0xbe4/0xf30 net/ipv4/ip_output.c:229 __ip_finish_output+0x162/0x370 ip_finish_output+0x31/0x2a0 net/ipv4/ip_output.c:317 NF_HOOK_COND include/linux/netfilter.h:292 [inline] ip_mc_output+0x3d7/0xa40 net/ipv4/ip_output.c:416 dst_output include/net/dst.h:458 [inline] ip_local_out+0x92/0xb0 net/ipv4/ip_output.c:126 iptunnel_xmit+0x516/0x950 net/ipv4/ip_tunnel_core.c:82 ip_tunnel_xmit+0x1f45/0x2be0 net/ipv4/ip_tunnel.c:831 __gre_xmit net/ipv4/ip_gre.c:469 [inline] ipgre_xmit+0x79b/0xa90 net/ipv4/ip_gre.c:661 __netdev_start_xmit include/linux/netdevice.h:4918 [inline] netdev_start_xmit include/linux/netdevice.h:4932 [inline] xmit_one net/core/dev.c:3578 [inline] dev_hard_start_xmit+0x1de/0x630 net/core/dev.c:3594 __dev_queue_xmit+0x1672/0x3270 net/core/dev.c:4244 dev_queue_xmit include/linux/netdevice.h:3088 [inline] neigh_connected_output+0x41b/0x4b0 net/core/neighbour.c:1581 neigh_output include/net/neighbour.h:544 [inline] ip_finish_output2+0xbe4/0xf30 net/ipv4/ip_output.c:229 __ip_finish_output+0x162/0x370 ip_finish_output+0x31/0x2a0 net/ipv4/ip_output.c:317 NF_HOOK_COND include/linux/netfilter.h:292 [inline] ip_mc_output+0x3d7/0xa40 net/ipv4/ip_output.c:416 dst_output include/net/dst.h:458 [inline] ip_local_out+0x92/0xb0 net/ipv4/ip_output.c:126 iptunnel_xmit+0x516/0x950 net/ipv4/ip_tunnel_core.c:82 ip_tunnel_xmit+0x1f45/0x2be0 net/ipv4/ip_tunnel.c:831 sit_tunnel_xmit__ net/ipv6/sit.c:1057 [inline] sit_tunnel_xmit+0x94b/0x2510 net/ipv6/sit.c:1073 __netdev_start_xmit include/linux/netdevice.h:4918 [inline] netdev_start_xmit include/linux/netdevice.h:4932 [inline] xmit_one net/core/dev.c:3578 [inline] dev_hard_start_xmit+0x1de/0x630 net/core/dev.c:3594 __dev_queue_xmit+0x1672/0x3270 net/core/dev.c:4244 dev_queue_xmit include/linux/netdevice.h:3088 [inline] neigh_connected_output+0x41b/0x4b0 net/core/neighbour.c:1581 neigh_output include/net/neighbour.h:544 [inline] ip_finish_output2+0xbe4/0xf30 net/ipv4/ip_output.c:229 __ip_finish_output+0x162/0x370 ip_finish_output+0x31/0x2a0 net/ipv4/ip_output.c:317 NF_HOOK_COND include/linux/netfilter.h:292 [inline] ip_mc_output+0x3d7/0xa40 net/ipv4/ip_output.c:416 dst_output include/net/dst.h:458 [inline] ip_local_out+0x92/0xb0 net/ipv4/ip_output.c:126 iptunnel_xmit+0x516/0x950 net/ipv4/ip_tunnel_core.c:82 ip_tunnel_xmit+0x1f45/0x2be0 net/ipv4/ip_tunnel.c:831 __gre_xmit net/ipv4/ip_gre.c:469 [inline] ipgre_xmit+0x79b/0xa90 net/ipv4/ip_gre.c:661 __netdev_start_xmit include/linux/netdevice.h:4918 [inline] netdev_start_xmit include/linux/netdevice.h:4932 [inline] xmit_one net/core/dev.c:3578 [inline] dev_hard_start_xmit+0x1de/0x630 net/core/dev.c:3594 __dev_queue_xmit+0x1672/0x3270 net/core/dev.c:4244 dev_queue_xmit include/linux/netdevice.h:3088 [inline] neigh_connected_output+0x41b/0x4b0 net/core/neighbour.c:1581 neigh_output include/net/neighbour.h:544 [inline] ip_finish_output2+0xbe4/0xf30 net/ipv4/ip_output.c:229 __ip_finish_output+0x162/0x370 ip_finish_output+0x31/0x2a0 net/ipv4/ip_output.c:317 NF_HOOK_COND include/linux/netfilter.h:292 [inline] ip_mc_output+0x3d7/0xa40 net/ipv4/ip_output.c:416 dst_output include/net/dst.h:458 [inline] ip_local_out+0x92/0xb0 net/ipv4/ip_output.c:126 iptunnel_xmit+0x516/0x950 net/ipv4/ip_tunnel_core.c:82 ip_tunnel_xmit+0x1f45/0x2be0 net/ipv4/ip_tunnel.c:831 sit_tunnel_xmit__ net/ipv6/sit.c:1057 [inline] sit_tunnel_xmit+0x94b/0x2510 net/ipv6/sit.c:1073 __netdev_start_xmit include/linux/netdevice.h:4918 [inline] netdev_start_xmit include/linux/netdevice.h:4932 [inline] xmit_one net/core/dev.c:3578 [inline] dev_hard_start_xmit+0x1de/0x630 net/core/dev.c:3594 __dev_queue_xmit+0x1672/0x3270 net/core/dev.c:4244 dev_queue_xmit include/linux/netdevice.h:3088 [inline] neigh_connected_output+0x41b/0x4b0 net/core/neighbour.c:1581 neigh_output include/net/neighbour.h:544 [inline] ip_finish_output2+0xbe4/0xf30 net/ipv4/ip_output.c:229 __ip_finish_output+0x162/0x370 ip_finish_output+0x31/0x2a0 net/ipv4/ip_output.c:317 NF_HOOK_COND include/linux/netfilter.h:292 [inline] ip_mc_output+0x3d7/0xa40 net/ipv4/ip_output.c:416 dst_output include/net/dst.h:458 [inline] ip_local_out+0x92/0xb0 net/ipv4/ip_output.c:126 iptunnel_xmit+0x516/0x950 net/ipv4/ip_tunnel_core.c:82 ip_tunnel_xmit+0x1f45/0x2be0 net/ipv4/ip_tunnel.c:831 __gre_xmit net/ipv4/ip_gre.c:469 [inline] ipgre_xmit+0x79b/0xa90 net/ipv4/ip_gre.c:661 __netdev_start_xmit include/linux/netdevice.h:4918 [inline] netdev_start_xmit include/linux/netdevice.h:4932 [inline] xmit_one net/core/dev.c:3578 [inline] dev_hard_start_xmit+0x1de/0x630 net/core/dev.c:3594 __dev_queue_xmit+0x1672/0x3270 net/core/dev.c:4244 dev_queue_xmit include/linux/netdevice.h:3088 [inline] neigh_connected_output+0x41b/0x4b0 net/core/neighbour.c:1581 neigh_output include/net/neighbour.h:544 [inline] ip_finish_output2+0xbe4/0xf30 net/ipv4/ip_output.c:229 __ip_finish_output+0x162/0x370 ip_finish_output+0x31/0x2a0 net/ipv4/ip_output.c:317 NF_HOOK_COND include/linux/netfilter.h:292 [inline] ip_mc_output+0x3d7/0xa40 net/ipv4/ip_output.c:416 dst_output include/net/dst.h:458 [inline] ip_local_out+0x92/0xb0 net/ipv4/ip_output.c:126 iptunnel_xmit+0x516/0x950 net/ipv4/ip_tunnel_core.c:82 ip_tunnel_xmit+0x1f45/0x2be0 net/ipv4/ip_tunnel.c:831 sit_tunnel_xmit__ net/ipv6/sit.c:1057 [inline] sit_tunnel_xmit+0x94b/0x2510 net/ipv6/sit.c:1073 __netdev_start_xmit include/linux/netdevice.h:4918 [inline] netdev_start_xmit include/linux/netdevice.h:4932 [inline] xmit_one net/core/dev.c:3578 [inline] dev_hard_start_xmit+0x1de/0x630 net/core/dev.c:3594 __dev_queue_xmit+0x1672/0x3270 net/core/dev.c:4244 dev_queue_xmit include/linux/netdevice.h:3088 [inline] neigh_connected_output+0x41b/0x4b0 net/core/neighbour.c:1581 neigh_output include/net/neighbour.h:544 [inline] ip_finish_output2+0xbe4/0xf30 net/ipv4/ip_output.c:229 __ip_finish_output+0x162/0x370 ip_finish_output+0x31/0x2a0 net/ipv4/ip_output.c:317 NF_HOOK_COND include/linux/netfilter.h:292 [inline] ip_mc_output+0x3d7/0xa40 net/ipv4/ip_output.c:416 dst_output include/net/dst.h:458 [inline] ip_local_out+0x92/0xb0 net/ipv4/ip_output.c:126 iptunnel_xmit+0x516/0x950 net/ipv4/ip_tunnel_core.c:82 ip_tunnel_xmit+0x1f45/0x2be0 net/ipv4/ip_tunnel.c:831 __gre_xmit net/ipv4/ip_gre.c:469 [inline] ipgre_xmit+0x79b/0xa90 net/ipv4/ip_gre.c:661 __netdev_start_xmit include/linux/netdevice.h:4918 [inline] netdev_start_xmit include/linux/netdevice.h:4932 [inline] xmit_one net/core/dev.c:3578 [inline] dev_hard_start_xmit+0x1de/0x630 net/core/dev.c:3594 __dev_queue_xmit+0x1672/0x3270 net/core/dev.c:4244 dev_queue_xmit include/linux/netdevice.h:3088 [inline] neigh_connected_output+0x41b/0x4b0 net/core/neighbour.c:1581 neigh_output include/net/neighbour.h:544 [inline] ip_finish_output2+0xbe4/0xf30 net/ipv4/ip_output.c:229 __ip_finish_output+0x162/0x370 ip_finish_output+0x31/0x2a0 net/ipv4/ip_output.c:317 NF_HOOK_COND include/linux/netfilter.h:292 [inline] ip_mc_output+0x3d7/0xa40 net/ipv4/ip_output.c:416 dst_output include/net/dst.h:458 [inline] ip_local_out net/ipv4/ip_output.c:126 [inline] ip_send_skb net/ipv4/ip_output.c:1597 [inline] ip_push_pending_frames+0xf4/0x190 net/ipv4/ip_output.c:1617 raw_sendmsg+0x1407/0x1ec0 net/ipv4/raw.c:649 inet_sendmsg+0xa1/0xc0 net/ipv4/af_inet.c:827 sock_sendmsg_nosec net/socket.c:724 [inline] sock_sendmsg net/socket.c:747 [inline] ____sys_sendmsg+0x5fc/0x970 net/socket.c:2503 ___sys_sendmsg net/socket.c:2557 [inline] __sys_sendmmsg+0x3b9/0x6f0 net/socket.c:2643 __do_sys_sendmmsg net/socket.c:2672 [inline] __se_sys_sendmmsg net/socket.c:2669 [inline] __x64_sys_sendmmsg+0xa0/0xb0 net/socket.c:2669 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f16cd28c199 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f16cdf43168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 RAX: ffffffffffffffda RBX: 00007f16cd3abf80 RCX: 00007f16cd28c199 RDX: 0000000000000300 RSI: 0000000020003380 RDI: 0000000000000003 RBP: 00007f16cd2e7ca1 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffeab51f5ff R14: 00007f16cdf43300 R15: 0000000000022000 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:kasan_check_range+0x8/0x2a0 mm/kasan/generic.c:186 Code: 89 c7 e8 5b fd 4d 03 31 c0 5d c3 0f 0b eb 02 0f 0b b8 ea ff ff ff 5d c3 cc cc cc cc cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 <41> 55 41 54 53 b0 01 48 85 f6 0f 84 a4 01 00 00 48 89 fb 48 01 f3 RSP: 0018:ffffc90002dd8000 EFLAGS: 00010246 RAX: ffffffff86513540 RBX: ffffffff8159e634 RCX: ffffffff8159e634 RDX: 0000000000000000 RSI: 0000000000000010 RDI: ffffffff86517b20 RBP: ffffc90002dd8010 R08: 0000000000000005 R09: ffffffff8159e596 R10: 0000000000000002 R11: ffff8881134d3240 R12: 0000000000000010 R13: 0000000000000000 R14: ffffffff86517b20 R15: ffffc90002dd8258 FS: 00007f16cdf43700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90002dd7ff8 CR3: 0000000122afa000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 89 c7 mov %eax,%edi 2: e8 5b fd 4d 03 callq 0x34dfd62 7: 31 c0 xor %eax,%eax 9: 5d pop %rbp a: c3 retq b: 0f 0b ud2 d: eb 02 jmp 0x11 f: 0f 0b ud2 11: b8 ea ff ff ff mov $0xffffffea,%eax 16: 5d pop %rbp 17: c3 retq 18: cc int3 19: cc int3 1a: cc int3 1b: cc int3 1c: cc int3 1d: cc int3 1e: cc int3 1f: cc int3 20: cc int3 21: cc int3 22: 55 push %rbp 23: 48 89 e5 mov %rsp,%rbp 26: 41 57 push %r15 28: 41 56 push %r14 * 2a: 41 55 push %r13 <-- trapping instruction 2c: 41 54 push %r12 2e: 53 push %rbx 2f: b0 01 mov $0x1,%al 31: 48 85 f6 test %rsi,%rsi 34: 0f 84 a4 01 00 00 je 0x1de 3a: 48 89 fb mov %rdi,%rbx 3d: 48 01 f3 add %rsi,%rbx