Warning: Permanently added '[localhost]:19819' (ED25519) to the list of known hosts.
2026/02/09 03:48:57 parsed 1 programs
syzkaller login: [ 56.403247][ T5805] cgroup: Unknown subsys name 'net'
[ 56.508162][ T5805] cgroup: Unknown subsys name 'cpuset'
[ 56.512788][ T5805] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 58.064301][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 60.873732][ T5814] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 61.917281][ T5843] chnl_net:caif_netlink_parms(): no params data found
[ 61.995779][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[ 61.999322][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[ 62.002411][ T5843] bridge_slave_0: entered allmulticast mode
[ 62.006596][ T5843] bridge_slave_0: entered promiscuous mode
[ 62.039727][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[ 62.042728][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[ 62.046324][ T5843] bridge_slave_1: entered allmulticast mode
[ 62.049920][ T5843] bridge_slave_1: entered promiscuous mode
[ 62.070561][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 62.076826][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 62.098316][ T5843] team0: Port device team_slave_0 added
[ 62.103395][ T5843] team0: Port device team_slave_1 added
[ 62.129083][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 62.131759][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 62.141716][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 62.148073][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 62.150738][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 62.160611][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 62.195336][ T5843] hsr_slave_0: entered promiscuous mode
[ 62.198521][ T5843] hsr_slave_1: entered promiscuous mode
[ 62.293162][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 62.301007][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 62.305249][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 62.310331][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 62.327209][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[ 62.329677][ T5843] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 62.332783][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[ 62.335587][ T5843] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 62.370092][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[ 62.380719][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[ 62.383735][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[ 62.391124][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[ 62.398812][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state
[ 62.401406][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 62.409584][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state
[ 62.411956][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 62.502504][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 62.527154][ T5843] veth0_vlan: entered promiscuous mode
[ 62.532454][ T5843] veth1_vlan: entered promiscuous mode
[ 62.552109][ T5843] veth0_macvtap: entered promiscuous mode
[ 62.557386][ T5843] veth1_macvtap: entered promiscuous mode
[ 62.567699][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 62.574275][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 62.582995][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 62.587188][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 62.590932][ T5861] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 62.593573][ T5861] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 62.687198][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 62.754005][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 62.797931][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 62.890438][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 63.049892][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 63.053329][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 63.056951][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 63.059870][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 63.062624][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 63.216928][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 63.219465][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 63.236218][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 63.238783][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/02/09 03:49:06 executed programs: 0
[ 64.319107][ T5195] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 64.323580][ T5195] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 64.330095][ T5195] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 64.333836][ T5195] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 64.340771][ T5195] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 64.486092][ T5915] chnl_net:caif_netlink_parms(): no params data found
[ 64.546080][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state
[ 64.548917][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state
[ 64.551763][ T5915] bridge_slave_0: entered allmulticast mode
[ 64.554285][ T5915] bridge_slave_0: entered promiscuous mode
[ 64.558498][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state
[ 64.561371][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state
[ 64.564279][ T5915] bridge_slave_1: entered allmulticast mode
[ 64.568788][ T5915] bridge_slave_1: entered promiscuous mode
[ 64.592000][ T5915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 64.598092][ T5915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 64.621259][ T5915] team0: Port device team_slave_0 added
[ 64.626571][ T5915] team0: Port device team_slave_1 added
[ 64.643174][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 64.645152][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 64.653880][ T5915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 64.658212][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 64.660359][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 64.668781][ T5915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 64.709552][ T5915] hsr_slave_0: entered promiscuous mode
[ 64.712501][ T5915] hsr_slave_1: entered promiscuous mode
[ 64.715290][ T5915] debugfs: 'hsr0' already exists in 'hsr'
[ 64.717932][ T5915] Cannot create hsr debugfs directory
[ 65.500992][ T12] bridge_slave_1: left allmulticast mode
[ 65.503357][ T12] bridge_slave_1: left promiscuous mode
[ 65.508190][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 65.515317][ T12] bridge_slave_0: left allmulticast mode
[ 65.518960][ T12] bridge_slave_0: left promiscuous mode
[ 65.521187][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 65.673351][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 65.681786][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 65.688412][ T12] bond0 (unregistering): Released all slaves
[ 65.810043][ T12] hsr_slave_0: left promiscuous mode
[ 65.812374][ T12] hsr_slave_1: left promiscuous mode
[ 65.814427][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 65.818954][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 65.821951][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 65.824339][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 65.833970][ T12] veth1_macvtap: left promiscuous mode
[ 65.839989][ T12] veth0_macvtap: left promiscuous mode
[ 65.842442][ T12] veth1_vlan: left promiscuous mode
[ 65.844626][ T12] veth0_vlan: left promiscuous mode
[ 65.976142][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 65.988205][ T12] team0 (unregistering): Port device team_slave_0 removed
[ 66.333324][ T5915] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 66.346958][ T5915] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 66.360207][ T5915] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 66.366479][ T5915] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 66.406619][ T55] Bluetooth: hci0: command tx timeout
[ 66.470930][ T5915] 8021q: adding VLAN 0 to HW filter on device bond0
[ 66.786935][ T5915] 8021q: adding VLAN 0 to HW filter on device team0
[ 66.793844][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[ 66.796834][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 66.819062][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state
[ 66.821946][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 66.998738][ T5915] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 67.072718][ T5915] veth0_vlan: entered promiscuous mode
[ 67.083792][ T5915] veth1_vlan: entered promiscuous mode
[ 67.107720][ T5915] veth0_macvtap: entered promiscuous mode
[ 67.118392][ T5915] veth1_macvtap: entered promiscuous mode
[ 67.137516][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 67.147757][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 67.157852][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.162412][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.172935][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.183818][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.245958][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 67.249054][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 67.272317][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 67.276110][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 67.323091][ T5962] ==================================================================
[ 67.325652][ T5962] BUG: KASAN: slab-use-after-free in sk_skb_reason_drop+0x37/0x170
[ 67.328074][ T5962] Write of size 4 at addr ffff88811262cce4 by task syz.0.17/5962
[ 67.331227][ T5962]
[ 67.331981][ T5962] CPU: 1 UID: 0 PID: 5962 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 67.331994][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 67.332000][ T5962] Call Trace:
[ 67.332007][ T5962]
[ 67.332012][ T5962] dump_stack_lvl+0xe8/0x150
[ 67.332028][ T5962] print_report+0xba/0x230
[ 67.332041][ T5962] ? sk_skb_reason_drop+0x37/0x170
[ 67.332051][ T5962] kasan_report+0x117/0x150
[ 67.332065][ T5962] ? sk_skb_reason_drop+0x37/0x170
[ 67.332077][ T5962] kasan_check_range+0x264/0x2c0
[ 67.332090][ T5962] sk_skb_reason_drop+0x37/0x170
[ 67.332103][ T5962] ppp_push+0x1284/0x1440
[ 67.332115][ T5962] ? kasan_quarantine_put+0xbb/0x1f0
[ 67.332121][ T5962] ? lockdep_hardirqs_on+0x7a/0x110
[ 67.332130][ T5962] ? kmem_cache_free+0x195/0x610
[ 67.332136][ T5962] ? ppp_xmit_process+0x1147/0x1d90
[ 67.332145][ T5962] ? skb_put+0x11b/0x210
[ 67.332151][ T5962] ppp_xmit_process+0x9d7/0x1d90
[ 67.332161][ T5962] ? ppp_xmit_process+0x88/0x1d90
[ 67.332169][ T5962] ? __pfx_ppp_xmit_process+0x10/0x10
[ 67.332179][ T5962] ppp_write+0x2c6/0x400
[ 67.332188][ T5962] vfs_writev+0x4bd/0x990
[ 67.332197][ T5962] ? __pfx_ppp_write+0x10/0x10
[ 67.332205][ T5962] ? __pfx_vfs_writev+0x10/0x10
[ 67.332215][ T5962] ? __pfx_do_futex+0x10/0x10
[ 67.332224][ T5962] __x64_sys_pwritev+0x19f/0x2a0
[ 67.332231][ T5962] ? __pfx___se_sys_futex+0x10/0x10
[ 67.332244][ T5962] ? __pfx___x64_sys_pwritev+0x10/0x10
[ 67.332252][ T5962] do_syscall_64+0xe2/0xf80
[ 67.332286][ T5962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 67.332295][ T5962] ? trace_irq_disable+0x37/0x100
[ 67.332308][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 67.332317][ T5962] RIP: 0033:0x7f1a1d39acb9
[ 67.332326][ T5962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 67.332334][ T5962] RSP: 002b:00007ffc1381da18 EFLAGS: 00000246 ORIG_RAX: 0000000000000128
[ 67.332344][ T5962] RAX: ffffffffffffffda RBX: 00007f1a1d615fa0 RCX: 00007f1a1d39acb9
[ 67.332350][ T5962] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003
[ 67.332356][ T5962] RBP: 00007f1a1d408bf7 R08: 0000000000000001 R09: 0000000000000000
[ 67.332362][ T5962] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000
[ 67.332367][ T5962] R13: 00007f1a1d615fac R14: 00007f1a1d615fa0 R15: 00007f1a1d615fa0
[ 67.332377][ T5962]
[ 67.332381][ T5962]
[ 67.417716][ T5962] Allocated by task 5962:
[ 67.419338][ T5962] kasan_save_track+0x3e/0x80
[ 67.421029][ T5962] __kasan_slab_alloc+0x6c/0x80
[ 67.422695][ T5962] kmem_cache_alloc_node_noprof+0x427/0x6f0
[ 67.424530][ T5962] __alloc_skb+0x1d0/0x7d0
[ 67.425963][ T5962] ppp_write+0xb1/0x400
[ 67.427463][ T5962] vfs_writev+0x4bd/0x990
[ 67.428775][ T5962] __x64_sys_pwritev+0x19f/0x2a0
[ 67.430372][ T5962] do_syscall_64+0xe2/0xf80
[ 67.431747][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 67.433613][ T5962]
[ 67.434383][ T5962] Freed by task 5962:
[ 67.435809][ T5962] kasan_save_track+0x3e/0x80
[ 67.437494][ T5962] kasan_save_free_info+0x46/0x50
[ 67.439082][ T5962] __kasan_slab_free+0x5c/0x80
[ 67.440724][ T5962] kmem_cache_free+0x195/0x610
[ 67.442569][ T5962] ppp_xmit_process+0x1147/0x1d90
[ 67.444358][ T5962] ppp_write+0x2c6/0x400
[ 67.445820][ T5962] vfs_writev+0x4bd/0x990
[ 67.447392][ T5962] __x64_sys_pwritev+0x19f/0x2a0
[ 67.449205][ T5962] do_syscall_64+0xe2/0xf80
[ 67.450893][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 67.453051][ T5962]
[ 67.453794][ T5962] The buggy address belongs to the object at ffff88811262cc00
[ 67.453794][ T5962] which belongs to the cache skbuff_head_cache of size 240
[ 67.458353][ T5962] The buggy address is located 228 bytes inside of
[ 67.458353][ T5962] freed 240-byte region [ffff88811262cc00, ffff88811262ccf0)
[ 67.463064][ T5962]
[ 67.463826][ T5962] The buggy address belongs to the physical page:
[ 67.465765][ T5962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11262c
[ 67.468402][ T5962] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 67.470947][ T5962] flags: 0x17ff00000000040(head|node=0|zone=2|lastcpupid=0x7ff)
[ 67.473233][ T5962] page_type: f5(slab)
[ 67.474468][ T5962] raw: 017ff00000000040 ffff8881616f28c0 ffffea00044a4780 dead000000000002
[ 67.477090][ T5962] raw: 0000000000000000 0000000080150015 00000000f5000000 0000000000000000
[ 67.480405][ T5962] head: 017ff00000000040 ffff8881616f28c0 ffffea00044a4780 dead000000000002
[ 67.483339][ T5962] head: 0000000000000000 0000000080150015 00000000f5000000 0000000000000000
[ 67.486077][ T5962] head: 017ff00000000001 ffffea0004498b01 00000000ffffffff 00000000ffffffff
[ 67.488963][ T5962] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 67.491683][ T5962] page dumped because: kasan: bad access detected
[ 67.493751][ T5962] page_owner tracks the page as allocated
[ 67.495536][ T5962] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 20587824573, free_ts 0
[ 67.501864][ T5962] post_alloc_hook+0x228/0x280
[ 67.503407][ T5962] get_page_from_freelist+0x24dc/0x2580
[ 67.505390][ T5962] __alloc_frozen_pages_noprof+0x18d/0x380
[ 67.507583][ T5962] alloc_pages_mpol+0x232/0x4a0
[ 67.509162][ T5962] allocate_slab+0x86/0x3a0
[ 67.510626][ T5962] ___slab_alloc+0xd82/0x1760
[ 67.512133][ T5962] __slab_alloc+0x65/0x100
[ 67.513550][ T5962] kmem_cache_alloc_node_noprof+0x4b5/0x6f0
[ 67.515380][ T5962] __alloc_skb+0x1d0/0x7d0
[ 67.516752][ T5962] rtmsg_ifinfo_build_skb+0x84/0x260
[ 67.518363][ T5962] rtmsg_ifinfo+0x8c/0x1a0
[ 67.519749][ T5962] register_netdevice+0x175f/0x1ae0
[ 67.521395][ T5962] register_netdev+0x40/0x60
[ 67.522891][ T5962] nr_proto_init+0x14a/0x720
[ 67.524584][ T5962] do_one_initcall+0x250/0x840
[ 67.526108][ T5962] do_initcall_level+0x104/0x190
[ 67.527764][ T5962] page_owner free stack trace missing
[ 67.529511][ T5962]
[ 67.530304][ T5962] Memory state around the buggy address:
[ 67.532068][ T5962] ffff88811262cb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 67.534638][ T5962] ffff88811262cc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 67.537286][ T5962] >ffff88811262cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc
[ 67.540128][ T5962] ^
[ 67.542731][ T5962] ffff88811262cd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 67.545616][ T5962] ffff88811262cd80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 67.548399][ T5962] ==================================================================
[ 67.551094][ T5962] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 67.553438][ T5962] CPU: 1 UID: 0 PID: 5962 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 67.556328][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 67.560290][ T5962] Call Trace:
[ 67.561583][ T5962]
[ 67.562516][ T5962] vpanic+0x1e0/0x670
[ 67.563751][ T5962] panic+0xc5/0xd0
[ 67.564905][ T5962] ? __pfx_panic+0x10/0x10
[ 67.566356][ T5962] ? sk_skb_reason_drop+0x37/0x170
[ 67.567920][ T5962] ? sk_skb_reason_drop+0x37/0x170
[ 67.569502][ T5962] check_panic_on_warn+0x89/0xb0
[ 67.571029][ T5962] ? sk_skb_reason_drop+0x37/0x170
[ 67.572940][ T5962] end_report+0x6f/0x140
[ 67.574640][ T5962] kasan_report+0x128/0x150
[ 67.576419][ T5962] ? sk_skb_reason_drop+0x37/0x170
[ 67.578307][ T5962] kasan_check_range+0x264/0x2c0
[ 67.580235][ T5962] sk_skb_reason_drop+0x37/0x170
[ 67.582185][ T5962] ppp_push+0x1284/0x1440
[ 67.583906][ T5962] ? kasan_quarantine_put+0xbb/0x1f0
[ 67.585972][ T5962] ? lockdep_hardirqs_on+0x7a/0x110
[ 67.587996][ T5962] ? kmem_cache_free+0x195/0x610
[ 67.589915][ T5962] ? ppp_xmit_process+0x1147/0x1d90
[ 67.591970][ T5962] ? skb_put+0x11b/0x210
[ 67.593636][ T5962] ppp_xmit_process+0x9d7/0x1d90
[ 67.595633][ T5962] ? ppp_xmit_process+0x88/0x1d90
[ 67.597668][ T5962] ? __pfx_ppp_xmit_process+0x10/0x10
[ 67.599808][ T5962] ppp_write+0x2c6/0x400
[ 67.601547][ T5962] vfs_writev+0x4bd/0x990
[ 67.603334][ T5962] ? __pfx_ppp_write+0x10/0x10
[ 67.605281][ T5962] ? __pfx_vfs_writev+0x10/0x10
[ 67.607230][ T5962] ? __pfx_do_futex+0x10/0x10
[ 67.609050][ T5962] __x64_sys_pwritev+0x19f/0x2a0
[ 67.611003][ T5962] ? __pfx___se_sys_futex+0x10/0x10
[ 67.612831][ T5962] ? __pfx___x64_sys_pwritev+0x10/0x10
[ 67.614496][ T5962] do_syscall_64+0xe2/0xf80
[ 67.615939][ T5962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 67.618332][ T5962] ? trace_irq_disable+0x37/0x100
[ 67.620291][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 67.622542][ T5962] RIP: 0033:0x7f1a1d39acb9
[ 67.624314][ T5962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 67.631746][ T5962] RSP: 002b:00007ffc1381da18 EFLAGS: 00000246 ORIG_RAX: 0000000000000128
[ 67.635025][ T5962] RAX: ffffffffffffffda RBX: 00007f1a1d615fa0 RCX: 00007f1a1d39acb9
[ 67.638051][ T5962] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003
[ 67.641091][ T5962] RBP: 00007f1a1d408bf7 R08: 0000000000000001 R09: 0000000000000000
[ 67.644143][ T5962] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000
[ 67.647237][ T5962] R13: 00007f1a1d615fac R14: 00007f1a1d615fa0 R15: 00007f1a1d615fa0
[ 67.650337][ T5962]
[ 67.652422][ T5962] Kernel Offset: disabled
[ 67.654149][ T5962] Rebooting in 86400 seconds..
VM DIAGNOSIS:
03:49:10 Registers:
info registers vcpu 0
CPU#0
RAX=00000000000bd4d3 RBX=ffffffff8198227d RCX=0000000080000001 RDX=0000000000000001
RSI=ffffffff8dad96cd RDI=ffffffff8be73900 RBP=ffffffff8e007eb0 RSP=ffffffff8e007dc0
R8 =ffff8881210336db R9 =1ffff110242066db R10=dffffc0000000000 R11=ffffed10242066dc
R12=ffffffff8fcf2070 R13=1ffffffff1c12a78 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8b7a0b2f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818e31c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2e624008 CR3=000000017575a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 000000ffffffffff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1
CPU#1
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003f77310
R8 =ffff88816a2d0237 R9 =1ffff1102d45a046 R10=dffffc0000000000 R11=ffffffff85255130
R12=dffffc0000000000 R13=ffffffff99df8a1a R14=ffffffff9a10d2a0 R15=0000000000000000
RIP=ffffffff852551ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556c168500 ffffffff 00c00000
GS =0000 ffff8882a991c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2e663fff CR3=0000000110d86000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=d3736df82cf77458 1d72a6aa00000000
XMM02=4df4c3fa44fc785d 215793a256eb0f38 XMM03=462fd3736df82cf7 74581d72a6aa0000
XMM04=ff00000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000