program: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0xfffffffffffffffe) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) [ 76.732337][ T5317] Bluetooth: hci0: command tx timeout [ 76.736194][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.738779][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.715867][ T5335] ================================================================== [ 77.718687][ T5335] BUG: KASAN: vmalloc-out-of-bounds in vrealloc_noprof+0x354/0x3e0 [ 77.721900][ T5335] Write of size 4064 at addr ffffc9000d579020 by task syz.0.0/5335 [ 77.725133][ T5335] [ 77.726098][ T5335] CPU: 0 UID: 0 PID: 5335 Comm: syz.0.0 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 77.726108][ T5335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.726113][ T5335] Call Trace: [ 77.726117][ T5335] [ 77.726121][ T5335] dump_stack_lvl+0x241/0x360 [ 77.726137][ T5335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.726150][ T5335] ? __pfx__printk+0x10/0x10 [ 77.726161][ T5335] ? _printk+0xd5/0x120 [ 77.726173][ T5335] print_report+0x16e/0x5b0 [ 77.726183][ T5335] ? __virt_addr_valid+0xbd/0x530 [ 77.726196][ T5335] ? vrealloc_noprof+0x354/0x3e0 [ 77.726204][ T5335] kasan_report+0x143/0x180 [ 77.726210][ T5335] ? vrealloc_noprof+0x354/0x3e0 [ 77.726219][ T5335] kasan_check_range+0x28f/0x2a0 [ 77.726227][ T5335] __asan_memset+0x23/0x50 [ 77.726238][ T5335] vrealloc_noprof+0x354/0x3e0 [ 77.726250][ T5335] push_insn_history+0x16f/0x6b0 [ 77.726266][ T5335] do_check+0x609c/0xef50 [ 77.726289][ T5335] ? __pfx_do_check+0x10/0x10 [ 77.726301][ T5335] ? mark_reg_not_init+0xdd/0x4d0 [ 77.726310][ T5335] ? __asan_memset+0x23/0x50 [ 77.726320][ T5335] do_check_common+0x16e4/0x20f0 [ 77.726331][ T5335] bpf_check+0x16ad9/0x1d1c0 [ 77.726343][ T5335] ? __lock_acquire+0xad5/0xd80 [ 77.726362][ T5335] ? __lock_acquire+0xad5/0xd80 [ 77.726375][ T5335] ? __lock_acquire+0xad5/0xd80 [ 77.726391][ T5335] ? __lock_acquire+0xad5/0xd80 [ 77.726400][ T5335] ? __lock_acquire+0xad5/0xd80 [ 77.726408][ T5335] ? __lock_acquire+0xad5/0xd80 [ 77.726419][ T5335] ? __lock_acquire+0xad5/0xd80 [ 77.726428][ T5335] ? do_raw_spin_lock+0x151/0x370 [ 77.726437][ T5335] ? lockdep_hardirqs_on+0x9d/0x150 [ 77.726488][ T5335] ? __pfx_bpf_check+0x10/0x10 [ 77.726499][ T5335] ? __lock_acquire+0xad5/0xd80 [ 77.726511][ T5335] ? cgroup_rstat_updated+0x144/0xc40 [ 77.726528][ T5335] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 77.726542][ T5335] ? __lock_acquire+0xad5/0xd80 [ 77.726557][ T5335] ? __lock_acquire+0xad5/0xd80 [ 77.726596][ T5335] ? ktime_get_with_offset+0x8d/0x2a0 [ 77.726607][ T5335] ? seqcount_lockdep_reader_access+0x159/0x230 [ 77.726618][ T5335] ? lockdep_hardirqs_on+0x9d/0x150 [ 77.726627][ T5335] ? seqcount_lockdep_reader_access+0x1d9/0x230 [ 77.726638][ T5335] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 77.726651][ T5335] ? __asan_memset+0x23/0x50 [ 77.726662][ T5335] ? bpf_obj_name_cpy+0x189/0x1d0 [ 77.726671][ T5335] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 77.726685][ T5335] bpf_prog_load+0x17ee/0x2250 [ 77.726701][ T5335] ? __pfx_bpf_prog_load+0x10/0x10 [ 77.726717][ T5335] ? bpf_lsm_bpf+0x9/0x10 [ 77.726731][ T5335] __sys_bpf+0x5dd/0x8b0 [ 77.726743][ T5335] ? __pfx___sys_bpf+0x10/0x10 [ 77.726753][ T5335] ? __rseq_handle_notify_resume+0x3c8/0x15d0 [ 77.726771][ T5335] __x64_sys_bpf+0x7c/0x90 [ 77.726781][ T5335] do_syscall_64+0xf3/0x210 [ 77.726791][ T5335] ? clear_bhb_loop+0x45/0xa0 [ 77.726802][ T5335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.726812][ T5335] RIP: 0033:0x7f78d4b8e169 [ 77.726824][ T5335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.726832][ T5335] RSP: 002b:00007f78d5ab6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 77.726845][ T5335] RAX: ffffffffffffffda RBX: 00007f78d4db6080 RCX: 00007f78d4b8e169 [ 77.726852][ T5335] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 77.726859][ T5335] RBP: 00007f78d4c10a68 R08: 0000000000000000 R09: 0000000000000000 [ 77.726865][ T5335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.726871][ T5335] R13: 0000000000000000 R14: 00007f78d4db6080 R15: 00007ffc7b1f3d38 [ 77.726880][ T5335] [ 77.726884][ T5335] [ 77.873606][ T5335] The buggy address belongs to the virtual mapping at [ 77.873606][ T5335] [ffffc9000d539000, ffffc9000d57b000) created by: [ 77.873606][ T5335] kvrealloc_noprof+0x87/0xe0 [ 77.880412][ T5335] [ 77.881431][ T5335] The buggy address belongs to the physical page: [ 77.884021][ T5335] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88803f1dfa80 pfn:0x3f1df [ 77.887695][ T5335] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 77.890553][ T5335] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 77.894013][ T5335] raw: ffff88803f1dfa80 0000000000000000 00000001ffffffff 0000000000000000 [ 77.897551][ T5335] page dumped because: kasan: bad access detected [ 77.900277][ T5335] page_owner tracks the page as allocated [ 77.902598][ T5335] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102cc2(GFP_HIGHUSER|__GFP_NOWARN), pid 5335, tgid 5333 (syz.0.0), ts 77715624700, free_ts 77415060987 [ 77.909391][ T5335] post_alloc_hook+0x1f4/0x240 [ 77.911415][ T5335] get_page_from_freelist+0x360a/0x37a0 [ 77.913674][ T5335] __alloc_pages_slowpath+0x436/0x1080 [ 77.915950][ T5335] __alloc_frozen_pages_noprof+0x40d/0x5b0 [ 77.918299][ T5335] alloc_pages_mpol+0x339/0x690 [ 77.920340][ T5335] alloc_pages_noprof+0x121/0x190 [ 77.922411][ T5335] __vmalloc_node_range_noprof+0x9cb/0x1390 [ 77.924836][ T5335] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 77.926991][ T5335] kvrealloc_noprof+0x87/0xe0 [ 77.928806][ T5335] push_insn_history+0x16f/0x6b0 [ 77.930643][ T5335] do_check+0x609c/0xef50 [ 77.932160][ T5335] do_check_common+0x16e4/0x20f0 [ 77.934053][ T5335] bpf_check+0x16ad9/0x1d1c0 [ 77.935922][ T5335] bpf_prog_load+0x17ee/0x2250 [ 77.937708][ T5335] __sys_bpf+0x5dd/0x8b0 [ 77.939449][ T5335] __x64_sys_bpf+0x7c/0x90 [ 77.941196][ T5335] page last free pid 15 tgid 15 stack trace: [ 77.943570][ T5335] __free_frozen_pages+0xde8/0x10a0 [ 77.945516][ T5335] rcu_core+0xaac/0x17a0 [ 77.947091][ T5335] handle_softirqs+0x2d6/0x9b0 [ 77.949030][ T5335] run_ksoftirqd+0xcf/0x130 [ 77.950582][ T5335] smpboot_thread_fn+0x576/0xaa0 [ 77.952388][ T5335] kthread+0x7b7/0x940 [ 77.953857][ T5335] ret_from_fork+0x4b/0x80 [ 77.955732][ T5335] ret_from_fork_asm+0x1a/0x30 [ 77.957652][ T5335] [ 77.958618][ T5335] Memory state around the buggy address: [ 77.960705][ T5335] ffffc9000d578f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 77.963811][ T5335] ffffc9000d578f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 77.966955][ T5335] >ffffc9000d579000: 00 00 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 77.969691][ T5335] ^ [ 77.971723][ T5335] ffffc9000d579080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 77.974815][ T5335] ffffc9000d579100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 77.977930][ T5335] ================================================================== [ 78.378287][ T5335] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 78.381195][ T5335] CPU: 0 UID: 0 PID: 5335 Comm: syz.0.0 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 78.385824][ T5335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.390025][ T5335] Call Trace: [ 78.391408][ T5335] [ 78.392561][ T5335] dump_stack_lvl+0x241/0x360 [ 78.394339][ T5335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.396349][ T5335] ? __pfx__printk+0x10/0x10 [ 78.398162][ T5335] ? vscnprintf+0x5d/0x90 [ 78.399870][ T5335] panic+0x349/0x880 [ 78.401438][ T5335] ? check_panic_on_warn+0x21/0xb0 [ 78.403416][ T5335] ? __pfx_panic+0x10/0x10 [ 78.405181][ T5335] ? _raw_spin_unlock_irqrestore+0x134/0x140 [ 78.407444][ T5335] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 78.409873][ T5335] ? print_report+0x519/0x5b0 [ 78.411610][ T5335] check_panic_on_warn+0x86/0xb0 [ 78.413496][ T5335] ? vrealloc_noprof+0x354/0x3e0 [ 78.415369][ T5335] end_report+0x77/0x160 [ 78.416962][ T5335] kasan_report+0x154/0x180 [ 78.418721][ T5335] ? vrealloc_noprof+0x354/0x3e0 [ 78.420578][ T5335] kasan_check_range+0x28f/0x2a0 [ 78.422484][ T5335] __asan_memset+0x23/0x50 [ 78.424293][ T5335] vrealloc_noprof+0x354/0x3e0 [ 78.426170][ T5335] push_insn_history+0x16f/0x6b0 [ 78.428035][ T5335] do_check+0x609c/0xef50 [ 78.429814][ T5335] ? __pfx_do_check+0x10/0x10 [ 78.431750][ T5335] ? mark_reg_not_init+0xdd/0x4d0 [ 78.433793][ T5335] ? __asan_memset+0x23/0x50 [ 78.435635][ T5335] do_check_common+0x16e4/0x20f0 [ 78.437272][ T5335] bpf_check+0x16ad9/0x1d1c0 [ 78.439125][ T5335] ? __lock_acquire+0xad5/0xd80 [ 78.441056][ T5335] ? __lock_acquire+0xad5/0xd80 [ 78.442873][ T5335] ? __lock_acquire+0xad5/0xd80 [ 78.444788][ T5335] ? __lock_acquire+0xad5/0xd80 [ 78.446497][ T5335] ? __lock_acquire+0xad5/0xd80 [ 78.448778][ T5335] ? __lock_acquire+0xad5/0xd80 [ 78.451049][ T5335] ? __lock_acquire+0xad5/0xd80 [ 78.453336][ T5335] ? do_raw_spin_lock+0x151/0x370 [ 78.455580][ T5335] ? lockdep_hardirqs_on+0x9d/0x150 [ 78.457631][ T5335] ? __pfx_bpf_check+0x10/0x10 [ 78.459560][ T5335] ? __lock_acquire+0xad5/0xd80 [ 78.461421][ T5335] ? cgroup_rstat_updated+0x144/0xc40 [ 78.463455][ T5335] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 78.465864][ T5335] ? __lock_acquire+0xad5/0xd80 [ 78.468266][ T5335] ? __lock_acquire+0xad5/0xd80 [ 78.470407][ T5335] ? ktime_get_with_offset+0x8d/0x2a0 [ 78.472503][ T5335] ? seqcount_lockdep_reader_access+0x159/0x230 [ 78.474951][ T5335] ? lockdep_hardirqs_on+0x9d/0x150 [ 78.476942][ T5335] ? seqcount_lockdep_reader_access+0x1d9/0x230 [ 78.479255][ T5335] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 78.481537][ T5335] ? __asan_memset+0x23/0x50 [ 78.483361][ T5335] ? bpf_obj_name_cpy+0x189/0x1d0 [ 78.485255][ T5335] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 78.487207][ T5335] bpf_prog_load+0x17ee/0x2250 [ 78.489091][ T5335] ? __pfx_bpf_prog_load+0x10/0x10 [ 78.491118][ T5335] ? bpf_lsm_bpf+0x9/0x10 [ 78.492820][ T5335] __sys_bpf+0x5dd/0x8b0 [ 78.494458][ T5335] ? __pfx___sys_bpf+0x10/0x10 [ 78.496289][ T5335] ? __rseq_handle_notify_resume+0x3c8/0x15d0 [ 78.498497][ T5335] __x64_sys_bpf+0x7c/0x90 [ 78.500235][ T5335] do_syscall_64+0xf3/0x210 [ 78.501980][ T5335] ? clear_bhb_loop+0x45/0xa0 [ 78.503793][ T5335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.506148][ T5335] RIP: 0033:0x7f78d4b8e169 [ 78.507912][ T5335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.515232][ T5335] RSP: 002b:00007f78d5ab6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.519351][ T5335] RAX: ffffffffffffffda RBX: 00007f78d4db6080 RCX: 00007f78d4b8e169 [ 78.523095][ T5335] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 78.526161][ T5335] RBP: 00007f78d4c10a68 R08: 0000000000000000 R09: 0000000000000000 [ 78.529256][ T5335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.532205][ T5335] R13: 0000000000000000 R14: 00007f78d4db6080 R15: 00007ffc7b1f3d38 [ 78.535402][ T5335] [ 78.536890][ T5335] Kernel Offset: disabled [ 78.538625][ T5335] Rebooting in 86400 seconds..