Warning: Permanently added '10.128.10.3' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 75.584751][ T5064] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.626957][ T5064] page:ffffea0001dd1e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77478 [ 75.637463][ T5064] head:ffffea0001dd1e00 order:3 compound_mapcount:0 subpages_mapcount:0 compound_pincount:0 [ 75.647552][ T5064] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 75.655528][ T5064] raw: 00fff00000010200 ffff888012442280 ffffea00008a1a00 dead000000000004 [ 75.664165][ T5064] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 75.672804][ T5064] page dumped because: VM_BUG_ON_FOLIO(folio_test_slab(folio)) [ 75.680409][ T5064] page_owner tracks the page as allocated [ 75.686202][ T5064] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4697, tgid 4697 (dhcpcd-run-hook), ts 32324765183, free_ts 32291654724 [ 75.707119][ T5064] get_page_from_freelist+0x119c/0x2ce0 [ 75.712703][ T5064] __alloc_pages+0x1cb/0x5b0 [ 75.717652][ T5064] alloc_pages+0x1aa/0x270 [ 75.722083][ T5064] allocate_slab+0x25f/0x350 [ 75.726694][ T5064] ___slab_alloc+0xa91/0x1400 [ 75.731413][ T5064] __slab_alloc.constprop.0+0x56/0xa0 [ 75.736872][ T5064] __kmem_cache_alloc_node+0x1a4/0x430 [ 75.742344][ T5064] kmalloc_trace+0x26/0x60 [ 75.746938][ T5064] tomoyo_init_log+0xc84/0x1ec0 [ 75.751826][ T5064] tomoyo_supervisor+0x354/0xf10 [ 75.756851][ T5064] tomoyo_env_perm+0x183/0x200 [ 75.761643][ T5064] tomoyo_find_next_domain+0x13d2/0x1f80 [ 75.767358][ T5064] tomoyo_bprm_check_security+0x133/0x1c0 [ 75.773142][ T5064] security_bprm_check+0x49/0xb0 [ 75.778170][ T5064] bprm_execve+0x732/0x19f0 [ 75.782687][ T5064] do_execveat_common+0x724/0x890 [ 75.787752][ T5064] page last free stack trace: [ 75.792488][ T5064] free_pcp_prepare+0x65c/0xc00 [ 75.797599][ T5064] free_unref_page+0x1d/0x490 [ 75.802283][ T5064] __unfreeze_partials+0x17c/0x1a0 [ 75.807430][ T5064] qlist_free_all+0x6a/0x170 [ 75.812042][ T5064] kasan_quarantine_reduce+0x192/0x220 [ 75.817563][ T5064] __kasan_slab_alloc+0x66/0x90 [ 75.822424][ T5064] kmem_cache_alloc+0x1e4/0x430 [ 75.827323][ T5064] vm_area_dup+0x7d/0x380 [ 75.831667][ T5064] __split_vma+0xae/0x5e0 [ 75.835992][ T5064] split_vma+0xa3/0xe0 [ 75.840156][ T5064] mprotect_fixup+0x686/0x960 [ 75.844865][ T5064] do_mprotect_pkey+0x6fd/0xa70 [ 75.849769][ T5064] __x64_sys_mprotect+0x78/0xb0 [ 75.854636][ T5064] do_syscall_64+0x39/0xb0 [ 75.859110][ T5064] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.865090][ T5064] ------------[ cut here ]------------ [ 75.870581][ T5064] kernel BUG at include/linux/memcontrol.h:455! [ 75.876913][ T5064] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 75.882981][ T5064] CPU: 1 PID: 5064 Comm: syz-executor280 Not tainted 6.2.0-rc5-syzkaller-00045-g948ef7bb70c4 #0 [ 75.893429][ T5064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 75.903498][ T5064] RIP: 0010:workingset_activation+0x4c3/0x580 [ 75.909581][ T5064] Code: 48 89 ef e8 df 00 00 00 c6 05 e6 c0 a4 0c 01 0f 0b e9 0e fd ff ff e8 fc 4e c8 ff 48 c7 c6 e0 e7 57 8a 48 89 ef e8 bd 00 00 00 <0f> 0b e8 e6 4e c8 ff 0f 0b e9 19 fc ff ff e8 da 4e c8 ff 48 c7 c6 [ 75.929184][ T5064] RSP: 0018:ffffc9000391f4a0 EFLAGS: 00010293 [ 75.935268][ T5064] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 75.943232][ T5064] RDX: ffff88801e739d40 RSI: ffffffff81b91303 RDI: 0000000000000000 [ 75.951200][ T5064] RBP: ffffea0001dd1e00 R08: 0000000000000000 R09: 0000000000000000 [ 75.959167][ T5064] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 75.967135][ T5064] R13: ffff8880b99360e8 R14: dffffc0000000000 R15: 0000000000000003 [ 75.975106][ T5064] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 75.984036][ T5064] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.990616][ T5064] CR2: 00007f9e92ba1938 CR3: 0000000079e52000 CR4: 00000000003526e0 [ 75.998586][ T5064] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.006551][ T5064] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.014519][ T5064] Call Trace: [ 76.017795][ T5064] <TASK> [ 76.020723][ T5064] folio_mark_accessed+0x599/0x830 [ 76.025860][ T5064] kvm_set_pfn_accessed+0x23f/0x2b0 [ 76.031096][ T5064] handle_changed_spte_acc_track+0x1bc/0x290 [ 76.037105][ T5064] __handle_changed_spte+0xd2b/0x1960 [ 76.042489][ T5064] ? tdp_mmu_init_child_sp+0x690/0x690 [ 76.048040][ T5064] ? mark_held_locks+0x9f/0xe0 [ 76.052821][ T5064] __handle_changed_spte+0xd1c/0x1960 [ 76.058202][ T5064] ? tdp_mmu_init_child_sp+0x690/0x690 [ 76.063671][ T5064] __tdp_mmu_set_spte+0x229/0x9d0 [ 76.068700][ T5064] ? zap_collapsible_spte_range+0xa30/0xa30 [ 76.074596][ T5064] ? spte_to_child_pt+0xa0/0xa0 [ 76.079457][ T5064] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 76.085437][ T5064] __tdp_mmu_zap_root+0x7e7/0x860 [ 76.090471][ T5064] ? clear_dirty_pt_masked+0x510/0x510 [ 76.095934][ T5064] ? lock_release+0x810/0x810 [ 76.100609][ T5064] ? tdp_mmu_zap_root_work+0x70/0x70 [ 76.105905][ T5064] tdp_mmu_zap_root+0x12e/0x330 [ 76.110761][ T5064] kvm_tdp_mmu_zap_all+0x158/0x1b0 [ 76.115897][ T5064] ? kvm_mmu_notifier_invalidate_range+0xf0/0xf0 [ 76.122221][ T5064] kvm_mmu_zap_all+0x280/0x2d0 [ 76.126998][ T5064] ? kvm_mmu_slot_leaf_clear_dirty+0x3e0/0x3e0 [ 76.133153][ T5064] ? lock_release+0x810/0x810 [ 76.137834][ T5064] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 76.143831][ T5064] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 76.149830][ T5064] ? kvm_mmu_notifier_invalidate_range+0xf0/0xf0 [ 76.156158][ T5064] kvm_mmu_notifier_release+0x6a/0xd0 [ 76.161544][ T5064] ? kvm_mmu_notifier_release+0x4/0xd0 [ 76.167003][ T5064] __mmu_notifier_release+0x1bb/0x630 [ 76.172382][ T5064] ? mmu_interval_notifier_insert+0x170/0x170 [ 76.178453][ T5064] ? find_held_lock+0x2d/0x110 [ 76.183228][ T5064] ? uprobe_clear_state+0xfc/0x420 [ 76.188348][ T5064] exit_mmap+0x66d/0x7b0 [ 76.192589][ T5064] ? __mutex_lock+0x231/0x1360 [ 76.197353][ T5064] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 76.203338][ T5064] ? ioctx_alloc+0x2180/0x2180 [ 76.208110][ T5064] ? find_held_lock+0x2d/0x110 [ 76.212892][ T5064] __mmput+0x128/0x4c0 [ 76.216961][ T5064] mmput+0x60/0x70 [ 76.220680][ T5064] do_exit+0x9ac/0x2950 [ 76.224847][ T5064] ? lock_downgrade+0x6e0/0x6e0 [ 76.229702][ T5064] ? do_raw_spin_lock+0x124/0x2b0 [ 76.234725][ T5064] ? mm_update_next_owner+0x7b0/0x7b0 [ 76.240103][ T5064] ? rwlock_bug.part.0+0x90/0x90 [ 76.245042][ T5064] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.250244][ T5064] do_group_exit+0xd4/0x2a0 [ 76.254757][ T5064] __x64_sys_exit_group+0x3e/0x50 [ 76.259815][ T5064] do_syscall_64+0x39/0xb0 [ 76.264240][ T5064] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.270132][ T5064] RIP: 0033:0x7f9e92b65079 [ 76.274543][ T5064] Code: Unable to access opcode bytes at 0x7f9e92b6504f. [ 76.281550][ T5064] RSP: 002b:00007ffdc6972728 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 76.289959][ T5064] RAX: ffffffffffffffda RBX: 00007f9e92bd23f0 RCX: 00007f9e92b65079 [ 76.297926][ T5064] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 76.305923][ T5064] RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 0000000034363035 [ 76.313906][ T5064] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9e92bd23f0 [ 76.321876][ T5064] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 76.329854][ T5064] </TASK> [ 76.332869][ T5064] Modules linked in: [ 76.336884][ T5064] ---[ end trace 0000000000000000 ]--- [ 76.342345][ T5064] RIP: 0010:workingset_activation+0x4c3/0x580 [ 76.347150][ T897] cfg80211: failed to load regulatory.db [ 76.348437][ T5064] Code: 48 89 ef e8 df 00 00 00 c6 05 e6 c0 a4 0c 01 0f 0b e9 0e fd ff ff e8 fc 4e c8 ff 48 c7 c6 e0 e7 57 8a 48 89 ef e8 bd 00 00 00 <0f> 0b e8 e6 4e c8 ff 0f 0b e9 19 fc ff ff e8 da 4e c8 ff 48 c7 c6 [ 76.373694][ T5064] RSP: 0018:ffffc9000391f4a0 EFLAGS: 00010293 [ 76.379806][ T5064] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 76.387804][ T5064] RDX: ffff88801e739d40 RSI: ffffffff81b91303 RDI: 0000000000000000 [ 76.395787][ T5064] RBP: ffffea0001dd1e00 R08: 0000000000000000 R09: 0000000000000000 [ 76.403796][ T5064] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 76.411812][ T5064] R13: ffff8880b99360e8 R14: dffffc0000000000 R15: 0000000000000003 [ 76.419813][ T5064] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 76.428797][ T5064] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.435392][ T5064] CR2: 00007f9e92ba1938 CR3: 0000000079e52000 CR4: 00000000003526e0 [ 76.443407][ T5064] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.451424][ T5064] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.459436][ T5064] Kernel panic - not syncing: Fatal exception [ 76.465659][ T5064] Kernel Offset: disabled [ 76.469978][ T5064] Rebooting in 86400 seconds..