Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts. 2024/06/01 09:42:53 ignoring optional flag "sandboxArg"="0" 2024/06/01 09:42:53 parsed 1 programs [ 701.287265][ T5133] cgroup: Unknown subsys name 'net' [ 701.557077][ T5133] cgroup: Unknown subsys name 'rlimit' [ 702.666992][ T5132] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 702.679345][ T5132] syz-executor (5132) used greatest stack depth: 18840 bytes left [ 703.321010][ T5181] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 703.329918][ T5181] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 703.338390][ T5181] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 703.346987][ T5181] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 703.361124][ T5181] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 703.368579][ T5181] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 704.355119][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.363127][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.398942][ T5174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.407170][ T5174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.035397][ T5217] chnl_net:caif_netlink_parms(): no params data found [ 705.125576][ T5217] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.135662][ T5217] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.143025][ T5217] bridge_slave_0: entered allmulticast mode [ 705.150778][ T5217] bridge_slave_0: entered promiscuous mode [ 705.160242][ T5217] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.167546][ T5217] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.174668][ T5217] bridge_slave_1: entered allmulticast mode [ 705.182051][ T5217] bridge_slave_1: entered promiscuous mode [ 705.209561][ T5217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.220805][ T5217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.256555][ T5217] team0: Port device team_slave_0 added [ 705.266497][ T5217] team0: Port device team_slave_1 added [ 705.293959][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.301667][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.328178][ T5217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.341375][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.348588][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.374567][ T5217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.416275][ T5217] hsr_slave_0: entered promiscuous mode [ 705.423478][ T5217] hsr_slave_1: entered promiscuous mode [ 705.616453][ T5217] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 705.627395][ T5217] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 705.639855][ T5217] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 705.650705][ T5217] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 705.735529][ T5217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.752783][ T5217] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.769053][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.776426][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.793244][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.800418][ T5225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.933270][ T5217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.973195][ T5217] veth0_vlan: entered promiscuous mode [ 705.984261][ T5217] veth1_vlan: entered promiscuous mode [ 706.010839][ T5217] veth0_macvtap: entered promiscuous mode [ 706.020374][ T5217] veth1_macvtap: entered promiscuous mode [ 706.040528][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.054546][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.069011][ T5217] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.079091][ T5217] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.088408][ T5217] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.097460][ T5217] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2024/06/01 09:42:58 executed programs: 0 [ 706.309326][ T2847] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.326834][ T4490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 706.347612][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 706.357212][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 706.366431][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 706.374450][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 706.382715][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 706.392930][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 706.402905][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 706.411652][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 706.419648][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 706.428107][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 706.437041][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 706.447785][ T5248] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 706.458021][ T5248] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 706.458074][ T2847] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.469737][ T5248] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 706.490819][ T5248] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 706.499622][ T4490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 706.508535][ T4490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 706.516794][ T5248] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 706.516872][ T5253] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 706.523916][ T4490] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 706.541575][ T5253] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 706.549034][ T4490] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 706.557170][ T4490] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 706.569170][ T4490] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 706.578165][ T4490] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 706.587542][ T5248] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 706.594646][ T4490] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 706.602378][ T5248] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 706.649307][ T5248] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 706.693127][ T2847] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.776013][ T2847] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.148190][ T5240] chnl_net:caif_netlink_parms(): no params data found [ 707.274309][ T5246] chnl_net:caif_netlink_parms(): no params data found [ 707.318855][ T5242] chnl_net:caif_netlink_parms(): no params data found [ 707.341846][ T5247] chnl_net:caif_netlink_parms(): no params data found [ 707.401624][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.412830][ T5240] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.420319][ T5240] bridge_slave_0: entered allmulticast mode [ 707.428448][ T5240] bridge_slave_0: entered promiscuous mode [ 707.480531][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.488035][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.495398][ T5240] bridge_slave_1: entered allmulticast mode [ 707.502115][ T5240] bridge_slave_1: entered promiscuous mode [ 707.522408][ T5252] chnl_net:caif_netlink_parms(): no params data found [ 707.561276][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.569690][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.577030][ T5246] bridge_slave_0: entered allmulticast mode [ 707.583718][ T5246] bridge_slave_0: entered promiscuous mode [ 707.610244][ T5240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.640310][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.648438][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.656423][ T5246] bridge_slave_1: entered allmulticast mode [ 707.663154][ T5246] bridge_slave_1: entered promiscuous mode [ 707.680727][ T5240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.690056][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.697527][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.704686][ T5242] bridge_slave_0: entered allmulticast mode [ 707.711950][ T5242] bridge_slave_0: entered promiscuous mode [ 707.721508][ T5242] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.728995][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.736557][ T5242] bridge_slave_1: entered allmulticast mode [ 707.743737][ T5242] bridge_slave_1: entered promiscuous mode [ 707.832961][ T5240] team0: Port device team_slave_0 added [ 707.843167][ T5242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.893671][ T5240] team0: Port device team_slave_1 added [ 707.923563][ T5242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.946952][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.954095][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.962072][ T5247] bridge_slave_0: entered allmulticast mode [ 707.969467][ T5247] bridge_slave_0: entered promiscuous mode [ 707.981655][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.012449][ T5252] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.020041][ T5252] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.028012][ T5252] bridge_slave_0: entered allmulticast mode [ 708.034748][ T5252] bridge_slave_0: entered promiscuous mode [ 708.042554][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.050106][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.076699][ T5240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.099003][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.106488][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.113637][ T5247] bridge_slave_1: entered allmulticast mode [ 708.121541][ T5247] bridge_slave_1: entered promiscuous mode [ 708.141871][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.172830][ T5252] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.181808][ T5252] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.189692][ T5252] bridge_slave_1: entered allmulticast mode [ 708.197804][ T5252] bridge_slave_1: entered promiscuous mode [ 708.218696][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.225863][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.252441][ T5240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.274002][ T5242] team0: Port device team_slave_0 added [ 708.296206][ T5247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.310640][ T5246] team0: Port device team_slave_0 added [ 708.331751][ T5252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.345995][ T5252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.356893][ T5242] team0: Port device team_slave_1 added [ 708.377053][ T5247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.398145][ T5246] team0: Port device team_slave_1 added [ 708.452414][ T5252] team0: Port device team_slave_0 added [ 708.476555][ T5247] team0: Port device team_slave_0 added [ 708.505097][ T5240] hsr_slave_0: entered promiscuous mode [ 708.511800][ T5240] hsr_slave_1: entered promiscuous mode [ 708.518283][ T5240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 708.526355][ T5240] Cannot create hsr debugfs directory [ 708.545486][ T5250] Bluetooth: hci0: command tx timeout [ 708.553999][ T5252] team0: Port device team_slave_1 added [ 708.584496][ T5247] team0: Port device team_slave_1 added [ 708.591243][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.598447][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.624732][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.632418][ T5250] Bluetooth: hci1: command tx timeout [ 708.659590][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.666619][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.692782][ T5242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.695515][ T5250] Bluetooth: hci4: command tx timeout [ 708.704947][ T5248] Bluetooth: hci3: command tx timeout [ 708.709202][ T5250] Bluetooth: hci2: command tx timeout [ 708.722396][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.729509][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.756132][ T5242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.767707][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.774675][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.800977][ T5252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.830233][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.837352][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.863442][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.897557][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.904524][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.931857][ T5252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.943819][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.950842][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.978123][ T5247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.038159][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.045769][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.071804][ T5247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.131594][ T5246] hsr_slave_0: entered promiscuous mode [ 709.137968][ T5246] hsr_slave_1: entered promiscuous mode [ 709.144192][ T5246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 709.152494][ T5246] Cannot create hsr debugfs directory [ 709.178528][ T5242] hsr_slave_0: entered promiscuous mode [ 709.185222][ T5242] hsr_slave_1: entered promiscuous mode [ 709.191287][ T5242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 709.199155][ T5242] Cannot create hsr debugfs directory [ 709.240436][ T5252] hsr_slave_0: entered promiscuous mode [ 709.247978][ T5252] hsr_slave_1: entered promiscuous mode [ 709.254000][ T5252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 709.261702][ T5252] Cannot create hsr debugfs directory [ 709.400585][ T5247] hsr_slave_0: entered promiscuous mode [ 709.407035][ T5247] hsr_slave_1: entered promiscuous mode [ 709.413132][ T5247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 709.420818][ T5247] Cannot create hsr debugfs directory [ 710.614897][ T5250] Bluetooth: hci0: command tx timeout [ 710.696126][ T5250] Bluetooth: hci1: command tx timeout [ 710.764971][ T5250] Bluetooth: hci2: command tx timeout [ 710.765071][ T53] Bluetooth: hci3: command tx timeout [ 710.775932][ T5248] Bluetooth: hci4: command tx timeout [ 710.798710][ T2847] bridge_slave_1: left allmulticast mode [ 710.816419][ T2847] bridge_slave_1: left promiscuous mode [ 710.823144][ T2847] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.842023][ T2847] bridge_slave_0: left allmulticast mode [ 710.850385][ T2847] bridge_slave_0: left promiscuous mode [ 710.859819][ T2847] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.213472][ T2847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.227684][ T2847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.239969][ T2847] bond0 (unregistering): Released all slaves [ 711.403857][ T2847] hsr_slave_0: left promiscuous mode [ 711.413790][ T2847] hsr_slave_1: left promiscuous mode [ 711.420162][ T2847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.430548][ T2847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.443759][ T2847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.454672][ T2847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.492874][ T2847] veth1_macvtap: left promiscuous mode [ 711.500146][ T2847] veth0_macvtap: left promiscuous mode [ 711.512615][ T2847] veth1_vlan: left promiscuous mode [ 711.518497][ T2847] veth0_vlan: left promiscuous mode [ 711.879923][ T2847] team0 (unregistering): Port device team_slave_1 removed [ 711.907131][ T2847] team0 (unregistering): Port device team_slave_0 removed [ 712.476434][ T5246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 712.498229][ T5246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 712.530526][ T5246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 712.550968][ T5246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 712.621316][ T5242] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 712.671651][ T5242] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 712.693994][ T5242] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 712.700819][ T53] Bluetooth: hci0: command tx timeout [ 712.715818][ T5242] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 712.765237][ T53] Bluetooth: hci1: command tx timeout [ 712.845180][ T53] Bluetooth: hci3: command tx timeout [ 712.850638][ T53] Bluetooth: hci2: command tx timeout [ 712.857853][ T5248] Bluetooth: hci4: command tx timeout [ 712.908178][ T5247] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 712.982693][ T5247] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 713.003155][ T5247] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 713.028900][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.067602][ T5247] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 713.192438][ T5246] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.220221][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.230255][ T5252] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 713.252263][ T5252] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 713.287718][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.294915][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.315335][ T5252] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 713.327210][ T5252] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 713.387865][ T5174] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.395051][ T5174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.448752][ T5242] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.514749][ T5240] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 713.534315][ T5358] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.541586][ T5358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.589682][ T5240] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 713.604817][ T5358] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.611970][ T5358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.639932][ T5240] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 713.650674][ T5240] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 713.773956][ T5242] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 713.803555][ T5242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 713.996756][ T5252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.031194][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.114556][ T5252] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.134493][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.158367][ T5247] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.197009][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.204168][ T5121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.217627][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.224832][ T5121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.262431][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.269637][ T5121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.280312][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.287512][ T5121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.314289][ T5240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.396830][ T5240] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.435766][ T5242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.461300][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.468494][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.487624][ T5246] veth0_vlan: entered promiscuous mode [ 714.539991][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.547216][ T5121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.592387][ T5246] veth1_vlan: entered promiscuous mode [ 714.709012][ T5242] veth0_vlan: entered promiscuous mode [ 714.767541][ T5250] Bluetooth: hci0: command tx timeout [ 714.799716][ T5246] veth0_macvtap: entered promiscuous mode [ 714.809740][ T5242] veth1_vlan: entered promiscuous mode [ 714.833085][ T5246] veth1_macvtap: entered promiscuous mode [ 714.846053][ T5250] Bluetooth: hci1: command tx timeout [ 714.868382][ T5252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.894187][ T5247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.925180][ T5250] Bluetooth: hci2: command tx timeout [ 714.925301][ T53] Bluetooth: hci4: command tx timeout [ 714.930599][ T5250] Bluetooth: hci3: command tx timeout [ 714.970183][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.010453][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.027552][ T5246] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.036774][ T5246] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.053549][ T5246] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.067347][ T5246] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.188656][ T5247] veth0_vlan: entered promiscuous mode [ 715.195539][ T5242] veth0_macvtap: entered promiscuous mode [ 715.216190][ T5240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.241479][ T5242] veth1_macvtap: entered promiscuous mode [ 715.269902][ T5247] veth1_vlan: entered promiscuous mode [ 715.351639][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.362998][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.376986][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.402916][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.414120][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.426025][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.447046][ T2500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.452533][ T5240] veth0_vlan: entered promiscuous mode [ 715.468740][ T2500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.471806][ T5242] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.490128][ T5242] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.499005][ T5242] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.508792][ T5242] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.544750][ T5240] veth1_vlan: entered promiscuous mode [ 715.575008][ T2500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.583645][ T2500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.632085][ T5247] veth0_macvtap: entered promiscuous mode [ 715.659366][ T5252] veth0_vlan: entered promiscuous mode [ 715.729693][ T5247] veth1_macvtap: entered promiscuous mode [ 715.748237][ T5240] veth0_macvtap: entered promiscuous mode [ 715.760254][ T5252] veth1_vlan: entered promiscuous mode 2024/06/01 09:43:08 executed programs: 5 [ 715.796350][ T785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.808970][ T5240] veth1_macvtap: entered promiscuous mode [ 715.815308][ T785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.873579][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.886661][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.898793][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.910922][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.923790][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.935794][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.947783][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.957780][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.968837][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.980024][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.009522][ T5247] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.018777][ T5247] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.034423][ T5247] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.044297][ T5247] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.072120][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.088672][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.099128][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.109986][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.121197][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.133023][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.147378][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.160997][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.172488][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.184961][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.195524][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.205763][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.216314][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.228538][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.240667][ T5272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.249823][ T5272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.261967][ T5252] veth0_macvtap: entered promiscuous mode [ 716.295637][ T5240] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.312177][ T5240] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.321341][ T5240] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.330868][ T5240] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.347729][ T5252] veth1_macvtap: entered promiscuous mode [ 716.523519][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.537907][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.549160][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.560408][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.570914][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.581518][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.592784][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.605952][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.618701][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.639689][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.652101][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.662223][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.673618][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.683830][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.703157][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.713099][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.723877][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.738935][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.771075][ T5272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.771844][ T5252] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.786737][ T5272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.789315][ T5252] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.807228][ T5252] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.816226][ T5252] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.903109][ T5357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.934920][ T5357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.943498][ T5272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.973532][ T5272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.020045][ T5357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.046430][ T5357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.115141][ T5269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.123003][ T5269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.243208][ T5357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.264222][ T5357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/06/01 09:43:13 executed programs: 127 2024/06/01 09:43:18 executed programs: 303 2024/06/01 09:43:23 executed programs: 487 2024/06/01 09:43:28 executed programs: 676 2024/06/01 09:43:33 executed programs: 874 2024/06/01 09:43:38 executed programs: 1077 [ 747.570269][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.583622][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 2024/06/01 09:43:43 executed programs: 1278 2024/06/01 09:43:48 executed programs: 1500 2024/06/01 09:43:53 executed programs: 1717 2024/06/01 09:43:58 executed programs: 1935 2024/06/01 09:44:03 executed programs: 2156 2024/06/01 09:44:08 executed programs: 2371 [ 777.494161][T10271] ================================================================== [ 777.502276][T10271] BUG: KASAN: slab-use-after-free in bpf_link_free+0x234/0x2d0 [ 777.509870][T10271] Read of size 8 at addr ffff88807a2e0310 by task syz-executor/10271 [ 777.517959][T10271] [ 777.520307][T10271] CPU: 1 PID: 10271 Comm: syz-executor Not tainted 6.10.0-rc1-syzkaller-00104-gd8ec19857b09 #0 [ 777.530652][T10271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 777.540731][T10271] Call Trace: [ 777.544027][T10271] [ 777.546968][T10271] dump_stack_lvl+0x241/0x360 [ 777.551668][T10271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 777.556864][T10271] ? __pfx__printk+0x10/0x10 [ 777.561443][T10271] ? _printk+0xd5/0x120 [ 777.565588][T10271] ? __virt_addr_valid+0x183/0x520 [ 777.570698][T10271] ? __virt_addr_valid+0x183/0x520 [ 777.575804][T10271] print_report+0x169/0x550 [ 777.580311][T10271] ? __virt_addr_valid+0x183/0x520 [ 777.585423][T10271] ? __virt_addr_valid+0x183/0x520 [ 777.590618][T10271] ? __virt_addr_valid+0x44e/0x520 [ 777.595726][T10271] ? __phys_addr+0xba/0x170 [ 777.600226][T10271] ? bpf_link_free+0x234/0x2d0 [ 777.604986][T10271] kasan_report+0x143/0x180 [ 777.609482][T10271] ? __pfx_call_rcu+0x10/0x10 [ 777.614151][T10271] ? bpf_link_free+0x234/0x2d0 [ 777.618911][T10271] bpf_link_free+0x234/0x2d0 [ 777.623500][T10271] bpf_link_release+0x7b/0x90 [ 777.628177][T10271] ? __pfx_bpf_link_release+0x10/0x10 [ 777.633544][T10271] __fput+0x406/0x8b0 [ 777.637521][T10271] __x64_sys_close+0x7f/0x110 [ 777.642186][T10271] do_syscall_64+0xf3/0x230 [ 777.646688][T10271] ? clear_bhb_loop+0x35/0x90 [ 777.651367][T10271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.657260][T10271] RIP: 0033:0x7f3b0867bdda [ 777.661682][T10271] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 777.681293][T10271] RSP: 002b:00007ffec192db80 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 777.689750][T10271] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f3b0867bdda [ 777.697722][T10271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 777.705691][T10271] RBP: ffffffffffffffff R08: 00007f3b08600000 R09: 0000000000000001 [ 777.713665][T10271] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f3b087b3fa0 [ 777.721637][T10271] R13: 00007f3b087b3fac R14: 0000000000000032 R15: 00007f3b087b59a0 [ 777.729611][T10271] [ 777.732620][T10271] [ 777.734932][T10271] Allocated by task 10272: [ 777.739341][T10271] kasan_save_track+0x3f/0x80 [ 777.744012][T10271] __kasan_kmalloc+0x98/0xb0 [ 777.748593][T10271] kmalloc_trace_noprof+0x19c/0x2c0 [ 777.753784][T10271] bpf_raw_tp_link_attach+0x2a0/0x6e0 [ 777.759141][T10271] bpf_raw_tracepoint_open+0x1c2/0x240 [ 777.764584][T10271] __sys_bpf+0x3c0/0x810 [ 777.768814][T10271] __x64_sys_bpf+0x7c/0x90 [ 777.773218][T10271] do_syscall_64+0xf3/0x230 [ 777.777711][T10271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.783612][T10271] [ 777.785918][T10271] Freed by task 24: [ 777.789708][T10271] kasan_save_track+0x3f/0x80 [ 777.794367][T10271] kasan_save_free_info+0x40/0x50 [ 777.799388][T10271] poison_slab_object+0xe0/0x150 [ 777.804311][T10271] __kasan_slab_free+0x37/0x60 [ 777.809060][T10271] kfree+0x149/0x360 [ 777.812953][T10271] rcu_core+0xafd/0x1830 [ 777.817178][T10271] handle_softirqs+0x2c4/0x970 [ 777.821925][T10271] run_ksoftirqd+0xca/0x130 [ 777.826504][T10271] smpboot_thread_fn+0x544/0xa30 [ 777.831427][T10271] kthread+0x2f0/0x390 [ 777.835493][T10271] ret_from_fork+0x4b/0x80 [ 777.839907][T10271] ret_from_fork_asm+0x1a/0x30 [ 777.844662][T10271] [ 777.846980][T10271] Last potentially related work creation: [ 777.852677][T10271] kasan_save_stack+0x3f/0x60 [ 777.857345][T10271] __kasan_record_aux_stack+0xac/0xc0 [ 777.862705][T10271] call_rcu+0x167/0xa70 [ 777.866846][T10271] bpf_link_free+0x1f8/0x2d0 [ 777.871425][T10271] bpf_link_release+0x7b/0x90 [ 777.876101][T10271] __fput+0x406/0x8b0 [ 777.880066][T10271] __x64_sys_close+0x7f/0x110 [ 777.884726][T10271] do_syscall_64+0xf3/0x230 [ 777.889212][T10271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.895097][T10271] [ 777.897403][T10271] The buggy address belongs to the object at ffff88807a2e0300 [ 777.897403][T10271] which belongs to the cache kmalloc-128 of size 128 [ 777.911438][T10271] The buggy address is located 16 bytes inside of [ 777.911438][T10271] freed 128-byte region [ffff88807a2e0300, ffff88807a2e0380) [ 777.925215][T10271] [ 777.927521][T10271] The buggy address belongs to the physical page: [ 777.933931][T10271] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a2e0 [ 777.942695][T10271] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 777.949843][T10271] page_type: 0xffffefff(slab) [ 777.954507][T10271] raw: 00fff00000000000 ffff888015041a00 ffffea0000b66980 dead000000000002 [ 777.963073][T10271] raw: 0000000000000000 0000000080100010 00000001ffffefff 0000000000000000 [ 777.971637][T10271] page dumped because: kasan: bad access detected [ 777.978037][T10271] page_owner tracks the page as allocated [ 777.983732][T10271] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5668, tgid 5663 (syz-executor.2), ts 720987957452, free_ts 720987810239 [ 778.003426][T10271] post_alloc_hook+0x1f3/0x230 [ 778.008183][T10271] get_page_from_freelist+0x2e2d/0x2ee0 [ 778.013721][T10271] __alloc_pages_noprof+0x256/0x6c0 [ 778.019080][T10271] alloc_slab_page+0x5f/0x120 [ 778.023741][T10271] allocate_slab+0x5a/0x2e0 [ 778.028228][T10271] ___slab_alloc+0xcd1/0x14b0 [ 778.032975][T10271] __slab_alloc+0x58/0xa0 [ 778.037293][T10271] kmalloc_node_track_caller_noprof+0x281/0x440 [ 778.043526][T10271] krealloc_noprof+0x7d/0x120 [ 778.048195][T10271] check_stack_access_within_bounds+0x5be/0x980 [ 778.054509][T10271] check_mem_access+0x865/0x1e60 [ 778.059437][T10271] do_check+0x8848/0x10980 [ 778.063845][T10271] do_check_common+0x14bd/0x1dd0 [ 778.068769][T10271] bpf_check+0x14222/0x192f0 [ 778.073345][T10271] bpf_prog_load+0x1667/0x20f0 [ 778.078091][T10271] __sys_bpf+0x4ee/0x810 [ 778.082323][T10271] page last free pid 5668 tgid 5663 stack trace: [ 778.088630][T10271] free_unref_page+0xd22/0xea0 [ 778.093381][T10271] vfree+0x186/0x2e0 [ 778.097260][T10271] bpf_prog_calc_tag+0x663/0x900 [ 778.102180][T10271] resolve_pseudo_ldimm64+0xdf/0x16a0 [ 778.107631][T10271] bpf_check+0x64f7/0x192f0 [ 778.112119][T10271] bpf_prog_load+0x1667/0x20f0 [ 778.116866][T10271] __sys_bpf+0x4ee/0x810 [ 778.121118][T10271] __x64_sys_bpf+0x7c/0x90 [ 778.125524][T10271] do_syscall_64+0xf3/0x230 [ 778.130010][T10271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.135978][T10271] [ 778.138286][T10271] Memory state around the buggy address: [ 778.143909][T10271] ffff88807a2e0200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 778.152047][T10271] ffff88807a2e0280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 778.160095][T10271] >ffff88807a2e0300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 778.168137][T10271] ^ [ 778.172703][T10271] ffff88807a2e0380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 778.180744][T10271] ffff88807a2e0400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.188785][T10271] ================================================================== [ 778.233277][T10271] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 778.240599][T10271] CPU: 0 PID: 10271 Comm: syz-executor Not tainted 6.10.0-rc1-syzkaller-00104-gd8ec19857b09 #0 [ 778.251029][T10271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 778.261104][T10271] Call Trace: [ 778.264394][T10271] [ 778.267334][T10271] dump_stack_lvl+0x241/0x360 [ 778.272033][T10271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 778.277243][T10271] ? __pfx__printk+0x10/0x10 [ 778.281840][T10271] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 778.287838][T10271] ? vscnprintf+0x5d/0x90 [ 778.292173][T10271] panic+0x349/0x860 [ 778.296068][T10271] ? check_panic_on_warn+0x21/0xb0 [ 778.301187][T10271] ? __pfx_panic+0x10/0x10 [ 778.305607][T10271] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 778.311609][T10271] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 778.317957][T10271] check_panic_on_warn+0x86/0xb0 [ 778.322886][T10271] ? bpf_link_free+0x234/0x2d0 [ 778.327685][T10271] end_report+0x77/0x160 [ 778.331945][T10271] kasan_report+0x154/0x180 [ 778.336458][T10271] ? __pfx_call_rcu+0x10/0x10 [ 778.341150][T10271] ? bpf_link_free+0x234/0x2d0 [ 778.345925][T10271] bpf_link_free+0x234/0x2d0 [ 778.350535][T10271] bpf_link_release+0x7b/0x90 [ 778.355222][T10271] ? __pfx_bpf_link_release+0x10/0x10 [ 778.360591][T10271] __fput+0x406/0x8b0 [ 778.364580][T10271] __x64_sys_close+0x7f/0x110 [ 778.369245][T10271] do_syscall_64+0xf3/0x230 [ 778.373768][T10271] ? clear_bhb_loop+0x35/0x90 [ 778.378435][T10271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.384326][T10271] RIP: 0033:0x7f3b0867bdda [ 778.388747][T10271] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 778.408452][T10271] RSP: 002b:00007ffec192db80 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 778.416884][T10271] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f3b0867bdda [ 778.424866][T10271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 778.432840][T10271] RBP: ffffffffffffffff R08: 00007f3b08600000 R09: 0000000000000001 [ 778.440822][T10271] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f3b087b3fa0 [ 778.448799][T10271] R13: 00007f3b087b3fac R14: 0000000000000032 R15: 00007f3b087b59a0 [ 778.456782][T10271] [ 778.460023][T10271] Kernel Offset: disabled [ 778.464344][T10271] Rebooting in 86400 seconds..