Warning: Permanently added '10.128.1.152' (ED25519) to the list of known hosts. 2023/10/01 20:09:11 ignoring optional flag "sandboxArg"="0" 2023/10/01 20:09:11 parsed 1 programs [ 73.888891][ T5034] cgroup: Unknown subsys name 'net' [ 74.034492][ T5034] cgroup: Unknown subsys name 'rlimit' 2023/10/01 20:09:13 executed programs: 0 [ 75.769189][ T5034] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.785347][ T5033] syz-execprog[5033]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 75.938230][ T5052] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.948321][ T5052] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.962046][ T5052] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.976491][ T5052] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.992017][ T5052] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.999794][ T5052] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.060165][ T5056] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.072162][ T5056] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.081321][ T5056] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.092339][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.100455][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.108823][ T5056] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.118626][ T5056] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.126153][ T5056] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.137462][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.145086][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.159211][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.166633][ T5056] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.175368][ T5056] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 76.184317][ T5056] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.186448][ T5065] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.199615][ T5065] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.211702][ T5065] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.218897][ T5056] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.218973][ T5069] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 76.232302][ T5056] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.236519][ T5069] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.242331][ T5056] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.249400][ T5069] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.255958][ T5056] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.269460][ T5056] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.277565][ T5069] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 76.290956][ T5069] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 76.301290][ T5069] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 76.308989][ T5069] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 76.909223][ T5054] chnl_net:caif_netlink_parms(): no params data found [ 77.029775][ T5063] chnl_net:caif_netlink_parms(): no params data found [ 77.141195][ T5049] chnl_net:caif_netlink_parms(): no params data found [ 77.162698][ T5060] chnl_net:caif_netlink_parms(): no params data found [ 77.335379][ T5063] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.345519][ T5063] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.353876][ T5063] bridge_slave_0: entered allmulticast mode [ 77.361966][ T5063] bridge_slave_0: entered promiscuous mode [ 77.405127][ T5054] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.412673][ T5054] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.419898][ T5054] bridge_slave_0: entered allmulticast mode [ 77.427409][ T5054] bridge_slave_0: entered promiscuous mode [ 77.457093][ T5063] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.464736][ T5063] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.473826][ T5063] bridge_slave_1: entered allmulticast mode [ 77.481329][ T5063] bridge_slave_1: entered promiscuous mode [ 77.494843][ T5054] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.502784][ T5054] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.510238][ T5054] bridge_slave_1: entered allmulticast mode [ 77.520204][ T5054] bridge_slave_1: entered promiscuous mode [ 77.620151][ T5054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.629485][ T5061] chnl_net:caif_netlink_parms(): no params data found [ 77.658314][ T5063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.671328][ T5063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.688251][ T5055] chnl_net:caif_netlink_parms(): no params data found [ 77.700384][ T5054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.816406][ T5049] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.824080][ T5049] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.831558][ T5049] bridge_slave_0: entered allmulticast mode [ 77.844763][ T5049] bridge_slave_0: entered promiscuous mode [ 77.890720][ T5060] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.898549][ T5060] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.906140][ T5060] bridge_slave_0: entered allmulticast mode [ 77.913549][ T5060] bridge_slave_0: entered promiscuous mode [ 77.924474][ T5063] team0: Port device team_slave_0 added [ 77.935752][ T5054] team0: Port device team_slave_0 added [ 77.974001][ T5049] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.981303][ T5049] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.990233][ T5049] bridge_slave_1: entered allmulticast mode [ 77.997979][ T5049] bridge_slave_1: entered promiscuous mode [ 78.032463][ T5060] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.039900][ T5060] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.048081][ T5060] bridge_slave_1: entered allmulticast mode [ 78.055472][ T5060] bridge_slave_1: entered promiscuous mode [ 78.072876][ T5062] Bluetooth: hci0: command 0x0409 tx timeout [ 78.085421][ T5063] team0: Port device team_slave_1 added [ 78.093471][ T5054] team0: Port device team_slave_1 added [ 78.135885][ T5049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.182783][ T5060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.231720][ T5062] Bluetooth: hci2: command 0x0409 tx timeout [ 78.231743][ T5069] Bluetooth: hci1: command 0x0409 tx timeout [ 78.275879][ T5061] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.283526][ T5061] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.290773][ T5061] bridge_slave_0: entered allmulticast mode [ 78.298667][ T5061] bridge_slave_0: entered promiscuous mode [ 78.308793][ T5049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.312628][ T5062] Bluetooth: hci4: command 0x0409 tx timeout [ 78.334356][ T5060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.360224][ T5063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.368106][ T5063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.394863][ T5069] Bluetooth: hci5: command 0x0409 tx timeout [ 78.401445][ T5062] Bluetooth: hci3: command 0x0409 tx timeout [ 78.405325][ T5063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.421209][ T5054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.428718][ T5054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.455557][ T5054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.468640][ T5061] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.482192][ T5061] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.489720][ T5061] bridge_slave_1: entered allmulticast mode [ 78.498159][ T5061] bridge_slave_1: entered promiscuous mode [ 78.596535][ T5060] team0: Port device team_slave_0 added [ 78.604702][ T5063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.612077][ T5063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.639907][ T5063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.652404][ T5054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.659430][ T5054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.685435][ T5054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.713247][ T5049] team0: Port device team_slave_0 added [ 78.723219][ T5049] team0: Port device team_slave_1 added [ 78.729577][ T5055] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.737153][ T5055] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.744840][ T5055] bridge_slave_0: entered allmulticast mode [ 78.752852][ T5055] bridge_slave_0: entered promiscuous mode [ 78.764880][ T5060] team0: Port device team_slave_1 added [ 78.816011][ T5061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.829779][ T5061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.854534][ T5055] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.866230][ T5055] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.874555][ T5055] bridge_slave_1: entered allmulticast mode [ 78.884132][ T5055] bridge_slave_1: entered promiscuous mode [ 78.987389][ T5060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.994905][ T5060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.021022][ T5060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.052766][ T5054] hsr_slave_0: entered promiscuous mode [ 79.059379][ T5054] hsr_slave_1: entered promiscuous mode [ 79.072952][ T5061] team0: Port device team_slave_0 added [ 79.079790][ T5049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.087368][ T5049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.114223][ T5049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.128039][ T5049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.135283][ T5049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.161938][ T5049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.190219][ T5055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.200948][ T5060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.208702][ T5060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.235190][ T5060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.259660][ T5063] hsr_slave_0: entered promiscuous mode [ 79.266893][ T5063] hsr_slave_1: entered promiscuous mode [ 79.274577][ T5063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.282878][ T5063] Cannot create hsr debugfs directory [ 79.304463][ T5061] team0: Port device team_slave_1 added [ 79.332171][ T5055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.433207][ T5049] hsr_slave_0: entered promiscuous mode [ 79.440236][ T5049] hsr_slave_1: entered promiscuous mode [ 79.447243][ T5049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.455277][ T5049] Cannot create hsr debugfs directory [ 79.503404][ T5055] team0: Port device team_slave_0 added [ 79.549614][ T5061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.556912][ T5061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.583938][ T5061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.613258][ T5055] team0: Port device team_slave_1 added [ 79.645445][ T5061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.653008][ T5061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.680256][ T5061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.720272][ T5060] hsr_slave_0: entered promiscuous mode [ 79.727236][ T5060] hsr_slave_1: entered promiscuous mode [ 79.734426][ T5060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.742257][ T5060] Cannot create hsr debugfs directory [ 79.835654][ T5055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.847743][ T5055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.874798][ T5055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.946685][ T5055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.953742][ T5055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.980729][ T5055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.010945][ T5061] hsr_slave_0: entered promiscuous mode [ 80.017940][ T5061] hsr_slave_1: entered promiscuous mode [ 80.029154][ T5061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.037028][ T5061] Cannot create hsr debugfs directory [ 80.152195][ T5062] Bluetooth: hci0: command 0x041b tx timeout [ 80.311952][ T5062] Bluetooth: hci2: command 0x041b tx timeout [ 80.321637][ T5062] Bluetooth: hci1: command 0x041b tx timeout [ 80.391571][ T5062] Bluetooth: hci4: command 0x041b tx timeout [ 80.471645][ T5062] Bluetooth: hci3: command 0x041b tx timeout [ 80.475934][ T5069] Bluetooth: hci5: command 0x041b tx timeout [ 80.502554][ T5055] hsr_slave_0: entered promiscuous mode [ 80.510062][ T5055] hsr_slave_1: entered promiscuous mode [ 80.517681][ T5055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.525983][ T5055] Cannot create hsr debugfs directory [ 80.688429][ T5054] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.714957][ T5054] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.733663][ T5054] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.759194][ T5054] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.937344][ T5063] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.950584][ T5063] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.991883][ T5063] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.003655][ T5063] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.132080][ T5060] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.150782][ T5060] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.167740][ T5060] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.188822][ T5060] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.354503][ T5054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.383526][ T5061] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 81.441670][ T5061] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 81.454281][ T5061] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 81.489779][ T5054] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.513652][ T5061] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 81.613927][ T5063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.629390][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.636901][ T4446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.649235][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.656648][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.674340][ T5049] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.694810][ T5049] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.723853][ T5049] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.761133][ T5063] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.784113][ T5049] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.900540][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.907818][ T5111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.938355][ T5055] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.952988][ T5055] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.005085][ T5055] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.025642][ T5055] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.061779][ T5068] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.069662][ T5068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.151172][ T5060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.233135][ T5069] Bluetooth: hci0: command 0x040f tx timeout [ 82.389463][ T5060] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.411113][ T5069] Bluetooth: hci1: command 0x040f tx timeout [ 82.411122][ T5062] Bluetooth: hci2: command 0x040f tx timeout [ 82.473447][ T5062] Bluetooth: hci4: command 0x040f tx timeout [ 82.508677][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.516177][ T5120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.543890][ T5054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.552607][ T5062] Bluetooth: hci3: command 0x040f tx timeout [ 82.558853][ T5062] Bluetooth: hci5: command 0x040f tx timeout [ 82.583630][ T5049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.620217][ T5078] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.627490][ T5078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.698267][ T5061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.728482][ T5049] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.773026][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.780320][ T5117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.809304][ T5063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.836297][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.844124][ T5117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.874881][ T5055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.917257][ T5061] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.954314][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.961573][ T4446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.974680][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.981907][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.055554][ T5054] veth0_vlan: entered promiscuous mode [ 83.107636][ T5055] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.140173][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.147564][ T5120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.175612][ T5054] veth1_vlan: entered promiscuous mode [ 83.196234][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.203576][ T5120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.232523][ T5063] veth0_vlan: entered promiscuous mode [ 83.317811][ T5063] veth1_vlan: entered promiscuous mode [ 83.370791][ T5061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.393347][ T5054] veth0_macvtap: entered promiscuous mode [ 83.506097][ T5054] veth1_macvtap: entered promiscuous mode [ 83.663951][ T5054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.719513][ T5063] veth0_macvtap: entered promiscuous mode [ 83.778978][ T5063] veth1_macvtap: entered promiscuous mode [ 83.799141][ T5054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.885356][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.903892][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.923336][ T5063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.970704][ T5054] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.983349][ T5054] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.993925][ T5054] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.003331][ T5054] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.034638][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.046701][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.061653][ T5063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.093129][ T5061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.110253][ T5060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.135934][ T5055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.176243][ T5063] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.191254][ T5063] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.200685][ T5063] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.210421][ T5063] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.312767][ T5062] Bluetooth: hci0: command 0x0419 tx timeout [ 84.444190][ T5049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.472656][ T5062] Bluetooth: hci1: command 0x0419 tx timeout [ 84.472666][ T5069] Bluetooth: hci2: command 0x0419 tx timeout [ 84.549796][ T5060] veth0_vlan: entered promiscuous mode [ 84.555663][ T5069] Bluetooth: hci4: command 0x0419 tx timeout [ 84.595286][ T5114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.632272][ T5069] Bluetooth: hci5: command 0x0419 tx timeout [ 84.632287][ T5062] Bluetooth: hci3: command 0x0419 tx timeout [ 84.656652][ T5060] veth1_vlan: entered promiscuous mode [ 84.662694][ T5114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.774520][ T5117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.784853][ T5117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.837009][ T5055] veth0_vlan: entered promiscuous mode [ 84.949362][ T5055] veth1_vlan: entered promiscuous mode [ 84.987600][ T5060] veth0_macvtap: entered promiscuous mode [ 85.014621][ T5068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.029635][ T5068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.058146][ T5060] veth1_macvtap: entered promiscuous mode [ 85.135259][ T5158] FAULT_INJECTION: forcing a failure. [ 85.135259][ T5158] name failslab, interval 1, probability 0, space 0, times 1 [ 85.150941][ T5158] CPU: 0 PID: 5158 Comm: syz-executor.1 Not tainted 6.6.0-rc3-syzkaller-00214-ge402b08634b3 #0 [ 85.161440][ T5158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 85.171616][ T5158] Call Trace: [ 85.174921][ T5158] [ 85.177875][ T5158] dump_stack_lvl+0x1e7/0x2d0 [ 85.182598][ T5158] ? nf_tcp_handle_invalid+0x650/0x650 [ 85.188110][ T5158] ? panic+0x770/0x770 [ 85.192208][ T5158] ? __might_sleep+0xc0/0xc0 [ 85.196870][ T5158] should_fail_ex+0x3aa/0x4e0 [ 85.201602][ T5158] should_failslab+0x9/0x20 [ 85.206157][ T5158] slab_pre_alloc_hook+0x59/0x310 [ 85.211256][ T5158] kmem_cache_alloc_node+0x56/0x330 [ 85.216668][ T5158] ? alloc_unbound_pwq+0x9b5/0xf00 [ 85.221812][ T5158] alloc_unbound_pwq+0x9b5/0xf00 [ 85.226794][ T5158] apply_wqattrs_prepare+0x796/0xd00 [ 85.233381][ T5158] apply_workqueue_attrs+0xda/0x180 [ 85.238848][ T5158] alloc_workqueue+0xe2e/0x1520 [ 85.243764][ T5158] ? loop_configure+0x1f9/0x1250 [ 85.248795][ T5158] ? loop_configure+0x535/0x1250 [ 85.253778][ T5158] ? apply_workqueue_attrs+0x180/0x180 [ 85.259295][ T5158] ? loop_set_status_from_info+0x17d/0x2b0 [ 85.265157][ T5158] ? loop_set_status_from_info+0x17d/0x2b0 [ 85.271093][ T5158] loop_configure+0x613/0x1250 [ 85.276091][ T5158] lo_ioctl+0x8f5/0x2080 [ 85.280390][ T5158] ? verify_lock_unused+0x140/0x140 [ 85.285812][ T5158] ? __lock_acquire+0x1267/0x7f70 [ 85.291069][ T5158] ? lo_release+0x1f0/0x1f0 [ 85.296061][ T5158] ? read_lock_is_recursive+0x20/0x20 [ 85.301546][ T5158] ? is_bpf_text_address+0x26/0x2a0 [ 85.306809][ T5158] ? __lock_acquire+0x7f70/0x7f70 [ 85.312102][ T5158] ? deref_stack_reg+0x1c7/0x250 [ 85.317212][ T5158] ? is_bpf_text_address+0x26/0x2a0 [ 85.323170][ T5158] ? is_bpf_text_address+0x28d/0x2a0 [ 85.328995][ T5158] ? is_bpf_text_address+0x26/0x2a0 [ 85.334248][ T5158] ? stack_trace_save+0x1c0/0x1c0 [ 85.339397][ T5158] ? kernel_text_address+0xa3/0xe0 [ 85.344553][ T5158] ? __kernel_text_address+0xd/0x40 [ 85.349797][ T5158] ? unwind_get_return_address+0x91/0xc0 [ 85.355600][ T5158] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 85.362153][ T5158] ? arch_stack_walk+0x162/0x1a0 [ 85.367135][ T5158] ? stack_trace_save+0x117/0x1c0 [ 85.372191][ T5158] ? stack_trace_snprint+0xf0/0xf0 [ 85.377363][ T5158] ? __stack_depot_save+0x20/0x650 [ 85.382677][ T5158] ? tomoyo_path_number_perm+0x68d/0x870 [ 85.388347][ T5158] ? kasan_set_track+0x61/0x70 [ 85.393240][ T5158] ? kasan_set_track+0x4f/0x70 [ 85.399245][ T5158] ? kasan_save_free_info+0x28/0x40 [ 85.404755][ T5158] ? ____kasan_slab_free+0xd6/0x120 [ 85.409990][ T5158] ? __kmem_cache_free+0x25f/0x3b0 [ 85.415136][ T5158] ? tomoyo_path_number_perm+0x68d/0x870 [ 85.420891][ T5158] ? security_file_ioctl+0x71/0xa0 [ 85.426031][ T5158] ? __se_sys_ioctl+0x47/0x170 [ 85.430872][ T5158] ? do_syscall_64+0x41/0xc0 [ 85.435506][ T5158] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 85.441820][ T5158] ? mark_lock+0x9a/0x340 [ 85.446208][ T5158] ? do_vfs_ioctl+0xcb6/0x2b40 [ 85.451067][ T5158] ? blkdev_bszset+0x250/0x250 [ 85.455950][ T5158] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 85.461748][ T5158] ? read_lock_is_recursive+0x20/0x20 [ 85.467788][ T5158] ? __asan_memset+0x23/0x40 [ 85.472424][ T5158] ? smack_file_ioctl+0x2a1/0x3a0 [ 85.477833][ T5158] ? smack_file_alloc_security+0xe0/0xe0 [ 85.483667][ T5158] ? lo_release+0x1f0/0x1f0 [ 85.488221][ T5158] blkdev_ioctl+0x5cf/0x730 [ 85.492888][ T5158] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 85.498417][ T5158] ? bpf_lsm_file_ioctl+0x9/0x10 [ 85.503390][ T5158] ? security_file_ioctl+0x81/0xa0 [ 85.508576][ T5158] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 85.514179][ T5158] __se_sys_ioctl+0xf8/0x170 [ 85.519357][ T5158] do_syscall_64+0x41/0xc0 [ 85.523834][ T5158] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 85.529854][ T5158] RIP: 0033:0x7f4b1da7c84b [ 85.534352][ T5158] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 85.554331][ T5158] RSP: 002b:00007f4b1e6f9e40 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.562949][ T5158] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f4b1da7c84b [ 85.572254][ T5158] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 85.580596][ T5158] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000234 [ 85.588724][ T5158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 85.596828][ T5158] R13: 00007f4b1e6f9f3c R14: 00007f4b1e6f9f40 R15: 00007f4b149ff000 [ 85.605060][ T5158] [ 85.643662][ T3] ================================================================== [ 85.651803][ T3] BUG: KASAN: slab-use-after-free in pwq_release_workfn+0x253/0x260 [ 85.660002][ T3] Read of size 4 at addr ffff888024ca5dc0 by task pool_workqueue_/3 [ 85.668534][ T3] [ 85.670890][ T3] CPU: 0 PID: 3 Comm: pool_workqueue_ Not tainted 6.6.0-rc3-syzkaller-00214-ge402b08634b3 #0 [ 85.681102][ T3] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 85.691195][ T3] Call Trace: [ 85.694509][ T3] [ 85.697474][ T3] dump_stack_lvl+0x1e7/0x2d0 [ 85.702381][ T3] ? nf_tcp_handle_invalid+0x650/0x650 [ 85.707883][ T3] ? panic+0x770/0x770 [ 85.712001][ T3] ? _printk+0xd5/0x120 [ 85.716400][ T3] print_report+0x163/0x540 [ 85.721474][ T3] ? __virt_addr_valid+0x22f/0x2e0 [ 85.726724][ T3] ? __phys_addr+0xba/0x170 [ 85.731451][ T3] ? pwq_release_workfn+0x253/0x260 [ 85.736685][ T3] kasan_report+0x175/0x1b0 [ 85.741209][ T3] ? pwq_release_workfn+0x253/0x260 [ 85.746425][ T3] pwq_release_workfn+0x253/0x260 [ 85.751914][ T3] kthread_worker_fn+0x4ba/0xa90 [ 85.756891][ T3] ? kthread_worker_fn+0xda/0xa90 [ 85.761939][ T3] ? unbind_worker+0x180/0x180 [ 85.767420][ T3] kthread+0x2d3/0x370 [ 85.771510][ T3] ? __kthread_init_worker+0x1a0/0x1a0 [ 85.777081][ T3] ? kthread_blkcg+0xd0/0xd0 [ 85.782043][ T3] ret_from_fork+0x48/0x80 [ 85.786479][ T3] ? kthread_blkcg+0xd0/0xd0 [ 85.791101][ T3] ret_from_fork_asm+0x11/0x20 [ 85.795983][ T3] [ 85.799007][ T3] [ 85.801332][ T3] Allocated by task 5158: [ 85.805663][ T3] kasan_set_track+0x4f/0x70 [ 85.810290][ T3] __kasan_kmalloc+0x98/0xb0 [ 85.814893][ T3] alloc_workqueue+0x172/0x1520 [ 85.819836][ T3] loop_configure+0x613/0x1250 [ 85.824609][ T3] lo_ioctl+0x8f5/0x2080 [ 85.828961][ T3] blkdev_ioctl+0x5cf/0x730 [ 85.834456][ T3] __se_sys_ioctl+0xf8/0x170 [ 85.839179][ T3] do_syscall_64+0x41/0xc0 [ 85.843779][ T3] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 85.849782][ T3] [ 85.852108][ T3] Freed by task 5158: [ 85.856091][ T3] kasan_set_track+0x4f/0x70 [ 85.860786][ T3] kasan_save_free_info+0x28/0x40 [ 85.865825][ T3] ____kasan_slab_free+0xd6/0x120 [ 85.870889][ T3] __kmem_cache_free+0x25f/0x3b0 [ 85.875870][ T3] alloc_workqueue+0xeba/0x1520 [ 85.881002][ T3] loop_configure+0x613/0x1250 [ 85.885866][ T3] lo_ioctl+0x8f5/0x2080 [ 85.890202][ T3] blkdev_ioctl+0x5cf/0x730 [ 85.895071][ T3] __se_sys_ioctl+0xf8/0x170 [ 85.899680][ T3] do_syscall_64+0x41/0xc0 [ 85.904118][ T3] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 85.910022][ T3] [ 85.912347][ T3] The buggy address belongs to the object at ffff888024ca5c00 [ 85.912347][ T3] which belongs to the cache kmalloc-512 of size 512 [ 85.926650][ T3] The buggy address is located 448 bytes inside of [ 85.926650][ T3] freed 512-byte region [ffff888024ca5c00, ffff888024ca5e00) [ 85.940541][ T3] [ 85.942872][ T3] The buggy address belongs to the physical page: [ 85.950157][ T3] page:ffffea0000932900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24ca4 [ 85.960866][ T3] head:ffffea0000932900 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 85.970005][ T3] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 85.978451][ T3] page_type: 0xffffffff() [ 85.982801][ T3] raw: 00fff00000000840 ffff888012841c80 ffffea000088d800 dead000000000002 [ 85.991401][ T3] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 86.000176][ T3] page dumped because: kasan: bad access detected [ 86.006598][ T3] page_owner tracks the page as allocated [ 86.012491][ T3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2357, tgid 2357 (kworker/u4:7), ts 20453698064, free_ts 0 [ 86.034740][ T3] post_alloc_hook+0x1e6/0x210 [ 86.039613][ T3] get_page_from_freelist+0x31db/0x3360 [ 86.045262][ T3] __alloc_pages+0x255/0x670 [ 86.049871][ T3] alloc_slab_page+0x6a/0x160 [ 86.054668][ T3] new_slab+0x84/0x2f0 [ 86.058749][ T3] ___slab_alloc+0xc85/0x1310 [ 86.063560][ T3] __kmem_cache_alloc_node+0x1af/0x270 [ 86.069029][ T3] kmalloc_trace+0x2a/0xe0 [ 86.073460][ T3] alloc_bprm+0x56/0x900 [ 86.077817][ T3] kernel_execve+0x96/0xa10 [ 86.082597][ T3] call_usermodehelper_exec_async+0x233/0x370 [ 86.088771][ T3] ret_from_fork+0x48/0x80 [ 86.093314][ T3] ret_from_fork_asm+0x11/0x20 [ 86.098275][ T3] page_owner free stack trace missing [ 86.103675][ T3] [ 86.106012][ T3] Memory state around the buggy address: [ 86.112920][ T3] ffff888024ca5c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.121162][ T3] ffff888024ca5d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.130466][ T3] >ffff888024ca5d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.138882][ T3] ^ 2023/10/01 20:09:23 executed programs: 6 [ 86.145039][ T3] ffff888024ca5e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.153109][ T3] ffff888024ca5e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.161348][ T3] ================================================================== [ 86.201008][ T5055] veth0_macvtap: entered promiscuous mode [ 86.212457][ T5160] loop1: detected capacity change from 0 to 128 [ 86.212895][ T5055] veth1_macvtap: entered promiscuous mode [ 86.240456][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.242916][ T3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 86.242933][ T3] CPU: 1 PID: 3 Comm: pool_workqueue_ Not tainted 6.6.0-rc3-syzkaller-00214-ge402b08634b3 #0 [ 86.242957][ T3] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 86.242970][ T3] Call Trace: [ 86.242978][ T3] [ 86.242986][ T3] dump_stack_lvl+0x1e7/0x2d0 [ 86.243017][ T3] ? nf_tcp_handle_invalid+0x650/0x650 [ 86.243040][ T3] ? panic+0x770/0x770 [ 86.243067][ T3] ? preempt_schedule_common+0x83/0xc0 [ 86.243096][ T3] ? vscnprintf+0x5d/0x80 [ 86.243128][ T3] panic+0x30f/0x770 [ 86.243156][ T3] ? check_panic_on_warn+0x21/0xa0 [ 86.243180][ T3] ? __memcpy_flushcache+0x2b0/0x2b0 [ 86.243210][ T3] ? _raw_spin_unlock_irqrestore+0x12c/0x140 [ 86.243242][ T3] ? _raw_spin_unlock+0x40/0x40 [ 86.243270][ T3] ? print_report+0x4fb/0x540 [ 86.243304][ T3] check_panic_on_warn+0x82/0xa0 [ 86.243327][ T3] ? pwq_release_workfn+0x253/0x260 [ 86.243351][ T3] end_report+0x6e/0x130 [ 86.243381][ T3] kasan_report+0x186/0x1b0 [ 86.243412][ T3] ? pwq_release_workfn+0x253/0x260 [ 86.243443][ T3] pwq_release_workfn+0x253/0x260 [ 86.243483][ T3] kthread_worker_fn+0x4ba/0xa90 [ 86.243517][ T3] ? kthread_worker_fn+0xda/0xa90 [ 86.243551][ T3] ? unbind_worker+0x180/0x180 [ 86.243577][ T3] kthread+0x2d3/0x370 [ 86.243595][ T3] ? __kthread_init_worker+0x1a0/0x1a0 [ 86.243627][ T3] ? kthread_blkcg+0xd0/0xd0 [ 86.243660][ T3] ret_from_fork+0x48/0x80 [ 86.243684][ T3] ? kthread_blkcg+0xd0/0xd0 [ 86.243716][ T3] ret_from_fork_asm+0x11/0x20 [ 86.243755][ T3] [ 86.251257][ T3] Kernel Offset: disabled