Warning: Permanently added '10.128.1.104' (ED25519) to the list of known hosts. 2024/12/01 18:18:48 ignoring optional flag "sandboxArg"="0" 2024/12/01 18:18:49 parsed 1 programs [ 85.378864][ T29] audit: type=1400 audit(1733077129.374:88): avc: denied { node_bind } for pid=5812 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 87.340952][ T29] audit: type=1400 audit(1733077131.334:89): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 87.346421][ T5817] cgroup: Unknown subsys name 'net' [ 87.363782][ T29] audit: type=1400 audit(1733077131.344:90): avc: denied { mount } for pid=5817 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 87.391132][ T29] audit: type=1400 audit(1733077131.364:91): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 87.566027][ T5817] cgroup: Unknown subsys name 'cpuset' [ 87.573535][ T5817] cgroup: Unknown subsys name 'rlimit' [ 87.719567][ T29] audit: type=1400 audit(1733077131.714:92): avc: denied { setattr } for pid=5817 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.743397][ T29] audit: type=1400 audit(1733077131.714:93): avc: denied { create } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.764483][ T29] audit: type=1400 audit(1733077131.714:94): avc: denied { write } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.785361][ T29] audit: type=1400 audit(1733077131.714:95): avc: denied { read } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.806601][ T29] audit: type=1400 audit(1733077131.744:96): avc: denied { read } for pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 87.827630][ T29] audit: type=1400 audit(1733077131.744:97): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 87.831637][ T5823] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 88.748896][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.486949][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 90.486966][ T29] audit: type=1400 audit(1733077134.484:103): avc: denied { execmem } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 90.535092][ T29] audit: type=1400 audit(1733077134.524:104): avc: denied { read } for pid=5831 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 90.598046][ T29] audit: type=1400 audit(1733077134.534:105): avc: denied { create } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.602199][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.626563][ T29] audit: type=1400 audit(1733077134.534:107): avc: denied { open } for pid=5832 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 90.650568][ T29] audit: type=1400 audit(1733077134.534:108): avc: denied { mounton } for pid=5832 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 90.672118][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.679653][ T29] audit: type=1400 audit(1733077134.534:106): avc: denied { read write } for pid=5833 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 90.703463][ T29] audit: type=1400 audit(1733077134.564:109): avc: denied { open } for pid=5833 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 90.727094][ T29] audit: type=1400 audit(1733077134.594:110): avc: denied { ioctl } for pid=5833 comm="syz-executor" path="socket:[4887]" dev="sockfs" ino=4887 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.727158][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.771548][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.778795][ T29] audit: type=1400 audit(1733077134.734:111): avc: denied { mounton } for pid=5832 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 90.802223][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.809532][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.822083][ T29] audit: type=1400 audit(1733077134.734:112): avc: denied { mount } for pid=5832 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 90.891064][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.041081][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 91.327246][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.335787][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.354068][ T5834] bridge_slave_0: entered allmulticast mode [ 91.361163][ T5834] bridge_slave_0: entered promiscuous mode [ 91.434267][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.442259][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.479414][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.492901][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.500109][ T5834] bridge_slave_1: entered allmulticast mode [ 91.507039][ T5834] bridge_slave_1: entered promiscuous mode [ 91.646635][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.672697][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.681894][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.708964][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.837993][ T5834] team0: Port device team_slave_0 added [ 91.845549][ T5834] team0: Port device team_slave_1 added [ 92.098228][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.113131][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.173224][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.204941][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.211912][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.292678][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.378270][ T5834] hsr_slave_0: entered promiscuous mode [ 92.385030][ T5834] hsr_slave_1: entered promiscuous mode [ 92.679681][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.807630][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.821910][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.830338][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.928251][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.960458][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.987325][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.994562][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.015735][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.022845][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.159734][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.187850][ T5834] veth0_vlan: entered promiscuous mode [ 93.197212][ T5834] veth1_vlan: entered promiscuous mode [ 93.217304][ T5834] veth0_macvtap: entered promiscuous mode [ 93.226794][ T5834] veth1_macvtap: entered promiscuous mode [ 93.241293][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.254669][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.265397][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.274483][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.283917][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.292767][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2024/12/01 18:18:57 executed programs: 0 [ 93.429444][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.439921][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.447603][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.459163][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.470320][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.478725][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.479098][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.494818][ T5916] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.556049][ T998] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.574714][ T5916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.631507][ T5129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.639184][ T5129] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.646807][ T5129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.703311][ T5916] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.711376][ T5916] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.756424][ T5129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.765878][ T5129] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.773141][ T5916] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.784675][ T5916] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.792509][ T5916] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.799755][ T5916] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.815213][ T5129] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.843711][ T5129] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.852271][ T5916] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.917255][ T5129] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.926505][ T5129] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.934036][ T5129] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.941319][ T5129] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.967252][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.983800][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.991531][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.101504][ T998] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.134602][ T5911] chnl_net:caif_netlink_parms(): no params data found [ 94.188756][ T998] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.323394][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.330495][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.338060][ T5911] bridge_slave_0: entered allmulticast mode [ 94.345814][ T5911] bridge_slave_0: entered promiscuous mode [ 94.371167][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.378520][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.386092][ T5911] bridge_slave_1: entered allmulticast mode [ 94.393889][ T5911] bridge_slave_1: entered promiscuous mode [ 94.436009][ T5911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.447796][ T5911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.484244][ T5921] chnl_net:caif_netlink_parms(): no params data found [ 94.558470][ T5911] team0: Port device team_slave_0 added [ 94.567688][ T5911] team0: Port device team_slave_1 added [ 94.576007][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 94.623151][ T5914] chnl_net:caif_netlink_parms(): no params data found [ 94.652357][ T5911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.659507][ T5911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.685569][ T5911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.717870][ T5911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.724954][ T5911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.751224][ T5911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.784350][ T5918] chnl_net:caif_netlink_parms(): no params data found [ 94.819973][ T5921] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.828131][ T5921] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.835431][ T5921] bridge_slave_0: entered allmulticast mode [ 94.841874][ T5921] bridge_slave_0: entered promiscuous mode [ 94.855914][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.863343][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.870498][ T5928] bridge_slave_0: entered allmulticast mode [ 94.877176][ T5928] bridge_slave_0: entered promiscuous mode [ 94.884782][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.891846][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.899213][ T5928] bridge_slave_1: entered allmulticast mode [ 94.905806][ T5928] bridge_slave_1: entered promiscuous mode [ 94.924995][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.932134][ T5921] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.942569][ T5921] bridge_slave_1: entered allmulticast mode [ 94.949225][ T5921] bridge_slave_1: entered promiscuous mode [ 95.004733][ T5911] hsr_slave_0: entered promiscuous mode [ 95.011129][ T5911] hsr_slave_1: entered promiscuous mode [ 95.018484][ T5911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.026670][ T5911] Cannot create hsr debugfs directory [ 95.045689][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.087973][ T5921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.102199][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.134985][ T5921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.158582][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.166325][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.173905][ T5914] bridge_slave_0: entered allmulticast mode [ 95.180342][ T5914] bridge_slave_0: entered promiscuous mode [ 95.220114][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.228042][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.235614][ T5914] bridge_slave_1: entered allmulticast mode [ 95.242145][ T5914] bridge_slave_1: entered promiscuous mode [ 95.261690][ T5921] team0: Port device team_slave_0 added [ 95.278033][ T998] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.297103][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.305127][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.312282][ T5918] bridge_slave_0: entered allmulticast mode [ 95.319220][ T5918] bridge_slave_0: entered promiscuous mode [ 95.328366][ T5928] team0: Port device team_slave_0 added [ 95.336703][ T5928] team0: Port device team_slave_1 added [ 95.359653][ T5914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.381484][ T5921] team0: Port device team_slave_1 added [ 95.398706][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.405923][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.413724][ T5918] bridge_slave_1: entered allmulticast mode [ 95.420202][ T5918] bridge_slave_1: entered promiscuous mode [ 95.435613][ T5914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.467777][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.477723][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.504133][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.516148][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.523517][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.549798][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.572149][ T5914] team0: Port device team_slave_0 added [ 95.578522][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.585792][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.612505][ T5921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.642356][ T5914] team0: Port device team_slave_1 added [ 95.648644][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.655701][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.682154][ T5921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.700641][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.703598][ T5841] Bluetooth: hci0: command tx timeout [ 95.715384][ T55] Bluetooth: hci1: command tx timeout [ 95.718600][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.746688][ T5928] hsr_slave_0: entered promiscuous mode [ 95.753458][ T5928] hsr_slave_1: entered promiscuous mode [ 95.759979][ T5928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.767703][ T5928] Cannot create hsr debugfs directory [ 95.837121][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.844164][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.870770][ T5914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.872912][ T55] Bluetooth: hci2: command tx timeout [ 95.883985][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.894946][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.921153][ T5914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.939191][ T5918] team0: Port device team_slave_0 added [ 95.963833][ T5921] hsr_slave_0: entered promiscuous mode [ 95.970204][ T5921] hsr_slave_1: entered promiscuous mode [ 95.976421][ T5921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.984246][ T5921] Cannot create hsr debugfs directory [ 96.000961][ T5918] team0: Port device team_slave_1 added [ 96.009618][ T5911] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.020188][ T5911] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.027114][ T55] Bluetooth: hci4: command tx timeout [ 96.078348][ T5911] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.088871][ T5911] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.099579][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.108068][ T55] Bluetooth: hci3: command tx timeout [ 96.118631][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.145288][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.171517][ T5914] hsr_slave_0: entered promiscuous mode [ 96.177718][ T5914] hsr_slave_1: entered promiscuous mode [ 96.185249][ T5914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.192956][ T5914] Cannot create hsr debugfs directory [ 96.209143][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.216417][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.242530][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.335484][ T5918] hsr_slave_0: entered promiscuous mode [ 96.341601][ T5918] hsr_slave_1: entered promiscuous mode [ 96.350987][ T5918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.360976][ T5918] Cannot create hsr debugfs directory [ 96.495759][ T5928] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.529540][ T5928] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.560515][ T5928] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.571736][ T5928] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.601657][ T5921] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.628231][ T5921] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.637251][ T5921] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.658478][ T5921] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.675865][ T5911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.727151][ T5911] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.765661][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.772788][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.822632][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.829745][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.852161][ T998] bridge_slave_1: left allmulticast mode [ 96.858591][ T998] bridge_slave_1: left promiscuous mode [ 96.866299][ T998] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.877254][ T998] bridge_slave_0: left allmulticast mode [ 96.884823][ T998] bridge_slave_0: left promiscuous mode [ 96.890601][ T998] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.097646][ T998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.108765][ T998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.119196][ T998] bond0 (unregistering): Released all slaves [ 97.168597][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.211038][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.251570][ T998] hsr_slave_0: left promiscuous mode [ 97.260081][ T998] hsr_slave_1: left promiscuous mode [ 97.269221][ T998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.277268][ T998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.285489][ T998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.293663][ T998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.307713][ T998] veth1_macvtap: left promiscuous mode [ 97.314178][ T998] veth0_macvtap: left promiscuous mode [ 97.319718][ T998] veth1_vlan: left promiscuous mode [ 97.325409][ T998] veth0_vlan: left promiscuous mode [ 97.595463][ T998] team0 (unregistering): Port device team_slave_1 removed [ 97.630744][ T998] team0 (unregistering): Port device team_slave_0 removed [ 97.783290][ T55] Bluetooth: hci0: command tx timeout [ 97.789451][ T5841] Bluetooth: hci1: command tx timeout [ 97.891145][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.898296][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.922136][ T5921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.945096][ T5841] Bluetooth: hci2: command tx timeout [ 97.968654][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.975781][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.024934][ T5921] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.037262][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.044386][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.078980][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.086116][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.104084][ T5841] Bluetooth: hci4: command tx timeout [ 98.145086][ T5921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.183580][ T5841] Bluetooth: hci3: command tx timeout [ 98.266265][ T5911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.388470][ T5911] veth0_vlan: entered promiscuous mode [ 98.399045][ T5914] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.439003][ T5914] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.448690][ T5914] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.474827][ T5911] veth1_vlan: entered promiscuous mode [ 98.480945][ T5914] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.497603][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.532458][ T5921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.622278][ T5918] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.649002][ T5918] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.686703][ T5918] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.714969][ T5918] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.800661][ T5911] veth0_macvtap: entered promiscuous mode [ 98.844894][ T5911] veth1_macvtap: entered promiscuous mode [ 98.879286][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.917730][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.927790][ T5921] veth0_vlan: entered promiscuous mode [ 98.956728][ T5928] veth0_vlan: entered promiscuous mode [ 98.969287][ T5911] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.980939][ T5911] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.990747][ T5911] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.000210][ T5911] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.020169][ T5921] veth1_vlan: entered promiscuous mode [ 99.027467][ T5928] veth1_vlan: entered promiscuous mode [ 99.048015][ T5914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.091762][ T5914] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.112122][ T5928] veth0_macvtap: entered promiscuous mode [ 99.126448][ T5921] veth0_macvtap: entered promiscuous mode [ 99.139961][ T5928] veth1_macvtap: entered promiscuous mode [ 99.153327][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.160374][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.173536][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.180646][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.192000][ T5921] veth1_macvtap: entered promiscuous mode [ 99.200609][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.214700][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.244586][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.251651][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.262804][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.275700][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.306049][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.316777][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.328049][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.342448][ T5928] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.351574][ T5928] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.362000][ T5928] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.370956][ T5928] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.388763][ T5914] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.399292][ T5914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.417743][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.426152][ T5921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.436910][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.446116][ T5921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.456344][ T5921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.472315][ T5921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.483593][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.503814][ T5918] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.522504][ T5921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.539926][ T5921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.551009][ T5921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.566934][ T5921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.578431][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.604226][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.611358][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.638869][ T5921] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.647727][ T5921] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.656518][ T5921] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.665305][ T5921] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2024/12/01 18:19:03 executed programs: 10 [ 99.708715][ T998] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.715840][ T998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.753526][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 99.753542][ T29] audit: type=1400 audit(1733077143.744:133): avc: denied { prog_load } for pid=5989 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 99.779237][ T5914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.797714][ T29] audit: type=1400 audit(1733077143.744:134): avc: denied { bpf } for pid=5989 comm="syz.0.15" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.803461][ T5918] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.823855][ T29] audit: type=1400 audit(1733077143.744:135): avc: denied { perfmon } for pid=5989 comm="syz.0.15" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.849099][ T5918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.872567][ T5841] Bluetooth: hci1: command tx timeout [ 99.878101][ T5841] Bluetooth: hci0: command tx timeout [ 99.901872][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.923368][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.978985][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.987329][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.024905][ T55] Bluetooth: hci2: command tx timeout [ 100.032369][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.053836][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.145842][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.183255][ T55] Bluetooth: hci4: command tx timeout [ 100.187181][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.193317][ T5914] veth0_vlan: entered promiscuous mode [ 100.206158][ T5914] veth1_vlan: entered promiscuous mode [ 100.232295][ T5914] veth0_macvtap: entered promiscuous mode [ 100.242842][ T5914] veth1_macvtap: entered promiscuous mode [ 100.264124][ T55] Bluetooth: hci3: command tx timeout [ 100.279371][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.311256][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.327324][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.342130][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.372643][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.393604][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.395031][ T29] audit: type=1400 audit(1733077144.394:136): avc: denied { read } for pid=5989 comm="syz.0.15" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.416852][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.436264][ T5998] ubi0: attaching mtd0 [ 100.441831][ T5998] ubi0: scanning is finished [ 100.448197][ T5998] ubi0: empty MTD device detected [ 100.454251][ T29] audit: type=1400 audit(1733077144.394:137): avc: denied { open } for pid=5989 comm="syz.0.15" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.482509][ T29] audit: type=1400 audit(1733077144.434:138): avc: denied { ioctl } for pid=5989 comm="syz.0.15" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 ioctlcmd=0x6f40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.532488][ T5918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.571946][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.595001][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.613743][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.631044][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.650357][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.663924][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.677459][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.753970][ T5914] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.778172][ T5914] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.793293][ T5998] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 100.811638][ T5914] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.837567][ T5914] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.868135][ T5918] veth0_vlan: entered promiscuous mode [ 100.871378][ T6003] ubi0: attaching mtd0 [ 100.913634][ T6003] ubi0: scanning is finished [ 100.919831][ T6003] ================================================================== [ 100.927916][ T6003] BUG: KASAN: slab-use-after-free in notifier_chain_register+0x3ac/0x420 [ 100.936355][ T6003] Read of size 4 at addr ffff8880323a58d8 by task syz.4.19/6003 [ 100.943969][ T6003] [ 100.946291][ T6003] CPU: 1 UID: 0 PID: 6003 Comm: syz.4.19 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 100.956420][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 100.966465][ T6003] Call Trace: [ 100.969725][ T6003] [ 100.972640][ T6003] dump_stack_lvl+0x116/0x1f0 [ 100.977323][ T6003] print_report+0xc3/0x620 [ 100.981727][ T6003] ? __virt_addr_valid+0x5e/0x590 [ 100.986753][ T6003] ? __phys_addr+0xc6/0x150 [ 100.991250][ T6003] kasan_report+0xd9/0x110 [ 100.995651][ T6003] ? notifier_chain_register+0x3ac/0x420 [ 101.001270][ T6003] ? notifier_chain_register+0x3ac/0x420 [ 101.006897][ T6003] notifier_chain_register+0x3ac/0x420 [ 101.012354][ T6003] blocking_notifier_chain_register+0x76/0xd0 [ 101.018407][ T6003] ubi_wl_init+0x1018/0x17b0 [ 101.022984][ T6003] ubi_attach+0x1b92/0x4c00 [ 101.027474][ T6003] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 101.033782][ T6003] ? lockdep_init_map_type+0x16d/0x7d0 [ 101.039225][ T6003] ? __pfx_ubi_attach+0x10/0x10 [ 101.044058][ T6003] ? ubi_attach_mtd_dev+0x1543/0x3590 [ 101.049412][ T6003] ubi_attach_mtd_dev+0x158f/0x3590 [ 101.054598][ T6003] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 101.060126][ T6003] ? __pfx_get_mtd_device+0x10/0x10 [ 101.065314][ T6003] ctrl_cdev_ioctl+0x339/0x3d0 [ 101.070062][ T6003] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 101.075330][ T6003] ? selinux_file_ioctl+0x180/0x270 [ 101.080517][ T6003] ? selinux_file_ioctl+0xb4/0x270 [ 101.085618][ T6003] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 101.090893][ T6003] __x64_sys_ioctl+0x190/0x200 [ 101.095654][ T6003] do_syscall_64+0xcd/0x250 [ 101.100143][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.106024][ T6003] RIP: 0033:0x7f5f79180849 [ 101.110420][ T6003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.130008][ T6003] RSP: 002b:00007f5f79f4c058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.138417][ T6003] RAX: ffffffffffffffda RBX: 00007f5f79346160 RCX: 00007f5f79180849 [ 101.146372][ T6003] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000005 [ 101.154328][ T6003] RBP: 00007f5f791f3986 R08: 0000000000000000 R09: 0000000000000000 [ 101.162278][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.170230][ T6003] R13: 0000000000000000 R14: 00007f5f79346160 R15: 00007ffe575f5bc8 [ 101.178188][ T6003] [ 101.181193][ T6003] [ 101.183495][ T6003] Allocated by task 5998: [ 101.187798][ T6003] kasan_save_stack+0x33/0x60 [ 101.192470][ T6003] kasan_save_track+0x14/0x30 [ 101.197131][ T6003] __kasan_kmalloc+0xaa/0xb0 [ 101.201702][ T6003] ubi_attach_mtd_dev+0x3ce/0x3590 [ 101.206795][ T6003] ctrl_cdev_ioctl+0x339/0x3d0 [ 101.211540][ T6003] __x64_sys_ioctl+0x190/0x200 [ 101.216303][ T6003] do_syscall_64+0xcd/0x250 [ 101.220811][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.226719][ T6003] [ 101.229037][ T6003] Freed by task 5998: [ 101.233028][ T6003] kasan_save_stack+0x33/0x60 [ 101.237727][ T6003] kasan_save_track+0x14/0x30 [ 101.242389][ T6003] kasan_save_free_info+0x3b/0x60 [ 101.247488][ T6003] __kasan_slab_free+0x51/0x70 [ 101.252234][ T6003] kfree+0x14f/0x4b0 [ 101.256112][ T6003] device_release+0xa1/0x240 [ 101.260682][ T6003] kobject_put+0x1e4/0x5a0 [ 101.265083][ T6003] put_device+0x1f/0x30 [ 101.269219][ T6003] ubi_attach_mtd_dev+0xe25/0x3590 [ 101.274313][ T6003] ctrl_cdev_ioctl+0x339/0x3d0 [ 101.279057][ T6003] __x64_sys_ioctl+0x190/0x200 [ 101.283807][ T6003] do_syscall_64+0xcd/0x250 [ 101.288304][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.294184][ T6003] [ 101.296486][ T6003] The buggy address belongs to the object at ffff8880323a4000 [ 101.296486][ T6003] which belongs to the cache kmalloc-8k of size 8192 [ 101.310515][ T6003] The buggy address is located 6360 bytes inside of [ 101.310515][ T6003] freed 8192-byte region [ffff8880323a4000, ffff8880323a6000) [ 101.324463][ T6003] [ 101.326769][ T6003] The buggy address belongs to the physical page: [ 101.333161][ T6003] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x323a0 [ 101.341946][ T6003] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 101.350438][ T6003] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 101.358402][ T6003] page_type: f5(slab) [ 101.362366][ T6003] raw: 00fff00000000040 ffff88801b042280 0000000000000000 0000000000000001 [ 101.370930][ T6003] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 101.379495][ T6003] head: 00fff00000000040 ffff88801b042280 0000000000000000 0000000000000001 [ 101.388148][ T6003] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 101.396799][ T6003] head: 00fff00000000003 ffffea0000c8e801 ffffffffffffffff 0000000000000000 [ 101.405453][ T6003] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 101.414099][ T6003] page dumped because: kasan: bad access detected [ 101.420495][ T6003] page_owner tracks the page as allocated [ 101.426184][ T6003] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5833, tgid 5833 (syz-executor), ts 90563145467, free_ts 90514080413 [ 101.445447][ T6003] post_alloc_hook+0x2d1/0x350 [ 101.450198][ T6003] get_page_from_freelist+0xfce/0x2f80 [ 101.455638][ T6003] __alloc_pages_noprof+0x223/0x25b0 [ 101.460914][ T6003] alloc_pages_mpol_noprof+0x2c9/0x610 [ 101.466358][ T6003] new_slab+0x2c9/0x410 [ 101.470510][ T6003] ___slab_alloc+0xdac/0x1870 [ 101.475183][ T6003] __slab_alloc.constprop.0+0x56/0xb0 [ 101.480546][ T6003] __kmalloc_cache_noprof+0xfa/0x410 [ 101.485829][ T6003] audit_log_d_path+0xce/0x1e0 [ 101.490587][ T6003] common_lsm_audit+0x7e7/0x2250 [ 101.495522][ T6003] slow_avc_audit+0x17d/0x210 [ 101.500192][ T6003] avc_has_perm+0x18d/0x1c0 [ 101.504693][ T6003] inode_has_perm+0x168/0x1d0 [ 101.509351][ T6003] selinux_file_open+0x314/0x430 [ 101.514276][ T6003] security_file_open+0xa5/0x1e0 [ 101.519214][ T6003] do_dentry_open+0x57e/0x1ea0 [ 101.523994][ T6003] page last free pid 5829 tgid 5829 stack trace: [ 101.530308][ T6003] free_unref_page+0x661/0x1080 [ 101.535167][ T6003] __put_partials+0x14c/0x170 [ 101.539864][ T6003] qlist_free_all+0x4e/0x120 [ 101.544445][ T6003] kasan_quarantine_reduce+0x195/0x1e0 [ 101.549893][ T6003] __kasan_slab_alloc+0x69/0x90 [ 101.554726][ T6003] kmem_cache_alloc_noprof+0x226/0x3d0 [ 101.560167][ T6003] vm_area_dup+0x21/0x2f0 [ 101.564480][ T6003] __split_vma+0x181/0x1160 [ 101.568965][ T6003] vms_gather_munmap_vmas+0x1c3/0x1730 [ 101.574408][ T6003] do_vmi_align_munmap+0x27f/0x890 [ 101.579507][ T6003] do_vmi_munmap+0x20b/0x3e0 [ 101.584163][ T6003] __vm_munmap+0x14f/0x340 [ 101.588557][ T6003] elf_load+0x4d2/0x880 [ 101.592700][ T6003] load_elf_binary+0x1a5c/0x4ec0 [ 101.597635][ T6003] bprm_execve+0x703/0x19b0 [ 101.602118][ T6003] do_execveat_common.isra.0+0x4f1/0x630 [ 101.607731][ T6003] [ 101.610037][ T6003] Memory state around the buggy address: [ 101.615643][ T6003] ffff8880323a5780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.623691][ T6003] ffff8880323a5800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.631731][ T6003] >ffff8880323a5880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.639767][ T6003] ^ [ 101.646675][ T6003] ffff8880323a5900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.654713][ T6003] ffff8880323a5980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.662756][ T6003] ================================================================== [ 101.694052][ T5918] veth1_vlan: entered promiscuous mode [ 101.716599][ T5918] veth0_macvtap: entered promiscuous mode [ 101.725255][ T5918] veth1_macvtap: entered promiscuous mode [ 101.738787][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.749521][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.760391][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.771065][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.786670][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.800133][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.810454][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.821245][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.821353][ T6003] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 101.821366][ T6003] CPU: 1 UID: 0 PID: 6003 Comm: syz.4.19 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 101.821386][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.821397][ T6003] Call Trace: [ 101.821403][ T6003] [ 101.821411][ T6003] dump_stack_lvl+0x3d/0x1f0 [ 101.821439][ T6003] panic+0x71d/0x800 [ 101.821466][ T6003] ? __pfx_panic+0x10/0x10 [ 101.821491][ T6003] ? irqentry_exit+0x3b/0x90 [ 101.821514][ T6003] ? lockdep_hardirqs_on+0x7c/0x110 [ 101.821536][ T6003] ? preempt_schedule_thunk+0x1a/0x30 [ 101.821556][ T6003] ? preempt_schedule_common+0x44/0xc0 [ 101.821578][ T6003] ? check_panic_on_warn+0x1f/0xb0 [ 101.821597][ T6003] check_panic_on_warn+0xab/0xb0 [ 101.821615][ T6003] end_report+0x117/0x180 [ 101.821636][ T6003] kasan_report+0xe9/0x110 [ 101.821658][ T6003] ? notifier_chain_register+0x3ac/0x420 [ 101.821685][ T6003] ? notifier_chain_register+0x3ac/0x420 [ 101.821712][ T6003] notifier_chain_register+0x3ac/0x420 [ 101.821739][ T6003] blocking_notifier_chain_register+0x76/0xd0 [ 101.821766][ T6003] ubi_wl_init+0x1018/0x17b0 [ 101.821789][ T6003] ubi_attach+0x1b92/0x4c00 [ 101.821813][ T6003] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 101.821834][ T6003] ? lockdep_init_map_type+0x16d/0x7d0 [ 101.821857][ T6003] ? __pfx_ubi_attach+0x10/0x10 [ 101.821876][ T6003] ? ubi_attach_mtd_dev+0x1543/0x3590 [ 101.821900][ T6003] ubi_attach_mtd_dev+0x158f/0x3590 [ 101.821933][ T6003] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 101.821954][ T6003] ? __pfx_get_mtd_device+0x10/0x10 [ 101.821982][ T6003] ctrl_cdev_ioctl+0x339/0x3d0 [ 101.822004][ T6003] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 101.822026][ T6003] ? selinux_file_ioctl+0x180/0x270 [ 101.822052][ T6003] ? selinux_file_ioctl+0xb4/0x270 [ 101.822084][ T6003] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 101.822106][ T6003] __x64_sys_ioctl+0x190/0x200 [ 101.822133][ T6003] do_syscall_64+0xcd/0x250 [ 101.822157][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.822184][ T6003] RIP: 0033:0x7f5f79180849 [ 101.822198][ T6003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.822215][ T6003] RSP: 002b:00007f5f79f4c058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.822234][ T6003] RAX: ffffffffffffffda RBX: 00007f5f79346160 RCX: 00007f5f79180849 [ 101.822247][ T6003] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000005 [ 101.822260][ T6003] RBP: 00007f5f791f3986 R08: 0000000000000000 R09: 0000000000000000 [ 101.822272][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.822283][ T6003] R13: 0000000000000000 R14: 00007f5f79346160 R15: 00007ffe575f5bc8 [ 101.822301][ T6003] [ 101.831213][ T6003] Kernel Offset: disabled