Warning: Permanently added '10.128.1.104' (ED25519) to the list of known hosts.
2024/12/01 18:18:48 ignoring optional flag "sandboxArg"="0"
2024/12/01 18:18:49 parsed 1 programs
[   85.378864][   T29] audit: type=1400 audit(1733077129.374:88): avc:  denied  { node_bind } for  pid=5812 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   87.340952][   T29] audit: type=1400 audit(1733077131.334:89): avc:  denied  { mounton } for  pid=5817 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   87.346421][ T5817] cgroup: Unknown subsys name 'net'
[   87.363782][   T29] audit: type=1400 audit(1733077131.344:90): avc:  denied  { mount } for  pid=5817 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   87.391132][   T29] audit: type=1400 audit(1733077131.364:91): avc:  denied  { unmount } for  pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   87.566027][ T5817] cgroup: Unknown subsys name 'cpuset'
[   87.573535][ T5817] cgroup: Unknown subsys name 'rlimit'
[   87.719567][   T29] audit: type=1400 audit(1733077131.714:92): avc:  denied  { setattr } for  pid=5817 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   87.743397][   T29] audit: type=1400 audit(1733077131.714:93): avc:  denied  { create } for  pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   87.764483][   T29] audit: type=1400 audit(1733077131.714:94): avc:  denied  { write } for  pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   87.785361][   T29] audit: type=1400 audit(1733077131.714:95): avc:  denied  { read } for  pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   87.806601][   T29] audit: type=1400 audit(1733077131.744:96): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   87.827630][   T29] audit: type=1400 audit(1733077131.744:97): avc:  denied  { mounton } for  pid=5817 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   87.831637][ T5823] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   88.748896][ T5817] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   90.486949][   T29] kauditd_printk_skb: 5 callbacks suppressed
[   90.486966][   T29] audit: type=1400 audit(1733077134.484:103): avc:  denied  { execmem } for  pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   90.535092][   T29] audit: type=1400 audit(1733077134.524:104): avc:  denied  { read } for  pid=5831 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   90.598046][   T29] audit: type=1400 audit(1733077134.534:105): avc:  denied  { create } for  pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   90.602199][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   90.626563][   T29] audit: type=1400 audit(1733077134.534:107): avc:  denied  { open } for  pid=5832 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   90.650568][   T29] audit: type=1400 audit(1733077134.534:108): avc:  denied  { mounton } for  pid=5832 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   90.672118][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   90.679653][   T29] audit: type=1400 audit(1733077134.534:106): avc:  denied  { read write } for  pid=5833 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   90.703463][   T29] audit: type=1400 audit(1733077134.564:109): avc:  denied  { open } for  pid=5833 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   90.727094][   T29] audit: type=1400 audit(1733077134.594:110): avc:  denied  { ioctl } for  pid=5833 comm="syz-executor" path="socket:[4887]" dev="sockfs" ino=4887 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   90.727158][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   90.771548][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   90.778795][   T29] audit: type=1400 audit(1733077134.734:111): avc:  denied  { mounton } for  pid=5832 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   90.802223][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   90.809532][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   90.822083][   T29] audit: type=1400 audit(1733077134.734:112): avc:  denied  { mount } for  pid=5832 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   90.891064][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   91.041081][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   91.327246][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.335787][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.354068][ T5834] bridge_slave_0: entered allmulticast mode
[   91.361163][ T5834] bridge_slave_0: entered promiscuous mode
[   91.434267][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.442259][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.479414][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.492901][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.500109][ T5834] bridge_slave_1: entered allmulticast mode
[   91.507039][ T5834] bridge_slave_1: entered promiscuous mode
[   91.646635][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.672697][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.681894][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.708964][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.837993][ T5834] team0: Port device team_slave_0 added
[   91.845549][ T5834] team0: Port device team_slave_1 added
[   92.098228][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.113131][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.173224][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.204941][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.211912][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.292678][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.378270][ T5834] hsr_slave_0: entered promiscuous mode
[   92.385030][ T5834] hsr_slave_1: entered promiscuous mode
[   92.679681][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   92.807630][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   92.821910][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   92.830338][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   92.928251][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.960458][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   92.987325][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.994562][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.015735][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.022845][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.159734][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.187850][ T5834] veth0_vlan: entered promiscuous mode
[   93.197212][ T5834] veth1_vlan: entered promiscuous mode
[   93.217304][ T5834] veth0_macvtap: entered promiscuous mode
[   93.226794][ T5834] veth1_macvtap: entered promiscuous mode
[   93.241293][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.254669][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.265397][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.274483][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.283917][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.292767][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2024/12/01 18:18:57 executed programs: 0
[   93.429444][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   93.439921][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   93.447603][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   93.459163][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   93.470320][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   93.478725][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   93.479098][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   93.494818][ T5916] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   93.556049][  T998] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.574714][ T5916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   93.631507][ T5129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   93.639184][ T5129] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   93.646807][ T5129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   93.703311][ T5916] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   93.711376][ T5916] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   93.756424][ T5129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   93.765878][ T5129] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   93.773141][ T5916] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   93.784675][ T5916] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   93.792509][ T5916] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   93.799755][ T5916] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   93.815213][ T5129] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   93.843711][ T5129] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   93.852271][ T5916] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   93.917255][ T5129] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   93.926505][ T5129] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   93.934036][ T5129] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   93.941319][ T5129] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   93.967252][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   93.983800][   T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   93.991531][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   94.101504][  T998] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.134602][ T5911] chnl_net:caif_netlink_parms(): no params data found
[   94.188756][  T998] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.323394][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.330495][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.338060][ T5911] bridge_slave_0: entered allmulticast mode
[   94.345814][ T5911] bridge_slave_0: entered promiscuous mode
[   94.371167][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.378520][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.386092][ T5911] bridge_slave_1: entered allmulticast mode
[   94.393889][ T5911] bridge_slave_1: entered promiscuous mode
[   94.436009][ T5911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.447796][ T5911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.484244][ T5921] chnl_net:caif_netlink_parms(): no params data found
[   94.558470][ T5911] team0: Port device team_slave_0 added
[   94.567688][ T5911] team0: Port device team_slave_1 added
[   94.576007][ T5928] chnl_net:caif_netlink_parms(): no params data found
[   94.623151][ T5914] chnl_net:caif_netlink_parms(): no params data found
[   94.652357][ T5911] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.659507][ T5911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.685569][ T5911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.717870][ T5911] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.724954][ T5911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.751224][ T5911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.784350][ T5918] chnl_net:caif_netlink_parms(): no params data found
[   94.819973][ T5921] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.828131][ T5921] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.835431][ T5921] bridge_slave_0: entered allmulticast mode
[   94.841874][ T5921] bridge_slave_0: entered promiscuous mode
[   94.855914][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.863343][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.870498][ T5928] bridge_slave_0: entered allmulticast mode
[   94.877176][ T5928] bridge_slave_0: entered promiscuous mode
[   94.884782][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.891846][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.899213][ T5928] bridge_slave_1: entered allmulticast mode
[   94.905806][ T5928] bridge_slave_1: entered promiscuous mode
[   94.924995][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.932134][ T5921] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.942569][ T5921] bridge_slave_1: entered allmulticast mode
[   94.949225][ T5921] bridge_slave_1: entered promiscuous mode
[   95.004733][ T5911] hsr_slave_0: entered promiscuous mode
[   95.011129][ T5911] hsr_slave_1: entered promiscuous mode
[   95.018484][ T5911] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.026670][ T5911] Cannot create hsr debugfs directory
[   95.045689][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.087973][ T5921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.102199][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.134985][ T5921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.158582][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.166325][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.173905][ T5914] bridge_slave_0: entered allmulticast mode
[   95.180342][ T5914] bridge_slave_0: entered promiscuous mode
[   95.220114][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.228042][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.235614][ T5914] bridge_slave_1: entered allmulticast mode
[   95.242145][ T5914] bridge_slave_1: entered promiscuous mode
[   95.261690][ T5921] team0: Port device team_slave_0 added
[   95.278033][  T998] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.297103][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.305127][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.312282][ T5918] bridge_slave_0: entered allmulticast mode
[   95.319220][ T5918] bridge_slave_0: entered promiscuous mode
[   95.328366][ T5928] team0: Port device team_slave_0 added
[   95.336703][ T5928] team0: Port device team_slave_1 added
[   95.359653][ T5914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.381484][ T5921] team0: Port device team_slave_1 added
[   95.398706][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.405923][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.413724][ T5918] bridge_slave_1: entered allmulticast mode
[   95.420202][ T5918] bridge_slave_1: entered promiscuous mode
[   95.435613][ T5914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.467777][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.477723][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.504133][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.516148][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.523517][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.549798][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.572149][ T5914] team0: Port device team_slave_0 added
[   95.578522][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.585792][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.612505][ T5921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.642356][ T5914] team0: Port device team_slave_1 added
[   95.648644][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.655701][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.682154][ T5921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.700641][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.703598][ T5841] Bluetooth: hci0: command tx timeout
[   95.715384][   T55] Bluetooth: hci1: command tx timeout
[   95.718600][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.746688][ T5928] hsr_slave_0: entered promiscuous mode
[   95.753458][ T5928] hsr_slave_1: entered promiscuous mode
[   95.759979][ T5928] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.767703][ T5928] Cannot create hsr debugfs directory
[   95.837121][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.844164][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.870770][ T5914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.872912][   T55] Bluetooth: hci2: command tx timeout
[   95.883985][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.894946][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.921153][ T5914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.939191][ T5918] team0: Port device team_slave_0 added
[   95.963833][ T5921] hsr_slave_0: entered promiscuous mode
[   95.970204][ T5921] hsr_slave_1: entered promiscuous mode
[   95.976421][ T5921] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.984246][ T5921] Cannot create hsr debugfs directory
[   96.000961][ T5918] team0: Port device team_slave_1 added
[   96.009618][ T5911] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   96.020188][ T5911] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   96.027114][   T55] Bluetooth: hci4: command tx timeout
[   96.078348][ T5911] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   96.088871][ T5911] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   96.099579][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.108068][   T55] Bluetooth: hci3: command tx timeout
[   96.118631][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.145288][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.171517][ T5914] hsr_slave_0: entered promiscuous mode
[   96.177718][ T5914] hsr_slave_1: entered promiscuous mode
[   96.185249][ T5914] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.192956][ T5914] Cannot create hsr debugfs directory
[   96.209143][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.216417][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.242530][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.335484][ T5918] hsr_slave_0: entered promiscuous mode
[   96.341601][ T5918] hsr_slave_1: entered promiscuous mode
[   96.350987][ T5918] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.360976][ T5918] Cannot create hsr debugfs directory
[   96.495759][ T5928] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   96.529540][ T5928] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   96.560515][ T5928] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   96.571736][ T5928] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   96.601657][ T5921] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   96.628231][ T5921] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   96.637251][ T5921] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   96.658478][ T5921] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   96.675865][ T5911] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.727151][ T5911] 8021q: adding VLAN 0 to HW filter on device team0
[   96.765661][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.772788][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.822632][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.829745][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.852161][  T998] bridge_slave_1: left allmulticast mode
[   96.858591][  T998] bridge_slave_1: left promiscuous mode
[   96.866299][  T998] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.877254][  T998] bridge_slave_0: left allmulticast mode
[   96.884823][  T998] bridge_slave_0: left promiscuous mode
[   96.890601][  T998] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.097646][  T998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   97.108765][  T998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.119196][  T998] bond0 (unregistering): Released all slaves
[   97.168597][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.211038][ T5928] 8021q: adding VLAN 0 to HW filter on device team0
[   97.251570][  T998] hsr_slave_0: left promiscuous mode
[   97.260081][  T998] hsr_slave_1: left promiscuous mode
[   97.269221][  T998] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.277268][  T998] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.285489][  T998] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.293663][  T998] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.307713][  T998] veth1_macvtap: left promiscuous mode
[   97.314178][  T998] veth0_macvtap: left promiscuous mode
[   97.319718][  T998] veth1_vlan: left promiscuous mode
[   97.325409][  T998] veth0_vlan: left promiscuous mode
[   97.595463][  T998] team0 (unregistering): Port device team_slave_1 removed
[   97.630744][  T998] team0 (unregistering): Port device team_slave_0 removed
[   97.783290][   T55] Bluetooth: hci0: command tx timeout
[   97.789451][ T5841] Bluetooth: hci1: command tx timeout
[   97.891145][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.898296][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.922136][ T5921] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.945096][ T5841] Bluetooth: hci2: command tx timeout
[   97.968654][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.975781][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.024934][ T5921] 8021q: adding VLAN 0 to HW filter on device team0
[   98.037262][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.044386][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.078980][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.086116][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.104084][ T5841] Bluetooth: hci4: command tx timeout
[   98.145086][ T5921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   98.183580][ T5841] Bluetooth: hci3: command tx timeout
[   98.266265][ T5911] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.388470][ T5911] veth0_vlan: entered promiscuous mode
[   98.399045][ T5914] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   98.439003][ T5914] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   98.448690][ T5914] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   98.474827][ T5911] veth1_vlan: entered promiscuous mode
[   98.480945][ T5914] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   98.497603][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.532458][ T5921] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.622278][ T5918] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   98.649002][ T5918] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   98.686703][ T5918] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   98.714969][ T5918] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   98.800661][ T5911] veth0_macvtap: entered promiscuous mode
[   98.844894][ T5911] veth1_macvtap: entered promiscuous mode
[   98.879286][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.917730][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.927790][ T5921] veth0_vlan: entered promiscuous mode
[   98.956728][ T5928] veth0_vlan: entered promiscuous mode
[   98.969287][ T5911] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.980939][ T5911] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.990747][ T5911] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.000210][ T5911] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.020169][ T5921] veth1_vlan: entered promiscuous mode
[   99.027467][ T5928] veth1_vlan: entered promiscuous mode
[   99.048015][ T5914] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.091762][ T5914] 8021q: adding VLAN 0 to HW filter on device team0
[   99.112122][ T5928] veth0_macvtap: entered promiscuous mode
[   99.126448][ T5921] veth0_macvtap: entered promiscuous mode
[   99.139961][ T5928] veth1_macvtap: entered promiscuous mode
[   99.153327][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.160374][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.173536][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.180646][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.192000][ T5921] veth1_macvtap: entered promiscuous mode
[   99.200609][   T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.214700][   T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.244586][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.251651][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.262804][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.275700][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.306049][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.316777][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.328049][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.342448][ T5928] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.351574][ T5928] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.362000][ T5928] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.370956][ T5928] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.388763][ T5914] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   99.399292][ T5914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   99.417743][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.426152][ T5921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.436910][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.446116][ T5921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.456344][ T5921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.472315][ T5921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.483593][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.503814][ T5918] 8021q: adding VLAN 0 to HW filter on device team0
[   99.522504][ T5921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.539926][ T5921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.551009][ T5921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.566934][ T5921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.578431][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.604226][   T70] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.611358][   T70] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.638869][ T5921] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.647727][ T5921] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.656518][ T5921] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.665305][ T5921] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2024/12/01 18:19:03 executed programs: 10
[   99.708715][  T998] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.715840][  T998] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.753526][   T29] kauditd_printk_skb: 20 callbacks suppressed
[   99.753542][   T29] audit: type=1400 audit(1733077143.744:133): avc:  denied  { prog_load } for  pid=5989 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   99.779237][ T5914] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.797714][   T29] audit: type=1400 audit(1733077143.744:134): avc:  denied  { bpf } for  pid=5989 comm="syz.0.15" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   99.803461][ T5918] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   99.823855][   T29] audit: type=1400 audit(1733077143.744:135): avc:  denied  { perfmon } for  pid=5989 comm="syz.0.15" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   99.849099][ T5918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   99.872567][ T5841] Bluetooth: hci1: command tx timeout
[   99.878101][ T5841] Bluetooth: hci0: command tx timeout
[   99.901872][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.923368][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.978985][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.987329][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.024905][   T55] Bluetooth: hci2: command tx timeout
[  100.032369][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.053836][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.145842][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.183255][   T55] Bluetooth: hci4: command tx timeout
[  100.187181][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.193317][ T5914] veth0_vlan: entered promiscuous mode
[  100.206158][ T5914] veth1_vlan: entered promiscuous mode
[  100.232295][ T5914] veth0_macvtap: entered promiscuous mode
[  100.242842][ T5914] veth1_macvtap: entered promiscuous mode
[  100.264124][   T55] Bluetooth: hci3: command tx timeout
[  100.279371][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.311256][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.327324][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.342130][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.372643][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.393604][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.395031][   T29] audit: type=1400 audit(1733077144.394:136): avc:  denied  { read } for  pid=5989 comm="syz.0.15" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  100.416852][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.436264][ T5998] ubi0: attaching mtd0
[  100.441831][ T5998] ubi0: scanning is finished
[  100.448197][ T5998] ubi0: empty MTD device detected
[  100.454251][   T29] audit: type=1400 audit(1733077144.394:137): avc:  denied  { open } for  pid=5989 comm="syz.0.15" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  100.482509][   T29] audit: type=1400 audit(1733077144.434:138): avc:  denied  { ioctl } for  pid=5989 comm="syz.0.15" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 ioctlcmd=0x6f40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  100.532488][ T5918] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.571946][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.595001][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.613743][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.631044][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.650357][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.663924][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.677459][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.753970][ T5914] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.778172][ T5914] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.793293][ T5998] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  100.811638][ T5914] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.837567][ T5914] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.868135][ T5918] veth0_vlan: entered promiscuous mode
[  100.871378][ T6003] ubi0: attaching mtd0
[  100.913634][ T6003] ubi0: scanning is finished
[  100.919831][ T6003] ==================================================================
[  100.927916][ T6003] BUG: KASAN: slab-use-after-free in notifier_chain_register+0x3ac/0x420
[  100.936355][ T6003] Read of size 4 at addr ffff8880323a58d8 by task syz.4.19/6003
[  100.943969][ T6003] 
[  100.946291][ T6003] CPU: 1 UID: 0 PID: 6003 Comm: syz.4.19 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0
[  100.956420][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  100.966465][ T6003] Call Trace:
[  100.969725][ T6003]  
[  100.972640][ T6003]  dump_stack_lvl+0x116/0x1f0
[  100.977323][ T6003]  print_report+0xc3/0x620
[  100.981727][ T6003]  ? __virt_addr_valid+0x5e/0x590
[  100.986753][ T6003]  ? __phys_addr+0xc6/0x150
[  100.991250][ T6003]  kasan_report+0xd9/0x110
[  100.995651][ T6003]  ? notifier_chain_register+0x3ac/0x420
[  101.001270][ T6003]  ? notifier_chain_register+0x3ac/0x420
[  101.006897][ T6003]  notifier_chain_register+0x3ac/0x420
[  101.012354][ T6003]  blocking_notifier_chain_register+0x76/0xd0
[  101.018407][ T6003]  ubi_wl_init+0x1018/0x17b0
[  101.022984][ T6003]  ubi_attach+0x1b92/0x4c00
[  101.027474][ T6003]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  101.033782][ T6003]  ? lockdep_init_map_type+0x16d/0x7d0
[  101.039225][ T6003]  ? __pfx_ubi_attach+0x10/0x10
[  101.044058][ T6003]  ? ubi_attach_mtd_dev+0x1543/0x3590
[  101.049412][ T6003]  ubi_attach_mtd_dev+0x158f/0x3590
[  101.054598][ T6003]  ? __pfx_ubi_attach_mtd_dev+0x10/0x10
[  101.060126][ T6003]  ? __pfx_get_mtd_device+0x10/0x10
[  101.065314][ T6003]  ctrl_cdev_ioctl+0x339/0x3d0
[  101.070062][ T6003]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  101.075330][ T6003]  ? selinux_file_ioctl+0x180/0x270
[  101.080517][ T6003]  ? selinux_file_ioctl+0xb4/0x270
[  101.085618][ T6003]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  101.090893][ T6003]  __x64_sys_ioctl+0x190/0x200
[  101.095654][ T6003]  do_syscall_64+0xcd/0x250
[  101.100143][ T6003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.106024][ T6003] RIP: 0033:0x7f5f79180849
[  101.110420][ T6003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.130008][ T6003] RSP: 002b:00007f5f79f4c058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  101.138417][ T6003] RAX: ffffffffffffffda RBX: 00007f5f79346160 RCX: 00007f5f79180849
[  101.146372][ T6003] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000005
[  101.154328][ T6003] RBP: 00007f5f791f3986 R08: 0000000000000000 R09: 0000000000000000
[  101.162278][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  101.170230][ T6003] R13: 0000000000000000 R14: 00007f5f79346160 R15: 00007ffe575f5bc8
[  101.178188][ T6003]  
[  101.181193][ T6003] 
[  101.183495][ T6003] Allocated by task 5998:
[  101.187798][ T6003]  kasan_save_stack+0x33/0x60
[  101.192470][ T6003]  kasan_save_track+0x14/0x30
[  101.197131][ T6003]  __kasan_kmalloc+0xaa/0xb0
[  101.201702][ T6003]  ubi_attach_mtd_dev+0x3ce/0x3590
[  101.206795][ T6003]  ctrl_cdev_ioctl+0x339/0x3d0
[  101.211540][ T6003]  __x64_sys_ioctl+0x190/0x200
[  101.216303][ T6003]  do_syscall_64+0xcd/0x250
[  101.220811][ T6003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.226719][ T6003] 
[  101.229037][ T6003] Freed by task 5998:
[  101.233028][ T6003]  kasan_save_stack+0x33/0x60
[  101.237727][ T6003]  kasan_save_track+0x14/0x30
[  101.242389][ T6003]  kasan_save_free_info+0x3b/0x60
[  101.247488][ T6003]  __kasan_slab_free+0x51/0x70
[  101.252234][ T6003]  kfree+0x14f/0x4b0
[  101.256112][ T6003]  device_release+0xa1/0x240
[  101.260682][ T6003]  kobject_put+0x1e4/0x5a0
[  101.265083][ T6003]  put_device+0x1f/0x30
[  101.269219][ T6003]  ubi_attach_mtd_dev+0xe25/0x3590
[  101.274313][ T6003]  ctrl_cdev_ioctl+0x339/0x3d0
[  101.279057][ T6003]  __x64_sys_ioctl+0x190/0x200
[  101.283807][ T6003]  do_syscall_64+0xcd/0x250
[  101.288304][ T6003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.294184][ T6003] 
[  101.296486][ T6003] The buggy address belongs to the object at ffff8880323a4000
[  101.296486][ T6003]  which belongs to the cache kmalloc-8k of size 8192
[  101.310515][ T6003] The buggy address is located 6360 bytes inside of
[  101.310515][ T6003]  freed 8192-byte region [ffff8880323a4000, ffff8880323a6000)
[  101.324463][ T6003] 
[  101.326769][ T6003] The buggy address belongs to the physical page:
[  101.333161][ T6003] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x323a0
[  101.341946][ T6003] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  101.350438][ T6003] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  101.358402][ T6003] page_type: f5(slab)
[  101.362366][ T6003] raw: 00fff00000000040 ffff88801b042280 0000000000000000 0000000000000001
[  101.370930][ T6003] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000
[  101.379495][ T6003] head: 00fff00000000040 ffff88801b042280 0000000000000000 0000000000000001
[  101.388148][ T6003] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000
[  101.396799][ T6003] head: 00fff00000000003 ffffea0000c8e801 ffffffffffffffff 0000000000000000
[  101.405453][ T6003] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  101.414099][ T6003] page dumped because: kasan: bad access detected
[  101.420495][ T6003] page_owner tracks the page as allocated
[  101.426184][ T6003] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5833, tgid 5833 (syz-executor), ts 90563145467, free_ts 90514080413
[  101.445447][ T6003]  post_alloc_hook+0x2d1/0x350
[  101.450198][ T6003]  get_page_from_freelist+0xfce/0x2f80
[  101.455638][ T6003]  __alloc_pages_noprof+0x223/0x25b0
[  101.460914][ T6003]  alloc_pages_mpol_noprof+0x2c9/0x610
[  101.466358][ T6003]  new_slab+0x2c9/0x410
[  101.470510][ T6003]  ___slab_alloc+0xdac/0x1870
[  101.475183][ T6003]  __slab_alloc.constprop.0+0x56/0xb0
[  101.480546][ T6003]  __kmalloc_cache_noprof+0xfa/0x410
[  101.485829][ T6003]  audit_log_d_path+0xce/0x1e0
[  101.490587][ T6003]  common_lsm_audit+0x7e7/0x2250
[  101.495522][ T6003]  slow_avc_audit+0x17d/0x210
[  101.500192][ T6003]  avc_has_perm+0x18d/0x1c0
[  101.504693][ T6003]  inode_has_perm+0x168/0x1d0
[  101.509351][ T6003]  selinux_file_open+0x314/0x430
[  101.514276][ T6003]  security_file_open+0xa5/0x1e0
[  101.519214][ T6003]  do_dentry_open+0x57e/0x1ea0
[  101.523994][ T6003] page last free pid 5829 tgid 5829 stack trace:
[  101.530308][ T6003]  free_unref_page+0x661/0x1080
[  101.535167][ T6003]  __put_partials+0x14c/0x170
[  101.539864][ T6003]  qlist_free_all+0x4e/0x120
[  101.544445][ T6003]  kasan_quarantine_reduce+0x195/0x1e0
[  101.549893][ T6003]  __kasan_slab_alloc+0x69/0x90
[  101.554726][ T6003]  kmem_cache_alloc_noprof+0x226/0x3d0
[  101.560167][ T6003]  vm_area_dup+0x21/0x2f0
[  101.564480][ T6003]  __split_vma+0x181/0x1160
[  101.568965][ T6003]  vms_gather_munmap_vmas+0x1c3/0x1730
[  101.574408][ T6003]  do_vmi_align_munmap+0x27f/0x890
[  101.579507][ T6003]  do_vmi_munmap+0x20b/0x3e0
[  101.584163][ T6003]  __vm_munmap+0x14f/0x340
[  101.588557][ T6003]  elf_load+0x4d2/0x880
[  101.592700][ T6003]  load_elf_binary+0x1a5c/0x4ec0
[  101.597635][ T6003]  bprm_execve+0x703/0x19b0
[  101.602118][ T6003]  do_execveat_common.isra.0+0x4f1/0x630
[  101.607731][ T6003] 
[  101.610037][ T6003] Memory state around the buggy address:
[  101.615643][ T6003]  ffff8880323a5780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  101.623691][ T6003]  ffff8880323a5800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  101.631731][ T6003] >ffff8880323a5880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  101.639767][ T6003]                                                     ^
[  101.646675][ T6003]  ffff8880323a5900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  101.654713][ T6003]  ffff8880323a5980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  101.662756][ T6003] ==================================================================
[  101.694052][ T5918] veth1_vlan: entered promiscuous mode
[  101.716599][ T5918] veth0_macvtap: entered promiscuous mode
[  101.725255][ T5918] veth1_macvtap: entered promiscuous mode
[  101.738787][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.749521][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.760391][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.771065][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.786670][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.800133][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.810454][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.821245][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.821353][ T6003] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  101.821366][ T6003] CPU: 1 UID: 0 PID: 6003 Comm: syz.4.19 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0
[  101.821386][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  101.821397][ T6003] Call Trace:
[  101.821403][ T6003]  
[  101.821411][ T6003]  dump_stack_lvl+0x3d/0x1f0
[  101.821439][ T6003]  panic+0x71d/0x800
[  101.821466][ T6003]  ? __pfx_panic+0x10/0x10
[  101.821491][ T6003]  ? irqentry_exit+0x3b/0x90
[  101.821514][ T6003]  ? lockdep_hardirqs_on+0x7c/0x110
[  101.821536][ T6003]  ? preempt_schedule_thunk+0x1a/0x30
[  101.821556][ T6003]  ? preempt_schedule_common+0x44/0xc0
[  101.821578][ T6003]  ? check_panic_on_warn+0x1f/0xb0
[  101.821597][ T6003]  check_panic_on_warn+0xab/0xb0
[  101.821615][ T6003]  end_report+0x117/0x180
[  101.821636][ T6003]  kasan_report+0xe9/0x110
[  101.821658][ T6003]  ? notifier_chain_register+0x3ac/0x420
[  101.821685][ T6003]  ? notifier_chain_register+0x3ac/0x420
[  101.821712][ T6003]  notifier_chain_register+0x3ac/0x420
[  101.821739][ T6003]  blocking_notifier_chain_register+0x76/0xd0
[  101.821766][ T6003]  ubi_wl_init+0x1018/0x17b0
[  101.821789][ T6003]  ubi_attach+0x1b92/0x4c00
[  101.821813][ T6003]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  101.821834][ T6003]  ? lockdep_init_map_type+0x16d/0x7d0
[  101.821857][ T6003]  ? __pfx_ubi_attach+0x10/0x10
[  101.821876][ T6003]  ? ubi_attach_mtd_dev+0x1543/0x3590
[  101.821900][ T6003]  ubi_attach_mtd_dev+0x158f/0x3590
[  101.821933][ T6003]  ? __pfx_ubi_attach_mtd_dev+0x10/0x10
[  101.821954][ T6003]  ? __pfx_get_mtd_device+0x10/0x10
[  101.821982][ T6003]  ctrl_cdev_ioctl+0x339/0x3d0
[  101.822004][ T6003]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  101.822026][ T6003]  ? selinux_file_ioctl+0x180/0x270
[  101.822052][ T6003]  ? selinux_file_ioctl+0xb4/0x270
[  101.822084][ T6003]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  101.822106][ T6003]  __x64_sys_ioctl+0x190/0x200
[  101.822133][ T6003]  do_syscall_64+0xcd/0x250
[  101.822157][ T6003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.822184][ T6003] RIP: 0033:0x7f5f79180849
[  101.822198][ T6003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.822215][ T6003] RSP: 002b:00007f5f79f4c058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  101.822234][ T6003] RAX: ffffffffffffffda RBX: 00007f5f79346160 RCX: 00007f5f79180849
[  101.822247][ T6003] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000005
[  101.822260][ T6003] RBP: 00007f5f791f3986 R08: 0000000000000000 R09: 0000000000000000
[  101.822272][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  101.822283][ T6003] R13: 0000000000000000 R14: 00007f5f79346160 R15: 00007ffe575f5bc8
[  101.822301][ T6003]  
[  101.831213][ T6003] Kernel Offset: disabled