Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts. 2024/04/24 09:58:24 ignoring optional flag "sandboxArg"="0" 2024/04/24 09:58:25 parsed 1 programs [ 1060.422700][ T5148] cgroup: Unknown subsys name 'net' [ 1060.565661][ T5148] cgroup: Unknown subsys name 'rlimit' 2024/04/24 09:58:27 executed programs: 0 [ 1062.369105][ T5148] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 1062.383150][ T5148] syz-executor (5148) used greatest stack depth: 19344 bytes left [ 1062.556499][ T5165] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1062.576322][ T5170] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1062.584560][ T5170] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1062.591418][ T5173] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1062.593247][ T5170] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1062.600566][ T5173] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1062.606765][ T5170] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1062.614594][ T5173] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1062.621524][ T5170] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1062.628194][ T5175] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1062.634608][ T5170] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1062.642500][ T5175] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1062.650051][ T5170] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1062.656187][ T5175] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1062.662748][ T5170] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1062.670384][ T5173] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1062.676268][ T5170] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1062.690424][ T5173] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1062.690533][ T5170] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1062.699134][ T5173] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1062.717305][ T4480] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1062.724671][ T5170] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1062.732857][ T4480] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1062.742989][ T5176] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1062.744237][ T5170] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1062.750357][ T5176] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1062.764880][ T5170] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1062.774033][ T5176] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1062.775567][ T5170] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1062.788875][ T5165] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1063.331727][ T5178] chnl_net:caif_netlink_parms(): no params data found [ 1063.407677][ T5179] chnl_net:caif_netlink_parms(): no params data found [ 1063.601551][ T5177] chnl_net:caif_netlink_parms(): no params data found [ 1063.661119][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.670591][ T5178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.678674][ T5178] bridge_slave_0: entered allmulticast mode [ 1063.690668][ T5178] bridge_slave_0: entered promiscuous mode [ 1063.703775][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.711651][ T5178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.719048][ T5178] bridge_slave_1: entered allmulticast mode [ 1063.726880][ T5178] bridge_slave_1: entered promiscuous mode [ 1063.794308][ T5181] chnl_net:caif_netlink_parms(): no params data found [ 1063.820832][ T5178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.831864][ T5179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.839774][ T5179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.849592][ T5179] bridge_slave_0: entered allmulticast mode [ 1063.856960][ T5179] bridge_slave_0: entered promiscuous mode [ 1063.866091][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.873243][ T5179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.880875][ T5179] bridge_slave_1: entered allmulticast mode [ 1063.888259][ T5179] bridge_slave_1: entered promiscuous mode [ 1063.932414][ T5178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.980603][ T5180] chnl_net:caif_netlink_parms(): no params data found [ 1064.040316][ T5178] team0: Port device team_slave_0 added [ 1064.050123][ T5179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.117899][ T5178] team0: Port device team_slave_1 added [ 1064.127342][ T5179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.249383][ T5181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.257375][ T5181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.264656][ T5181] bridge_slave_0: entered allmulticast mode [ 1064.272657][ T5181] bridge_slave_0: entered promiscuous mode [ 1064.281076][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.288634][ T5177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.296200][ T5177] bridge_slave_0: entered allmulticast mode [ 1064.303235][ T5177] bridge_slave_0: entered promiscuous mode [ 1064.312848][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.320272][ T5177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.328077][ T5177] bridge_slave_1: entered allmulticast mode [ 1064.335325][ T5177] bridge_slave_1: entered promiscuous mode [ 1064.343063][ T5178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1064.350273][ T5178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.376503][ T5178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1064.390889][ T5178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1064.397993][ T5178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.424389][ T5178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1064.440266][ T5179] team0: Port device team_slave_0 added [ 1064.449654][ T5179] team0: Port device team_slave_1 added [ 1064.468628][ T5181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.479021][ T5181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.488727][ T5181] bridge_slave_1: entered allmulticast mode [ 1064.496390][ T5181] bridge_slave_1: entered promiscuous mode [ 1064.589508][ T5181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.603861][ T5177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.618217][ T5177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.641322][ T5179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1064.648513][ T5179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.675388][ T5179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1064.700827][ T5181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.729324][ T5165] Bluetooth: hci0: command tx timeout [ 1064.764315][ T5179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1064.771950][ T5179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.799166][ T5179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1064.810129][ T5165] Bluetooth: hci3: command tx timeout [ 1064.815594][ T5176] Bluetooth: hci2: command tx timeout [ 1064.823482][ T5180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.831441][ T5180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.839237][ T5180] bridge_slave_0: entered allmulticast mode [ 1064.846925][ T5180] bridge_slave_0: entered promiscuous mode [ 1064.855148][ T5180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.862730][ T5180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.870038][ T5180] bridge_slave_1: entered allmulticast mode [ 1064.877570][ T5180] bridge_slave_1: entered promiscuous mode [ 1064.885910][ T5165] Bluetooth: hci1: command tx timeout [ 1064.890096][ T5176] Bluetooth: hci4: command tx timeout [ 1064.907175][ T5181] team0: Port device team_slave_0 added [ 1064.917128][ T5177] team0: Port device team_slave_0 added [ 1064.925877][ T5177] team0: Port device team_slave_1 added [ 1065.036207][ T5178] hsr_slave_0: entered promiscuous mode [ 1065.042934][ T5178] hsr_slave_1: entered promiscuous mode [ 1065.052675][ T5181] team0: Port device team_slave_1 added [ 1065.101956][ T5177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.115293][ T5177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.149016][ T5177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.195070][ T5180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1065.210059][ T5180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1065.266521][ T5181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.273519][ T5181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.300004][ T5181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.312750][ T5177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.321358][ T5177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.348295][ T5177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.374236][ T5179] hsr_slave_0: entered promiscuous mode [ 1065.384230][ T5179] hsr_slave_1: entered promiscuous mode [ 1065.391049][ T5179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1065.399867][ T5179] Cannot create hsr debugfs directory [ 1065.429552][ T5181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.437135][ T5181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.467103][ T5181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.619956][ T5180] team0: Port device team_slave_0 added [ 1065.629884][ T5180] team0: Port device team_slave_1 added [ 1065.661865][ T5177] hsr_slave_0: entered promiscuous mode [ 1065.668736][ T5177] hsr_slave_1: entered promiscuous mode [ 1065.675131][ T5177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1065.683073][ T5177] Cannot create hsr debugfs directory [ 1065.779225][ T5181] hsr_slave_0: entered promiscuous mode [ 1065.788356][ T5181] hsr_slave_1: entered promiscuous mode [ 1065.794914][ T5181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1065.802619][ T5181] Cannot create hsr debugfs directory [ 1065.821585][ T5180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.829126][ T5180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.855212][ T5180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.868016][ T5180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.875493][ T5180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.901483][ T5180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1066.137451][ T5180] hsr_slave_0: entered promiscuous mode [ 1066.143953][ T5180] hsr_slave_1: entered promiscuous mode [ 1066.150734][ T5180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1066.158987][ T5180] Cannot create hsr debugfs directory [ 1066.382811][ T5178] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1066.434762][ T5178] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1066.447308][ T5178] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1066.479594][ T5178] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1066.585115][ T5179] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1066.599051][ T5179] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1066.613074][ T5179] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1066.624267][ T5179] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1066.739065][ T5177] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1066.752033][ T5177] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1066.764846][ T5177] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1066.777195][ T5177] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1066.805538][ T5176] Bluetooth: hci0: command tx timeout [ 1066.885622][ T5176] Bluetooth: hci3: command tx timeout [ 1066.892182][ T5176] Bluetooth: hci2: command tx timeout [ 1066.913614][ T5180] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1066.956062][ T5180] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1066.965748][ T5176] Bluetooth: hci4: command tx timeout [ 1066.968529][ T5180] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1066.977959][ T5176] Bluetooth: hci1: command tx timeout [ 1066.990216][ T5180] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1067.075461][ T5181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1067.085675][ T5181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1067.117399][ T5178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.124313][ T5181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1067.149875][ T5181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1067.241777][ T5178] 8021q: adding VLAN 0 to HW filter on device team0 [ 1067.260097][ T5179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.312114][ T5177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.324858][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.332292][ T5221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.373902][ T5179] 8021q: adding VLAN 0 to HW filter on device team0 [ 1067.390672][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.397973][ T5221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.443738][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.450931][ T5221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.474922][ T5177] 8021q: adding VLAN 0 to HW filter on device team0 [ 1067.524656][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.531868][ T5221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.544241][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.551491][ T5221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.584653][ T5181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.606991][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.614200][ T5221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.714406][ T5181] 8021q: adding VLAN 0 to HW filter on device team0 [ 1067.789564][ T5179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1067.811232][ T5214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.818458][ T5214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.831222][ T5214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.838458][ T5214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.886453][ T5180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.930226][ T5179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.020848][ T5178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.049016][ T5180] 8021q: adding VLAN 0 to HW filter on device team0 [ 1068.072807][ T5177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.127158][ T5214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.134324][ T5214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1068.144344][ T5214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.151570][ T5214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1068.212940][ T5181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.221036][ T5179] veth0_vlan: entered promiscuous mode [ 1068.283499][ T5179] veth1_vlan: entered promiscuous mode [ 1068.308068][ T5178] veth0_vlan: entered promiscuous mode [ 1068.352860][ T5177] veth0_vlan: entered promiscuous mode [ 1068.390688][ T5178] veth1_vlan: entered promiscuous mode [ 1068.403395][ T5177] veth1_vlan: entered promiscuous mode [ 1068.487369][ T5179] veth0_macvtap: entered promiscuous mode [ 1068.538118][ T5177] veth0_macvtap: entered promiscuous mode [ 1068.546599][ T5179] veth1_macvtap: entered promiscuous mode [ 1068.563331][ T5180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.585641][ T5177] veth1_macvtap: entered promiscuous mode [ 1068.592923][ T5181] veth0_vlan: entered promiscuous mode [ 1068.603835][ T5178] veth0_macvtap: entered promiscuous mode [ 1068.623726][ T5178] veth1_macvtap: entered promiscuous mode [ 1068.682152][ T5177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1068.727753][ T5181] veth1_vlan: entered promiscuous mode [ 1068.740958][ T5179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1068.752408][ T5179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.766018][ T5179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1068.778937][ T5177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1068.791816][ T5177] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.802688][ T5177] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.812899][ T5177] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.822385][ T5177] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.833763][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1068.847158][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.857439][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1068.872510][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.884620][ T5178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1068.892844][ T5176] Bluetooth: hci0: command tx timeout [ 1068.911632][ T5179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.923425][ T5179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.935196][ T5179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1068.964457][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.976211][ T5176] Bluetooth: hci2: command tx timeout [ 1068.976219][ T5165] Bluetooth: hci3: command tx timeout [ 1068.984394][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.998306][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1069.009379][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.021329][ T5178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1069.030580][ T5180] veth0_vlan: entered promiscuous mode [ 1069.045832][ T5165] Bluetooth: hci1: command tx timeout [ 1069.045842][ T5176] Bluetooth: hci4: command tx timeout [ 1069.058225][ T5179] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.069471][ T5179] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.083500][ T5179] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.092708][ T5179] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.121730][ T5180] veth1_vlan: entered promiscuous mode [ 1069.137921][ T5178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.147166][ T5178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.156559][ T5178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.165402][ T5178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.355226][ T5181] veth0_macvtap: entered promiscuous mode [ 1069.391757][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.404024][ T5181] veth1_macvtap: entered promiscuous mode [ 1069.404129][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.449731][ T5180] veth0_macvtap: entered promiscuous mode [ 1069.480797][ T5180] veth1_macvtap: entered promiscuous mode [ 1069.497380][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.509824][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.520642][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.532980][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.543235][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.554666][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.570298][ T5181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1069.630448][ T5212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.633494][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.640434][ T5212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.660069][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.670139][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.681501][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.694840][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.706464][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.716511][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.728510][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.740891][ T5180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1069.752418][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1069.753073][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.768825][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.777886][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.781592][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1069.799186][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.813070][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1069.824193][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.837119][ T5181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1069.864079][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1069.873118][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.875007][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.891347][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.894695][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1069.910747][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.920894][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1069.933514][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.943953][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1069.954705][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.971386][ T5180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1069.982676][ T5181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.992415][ T5181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.001582][ T5181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.013673][ T5181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.084714][ T5131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.100916][ T5131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.118007][ T5180] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.130463][ T5180] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.142963][ T5180] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.158154][ T5180] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.225210][ T5212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.242289][ T5212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/04/24 09:58:35 executed programs: 5 [ 1070.472372][ T5131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.503761][ T5131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.612828][ T5130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.629859][ T5130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.660036][ T5117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.685214][ T5117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.869086][ T5224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.899131][ T5224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.966742][ T5165] Bluetooth: hci0: command tx timeout [ 1071.050182][ T5165] Bluetooth: hci3: command tx timeout [ 1071.057953][ T5176] Bluetooth: hci2: command tx timeout [ 1071.128231][ T5176] Bluetooth: hci1: command tx timeout [ 1071.133760][ T5165] Bluetooth: hci4: command tx timeout 2024/04/24 09:58:40 executed programs: 102 2024/04/24 09:58:45 executed programs: 226 2024/04/24 09:58:50 executed programs: 346 2024/04/24 09:58:55 executed programs: 473 2024/04/24 09:59:00 executed programs: 606 2024/04/24 09:59:05 executed programs: 736 2024/04/24 09:59:10 executed programs: 867 2024/04/24 09:59:15 executed programs: 1008 2024/04/24 09:59:20 executed programs: 1152 [ 1116.172633][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.185790][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 2024/04/24 09:59:25 executed programs: 1294 2024/04/24 09:59:30 executed programs: 1436 2024/04/24 09:59:35 executed programs: 1570 2024/04/24 09:59:40 executed programs: 1711 2024/04/24 09:59:45 executed programs: 1850 2024/04/24 09:59:50 executed programs: 1995 2024/04/24 09:59:55 executed programs: 2139 2024/04/24 10:00:00 executed programs: 2281 2024/04/24 10:00:05 executed programs: 2424 2024/04/24 10:00:10 executed programs: 2567 2024/04/24 10:00:15 executed programs: 2710 2024/04/24 10:00:20 executed programs: 2853 [ 1177.620347][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.629446][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 2024/04/24 10:00:25 executed programs: 2995 [ 1184.809334][ T5176] Bluetooth: hci0: command 0x0406 tx timeout 2024/04/24 10:00:30 executed programs: 3137 [ 1189.927529][ T4480] Bluetooth: hci3: command 0x0406 tx timeout [ 1189.934797][ T5170] Bluetooth: hci2: command 0x0406 tx timeout [ 1189.942326][ T5167] Bluetooth: hci4: command 0x0406 tx timeout [ 1189.948877][ T5174] Bluetooth: hci1: command 0x0406 tx timeout 2024/04/24 10:00:35 executed programs: 3269 2024/04/24 10:00:40 executed programs: 3423 2024/04/24 10:00:45 executed programs: 3579 2024/04/24 10:00:50 executed programs: 3731 2024/04/24 10:00:55 executed programs: 3885 2024/04/24 10:01:00 executed programs: 4038 2024/04/24 10:01:05 executed programs: 4192 2024/04/24 10:01:10 executed programs: 4344 2024/04/24 10:01:15 executed programs: 4500 2024/04/24 10:01:20 executed programs: 4668 [ 1239.054974][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.061624][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 2024/04/24 10:01:26 executed programs: 4837 2024/04/24 10:01:31 executed programs: 5006 2024/04/24 10:01:36 executed programs: 5165 2024/04/24 10:01:41 executed programs: 5333 2024/04/24 10:01:46 executed programs: 5501 2024/04/24 10:01:51 executed programs: 5668 2024/04/24 10:01:56 executed programs: 5834 2024/04/24 10:02:01 executed programs: 6002 2024/04/24 10:02:06 executed programs: 6170 2024/04/24 10:02:11 executed programs: 6338 2024/04/24 10:02:16 executed programs: 6507 2024/04/24 10:02:21 executed programs: 6674 [ 1300.493147][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.499606][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 2024/04/24 10:02:26 executed programs: 6844 2024/04/24 10:02:31 executed programs: 7014 2024/04/24 10:02:36 executed programs: 7177 2024/04/24 10:02:41 executed programs: 7338 2024/04/24 10:02:46 executed programs: 7504 2024/04/24 10:02:51 executed programs: 7669 2024/04/24 10:02:56 executed programs: 7836 2024/04/24 10:03:01 executed programs: 8003 2024/04/24 10:03:06 executed programs: 8171 2024/04/24 10:03:11 executed programs: 8337 2024/04/24 10:03:16 executed programs: 8503 2024/04/24 10:03:21 executed programs: 8671 2024/04/24 10:03:26 executed programs: 8841 [ 1361.930703][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.938324][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 2024/04/24 10:03:31 executed programs: 9006 2024/04/24 10:03:36 executed programs: 9176 2024/04/24 10:03:41 executed programs: 9335 2024/04/24 10:03:46 executed programs: 9500 2024/04/24 10:03:51 executed programs: 9670 2024/04/24 10:03:56 executed programs: 9833 2024/04/24 10:04:01 executed programs: 9997 2024/04/24 10:04:06 executed programs: 10164 2024/04/24 10:04:11 executed programs: 10330 2024/04/24 10:04:16 executed programs: 10497 2024/04/24 10:04:21 executed programs: 10664 2024/04/24 10:04:26 executed programs: 10835 [ 1423.368384][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.374770][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 2024/04/24 10:04:31 executed programs: 11002 2024/04/24 10:04:36 executed programs: 11169 2024/04/24 10:04:41 executed programs: 11327 2024/04/24 10:04:46 executed programs: 11491 2024/04/24 10:04:51 executed programs: 11658 2024/04/24 10:04:56 executed programs: 11828 2024/04/24 10:05:01 executed programs: 11996 2024/04/24 10:05:06 executed programs: 12163 2024/04/24 10:05:11 executed programs: 12331 2024/04/24 10:05:16 executed programs: 12498 2024/04/24 10:05:22 executed programs: 12666 2024/04/24 10:05:27 executed programs: 12836 [ 1484.824718][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.831301][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 2024/04/24 10:05:32 executed programs: 13005 2024/04/24 10:05:37 executed programs: 13173 2024/04/24 10:05:42 executed programs: 13330 2024/04/24 10:05:47 executed programs: 13499 2024/04/24 10:05:52 executed programs: 13664 2024/04/24 10:05:57 executed programs: 13832 2024/04/24 10:06:02 executed programs: 14002 2024/04/24 10:06:07 executed programs: 14168 2024/04/24 10:06:12 executed programs: 14338 2024/04/24 10:06:17 executed programs: 14507 2024/04/24 10:06:22 executed programs: 14677 [ 1537.689001][T21390] ================================================================== [ 1537.697129][T21390] BUG: KASAN: slab-use-after-free in hugetlb_fault+0x21ae/0x2f60 [ 1537.704980][T21390] Read of size 8 at addr ffff88801a6a4620 by task syz-executor.1/21390 [ 1537.713288][T21390] [ 1537.715639][T21390] CPU: 1 PID: 21390 Comm: syz-executor.1 Not tainted 6.9.0-rc5-syzkaller-00036-g9d1ddab261f3 #0 [ 1537.726082][T21390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 1537.736178][T21390] Call Trace: [ 1537.739492][T21390] [ 1537.742458][T21390] dump_stack_lvl+0x241/0x360 [ 1537.747292][T21390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1537.752541][T21390] ? __pfx__printk+0x10/0x10 [ 1537.757230][T21390] ? _printk+0xd5/0x120 [ 1537.761432][T21390] ? __virt_addr_valid+0x183/0x520 [ 1537.766631][T21390] ? __virt_addr_valid+0x183/0x520 [ 1537.771808][T21390] print_report+0x169/0x550 [ 1537.776384][T21390] ? __virt_addr_valid+0x183/0x520 [ 1537.781555][T21390] ? __virt_addr_valid+0x183/0x520 [ 1537.786715][T21390] ? __virt_addr_valid+0x44e/0x520 [ 1537.791880][T21390] ? __phys_addr+0xba/0x170 [ 1537.796470][T21390] ? hugetlb_fault+0x21ae/0x2f60 [ 1537.801446][T21390] kasan_report+0x143/0x180 [ 1537.806004][T21390] ? hugetlb_fault+0x21ae/0x2f60 [ 1537.810986][T21390] hugetlb_fault+0x21ae/0x2f60 [ 1537.815803][T21390] ? __pfx_hugetlb_fault+0x10/0x10 [ 1537.820963][T21390] ? mtree_range_walk+0x6fd/0x8e0 [ 1537.826081][T21390] ? lock_vma_under_rcu+0x18a/0x730 [ 1537.831325][T21390] ? __pfx_lock_release+0x10/0x10 [ 1537.836413][T21390] ? lock_vma_under_rcu+0x2f9/0x730 [ 1537.841666][T21390] ? lock_vma_under_rcu+0x18a/0x730 [ 1537.846947][T21390] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1537.852541][T21390] handle_mm_fault+0x711/0x8a0 [ 1537.857353][T21390] exc_page_fault+0x446/0x8e0 [ 1537.862135][T21390] asm_exc_page_fault+0x26/0x30 [ 1537.867112][T21390] RIP: 0033:0x7f2897237b31 [ 1537.871558][T21390] Code: 01 64 48 8b 04 25 00 00 00 00 48 8d b8 e0 fe ff ff e8 23 96 00 00 85 c0 75 17 48 8b 84 24 18 01 00 00 48 8b b4 24 30 01 00 00 <48> 89 b0 00 00 00 20 64 f0 83 2c 25 a8 ff ff ff 01 eb 56 48 8d ac [ 1537.891199][T21390] RSP: 002b:00007f28974cfae0 EFLAGS: 00010246 [ 1537.897305][T21390] RAX: 0000000000000240 RBX: 0000000000000001 RCX: fffffffffffffeff [ 1537.905322][T21390] RDX: ebd2bce8fbec6c78 RSI: 0000000020000100 RDI: 000055558aa4d360 [ 1537.913332][T21390] RBP: 00007f28973ac050 R08: 00007f2897200000 R09: 0000000000000004 [ 1537.921341][T21390] R10: 0000000000000000 R11: 0000000000000001 R12: 00007f28974cfc90 [ 1537.929344][T21390] R13: 0000000000000001 R14: ffffffffffffffff R15: 00007f2897234cb0 [ 1537.937357][T21390] [ 1537.940391][T21390] [ 1537.942725][T21390] Allocated by task 21395: [ 1537.947148][T21390] kasan_save_track+0x3f/0x80 [ 1537.951857][T21390] __kasan_slab_alloc+0x66/0x80 [ 1537.956712][T21390] kmem_cache_alloc+0x174/0x340 [ 1537.961560][T21390] vm_area_alloc+0x24/0x1d0 [ 1537.966059][T21390] mmap_region+0xd64/0x1e50 [ 1537.970556][T21390] do_mmap+0x7af/0xe60 [ 1537.974618][T21390] vm_mmap_pgoff+0x1e3/0x420 [ 1537.979233][T21390] ksys_mmap_pgoff+0x53c/0x6e0 [ 1537.983993][T21390] do_syscall_64+0xf5/0x240 [ 1537.988514][T21390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.994436][T21390] [ 1537.996756][T21390] Freed by task 23: [ 1538.000551][T21390] kasan_save_track+0x3f/0x80 [ 1538.005235][T21390] kasan_save_free_info+0x40/0x50 [ 1538.010258][T21390] poison_slab_object+0xa6/0xe0 [ 1538.015212][T21390] __kasan_slab_free+0x37/0x60 [ 1538.019976][T21390] kmem_cache_free+0x10b/0x2c0 [ 1538.024762][T21390] rcu_core+0xafd/0x1830 [ 1538.029094][T21390] __do_softirq+0x2c6/0x980 [ 1538.033644][T21390] [ 1538.035979][T21390] Last potentially related work creation: [ 1538.041689][T21390] kasan_save_stack+0x3f/0x60 [ 1538.046371][T21390] __kasan_record_aux_stack+0xac/0xc0 [ 1538.051741][T21390] call_rcu+0x167/0xa70 [ 1538.055893][T21390] do_vmi_align_munmap+0x15a7/0x1930 [ 1538.061179][T21390] do_vmi_munmap+0x24e/0x2d0 [ 1538.065766][T21390] mmap_region+0x6af/0x1e50 [ 1538.070268][T21390] do_mmap+0x7af/0xe60 [ 1538.074329][T21390] vm_mmap_pgoff+0x1e3/0x420 [ 1538.078922][T21390] ksys_mmap_pgoff+0x53c/0x6e0 [ 1538.083698][T21390] do_syscall_64+0xf5/0x240 [ 1538.088206][T21390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1538.094196][T21390] [ 1538.096533][T21390] The buggy address belongs to the object at ffff88801a6a4600 [ 1538.096533][T21390] which belongs to the cache vm_area_struct of size 192 [ 1538.110886][T21390] The buggy address is located 32 bytes inside of [ 1538.110886][T21390] freed 192-byte region [ffff88801a6a4600, ffff88801a6a46c0) [ 1538.124608][T21390] [ 1538.126931][T21390] The buggy address belongs to the physical page: [ 1538.133350][T21390] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1a6a4 [ 1538.142100][T21390] memcg:ffff88807b3ddc01 [ 1538.146347][T21390] anon flags: 0xfff80000000800(slab|node=0|zone=1|lastcpupid=0xfff) [ 1538.154350][T21390] page_type: 0xffffffff() [ 1538.158686][T21390] raw: 00fff80000000800 ffff888015eeab40 0000000000000000 dead000000000001 [ 1538.167266][T21390] raw: 0000000000000000 0000000000100010 00000001ffffffff ffff88807b3ddc01 [ 1538.175840][T21390] page dumped because: kasan: bad access detected [ 1538.182274][T21390] page_owner tracks the page as allocated [ 1538.187993][T21390] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5177, tgid -1771900602 (syz-executor.1), ts 5177, free_ts 1179257768594 [ 1538.206596][T21390] post_alloc_hook+0x1ea/0x210 [ 1538.211394][T21390] get_page_from_freelist+0x3410/0x35b0 [ 1538.216943][T21390] __alloc_pages+0x256/0x6c0 [ 1538.221530][T21390] alloc_slab_page+0x5f/0x160 [ 1538.226214][T21390] new_slab+0x84/0x2f0 [ 1538.230280][T21390] ___slab_alloc+0xc73/0x1260 [ 1538.234968][T21390] kmem_cache_alloc+0x252/0x340 [ 1538.239834][T21390] vm_area_dup+0x27/0x290 [ 1538.244179][T21390] copy_mm+0xd7f/0x2180 [ 1538.248355][T21390] copy_process+0x187a/0x3df0 [ 1538.253057][T21390] kernel_clone+0x226/0x8f0 [ 1538.257582][T21390] __x64_sys_clone+0x258/0x2a0 [ 1538.262349][T21390] do_syscall_64+0xf5/0x240 [ 1538.266862][T21390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1538.272759][T21390] page last free pid 15421 tgid 15413 stack trace: [ 1538.279254][T21390] free_unref_page_prepare+0x986/0xab0 [ 1538.284713][T21390] free_unref_folios+0x185/0xb30 [ 1538.289647][T21390] folios_put_refs+0x8eb/0xa10 [ 1538.294418][T21390] free_pages_and_swap_cache+0x5c8/0x690 [ 1538.300078][T21390] tlb_flush_mmu+0x3a3/0x680 [ 1538.304704][T21390] tlb_finish_mmu+0xd4/0x200 [ 1538.309305][T21390] exit_mmap+0x4bb/0xd60 [ 1538.313587][T21390] __mmput+0x115/0x3c0 [ 1538.317671][T21390] exit_mm+0x220/0x310 [ 1538.321753][T21390] do_exit+0x99e/0x27e0 [ 1538.325932][T21390] do_group_exit+0x207/0x2c0 [ 1538.330525][T21390] get_signal+0x16a1/0x1740 [ 1538.335024][T21390] arch_do_signal_or_restart+0x96/0x860 [ 1538.340620][T21390] syscall_exit_to_user_mode+0xc9/0x370 [ 1538.346197][T21390] do_syscall_64+0x102/0x240 [ 1538.350813][T21390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1538.356714][T21390] [ 1538.359033][T21390] Memory state around the buggy address: [ 1538.364653][T21390] ffff88801a6a4500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1538.372722][T21390] ffff88801a6a4580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1538.380790][T21390] >ffff88801a6a4600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1538.388840][T21390] ^ [ 1538.393938][T21390] ffff88801a6a4680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1538.402009][T21390] ffff88801a6a4700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1538.410083][T21390] ================================================================== [ 1538.433015][T21390] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1538.440255][T21390] CPU: 1 PID: 21390 Comm: syz-executor.1 Not tainted 6.9.0-rc5-syzkaller-00036-g9d1ddab261f3 #0 [ 1538.450699][T21390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 1538.460782][T21390] Call Trace: [ 1538.464080][T21390] [ 1538.467009][T21390] dump_stack_lvl+0x241/0x360 [ 1538.471697][T21390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1538.476898][T21390] ? __pfx__printk+0x10/0x10 [ 1538.481501][T21390] ? preempt_schedule+0xe1/0xf0 [ 1538.486429][T21390] ? vscnprintf+0x5d/0x90 [ 1538.490812][T21390] panic+0x349/0x860 [ 1538.494737][T21390] ? check_panic_on_warn+0x21/0xb0 [ 1538.499870][T21390] ? __pfx_panic+0x10/0x10 [ 1538.504306][T21390] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 1538.510343][T21390] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1538.516693][T21390] ? print_report+0x502/0x550 [ 1538.521387][T21390] check_panic_on_warn+0x86/0xb0 [ 1538.526342][T21390] ? hugetlb_fault+0x21ae/0x2f60 [ 1538.531288][T21390] end_report+0x77/0x160 [ 1538.535540][T21390] kasan_report+0x154/0x180 [ 1538.540067][T21390] ? hugetlb_fault+0x21ae/0x2f60 [ 1538.545021][T21390] hugetlb_fault+0x21ae/0x2f60 [ 1538.549822][T21390] ? __pfx_hugetlb_fault+0x10/0x10 [ 1538.554949][T21390] ? mtree_range_walk+0x6fd/0x8e0 [ 1538.559988][T21390] ? lock_vma_under_rcu+0x18a/0x730 [ 1538.565204][T21390] ? __pfx_lock_release+0x10/0x10 [ 1538.570244][T21390] ? lock_vma_under_rcu+0x2f9/0x730 [ 1538.575478][T21390] ? lock_vma_under_rcu+0x18a/0x730 [ 1538.580688][T21390] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1538.586248][T21390] handle_mm_fault+0x711/0x8a0 [ 1538.591034][T21390] exc_page_fault+0x446/0x8e0 [ 1538.595729][T21390] asm_exc_page_fault+0x26/0x30 [ 1538.600618][T21390] RIP: 0033:0x7f2897237b31 [ 1538.605052][T21390] Code: 01 64 48 8b 04 25 00 00 00 00 48 8d b8 e0 fe ff ff e8 23 96 00 00 85 c0 75 17 48 8b 84 24 18 01 00 00 48 8b b4 24 30 01 00 00 <48> 89 b0 00 00 00 20 64 f0 83 2c 25 a8 ff ff ff 01 eb 56 48 8d ac [ 1538.624687][T21390] RSP: 002b:00007f28974cfae0 EFLAGS: 00010246 [ 1538.630788][T21390] RAX: 0000000000000240 RBX: 0000000000000001 RCX: fffffffffffffeff [ 1538.638783][T21390] RDX: ebd2bce8fbec6c78 RSI: 0000000020000100 RDI: 000055558aa4d360 [ 1538.646761][T21390] RBP: 00007f28973ac050 R08: 00007f2897200000 R09: 0000000000000004 [ 1538.654734][T21390] R10: 0000000000000000 R11: 0000000000000001 R12: 00007f28974cfc90 [ 1538.662710][T21390] R13: 0000000000000001 R14: ffffffffffffffff R15: 00007f2897234cb0 [ 1538.670696][T21390] [ 1538.673805][T21390] Kernel Offset: disabled [ 1538.678129][T21390] Rebooting in 86400 seconds..