Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts. 2023/09/13 09:28:55 ignoring optional flag "sandboxArg"="0" 2023/09/13 09:28:55 parsed 1 programs [ 50.082327][ T5028] cgroup: Unknown subsys name 'net' [ 50.209137][ T5028] cgroup: Unknown subsys name 'rlimit' 2023/09/13 09:28:56 executed programs: 0 [ 51.290318][ T5028] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.301610][ T5023] syz-execprog[5023]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 51.408766][ T5046] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.418176][ T5050] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.426067][ T5050] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.433572][ T5050] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.441630][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.451830][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.459123][ T5050] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.466580][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 51.473785][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.483477][ T5050] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.491036][ T5050] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.499483][ T5050] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.499851][ T5056] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.509725][ T5050] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.513972][ T5056] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 51.522522][ T5050] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 51.527796][ T5056] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.541806][ T5050] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.542221][ T5056] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.556960][ T5056] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.564945][ T5058] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 51.572151][ T5058] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.593267][ T5058] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 51.600556][ T5058] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 51.608005][ T5058] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 51.612117][ T5050] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 51.615663][ T5058] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 51.627895][ T5050] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 51.629617][ T5058] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 51.636406][ T5050] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 51.642938][ T5058] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 51.650088][ T5050] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 51.663698][ T5050] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 51.956983][ T5051] chnl_net:caif_netlink_parms(): no params data found [ 52.096228][ T5061] chnl_net:caif_netlink_parms(): no params data found [ 52.113882][ T5054] chnl_net:caif_netlink_parms(): no params data found [ 52.247776][ T5051] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.254979][ T5051] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.262140][ T5051] bridge_slave_0: entered allmulticast mode [ 52.268987][ T5051] bridge_slave_0: entered promiscuous mode [ 52.277305][ T5051] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.284521][ T5051] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.291728][ T5051] bridge_slave_1: entered allmulticast mode [ 52.298575][ T5051] bridge_slave_1: entered promiscuous mode [ 52.315201][ T5042] chnl_net:caif_netlink_parms(): no params data found [ 52.340423][ T5047] chnl_net:caif_netlink_parms(): no params data found [ 52.376528][ T5061] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.383656][ T5061] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.391003][ T5061] bridge_slave_0: entered allmulticast mode [ 52.397631][ T5061] bridge_slave_0: entered promiscuous mode [ 52.427909][ T5051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.440738][ T5051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.459467][ T5061] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.466811][ T5061] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.473910][ T5061] bridge_slave_1: entered allmulticast mode [ 52.480734][ T5061] bridge_slave_1: entered promiscuous mode [ 52.501066][ T5054] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.508210][ T5054] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.515745][ T5054] bridge_slave_0: entered allmulticast mode [ 52.522253][ T5054] bridge_slave_0: entered promiscuous mode [ 52.569361][ T5061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.582672][ T5061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.592524][ T5054] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.600371][ T5054] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.608058][ T5054] bridge_slave_1: entered allmulticast mode [ 52.615413][ T5054] bridge_slave_1: entered promiscuous mode [ 52.622605][ T5051] team0: Port device team_slave_0 added [ 52.633558][ T5051] team0: Port device team_slave_1 added [ 52.649469][ T5053] chnl_net:caif_netlink_parms(): no params data found [ 52.718759][ T5051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.725848][ T5051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.752250][ T5051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.764914][ T5061] team0: Port device team_slave_0 added [ 52.772464][ T5054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.781891][ T5042] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.789081][ T5042] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.796357][ T5042] bridge_slave_0: entered allmulticast mode [ 52.803016][ T5042] bridge_slave_0: entered promiscuous mode [ 52.834260][ T5051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.841258][ T5051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.867790][ T5051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.882222][ T5061] team0: Port device team_slave_1 added [ 52.897633][ T5054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.907045][ T5042] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.914113][ T5042] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.921643][ T5042] bridge_slave_1: entered allmulticast mode [ 52.928420][ T5042] bridge_slave_1: entered promiscuous mode [ 52.940550][ T5047] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.947980][ T5047] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.955235][ T5047] bridge_slave_0: entered allmulticast mode [ 52.961718][ T5047] bridge_slave_0: entered promiscuous mode [ 52.969321][ T5047] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.976616][ T5047] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.983737][ T5047] bridge_slave_1: entered allmulticast mode [ 52.990513][ T5047] bridge_slave_1: entered promiscuous mode [ 53.024666][ T5042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.053637][ T5061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.060663][ T5061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.088242][ T5061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.108461][ T5054] team0: Port device team_slave_0 added [ 53.116119][ T5042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.139472][ T5047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.170078][ T5053] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.177344][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.184545][ T5053] bridge_slave_0: entered allmulticast mode [ 53.191238][ T5053] bridge_slave_0: entered promiscuous mode [ 53.198243][ T5061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.205295][ T5061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.231468][ T5061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.245961][ T5054] team0: Port device team_slave_1 added [ 53.261724][ T5042] team0: Port device team_slave_0 added [ 53.269222][ T5047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.280822][ T5051] hsr_slave_0: entered promiscuous mode [ 53.287088][ T5051] hsr_slave_1: entered promiscuous mode [ 53.293318][ T5053] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.301659][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.308924][ T5053] bridge_slave_1: entered allmulticast mode [ 53.316671][ T5053] bridge_slave_1: entered promiscuous mode [ 53.338560][ T5042] team0: Port device team_slave_1 added [ 53.383334][ T5054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.390517][ T5054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.416747][ T5054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.449199][ T5047] team0: Port device team_slave_0 added [ 53.457088][ T5053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.474073][ T5054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.481168][ T5054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.486734][ T5050] Bluetooth: hci0: command 0x0409 tx timeout [ 53.507115][ T5054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.512316][ T5042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.530844][ T5042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.556795][ T5042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.564378][ T5050] Bluetooth: hci2: command 0x0409 tx timeout [ 53.574287][ T5042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.581251][ T5042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.607356][ T5042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.619365][ T5047] team0: Port device team_slave_1 added [ 53.627640][ T5053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.644441][ T5050] Bluetooth: hci3: command 0x0409 tx timeout [ 53.644471][ T5058] Bluetooth: hci1: command 0x0409 tx timeout [ 53.658891][ T5061] hsr_slave_0: entered promiscuous mode [ 53.666195][ T5061] hsr_slave_1: entered promiscuous mode [ 53.672068][ T5061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.679709][ T5061] Cannot create hsr debugfs directory [ 53.724406][ T5058] Bluetooth: hci4: command 0x0409 tx timeout [ 53.730439][ T5058] Bluetooth: hci5: command 0x0409 tx timeout [ 53.767125][ T5054] hsr_slave_0: entered promiscuous mode [ 53.773333][ T5054] hsr_slave_1: entered promiscuous mode [ 53.779732][ T5054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.787510][ T5054] Cannot create hsr debugfs directory [ 53.795901][ T5047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.802831][ T5047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.829362][ T5047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.841603][ T5053] team0: Port device team_slave_0 added [ 53.851446][ T5053] team0: Port device team_slave_1 added [ 53.880754][ T5047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.888196][ T5047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.914233][ T5047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.944642][ T5042] hsr_slave_0: entered promiscuous mode [ 53.950868][ T5042] hsr_slave_1: entered promiscuous mode [ 53.957201][ T5042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.965884][ T5042] Cannot create hsr debugfs directory [ 53.996525][ T5053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.003489][ T5053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.029457][ T5053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.071106][ T5053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.078148][ T5053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.104629][ T5053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.154129][ T5047] hsr_slave_0: entered promiscuous mode [ 54.160414][ T5047] hsr_slave_1: entered promiscuous mode [ 54.166578][ T5047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.174123][ T5047] Cannot create hsr debugfs directory [ 54.290321][ T5053] hsr_slave_0: entered promiscuous mode [ 54.296524][ T5053] hsr_slave_1: entered promiscuous mode [ 54.302472][ T5053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.310324][ T5053] Cannot create hsr debugfs directory [ 54.407155][ T5051] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.456848][ T5051] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.481012][ T5051] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.500752][ T5051] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.595279][ T5061] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.607775][ T5061] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.618237][ T5061] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.627446][ T5061] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.700461][ T5042] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.711078][ T5051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.721983][ T5042] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.732182][ T5042] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.749572][ T5042] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.778555][ T5051] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.812655][ T5054] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.823614][ T5066] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.830771][ T5066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.849995][ T5054] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.859126][ T5054] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.871795][ T5054] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.917897][ T5066] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.925027][ T5066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.938341][ T5047] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 54.948831][ T5047] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 54.962949][ T5047] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 54.995990][ T5047] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 55.026552][ T5061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.083305][ T5051] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.096873][ T5051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.119031][ T5053] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.140869][ T5042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.157647][ T5053] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.169161][ T5053] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.182216][ T5053] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.203377][ T5061] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.266970][ T5066] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.274079][ T5066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.302545][ T5042] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.330071][ T5047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.339701][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.346813][ T5104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.359529][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.366619][ T5104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.393452][ T5051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.420958][ T5047] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.433662][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.440870][ T5104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.513678][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.521221][ T5103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.531981][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.539156][ T5103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.567499][ T5058] Bluetooth: hci0: command 0x041b tx timeout [ 55.597059][ T5042] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.617143][ T5042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.645295][ T5058] Bluetooth: hci2: command 0x041b tx timeout [ 55.651937][ T5054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.677299][ T5053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.688172][ T5054] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.704092][ T5047] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.716333][ T5047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.727153][ T5058] Bluetooth: hci3: command 0x041b tx timeout [ 55.735441][ T5058] Bluetooth: hci1: command 0x041b tx timeout [ 55.783771][ T5053] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.806521][ T5058] Bluetooth: hci5: command 0x041b tx timeout [ 55.806976][ T5050] Bluetooth: hci4: command 0x041b tx timeout [ 55.849527][ T5051] veth0_vlan: entered promiscuous mode [ 55.879119][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.886327][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.896619][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.903764][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.958127][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.965313][ T5104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.989949][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.997158][ T5104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.019795][ T5051] veth1_vlan: entered promiscuous mode [ 56.080289][ T5042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.091836][ T5047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.111364][ T5061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.248572][ T5051] veth0_macvtap: entered promiscuous mode [ 56.262937][ T5051] veth1_macvtap: entered promiscuous mode [ 56.279059][ T5042] veth0_vlan: entered promiscuous mode [ 56.295302][ T5042] veth1_vlan: entered promiscuous mode [ 56.317617][ T5061] veth0_vlan: entered promiscuous mode [ 56.349791][ T5061] veth1_vlan: entered promiscuous mode [ 56.390304][ T5051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.402512][ T5051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.419656][ T5051] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.431323][ T5051] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.441289][ T5051] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.452942][ T5051] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.511994][ T5054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.523670][ T5061] veth0_macvtap: entered promiscuous mode [ 56.543548][ T5042] veth0_macvtap: entered promiscuous mode [ 56.552838][ T5042] veth1_macvtap: entered promiscuous mode [ 56.562899][ T5061] veth1_macvtap: entered promiscuous mode [ 56.575540][ T5053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.597103][ T5042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.609785][ T5042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.620560][ T5042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.668000][ T5042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.678957][ T5042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.692846][ T5042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.731455][ T5053] veth0_vlan: entered promiscuous mode [ 56.748857][ T5042] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.757789][ T5042] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.768360][ T5042] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.778204][ T5042] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.790105][ T5061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.801125][ T5061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.811240][ T5061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.823004][ T5061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.833762][ T5061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.847829][ T5054] veth0_vlan: entered promiscuous mode [ 56.858627][ T5107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.866213][ T5047] veth0_vlan: entered promiscuous mode [ 56.871980][ T5107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.883949][ T5061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.895332][ T5061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.905653][ T5061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.916806][ T5061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.929560][ T5061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.957692][ T5053] veth1_vlan: entered promiscuous mode [ 56.980092][ T5047] veth1_vlan: entered promiscuous mode [ 56.987405][ T5054] veth1_vlan: entered promiscuous mode [ 56.995189][ T5061] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.003919][ T5061] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.017020][ T5061] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.026854][ T5061] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.068266][ T5104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.085273][ T5104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.107657][ T5053] veth0_macvtap: entered promiscuous mode [ 57.130480][ T5066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.144969][ T5066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.150694][ T5053] veth1_macvtap: entered promiscuous mode 2023/09/13 09:29:02 executed programs: 6 [ 57.240240][ T5054] veth0_macvtap: entered promiscuous mode [ 57.254999][ T5053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.268810][ T5053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.279029][ T5053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.289514][ T5053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.299872][ T5053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.310623][ T5053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.327781][ T5053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.355364][ T5105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.393633][ T5054] veth1_macvtap: entered promiscuous mode [ 57.400811][ T5105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.436361][ T5053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.448555][ T5104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.458689][ T5104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.467385][ T5053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.479596][ T5053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.499855][ T5053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.510902][ T5053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.522185][ T5053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.538960][ T5053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.590523][ T5047] veth0_macvtap: entered promiscuous mode [ 57.641295][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.653907][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.664934][ T5050] Bluetooth: hci0: command 0x040f tx timeout [ 57.672713][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.683476][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.694750][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.705735][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.717007][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.734501][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.737786][ T5050] Bluetooth: hci2: command 0x040f tx timeout [ 57.748987][ T5054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.767868][ T5047] veth1_macvtap: entered promiscuous mode [ 57.781390][ T5053] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.790828][ T5053] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.800453][ T5053] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.810164][ T5053] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.814490][ T5050] Bluetooth: hci1: command 0x040f tx timeout [ 57.826042][ T5058] Bluetooth: hci3: command 0x040f tx timeout [ 57.838296][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.848877][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.861349][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.872071][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.882578][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.893251][ T5050] Bluetooth: hci4: command 0x040f tx timeout [ 57.894552][ T5050] Bluetooth: hci5: command 0x040f tx timeout [ 57.900217][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.915905][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.926691][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.937576][ T5054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.946411][ T5106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.963911][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.975341][ T5106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.979063][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.994714][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.006083][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.016296][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.026865][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.036935][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.048390][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.058908][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.069525][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.081975][ T5047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.137994][ T5054] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.150123][ T5054] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.162840][ T5054] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.172403][ T5054] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.206840][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.218208][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.228601][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.240221][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.250431][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.261123][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.271168][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.281919][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.293059][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.303656][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.317647][ T5047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.341747][ T5047] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.350622][ T5047] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.359497][ T5047] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.369314][ T5047] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.394974][ T5104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.403156][ T5104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.452598][ T5066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.466242][ T5066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.525256][ T5105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.533097][ T5105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.545732][ T5104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.558190][ T5104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.599687][ T5104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.621122][ T5104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.653815][ T5113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.667692][ T5113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.724439][ T5050] Bluetooth: hci0: command 0x0419 tx timeout [ 59.805268][ T5050] Bluetooth: hci2: command 0x0419 tx timeout [ 59.884773][ T5050] Bluetooth: hci1: command 0x0419 tx timeout [ 59.890823][ T5050] Bluetooth: hci3: command 0x0419 tx timeout [ 59.964483][ T5058] Bluetooth: hci4: command 0x0419 tx timeout [ 59.970604][ T5050] Bluetooth: hci5: command 0x0419 tx timeout 2023/09/13 09:29:07 executed programs: 215 2023/09/13 09:29:12 executed programs: 528 [ 71.492435][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.508923][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 2023/09/13 09:29:17 executed programs: 832 [ 76.606811][ T27] cfg80211: failed to load regulatory.db 2023/09/13 09:29:22 executed programs: 1144 2023/09/13 09:29:27 executed programs: 1459 2023/09/13 09:29:32 executed programs: 1764 2023/09/13 09:29:37 executed programs: 2071 2023/09/13 09:29:42 executed programs: 2382 2023/09/13 09:29:47 executed programs: 2688 2023/09/13 09:29:52 executed programs: 3002 [ 111.905705][T22255] ================================================================== [ 111.913827][T22255] BUG: KASAN: slab-use-after-free in __list_add_valid_or_report+0x4c/0xf0 [ 111.922356][T22255] Read of size 8 at addr ffff888068af6008 by task syz-executor.0/22255 [ 111.930605][T22255] [ 111.932920][T22255] CPU: 1 PID: 22255 Comm: syz-executor.0 Not tainted 6.6.0-rc1-syzkaller-00033-g3669558bdf35 #0 [ 111.943323][T22255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 111.953376][T22255] Call Trace: [ 111.956646][T22255] [ 111.959568][T22255] dump_stack_lvl+0x1e7/0x2d0 [ 111.964242][T22255] ? irq_work_queue+0xca/0x150 [ 111.968997][T22255] ? nf_tcp_handle_invalid+0x650/0x650 [ 111.974448][T22255] ? panic+0x770/0x770 [ 111.978503][T22255] ? _printk+0xd5/0x120 [ 111.982648][T22255] print_report+0x163/0x540 [ 111.987139][T22255] ? print_irqtrace_events+0x220/0x220 [ 111.992586][T22255] ? __virt_addr_valid+0x22f/0x2e0 [ 111.997687][T22255] ? __phys_addr+0xba/0x170 [ 112.002177][T22255] ? __list_add_valid_or_report+0x4c/0xf0 [ 112.007881][T22255] kasan_report+0x175/0x1b0 [ 112.012368][T22255] ? __list_add_valid_or_report+0x4c/0xf0 [ 112.018080][T22255] __list_add_valid_or_report+0x4c/0xf0 [ 112.023613][T22255] nfc_llcp_register_device+0x6cf/0x800 [ 112.029152][T22255] nfc_register_device+0x71/0x320 [ 112.034210][T22255] nci_register_device+0x7c2/0x900 [ 112.039309][T22255] ? nci_free_device+0x50/0x50 [ 112.044151][T22255] ? __init_waitqueue_head+0xae/0x150 [ 112.049711][T22255] virtual_ncidev_open+0x13c/0x1b0 [ 112.054828][T22255] ? virtual_ncidev_ioctl+0xc0/0xc0 [ 112.060048][T22255] misc_open+0x30b/0x380 [ 112.064304][T22255] chrdev_open+0x551/0x630 [ 112.068723][T22255] ? cd_forget+0x160/0x160 [ 112.073129][T22255] ? do_raw_spin_unlock+0x13b/0x8b0 [ 112.078317][T22255] ? fsnotify_perm+0x45f/0x5a0 [ 112.083092][T22255] ? cd_forget+0x160/0x160 [ 112.087533][T22255] do_dentry_open+0x80f/0x1430 [ 112.092304][T22255] path_openat+0x27bb/0x3180 [ 112.096894][T22255] ? kasan_set_track+0x4f/0x70 [ 112.101648][T22255] ? getname_flags+0xbc/0x4e0 [ 112.106318][T22255] ? do_sys_openat2+0xd2/0x1d0 [ 112.111072][T22255] ? do_filp_open+0x490/0x490 [ 112.115742][T22255] ? rcu_is_watching+0x15/0xb0 [ 112.120501][T22255] do_filp_open+0x234/0x490 [ 112.124993][T22255] ? vfs_tmpfile+0x4b0/0x4b0 [ 112.129578][T22255] ? _raw_spin_unlock+0x28/0x40 [ 112.134416][T22255] ? alloc_fd+0x59c/0x640 [ 112.138742][T22255] do_sys_openat2+0x13e/0x1d0 [ 112.143406][T22255] ? do_sys_open+0x230/0x230 [ 112.147987][T22255] ? __might_fault+0xba/0x120 [ 112.152662][T22255] __x64_sys_openat+0x247/0x290 [ 112.157501][T22255] ? __ia32_sys_open+0x270/0x270 [ 112.162429][T22255] ? rcu_is_watching+0x15/0xb0 [ 112.167193][T22255] ? syscall_enter_from_user_mode+0x32/0x230 [ 112.173195][T22255] do_syscall_64+0x41/0xc0 [ 112.177606][T22255] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 112.183491][T22255] RIP: 0033:0x7f901127cae9 [ 112.187890][T22255] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 112.207481][T22255] RSP: 002b:00007f90120af0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 112.215890][T22255] RAX: ffffffffffffffda RBX: 00007f901139bf80 RCX: 00007f901127cae9 [ 112.223849][T22255] RDX: 0000000000000002 RSI: 0000000020001a40 RDI: ffffffffffffff9c [ 112.231806][T22255] RBP: 00007f90112c847a R08: 0000000000000000 R09: 0000000000000000 [ 112.239769][T22255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.247728][T22255] R13: 000000000000000b R14: 00007f901139bf80 R15: 00007fff031ab168 [ 112.255694][T22255] [ 112.258698][T22255] [ 112.261006][T22255] Allocated by task 22249: [ 112.265399][T22255] kasan_set_track+0x4f/0x70 [ 112.269976][T22255] __kasan_kmalloc+0x98/0xb0 [ 112.274550][T22255] nfc_llcp_register_device+0x55/0x800 [ 112.279999][T22255] nfc_register_device+0x71/0x320 [ 112.285015][T22255] nci_register_device+0x7c2/0x900 [ 112.290113][T22255] virtual_ncidev_open+0x13c/0x1b0 [ 112.295206][T22255] misc_open+0x30b/0x380 [ 112.299432][T22255] chrdev_open+0x551/0x630 [ 112.303843][T22255] do_dentry_open+0x80f/0x1430 [ 112.308593][T22255] path_openat+0x27bb/0x3180 [ 112.313169][T22255] do_filp_open+0x234/0x490 [ 112.317656][T22255] do_sys_openat2+0x13e/0x1d0 [ 112.322315][T22255] __x64_sys_openat+0x247/0x290 [ 112.327151][T22255] do_syscall_64+0x41/0xc0 [ 112.331553][T22255] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 112.337436][T22255] [ 112.339747][T22255] Freed by task 22246: [ 112.343796][T22255] kasan_set_track+0x4f/0x70 [ 112.348368][T22255] kasan_save_free_info+0x28/0x40 [ 112.353380][T22255] ____kasan_slab_free+0xd6/0x120 [ 112.358396][T22255] __kmem_cache_free+0x25f/0x3b0 [ 112.363323][T22255] nfc_unregister_device+0x167/0x2a0 [ 112.368689][T22255] virtual_ncidev_close+0x59/0x90 [ 112.373786][T22255] __fput+0x3f8/0x910 [ 112.377759][T22255] __se_sys_close+0x15f/0x220 [ 112.382420][T22255] do_syscall_64+0x41/0xc0 [ 112.386826][T22255] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 112.392704][T22255] [ 112.395017][T22255] Last potentially related work creation: [ 112.400708][T22255] kasan_save_stack+0x3f/0x60 [ 112.405367][T22255] __kasan_record_aux_stack+0xad/0xc0 [ 112.410727][T22255] insert_work+0x3e/0x320 [ 112.415042][T22255] __queue_work+0xc2d/0xff0 [ 112.419534][T22255] queue_work_on+0x14f/0x250 [ 112.424108][T22255] rfkill_register+0x729/0x880 [ 112.428863][T22255] nfc_register_device+0x148/0x320 [ 112.433958][T22255] nci_register_device+0x7c2/0x900 [ 112.439055][T22255] virtual_ncidev_open+0x13c/0x1b0 [ 112.444154][T22255] misc_open+0x30b/0x380 [ 112.448392][T22255] chrdev_open+0x551/0x630 [ 112.452800][T22255] do_dentry_open+0x80f/0x1430 [ 112.457553][T22255] path_openat+0x27bb/0x3180 [ 112.462161][T22255] do_filp_open+0x234/0x490 [ 112.466650][T22255] do_sys_openat2+0x13e/0x1d0 [ 112.471313][T22255] __x64_sys_openat+0x247/0x290 [ 112.476149][T22255] do_syscall_64+0x41/0xc0 [ 112.480660][T22255] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 112.486541][T22255] [ 112.488865][T22255] Second to last potentially related work creation: [ 112.495444][T22255] kasan_save_stack+0x3f/0x60 [ 112.500117][T22255] __kasan_record_aux_stack+0xad/0xc0 [ 112.505493][T22255] insert_work+0x3e/0x320 [ 112.509831][T22255] __queue_work+0xc2d/0xff0 [ 112.514327][T22255] queue_work_on+0x14f/0x250 [ 112.518902][T22255] rfkill_register+0x729/0x880 [ 112.523656][T22255] nfc_register_device+0x148/0x320 [ 112.528774][T22255] nci_register_device+0x7c2/0x900 [ 112.533883][T22255] virtual_ncidev_open+0x13c/0x1b0 [ 112.538985][T22255] misc_open+0x30b/0x380 [ 112.543219][T22255] chrdev_open+0x551/0x630 [ 112.547624][T22255] do_dentry_open+0x80f/0x1430 [ 112.552376][T22255] path_openat+0x27bb/0x3180 [ 112.556949][T22255] do_filp_open+0x234/0x490 [ 112.561440][T22255] do_sys_openat2+0x13e/0x1d0 [ 112.566211][T22255] __x64_sys_openat+0x247/0x290 [ 112.571060][T22255] do_syscall_64+0x41/0xc0 [ 112.575476][T22255] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 112.581365][T22255] [ 112.583675][T22255] The buggy address belongs to the object at ffff888068af6000 [ 112.583675][T22255] which belongs to the cache kmalloc-2k of size 2048 [ 112.597729][T22255] The buggy address is located 8 bytes inside of [ 112.597729][T22255] freed 2048-byte region [ffff888068af6000, ffff888068af6800) [ 112.611453][T22255] [ 112.613766][T22255] The buggy address belongs to the physical page: [ 112.620162][T22255] page:ffffea0001a2bc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x68af0 [ 112.630299][T22255] head:ffffea0001a2bc00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 112.639216][T22255] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 112.647175][T22255] page_type: 0xffffffff() [ 112.651487][T22255] raw: 00fff00000000840 ffff888012842000 dead000000000100 dead000000000122 [ 112.660057][T22255] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 112.668629][T22255] page dumped because: kasan: bad access detected [ 112.675023][T22255] page_owner tracks the page as allocated [ 112.680719][T22255] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5061, tgid 5061 (syz-executor.3), ts 54340161050, free_ts 13757253849 [ 112.702252][T22255] post_alloc_hook+0x1e6/0x210 [ 112.707032][T22255] get_page_from_freelist+0x31db/0x3360 [ 112.712581][T22255] __alloc_pages+0x255/0x670 [ 112.717166][T22255] alloc_slab_page+0x6a/0x160 [ 112.721833][T22255] new_slab+0x84/0x2f0 [ 112.725890][T22255] ___slab_alloc+0xade/0x1100 [ 112.730554][T22255] __kmem_cache_alloc_node+0x1af/0x270 [ 112.735999][T22255] kmalloc_trace+0x2a/0xe0 [ 112.740452][T22255] device_create+0x121/0x2e0 [ 112.745045][T22255] macvtap_device_event+0x2f7/0x430 [ 112.750246][T22255] notifier_call_chain+0x18c/0x3a0 [ 112.755354][T22255] call_netdevice_notifiers+0x149/0x1c0 [ 112.760906][T22255] register_netdevice+0x10d7/0x1510 [ 112.766107][T22255] macvlan_common_newlink+0x1251/0x1a40 [ 112.771648][T22255] macvtap_newlink+0x154/0x1d0 [ 112.776401][T22255] rtnl_newlink+0x1579/0x2070 [ 112.781069][T22255] page last free stack trace: [ 112.785724][T22255] free_unref_page_prepare+0x8c3/0x9f0 [ 112.791171][T22255] free_unref_page+0x37/0x3f0 [ 112.795834][T22255] free_contig_range+0x9e/0x150 [ 112.800668][T22255] destroy_args+0x95/0x7c0 [ 112.805069][T22255] debug_vm_pgtable+0x4ac/0x540 [ 112.809904][T22255] do_one_initcall+0x23d/0x7d0 [ 112.814668][T22255] do_initcall_level+0x157/0x210 [ 112.819611][T22255] do_initcalls+0x3f/0x80 [ 112.823938][T22255] kernel_init_freeable+0x440/0x5d0 [ 112.829130][T22255] kernel_init+0x1d/0x2a0 [ 112.833444][T22255] ret_from_fork+0x48/0x80 [ 112.837847][T22255] ret_from_fork_asm+0x11/0x20 [ 112.842599][T22255] [ 112.844909][T22255] Memory state around the buggy address: [ 112.850520][T22255] ffff888068af5f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc 2023/09/13 09:29:58 executed programs: 3285 [ 112.858565][T22255] ffff888068af5f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 112.866612][T22255] >ffff888068af6000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.874653][T22255] ^ [ 112.878964][T22255] ffff888068af6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.887006][T22255] ffff888068af6100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.895048][T22255] ================================================================== [ 112.964656][T22255] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 112.971892][T22255] CPU: 1 PID: 22255 Comm: syz-executor.0 Not tainted 6.6.0-rc1-syzkaller-00033-g3669558bdf35 #0 [ 112.982321][T22255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 112.992394][T22255] Call Trace: [ 112.995682][T22255] [ 112.998625][T22255] dump_stack_lvl+0x1e7/0x2d0 [ 113.003318][T22255] ? nf_tcp_handle_invalid+0x650/0x650 [ 113.008866][T22255] ? panic+0x770/0x770 [ 113.012946][T22255] ? preempt_schedule_common+0x83/0xc0 [ 113.018425][T22255] ? vscnprintf+0x5d/0x80 [ 113.022764][T22255] panic+0x30f/0x770 [ 113.026670][T22255] ? check_panic_on_warn+0x21/0xa0 [ 113.031793][T22255] ? __memcpy_flushcache+0x2b0/0x2b0 [ 113.037097][T22255] ? _raw_spin_unlock_irqrestore+0x12c/0x140 [ 113.043091][T22255] ? _raw_spin_unlock+0x40/0x40 [ 113.047953][T22255] ? print_report+0x4fb/0x540 [ 113.052647][T22255] check_panic_on_warn+0x82/0xa0 [ 113.057600][T22255] ? __list_add_valid_or_report+0x4c/0xf0 [ 113.063332][T22255] end_report+0x6e/0x130 [ 113.067597][T22255] kasan_report+0x186/0x1b0 [ 113.072111][T22255] ? __list_add_valid_or_report+0x4c/0xf0 [ 113.077843][T22255] __list_add_valid_or_report+0x4c/0xf0 [ 113.083406][T22255] nfc_llcp_register_device+0x6cf/0x800 [ 113.088975][T22255] nfc_register_device+0x71/0x320 [ 113.094023][T22255] nci_register_device+0x7c2/0x900 [ 113.099152][T22255] ? nci_free_device+0x50/0x50 [ 113.103932][T22255] ? __init_waitqueue_head+0xae/0x150 [ 113.109326][T22255] virtual_ncidev_open+0x13c/0x1b0 [ 113.114453][T22255] ? virtual_ncidev_ioctl+0xc0/0xc0 [ 113.119667][T22255] misc_open+0x30b/0x380 [ 113.123923][T22255] chrdev_open+0x551/0x630 [ 113.128369][T22255] ? cd_forget+0x160/0x160 [ 113.132798][T22255] ? do_raw_spin_unlock+0x13b/0x8b0 [ 113.138011][T22255] ? fsnotify_perm+0x45f/0x5a0 [ 113.142794][T22255] ? cd_forget+0x160/0x160 [ 113.147226][T22255] do_dentry_open+0x80f/0x1430 [ 113.152014][T22255] path_openat+0x27bb/0x3180 [ 113.156623][T22255] ? kasan_set_track+0x4f/0x70 [ 113.161398][T22255] ? getname_flags+0xbc/0x4e0 [ 113.166091][T22255] ? do_sys_openat2+0xd2/0x1d0 [ 113.170871][T22255] ? do_filp_open+0x490/0x490 [ 113.175557][T22255] ? rcu_is_watching+0x15/0xb0 [ 113.180354][T22255] do_filp_open+0x234/0x490 [ 113.184875][T22255] ? vfs_tmpfile+0x4b0/0x4b0 [ 113.189490][T22255] ? _raw_spin_unlock+0x28/0x40 [ 113.194354][T22255] ? alloc_fd+0x59c/0x640 [ 113.198708][T22255] do_sys_openat2+0x13e/0x1d0 [ 113.203405][T22255] ? do_sys_open+0x230/0x230 [ 113.208014][T22255] ? __might_fault+0xba/0x120 [ 113.212712][T22255] __x64_sys_openat+0x247/0x290 [ 113.217581][T22255] ? __ia32_sys_open+0x270/0x270 [ 113.222536][T22255] ? rcu_is_watching+0x15/0xb0 [ 113.227319][T22255] ? syscall_enter_from_user_mode+0x32/0x230 [ 113.233341][T22255] do_syscall_64+0x41/0xc0 [ 113.237775][T22255] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.243688][T22255] RIP: 0033:0x7f901127cae9 [ 113.248118][T22255] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 113.267738][T22255] RSP: 002b:00007f90120af0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.276174][T22255] RAX: ffffffffffffffda RBX: 00007f901139bf80 RCX: 00007f901127cae9 [ 113.284164][T22255] RDX: 0000000000000002 RSI: 0000000020001a40 RDI: ffffffffffffff9c [ 113.292150][T22255] RBP: 00007f90112c847a R08: 0000000000000000 R09: 0000000000000000 [ 113.300138][T22255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.308128][T22255] R13: 000000000000000b R14: 00007f901139bf80 R15: 00007fff031ab168 [ 113.316121][T22255] [ 113.319342][T22255] Kernel Offset: disabled [ 113.323655][T22255] Rebooting in 86400 seconds..