Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts. 2025/01/02 08:09:03 ignoring optional flag "sandboxArg"="0" 2025/01/02 08:09:04 parsed 1 programs [ 90.569743][ T5827] cgroup: Unknown subsys name 'net' [ 90.718023][ T5827] cgroup: Unknown subsys name 'cpuset' [ 90.727542][ T5827] cgroup: Unknown subsys name 'rlimit' [ 92.366267][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.258944][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.401510][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.423682][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.555147][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.570287][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.585102][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.604589][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.615328][ T5858] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.623090][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.680032][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.707081][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.575030][ T8] cfg80211: failed to load regulatory.db [ 97.456582][ T5895] chnl_net:caif_netlink_parms(): no params data found [ 97.758111][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.767980][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.775285][ T5895] bridge_slave_0: entered allmulticast mode [ 97.782689][ T5895] bridge_slave_0: entered promiscuous mode [ 97.793853][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.801043][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.809736][ T5895] bridge_slave_1: entered allmulticast mode [ 97.816962][ T5895] bridge_slave_1: entered promiscuous mode [ 97.852463][ T5895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.866187][ T5895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.920237][ T5895] team0: Port device team_slave_0 added [ 97.955979][ T5895] team0: Port device team_slave_1 added [ 98.026533][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.033640][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.061229][ T5895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.075947][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.082934][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.109173][ T5895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.161645][ T5895] hsr_slave_0: entered promiscuous mode [ 98.169016][ T5895] hsr_slave_1: entered promiscuous mode [ 98.416027][ T5895] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.428769][ T5895] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.439984][ T5895] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.450565][ T5895] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.592027][ T5895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.612629][ T5895] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.642032][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.649317][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.660212][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.667349][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.848563][ T5895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.045697][ T5895] veth0_vlan: entered promiscuous mode [ 99.058489][ T5895] veth1_vlan: entered promiscuous mode [ 99.082917][ T5895] veth0_macvtap: entered promiscuous mode [ 99.091709][ T5895] veth1_macvtap: entered promiscuous mode [ 99.109846][ T5895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.126143][ T5895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.138990][ T5895] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.148454][ T5895] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.157441][ T5895] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.166468][ T5895] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/01/02 08:09:18 executed programs: 0 [ 99.348514][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.392831][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.417236][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.425372][ T5939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.433448][ T5939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.441852][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.449983][ T5941] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.457243][ T5939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.457547][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.465004][ T5939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.485793][ T5939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.494258][ T5939] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 99.502370][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.510368][ T5943] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.512398][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.518025][ T5939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.525637][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.540430][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.546871][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.550780][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.558050][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.562072][ T5948] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 99.571505][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.575896][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.582749][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 99.593143][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.599030][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.613450][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.622812][ T5948] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 99.630271][ T5948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.703206][ T5858] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 99.712843][ T5858] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 99.758573][ T5858] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 99.770400][ T5858] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 99.779408][ T5858] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 99.787177][ T5858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 100.396417][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 100.442536][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 100.469317][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 100.501321][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 100.518384][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 100.635875][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.780287][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.822902][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 100.860622][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.868341][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.875582][ T5937] bridge_slave_0: entered allmulticast mode [ 100.882770][ T5937] bridge_slave_0: entered promiscuous mode [ 100.956592][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.963785][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.971820][ T5937] bridge_slave_1: entered allmulticast mode [ 100.979014][ T5937] bridge_slave_1: entered promiscuous mode [ 101.009301][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.016552][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.024976][ T5936] bridge_slave_0: entered allmulticast mode [ 101.031765][ T5936] bridge_slave_0: entered promiscuous mode [ 101.044871][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.051969][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.059848][ T5942] bridge_slave_0: entered allmulticast mode [ 101.067459][ T5942] bridge_slave_0: entered promiscuous mode [ 101.075329][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.082431][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.089822][ T5942] bridge_slave_1: entered allmulticast mode [ 101.097117][ T5942] bridge_slave_1: entered promiscuous mode [ 101.123713][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.131096][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.138738][ T5951] bridge_slave_0: entered allmulticast mode [ 101.146145][ T5951] bridge_slave_0: entered promiscuous mode [ 101.153397][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.161085][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.174148][ T5936] bridge_slave_1: entered allmulticast mode [ 101.180936][ T5936] bridge_slave_1: entered promiscuous mode [ 101.218122][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.253761][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.265922][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.275661][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.282778][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.290278][ T5951] bridge_slave_1: entered allmulticast mode [ 101.297473][ T5951] bridge_slave_1: entered promiscuous mode [ 101.351618][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.361539][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.368966][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.376214][ T5932] bridge_slave_0: entered allmulticast mode [ 101.383276][ T5932] bridge_slave_0: entered promiscuous mode [ 101.408656][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.442839][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.463341][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.485903][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.493101][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.501098][ T5938] bridge_slave_0: entered allmulticast mode [ 101.508469][ T5948] Bluetooth: hci0: command tx timeout [ 101.515124][ T5938] bridge_slave_0: entered promiscuous mode [ 101.526609][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.550778][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.559177][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.566801][ T5932] bridge_slave_1: entered allmulticast mode [ 101.574242][ T5932] bridge_slave_1: entered promiscuous mode [ 101.584300][ T5948] Bluetooth: hci1: command tx timeout [ 101.595624][ T5937] team0: Port device team_slave_0 added [ 101.603428][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.626982][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.636214][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.643404][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.650725][ T5938] bridge_slave_1: entered allmulticast mode [ 101.657914][ T5938] bridge_slave_1: entered promiscuous mode [ 101.664088][ T5948] Bluetooth: hci3: command tx timeout [ 101.664503][ T5941] Bluetooth: hci4: command tx timeout [ 101.675339][ T5858] Bluetooth: hci2: command tx timeout [ 101.712771][ T5937] team0: Port device team_slave_1 added [ 101.741691][ T5936] team0: Port device team_slave_0 added [ 101.760002][ T5936] team0: Port device team_slave_1 added [ 101.797715][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.809044][ T5942] team0: Port device team_slave_0 added [ 101.817509][ T5942] team0: Port device team_slave_1 added [ 101.824097][ T5941] Bluetooth: hci5: command tx timeout [ 101.845545][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.880065][ T5951] team0: Port device team_slave_0 added [ 101.921374][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.941248][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.960353][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.971667][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.004347][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.055832][ T5951] team0: Port device team_slave_1 added [ 102.062318][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.069593][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.096002][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.108697][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.116017][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.142185][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.165385][ T5938] team0: Port device team_slave_0 added [ 102.182476][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.189515][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.216141][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.245927][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.252896][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.279422][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.292537][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.299629][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.326237][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.362324][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.369909][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.396916][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.410733][ T5938] team0: Port device team_slave_1 added [ 102.419184][ T5932] team0: Port device team_slave_0 added [ 102.447599][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.454974][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.481987][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.515037][ T11] bridge_slave_1: left allmulticast mode [ 102.520942][ T11] bridge_slave_1: left promiscuous mode [ 102.527628][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.539632][ T11] bridge_slave_0: left allmulticast mode [ 102.545988][ T11] bridge_slave_0: left promiscuous mode [ 102.551678][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.902048][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.914044][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.924888][ T11] bond0 (unregistering): Released all slaves [ 102.943183][ T5932] team0: Port device team_slave_1 added [ 103.031462][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.039144][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.065963][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.131003][ T5936] hsr_slave_0: entered promiscuous mode [ 103.138928][ T5936] hsr_slave_1: entered promiscuous mode [ 103.153829][ T5936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.163289][ T5936] Cannot create hsr debugfs directory [ 103.183340][ T5942] hsr_slave_0: entered promiscuous mode [ 103.189982][ T5942] hsr_slave_1: entered promiscuous mode [ 103.197061][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.204767][ T5942] Cannot create hsr debugfs directory [ 103.241627][ T5937] hsr_slave_0: entered promiscuous mode [ 103.248805][ T5937] hsr_slave_1: entered promiscuous mode [ 103.255230][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.262812][ T5937] Cannot create hsr debugfs directory [ 103.286624][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.293604][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.326109][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.410714][ T11] hsr_slave_0: left promiscuous mode [ 103.417068][ T11] hsr_slave_1: left promiscuous mode [ 103.423152][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.433093][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.453293][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.463757][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.491028][ T11] veth1_macvtap: left promiscuous mode [ 103.508447][ T11] veth0_macvtap: left promiscuous mode [ 103.521014][ T11] veth1_vlan: left promiscuous mode [ 103.529651][ T11] veth0_vlan: left promiscuous mode [ 103.594161][ T5941] Bluetooth: hci0: command tx timeout [ 103.664252][ T5941] Bluetooth: hci1: command tx timeout [ 103.744809][ T5941] Bluetooth: hci4: command tx timeout [ 103.744848][ T5858] Bluetooth: hci2: command tx timeout [ 103.754148][ T5941] Bluetooth: hci3: command tx timeout [ 103.881878][ T11] team0 (unregistering): Port device team_slave_1 removed [ 103.910349][ T5941] Bluetooth: hci5: command tx timeout [ 103.924824][ T11] team0 (unregistering): Port device team_slave_0 removed [ 104.178764][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.186054][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.212931][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.227177][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.234257][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.260754][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.330544][ T5951] hsr_slave_0: entered promiscuous mode [ 104.337429][ T5951] hsr_slave_1: entered promiscuous mode [ 104.394792][ T5932] hsr_slave_0: entered promiscuous mode [ 104.402870][ T5932] hsr_slave_1: entered promiscuous mode [ 104.409262][ T5932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.416917][ T5932] Cannot create hsr debugfs directory [ 104.466704][ T5938] hsr_slave_0: entered promiscuous mode [ 104.473142][ T5938] hsr_slave_1: entered promiscuous mode [ 104.479523][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.487197][ T5938] Cannot create hsr debugfs directory [ 105.042829][ T5937] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.095033][ T5937] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.124491][ T5937] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.144705][ T5937] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.203838][ T5951] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.217378][ T5951] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.251242][ T5951] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.321462][ T5951] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.519083][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.566086][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.585701][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.627774][ T5942] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.649892][ T5942] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.660248][ T5942] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.667139][ T5941] Bluetooth: hci0: command tx timeout [ 105.690950][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.698092][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.711938][ T5942] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.724606][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.744136][ T5941] Bluetooth: hci1: command tx timeout [ 105.751403][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.758542][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.773704][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.781207][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.826475][ T5941] Bluetooth: hci2: command tx timeout [ 105.834411][ T5941] Bluetooth: hci3: command tx timeout [ 105.836070][ T5858] Bluetooth: hci4: command tx timeout [ 105.841655][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.852318][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.862087][ T5932] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.871883][ T5932] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.899364][ T5932] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.909805][ T5932] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.984311][ T5858] Bluetooth: hci5: command tx timeout [ 106.051648][ T5936] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.067301][ T5936] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.088349][ T5951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.133901][ T5936] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.187463][ T5936] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.267237][ T5938] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.308092][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.365766][ T5938] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.433633][ T5938] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.478310][ T5938] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.508747][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.565513][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.572662][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.590708][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.597855][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.678366][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.716401][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.767459][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.805182][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.817013][ T5942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.877897][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.909011][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.916163][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.933621][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.941075][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.022252][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.133000][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.140203][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.174416][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.181622][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.229268][ T5937] veth0_vlan: entered promiscuous mode [ 107.252729][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.297231][ T5932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.391646][ T5937] veth1_vlan: entered promiscuous mode [ 107.437809][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.490623][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.620551][ T5936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.659642][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.666812][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.716018][ T5951] veth0_vlan: entered promiscuous mode [ 107.727842][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.734980][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.754498][ T5858] Bluetooth: hci0: command tx timeout [ 107.768602][ T5937] veth0_macvtap: entered promiscuous mode [ 107.789241][ T5951] veth1_vlan: entered promiscuous mode [ 107.824763][ T5858] Bluetooth: hci1: command tx timeout [ 107.850935][ T5937] veth1_macvtap: entered promiscuous mode [ 107.904277][ T5858] Bluetooth: hci4: command tx timeout [ 107.915224][ T5858] Bluetooth: hci3: command tx timeout [ 107.920701][ T5858] Bluetooth: hci2: command tx timeout [ 107.958215][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.019089][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.055277][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.064402][ T5858] Bluetooth: hci5: command tx timeout [ 108.087512][ T5951] veth0_macvtap: entered promiscuous mode [ 108.191790][ T5951] veth1_macvtap: entered promiscuous mode [ 108.217098][ T5937] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.236812][ T5937] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.255623][ T5937] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.272825][ T5937] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.386468][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.408953][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.426444][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.436499][ T5942] veth0_vlan: entered promiscuous mode [ 108.456604][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.508719][ T5932] veth0_vlan: entered promiscuous mode [ 108.529258][ T5942] veth1_vlan: entered promiscuous mode [ 108.551410][ T5932] veth1_vlan: entered promiscuous mode [ 108.572841][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.592848][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.606677][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.641294][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.688589][ T5936] veth0_vlan: entered promiscuous mode [ 108.705789][ T5951] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.721670][ T5951] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.730783][ T5951] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.740361][ T5951] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.820442][ T5932] veth0_macvtap: entered promiscuous mode [ 108.854332][ T3023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.865799][ T3023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.881215][ T5932] veth1_macvtap: entered promiscuous mode [ 108.894543][ T5942] veth0_macvtap: entered promiscuous mode [ 108.932930][ T5942] veth1_macvtap: entered promiscuous mode [ 108.969226][ T5936] veth1_vlan: entered promiscuous mode [ 108.993907][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.007220][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.018730][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.031505][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.043089][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.052063][ T3023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.060725][ T3023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.121516][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.144593][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.155135][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.166657][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.178805][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 2025/01/02 08:09:28 executed programs: 12 [ 109.243543][ T5938] veth0_vlan: entered promiscuous mode [ 109.292862][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.305419][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.313267][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.324425][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.344056][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.372831][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.383116][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.394521][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.426649][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.446795][ T5936] veth0_macvtap: entered promiscuous mode [ 109.460882][ T5932] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.471443][ T5932] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.482196][ T5932] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.491534][ T5932] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.516754][ T5938] veth1_vlan: entered promiscuous mode [ 109.535476][ T5936] veth1_macvtap: entered promiscuous mode [ 109.543683][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.561680][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.572400][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.592360][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.623610][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.644066][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.665227][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.779569][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.797545][ T5942] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.814071][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.831619][ T5942] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.851849][ T5942] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.873413][ T5942] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.903559][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.915215][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.925768][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.936567][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.947371][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.958461][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.968883][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.980281][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.993324][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.058421][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.078173][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.097212][ T6117] ubi0: attaching mtd0 [ 110.103098][ T6117] ubi0: scanning is finished [ 110.106089][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.133988][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.138043][ T6117] ubi0: empty MTD device detected [ 110.168534][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.189532][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.219665][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.234032][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.255373][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.282907][ T5936] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.301976][ T5936] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.323164][ T5936] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.332100][ T5936] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.394633][ T5938] veth0_macvtap: entered promiscuous mode [ 110.422043][ T6117] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 110.493491][ T5938] veth1_macvtap: entered promiscuous mode [ 110.500324][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.527079][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.678978][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.699114][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.734001][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.743046][ T6121] ubi0: attaching mtd0 [ 110.753048][ T6121] ubi0: scanning is finished [ 110.753994][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.762058][ T6121] ================================================================== [ 110.775613][ T6121] BUG: KASAN: slab-use-after-free in notifier_chain_register+0x3ac/0x420 [ 110.784103][ T6121] Read of size 4 at addr ffff88805ba798d8 by task syz.5.21/6121 [ 110.788522][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.791739][ T6121] [ 110.791751][ T6121] CPU: 0 UID: 0 PID: 6121 Comm: syz.5.21 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 110.815007][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 110.825086][ T6121] Call Trace: [ 110.828372][ T6121] [ 110.831317][ T6121] dump_stack_lvl+0x116/0x1f0 [ 110.836041][ T6121] print_report+0xc3/0x620 [ 110.840514][ T6121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.846175][ T6121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.851830][ T6121] ? __phys_addr+0xc6/0x150 [ 110.856463][ T6121] kasan_report+0xd9/0x110 [ 110.860909][ T6121] ? notifier_chain_register+0x3ac/0x420 [ 110.866588][ T6121] ? notifier_chain_register+0x3ac/0x420 [ 110.872280][ T6121] notifier_chain_register+0x3ac/0x420 [ 110.877786][ T6121] blocking_notifier_chain_register+0x76/0xd0 [ 110.883898][ T6121] ubi_wl_init+0x1018/0x17b0 [ 110.888532][ T6121] ubi_attach+0x1b92/0x4c00 [ 110.893162][ T6121] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 110.899540][ T6121] ? lockdep_init_map_type+0x16d/0x7d0 [ 110.905032][ T6121] ? __pfx_ubi_attach+0x10/0x10 [ 110.909911][ T6121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.915575][ T6121] ? ubi_attach_mtd_dev+0x1543/0x3590 [ 110.920979][ T6121] ubi_attach_mtd_dev+0x158f/0x3590 [ 110.926217][ T6121] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 110.931790][ T6121] ? __pfx_get_mtd_device+0x10/0x10 [ 110.937028][ T6121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.942863][ T6121] ctrl_cdev_ioctl+0x339/0x3d0 [ 110.947661][ T6121] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 110.952991][ T6121] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 110.958312][ T6121] __x64_sys_ioctl+0x193/0x200 [ 110.963115][ T6121] do_syscall_64+0xcd/0x250 [ 110.967677][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.973615][ T6121] RIP: 0033:0x7f7293f85d29 [ 110.978050][ T6121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.997982][ T6121] RSP: 002b:00007f7294d16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.006424][ T6121] RAX: ffffffffffffffda RBX: 00007f7294176160 RCX: 00007f7293f85d29 [ 111.014592][ T6121] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000005 [ 111.022582][ T6121] RBP: 00007f7294001b08 R08: 0000000000000000 R09: 0000000000000000 [ 111.030751][ T6121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.038739][ T6121] R13: 0000000000000000 R14: 00007f7294176160 R15: 00007ffea0c77e88 [ 111.046741][ T6121] [ 111.049767][ T6121] [ 111.052090][ T6121] Allocated by task 6117: [ 111.056428][ T6121] kasan_save_stack+0x33/0x60 [ 111.061131][ T6121] kasan_save_track+0x14/0x30 [ 111.065830][ T6121] __kasan_kmalloc+0xaa/0xb0 [ 111.070439][ T6121] ubi_attach_mtd_dev+0x3ce/0x3590 [ 111.075578][ T6121] ctrl_cdev_ioctl+0x339/0x3d0 [ 111.080366][ T6121] __x64_sys_ioctl+0x193/0x200 [ 111.085161][ T6121] do_syscall_64+0xcd/0x250 [ 111.089700][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.095692][ T6121] [ 111.098130][ T6121] Freed by task 6117: [ 111.102114][ T6121] kasan_save_stack+0x33/0x60 [ 111.106834][ T6121] kasan_save_track+0x14/0x30 [ 111.111535][ T6121] kasan_save_free_info+0x3b/0x60 [ 111.116597][ T6121] __kasan_slab_free+0x51/0x70 [ 111.121382][ T6121] kfree+0x14f/0x4b0 [ 111.125315][ T6121] device_release+0xa4/0x240 [ 111.129923][ T6121] kobject_put+0x1e7/0x5a0 [ 111.134387][ T6121] put_device+0x1f/0x30 [ 111.138561][ T6121] ubi_attach_mtd_dev+0xe25/0x3590 [ 111.143700][ T6121] ctrl_cdev_ioctl+0x339/0x3d0 [ 111.148494][ T6121] __x64_sys_ioctl+0x193/0x200 [ 111.153380][ T6121] do_syscall_64+0xcd/0x250 [ 111.157923][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.163854][ T6121] [ 111.166184][ T6121] The buggy address belongs to the object at ffff88805ba78000 [ 111.166184][ T6121] which belongs to the cache kmalloc-8k of size 8192 [ 111.180253][ T6121] The buggy address is located 6360 bytes inside of [ 111.180253][ T6121] freed 8192-byte region [ffff88805ba78000, ffff88805ba7a000) [ 111.194246][ T6121] [ 111.196575][ T6121] The buggy address belongs to the physical page: [ 111.202988][ T6121] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5ba78 [ 111.211793][ T6121] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 111.220309][ T6121] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 111.228217][ T6121] page_type: f5(slab) [ 111.232215][ T6121] raw: 00fff00000000040 ffff88801b042280 ffffea0001ee6400 0000000000000003 [ 111.240839][ T6121] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 111.249443][ T6121] head: 00fff00000000040 ffff88801b042280 ffffea0001ee6400 0000000000000003 [ 111.258137][ T6121] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 111.266828][ T6121] head: 00fff00000000003 ffffea00016e9e01 ffffffffffffffff 0000000000000000 [ 111.275527][ T6121] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 111.284204][ T6121] page dumped because: kasan: bad access detected [ 111.290709][ T6121] page_owner tracks the page as allocated [ 111.296428][ T6121] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5853, tgid 5853 (syz-executor), ts 95959619677, free_ts 31354449989 [ 111.317911][ T6121] post_alloc_hook+0x2d1/0x350 [ 111.322719][ T6121] get_page_from_freelist+0xfce/0x2f80 [ 111.328198][ T6121] __alloc_pages_noprof+0x223/0x25b0 [ 111.333512][ T6121] alloc_pages_mpol_noprof+0x2c9/0x610 [ 111.339006][ T6121] new_slab+0x2c9/0x410 [ 111.343197][ T6121] ___slab_alloc+0xd7d/0x17a0 [ 111.347910][ T6121] __slab_alloc.constprop.0+0x56/0xb0 [ 111.353321][ T6121] __kmalloc_noprof+0x2ec/0x510 [ 111.358198][ T6121] ops_init+0x77/0x5f0 [ 111.362290][ T6121] setup_net+0x21f/0x860 [ 111.366556][ T6121] copy_net_ns+0x2b4/0x6c0 [ 111.371000][ T6121] create_new_namespaces+0x3ea/0xad0 [ 111.376319][ T6121] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 111.381983][ T6121] ksys_unshare+0x45d/0xa40 [ 111.386533][ T6121] __x64_sys_unshare+0x31/0x40 [ 111.391340][ T6121] do_syscall_64+0xcd/0x250 [ 111.395881][ T6121] page last free pid 1 tgid 1 stack trace: [ 111.401691][ T6121] free_unref_page+0x661/0x1080 [ 111.406561][ T6121] free_contig_range+0x133/0x3f0 [ 111.411517][ T6121] destroy_args+0x802/0xa50 [ 111.416062][ T6121] debug_vm_pgtable+0x168e/0x31a0 [ 111.421127][ T6121] do_one_initcall+0x12b/0x700 [ 111.425925][ T6121] kernel_init_freeable+0x5c7/0x900 [ 111.431159][ T6121] kernel_init+0x1c/0x2b0 [ 111.435507][ T6121] ret_from_fork+0x48/0x80 [ 111.439948][ T6121] ret_from_fork_asm+0x1a/0x30 [ 111.444754][ T6121] [ 111.447082][ T6121] Memory state around the buggy address: [ 111.452737][ T6121] ffff88805ba79780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.460822][ T6121] ffff88805ba79800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.468899][ T6121] >ffff88805ba79880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.476969][ T6121] ^ [ 111.483909][ T6121] ffff88805ba79900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.491986][ T6121] ffff88805ba79980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.500056][ T6121] ================================================================== [ 111.515353][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.525318][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.535943][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.542587][ T6121] Disabling lock debugging due to kernel taint [ 111.545796][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.545825][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.546855][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.554676][ T6121] ================================================================== [ 111.564688][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.572299][ T6121] BUG: KASAN: slab-use-after-free in notifier_chain_register+0x3c8/0x420 [ 111.579587][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.587591][ T6121] Read of size 8 at addr ffff88805ba798d0 by task syz.5.21/6121 [ 111.587625][ T6121] [ 111.587640][ T6121] CPU: 1 UID: 0 PID: 6121 Comm: syz.5.21 Tainted: G B 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 111.587696][ T6121] Tainted: [B]=BAD_PAGE [ 111.587710][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 111.587732][ T6121] Call Trace: [ 111.587744][ T6121] [ 111.587758][ T6121] dump_stack_lvl+0x116/0x1f0 [ 111.587815][ T6121] print_report+0xc3/0x620 [ 111.587857][ T6121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.598691][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.606808][ T6121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.606851][ T6121] ? __phys_addr+0xc6/0x150 [ 111.606906][ T6121] kasan_report+0xd9/0x110 [ 111.606948][ T6121] ? notifier_chain_register+0x3c8/0x420 [ 111.607009][ T6121] ? notifier_chain_register+0x3c8/0x420 [ 111.607073][ T6121] notifier_chain_register+0x3c8/0x420 [ 111.607135][ T6121] blocking_notifier_chain_register+0x76/0xd0 [ 111.616952][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.624495][ T6121] ubi_wl_init+0x1018/0x17b0 [ 111.624544][ T6121] ubi_attach+0x1b92/0x4c00 [ 111.624595][ T6121] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 111.626920][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.638855][ T6121] ? lockdep_init_map_type+0x16d/0x7d0 [ 111.643013][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.653043][ T6121] ? __pfx_ubi_attach+0x10/0x10 [ 111.653086][ T6121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.656393][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.659258][ T6121] ? ubi_attach_mtd_dev+0x1543/0x3590 [ 111.663902][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.668291][ T6121] ubi_attach_mtd_dev+0x158f/0x3590 [ 111.668347][ T6121] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 111.668393][ T6121] ? __pfx_get_mtd_device+0x10/0x10 [ 111.668451][ T6121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 111.668495][ T6121] ctrl_cdev_ioctl+0x339/0x3d0 [ 111.668541][ T6121] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 111.668593][ T6121] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 111.668640][ T6121] __x64_sys_ioctl+0x193/0x200 [ 111.668693][ T6121] do_syscall_64+0xcd/0x250 [ 111.668751][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.674494][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.684733][ T6121] RIP: 0033:0x7f7293f85d29 [ 111.684766][ T6121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.690383][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.694851][ T6121] RSP: 002b:00007f7294d16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.700759][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.704869][ T6121] RAX: ffffffffffffffda RBX: 00007f7294176160 RCX: 00007f7293f85d29 [ 111.704899][ T6121] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000005 [ 111.704926][ T6121] RBP: 00007f7294001b08 R08: 0000000000000000 R09: 0000000000000000 [ 111.713336][ T5938] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.715946][ T6121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.715974][ T6121] R13: 0000000000000000 R14: 00007f7294176160 R15: 00007ffea0c77e88 [ 111.722041][ T5938] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.731803][ T6121] [ 111.731818][ T6121] [ 111.731826][ T6121] Allocated by task 6117: [ 111.731845][ T6121] kasan_save_stack+0x33/0x60 [ 111.736449][ T5938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.740879][ T6121] kasan_save_track+0x14/0x30 [ 111.747432][ T5938] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.757661][ T6121] __kasan_kmalloc+0xaa/0xb0 [ 111.757696][ T6121] ubi_attach_mtd_dev+0x3ce/0x3590 [ 112.025583][ T6121] ctrl_cdev_ioctl+0x339/0x3d0 [ 112.030480][ T6121] __x64_sys_ioctl+0x193/0x200 [ 112.035293][ T6121] do_syscall_64+0xcd/0x250 [ 112.039844][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.045788][ T6121] [ 112.048142][ T6121] Freed by task 6117: [ 112.052124][ T6121] kasan_save_stack+0x33/0x60 [ 112.056825][ T6121] kasan_save_track+0x14/0x30 [ 112.061523][ T6121] kasan_save_free_info+0x3b/0x60 [ 112.066581][ T6121] __kasan_slab_free+0x51/0x70 [ 112.071367][ T6121] kfree+0x14f/0x4b0 [ 112.075302][ T6121] device_release+0xa4/0x240 [ 112.079910][ T6121] kobject_put+0x1e7/0x5a0 [ 112.084363][ T6121] put_device+0x1f/0x30 [ 112.088535][ T6121] ubi_attach_mtd_dev+0xe25/0x3590 [ 112.093674][ T6121] ctrl_cdev_ioctl+0x339/0x3d0 [ 112.098467][ T6121] __x64_sys_ioctl+0x193/0x200 [ 112.103260][ T6121] do_syscall_64+0xcd/0x250 [ 112.107806][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.113735][ T6121] [ 112.116070][ T6121] The buggy address belongs to the object at ffff88805ba78000 [ 112.116070][ T6121] which belongs to the cache kmalloc-8k of size 8192 [ 112.130141][ T6121] The buggy address is located 6352 bytes inside of [ 112.130141][ T6121] freed 8192-byte region [ffff88805ba78000, ffff88805ba7a000) [ 112.144133][ T6121] [ 112.146462][ T6121] The buggy address belongs to the physical page: [ 112.152879][ T6121] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5ba78 [ 112.161658][ T6121] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 112.170171][ T6121] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 112.178077][ T6121] page_type: f5(slab) [ 112.182076][ T6121] raw: 00fff00000000040 ffff88801b042280 ffffea0001ee6400 0000000000000003 [ 112.190684][ T6121] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 112.199293][ T6121] head: 00fff00000000040 ffff88801b042280 ffffea0001ee6400 0000000000000003 [ 112.207987][ T6121] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 112.216682][ T6121] head: 00fff00000000003 ffffea00016e9e01 ffffffffffffffff 0000000000000000 [ 112.225375][ T6121] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 112.234051][ T6121] page dumped because: kasan: bad access detected [ 112.240466][ T6121] page_owner tracks the page as allocated [ 112.246182][ T6121] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5853, tgid 5853 (syz-executor), ts 95959619677, free_ts 31354449989 [ 112.267583][ T6121] post_alloc_hook+0x2d1/0x350 [ 112.272392][ T6121] get_page_from_freelist+0xfce/0x2f80 [ 112.277879][ T6121] __alloc_pages_noprof+0x223/0x25b0 [ 112.283376][ T6121] alloc_pages_mpol_noprof+0x2c9/0x610 [ 112.288893][ T6121] new_slab+0x2c9/0x410 [ 112.293087][ T6121] ___slab_alloc+0xd7d/0x17a0 [ 112.297806][ T6121] __slab_alloc.constprop.0+0x56/0xb0 [ 112.303219][ T6121] __kmalloc_noprof+0x2ec/0x510 [ 112.308185][ T6121] ops_init+0x77/0x5f0 [ 112.312288][ T6121] setup_net+0x21f/0x860 [ 112.316563][ T6121] copy_net_ns+0x2b4/0x6c0 [ 112.321045][ T6121] create_new_namespaces+0x3ea/0xad0 [ 112.326477][ T6121] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 112.332155][ T6121] ksys_unshare+0x45d/0xa40 [ 112.336695][ T6121] __x64_sys_unshare+0x31/0x40 [ 112.341496][ T6121] do_syscall_64+0xcd/0x250 [ 112.346050][ T6121] page last free pid 1 tgid 1 stack trace: [ 112.351866][ T6121] free_unref_page+0x661/0x1080 [ 112.356828][ T6121] free_contig_range+0x133/0x3f0 [ 112.361874][ T6121] destroy_args+0x802/0xa50 [ 112.366419][ T6121] debug_vm_pgtable+0x168e/0x31a0 [ 112.371486][ T6121] do_one_initcall+0x12b/0x700 [ 112.376290][ T6121] kernel_init_freeable+0x5c7/0x900 [ 112.381527][ T6121] kernel_init+0x1c/0x2b0 [ 112.385875][ T6121] ret_from_fork+0x48/0x80 [ 112.390312][ T6121] ret_from_fork_asm+0x1a/0x30 [ 112.395115][ T6121] [ 112.397469][ T6121] Memory state around the buggy address: [ 112.403104][ T6121] ffff88805ba79780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.411183][ T6121] ffff88805ba79800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.419264][ T6121] >ffff88805ba79880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.427340][ T6121] ^ [ 112.434019][ T6121] ffff88805ba79900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.442095][ T6121] ffff88805ba79980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.450165][ T6121] ================================================================== [ 112.479160][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.485695][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.494330][ T6121] ================================================================== [ 112.502895][ T6121] BUG: KASAN: slab-use-after-free in notifier_chain_register+0x403/0x420 [ 112.511454][ T6121] Write of size 8 at addr ffff88805ba798d0 by task syz.5.21/6121 [ 112.519188][ T6121] [ 112.521524][ T6121] CPU: 0 UID: 0 PID: 6121 Comm: syz.5.21 Tainted: G B 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 112.533546][ T6121] Tainted: [B]=BAD_PAGE [ 112.537705][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 112.547862][ T6121] Call Trace: [ 112.551150][ T6121] [ 112.554095][ T6121] dump_stack_lvl+0x116/0x1f0 [ 112.558855][ T6121] print_report+0xc3/0x620 [ 112.563475][ T6121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.569137][ T6121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.574795][ T6121] ? __phys_addr+0xc6/0x150 [ 112.579512][ T6121] kasan_report+0xd9/0x110 [ 112.583960][ T6121] ? notifier_chain_register+0x403/0x420 [ 112.589636][ T6121] ? notifier_chain_register+0x403/0x420 [ 112.595318][ T6121] notifier_chain_register+0x403/0x420 [ 112.600822][ T6121] blocking_notifier_chain_register+0x76/0xd0 [ 112.606934][ T6121] ubi_wl_init+0x1018/0x17b0 [ 112.611561][ T6121] ubi_attach+0x1b92/0x4c00 [ 112.616095][ T6121] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 112.622470][ T6121] ? lockdep_init_map_type+0x16d/0x7d0 [ 112.627972][ T6121] ? __pfx_ubi_attach+0x10/0x10 [ 112.632933][ T6121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.638597][ T6121] ? ubi_attach_mtd_dev+0x1543/0x3590 [ 112.644093][ T6121] ubi_attach_mtd_dev+0x158f/0x3590 [ 112.649335][ T6121] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 112.654909][ T6121] ? __pfx_get_mtd_device+0x10/0x10 [ 112.660148][ T6121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.665820][ T6121] ctrl_cdev_ioctl+0x339/0x3d0 [ 112.670620][ T6121] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 112.675941][ T6121] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 112.681524][ T6121] __x64_sys_ioctl+0x193/0x200 [ 112.686335][ T6121] do_syscall_64+0xcd/0x250 [ 112.690923][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.696862][ T6121] RIP: 0033:0x7f7293f85d29 [ 112.701297][ T6121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.720960][ T6121] RSP: 002b:00007f7294d16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.729404][ T6121] RAX: ffffffffffffffda RBX: 00007f7294176160 RCX: 00007f7293f85d29 [ 112.737394][ T6121] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000005 [ 112.745391][ T6121] RBP: 00007f7294001b08 R08: 0000000000000000 R09: 0000000000000000 [ 112.753382][ T6121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.761372][ T6121] R13: 0000000000000000 R14: 00007f7294176160 R15: 00007ffea0c77e88 [ 112.769393][ T6121] [ 112.772420][ T6121] [ 112.774749][ T6121] Allocated by task 6117: [ 112.779082][ T6121] kasan_save_stack+0x33/0x60 [ 112.783780][ T6121] kasan_save_track+0x14/0x30 [ 112.788476][ T6121] __kasan_kmalloc+0xaa/0xb0 [ 112.793084][ T6121] ubi_attach_mtd_dev+0x3ce/0x3590 [ 112.798224][ T6121] ctrl_cdev_ioctl+0x339/0x3d0 [ 112.803024][ T6121] __x64_sys_ioctl+0x193/0x200 [ 112.807819][ T6121] do_syscall_64+0xcd/0x250 [ 112.812358][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.818374][ T6121] [ 112.820701][ T6121] Freed by task 6117: [ 112.824689][ T6121] kasan_save_stack+0x33/0x60 [ 112.829388][ T6121] kasan_save_track+0x14/0x30 [ 112.834082][ T6121] kasan_save_free_info+0x3b/0x60 [ 112.839138][ T6121] __kasan_slab_free+0x51/0x70 [ 112.843920][ T6121] kfree+0x14f/0x4b0 [ 112.847945][ T6121] device_release+0xa4/0x240 [ 112.852560][ T6121] kobject_put+0x1e7/0x5a0 [ 112.857013][ T6121] put_device+0x1f/0x30 [ 112.861360][ T6121] ubi_attach_mtd_dev+0xe25/0x3590 [ 112.866497][ T6121] ctrl_cdev_ioctl+0x339/0x3d0 [ 112.871290][ T6121] __x64_sys_ioctl+0x193/0x200 [ 112.876083][ T6121] do_syscall_64+0xcd/0x250 [ 112.880627][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.886565][ T6121] [ 112.888891][ T6121] The buggy address belongs to the object at ffff88805ba78000 [ 112.888891][ T6121] which belongs to the cache kmalloc-8k of size 8192 [ 112.902991][ T6121] The buggy address is located 6352 bytes inside of [ 112.902991][ T6121] freed 8192-byte region [ffff88805ba78000, ffff88805ba7a000) [ 112.916999][ T6121] [ 112.919333][ T6121] The buggy address belongs to the physical page: [ 112.925749][ T6121] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5ba78 [ 112.934530][ T6121] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 112.943138][ T6121] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 112.951048][ T6121] page_type: f5(slab) [ 112.955051][ T6121] raw: 00fff00000000040 ffff88801b042280 ffffea0001ee6400 0000000000000003 [ 112.963660][ T6121] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 112.972282][ T6121] head: 00fff00000000040 ffff88801b042280 ffffea0001ee6400 0000000000000003 [ 112.981060][ T6121] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 112.989876][ T6121] head: 00fff00000000003 ffffea00016e9e01 ffffffffffffffff 0000000000000000 [ 112.998576][ T6121] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 113.007253][ T6121] page dumped because: kasan: bad access detected [ 113.013761][ T6121] page_owner tracks the page as allocated [ 113.019478][ T6121] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5853, tgid 5853 (syz-executor), ts 95959619677, free_ts 31354449989 [ 113.041363][ T6121] post_alloc_hook+0x2d1/0x350 [ 113.046185][ T6121] get_page_from_freelist+0xfce/0x2f80 [ 113.051680][ T6121] __alloc_pages_noprof+0x223/0x25b0 [ 113.056998][ T6121] alloc_pages_mpol_noprof+0x2c9/0x610 [ 113.062495][ T6121] new_slab+0x2c9/0x410 [ 113.066700][ T6121] ___slab_alloc+0xd7d/0x17a0 [ 113.071424][ T6121] __slab_alloc.constprop.0+0x56/0xb0 [ 113.076854][ T6121] __kmalloc_noprof+0x2ec/0x510 [ 113.081732][ T6121] ops_init+0x77/0x5f0 [ 113.085831][ T6121] setup_net+0x21f/0x860 [ 113.090102][ T6121] copy_net_ns+0x2b4/0x6c0 [ 113.094559][ T6121] create_new_namespaces+0x3ea/0xad0 [ 113.099885][ T6121] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 113.105562][ T6121] ksys_unshare+0x45d/0xa40 [ 113.110105][ T6121] __x64_sys_unshare+0x31/0x40 [ 113.114915][ T6121] do_syscall_64+0xcd/0x250 [ 113.119460][ T6121] page last free pid 1 tgid 1 stack trace: [ 113.125275][ T6121] free_unref_page+0x661/0x1080 [ 113.130151][ T6121] free_contig_range+0x133/0x3f0 [ 113.135118][ T6121] destroy_args+0x802/0xa50 [ 113.139662][ T6121] debug_vm_pgtable+0x168e/0x31a0 [ 113.144730][ T6121] do_one_initcall+0x12b/0x700 [ 113.149534][ T6121] kernel_init_freeable+0x5c7/0x900 [ 113.154782][ T6121] kernel_init+0x1c/0x2b0 [ 113.159133][ T6121] ret_from_fork+0x48/0x80 [ 113.163568][ T6121] ret_from_fork_asm+0x1a/0x30 [ 113.168372][ T6121] [ 113.170700][ T6121] Memory state around the buggy address: [ 113.176336][ T6121] ffff88805ba79780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.184415][ T6121] ffff88805ba79800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.192492][ T6121] >ffff88805ba79880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.200577][ T6121] ^ [ 113.207271][ T6121] ffff88805ba79900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.215371][ T6121] ffff88805ba79980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.223464][ T6121] ================================================================== [ 113.243998][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.274976][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.296439][ T6121] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 113.304187][ T6121] CPU: 1 UID: 0 PID: 6121 Comm: syz.5.21 Tainted: G B 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 113.316205][ T6121] Tainted: [B]=BAD_PAGE [ 113.320374][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 113.330443][ T6121] Call Trace: [ 113.333730][ T6121] [ 113.336674][ T6121] dump_stack_lvl+0x3d/0x1f0 [ 113.341307][ T6121] panic+0x71d/0x800 [ 113.345275][ T6121] ? __pfx_panic+0x10/0x10 [ 113.349740][ T6121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.355400][ T6121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.361056][ T6121] ? preempt_schedule_common+0x44/0xc0 [ 113.366555][ T6121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.372209][ T6121] ? preempt_schedule_thunk+0x1a/0x30 [ 113.377627][ T6121] end_report+0x169/0x180 [ 113.381987][ T6121] kasan_report+0xe9/0x110 [ 113.386428][ T6121] ? notifier_chain_register+0x403/0x420 [ 113.392102][ T6121] ? notifier_chain_register+0x403/0x420 [ 113.397779][ T6121] notifier_chain_register+0x403/0x420 [ 113.403288][ T6121] blocking_notifier_chain_register+0x76/0xd0 [ 113.409418][ T6121] ubi_wl_init+0x1018/0x17b0 [ 113.414040][ T6121] ubi_attach+0x1b92/0x4c00 [ 113.418578][ T6121] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 113.424955][ T6121] ? lockdep_init_map_type+0x16d/0x7d0 [ 113.430453][ T6121] ? __pfx_ubi_attach+0x10/0x10 [ 113.435331][ T6121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.440991][ T6121] ? ubi_attach_mtd_dev+0x1543/0x3590 [ 113.446402][ T6121] ubi_attach_mtd_dev+0x158f/0x3590 [ 113.451728][ T6121] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 113.457304][ T6121] ? __pfx_get_mtd_device+0x10/0x10 [ 113.462549][ T6121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.468475][ T6121] ctrl_cdev_ioctl+0x339/0x3d0 [ 113.473278][ T6121] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 113.478598][ T6121] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 113.483915][ T6121] __x64_sys_ioctl+0x193/0x200 [ 113.488808][ T6121] do_syscall_64+0xcd/0x250 [ 113.493615][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.499553][ T6121] RIP: 0033:0x7f7293f85d29 [ 113.503986][ T6121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.523620][ T6121] RSP: 002b:00007f7294d16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.532060][ T6121] RAX: ffffffffffffffda RBX: 00007f7294176160 RCX: 00007f7293f85d29 [ 113.540050][ T6121] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000005 [ 113.548046][ T6121] RBP: 00007f7294001b08 R08: 0000000000000000 R09: 0000000000000000 [ 113.556210][ T6121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.564199][ T6121] R13: 0000000000000000 R14: 00007f7294176160 R15: 00007ffea0c77e88 [ 113.572202][ T6121] [ 113.575336][ T6121] Kernel Offset: disabled [ 113.579747][ T6121] Rebooting in 86400 seconds..