Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. 2024/09/27 18:14:40 ignoring optional flag "sandboxArg"="0" 2024/09/27 18:14:40 parsed 1 programs [ 175.263416][ T5243] cgroup: Unknown subsys name 'net' [ 175.377907][ T5243] cgroup: Unknown subsys name 'cpuset' [ 175.386402][ T5243] cgroup: Unknown subsys name 'rlimit' [ 176.931245][ T5243] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 179.810440][ T5252] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 180.542746][ T4620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.552254][ T4620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.566598][ T4620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.579600][ T4620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.591326][ T4620] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 180.598985][ T4620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 181.664812][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.673522][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.698828][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.709441][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.494745][ T5320] chnl_net:caif_netlink_parms(): no params data found [ 182.559176][ T5320] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.566543][ T5320] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.573947][ T5320] bridge_slave_0: entered allmulticast mode [ 182.582506][ T5320] bridge_slave_0: entered promiscuous mode [ 182.591859][ T5320] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.599634][ T5320] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.606944][ T5320] bridge_slave_1: entered allmulticast mode [ 182.613723][ T5320] bridge_slave_1: entered promiscuous mode [ 182.642857][ T5320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.654036][ T5320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.682911][ T5320] team0: Port device team_slave_0 added [ 182.690687][ T5320] team0: Port device team_slave_1 added [ 182.712365][ T5320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.719833][ T5320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.745770][ T5320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.757989][ T5320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.765016][ T5320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.791031][ T5320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.821924][ T5320] hsr_slave_0: entered promiscuous mode [ 182.828267][ T5320] hsr_slave_1: entered promiscuous mode [ 182.956013][ T5320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 182.967101][ T5320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 182.976498][ T5320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 182.986275][ T5320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 183.064008][ T5320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.083648][ T5320] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.098005][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.105422][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.118104][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.125223][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.254818][ T5320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.288809][ T5320] veth0_vlan: entered promiscuous mode [ 183.298903][ T5320] veth1_vlan: entered promiscuous mode [ 183.322283][ T5320] veth0_macvtap: entered promiscuous mode [ 183.331794][ T5320] veth1_macvtap: entered promiscuous mode [ 183.351142][ T5320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.364423][ T5320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.375941][ T5320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.385174][ T5320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.395257][ T5320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.405180][ T5320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2024/09/27 18:14:52 executed programs: 0 [ 183.535755][ T4620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 183.549295][ T4620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.550938][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.557963][ T4620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 183.578963][ T4620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.588446][ T4620] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 183.595930][ T4620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.629309][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.679206][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.747466][ T5335] chnl_net:caif_netlink_parms(): no params data found [ 183.782933][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.838201][ T5335] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.845532][ T5335] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.852677][ T5335] bridge_slave_0: entered allmulticast mode [ 183.860080][ T5335] bridge_slave_0: entered promiscuous mode [ 183.867708][ T5335] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.875652][ T5335] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.882813][ T5335] bridge_slave_1: entered allmulticast mode [ 183.890158][ T5335] bridge_slave_1: entered promiscuous mode [ 183.920262][ T5335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.932847][ T5335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.962631][ T5335] team0: Port device team_slave_0 added [ 183.970680][ T5335] team0: Port device team_slave_1 added [ 183.993854][ T5335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.001259][ T5335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.027873][ T5335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.041937][ T5335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.049512][ T5335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.076737][ T5335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.110733][ T5335] hsr_slave_0: entered promiscuous mode [ 184.117256][ T5335] hsr_slave_1: entered promiscuous mode [ 184.123370][ T5335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.131915][ T5335] Cannot create hsr debugfs directory [ 185.646251][ T54] Bluetooth: hci0: command tx timeout [ 186.564656][ T12] bridge_slave_1: left allmulticast mode [ 186.570515][ T12] bridge_slave_1: left promiscuous mode [ 186.577397][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.588605][ T12] bridge_slave_0: left allmulticast mode [ 186.594345][ T12] bridge_slave_0: left promiscuous mode [ 186.601333][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.817164][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.827939][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.839759][ T12] bond0 (unregistering): Released all slaves [ 186.963000][ T12] hsr_slave_0: left promiscuous mode [ 186.969441][ T12] hsr_slave_1: left promiscuous mode [ 186.976155][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.983596][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.992297][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.000904][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.021001][ T12] veth1_macvtap: left promiscuous mode [ 187.027184][ T12] veth0_macvtap: left promiscuous mode [ 187.032806][ T12] veth1_vlan: left promiscuous mode [ 187.038351][ T12] veth0_vlan: left promiscuous mode [ 187.389042][ T12] team0 (unregistering): Port device team_slave_1 removed [ 187.419636][ T12] team0 (unregistering): Port device team_slave_0 removed [ 187.724853][ T54] Bluetooth: hci0: command tx timeout [ 187.892323][ T5335] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 187.909842][ T5335] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 187.927507][ T5335] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 187.941734][ T5335] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 188.023634][ T5335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.050399][ T5335] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.066477][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.073812][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.100158][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.107441][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.264832][ T5335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.301866][ T5335] veth0_vlan: entered promiscuous mode [ 188.314040][ T5335] veth1_vlan: entered promiscuous mode [ 188.340916][ T5335] veth0_macvtap: entered promiscuous mode [ 188.350102][ T5335] veth1_macvtap: entered promiscuous mode [ 188.366634][ T5335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.381901][ T5335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.398770][ T5335] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.408790][ T5335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.417693][ T5335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.427174][ T5335] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2024/09/27 18:14:57 executed programs: 2 [ 188.478578][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.491606][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.511858][ T1583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.521169][ T1583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.634365][ T5377] infiniband syz2: set down [ 188.639517][ T5377] infiniband syz2: added ipvlan1 [ 188.667613][ T5377] RDS/IB: syz2: added [ 188.672461][ T5377] smc: adding ib device syz2 with port count 1 [ 188.678804][ T5377] smc: ib device syz2 port 1 has pnetid [ 188.782220][ T5379] syz2: rxe_newlink: already configured on ipvlan1 [ 188.806381][ T5380] syz2: rxe_newlink: already configured on ipvlan1 [ 188.840150][ T5381] syz2: rxe_newlink: already configured on ipvlan1 [ 188.867681][ T5382] syz2: rxe_newlink: already configured on ipvlan1 [ 188.895119][ T5383] syz2: rxe_newlink: already configured on ipvlan1 [ 188.922675][ T5384] syz2: rxe_newlink: already configured on ipvlan1 [ 188.959911][ T5385] syz2: rxe_newlink: already configured on ipvlan1 [ 188.990215][ T5386] syz2: rxe_newlink: already configured on ipvlan1 [ 189.016615][ T5387] syz2: rxe_newlink: already configured on ipvlan1 [ 189.040320][ T5388] syz2: rxe_newlink: already configured on ipvlan1 [ 189.804569][ T54] Bluetooth: hci0: command tx timeout [ 191.884670][ T54] Bluetooth: hci0: command tx timeout 2024/09/27 18:15:02 executed programs: 222 [ 193.791484][ T5611] rxe_newlink: 222 callbacks suppressed [ 193.791500][ T5611] syz2: rxe_newlink: already configured on ipvlan1 [ 193.823749][ T5612] syz2: rxe_newlink: already configured on ipvlan1 [ 193.841616][ T5613] syz2: rxe_newlink: already configured on ipvlan1 [ 193.872720][ T5614] syz2: rxe_newlink: already configured on ipvlan1 [ 193.892538][ T5615] syz2: rxe_newlink: already configured on ipvlan1 [ 193.912659][ T5616] syz2: rxe_newlink: already configured on ipvlan1 [ 193.933123][ T5617] syz2: rxe_newlink: already configured on ipvlan1 [ 193.953092][ T5618] syz2: rxe_newlink: already configured on ipvlan1 [ 193.980670][ T5619] syz2: rxe_newlink: already configured on ipvlan1 [ 194.000581][ T5620] syz2: rxe_newlink: already configured on ipvlan1 [ 194.448258][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.455197][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 2024/09/27 18:15:07 executed programs: 484 [ 198.803634][ T5872] rxe_newlink: 251 callbacks suppressed [ 198.803650][ T5872] syz2: rxe_newlink: already configured on ipvlan1 [ 198.828504][ T5873] syz2: rxe_newlink: already configured on ipvlan1 [ 198.851242][ T5874] syz2: rxe_newlink: already configured on ipvlan1 [ 198.871146][ T5875] syz2: rxe_newlink: already configured on ipvlan1 [ 198.891386][ T5876] syz2: rxe_newlink: already configured on ipvlan1 [ 198.910617][ T5877] syz2: rxe_newlink: already configured on ipvlan1 [ 198.929043][ T5878] syz2: rxe_newlink: already configured on ipvlan1 [ 198.952471][ T5879] syz2: rxe_newlink: already configured on ipvlan1 [ 198.971800][ T5880] syz2: rxe_newlink: already configured on ipvlan1 [ 198.992580][ T5881] syz2: rxe_newlink: already configured on ipvlan1 [ 200.872177][ T4620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.881509][ T4620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.889767][ T4620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.899815][ T4620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.908148][ T4620] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 200.917411][ T4620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.038714][ T1583] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.105853][ T1583] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.143359][ T5980] chnl_net:caif_netlink_parms(): no params data found [ 201.169673][ T1583] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.212669][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.221981][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.229792][ T5980] bridge_slave_0: entered allmulticast mode [ 201.237090][ T5980] bridge_slave_0: entered promiscuous mode [ 201.258280][ T1583] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.271662][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.279571][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.286823][ T5980] bridge_slave_1: entered allmulticast mode [ 201.293539][ T5980] bridge_slave_1: entered promiscuous mode [ 201.318381][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.332144][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.362311][ T5980] team0: Port device team_slave_0 added [ 201.370503][ T5980] team0: Port device team_slave_1 added [ 201.398033][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.405539][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.432992][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.446092][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.453862][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.480785][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.543410][ T1583] bridge_slave_1: left allmulticast mode [ 201.549525][ T1583] bridge_slave_1: left promiscuous mode [ 201.555841][ T1583] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.565825][ T1583] bridge_slave_0: left allmulticast mode [ 201.571613][ T1583] bridge_slave_0: left promiscuous mode [ 201.578233][ T1583] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.795578][ T1583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.806872][ T1583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.817584][ T1583] bond0 (unregistering): Released all slaves [ 201.849578][ T5980] hsr_slave_0: entered promiscuous mode [ 201.857873][ T5980] hsr_slave_1: entered promiscuous mode [ 202.273882][ T1583] hsr_slave_0: left promiscuous mode [ 202.279940][ T1583] hsr_slave_1: left promiscuous mode [ 202.289427][ T1583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.297946][ T1583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.306299][ T1583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.314170][ T1583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.329986][ T1583] veth1_macvtap: left promiscuous mode [ 202.335732][ T1583] veth0_macvtap: left promiscuous mode [ 202.341487][ T1583] veth1_vlan: left promiscuous mode [ 202.346905][ T1583] veth0_vlan: left promiscuous mode [ 202.460388][ T11] smc: removing ib device syz2 [ 202.628002][ T1583] team0 (unregistering): Port device team_slave_1 removed [ 202.660275][ T1583] team0 (unregistering): Port device team_slave_0 removed [ 202.948045][ T60] ================================================================== [ 202.956169][ T60] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 202.964998][ T60] Read of size 8 at addr ffff88806ea3a308 by task kworker/1:1/60 [ 202.972724][ T60] [ 202.975066][ T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/1:1 Not tainted 6.11.0-syzkaller-11503-gd505d3593b52 #0 [ 202.985532][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 202.995790][ T60] Workqueue: events smc_ib_port_event_work [ 203.001761][ T60] Call Trace: [ 203.004757][ T54] Bluetooth: hci0: command tx timeout [ 203.005048][ T60] [ 203.005061][ T60] dump_stack_lvl+0x241/0x360 [ 203.018193][ T60] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.023434][ T60] ? __pfx__printk+0x10/0x10 [ 203.028041][ T60] ? _printk+0xd5/0x120 [ 203.032202][ T60] ? __virt_addr_valid+0x183/0x530 [ 203.037334][ T60] ? __virt_addr_valid+0x183/0x530 [ 203.042461][ T60] print_report+0x169/0x550 [ 203.046972][ T60] ? __virt_addr_valid+0x183/0x530 [ 203.052089][ T60] ? __virt_addr_valid+0x183/0x530 [ 203.057370][ T60] ? __virt_addr_valid+0x45f/0x530 [ 203.062570][ T60] ? __phys_addr+0xba/0x170 [ 203.067097][ T60] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 203.073076][ T60] kasan_report+0x143/0x180 [ 203.077588][ T60] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 203.083608][ T60] __ethtool_get_link_ksettings+0x6e/0x190 [ 203.089615][ T60] ib_get_eth_speed+0x160/0x800 [ 203.094524][ T60] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 203.102246][ T60] ? rxe_query_port+0x4f/0x260 [ 203.108367][ T60] rxe_query_port+0x76/0x260 [ 203.113002][ T60] ib_query_port+0x166/0x7d0 [ 203.117640][ T60] smc_ib_port_event_work+0x14e/0xa50 [ 203.123052][ T60] ? process_scheduled_works+0x976/0x1850 [ 203.128812][ T60] process_scheduled_works+0xa63/0x1850 [ 203.134395][ T60] ? __pfx_process_scheduled_works+0x10/0x10 [ 203.140573][ T60] ? assign_work+0x364/0x3d0 [ 203.145180][ T60] worker_thread+0x870/0xd30 [ 203.149786][ T60] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 203.155705][ T60] ? __kthread_parkme+0x169/0x1d0 [ 203.160776][ T60] ? __pfx_worker_thread+0x10/0x10 [ 203.166155][ T60] kthread+0x2f0/0x390 [ 203.170229][ T60] ? __pfx_worker_thread+0x10/0x10 [ 203.175365][ T60] ? __pfx_kthread+0x10/0x10 [ 203.180060][ T60] ret_from_fork+0x4b/0x80 [ 203.184504][ T60] ? __pfx_kthread+0x10/0x10 [ 203.189125][ T60] ret_from_fork_asm+0x1a/0x30 [ 203.193895][ T60] [ 203.196926][ T60] [ 203.199260][ T60] Allocated by task 5335: [ 203.203583][ T60] kasan_save_track+0x3f/0x80 [ 203.208266][ T60] __kasan_kmalloc+0x98/0xb0 [ 203.212961][ T60] __kmalloc_node_noprof+0x22a/0x440 [ 203.218290][ T60] __kvmalloc_node_noprof+0x72/0x190 [ 203.223589][ T60] alloc_netdev_mqs+0x9b/0x1000 [ 203.228532][ T60] rtnl_create_link+0x2f9/0xc20 [ 203.233382][ T60] rtnl_newlink+0x1423/0x20a0 [ 203.238077][ T60] rtnetlink_rcv_msg+0x73f/0xcf0 [ 203.243034][ T60] netlink_rcv_skb+0x1e3/0x430 [ 203.247894][ T60] netlink_unicast+0x7f6/0x990 [ 203.252664][ T60] netlink_sendmsg+0x8e4/0xcb0 [ 203.257439][ T60] __sock_sendmsg+0x221/0x270 [ 203.262121][ T60] __sys_sendto+0x39b/0x4f0 [ 203.266636][ T60] __x64_sys_sendto+0xde/0x100 [ 203.271406][ T60] do_syscall_64+0xf3/0x230 [ 203.275917][ T60] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.281843][ T60] [ 203.284161][ T60] Freed by task 1583: [ 203.288136][ T60] kasan_save_track+0x3f/0x80 [ 203.292807][ T60] kasan_save_free_info+0x40/0x50 [ 203.297862][ T60] __kasan_slab_free+0x59/0x70 [ 203.302634][ T60] kfree+0x1a0/0x440 [ 203.306550][ T60] device_release+0x99/0x1c0 [ 203.311135][ T60] kobject_put+0x22f/0x480 [ 203.315567][ T60] netdev_run_todo+0xe79/0x1000 [ 203.320436][ T60] default_device_exit_batch+0xa24/0xaa0 [ 203.326098][ T60] cleanup_net+0x89d/0xcc0 [ 203.330552][ T60] process_scheduled_works+0xa63/0x1850 [ 203.336135][ T60] worker_thread+0x870/0xd30 [ 203.340776][ T60] kthread+0x2f0/0x390 [ 203.344844][ T60] ret_from_fork+0x4b/0x80 [ 203.349449][ T60] ret_from_fork_asm+0x1a/0x30 [ 203.354216][ T60] [ 203.356548][ T60] The buggy address belongs to the object at ffff88806ea3a000 [ 203.356548][ T60] which belongs to the cache kmalloc-cg-4k of size 4096 [ 203.370877][ T60] The buggy address is located 776 bytes inside of [ 203.370877][ T60] freed 4096-byte region [ffff88806ea3a000, ffff88806ea3b000) [ 203.384855][ T60] [ 203.387178][ T60] The buggy address belongs to the physical page: [ 203.393593][ T60] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6ea38 [ 203.402447][ T60] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 203.410942][ T60] memcg:ffff88802c1c9001 [ 203.415190][ T60] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 203.422783][ T60] page_type: f5(slab) [ 203.426787][ T60] raw: 00fff00000000040 ffff88801ac4f500 dead000000000122 0000000000000000 [ 203.435389][ T60] raw: 0000000000000000 0000000000040004 00000001f5000000 ffff88802c1c9001 [ 203.444270][ T60] head: 00fff00000000040 ffff88801ac4f500 dead000000000122 0000000000000000 [ 203.452959][ T60] head: 0000000000000000 0000000000040004 00000001f5000000 ffff88802c1c9001 [ 203.462062][ T60] head: 00fff00000000003 ffffea0001ba8e01 ffffffffffffffff 0000000000000000 [ 203.471021][ T60] head: 0000000700000008 0000000000000000 00000000ffffffff 0000000000000000 [ 203.479690][ T60] page dumped because: kasan: bad access detected [ 203.486110][ T60] page_owner tracks the page as allocated [ 203.491834][ T60] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5335, tgid 5335 (syz-executor), ts 184149259579, free_ts 182141357499 [ 203.514608][ T60] post_alloc_hook+0x1f3/0x230 [ 203.519421][ T60] get_page_from_freelist+0x3045/0x3190 [ 203.524988][ T60] __alloc_pages_noprof+0x256/0x6c0 [ 203.530252][ T60] alloc_pages_mpol_noprof+0x3e8/0x680 [ 203.535925][ T60] alloc_slab_page+0x6a/0x120 [ 203.541513][ T60] allocate_slab+0x5a/0x2f0 [ 203.546205][ T60] ___slab_alloc+0xcd1/0x14b0 [ 203.550917][ T60] __slab_alloc+0x58/0xa0 [ 203.555282][ T60] __kmalloc_noprof+0x25a/0x400 [ 203.560284][ T60] __register_sysctl_table+0x65/0x1550 [ 203.565770][ T60] __addrconf_sysctl_register+0x234/0x3a0 [ 203.571490][ T60] addrconf_sysctl_register+0x167/0x1c0 [ 203.577045][ T60] ipv6_add_dev+0xcf6/0x1220 [ 203.581745][ T60] addrconf_notify+0x6a7/0x1020 [ 203.586627][ T60] notifier_call_chain+0x19f/0x3e0 [ 203.591743][ T60] register_netdevice+0x167f/0x1b00 [ 203.596960][ T60] page last free pid 5308 tgid 5308 stack trace: [ 203.603392][ T60] free_unref_page+0xcfb/0xf20 [ 203.608366][ T60] vfree+0x186/0x2e0 [ 203.612473][ T60] kcov_close+0x28/0x50 [ 203.616660][ T60] __fput+0x23f/0x880 [ 203.620681][ T60] task_work_run+0x24f/0x310 [ 203.625279][ T60] do_exit+0xa2f/0x28e0 [ 203.629492][ T60] do_group_exit+0x207/0x2c0 [ 203.634180][ T60] get_signal+0x176f/0x1810 [ 203.638691][ T60] arch_do_signal_or_restart+0x96/0x860 [ 203.644249][ T60] syscall_exit_to_user_mode+0xc9/0x370 [ 203.649805][ T60] do_syscall_64+0x100/0x230 [ 203.654395][ T60] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.660304][ T60] [ 203.662620][ T60] Memory state around the buggy address: [ 203.668241][ T60] ffff88806ea3a200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.676306][ T60] ffff88806ea3a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.684379][ T60] >ffff88806ea3a300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.692431][ T60] ^ [ 203.696759][ T60] ffff88806ea3a380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.704830][ T60] ffff88806ea3a400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.712989][ T60] ================================================================== [ 203.721544][ T60] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 203.728764][ T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/1:1 Not tainted 6.11.0-syzkaller-11503-gd505d3593b52 #0 [ 203.739012][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 203.749068][ T60] Workqueue: events smc_ib_port_event_work [ 203.754904][ T60] Call Trace: [ 203.758194][ T60] [ 203.761125][ T60] dump_stack_lvl+0x241/0x360 [ 203.765812][ T60] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.771022][ T60] ? __pfx__printk+0x10/0x10 [ 203.775623][ T60] ? preempt_schedule+0xe1/0xf0 [ 203.780487][ T60] ? vscnprintf+0x5d/0x90 [ 203.784850][ T60] panic+0x349/0x880 [ 203.788765][ T60] ? check_panic_on_warn+0x21/0xb0 [ 203.793894][ T60] ? __pfx_panic+0x10/0x10 [ 203.798332][ T60] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 203.804333][ T60] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 203.810676][ T60] ? print_report+0x502/0x550 [ 203.815362][ T60] check_panic_on_warn+0x86/0xb0 [ 203.820322][ T60] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 203.826326][ T60] end_report+0x77/0x160 [ 203.830868][ T60] kasan_report+0x154/0x180 [ 203.835419][ T60] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 203.841461][ T60] __ethtool_get_link_ksettings+0x6e/0x190 [ 203.847653][ T60] ib_get_eth_speed+0x160/0x800 [ 203.853282][ T60] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 203.859352][ T60] ? rxe_query_port+0x4f/0x260 [ 203.864497][ T60] rxe_query_port+0x76/0x260 [ 203.869147][ T60] ib_query_port+0x166/0x7d0 [ 203.873794][ T60] smc_ib_port_event_work+0x14e/0xa50 [ 203.879680][ T60] ? process_scheduled_works+0x976/0x1850 [ 203.886051][ T60] process_scheduled_works+0xa63/0x1850 [ 203.891908][ T60] ? __pfx_process_scheduled_works+0x10/0x10 [ 203.898740][ T60] ? assign_work+0x364/0x3d0 [ 203.904091][ T60] worker_thread+0x870/0xd30 [ 203.908759][ T60] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 203.914875][ T60] ? __kthread_parkme+0x169/0x1d0 [ 203.919934][ T60] ? __pfx_worker_thread+0x10/0x10 [ 203.925066][ T60] kthread+0x2f0/0x390 [ 203.929149][ T60] ? __pfx_worker_thread+0x10/0x10 [ 203.934280][ T60] ? __pfx_kthread+0x10/0x10 [ 203.938889][ T60] ret_from_fork+0x4b/0x80 [ 203.943331][ T60] ? __pfx_kthread+0x10/0x10 [ 203.947934][ T60] ret_from_fork_asm+0x1a/0x30 [ 203.952728][ T60] [ 203.956116][ T60] Kernel Offset: disabled [ 203.960456][ T60] Rebooting in 86400 seconds..