Warning: Permanently added '10.128.10.3' (ED25519) to the list of known hosts. 2023/10/27 11:00:35 ignoring optional flag "sandboxArg"="0" 2023/10/27 11:00:35 parsed 1 programs [ 97.484520][ T27] kauditd_printk_skb: 76 callbacks suppressed [ 97.484536][ T27] audit: type=1400 audit(1698404435.780:205): avc: denied { getattr } for pid=5374 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 97.514402][ T27] audit: type=1400 audit(1698404435.780:206): avc: denied { read } for pid=5374 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 97.535754][ T27] audit: type=1400 audit(1698404435.780:207): avc: denied { open } for pid=5374 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 97.589161][ T27] audit: type=1400 audit(1698404435.890:208): avc: denied { mounton } for pid=5379 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 97.614699][ T27] audit: type=1400 audit(1698404435.890:209): avc: denied { mount } for pid=5379 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 97.638727][ T27] audit: type=1400 audit(1698404435.910:210): avc: denied { read write } for pid=5379 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 97.666653][ T27] audit: type=1400 audit(1698404435.910:211): avc: denied { open } for pid=5379 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 97.693414][ T27] audit: type=1400 audit(1698404435.980:212): avc: denied { unlink } for pid=5379 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 98.200379][ T27] audit: type=1400 audit(1698404436.500:213): avc: denied { relabelto } for pid=5381 comm="mkswap" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2023/10/27 11:00:37 executed programs: 0 [ 99.570360][ T5379] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 99.732975][ T5034] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.750843][ T5399] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.758792][ T5399] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.766482][ T5399] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.776424][ T5399] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.784531][ T5400] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.792162][ T5399] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.806192][ T5400] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.813661][ T5400] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.823453][ T5400] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.835122][ T5400] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 99.849014][ T4434] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.856138][ T27] audit: type=1400 audit(1698404438.140:214): avc: denied { mounton } for pid=5392 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 99.883491][ T5400] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.893968][ T5399] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.903032][ T5034] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.924560][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.932061][ T49] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 99.935317][ T5034] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.939509][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.964695][ T4434] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.974900][ T5034] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.985285][ T5034] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.995133][ T5034] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 100.004377][ T5034] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.020710][ T4434] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.036723][ T4434] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.055051][ T5400] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.063876][ T5400] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.071693][ T5400] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 100.080106][ T5400] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.111022][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 100.122175][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 100.135701][ T4434] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 100.145887][ T4434] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 100.157184][ T4434] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 100.164638][ T4434] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 100.788382][ T5397] chnl_net:caif_netlink_parms(): no params data found [ 100.986719][ T5401] chnl_net:caif_netlink_parms(): no params data found [ 101.129091][ T5397] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.136731][ T5397] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.144388][ T5397] bridge_slave_0: entered allmulticast mode [ 101.153100][ T5397] bridge_slave_0: entered promiscuous mode [ 101.189909][ T5392] chnl_net:caif_netlink_parms(): no params data found [ 101.210317][ T5397] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.219115][ T5397] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.226678][ T5397] bridge_slave_1: entered allmulticast mode [ 101.233668][ T5397] bridge_slave_1: entered promiscuous mode [ 101.317964][ T5401] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.325184][ T5401] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.332500][ T5401] bridge_slave_0: entered allmulticast mode [ 101.339943][ T5401] bridge_slave_0: entered promiscuous mode [ 101.383019][ T5402] chnl_net:caif_netlink_parms(): no params data found [ 101.438689][ T5407] chnl_net:caif_netlink_parms(): no params data found [ 101.449892][ T5401] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.460548][ T5401] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.468592][ T5401] bridge_slave_1: entered allmulticast mode [ 101.476728][ T5401] bridge_slave_1: entered promiscuous mode [ 101.503065][ T5397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.606724][ T5397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.694987][ T5401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.715718][ T5401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.741512][ T5397] team0: Port device team_slave_0 added [ 101.773954][ T5406] chnl_net:caif_netlink_parms(): no params data found [ 101.811257][ T5397] team0: Port device team_slave_1 added [ 101.850199][ T5392] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.859180][ T5392] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.866820][ T5392] bridge_slave_0: entered allmulticast mode [ 101.874065][ T5392] bridge_slave_0: entered promiscuous mode [ 101.881172][ T4434] Bluetooth: hci0: command 0x0409 tx timeout [ 101.963744][ T5392] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.974532][ T4434] Bluetooth: hci1: command 0x0409 tx timeout [ 101.981847][ T5392] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.989233][ T5392] bridge_slave_1: entered allmulticast mode [ 101.997444][ T5392] bridge_slave_1: entered promiscuous mode [ 102.035246][ T4434] Bluetooth: hci2: command 0x0409 tx timeout [ 102.086607][ T5401] team0: Port device team_slave_0 added [ 102.092777][ T5402] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.100516][ T5402] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.108259][ T5402] bridge_slave_0: entered allmulticast mode [ 102.116099][ T5400] Bluetooth: hci3: command 0x0409 tx timeout [ 102.116590][ T5402] bridge_slave_0: entered promiscuous mode [ 102.122632][ T4434] Bluetooth: hci4: command 0x0409 tx timeout [ 102.139352][ T5397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.146561][ T5397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.173208][ T5397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.187357][ T5397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.194623][ T4434] Bluetooth: hci5: command 0x0409 tx timeout [ 102.195344][ T5397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.227192][ T5397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.267990][ T5407] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.275319][ T5407] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.282487][ T5407] bridge_slave_0: entered allmulticast mode [ 102.291058][ T5407] bridge_slave_0: entered promiscuous mode [ 102.301302][ T5401] team0: Port device team_slave_1 added [ 102.329378][ T5402] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.336541][ T5402] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.343678][ T5402] bridge_slave_1: entered allmulticast mode [ 102.352449][ T5402] bridge_slave_1: entered promiscuous mode [ 102.383625][ T5392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.399628][ T5392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.437261][ T5407] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.444402][ T5407] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.452037][ T5407] bridge_slave_1: entered allmulticast mode [ 102.459283][ T5407] bridge_slave_1: entered promiscuous mode [ 102.502186][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.512992][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.539887][ T5401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.573426][ T5402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.651045][ T5406] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.659141][ T5406] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.668068][ T5406] bridge_slave_0: entered allmulticast mode [ 102.675731][ T5406] bridge_slave_0: entered promiscuous mode [ 102.702100][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.709131][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.736413][ T5401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.757236][ T5402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.790114][ T5392] team0: Port device team_slave_0 added [ 102.801163][ T5392] team0: Port device team_slave_1 added [ 102.814363][ T5406] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.821626][ T5406] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.828860][ T5406] bridge_slave_1: entered allmulticast mode [ 102.836885][ T5406] bridge_slave_1: entered promiscuous mode [ 102.863927][ T5407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.878077][ T5407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.908803][ T5397] hsr_slave_0: entered promiscuous mode [ 102.916341][ T5397] hsr_slave_1: entered promiscuous mode [ 102.973361][ T5406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.039595][ T5402] team0: Port device team_slave_0 added [ 103.049631][ T5402] team0: Port device team_slave_1 added [ 103.057349][ T5392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.064388][ T5392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.090575][ T5392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.105269][ T5392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.112230][ T5392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.138450][ T5392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.180595][ T5406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.200724][ T5407] team0: Port device team_slave_0 added [ 103.212137][ T5407] team0: Port device team_slave_1 added [ 103.280858][ T5401] hsr_slave_0: entered promiscuous mode [ 103.287382][ T5401] hsr_slave_1: entered promiscuous mode [ 103.293523][ T5401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.301862][ T5401] Cannot create hsr debugfs directory [ 103.389946][ T5407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.397066][ T5407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.423316][ T5407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.437231][ T5402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.444208][ T5402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.470349][ T5402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.484646][ T5402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.491628][ T5402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.517818][ T5402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.543621][ T5406] team0: Port device team_slave_0 added [ 103.567850][ T5407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.575203][ T5407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.601314][ T5407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.648256][ T5406] team0: Port device team_slave_1 added [ 103.775633][ T5406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.782585][ T5406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.809691][ T5406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.873567][ T5402] hsr_slave_0: entered promiscuous mode [ 103.882971][ T5402] hsr_slave_1: entered promiscuous mode [ 103.892450][ T5402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.900330][ T5402] Cannot create hsr debugfs directory [ 103.922594][ T5406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.929774][ T5406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.956300][ T5406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.965716][ T4434] Bluetooth: hci0: command 0x041b tx timeout [ 103.986257][ T5392] hsr_slave_0: entered promiscuous mode [ 103.992815][ T5392] hsr_slave_1: entered promiscuous mode [ 103.999104][ T5392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.007141][ T5392] Cannot create hsr debugfs directory [ 104.042062][ T4434] Bluetooth: hci1: command 0x041b tx timeout [ 104.045665][ T5407] hsr_slave_0: entered promiscuous mode [ 104.054744][ T5407] hsr_slave_1: entered promiscuous mode [ 104.061003][ T5407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.069013][ T5407] Cannot create hsr debugfs directory [ 104.114698][ T4434] Bluetooth: hci2: command 0x041b tx timeout [ 104.204696][ T4434] Bluetooth: hci4: command 0x041b tx timeout [ 104.210745][ T4434] Bluetooth: hci3: command 0x041b tx timeout [ 104.251205][ T5406] hsr_slave_0: entered promiscuous mode [ 104.261483][ T5406] hsr_slave_1: entered promiscuous mode [ 104.268172][ T5406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.276406][ T5406] Cannot create hsr debugfs directory [ 104.284701][ T4434] Bluetooth: hci5: command 0x041b tx timeout [ 104.918773][ T5397] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.962275][ T5397] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.972634][ T5397] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.048987][ T5397] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.136312][ T5402] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.169048][ T5402] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.181498][ T5402] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.192280][ T5402] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.351857][ T5401] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.372834][ T5401] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.411838][ T5401] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.460918][ T5401] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.542995][ T5397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.689365][ T5407] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.736802][ T5407] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.767054][ T5407] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.964982][ T5407] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.038947][ T4434] Bluetooth: hci0: command 0x040f tx timeout [ 106.114775][ T4434] Bluetooth: hci1: command 0x040f tx timeout [ 106.204885][ T4434] Bluetooth: hci2: command 0x040f tx timeout [ 106.274714][ T4434] Bluetooth: hci3: command 0x040f tx timeout [ 106.280774][ T4434] Bluetooth: hci4: command 0x040f tx timeout [ 106.310795][ T5397] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.344711][ T5402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.356661][ T5400] Bluetooth: hci5: command 0x040f tx timeout [ 106.572987][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.580261][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.629586][ T5402] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.707043][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.714265][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.733465][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.740710][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.910960][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.918228][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.192656][ T5397] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.203762][ T5397] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.387268][ T5392] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.406669][ T5392] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.512366][ T5407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.534581][ T5392] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.654744][ T5392] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.679809][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 107.679823][ T27] audit: type=1400 audit(1698404445.970:216): avc: denied { sys_module } for pid=5402 comm="syz-executor.4" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 107.840552][ T5401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.068529][ T5407] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.117485][ T5400] Bluetooth: hci0: command 0x0419 tx timeout [ 108.193370][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.200637][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.208715][ T5400] Bluetooth: hci1: command 0x0419 tx timeout [ 108.227152][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.234331][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.248379][ T5406] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.274789][ T5400] Bluetooth: hci2: command 0x0419 tx timeout [ 108.291984][ T5406] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.323614][ T5406] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.339897][ T5401] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.367077][ T5400] Bluetooth: hci4: command 0x0419 tx timeout [ 108.367085][ T4434] Bluetooth: hci3: command 0x0419 tx timeout [ 108.385839][ T5406] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.434648][ T4434] Bluetooth: hci5: command 0x0419 tx timeout [ 108.506625][ T5402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.516474][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.523698][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.609679][ T5397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.646701][ T5043] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.653907][ T5043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.060485][ T5392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.262567][ T5401] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 109.285007][ T5401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.334181][ T5392] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.432820][ T5397] veth0_vlan: entered promiscuous mode [ 109.508747][ T5406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.556552][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.563758][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.669248][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.676525][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.742949][ T5406] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.770420][ T5397] veth1_vlan: entered promiscuous mode [ 109.810566][ T5407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.834357][ T5402] veth0_vlan: entered promiscuous mode [ 109.903553][ T5044] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.910880][ T5044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.023053][ T2915] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.030331][ T2915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.181036][ T5402] veth1_vlan: entered promiscuous mode [ 110.314090][ T5401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.370634][ T5397] veth0_macvtap: entered promiscuous mode [ 110.490130][ T5397] veth1_macvtap: entered promiscuous mode [ 110.514125][ T5407] veth0_vlan: entered promiscuous mode [ 110.639775][ T5402] veth0_macvtap: entered promiscuous mode [ 110.653767][ T5407] veth1_vlan: entered promiscuous mode [ 110.739831][ T5402] veth1_macvtap: entered promiscuous mode [ 110.863051][ T5397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.930567][ T5402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.983282][ T5402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.037153][ T5402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.087344][ T5397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.147768][ T5402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.171567][ T5402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.202175][ T5402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.300398][ T5397] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.322834][ T5397] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.334590][ T5397] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.343306][ T5397] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.371542][ T5402] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.380490][ T5402] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.389953][ T5402] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.399903][ T5402] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.461674][ T5392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.537577][ T5407] veth0_macvtap: entered promiscuous mode [ 111.693427][ T5406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.705879][ T5407] veth1_macvtap: entered promiscuous mode [ 111.747648][ T5401] veth0_vlan: entered promiscuous mode [ 111.907848][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.921556][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.958948][ T5401] veth1_vlan: entered promiscuous mode [ 112.081176][ T5392] veth0_vlan: entered promiscuous mode [ 112.110008][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.129683][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.160349][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.181071][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.199568][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.210770][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.233829][ T5407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.335841][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.354115][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.376956][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.397593][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.417161][ T5407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.490890][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.503461][ T5407] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.523717][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.531054][ T5407] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.531141][ T5407] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.531331][ T5407] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.607732][ T5406] veth0_vlan: entered promiscuous mode [ 112.621049][ T5392] veth1_vlan: entered promiscuous mode [ 112.712012][ T27] audit: type=1400 audit(1698404451.010:217): avc: denied { mounton } for pid=5397 comm="syz-executor.3" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 112.723746][ T5401] veth0_macvtap: entered promiscuous mode [ 112.783848][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.812241][ T5406] veth1_vlan: entered promiscuous mode [ 112.814360][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.890752][ T5401] veth1_macvtap: entered promiscuous mode [ 113.181633][ T5392] veth0_macvtap: entered promiscuous mode [ 113.218741][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.242156][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.275571][ T5406] veth0_macvtap: entered promiscuous mode [ 113.321180][ T5392] veth1_macvtap: entered promiscuous mode [ 113.449784][ T5406] veth1_macvtap: entered promiscuous mode [ 113.497030][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.499910][ T5598] loop3: detected capacity change from 0 to 14901 [ 113.531156][ T27] audit: type=1400 audit(1698404451.830:218): avc: denied { mounton } for pid=5597 comm="syz-executor.3" path="/root/syzkaller-testdir3464682415/syzkaller.LpU0q8/0/file0" dev="sda1" ino=1954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 113.531325][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.580583][ T5598] jfs_mount: diMount failed w/rc = -5 [ 113.581434][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.594317][ T5598] Mount JFS Failure: -5 [ 113.608181][ T5598] jfs_mount failed w/return code = -5 [ 113.614882][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.630391][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.654910][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.679572][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.695088][ C1] ================================================================== [ 113.700286][ T5605] loop4: detected capacity change from 0 to 14901 [ 113.703156][ C1] BUG: KASAN: slab-use-after-free in jfs_free_inode+0xf8/0x100 [ 113.703191][ C1] Write of size 8 at addr ffff88802c11f028 by task dhcpcd-run-hook/5606 [ 113.710276][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.717267][ C1] [ 113.717274][ C1] CPU: 1 PID: 5606 Comm: dhcpcd-run-hook Not tainted 6.6.0-rc6-syzkaller-00355-gfe3cfe869d5e-dirty #0 [ 113.717299][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 113.717310][ C1] Call Trace: [ 113.717318][ C1] [ 113.717325][ C1] dump_stack_lvl+0xd9/0x1b0 [ 113.717361][ C1] print_report+0xc4/0x620 [ 113.717385][ C1] ? __virt_addr_valid+0x5e/0x2d0 [ 113.717413][ C1] ? __phys_addr+0xc6/0x140 [ 113.717440][ C1] kasan_report+0xda/0x110 [ 113.717464][ C1] ? jfs_free_inode+0xf8/0x100 [ 113.717489][ C1] ? jfs_free_inode+0xf8/0x100 [ 113.717515][ C1] ? rcu_core+0x803/0x1bb0 [ 113.717540][ C1] jfs_free_inode+0xf8/0x100 [ 113.717566][ C1] ? jfs_sync_fs+0xa0/0xa0 [ 113.717588][ C1] i_callback+0x43/0x70 [ 113.717622][ C1] rcu_core+0x805/0x1bb0 [ 113.717650][ C1] ? __pick_next_task_fair+0x10/0x10 [ 113.717677][ C1] ? rcu_report_dead+0x620/0x620 [ 113.717705][ C1] ? mark_held_locks+0x9f/0xe0 [ 113.717736][ C1] __do_softirq+0x218/0x965 [ 113.717772][ C1] ? __lock_text_end+0x5/0x5 [ 113.717800][ C1] irq_exit_rcu+0xb7/0x120 [ 113.717819][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 113.717848][ C1] [ 113.717855][ C1] [ 113.717862][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 113.717887][ C1] RIP: 0010:unwind_next_frame+0x1a85/0x2390 [ 113.717925][ C1] Code: c6 84 c9 0f 95 c1 40 84 ce 0f 85 88 08 00 00 83 e0 07 38 c2 0f 9e c1 84 d2 0f 95 c0 84 c1 0f 85 73 08 00 00 4d 0f bf 64 24 02 08 00 00 00 48 89 df 4d 01 ec 4c 89 e6 e8 f8 e2 ff ff 31 ff 41 [ 113.717957][ C1] RSP: 0018:ffffc9000360f528 EFLAGS: 00000246 [ 113.717977][ C1] RAX: 0000000000000000 RBX: ffffc9000360f5a8 RCX: 0000000000000001 [ 113.717993][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff8f5fe9e0 [ 113.718009][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000004 [ 113.718023][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffffffffffe0 [ 113.718038][ C1] R13: ffffc9000360f930 R14: 0000000000000001 R15: 0000000000000001 [ 113.718059][ C1] ? unwind_next_frame+0x1a25/0x2390 [ 113.718093][ C1] ? __kasan_slab_alloc+0x81/0x90 [ 113.718119][ C1] ? write_profile+0x450/0x450 [ 113.718149][ C1] arch_stack_walk+0xfa/0x170 [ 113.718173][ C1] ? kmem_cache_alloc+0x159/0x400 [ 113.718197][ C1] stack_trace_save+0x96/0xd0 [ 113.718228][ C1] ? filter_irq_stacks+0x90/0x90 [ 113.718258][ C1] ? __lock_acquire+0xc8f/0x5de0 [ 113.730778][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.737061][ C1] kasan_save_stack+0x33/0x50 [ 113.737092][ C1] ? kasan_save_stack+0x33/0x50 [ 113.737114][ C1] ? kasan_set_track+0x25/0x30 [ 113.737134][ C1] ? __kasan_slab_alloc+0x81/0x90 [ 113.737167][ C1] kasan_set_track+0x25/0x30 [ 113.737190][ C1] __kasan_slab_alloc+0x81/0x90 [ 113.737212][ C1] kmem_cache_alloc+0x159/0x400 [ 113.737233][ C1] vm_area_dup+0x21/0x2f0 [ 113.737256][ C1] dup_mmap+0x93c/0x1d80 [ 113.737280][ C1] ? replace_mm_exe_file+0x680/0x680 [ 113.748987][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.750495][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 113.750539][ C1] ? mm_init+0xb2f/0xf60 [ 113.761638][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.763836][ C1] copy_process+0x6bff/0x73f0 [ 113.763871][ C1] ? pidfd_prepare+0x80/0x80 [ 113.767277][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.771272][ C1] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 113.771309][ C1] ? find_held_lock+0x2d/0x110 [ 113.776477][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.780788][ C1] kernel_clone+0xfd/0x920 [ 113.780818][ C1] ? create_io_thread+0xe0/0xe0 [ 113.795076][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.799287][ C1] __do_sys_clone+0xba/0x100 [ 113.799318][ C1] ? kernel_clone+0x920/0x920 [ 113.809771][ T5401] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.812701][ C1] ? syscall_enter_from_user_mode+0x26/0x80 [ 113.812740][ C1] do_syscall_64+0x38/0xb0 [ 113.817040][ T5401] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.821086][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.821116][ C1] RIP: 0033:0x7f0e3f393a12 [ 113.827364][ T5401] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.831375][ C1] Code: 41 5d 41 5e 41 5f c3 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 e7 43 0f 00 f7 d8 64 89 02 48 83 [ 113.831400][ C1] RSP: 002b:00007fff35d052e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 113.836844][ T5401] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.840720][ C1] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f0e3f393a12 [ 113.840737][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 113.840752][ C1] RBP: 000056225d3c9930 R08: 0000000000000000 R09: 00007f0e3f488b20 [ 113.840766][ C1] R10: 00007f0e3f259650 R11: 0000000000000246 R12: 0000000000000084 [ 113.840780][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000024 [ 113.840798][ C1] [ 113.840805][ C1] [ 113.840809][ C1] Allocated by task 5598: [ 113.840819][ C1] kasan_save_stack+0x33/0x50 [ 113.840845][ C1] kasan_set_track+0x25/0x30 [ 113.840863][ C1] __kasan_kmalloc+0xa3/0xb0 [ 113.840884][ C1] jfs_fill_super+0xe5/0xd20 [ 113.840909][ C1] mount_bdev+0x1f3/0x2e0 [ 113.840946][ C1] legacy_get_tree+0x109/0x220 [ 113.840966][ C1] vfs_get_tree+0x8c/0x370 [ 113.840995][ C1] path_mount+0x1492/0x1ed0 [ 113.841028][ C1] __x64_sys_mount+0x293/0x310 [ 113.841058][ C1] do_syscall_64+0x38/0xb0 [ 113.841092][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.841116][ C1] [ 113.841120][ C1] Freed by task 5598: [ 113.841129][ C1] kasan_save_stack+0x33/0x50 [ 113.841151][ C1] kasan_set_track+0x25/0x30 [ 113.841172][ C1] kasan_save_free_info+0x28/0x40 [ 113.841199][ C1] ____kasan_slab_free+0x138/0x190 [ 113.841221][ C1] __kmem_cache_free+0xcc/0x2d0 [ 113.841241][ C1] jfs_fill_super+0x7c7/0xd20 [ 113.841265][ C1] mount_bdev+0x1f3/0x2e0 [ 113.841297][ C1] legacy_get_tree+0x109/0x220 [ 113.841318][ C1] vfs_get_tree+0x8c/0x370 [ 113.841349][ C1] path_mount+0x1492/0x1ed0 [ 113.841381][ C1] __x64_sys_mount+0x293/0x310 [ 113.841413][ C1] do_syscall_64+0x38/0xb0 [ 113.841444][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.841467][ C1] [ 113.841471][ C1] The buggy address belongs to the object at ffff88802c11f000 [ 113.841471][ C1] which belongs to the cache kmalloc-256 of size 256 [ 113.841489][ C1] The buggy address is located 40 bytes inside of [ 113.841489][ C1] freed 256-byte region [ffff88802c11f000, ffff88802c11f100) [ 113.841511][ C1] [ 113.875660][ T5605] jfs_mount: diMount failed w/rc = -5 [ 113.893530][ C1] The buggy address belongs to the physical page: [ 113.893541][ C1] page:ffffea0000b047c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c11f [ 113.893566][ C1] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 113.893583][ C1] page_type: 0x8() [ 113.893601][ C1] raw: 00fff00000000800 ffff888012c40500 ffffea0001e2a950 ffffea0001878ed0 [ 113.893621][ C1] raw: 0000000000000000 ffff88802c11f000 0000000100000008 0000000000000000 [ 113.893631][ C1] page dumped because: kasan: bad access detected [ 113.913579][ T5605] Mount JFS Failure: -5 [ 113.915608][ C1] page_owner tracks the page as allocated [ 113.915615][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x3420c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_COMP|__GFP_HARDWALL|__GFP_THISNODE), pid 5406, tgid 5406 (syz-executor.1), ts 113494436089, free_ts 113409130595 [ 113.915656][ C1] post_alloc_hook+0x2cf/0x340 [ 113.915688][ C1] get_page_from_freelist+0xee0/0x2f20 [ 113.915714][ C1] __alloc_pages+0x1d0/0x4a0 [ 113.915738][ C1] cache_grow_begin+0x99/0x3a0 [ 113.931775][ T5605] jfs_mount failed w/return code = -5 [ 113.939802][ C1] cache_alloc_refill+0x294/0x3a0 [ 113.939829][ C1] __kmem_cache_alloc_node+0x3c5/0x470 [ 113.939849][ C1] kmalloc_trace+0x25/0xe0 [ 113.939873][ C1] ____ip_mc_inc_group+0x273/0xcf0 [ 113.939903][ C1] ip_mc_up+0x14f/0x3a0 [ 113.939918][ C1] inetdev_event+0xbc6/0x1900 [ 113.939942][ C1] notifier_call_chain+0xb6/0x3b0 [ 114.564390][ C1] call_netdevice_notifiers_info+0xb9/0x130 [ 114.570290][ C1] __dev_notify_flags+0x12d/0x2e0 [ 114.575344][ C1] dev_change_flags+0x122/0x170 [ 114.580205][ C1] do_setlink+0x1a2a/0x3fa0 [ 114.584706][ C1] __rtnl_newlink+0xc1d/0x1940 [ 114.589486][ C1] page last free stack trace: [ 114.594222][ C1] free_unref_page_prepare+0x476/0xa40 [ 114.599762][ C1] free_unref_page+0x33/0x3b0 [ 114.604436][ C1] slabs_destroy+0x85/0xc0 [ 114.608854][ C1] ___cache_free+0x2b7/0x420 [ 114.613447][ C1] qlist_free_all+0x4c/0x1b0 [ 114.618025][ C1] kasan_quarantine_reduce+0x18e/0x1d0 [ 114.623477][ C1] __kasan_slab_alloc+0x65/0x90 [ 114.628331][ C1] kmem_cache_alloc_node+0x173/0x540 [ 114.633599][ C1] __alloc_skb+0x287/0x330 [ 114.638002][ C1] alloc_skb_with_frags+0xe4/0x710 [ 114.643103][ C1] sock_alloc_send_pskb+0x7e4/0x970 [ 114.648290][ C1] mld_newpack.isra.0+0x1ee/0x790 [ 114.653298][ C1] add_grhead+0x295/0x340 [ 114.657626][ C1] add_grec+0x10bb/0x1680 [ 114.661940][ C1] mld_send_initial_cr.part.0+0xe2/0x260 [ 114.667570][ C1] mld_dad_work+0x57/0x2e0 [ 114.672091][ C1] [ 114.674411][ C1] Memory state around the buggy address: [ 114.680029][ C1] ffff88802c11ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 114.688169][ C1] ffff88802c11ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 114.696212][ C1] >ffff88802c11f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 114.704253][ C1] ^ [ 114.709607][ C1] ffff88802c11f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 114.717650][ C1] ffff88802c11f100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 114.725801][ C1] ================================================================== [ 114.734133][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 114.741334][ C1] CPU: 1 PID: 5606 Comm: dhcpcd-run-hook Not tainted 6.6.0-rc6-syzkaller-00355-gfe3cfe869d5e-dirty #0 [ 114.752280][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 114.762425][ C1] Call Trace: [ 114.765716][ C1] [ 114.768563][ C1] dump_stack_lvl+0xd9/0x1b0 [ 114.773148][ C1] panic+0x6a6/0x750 [ 114.777041][ C1] ? panic_smp_self_stop+0xa0/0xa0 [ 114.782164][ C1] ? asm_common_interrupt+0x26/0x40 [ 114.787359][ C1] ? asm_common_interrupt+0x26/0x40 [ 114.792565][ C1] check_panic_on_warn+0xab/0xb0 [ 114.797494][ C1] end_report+0x108/0x150 [ 114.801810][ C1] kasan_report+0xea/0x110 [ 114.806222][ C1] ? jfs_free_inode+0xf8/0x100 [ 114.810995][ C1] ? jfs_free_inode+0xf8/0x100 [ 114.815754][ C1] ? rcu_core+0x803/0x1bb0 [ 114.820161][ C1] jfs_free_inode+0xf8/0x100 [ 114.824753][ C1] ? jfs_sync_fs+0xa0/0xa0 [ 114.829189][ C1] i_callback+0x43/0x70 [ 114.833343][ C1] rcu_core+0x805/0x1bb0 [ 114.837577][ C1] ? __pick_next_task_fair+0x10/0x10 [ 114.842852][ C1] ? rcu_report_dead+0x620/0x620 [ 114.847777][ C1] ? mark_held_locks+0x9f/0xe0 [ 114.852533][ C1] __do_softirq+0x218/0x965 [ 114.857116][ C1] ? __lock_text_end+0x5/0x5 [ 114.861701][ C1] irq_exit_rcu+0xb7/0x120 [ 114.866117][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 114.871768][ C1] [ 114.874694][ C1] [ 114.877624][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 114.883601][ C1] RIP: 0010:unwind_next_frame+0x1a85/0x2390 [ 114.889511][ C1] Code: c6 84 c9 0f 95 c1 40 84 ce 0f 85 88 08 00 00 83 e0 07 38 c2 0f 9e c1 84 d2 0f 95 c0 84 c1 0f 85 73 08 00 00 4d 0f bf 64 24 02 08 00 00 00 48 89 df 4d 01 ec 4c 89 e6 e8 f8 e2 ff ff 31 ff 41 [ 114.909134][ C1] RSP: 0018:ffffc9000360f528 EFLAGS: 00000246 [ 114.915198][ C1] RAX: 0000000000000000 RBX: ffffc9000360f5a8 RCX: 0000000000000001 [ 114.923176][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff8f5fe9e0 [ 114.931156][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000004 [ 114.939153][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffffffffffe0 [ 114.947148][ C1] R13: ffffc9000360f930 R14: 0000000000000001 R15: 0000000000000001 [ 114.955149][ C1] ? unwind_next_frame+0x1a25/0x2390 [ 114.960472][ C1] ? __kasan_slab_alloc+0x81/0x90 [ 114.965584][ C1] ? write_profile+0x450/0x450 [ 114.970375][ C1] arch_stack_walk+0xfa/0x170 [ 114.975062][ C1] ? kmem_cache_alloc+0x159/0x400 [ 114.980103][ C1] stack_trace_save+0x96/0xd0 [ 114.984787][ C1] ? filter_irq_stacks+0x90/0x90 [ 114.989744][ C1] ? __lock_acquire+0xc8f/0x5de0 [ 114.994767][ C1] kasan_save_stack+0x33/0x50 [ 114.999462][ C1] ? kasan_save_stack+0x33/0x50 [ 115.004336][ C1] ? kasan_set_track+0x25/0x30 [ 115.009116][ C1] ? __kasan_slab_alloc+0x81/0x90 [ 115.014161][ C1] kasan_set_track+0x25/0x30 [ 115.018740][ C1] __kasan_slab_alloc+0x81/0x90 [ 115.023581][ C1] kmem_cache_alloc+0x159/0x400 [ 115.028420][ C1] vm_area_dup+0x21/0x2f0 [ 115.032738][ C1] dup_mmap+0x93c/0x1d80 [ 115.036969][ C1] ? replace_mm_exe_file+0x680/0x680 [ 115.042242][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 115.048052][ C1] ? mm_init+0xb2f/0xf60 [ 115.052300][ C1] copy_process+0x6bff/0x73f0 [ 115.056966][ C1] ? pidfd_prepare+0x80/0x80 [ 115.061543][ C1] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 115.067524][ C1] ? find_held_lock+0x2d/0x110 [ 115.072300][ C1] kernel_clone+0xfd/0x920 [ 115.076900][ C1] ? create_io_thread+0xe0/0xe0 [ 115.081933][ C1] __do_sys_clone+0xba/0x100 [ 115.086527][ C1] ? kernel_clone+0x920/0x920 [ 115.091213][ C1] ? syscall_enter_from_user_mode+0x26/0x80 [ 115.097097][ C1] do_syscall_64+0x38/0xb0 [ 115.101508][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 115.107404][ C1] RIP: 0033:0x7f0e3f393a12 [ 115.111829][ C1] Code: 41 5d 41 5e 41 5f c3 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 e7 43 0f 00 f7 d8 64 89 02 48 83 [ 115.131439][ C1] RSP: 002b:00007fff35d052e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 115.139890][ C1] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f0e3f393a12 [ 115.147869][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 115.155859][ C1] RBP: 000056225d3c9930 R08: 0000000000000000 R09: 00007f0e3f488b20 [ 115.163839][ C1] R10: 00007f0e3f259650 R11: 0000000000000246 R12: 0000000000000084 [ 115.171818][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000024 [ 115.179805][ C1] [ 115.183016][ C1] Kernel Offset: disabled [ 115.187326][ C1] Rebooting in 86400 seconds..