Warning: Permanently added '[localhost]:3684' (ED25519) to the list of known hosts. 2025/04/09 12:35:33 ignoring optional flag "sandboxArg"="0" 2025/04/09 12:35:34 parsed 1 programs [ 70.715230][ T40] audit: type=1400 audit(1744202136.038:143): avc: denied { unlink } for pid=6180 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 71.118313][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.120869][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.745002][ T6180] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.413139][ T5982] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.417119][ T5982] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.419681][ T5982] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.423177][ T5982] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.425537][ T5982] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.487645][ T40] audit: type=1401 audit(1744202138.808:144): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 73.625698][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.627879][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.665984][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.668326][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.865542][ T6257] chnl_net:caif_netlink_parms(): no params data found [ 74.018941][ T6257] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.021078][ T6257] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.023894][ T6257] bridge_slave_0: entered allmulticast mode [ 74.026602][ T6257] bridge_slave_0: entered promiscuous mode [ 74.029352][ T6257] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.031350][ T6257] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.033888][ T6257] bridge_slave_1: entered allmulticast mode [ 74.036298][ T6257] bridge_slave_1: entered promiscuous mode [ 74.097649][ T6257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.121845][ T6257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.169453][ T6257] team0: Port device team_slave_0 added [ 74.182231][ T6257] team0: Port device team_slave_1 added [ 74.227913][ T6257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.229954][ T6257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.240392][ T6257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.247713][ T6257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.250441][ T6257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.259240][ T6257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.336098][ T6257] hsr_slave_0: entered promiscuous mode [ 74.338448][ T6257] hsr_slave_1: entered promiscuous mode [ 74.521801][ T6257] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.591661][ T6257] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.730588][ T6257] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.816581][ T6257] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.911977][ T6257] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.922449][ T6257] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.926254][ T6257] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.930705][ T6257] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.968284][ T6257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.977620][ T6257] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.986389][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.988366][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.994953][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.997341][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.099389][ T6257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.125725][ T6257] veth0_vlan: entered promiscuous mode [ 75.130004][ T6257] veth1_vlan: entered promiscuous mode [ 75.144578][ T6257] veth0_macvtap: entered promiscuous mode [ 75.147899][ T6257] veth1_macvtap: entered promiscuous mode [ 75.160034][ T6257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.164928][ T6257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.169438][ T6257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.176601][ T6257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.179411][ T6257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.182475][ T6257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.187799][ T6257] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.190510][ T6257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.192626][ T6257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.194909][ T6257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/04/09 12:35:40 executed programs: 0 [ 75.293347][ T5982] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.297952][ T6329] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.301762][ T6329] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.307166][ T6333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.308958][ T6329] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.310628][ T6333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.312600][ T6334] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.315804][ T6333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.317067][ T6330] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.320006][ T6333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.321926][ T6334] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.324680][ T6330] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.329730][ T6330] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.333083][ T6334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.333629][ T6333] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.338847][ T6333] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.339869][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.344163][ T6337] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.347317][ T6337] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.353988][ T6334] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.605039][ T6323] chnl_net:caif_netlink_parms(): no params data found [ 75.650821][ T6326] chnl_net:caif_netlink_parms(): no params data found [ 75.684713][ T6335] chnl_net:caif_netlink_parms(): no params data found [ 75.741223][ T6328] chnl_net:caif_netlink_parms(): no params data found [ 75.858052][ T6323] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.860856][ T6323] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.864973][ T6323] bridge_slave_0: entered allmulticast mode [ 75.867434][ T6323] bridge_slave_0: entered promiscuous mode [ 75.871181][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.873656][ T6323] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.875842][ T6323] bridge_slave_1: entered allmulticast mode [ 75.878862][ T6323] bridge_slave_1: entered promiscuous mode [ 75.881687][ T6326] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.884128][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.886521][ T6326] bridge_slave_0: entered allmulticast mode [ 75.889296][ T6326] bridge_slave_0: entered promiscuous mode [ 75.936758][ T6326] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.939080][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.941443][ T6326] bridge_slave_1: entered allmulticast mode [ 75.944907][ T6326] bridge_slave_1: entered promiscuous mode [ 75.998275][ T6323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.018369][ T6335] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.021086][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.024159][ T6335] bridge_slave_0: entered allmulticast mode [ 76.027683][ T6335] bridge_slave_0: entered promiscuous mode [ 76.033370][ T6323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.054506][ T6326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.092694][ T6335] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.095537][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.098250][ T6335] bridge_slave_1: entered allmulticast mode [ 76.101608][ T6335] bridge_slave_1: entered promiscuous mode [ 76.143204][ T6326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.146029][ T6328] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.148514][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.150650][ T6328] bridge_slave_0: entered allmulticast mode [ 76.153602][ T6328] bridge_slave_0: entered promiscuous mode [ 76.179755][ T6323] team0: Port device team_slave_0 added [ 76.197843][ T6328] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.200082][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.202161][ T6328] bridge_slave_1: entered allmulticast mode [ 76.204741][ T6328] bridge_slave_1: entered promiscuous mode [ 76.230204][ T6323] team0: Port device team_slave_1 added [ 76.271682][ T6335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.308504][ T6326] team0: Port device team_slave_0 added [ 76.328264][ T6335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.331946][ T6323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.335675][ T6323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.343284][ T6323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.348202][ T6326] team0: Port device team_slave_1 added [ 76.352228][ T6328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.369831][ T6323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.371838][ T6323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.379312][ T6323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.397134][ T6328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.420988][ T6335] team0: Port device team_slave_0 added [ 76.468745][ T6328] team0: Port device team_slave_0 added [ 76.472576][ T6335] team0: Port device team_slave_1 added [ 76.475468][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.477417][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.484534][ T6326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.488517][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.490459][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.497620][ T6326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.501855][ T6328] team0: Port device team_slave_1 added [ 76.550743][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.553345][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.561334][ T6335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.622847][ T6323] hsr_slave_0: entered promiscuous mode [ 76.625044][ T6323] hsr_slave_1: entered promiscuous mode [ 76.626991][ T6323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.629425][ T6323] Cannot create hsr debugfs directory [ 76.632025][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.634222][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.641570][ T6335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.649782][ T6328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.651744][ T6328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.659047][ T6328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.663182][ T6328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.665399][ T6328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.672335][ T6328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.813688][ T6335] hsr_slave_0: entered promiscuous mode [ 76.815912][ T6335] hsr_slave_1: entered promiscuous mode [ 76.817911][ T6335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.820221][ T6335] Cannot create hsr debugfs directory [ 76.867485][ T6326] hsr_slave_0: entered promiscuous mode [ 76.870052][ T6326] hsr_slave_1: entered promiscuous mode [ 76.871927][ T6326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.874340][ T6326] Cannot create hsr debugfs directory [ 76.883932][ T6328] hsr_slave_0: entered promiscuous mode [ 76.886861][ T6328] hsr_slave_1: entered promiscuous mode [ 76.889753][ T6328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.892655][ T6328] Cannot create hsr debugfs directory [ 77.089491][ T6323] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.354167][ T5982] Bluetooth: hci0: command tx timeout [ 77.354174][ T6333] Bluetooth: hci1: command tx timeout [ 77.433277][ T6333] Bluetooth: hci3: command tx timeout [ 77.433288][ T5982] Bluetooth: hci2: command tx timeout [ 78.131376][ T6323] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.213944][ T6323] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.267042][ T6323] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.434870][ T6333] Bluetooth: hci0: command tx timeout [ 79.443068][ T6333] Bluetooth: hci1: command tx timeout [ 79.513170][ T6333] Bluetooth: hci3: command tx timeout [ 79.513425][ T5982] Bluetooth: hci2: command tx timeout [ 79.799733][ T6328] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.806286][ T6328] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.812113][ T6328] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.821862][ T6328] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.855116][ T6323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.861039][ T6323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.865400][ T6323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.871864][ T6323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.909792][ T6326] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.917533][ T6326] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.927665][ T6326] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.931402][ T6326] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.989680][ T6328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.998863][ T6335] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.004532][ T6335] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.026015][ T6335] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.033858][ T6335] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.062187][ T6328] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.069895][ T6323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.079653][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.081703][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.110325][ T6323] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.114543][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.117235][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.145036][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.147885][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.152143][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.154883][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.167434][ T6326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.196624][ T6326] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.225674][ T6335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.231963][ T6323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.235434][ T6323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.239692][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.241716][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.244639][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.247688][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.278308][ T6335] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.294485][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.297280][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.308983][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.310931][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.354168][ T6328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.381720][ T6328] veth0_vlan: entered promiscuous mode [ 80.397586][ T6323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.412236][ T6328] veth1_vlan: entered promiscuous mode [ 80.444991][ T6326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.455209][ T6323] veth0_vlan: entered promiscuous mode [ 80.461807][ T6328] veth0_macvtap: entered promiscuous mode [ 80.466827][ T6323] veth1_vlan: entered promiscuous mode [ 80.477394][ T6328] veth1_macvtap: entered promiscuous mode [ 80.496197][ T6335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.512416][ T6326] veth0_vlan: entered promiscuous mode [ 80.515689][ T6323] veth0_macvtap: entered promiscuous mode [ 80.521297][ T6323] veth1_macvtap: entered promiscuous mode [ 80.535870][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.539745][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.547779][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.551596][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.557380][ T6328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.564622][ T6326] veth1_vlan: entered promiscuous mode [ 80.574417][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.578084][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.581537][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.586015][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.589469][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.594066][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.597982][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.607848][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.611504][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.615518][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.618792][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.622222][ T6328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.626575][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.630229][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.634004][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.637668][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.641113][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.645657][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.650321][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.659348][ T6328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.663547][ T6328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.666842][ T6328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.669329][ T6328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.676490][ T6323] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.679633][ T6323] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.682715][ T6323] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.686675][ T6323] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.703510][ T6335] veth0_vlan: entered promiscuous mode [ 80.725938][ T6335] veth1_vlan: entered promiscuous mode [ 80.742672][ T6326] veth0_macvtap: entered promiscuous mode [ 80.767188][ T6326] veth1_macvtap: entered promiscuous mode [ 80.792189][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.792454][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.797910][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.799629][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.801824][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.807853][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.811307][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.815164][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.818631][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.822306][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.827930][ T6326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.852368][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.856305][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.859037][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.861987][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.865036][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.868317][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.871918][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.877496][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.882261][ T6326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.887089][ T6335] veth0_macvtap: entered promiscuous mode [ 80.904545][ T6326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.904752][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.907088][ T6326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.909881][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.912300][ T6326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.918427][ T6326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.931659][ T6335] veth1_macvtap: entered promiscuous mode [ 80.937219][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.939996][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.949379][ T40] audit: type=1400 audit(1744202146.268:145): avc: denied { rename } for pid=5338 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.957157][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.957173][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.965498][ T40] audit: type=1400 audit(1744202146.268:146): avc: denied { unlink } for pid=5338 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.982188][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.989417][ T40] audit: type=1400 audit(1744202146.278:147): avc: denied { create } for pid=5338 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.994846][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.000319][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.003687][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.006778][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.010213][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.013565][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.017416][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.021059][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.025287][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.030704][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_0 2025/04/09 12:35:46 executed programs: 8 [ 81.057667][ T40] audit: type=1400 audit(1744202146.378:148): avc: denied { create } for pid=6455 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.067897][ T40] audit: type=1400 audit(1744202146.388:149): avc: denied { read append } for pid=6455 comm="syz.2.18" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 81.070690][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.077910][ T40] audit: type=1400 audit(1744202146.388:150): avc: denied { open } for pid=6455 comm="syz.2.18" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 81.081942][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.094979][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.098953][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.100490][ T40] audit: type=1400 audit(1744202146.418:151): avc: denied { unmount } for pid=6328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 81.102675][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.111175][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.115208][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.119078][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.121720][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.124684][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.129683][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.141199][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.151258][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.157262][ T6335] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.162032][ T6335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.166145][ T6335] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.168905][ T6335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.212728][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.217648][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.314611][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.318841][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.356961][ T63] cfg80211: failed to load regulatory.db [ 81.414196][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.418955][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.514281][ T5982] Bluetooth: hci1: command tx timeout [ 81.515996][ T5982] Bluetooth: hci0: command tx timeout [ 81.593597][ T6333] Bluetooth: hci3: command tx timeout [ 81.604286][ T6333] Bluetooth: hci2: command tx timeout [ 83.593110][ T6333] Bluetooth: hci0: command tx timeout [ 83.593244][ T5982] Bluetooth: hci1: command tx timeout [ 83.683272][ T5982] Bluetooth: hci2: command tx timeout [ 83.683301][ T6333] Bluetooth: hci3: command tx timeout 2025/04/09 12:35:51 executed programs: 287 2025/04/09 12:35:56 executed programs: 670 2025/04/09 12:36:01 executed programs: 1081 2025/04/09 12:36:06 executed programs: 1472 2025/04/09 12:36:11 executed programs: 1878 2025/04/09 12:36:16 executed programs: 2276 [ 112.496246][T13649] ================================================================== [ 112.499278][T13649] BUG: KASAN: slab-use-after-free in afs_dynroot_readdir+0xd20/0xf50 [ 112.501770][T13649] Read of size 4 at addr ffff888051ad6148 by task syz.3.2385/13649 [ 112.506364][T13649] [ 112.507226][T13649] CPU: 0 UID: 0 PID: 13649 Comm: syz.3.2385 Not tainted 6.15.0-rc1-syzkaller-ga24588245776 #0 PREEMPT(full) [ 112.507251][T13649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.507260][T13649] Call Trace: [ 112.507265][T13649] [ 112.507271][T13649] dump_stack_lvl+0x116/0x1f0 [ 112.507292][T13649] print_report+0xc3/0x670 [ 112.507307][T13649] ? __virt_addr_valid+0x5e/0x590 [ 112.507328][T13649] ? __phys_addr+0xc6/0x150 [ 112.507348][T13649] ? afs_dynroot_readdir+0xd20/0xf50 [ 112.507366][T13649] kasan_report+0xe0/0x110 [ 112.507382][T13649] ? afs_dynroot_readdir+0xd20/0xf50 [ 112.507399][T13649] afs_dynroot_readdir+0xd20/0xf50 [ 112.507415][T13649] ? down_read_killable+0x220/0x4b0 [ 112.507437][T13649] ? __pfx_afs_dynroot_readdir+0x10/0x10 [ 112.507454][T13649] ? selinux_file_permission+0x11f/0x580 [ 112.507478][T13649] iterate_dir+0x293/0xb40 [ 112.507500][T13649] __x64_sys_getdents+0x14d/0x2c0 [ 112.507516][T13649] ? __x64_sys_futex+0x1e9/0x4c0 [ 112.507535][T13649] ? __pfx___x64_sys_getdents+0x10/0x10 [ 112.507555][T13649] ? xfd_validate_state+0x5d/0x180 [ 112.507570][T13649] ? __pfx_filldir+0x10/0x10 [ 112.507588][T13649] ? rcu_is_watching+0x12/0xc0 [ 112.507604][T13649] do_syscall_64+0xcd/0x260 [ 112.507623][T13649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.507638][T13649] RIP: 0033:0x7f8451b8d169 [ 112.507650][T13649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.507663][T13649] RSP: 002b:00007f8452ad1038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 112.507677][T13649] RAX: ffffffffffffffda RBX: 00007f8451da5fa0 RCX: 00007f8451b8d169 [ 112.507683][T13649] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000005 [ 112.507690][T13649] RBP: 00007f8451c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 112.507699][T13649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.507707][T13649] R13: 0000000000000000 R14: 00007f8451da5fa0 R15: 00007ffee4801628 [ 112.507720][T13649] [ 112.507725][T13649] [ 112.518569][ T5982] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.518960][T13649] Allocated by task 13639: [ 112.521091][ T5982] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.522052][T13649] kasan_save_stack+0x33/0x60 [ 112.523741][ T5982] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.525197][T13649] kasan_save_track+0x14/0x30 [ 112.527418][ T5982] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.528185][T13649] __kasan_kmalloc+0xaa/0xb0 [ 112.530529][ T5982] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.531447][T13649] afs_lookup_cell+0x61d/0x1680 [ 112.589986][T13649] afs_dynroot_lookup+0x3d8/0xd60 [ 112.591403][T13649] __lookup_slow+0x24e/0x460 [ 112.592706][T13649] walk_component+0x353/0x5b0 [ 112.594032][T13649] path_lookupat+0x17e/0x780 [ 112.595350][T13649] filename_lookup+0x224/0x5f0 [ 112.596694][T13649] user_path_at+0x3a/0x60 [ 112.598011][T13649] __x64_sys_mount+0x1fc/0x310 [ 112.599754][T13649] do_syscall_64+0xcd/0x260 [ 112.601400][T13649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.603136][T13649] [ 112.603814][T13649] Freed by task 15: [ 112.604934][T13649] kasan_save_stack+0x33/0x60 [ 112.606249][T13649] kasan_save_track+0x14/0x30 [ 112.607581][T13649] kasan_save_free_info+0x3b/0x60 [ 112.608981][T13649] __kasan_slab_free+0x51/0x70 [ 112.610524][T13649] kfree+0x2b6/0x4d0 [ 112.611848][T13649] afs_cell_destroy+0x21c/0x310 [ 112.613567][T13649] rcu_core+0x799/0x14e0 [ 112.615145][T13649] handle_softirqs+0x216/0x8e0 [ 112.616706][T13649] run_ksoftirqd+0x3a/0x60 [ 112.618298][T13649] smpboot_thread_fn+0x3f4/0xae0 [ 112.619911][T13649] kthread+0x3c2/0x780 [ 112.621048][T13649] ret_from_fork+0x45/0x80 [ 112.622337][T13649] ret_from_fork_asm+0x1a/0x30 [ 112.623687][T13649] [ 112.624357][T13649] Last potentially related work creation: [ 112.625948][T13649] kasan_save_stack+0x33/0x60 [ 112.627257][T13649] kasan_record_aux_stack+0xb8/0xd0 [ 112.628708][T13649] __call_rcu_common.constprop.0+0x9a/0x9f0 [ 112.630584][T13649] process_one_work+0x9cc/0x1b70 [ 112.632024][T13649] worker_thread+0x6c8/0xf10 [ 112.633366][T13649] kthread+0x3c2/0x780 [ 112.634490][T13649] ret_from_fork+0x45/0x80 [ 112.635718][T13649] ret_from_fork_asm+0x1a/0x30 [ 112.637058][T13649] [ 112.637765][T13649] Second to last potentially related work creation: [ 112.639590][T13649] kasan_save_stack+0x33/0x60 [ 112.640902][T13649] kasan_record_aux_stack+0xb8/0xd0 [ 112.642386][T13649] insert_work+0x36/0x230 [ 112.643605][T13649] __queue_work+0x97e/0x10f0 [ 112.644894][T13649] queue_work_on+0x1a4/0x1f0 [ 112.646188][T13649] afs_put_cell.part.0+0x1ab/0x240 [ 112.647609][T13649] afs_manage_cell_work+0x6de/0x1940 [ 112.649076][T13649] process_one_work+0x9cc/0x1b70 [ 112.650464][T13649] worker_thread+0x6c8/0xf10 [ 112.651753][T13649] kthread+0x3c2/0x780 [ 112.652918][T13649] ret_from_fork+0x45/0x80 [ 112.654350][T13649] ret_from_fork_asm+0x1a/0x30 [ 112.656041][T13649] [ 112.656716][T13649] The buggy address belongs to the object at ffff888051ad6000 [ 112.656716][T13649] which belongs to the cache kmalloc-1k of size 1024 [ 112.660821][T13649] The buggy address is located 328 bytes inside of [ 112.660821][T13649] freed 1024-byte region [ffff888051ad6000, ffff888051ad6400) [ 112.664574][T13649] [ 112.665268][T13649] The buggy address belongs to the physical page: [ 112.667007][T13649] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x51ad0 [ 112.669398][T13649] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 112.671688][T13649] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 112.673937][T13649] page_type: f5(slab) [ 112.675053][T13649] raw: 00fff00000000040 ffff88801b442dc0 0000000000000000 dead000000000001 [ 112.677654][T13649] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 112.680459][T13649] head: 00fff00000000040 ffff88801b442dc0 0000000000000000 dead000000000001 [ 112.683514][T13649] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 112.686474][T13649] head: 00fff00000000003 ffffea000146b401 00000000ffffffff 00000000ffffffff [ 112.689035][T13649] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 112.691433][T13649] page dumped because: kasan: bad access detected [ 112.693408][T13649] page_owner tracks the page as allocated [ 112.695462][T13649] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6536, tgid 6536 (dhcpcd-run-hook), ts 81620809709, free_ts 73934098494 [ 112.701711][T13649] post_alloc_hook+0x181/0x1b0 [ 112.703064][T13649] get_page_from_freelist+0x1193/0x39b0 [ 112.704599][T13649] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 112.706259][T13649] alloc_pages_mpol+0x1fb/0x550 [ 112.707646][T13649] new_slab+0x23c/0x330 [ 112.709100][T13649] ___slab_alloc+0xd9c/0x1940 [ 112.710427][T13649] __slab_alloc.constprop.0+0x56/0xb0 [ 112.711904][T13649] __kmalloc_noprof+0x2f2/0x510 [ 112.713262][T13649] load_elf_phdrs+0x102/0x210 [ 112.714569][T13649] load_elf_binary+0x14b3/0x4f80 [ 112.715946][T13649] bprm_execve+0x8c0/0x1650 [ 112.717226][T13649] do_execveat_common.isra.0+0x4a5/0x610 [ 112.718780][T13649] __x64_sys_execve+0x8e/0xb0 [ 112.720086][T13649] do_syscall_64+0xcd/0x260 [ 112.721358][T13649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.722994][T13649] page last free pid 6255 tgid 6255 stack trace: [ 112.724733][T13649] __free_frozen_pages+0x69d/0xff0 [ 112.726205][T13649] vfree+0x176/0x960 [ 112.727301][T13649] kcov_close+0x34/0x60 [ 112.728464][T13649] __fput+0x3ff/0xb70 [ 112.729580][T13649] task_work_run+0x14d/0x240 [ 112.730853][T13649] do_exit+0xafb/0x2c30 [ 112.732003][T13649] do_group_exit+0xd3/0x2a0 [ 112.733286][T13649] get_signal+0x2673/0x26d0 [ 112.734547][T13649] arch_do_signal_or_restart+0x8f/0x7d0 [ 112.736070][T13649] syscall_exit_to_user_mode+0x150/0x2a0 [ 112.737617][T13649] do_syscall_64+0xda/0x260 [ 112.738914][T13649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.740548][T13649] [ 112.741230][T13649] Memory state around the buggy address: [ 112.742793][T13649] ffff888051ad6000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.745008][T13649] ffff888051ad6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.747174][T13649] >ffff888051ad6100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.749339][T13649] ^ [ 112.751068][T13649] ffff888051ad6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.753245][T13649] ffff888051ad6200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.755681][T13649] ================================================================== [ 112.766283][T13649] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 112.768336][T13649] CPU: 2 UID: 0 PID: 13649 Comm: syz.3.2385 Not tainted 6.15.0-rc1-syzkaller-ga24588245776 #0 PREEMPT(full) [ 112.771679][T13649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.774672][T13649] Call Trace: [ 112.775720][T13649] [ 112.776796][T13649] dump_stack_lvl+0x3d/0x1f0 [ 112.778299][T13649] panic+0x71c/0x800 [ 112.779379][T13649] ? __pfx_panic+0x10/0x10 [ 112.780603][T13649] ? mark_held_locks+0x49/0x80 [ 112.782172][T13649] ? preempt_schedule_thunk+0x16/0x30 [ 112.784097][T13649] ? afs_dynroot_readdir+0xd20/0xf50 [ 112.786046][T13649] ? preempt_schedule_common+0x44/0xc0 [ 112.787962][T13649] ? check_panic_on_warn+0x1f/0xb0 [ 112.789509][T13649] ? afs_dynroot_readdir+0xd20/0xf50 [ 112.790985][T13649] check_panic_on_warn+0xab/0xb0 [ 112.792346][T13649] end_report+0x107/0x170 [ 112.793628][T13649] kasan_report+0xee/0x110 [ 112.794888][T13649] ? afs_dynroot_readdir+0xd20/0xf50 [ 112.796765][T13649] afs_dynroot_readdir+0xd20/0xf50 [ 112.798617][T13649] ? down_read_killable+0x220/0x4b0 [ 112.800025][T13649] ? __pfx_afs_dynroot_readdir+0x10/0x10 [ 112.801577][T13649] ? selinux_file_permission+0x11f/0x580 [ 112.803124][T13649] iterate_dir+0x293/0xb40 [ 112.804363][T13649] __x64_sys_getdents+0x14d/0x2c0 [ 112.806175][T13649] ? __x64_sys_futex+0x1e9/0x4c0 [ 112.808038][T13649] ? __pfx___x64_sys_getdents+0x10/0x10 [ 112.810137][T13649] ? xfd_validate_state+0x5d/0x180 [ 112.811780][T13649] ? __pfx_filldir+0x10/0x10 [ 112.813067][T13649] ? rcu_is_watching+0x12/0xc0 [ 112.814410][T13649] do_syscall_64+0xcd/0x260 [ 112.815796][T13649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.817914][T13649] RIP: 0033:0x7f8451b8d169 [ 112.819598][T13649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.826279][T13649] RSP: 002b:00007f8452ad1038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 112.828546][T13649] RAX: ffffffffffffffda RBX: 00007f8451da5fa0 RCX: 00007f8451b8d169 [ 112.830704][T13649] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000005 [ 112.832864][T13649] RBP: 00007f8451c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 112.835038][T13649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.837229][T13649] R13: 0000000000000000 R14: 00007f8451da5fa0 R15: 00007ffee4801628 [ 112.839979][T13649] [ 112.841825][T13649] Kernel Offset: disabled [ 112.843500][T13649] Rebooting in 86400 seconds..