Warning: Permanently added '10.128.0.16' (ED25519) to the list of known hosts. 2023/11/03 04:06:19 ignoring optional flag "sandboxArg"="0" 2023/11/03 04:06:20 parsed 1 programs [ 112.289082][ T27] kauditd_printk_skb: 74 callbacks suppressed [ 112.289092][ T27] audit: type=1400 audit(1698984380.266:203): avc: denied { getattr } for pid=5375 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 112.321424][ T27] audit: type=1400 audit(1698984380.276:204): avc: denied { read } for pid=5375 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 112.344212][ T27] audit: type=1400 audit(1698984380.276:205): avc: denied { open } for pid=5375 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 112.381681][ T27] audit: type=1400 audit(1698984380.356:206): avc: denied { mounton } for pid=5380 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 112.408977][ T27] audit: type=1400 audit(1698984380.356:207): avc: denied { mount } for pid=5380 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 112.436700][ T27] audit: type=1400 audit(1698984380.376:208): avc: denied { read write } for pid=5380 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 112.463675][ T27] audit: type=1400 audit(1698984380.376:209): avc: denied { open } for pid=5380 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 112.494579][ T27] audit: type=1400 audit(1698984380.476:210): avc: denied { unlink } for pid=5380 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 113.019051][ T27] audit: type=1400 audit(1698984380.996:211): avc: denied { relabelto } for pid=5382 comm="mkswap" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2023/11/03 04:06:22 executed programs: 0 [ 114.481708][ T5380] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 114.653477][ T5032] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.663623][ T5032] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.672096][ T5032] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.682004][ T5032] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.696810][ T5400] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 114.706372][ T5400] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.715428][ T4430] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.725473][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.730227][ T27] audit: type=1400 audit(1698984382.706:212): avc: denied { mounton } for pid=5394 comm="syz-executor.2" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 114.770336][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.786277][ T4430] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.803972][ T5406] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.804854][ T4430] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.820277][ T5406] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 114.821142][ T4430] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.835377][ T5406] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.836202][ T4430] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.860382][ T5404] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.861749][ T4430] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 114.869458][ T5404] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.876044][ T4430] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.895605][ T5404] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.914683][ T5400] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.923704][ T5400] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.931817][ T4430] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 114.940593][ T4430] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.949871][ T5400] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.958575][ T5400] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.967536][ T5400] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.977066][ T5400] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 114.999511][ T5406] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.008052][ T5404] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.021671][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.030484][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.039140][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.062549][ T49] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 115.070319][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.723870][ T5394] chnl_net:caif_netlink_parms(): no params data found [ 116.042484][ T5397] chnl_net:caif_netlink_parms(): no params data found [ 116.122524][ T5408] chnl_net:caif_netlink_parms(): no params data found [ 116.273666][ T5394] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.282863][ T5394] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.291865][ T5394] bridge_slave_0: entered allmulticast mode [ 116.302958][ T5394] bridge_slave_0: entered promiscuous mode [ 116.323693][ T5401] chnl_net:caif_netlink_parms(): no params data found [ 116.348121][ T5411] chnl_net:caif_netlink_parms(): no params data found [ 116.392033][ T5394] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.399568][ T5394] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.407412][ T5394] bridge_slave_1: entered allmulticast mode [ 116.419184][ T5394] bridge_slave_1: entered promiscuous mode [ 116.523828][ T5397] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.531662][ T5397] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.539820][ T5397] bridge_slave_0: entered allmulticast mode [ 116.548870][ T5397] bridge_slave_0: entered promiscuous mode [ 116.596373][ T5394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.637095][ T5402] chnl_net:caif_netlink_parms(): no params data found [ 116.655720][ T5397] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.664593][ T5397] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.671968][ T5397] bridge_slave_1: entered allmulticast mode [ 116.680077][ T5397] bridge_slave_1: entered promiscuous mode [ 116.724005][ T5394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.784630][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 116.807219][ T5408] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.815054][ T5408] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.822752][ T5408] bridge_slave_0: entered allmulticast mode [ 116.830557][ T5408] bridge_slave_0: entered promiscuous mode [ 116.864893][ T49] Bluetooth: hci1: command 0x0409 tx timeout [ 116.969760][ T5408] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.977612][ T5408] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.985298][ T5408] bridge_slave_1: entered allmulticast mode [ 116.992765][ T5408] bridge_slave_1: entered promiscuous mode [ 117.019253][ T5397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.035058][ T49] Bluetooth: hci2: command 0x0409 tx timeout [ 117.070771][ T5394] team0: Port device team_slave_0 added [ 117.081806][ T5394] team0: Port device team_slave_1 added [ 117.107093][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 117.114859][ T5400] Bluetooth: hci5: command 0x0409 tx timeout [ 117.114928][ T5404] Bluetooth: hci3: command 0x0409 tx timeout [ 117.132393][ T5401] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.139977][ T5401] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.147444][ T5401] bridge_slave_0: entered allmulticast mode [ 117.155606][ T5401] bridge_slave_0: entered promiscuous mode [ 117.185840][ T5408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.198681][ T5397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.226300][ T5411] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.233595][ T5411] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.242828][ T5411] bridge_slave_0: entered allmulticast mode [ 117.250902][ T5411] bridge_slave_0: entered promiscuous mode [ 117.308096][ T5401] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.315658][ T5401] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.322962][ T5401] bridge_slave_1: entered allmulticast mode [ 117.330873][ T5401] bridge_slave_1: entered promiscuous mode [ 117.357617][ T5408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.382811][ T5411] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.390149][ T5411] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.398010][ T5411] bridge_slave_1: entered allmulticast mode [ 117.406264][ T5411] bridge_slave_1: entered promiscuous mode [ 117.414142][ T5394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.421382][ T5394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.450552][ T5394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.464313][ T5394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.471375][ T5394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.497963][ T5394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.570535][ T5401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.617842][ T5397] team0: Port device team_slave_0 added [ 117.671275][ T5402] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.679682][ T5402] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.687120][ T5402] bridge_slave_0: entered allmulticast mode [ 117.694408][ T5402] bridge_slave_0: entered promiscuous mode [ 117.703025][ T5402] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.710268][ T5402] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.717601][ T5402] bridge_slave_1: entered allmulticast mode [ 117.725118][ T5402] bridge_slave_1: entered promiscuous mode [ 117.736052][ T5401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.765724][ T5408] team0: Port device team_slave_0 added [ 117.775506][ T5408] team0: Port device team_slave_1 added [ 117.783643][ T5397] team0: Port device team_slave_1 added [ 117.797571][ T5411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.945297][ T5411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.993488][ T5394] hsr_slave_0: entered promiscuous mode [ 118.000444][ T5394] hsr_slave_1: entered promiscuous mode [ 118.011895][ T5402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.026077][ T5402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.038583][ T5401] team0: Port device team_slave_0 added [ 118.051885][ T5401] team0: Port device team_slave_1 added [ 118.075536][ T5397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.082678][ T5397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.109539][ T5397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.186487][ T5408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.193861][ T5408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.220417][ T5408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.233827][ T5408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.241534][ T5408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.268709][ T5408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.282260][ T5397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.289481][ T5397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.318454][ T5397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.335503][ T5411] team0: Port device team_slave_0 added [ 118.364281][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.371569][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.399460][ T5401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.430319][ T5411] team0: Port device team_slave_1 added [ 118.459371][ T5402] team0: Port device team_slave_0 added [ 118.470378][ T5402] team0: Port device team_slave_1 added [ 118.478057][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.485496][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.512661][ T5401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.655735][ T5408] hsr_slave_0: entered promiscuous mode [ 118.662676][ T5408] hsr_slave_1: entered promiscuous mode [ 118.669983][ T5408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.678665][ T5408] Cannot create hsr debugfs directory [ 118.741348][ T5411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.748970][ T5411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.778540][ T5411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.809846][ T5402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.817236][ T5402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.845531][ T5402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.862462][ T5402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.870543][ T5404] Bluetooth: hci0: command 0x041b tx timeout [ 118.876251][ T5402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.905196][ T5402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.924747][ T5397] hsr_slave_0: entered promiscuous mode [ 118.931660][ T5397] hsr_slave_1: entered promiscuous mode [ 118.938351][ T5397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.944860][ T5404] Bluetooth: hci1: command 0x041b tx timeout [ 118.946184][ T5397] Cannot create hsr debugfs directory [ 118.979972][ T5411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.987858][ T5411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.015112][ T5411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.104635][ T5404] Bluetooth: hci2: command 0x041b tx timeout [ 119.184899][ T5404] Bluetooth: hci3: command 0x041b tx timeout [ 119.194483][ T5404] Bluetooth: hci4: command 0x041b tx timeout [ 119.195157][ T49] Bluetooth: hci5: command 0x041b tx timeout [ 119.270975][ T5411] hsr_slave_0: entered promiscuous mode [ 119.277827][ T5411] hsr_slave_1: entered promiscuous mode [ 119.284287][ T5411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.294519][ T5411] Cannot create hsr debugfs directory [ 119.323052][ T5401] hsr_slave_0: entered promiscuous mode [ 119.333444][ T5401] hsr_slave_1: entered promiscuous mode [ 119.340682][ T5401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.349332][ T5401] Cannot create hsr debugfs directory [ 119.379368][ T5402] hsr_slave_0: entered promiscuous mode [ 119.386806][ T5402] hsr_slave_1: entered promiscuous mode [ 119.393606][ T5402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.401858][ T5402] Cannot create hsr debugfs directory [ 120.150145][ T5394] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 120.170629][ T5394] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 120.237184][ T5394] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 120.249492][ T5394] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 120.485349][ T5397] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 120.509374][ T5397] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 120.526764][ T5397] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 120.571747][ T5397] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 120.683315][ T5408] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.699461][ T5408] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.897498][ T5408] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 120.936579][ T5408] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 120.954667][ T49] Bluetooth: hci0: command 0x040f tx timeout [ 121.008760][ T5394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.024715][ T49] Bluetooth: hci1: command 0x040f tx timeout [ 121.187001][ T49] Bluetooth: hci2: command 0x040f tx timeout [ 121.264744][ T49] Bluetooth: hci5: command 0x040f tx timeout [ 121.271048][ T49] Bluetooth: hci4: command 0x040f tx timeout [ 121.277582][ T5404] Bluetooth: hci3: command 0x040f tx timeout [ 121.720493][ T5394] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.874221][ T5043] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.881954][ T5043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.947722][ T5043] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.955448][ T5043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.007180][ T5397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.093810][ T5397] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.251888][ T1779] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.259447][ T1779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.345742][ T1779] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.353222][ T1779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.382234][ T5401] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.398753][ T5401] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.428191][ T5408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.480560][ T5401] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.648559][ T5401] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.775962][ T5408] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.917024][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.924607][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.966837][ T5411] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 123.019939][ T5411] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 123.044430][ T49] Bluetooth: hci0: command 0x0419 tx timeout [ 123.107741][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 123.158009][ T778] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.165690][ T778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.221622][ T5411] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 123.249715][ T5411] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 123.268171][ T49] Bluetooth: hci2: command 0x0419 tx timeout [ 123.345329][ T49] Bluetooth: hci5: command 0x0419 tx timeout [ 123.357044][ T49] Bluetooth: hci4: command 0x0419 tx timeout [ 123.363199][ T49] Bluetooth: hci3: command 0x0419 tx timeout [ 123.508651][ T5408] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 123.564502][ T5408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.606077][ T5394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.818334][ T5402] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 123.940569][ T5402] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 123.972721][ T5402] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 124.021573][ T5402] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 124.093908][ T5397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.408125][ T5394] veth0_vlan: entered promiscuous mode [ 124.492262][ T5401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.519322][ T5408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.558205][ T5394] veth1_vlan: entered promiscuous mode [ 124.773119][ T5401] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.791510][ T5411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.846935][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.854427][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.971598][ T5402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.049305][ T5531] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.057473][ T5531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.122006][ T5394] veth0_macvtap: entered promiscuous mode [ 125.166746][ T5402] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.228707][ T5411] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.283977][ T5394] veth1_macvtap: entered promiscuous mode [ 125.339161][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.346832][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.381341][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.389333][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.523280][ T5041] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.531002][ T5041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.568843][ T5394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.602462][ T5397] veth0_vlan: entered promiscuous mode [ 125.661896][ T5394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.690951][ T5480] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.698395][ T5480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.746002][ T5397] veth1_vlan: entered promiscuous mode [ 125.803302][ T5394] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.821294][ T5394] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.831783][ T5394] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.850928][ T5394] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.969621][ T5408] veth0_vlan: entered promiscuous mode [ 126.315786][ T5408] veth1_vlan: entered promiscuous mode [ 126.410535][ T5397] veth0_macvtap: entered promiscuous mode [ 126.587407][ T5397] veth1_macvtap: entered promiscuous mode [ 126.690859][ T2431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.732411][ T2431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.764158][ T5408] veth0_macvtap: entered promiscuous mode [ 126.933128][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.940534][ T5397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.963174][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.970296][ T5397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.983682][ T5397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.014145][ T5408] veth1_macvtap: entered promiscuous mode [ 127.102230][ T27] audit: type=1400 audit(1698984395.076:213): avc: denied { mounton } for pid=5394 comm="syz-executor.2" path="/dev/binderfs" dev="devtmpfs" ino=2321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 127.130281][ T5401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.157136][ T5397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.169622][ T5397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.183954][ T5397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.215629][ T5397] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.225111][ T5397] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.237626][ T5397] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.250563][ T5397] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.322390][ T27] audit: type=1400 audit(1698984395.296:214): avc: denied { read } for pid=5582 comm="syz-executor.2" name="iommu" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.359223][ T27] audit: type=1400 audit(1698984395.296:215): avc: denied { open } for pid=5582 comm="syz-executor.2" path="/dev/iommu" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.389971][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 2023/11/03 04:06:35 executed programs: 6 [ 127.390558][ T27] audit: type=1400 audit(1698984395.306:216): avc: denied { ioctl } for pid=5582 comm="syz-executor.2" path="/dev/iommu" dev="devtmpfs" ino=625 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.455426][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.470480][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.482544][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.497079][ T5408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.531964][ T5402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.639545][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.674513][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.699975][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.718864][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.731926][ T5408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.758926][ T5411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.850496][ T5408] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.867488][ T5408] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.882627][ T5408] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.902145][ T5408] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.403036][ T2442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.420646][ T2442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.433039][ T5402] veth0_vlan: entered promiscuous mode [ 128.481202][ T5401] veth0_vlan: entered promiscuous mode [ 128.540713][ T5402] veth1_vlan: entered promiscuous mode [ 128.693947][ T5411] veth0_vlan: entered promiscuous mode [ 128.717086][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.732013][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.806248][ T5411] veth1_vlan: entered promiscuous mode [ 128.843470][ T5401] veth1_vlan: entered promiscuous mode [ 128.975869][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.984181][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.065761][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.074002][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.187193][ T5402] veth0_macvtap: entered promiscuous mode [ 129.231015][ T5411] veth0_macvtap: entered promiscuous mode [ 129.259874][ T5402] veth1_macvtap: entered promiscuous mode [ 129.303689][ T5411] veth1_macvtap: entered promiscuous mode [ 129.357033][ T5401] veth0_macvtap: entered promiscuous mode [ 129.431084][ T5401] veth1_macvtap: entered promiscuous mode [ 129.451577][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.495726][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.529956][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.569777][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.580689][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.594096][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.617394][ T5411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.643084][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.662281][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.675485][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.686611][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.697362][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.709145][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.721972][ T5411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.737926][ T5411] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.748700][ T5411] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.758713][ T5411] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.768279][ T5411] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.792977][ T5402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.808377][ T5402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.823240][ T5402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.837594][ T5402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.848367][ T5402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.859320][ T5402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.870243][ T5402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.881212][ T5402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.895224][ T5402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.942642][ T5402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.954248][ T5402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.969306][ T5402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.980555][ T5402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.991790][ T5402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.004096][ T5402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.023847][ T5402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.045031][ T5402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.058682][ T5402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.108907][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.128128][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.151720][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.163070][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.174447][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.185659][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.196538][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.207723][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.218279][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.230867][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.257124][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.283489][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.309023][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.328086][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.343255][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.361550][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.382084][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.393739][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.405018][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.415557][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.427243][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.440669][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.481430][ T5402] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.505750][ T5402] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.521481][ T5402] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.531989][ T5402] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.600104][ T5401] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.612348][ T5401] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.623774][ T5401] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.634579][ T5401] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.016403][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.037624][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.121811][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.130791][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.247101][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.266793][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.337895][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.357050][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.377310][ T2431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.394080][ T2431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.510507][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.544434][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2023/11/03 04:06:40 executed programs: 30 [ 133.606002][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.613327][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 2023/11/03 04:06:45 executed programs: 146 2023/11/03 04:06:50 executed programs: 272 [ 142.984798][ T6650] ================================================================== [ 142.993979][ T6650] BUG: KASAN: slab-use-after-free in __up_read+0xce/0x750 [ 143.001674][ T6650] Read of size 8 at addr ffff88807db5a800 by task syz-executor.4/6650 [ 143.010314][ T6650] [ 143.012660][ T6650] CPU: 0 PID: 6650 Comm: syz-executor.4 Not tainted 6.6.0-rc7-syzkaller-00195-g2af9b20dbb39-dirty #0 [ 143.023736][ T6650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 143.034262][ T6650] Call Trace: [ 143.038081][ T6650] [ 143.041392][ T6650] dump_stack_lvl+0xd9/0x1b0 [ 143.046225][ T6650] print_report+0xc4/0x620 [ 143.050783][ T6650] ? __virt_addr_valid+0x5e/0x2d0 [ 143.055863][ T6650] ? __phys_addr+0xc6/0x140 [ 143.060410][ T6650] kasan_report+0xda/0x110 [ 143.064919][ T6650] ? __up_read+0xce/0x750 [ 143.069263][ T6650] ? __up_read+0xce/0x750 [ 143.073632][ T6650] kasan_check_range+0xef/0x190 [ 143.078507][ T6650] __up_read+0xce/0x750 [ 143.082760][ T6650] ? do_raw_spin_lock+0x12e/0x2b0 [ 143.088058][ T6650] ? up_write+0x510/0x510 [ 143.092469][ T6650] ? spin_bug+0x1d0/0x1d0 [ 143.097245][ T6650] iommufd_vfio_ioas+0x47a/0x5a0 [ 143.103017][ T6650] ? _copy_from_user+0x5d/0xf0 [ 143.107811][ T6650] iommufd_fops_ioctl+0x347/0x4d0 [ 143.112856][ T6650] ? iommufd_destroy+0x180/0x180 [ 143.117902][ T6650] ? selinux_file_ioctl+0x17d/0x270 [ 143.123127][ T6650] ? selinux_file_ioctl+0xb5/0x270 [ 143.128343][ T6650] ? iommufd_destroy+0x180/0x180 [ 143.133292][ T6650] __x64_sys_ioctl+0x18f/0x210 [ 143.138408][ T6650] do_syscall_64+0x38/0xb0 [ 143.142830][ T6650] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 143.148734][ T6650] RIP: 0033:0x7f6c5a87cae9 [ 143.153234][ T6650] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 143.174252][ T6650] RSP: 002b:00007f6c5b60d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.182760][ T6650] RAX: ffffffffffffffda RBX: 00007f6c5a99c050 RCX: 00007f6c5a87cae9 [ 143.190907][ T6650] RDX: 0000000020000080 RSI: 0000000000003b88 RDI: 0000000000000003 [ 143.199060][ T6650] RBP: 00007f6c5a8c847a R08: 0000000000000000 R09: 0000000000000000 [ 143.207210][ T6650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.215264][ T6650] R13: 000000000000000b R14: 00007f6c5a99c050 R15: 00007ffecfcd2da8 [ 143.223321][ T6650] [ 143.226685][ T6650] [ 143.229045][ T6650] Allocated by task 6649: [ 143.233360][ T6650] kasan_save_stack+0x33/0x50 [ 143.238407][ T6650] kasan_set_track+0x25/0x30 [ 143.243340][ T6650] __kasan_kmalloc+0xa3/0xb0 [ 143.247936][ T6650] __kmalloc+0x60/0x100 [ 143.252368][ T6650] _iommufd_object_alloc+0x26/0x1b0 [ 143.257687][ T6650] iommufd_ioas_alloc_ioctl+0xaf/0x370 [ 143.263152][ T6650] iommufd_fops_ioctl+0x347/0x4d0 [ 143.268286][ T6650] __x64_sys_ioctl+0x18f/0x210 [ 143.273241][ T6650] do_syscall_64+0x38/0xb0 [ 143.277677][ T6650] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 143.283601][ T6650] [ 143.285950][ T6650] Freed by task 6651: [ 143.290105][ T6650] kasan_save_stack+0x33/0x50 [ 143.295140][ T6650] kasan_set_track+0x25/0x30 [ 143.299729][ T6650] kasan_save_free_info+0x28/0x40 [ 143.305124][ T6650] ____kasan_slab_free+0x138/0x190 [ 143.310426][ T6650] __kmem_cache_free+0xcc/0x2d0 [ 143.315374][ T6650] iommufd_destroy+0x11e/0x180 [ 143.320254][ T6650] iommufd_fops_ioctl+0x347/0x4d0 [ 143.325557][ T6650] __x64_sys_ioctl+0x18f/0x210 [ 143.330408][ T6650] do_syscall_64+0x38/0xb0 [ 143.335033][ T6650] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 143.341382][ T6650] [ 143.343784][ T6650] The buggy address belongs to the object at ffff88807db5a800 [ 143.343784][ T6650] which belongs to the cache kmalloc-cg-1k of size 1024 [ 143.358366][ T6650] The buggy address is located 0 bytes inside of [ 143.358366][ T6650] freed 1024-byte region [ffff88807db5a800, ffff88807db5ac00) [ 143.372165][ T6650] [ 143.374489][ T6650] The buggy address belongs to the physical page: [ 143.381354][ T6650] page:ffffea0001f6d680 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7db5a [ 143.391873][ T6650] memcg:ffff888063c85681 [ 143.396129][ T6650] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 143.404051][ T6650] page_type: 0x2() [ 143.407780][ T6650] raw: 00fff00000000800 ffff888012c4d800 ffffea0000af4c50 ffffea0001e64e10 [ 143.416476][ T6650] raw: 0000000000000000 ffff88807db5a000 0000000100000002 ffff888063c85681 [ 143.425317][ T6650] page dumped because: kasan: bad access detected [ 143.431804][ T6650] page_owner tracks the page as allocated [ 143.437599][ T6650] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2420c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_COMP|__GFP_THISNODE), pid 4892, tgid 4892 (dhcpcd-run-hook), ts 66035864217, free_ts 66034134175 [ 143.458896][ T6650] post_alloc_hook+0x2cf/0x340 [ 143.464425][ T6650] get_page_from_freelist+0xee0/0x2f20 [ 143.470017][ T6650] __alloc_pages+0x1d0/0x4a0 [ 143.474797][ T6650] cache_grow_begin+0x99/0x3a0 [ 143.479575][ T6650] cache_alloc_refill+0x294/0x3a0 [ 143.484982][ T6650] __kmem_cache_alloc_node+0x3c5/0x470 [ 143.490452][ T6650] __kmalloc+0x4f/0x100 [ 143.494614][ T6650] alloc_pipe_info+0x1ed/0x580 [ 143.499900][ T6650] create_pipe_files+0x8f/0x870 [ 143.505010][ T6650] do_pipe2+0xb0/0x1c0 [ 143.509348][ T6650] __x64_sys_pipe2+0x54/0x80 [ 143.513939][ T6650] do_syscall_64+0x38/0xb0 [ 143.518617][ T6650] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 143.524526][ T6650] page last free stack trace: [ 143.529360][ T6650] free_unref_page_prepare+0x476/0xa40 [ 143.534850][ T6650] free_unref_page+0x33/0x3b0 [ 143.539707][ T6650] skb_free_head+0xa6/0x1b0 [ 143.544213][ T6650] skb_release_data+0x5ba/0x870 [ 143.549088][ T6650] skb_attempt_defer_free+0x3bc/0x570 [ 143.555428][ T6650] tcp_recvmsg_locked+0x10a8/0x24a0 [ 143.561059][ T6650] tcp_recvmsg+0x12e/0x670 [ 143.565733][ T6650] inet_recvmsg+0x114/0x630 [ 143.570656][ T6650] sock_recvmsg+0xe2/0x170 [ 143.575162][ T6650] sock_read_iter+0x2c3/0x3c0 [ 143.579871][ T6650] vfs_read+0x7ef/0x930 [ 143.584632][ T6650] ksys_read+0x1f0/0x250 [ 143.589006][ T6650] do_syscall_64+0x38/0xb0 [ 143.593422][ T6650] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 143.599423][ T6650] [ 143.601739][ T6650] Memory state around the buggy address: [ 143.607450][ T6650] ffff88807db5a700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 143.615506][ T6650] ffff88807db5a780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 143.623905][ T6650] >ffff88807db5a800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 143.632128][ T6650] ^ [ 143.636191][ T6650] ffff88807db5a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 143.644336][ T6650] ffff88807db5a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 143.652646][ T6650] ================================================================== [ 143.784702][ T6650] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 143.792126][ T6650] CPU: 1 PID: 6650 Comm: syz-executor.4 Not tainted 6.6.0-rc7-syzkaller-00195-g2af9b20dbb39-dirty #0 [ 143.803471][ T6650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 143.813540][ T6650] Call Trace: [ 143.817025][ T6650] [ 143.820153][ T6650] dump_stack_lvl+0xd9/0x1b0 [ 143.825130][ T6650] panic+0x6a6/0x750 [ 143.829320][ T6650] ? panic_smp_self_stop+0xa0/0xa0 [ 143.834522][ T6650] ? preempt_schedule_thunk+0x1a/0x30 [ 143.840010][ T6650] ? preempt_schedule_common+0x45/0xc0 [ 143.845570][ T6650] check_panic_on_warn+0xab/0xb0 [ 143.850686][ T6650] end_report+0x108/0x150 [ 143.855111][ T6650] kasan_report+0xea/0x110 [ 143.859996][ T6650] ? __up_read+0xce/0x750 [ 143.864351][ T6650] ? __up_read+0xce/0x750 [ 143.868863][ T6650] kasan_check_range+0xef/0x190 [ 143.873816][ T6650] __up_read+0xce/0x750 [ 143.877973][ T6650] ? do_raw_spin_lock+0x12e/0x2b0 [ 143.883179][ T6650] ? up_write+0x510/0x510 [ 143.887685][ T6650] ? spin_bug+0x1d0/0x1d0 [ 143.892066][ T6650] iommufd_vfio_ioas+0x47a/0x5a0 [ 143.897032][ T6650] ? _copy_from_user+0x5d/0xf0 [ 143.901821][ T6650] iommufd_fops_ioctl+0x347/0x4d0 [ 143.907144][ T6650] ? iommufd_destroy+0x180/0x180 [ 143.912225][ T6650] ? selinux_file_ioctl+0x17d/0x270 [ 143.917717][ T6650] ? selinux_file_ioctl+0xb5/0x270 [ 143.922849][ T6650] ? iommufd_destroy+0x180/0x180 [ 143.928023][ T6650] __x64_sys_ioctl+0x18f/0x210 [ 143.932809][ T6650] do_syscall_64+0x38/0xb0 [ 143.938014][ T6650] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 143.943953][ T6650] RIP: 0033:0x7f6c5a87cae9 [ 143.949184][ T6650] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 143.969340][ T6650] RSP: 002b:00007f6c5b60d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.978002][ T6650] RAX: ffffffffffffffda RBX: 00007f6c5a99c050 RCX: 00007f6c5a87cae9 [ 143.986081][ T6650] RDX: 0000000020000080 RSI: 0000000000003b88 RDI: 0000000000000003 [ 143.994134][ T6650] RBP: 00007f6c5a8c847a R08: 0000000000000000 R09: 0000000000000000 [ 144.002303][ T6650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.010876][ T6650] R13: 000000000000000b R14: 00007f6c5a99c050 R15: 00007ffecfcd2da8 [ 144.019982][ T6650] [ 144.023318][ T6650] Kernel Offset: disabled [ 144.027690][ T6650] Rebooting in 86400 seconds..