Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts. 2023/08/02 21:17:09 ignoring optional flag "sandboxArg"="0" 2023/08/02 21:17:10 parsed 1 programs [ 97.718293][ T26] kauditd_printk_skb: 76 callbacks suppressed [ 97.718305][ T26] audit: type=1400 audit(1691011030.194:201): avc: denied { getattr } for pid=5353 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 97.750077][ T26] audit: type=1400 audit(1691011030.214:202): avc: denied { read } for pid=5353 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 97.772077][ T26] audit: type=1400 audit(1691011030.214:203): avc: denied { open } for pid=5353 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 97.796505][ T26] audit: type=1400 audit(1691011030.244:204): avc: denied { mounton } for pid=5358 comm="syz-executor" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 97.798649][ T5358] cgroup: Unknown subsys name 'net' [ 97.821116][ T26] audit: type=1400 audit(1691011030.274:205): avc: denied { mount } for pid=5358 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 97.853159][ T5358] cgroup: Unknown subsys name 'rlimit' 2023/08/02 21:17:10 executed programs: 0 [ 97.861595][ T26] audit: type=1400 audit(1691011030.334:206): avc: denied { mounton } for pid=5358 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 97.891159][ T26] audit: type=1400 audit(1691011030.334:207): avc: denied { mount } for pid=5358 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 99.153042][ T5383] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.162426][ T5383] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.168618][ T5384] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.170428][ T5383] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.179398][ T5384] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.192089][ T5383] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.193659][ T5384] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.200592][ T5386] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.208102][ T5384] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.220905][ T5386] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.222058][ T5384] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.228732][ T5386] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.236019][ T5384] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.242481][ T5386] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.256681][ T5384] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.261289][ T5383] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.267719][ T5384] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.273766][ T5383] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 99.280475][ T5384] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.287616][ T5383] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.299291][ T5384] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 99.302249][ T5383] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.309969][ T5384] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.317630][ T5387] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 99.324426][ T5384] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 99.339253][ T5387] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.340512][ T5384] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.347154][ T5387] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.361974][ T5387] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 99.364274][ T4422] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 99.370510][ T5387] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 99.378357][ T26] audit: type=1400 audit(1691011031.854:208): avc: denied { mounton } for pid=5374 comm="syz-executor.1" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 99.384766][ T5387] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 99.413035][ T5017] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.421120][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.425574][ T5387] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 99.457584][ T5389] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 99.791776][ T5374] chnl_net:caif_netlink_parms(): no params data found [ 99.932727][ T5372] chnl_net:caif_netlink_parms(): no params data found [ 99.997173][ T5373] chnl_net:caif_netlink_parms(): no params data found [ 100.100086][ T5371] chnl_net:caif_netlink_parms(): no params data found [ 100.117438][ T5374] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.124607][ T5374] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.132876][ T5374] bridge_slave_0: entered allmulticast mode [ 100.139979][ T5374] bridge_slave_0: entered promiscuous mode [ 100.153536][ T5374] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.162030][ T5374] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.169711][ T5374] bridge_slave_1: entered allmulticast mode [ 100.177392][ T5374] bridge_slave_1: entered promiscuous mode [ 100.214576][ T5370] chnl_net:caif_netlink_parms(): no params data found [ 100.235378][ T5374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.268496][ T5375] chnl_net:caif_netlink_parms(): no params data found [ 100.281241][ T5374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.317669][ T5372] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.325364][ T5372] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.332721][ T5372] bridge_slave_0: entered allmulticast mode [ 100.339998][ T5372] bridge_slave_0: entered promiscuous mode [ 100.360690][ T5372] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.368994][ T5372] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.376525][ T5372] bridge_slave_1: entered allmulticast mode [ 100.383256][ T5372] bridge_slave_1: entered promiscuous mode [ 100.439289][ T5373] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.450294][ T5373] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.457722][ T5373] bridge_slave_0: entered allmulticast mode [ 100.464360][ T5373] bridge_slave_0: entered promiscuous mode [ 100.484698][ T5374] team0: Port device team_slave_0 added [ 100.511598][ T5373] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.519062][ T5373] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.527442][ T5373] bridge_slave_1: entered allmulticast mode [ 100.534223][ T5373] bridge_slave_1: entered promiscuous mode [ 100.551072][ T5374] team0: Port device team_slave_1 added [ 100.602495][ T5372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.634624][ T5371] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.641982][ T5371] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.649296][ T5371] bridge_slave_0: entered allmulticast mode [ 100.656464][ T5371] bridge_slave_0: entered promiscuous mode [ 100.674104][ T5372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.693769][ T5374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.701301][ T5374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.728146][ T5374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.750031][ T5374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.757797][ T5374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.784574][ T5374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.796179][ T5371] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.803468][ T5371] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.811871][ T5371] bridge_slave_1: entered allmulticast mode [ 100.819219][ T5371] bridge_slave_1: entered promiscuous mode [ 100.828397][ T5373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.845439][ T5370] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.852933][ T5370] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.860267][ T5370] bridge_slave_0: entered allmulticast mode [ 100.867106][ T5370] bridge_slave_0: entered promiscuous mode [ 100.912920][ T5373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.931947][ T5370] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.940626][ T5370] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.948038][ T5370] bridge_slave_1: entered allmulticast mode [ 100.954686][ T5370] bridge_slave_1: entered promiscuous mode [ 100.974621][ T5375] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.981976][ T5375] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.989401][ T5375] bridge_slave_0: entered allmulticast mode [ 100.996745][ T5375] bridge_slave_0: entered promiscuous mode [ 101.032264][ T5372] team0: Port device team_slave_0 added [ 101.052593][ T5375] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.060045][ T5375] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.067817][ T5375] bridge_slave_1: entered allmulticast mode [ 101.074469][ T5375] bridge_slave_1: entered promiscuous mode [ 101.085768][ T5371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.097955][ T5373] team0: Port device team_slave_0 added [ 101.105667][ T5372] team0: Port device team_slave_1 added [ 101.114227][ T5374] hsr_slave_0: entered promiscuous mode [ 101.120629][ T5374] hsr_slave_1: entered promiscuous mode [ 101.148328][ T5371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.160332][ T5373] team0: Port device team_slave_1 added [ 101.184410][ T5370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.234210][ T5372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.241474][ T5372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.267809][ T5372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.284019][ T5370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.305121][ T5375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.334291][ T5373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.341368][ T5373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.369129][ T5387] Bluetooth: hci0: command 0x0409 tx timeout [ 101.375522][ T5373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.389260][ T5373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.396758][ T5373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.423017][ T5373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.435492][ T5372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.442468][ T5372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.445535][ T5387] Bluetooth: hci2: command 0x0409 tx timeout [ 101.468848][ T5386] Bluetooth: hci3: command 0x0409 tx timeout [ 101.482151][ T5372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.505629][ T5375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.518276][ T5371] team0: Port device team_slave_0 added [ 101.524991][ T5386] Bluetooth: hci5: command 0x0409 tx timeout [ 101.525057][ T5387] Bluetooth: hci4: command 0x0409 tx timeout [ 101.531419][ T5386] Bluetooth: hci1: command 0x0409 tx timeout [ 101.578845][ T5370] team0: Port device team_slave_0 added [ 101.598500][ T5371] team0: Port device team_slave_1 added [ 101.618485][ T5373] hsr_slave_0: entered promiscuous mode [ 101.624791][ T5373] hsr_slave_1: entered promiscuous mode [ 101.631370][ T5373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.639684][ T5373] Cannot create hsr debugfs directory [ 101.646459][ T5370] team0: Port device team_slave_1 added [ 101.667437][ T5375] team0: Port device team_slave_0 added [ 101.710455][ T5375] team0: Port device team_slave_1 added [ 101.728338][ T5372] hsr_slave_0: entered promiscuous mode [ 101.734768][ T5372] hsr_slave_1: entered promiscuous mode [ 101.741568][ T5372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.749978][ T5372] Cannot create hsr debugfs directory [ 101.776934][ T5370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.784486][ T5370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.811462][ T5370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.832813][ T5371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.840146][ T5371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.866753][ T5371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.879859][ T5371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.887333][ T5371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.914581][ T5371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.940093][ T5370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.947366][ T5370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.974772][ T5370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.051111][ T5375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.058625][ T5375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.085960][ T5375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.128550][ T5371] hsr_slave_0: entered promiscuous mode [ 102.135505][ T5371] hsr_slave_1: entered promiscuous mode [ 102.141675][ T5371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.149678][ T5371] Cannot create hsr debugfs directory [ 102.156465][ T5375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.163874][ T5375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.191778][ T5375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.259954][ T5370] hsr_slave_0: entered promiscuous mode [ 102.267141][ T5370] hsr_slave_1: entered promiscuous mode [ 102.273204][ T5370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.281006][ T5370] Cannot create hsr debugfs directory [ 102.354536][ T5375] hsr_slave_0: entered promiscuous mode [ 102.361029][ T5375] hsr_slave_1: entered promiscuous mode [ 102.369489][ T5375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.378110][ T5375] Cannot create hsr debugfs directory [ 102.624604][ T5374] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.634688][ T5374] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.660332][ T5374] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.689654][ T5374] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.806557][ T5373] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.828856][ T5373] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.854705][ T5373] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.864671][ T5373] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.928376][ T5374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.982076][ T5372] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.996008][ T5372] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.018087][ T5374] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.053680][ T5372] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.076203][ T1869] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.083434][ T1869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.137295][ T5372] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.159444][ T1869] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.166607][ T1869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.186394][ T5370] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.197627][ T5370] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.210729][ T5370] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.222242][ T5370] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.241087][ T5374] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 103.251835][ T5374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.353395][ T5373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.445844][ T5386] Bluetooth: hci0: command 0x041b tx timeout [ 103.463409][ T5371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.471854][ T5375] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.490987][ T5373] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.512220][ T5374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.520583][ T5375] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.525482][ T5386] Bluetooth: hci3: command 0x041b tx timeout [ 103.534437][ T5389] Bluetooth: hci2: command 0x041b tx timeout [ 103.540664][ T5375] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.551885][ T5375] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.584519][ T5371] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.600894][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.605219][ T5389] Bluetooth: hci1: command 0x041b tx timeout [ 103.608510][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.622059][ T5389] Bluetooth: hci4: command 0x041b tx timeout [ 103.622280][ T5386] Bluetooth: hci5: command 0x041b tx timeout [ 103.673184][ T26] audit: type=1400 audit(1691011036.144:209): avc: denied { sys_module } for pid=5374 comm="syz-executor.1" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 103.717946][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.725123][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.737899][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.745078][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.801452][ T1869] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.808817][ T1869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.978134][ T5370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.011653][ T5372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.050330][ T5370] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.083378][ T5372] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.122438][ T5375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.142056][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.149374][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.160523][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.168047][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.192126][ T5373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.217089][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.224303][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.237069][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.244169][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.275965][ T5371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.289987][ T5374] veth0_vlan: entered promiscuous mode [ 104.302101][ T5375] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.371212][ T5374] veth1_vlan: entered promiscuous mode [ 104.410400][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.417594][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.438992][ T5372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.466041][ T5370] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 104.477420][ T5370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.510371][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.517657][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.647628][ T5374] veth0_macvtap: entered promiscuous mode [ 104.682360][ T5372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.712452][ T5374] veth1_macvtap: entered promiscuous mode [ 104.740294][ T5375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.792810][ T5370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.849105][ T5374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.900848][ T5374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.948356][ T5374] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.985130][ T5374] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.994023][ T5374] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.017299][ T5374] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.104810][ T5375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.347654][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.363599][ T5373] veth0_vlan: entered promiscuous mode [ 105.380829][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.452800][ T5373] veth1_vlan: entered promiscuous mode [ 105.525289][ T5387] Bluetooth: hci0: command 0x040f tx timeout [ 105.547087][ T1869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.597294][ T5373] veth0_macvtap: entered promiscuous mode [ 105.601367][ T1869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.608591][ T5373] veth1_macvtap: entered promiscuous mode [ 105.615078][ T5387] Bluetooth: hci2: command 0x040f tx timeout [ 105.622316][ T5387] Bluetooth: hci3: command 0x040f tx timeout [ 105.642274][ T5373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 105.655473][ T5373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.674464][ T5373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.685306][ T5387] Bluetooth: hci4: command 0x040f tx timeout [ 105.685403][ T5386] Bluetooth: hci1: command 0x040f tx timeout [ 105.691449][ T5387] Bluetooth: hci5: command 0x040f tx timeout [ 105.700531][ T26] audit: type=1400 audit(1691011038.174:210): avc: denied { mounton } for pid=5374 comm="syz-executor.1" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 105.755437][ T5373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 105.802506][ T5373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.841691][ T5373] batman_adv: batadv0: Interface activated: batadv_slave_1 2023/08/02 21:17:18 executed programs: 6 [ 105.910739][ T5373] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.930276][ T5373] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.965991][ T5373] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.977090][ T5373] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.151254][ T5372] veth0_vlan: entered promiscuous mode [ 106.203871][ T5372] veth1_vlan: entered promiscuous mode [ 106.323129][ T775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.391411][ T775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.431650][ T5372] veth0_macvtap: entered promiscuous mode [ 106.466820][ T5372] veth1_macvtap: entered promiscuous mode [ 106.526580][ T5476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.533127][ T5371] veth0_vlan: entered promiscuous mode [ 106.548000][ T26] audit: type=1400 audit(1691011039.024:211): avc: denied { search } for pid=4452 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.574436][ T5476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.661565][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 106.738068][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.757400][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 106.768280][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.781256][ T5372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.791458][ T5371] veth1_vlan: entered promiscuous mode [ 106.865199][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 106.915135][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.933424][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 106.951381][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.971446][ T5372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.015434][ T5371] veth0_macvtap: entered promiscuous mode [ 107.033369][ T5372] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.043738][ T5372] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.054647][ T5372] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.065287][ T5372] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.081701][ T5371] veth1_macvtap: entered promiscuous mode [ 107.221780][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.236713][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.247596][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.260002][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.270331][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.281344][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.296689][ T5371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.314321][ T5370] veth0_vlan: entered promiscuous mode [ 107.328591][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 107.339587][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.349926][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 107.360888][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.373847][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 107.384537][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.400390][ T5371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.437709][ T1869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.461555][ T5370] veth1_vlan: entered promiscuous mode [ 107.461904][ T1869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.526923][ T5375] veth0_vlan: entered promiscuous mode [ 107.557941][ T5370] veth0_macvtap: entered promiscuous mode [ 107.604545][ T5375] veth1_vlan: entered promiscuous mode [ 107.614991][ T5386] Bluetooth: hci0: command 0x0419 tx timeout [ 107.634790][ T5476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.638260][ T5370] veth1_macvtap: entered promiscuous mode [ 107.643478][ T5476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.685506][ T5387] Bluetooth: hci3: command 0x0419 tx timeout [ 107.686358][ T5386] Bluetooth: hci2: command 0x0419 tx timeout [ 107.724495][ T5370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.741039][ T5370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.751836][ T5370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.763112][ T5370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.773330][ T5386] Bluetooth: hci5: command 0x0419 tx timeout [ 107.775475][ T5389] Bluetooth: hci1: command 0x0419 tx timeout [ 107.780675][ T5370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.786184][ T5386] Bluetooth: hci4: command 0x0419 tx timeout [ 107.803447][ T5370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.813979][ T5370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.825219][ T5370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.836601][ T5370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.862513][ T5370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 107.882642][ T5370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.895379][ T5370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 107.909397][ T5370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.919732][ T5370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 107.931684][ T5370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.942532][ T5370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 107.953898][ T5370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.967820][ T5370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.991981][ T5375] veth0_macvtap: entered promiscuous mode [ 107.998258][ T775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.008998][ T775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.030958][ T5370] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.044457][ T5370] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.053951][ T5370] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.063047][ T5370] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.108252][ T5375] veth1_macvtap: entered promiscuous mode [ 108.122568][ T1869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.132445][ T1869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.178257][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.202686][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.219566][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.231311][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.241923][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.253867][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.265794][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.276921][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.288363][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.303559][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.315377][ T5375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.347595][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.359057][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.371069][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.408221][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.418701][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.429717][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.444417][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.456839][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.467153][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.477983][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.491577][ T5375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.519959][ T5375] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.548535][ T5375] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.572138][ T5375] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.581109][ T5375] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.606722][ T5027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.618862][ T5027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.723216][ T775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.741636][ T775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.774164][ T5476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.783263][ T5476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.871147][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.882822][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2023/08/02 21:17:23 executed programs: 121 2023/08/02 21:17:28 executed programs: 426 2023/08/02 21:17:33 executed programs: 728 2023/08/02 21:17:38 executed programs: 1038 2023/08/02 21:17:43 executed programs: 1339 [ 133.289316][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.296214][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 2023/08/02 21:17:48 executed programs: 1648 2023/08/02 21:17:53 executed programs: 1956 2023/08/02 21:17:58 executed programs: 2251 2023/08/02 21:18:03 executed programs: 2558 2023/08/02 21:18:08 executed programs: 2870 2023/08/02 21:18:13 executed programs: 3187 2023/08/02 21:18:18 executed programs: 3504 2023/08/02 21:18:23 executed programs: 3819 2023/08/02 21:18:28 executed programs: 4125 2023/08/02 21:18:33 executed programs: 4439 2023/08/02 21:18:38 executed programs: 4762 2023/08/02 21:18:43 executed programs: 5073 [ 194.726421][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.732798][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 2023/08/02 21:18:48 executed programs: 5382 2023/08/02 21:18:53 executed programs: 5701 2023/08/02 21:18:58 executed programs: 6004 2023/08/02 21:19:03 executed programs: 6320 [ 214.148524][T18499] ================================================================== [ 214.156825][T18499] BUG: KASAN: slab-use-after-free in taprio_dump+0xb84/0xc90 [ 214.164228][T18499] Read of size 4 at addr ffff88807da214c0 by task syz-executor.3/18499 [ 214.172586][T18499] [ 214.175031][T18499] CPU: 1 PID: 18499 Comm: syz-executor.3 Not tainted 6.5.0-rc4-syzkaller-00009-g4b954598a47b #0 [ 214.185647][T18499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 214.195820][T18499] Call Trace: [ 214.199117][T18499] [ 214.202069][T18499] dump_stack_lvl+0xd9/0x1b0 [ 214.206697][T18499] print_report+0xc4/0x620 [ 214.211193][T18499] ? __virt_addr_valid+0x5e/0x2d0 [ 214.216391][T18499] ? __phys_addr+0xc6/0x140 [ 214.221196][T18499] kasan_report+0xda/0x110 [ 214.225660][T18499] ? taprio_dump+0xb84/0xc90 [ 214.230287][T18499] ? taprio_dump+0xb84/0xc90 [ 214.235167][T18499] taprio_dump+0xb84/0xc90 [ 214.239640][T18499] ? taprio_enqueue+0x7e0/0x7e0 [ 214.244618][T18499] ? __nla_put+0x27/0x40 [ 214.248903][T18499] ? taprio_enqueue+0x7e0/0x7e0 [ 214.253877][T18499] tc_fill_qdisc+0x62d/0x12e0 [ 214.258607][T18499] ? __kmalloc_node_track_caller+0xe5/0x100 [ 214.264550][T18499] ? qdisc_watchdog_schedule_range_ns+0x400/0x400 [ 214.271009][T18499] ? __build_skb_around+0x278/0x3b0 [ 214.276250][T18499] qdisc_notify.isra.0+0x2bd/0x330 [ 214.281425][T18499] tc_modify_qdisc+0x1158/0x1bf0 [ 214.286426][T18499] ? qdisc_create+0x10a0/0x10a0 [ 214.291498][T18499] ? qdisc_create+0x10a0/0x10a0 [ 214.296480][T18499] rtnetlink_rcv_msg+0x439/0xd30 [ 214.301469][T18499] ? rtnl_getlink+0xb40/0xb40 [ 214.306182][T18499] ? netdev_core_pick_tx+0x390/0x390 [ 214.311673][T18499] netlink_rcv_skb+0x16b/0x440 [ 214.316477][T18499] ? rtnl_getlink+0xb40/0xb40 [ 214.321806][T18499] ? netlink_ack+0x1370/0x1370 [ 214.326725][T18499] ? netlink_deliver_tap+0x1b1/0xd00 [ 214.332053][T18499] netlink_unicast+0x539/0x800 [ 214.336941][T18499] ? netlink_attachskb+0x880/0x880 [ 214.342097][T18499] netlink_sendmsg+0x93c/0xe30 [ 214.346906][T18499] ? netlink_unicast+0x800/0x800 [ 214.351887][T18499] ? netlink_unicast+0x800/0x800 [ 214.356872][T18499] sock_sendmsg+0xd9/0x180 [ 214.361331][T18499] ____sys_sendmsg+0x6ac/0x940 [ 214.366134][T18499] ? copy_msghdr_from_user+0x10b/0x160 [ 214.371671][T18499] ? kernel_sendmsg+0x50/0x50 [ 214.376558][T18499] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 214.382674][T18499] ___sys_sendmsg+0x135/0x1d0 [ 214.387495][T18499] ? do_recvmmsg+0x740/0x740 [ 214.392148][T18499] ? __fget_light+0xe6/0x260 [ 214.397215][T18499] __sys_sendmsg+0x117/0x1e0 [ 214.401850][T18499] ? __sys_sendmsg_sock+0x30/0x30 [ 214.406918][T18499] ? xfd_validate_state+0x5d/0x180 [ 214.412080][T18499] ? syscall_enter_from_user_mode+0x26/0x80 [ 214.418463][T18499] do_syscall_64+0x38/0xb0 [ 214.422917][T18499] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 214.428844][T18499] RIP: 0033:0x7fc2d0c79829 [ 214.433465][T18499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 214.454502][T18499] RSP: 002b:00007fc2d1df90c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.463036][T18499] RAX: ffffffffffffffda RBX: 00007fc2d0d8bf60 RCX: 00007fc2d0c79829 [ 214.471468][T18499] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 214.479664][T18499] RBP: 00007fc2d0cd5074 R08: 0000000000000000 R09: 0000000000000000 [ 214.487756][T18499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.495754][T18499] R13: 000000000000000b R14: 00007fc2d0d8bf60 R15: 00007fff21b10bf8 [ 214.503760][T18499] [ 214.506798][T18499] [ 214.509138][T18499] Allocated by task 18475: [ 214.513565][T18499] kasan_save_stack+0x33/0x50 [ 214.518286][T18499] kasan_set_track+0x25/0x30 [ 214.522913][T18499] __kasan_kmalloc+0xa3/0xb0 [ 214.527541][T18499] taprio_change+0x54f/0x3890 [ 214.532470][T18499] tc_modify_qdisc+0xfd6/0x1bf0 [ 214.537624][T18499] rtnetlink_rcv_msg+0x439/0xd30 [ 214.542861][T18499] netlink_rcv_skb+0x16b/0x440 [ 214.547662][T18499] netlink_unicast+0x539/0x800 [ 214.552528][T18499] netlink_sendmsg+0x93c/0xe30 [ 214.557611][T18499] sock_sendmsg+0xd9/0x180 [ 214.562079][T18499] ____sys_sendmsg+0x6ac/0x940 [ 214.567051][T18499] ___sys_sendmsg+0x135/0x1d0 [ 214.572132][T18499] __sys_sendmsg+0x117/0x1e0 [ 214.576854][T18499] do_syscall_64+0x38/0xb0 [ 214.581305][T18499] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 214.587320][T18499] [ 214.589658][T18499] Freed by task 18496: [ 214.593735][T18499] kasan_save_stack+0x33/0x50 [ 214.598543][T18499] kasan_set_track+0x25/0x30 [ 214.603279][T18499] kasan_save_free_info+0x28/0x40 [ 214.608331][T18499] ____kasan_slab_free+0x13f/0x190 [ 214.613485][T18499] __kmem_cache_free+0xcc/0x2d0 [ 214.618388][T18499] rcu_core+0x7fb/0x1bb0 [ 214.622661][T18499] __do_softirq+0x218/0x965 [ 214.627212][T18499] [ 214.629556][T18499] Last potentially related work creation: [ 214.635288][T18499] kasan_save_stack+0x33/0x50 [ 214.640010][T18499] __kasan_record_aux_stack+0x78/0x80 [ 214.645510][T18499] __call_rcu_common.constprop.0+0x9a/0x790 [ 214.651607][T18499] taprio_change+0x28b9/0x3890 [ 214.656400][T18499] tc_modify_qdisc+0xfd6/0x1bf0 [ 214.661289][T18499] rtnetlink_rcv_msg+0x439/0xd30 [ 214.666351][T18499] netlink_rcv_skb+0x16b/0x440 [ 214.671153][T18499] netlink_unicast+0x539/0x800 [ 214.676038][T18499] netlink_sendmsg+0x93c/0xe30 [ 214.680839][T18499] sock_sendmsg+0xd9/0x180 [ 214.685283][T18499] ____sys_sendmsg+0x6ac/0x940 [ 214.690077][T18499] ___sys_sendmsg+0x135/0x1d0 [ 214.694963][T18499] __sys_sendmsg+0x117/0x1e0 [ 214.699589][T18499] do_syscall_64+0x38/0xb0 [ 214.704027][T18499] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 214.710210][T18499] [ 214.712565][T18499] Second to last potentially related work creation: [ 214.719254][T18499] kasan_save_stack+0x33/0x50 [ 214.724371][T18499] __kasan_record_aux_stack+0x78/0x80 [ 214.729778][T18499] __call_rcu_common.constprop.0+0x9a/0x790 [ 214.735933][T18499] advance_sched+0x59e/0xc60 [ 214.740560][T18499] __hrtimer_run_queues+0x203/0xc10 [ 214.745884][T18499] hrtimer_interrupt+0x31b/0x800 [ 214.750889][T18499] __sysvec_apic_timer_interrupt+0x14a/0x430 [ 214.756915][T18499] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 214.762844][T18499] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 214.768868][T18499] [ 214.771296][T18499] The buggy address belongs to the object at ffff88807da21400 [ 214.771296][T18499] which belongs to the cache kmalloc-512 of size 512 [ 214.785376][T18499] The buggy address is located 192 bytes inside of [ 214.785376][T18499] freed 512-byte region [ffff88807da21400, ffff88807da21600) [ 214.799380][T18499] [ 214.801720][T18499] The buggy address belongs to the physical page: [ 214.808155][T18499] page:ffffea0001f68840 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7da21 [ 214.818343][T18499] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 214.825917][T18499] page_type: 0x4() [ 214.829787][T18499] raw: 00fff00000000200 ffff888012840600 ffffea0001f85450 ffffea0001f99f50 [ 214.838481][T18499] raw: 0000000000000000 ffff88807da21000 0000000100000004 0000000000000000 [ 214.847259][T18499] page dumped because: kasan: bad access detected [ 214.853792][T18499] page_owner tracks the page as allocated [ 214.859608][T18499] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x342020(__GFP_HIGH|__GFP_NOWARN|__GFP_COMP|__GFP_HARDWALL|__GFP_THISNODE), pid 5370, tgid 5370 (syz-executor.5), ts 100931925535, free_ts 72708865723 [ 214.881261][T18499] post_alloc_hook+0x2d2/0x350 [ 214.886075][T18499] get_page_from_freelist+0x10a9/0x31e0 [ 214.891745][T18499] __alloc_pages+0x1d0/0x4a0 [ 214.896363][T18499] cache_grow_begin+0x99/0x3a0 [ 214.901166][T18499] cache_alloc_refill+0x294/0x3a0 [ 214.906623][T18499] __kmem_cache_alloc_node+0x3c9/0x470 [ 214.912428][T18499] __kmalloc+0x4c/0x100 [ 214.916761][T18499] switchdev_deferred_enqueue+0x2b/0x2a0 [ 214.922706][T18499] switchdev_port_attr_set+0xb1/0x110 [ 214.929165][T18499] br_set_state+0x233/0x860 [ 214.933975][T18499] br_init_port+0xbe/0x250 [ 214.938503][T18499] br_add_if+0x600/0x1bb0 [ 214.943134][T18499] do_set_master+0x1bc/0x220 [ 214.948107][T18499] do_setlink+0xa07/0x3fa0 [ 214.952647][T18499] __rtnl_newlink+0xc04/0x18c0 [ 214.957541][T18499] rtnl_newlink+0x67/0xa0 [ 214.961912][T18499] page last free stack trace: [ 214.966651][T18499] free_unref_page_prepare+0x508/0xb90 [ 214.972140][T18499] free_unref_page+0x33/0x3b0 [ 214.977510][T18499] vfree+0x181/0x7a0 [ 214.981452][T18499] kcov_put+0x26/0x40 [ 214.985742][T18499] kcov_close+0x10/0x20 [ 214.989955][T18499] __fput+0x3fd/0xac0 [ 214.993976][T18499] task_work_run+0x14d/0x240 [ 214.998710][T18499] do_exit+0xa99/0x2a20 [ 215.002996][T18499] do_group_exit+0xd4/0x2a0 [ 215.007541][T18499] get_signal+0x23ea/0x2770 [ 215.012070][T18499] arch_do_signal_or_restart+0x89/0x5f0 [ 215.017671][T18499] exit_to_user_mode_prepare+0x11f/0x240 [ 215.023358][T18499] syscall_exit_to_user_mode+0x1d/0x50 [ 215.029395][T18499] do_syscall_64+0x44/0xb0 [ 215.033931][T18499] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 215.039944][T18499] [ 215.042286][T18499] Memory state around the buggy address: [ 215.047991][T18499] ffff88807da21380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 215.056079][T18499] ffff88807da21400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.064186][T18499] >ffff88807da21480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.072269][T18499] ^ [ 215.078540][T18499] ffff88807da21500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.086638][T18499] ffff88807da21580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.094721][T18499] ================================================================== [ 215.153276][T18499] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 215.160521][T18499] CPU: 1 PID: 18499 Comm: syz-executor.3 Not tainted 6.5.0-rc4-syzkaller-00009-g4b954598a47b #0 [ 215.171049][T18499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 215.181215][T18499] Call Trace: [ 215.184525][T18499] [ 215.187475][T18499] dump_stack_lvl+0xd9/0x1b0 [ 215.192113][T18499] panic+0x6a4/0x750 [ 215.196223][T18499] ? panic_smp_self_stop+0xa0/0xa0 [ 215.201459][T18499] ? preempt_schedule_thunk+0x1a/0x30 [ 215.206885][T18499] ? preempt_schedule_common+0x45/0xc0 [ 215.212388][T18499] check_panic_on_warn+0xab/0xb0 [ 215.217438][T18499] end_report+0x108/0x150 [ 215.221813][T18499] kasan_report+0xea/0x110 [ 215.226249][T18499] ? taprio_dump+0xb84/0xc90 [ 215.230937][T18499] ? taprio_dump+0xb84/0xc90 [ 215.235538][T18499] taprio_dump+0xb84/0xc90 [ 215.239978][T18499] ? taprio_enqueue+0x7e0/0x7e0 [ 215.244925][T18499] ? __nla_put+0x27/0x40 [ 215.249269][T18499] ? taprio_enqueue+0x7e0/0x7e0 [ 215.254301][T18499] tc_fill_qdisc+0x62d/0x12e0 [ 215.259006][T18499] ? __kmalloc_node_track_caller+0xe5/0x100 [ 215.265090][T18499] ? qdisc_watchdog_schedule_range_ns+0x400/0x400 [ 215.271523][T18499] ? __build_skb_around+0x278/0x3b0 [ 215.276742][T18499] qdisc_notify.isra.0+0x2bd/0x330 [ 215.281959][T18499] tc_modify_qdisc+0x1158/0x1bf0 [ 215.286918][T18499] ? qdisc_create+0x10a0/0x10a0 [ 215.291877][T18499] ? qdisc_create+0x10a0/0x10a0 [ 215.296751][T18499] rtnetlink_rcv_msg+0x439/0xd30 [ 215.301876][T18499] ? rtnl_getlink+0xb40/0xb40 [ 215.306655][T18499] ? netdev_core_pick_tx+0x390/0x390 [ 215.311956][T18499] netlink_rcv_skb+0x16b/0x440 [ 215.316754][T18499] ? rtnl_getlink+0xb40/0xb40 [ 215.322323][T18499] ? netlink_ack+0x1370/0x1370 [ 215.327294][T18499] ? netlink_deliver_tap+0x1b1/0xd00 [ 215.332825][T18499] netlink_unicast+0x539/0x800 [ 215.337656][T18499] ? netlink_attachskb+0x880/0x880 [ 215.343013][T18499] netlink_sendmsg+0x93c/0xe30 [ 215.347794][T18499] ? netlink_unicast+0x800/0x800 [ 215.352942][T18499] ? netlink_unicast+0x800/0x800 [ 215.358331][T18499] sock_sendmsg+0xd9/0x180 [ 215.362867][T18499] ____sys_sendmsg+0x6ac/0x940 [ 215.367642][T18499] ? copy_msghdr_from_user+0x10b/0x160 [ 215.373144][T18499] ? kernel_sendmsg+0x50/0x50 [ 215.378009][T18499] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 215.384105][T18499] ___sys_sendmsg+0x135/0x1d0 [ 215.388798][T18499] ? do_recvmmsg+0x740/0x740 [ 215.393420][T18499] ? __fget_light+0xe6/0x260 [ 215.398037][T18499] __sys_sendmsg+0x117/0x1e0 [ 215.402655][T18499] ? __sys_sendmsg_sock+0x30/0x30 [ 215.407706][T18499] ? xfd_validate_state+0x5d/0x180 [ 215.413384][T18499] ? syscall_enter_from_user_mode+0x26/0x80 [ 215.419414][T18499] do_syscall_64+0x38/0xb0 [ 215.423948][T18499] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 215.430219][T18499] RIP: 0033:0x7fc2d0c79829 [ 215.434751][T18499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 215.454830][T18499] RSP: 002b:00007fc2d1df90c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.463339][T18499] RAX: ffffffffffffffda RBX: 00007fc2d0d8bf60 RCX: 00007fc2d0c79829 [ 215.471802][T18499] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 215.479954][T18499] RBP: 00007fc2d0cd5074 R08: 0000000000000000 R09: 0000000000000000 [ 215.488207][T18499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.496193][T18499] R13: 000000000000000b R14: 00007fc2d0d8bf60 R15: 00007fff21b10bf8 [ 215.504174][T18499] [ 215.507489][T18499] Kernel Offset: disabled [ 215.511833][T18499] Rebooting in 86400 seconds..