Warning: Permanently added '10.128.0.44' (ED25519) to the list of known hosts. 2023/11/03 05:50:31 ignoring optional flag "sandboxArg"="0" 2023/11/03 05:50:31 parsed 1 programs [ 109.505896][ T27] kauditd_printk_skb: 74 callbacks suppressed [ 109.505911][ T27] audit: type=1400 audit(1698990631.718:203): avc: denied { getattr } for pid=5377 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 109.538864][ T27] audit: type=1400 audit(1698990631.718:204): avc: denied { read } for pid=5377 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 109.562134][ T27] audit: type=1400 audit(1698990631.718:205): avc: denied { open } for pid=5377 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 109.590951][ T27] audit: type=1400 audit(1698990631.808:206): avc: denied { mounton } for pid=5382 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 109.619218][ T27] audit: type=1400 audit(1698990631.808:207): avc: denied { mount } for pid=5382 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 109.643869][ T27] audit: type=1400 audit(1698990631.838:208): avc: denied { read write } for pid=5382 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 109.671458][ T27] audit: type=1400 audit(1698990631.838:209): avc: denied { open } for pid=5382 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 109.714890][ T27] audit: type=1400 audit(1698990631.928:210): avc: denied { unlink } for pid=5382 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 110.256467][ T27] audit: type=1400 audit(1698990632.468:211): avc: denied { relabelto } for pid=5384 comm="mkswap" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2023/11/03 05:50:33 executed programs: 0 [ 111.673387][ T5382] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 111.852405][ T4433] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.882429][ T4433] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.891093][ T4433] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.901815][ T4433] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.911988][ T4433] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 111.930465][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.956707][ T5406] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.969657][ T5406] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.979866][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.979939][ T5406] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.989247][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.004580][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.011947][ T5406] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 112.013571][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.019435][ T5406] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.027159][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.047508][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.053906][ T27] audit: type=1400 audit(1698990634.218:212): avc: denied { mounton } for pid=5395 comm="syz-executor.2" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 112.055387][ T49] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 112.082059][ T5406] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 112.084848][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.101002][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 112.114436][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.115044][ T5406] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.131647][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.139427][ T5035] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 112.147544][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.155050][ T5035] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.167393][ T5035] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.176209][ T5035] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 112.184728][ T5035] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.252939][ T4433] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 112.264258][ T4433] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 112.282388][ T4433] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 112.291127][ T4433] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 112.300413][ T4433] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 112.312046][ T4433] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 112.926039][ T5400] chnl_net:caif_netlink_parms(): no params data found [ 113.234055][ T5402] chnl_net:caif_netlink_parms(): no params data found [ 113.306059][ T5411] chnl_net:caif_netlink_parms(): no params data found [ 113.368458][ T5400] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.375775][ T5400] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.383472][ T5400] bridge_slave_0: entered allmulticast mode [ 113.390538][ T5400] bridge_slave_0: entered promiscuous mode [ 113.461054][ T5395] chnl_net:caif_netlink_parms(): no params data found [ 113.488671][ T5400] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.497877][ T5400] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.506400][ T5400] bridge_slave_1: entered allmulticast mode [ 113.514605][ T5400] bridge_slave_1: entered promiscuous mode [ 113.646175][ T5400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.743426][ T5400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.768246][ T5401] chnl_net:caif_netlink_parms(): no params data found [ 113.880069][ T5400] team0: Port device team_slave_0 added [ 113.899438][ T5400] team0: Port device team_slave_1 added [ 113.906328][ T5411] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.914207][ T5411] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.921478][ T5411] bridge_slave_0: entered allmulticast mode [ 113.928820][ T5411] bridge_slave_0: entered promiscuous mode [ 113.953453][ T5395] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.960839][ T5395] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.968777][ T5395] bridge_slave_0: entered allmulticast mode [ 113.976818][ T5395] bridge_slave_0: entered promiscuous mode [ 113.988820][ T5407] chnl_net:caif_netlink_parms(): no params data found [ 114.006855][ T5402] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.013359][ T5035] Bluetooth: hci0: command 0x0409 tx timeout [ 114.014426][ T5402] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.028082][ T5402] bridge_slave_0: entered allmulticast mode [ 114.035916][ T5402] bridge_slave_0: entered promiscuous mode [ 114.046723][ T5402] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.054813][ T5402] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.063227][ T5402] bridge_slave_1: entered allmulticast mode [ 114.070886][ T5402] bridge_slave_1: entered promiscuous mode [ 114.092027][ T5035] Bluetooth: hci1: command 0x0409 tx timeout [ 114.130306][ T5411] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.138990][ T5411] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.148547][ T5411] bridge_slave_1: entered allmulticast mode [ 114.156629][ T5411] bridge_slave_1: entered promiscuous mode [ 114.172071][ T5035] Bluetooth: hci2: command 0x0409 tx timeout [ 114.181681][ T5395] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.189384][ T5395] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.196915][ T5395] bridge_slave_1: entered allmulticast mode [ 114.204862][ T5395] bridge_slave_1: entered promiscuous mode [ 114.251950][ T5035] Bluetooth: hci4: command 0x0409 tx timeout [ 114.251979][ T4433] Bluetooth: hci3: command 0x0409 tx timeout [ 114.347787][ T5395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.386078][ T5402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.412724][ T4433] Bluetooth: hci5: command 0x0409 tx timeout [ 114.439521][ T5400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.446685][ T5400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.474343][ T5400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.492050][ T5400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.500129][ T5400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.528693][ T5400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.545192][ T5411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.557881][ T5395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.600308][ T5402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.629477][ T5401] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.639198][ T5401] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.647895][ T5401] bridge_slave_0: entered allmulticast mode [ 114.656295][ T5401] bridge_slave_0: entered promiscuous mode [ 114.692453][ T5411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.726234][ T5395] team0: Port device team_slave_0 added [ 114.772668][ T5401] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.780205][ T5401] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.788571][ T5401] bridge_slave_1: entered allmulticast mode [ 114.796012][ T5401] bridge_slave_1: entered promiscuous mode [ 114.844749][ T5400] hsr_slave_0: entered promiscuous mode [ 114.852195][ T5400] hsr_slave_1: entered promiscuous mode [ 114.877905][ T5395] team0: Port device team_slave_1 added [ 114.917668][ T5407] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.925179][ T5407] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.932666][ T5407] bridge_slave_0: entered allmulticast mode [ 114.939870][ T5407] bridge_slave_0: entered promiscuous mode [ 114.956682][ T5402] team0: Port device team_slave_0 added [ 115.028508][ T5411] team0: Port device team_slave_0 added [ 115.049908][ T5407] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.059712][ T5407] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.067575][ T5407] bridge_slave_1: entered allmulticast mode [ 115.075408][ T5407] bridge_slave_1: entered promiscuous mode [ 115.107911][ T5402] team0: Port device team_slave_1 added [ 115.117727][ T5401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.134279][ T5401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.170562][ T5411] team0: Port device team_slave_1 added [ 115.193982][ T5395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.201242][ T5395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.227568][ T5395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.244280][ T5395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.251276][ T5395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.277929][ T5395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.321409][ T5407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.412953][ T5401] team0: Port device team_slave_0 added [ 115.444027][ T5411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.451100][ T5411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.477461][ T5411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.493251][ T5407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.518429][ T5402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.526062][ T5402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.552782][ T5402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.566053][ T5402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.574113][ T5402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.601255][ T5402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.627291][ T5401] team0: Port device team_slave_1 added [ 115.660821][ T5411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.670394][ T5411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.698868][ T5411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.743236][ T5407] team0: Port device team_slave_0 added [ 115.835617][ T5407] team0: Port device team_slave_1 added [ 115.873401][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.880399][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.906770][ T5401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.930107][ T5395] hsr_slave_0: entered promiscuous mode [ 115.937179][ T5395] hsr_slave_1: entered promiscuous mode [ 115.944563][ T5395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.954031][ T5395] Cannot create hsr debugfs directory [ 116.000804][ T5407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.008181][ T5407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.036412][ T5407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.072082][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.079286][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.095430][ T4433] Bluetooth: hci0: command 0x041b tx timeout [ 116.107132][ T5401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.170170][ T5402] hsr_slave_0: entered promiscuous mode [ 116.176577][ T4433] Bluetooth: hci1: command 0x041b tx timeout [ 116.183369][ T5402] hsr_slave_1: entered promiscuous mode [ 116.190011][ T5402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.198168][ T5402] Cannot create hsr debugfs directory [ 116.234927][ T5407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.242164][ T5407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.270971][ T5407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.282374][ T4433] Bluetooth: hci2: command 0x041b tx timeout [ 116.333316][ T4433] Bluetooth: hci4: command 0x041b tx timeout [ 116.339695][ T4433] Bluetooth: hci3: command 0x041b tx timeout [ 116.387751][ T5401] hsr_slave_0: entered promiscuous mode [ 116.396582][ T5401] hsr_slave_1: entered promiscuous mode [ 116.404027][ T5401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.412493][ T5401] Cannot create hsr debugfs directory [ 116.446940][ T5411] hsr_slave_0: entered promiscuous mode [ 116.454863][ T5411] hsr_slave_1: entered promiscuous mode [ 116.462331][ T5411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.470039][ T5411] Cannot create hsr debugfs directory [ 116.492288][ T4433] Bluetooth: hci5: command 0x041b tx timeout [ 116.669168][ T5407] hsr_slave_0: entered promiscuous mode [ 116.679259][ T5407] hsr_slave_1: entered promiscuous mode [ 116.687939][ T5407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.701828][ T5407] Cannot create hsr debugfs directory [ 117.278580][ T5400] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 117.306465][ T5400] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 117.400832][ T5400] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 117.418153][ T5400] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 117.718537][ T5402] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 117.758110][ T5402] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 117.773718][ T5402] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 117.785632][ T5402] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 117.938026][ T5411] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.956372][ T5411] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.971032][ T5411] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.991421][ T5411] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.126309][ T5395] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 118.141694][ T5395] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 118.177430][ T5395] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 118.186496][ T4433] Bluetooth: hci0: command 0x040f tx timeout [ 118.190027][ T5395] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 118.252635][ T4433] Bluetooth: hci1: command 0x040f tx timeout [ 118.342260][ T4433] Bluetooth: hci2: command 0x040f tx timeout [ 118.412037][ T4433] Bluetooth: hci3: command 0x040f tx timeout [ 118.412199][ T5035] Bluetooth: hci4: command 0x040f tx timeout [ 118.491003][ T5400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.573038][ T5035] Bluetooth: hci5: command 0x040f tx timeout [ 118.820770][ T5401] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 118.846701][ T5401] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 118.908357][ T5401] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 119.160413][ T5401] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 119.270694][ T5400] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.314387][ T5402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.335890][ T5411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.478774][ T5046] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.486424][ T5046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.696199][ T5046] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.703674][ T5046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.840246][ T5411] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.870793][ T5402] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.004577][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.011910][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.050129][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.058177][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.094496][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.101986][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.251268][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.258718][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.267020][ T5035] Bluetooth: hci0: command 0x0419 tx timeout [ 120.332742][ T5035] Bluetooth: hci1: command 0x0419 tx timeout [ 120.392672][ T5400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.412839][ T5035] Bluetooth: hci2: command 0x0419 tx timeout [ 120.494713][ T5035] Bluetooth: hci3: command 0x0419 tx timeout [ 120.494721][ T4433] Bluetooth: hci4: command 0x0419 tx timeout [ 120.662120][ T5035] Bluetooth: hci5: command 0x0419 tx timeout [ 120.690281][ T5395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.864296][ T5407] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.944116][ T5395] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.951629][ T5407] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.980571][ T5407] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.073227][ T5411] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.106101][ T5407] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.149145][ T5401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.196880][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.205219][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.356639][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.363914][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.484042][ T5401] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.553023][ T5400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.599288][ T5044] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.606967][ T5044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.735550][ T5044] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.742969][ T5044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.068791][ T5411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.187024][ T5400] veth0_vlan: entered promiscuous mode [ 122.360185][ T5402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.425798][ T5400] veth1_vlan: entered promiscuous mode [ 122.517416][ T5407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.735427][ T5407] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.840834][ T5400] veth0_macvtap: entered promiscuous mode [ 122.858607][ T5472] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.866369][ T5472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.889862][ T5472] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.897476][ T5472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.978391][ T5400] veth1_macvtap: entered promiscuous mode [ 122.999481][ T5395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.028719][ T5402] veth0_vlan: entered promiscuous mode [ 123.164957][ T5401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.210338][ T5402] veth1_vlan: entered promiscuous mode [ 123.312101][ T5400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.463471][ T5400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.591376][ T5400] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.606362][ T5400] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.617179][ T5400] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.632440][ T5400] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.681343][ T5395] veth0_vlan: entered promiscuous mode [ 123.695649][ T5411] veth0_vlan: entered promiscuous mode [ 123.784340][ T5395] veth1_vlan: entered promiscuous mode [ 123.843868][ T5411] veth1_vlan: entered promiscuous mode [ 123.869875][ T5402] veth0_macvtap: entered promiscuous mode [ 123.937031][ T5402] veth1_macvtap: entered promiscuous mode [ 124.262895][ T5402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.286432][ T5402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.305116][ T5402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.331499][ T5411] veth0_macvtap: entered promiscuous mode [ 124.365129][ T5395] veth0_macvtap: entered promiscuous mode [ 124.424677][ T5402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.442902][ T5402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.457990][ T5402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.485844][ T5411] veth1_macvtap: entered promiscuous mode [ 124.505642][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.517559][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.545650][ T5402] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.564621][ T5402] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.580021][ T5402] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.589592][ T5402] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.616993][ T5407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.649813][ T5395] veth1_macvtap: entered promiscuous mode [ 124.832712][ T5401] veth0_vlan: entered promiscuous mode [ 124.849418][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.872719][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.888758][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.902498][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.923190][ T5411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.968399][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.990994][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.991628][ T5395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.018444][ T5395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.037197][ T5395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.062765][ T5395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.082124][ T5395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.101949][ T5395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.122418][ T5395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.223754][ T5395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.236527][ T5395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.248064][ T5395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.259303][ T5395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.271118][ T5395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.286688][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.300100][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.310812][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.322946][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.333457][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.345564][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.357811][ T5411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.402583][ T27] audit: type=1400 audit(1698990647.608:213): avc: denied { mounton } for pid=5400 comm="syz-executor.1" path="/dev/binderfs" dev="devtmpfs" ino=2321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 125.413405][ T5401] veth1_vlan: entered promiscuous mode [ 125.466869][ T5395] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.476386][ T5395] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.495188][ T5395] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.507505][ T5395] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.527864][ T5411] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.539198][ T5411] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.550745][ T5411] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.560188][ T5411] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.707103][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.732737][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.742952][ T27] audit: type=1400 audit(1698990647.958:214): avc: denied { read } for pid=5596 comm="syz-executor.1" name="iommu" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.876212][ T27] audit: type=1400 audit(1698990647.988:215): avc: denied { open } for pid=5596 comm="syz-executor.1" path="/dev/iommu" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 2023/11/03 05:50:48 executed programs: 6 [ 125.920257][ T5407] veth0_vlan: entered promiscuous mode [ 125.937573][ T27] audit: type=1400 audit(1698990647.988:216): avc: denied { ioctl } for pid=5596 comm="syz-executor.1" path="/dev/iommu" dev="devtmpfs" ino=625 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.030358][ T5401] veth0_macvtap: entered promiscuous mode [ 126.055804][ T5407] veth1_vlan: entered promiscuous mode [ 126.155291][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.210245][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.223782][ T5401] veth1_macvtap: entered promiscuous mode [ 126.475568][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.503459][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.519173][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.538900][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.549207][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.576157][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.607999][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.645076][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.678250][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.690598][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.706635][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.830155][ T5407] veth0_macvtap: entered promiscuous mode [ 126.921305][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.974647][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.011940][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.054336][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.075074][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.095095][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.108084][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.145918][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.160363][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.186597][ T5407] veth1_macvtap: entered promiscuous mode [ 127.201221][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.217365][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.294903][ T5401] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.309646][ T5401] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.320159][ T5401] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.345817][ T5401] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.431251][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.456740][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.467932][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.479532][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.489520][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.500519][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.511003][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.526019][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.536587][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.547485][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.567432][ T5407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.628432][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.651000][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.665760][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.677242][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.691058][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.711552][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.723687][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.735132][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.747373][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.758929][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.775289][ T5407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.843075][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.851063][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.875006][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.889047][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.903470][ T5407] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.916114][ T5407] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.927441][ T5407] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.941261][ T5407] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.389428][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.407922][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.583819][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.616306][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.724397][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.745198][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.858470][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.882003][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2023/11/03 05:50:53 executed programs: 62 [ 133.420847][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.431454][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.886823][ T6257] ================================================================== [ 135.895066][ T6257] BUG: KASAN: slab-use-after-free in __up_read+0x627/0x750 [ 135.902491][ T6257] Read of size 8 at addr ffff88801c36c868 by task syz-executor.3/6257 [ 135.910668][ T6257] [ 135.913023][ T6257] CPU: 1 PID: 6257 Comm: syz-executor.3 Not tainted 6.6.0-rc7-syzkaller-00195-g2af9b20dbb39-dirty #0 [ 135.923979][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 135.934246][ T6257] Call Trace: [ 135.937722][ T6257] [ 135.940853][ T6257] dump_stack_lvl+0xd9/0x1b0 [ 135.945596][ T6257] print_report+0xc4/0x620 [ 135.950256][ T6257] ? __virt_addr_valid+0x5e/0x2d0 [ 135.955612][ T6257] ? __phys_addr+0xc6/0x140 [ 135.960699][ T6257] kasan_report+0xda/0x110 [ 135.965271][ T6257] ? __up_read+0x627/0x750 [ 135.969735][ T6257] ? __up_read+0x627/0x750 [ 135.974716][ T6257] __up_read+0x627/0x750 [ 135.979610][ T6257] ? do_raw_spin_lock+0x12e/0x2b0 [ 135.984848][ T6257] ? up_write+0x510/0x510 [ 135.989394][ T6257] ? spin_bug+0x1d0/0x1d0 [ 135.993801][ T6257] iommufd_vfio_ioas+0x46c/0x580 [ 135.998873][ T6257] ? _copy_from_user+0x5d/0xf0 [ 136.003676][ T6257] iommufd_fops_ioctl+0x347/0x4d0 [ 136.008809][ T6257] ? iommufd_destroy+0x180/0x180 [ 136.013749][ T6257] ? selinux_file_ioctl+0x17d/0x270 [ 136.019330][ T6257] ? selinux_file_ioctl+0xb5/0x270 [ 136.024445][ T6257] ? iommufd_destroy+0x180/0x180 [ 136.029646][ T6257] __x64_sys_ioctl+0x18f/0x210 [ 136.034430][ T6257] do_syscall_64+0x38/0xb0 [ 136.038944][ T6257] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 136.045020][ T6257] RIP: 0033:0x7f8704c7cae9 [ 136.049650][ T6257] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 136.069762][ T6257] RSP: 002b:00007f870596e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.078280][ T6257] RAX: ffffffffffffffda RBX: 00007f8704d9c050 RCX: 00007f8704c7cae9 [ 136.086522][ T6257] RDX: 0000000020000080 RSI: 0000000000003b88 RDI: 0000000000000003 [ 136.094580][ T6257] RBP: 00007f8704cc847a R08: 0000000000000000 R09: 0000000000000000 [ 136.102665][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.110815][ T6257] R13: 000000000000000b R14: 00007f8704d9c050 R15: 00007ffcfcbdc3a8 [ 136.118963][ T6257] [ 136.122007][ T6257] [ 136.124329][ T6257] Allocated by task 6255: [ 136.128911][ T6257] kasan_save_stack+0x33/0x50 [ 136.133605][ T6257] kasan_set_track+0x25/0x30 [ 136.138201][ T6257] __kasan_kmalloc+0xa3/0xb0 [ 136.142901][ T6257] __kmalloc+0x60/0x100 [ 136.147065][ T6257] _iommufd_object_alloc+0x26/0x1b0 [ 136.152312][ T6257] iommufd_ioas_alloc_ioctl+0xaf/0x370 [ 136.157887][ T6257] iommufd_fops_ioctl+0x347/0x4d0 [ 136.163129][ T6257] __x64_sys_ioctl+0x18f/0x210 [ 136.167981][ T6257] do_syscall_64+0x38/0xb0 [ 136.172393][ T6257] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 136.178376][ T6257] [ 136.180687][ T6257] Freed by task 6260: [ 136.184831][ T6257] kasan_save_stack+0x33/0x50 [ 136.189788][ T6257] kasan_set_track+0x25/0x30 [ 136.194489][ T6257] kasan_save_free_info+0x28/0x40 [ 136.199715][ T6257] ____kasan_slab_free+0x138/0x190 [ 136.204911][ T6257] __kmem_cache_free+0xcc/0x2d0 [ 136.210025][ T6257] iommufd_destroy+0x11e/0x180 [ 136.214883][ T6257] iommufd_fops_ioctl+0x347/0x4d0 [ 136.220013][ T6257] __x64_sys_ioctl+0x18f/0x210 [ 136.224885][ T6257] do_syscall_64+0x38/0xb0 [ 136.229322][ T6257] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 136.235238][ T6257] [ 136.237605][ T6257] Last potentially related work creation: [ 136.243567][ T6257] kasan_save_stack+0x33/0x50 [ 136.248242][ T6257] __kasan_record_aux_stack+0x78/0x80 [ 136.253701][ T6257] kvfree_call_rcu+0x70/0xbe0 [ 136.258669][ T6257] drop_sysctl_table+0x1d4/0x3b0 [ 136.263614][ T6257] unregister_sysctl_table+0x41/0x60 [ 136.268902][ T6257] neigh_sysctl_unregister+0x5f/0x80 [ 136.274499][ T6257] inetdev_event+0xedc/0x1900 [ 136.279376][ T6257] notifier_call_chain+0xb6/0x3b0 [ 136.284489][ T6257] call_netdevice_notifiers_info+0xb9/0x130 [ 136.290562][ T6257] dev_change_name+0x495/0x7c0 [ 136.295409][ T6257] do_setlink+0x2f99/0x3fa0 [ 136.300079][ T6257] __rtnl_newlink+0xc1d/0x1940 [ 136.305104][ T6257] rtnl_newlink+0x67/0xa0 [ 136.309480][ T6257] rtnetlink_rcv_msg+0x3c4/0xdf0 [ 136.314521][ T6257] netlink_rcv_skb+0x16b/0x440 [ 136.319291][ T6257] netlink_unicast+0x536/0x810 [ 136.324083][ T6257] netlink_sendmsg+0x93c/0xe40 [ 136.328840][ T6257] __sock_sendmsg+0xd5/0x180 [ 136.333422][ T6257] __sys_sendto+0x255/0x340 [ 136.338125][ T6257] __x64_sys_sendto+0xe0/0x1b0 [ 136.343339][ T6257] do_syscall_64+0x38/0xb0 [ 136.347964][ T6257] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 136.353877][ T6257] [ 136.356216][ T6257] The buggy address belongs to the object at ffff88801c36c800 [ 136.356216][ T6257] which belongs to the cache kmalloc-cg-1k of size 1024 [ 136.370976][ T6257] The buggy address is located 104 bytes inside of [ 136.370976][ T6257] freed 1024-byte region [ffff88801c36c800, ffff88801c36cc00) [ 136.384847][ T6257] [ 136.387246][ T6257] The buggy address belongs to the physical page: [ 136.393646][ T6257] page:ffffea000070db00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1c36c [ 136.404050][ T6257] memcg:ffff88801770ad81 [ 136.408382][ T6257] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 136.416012][ T6257] page_type: 0x2() [ 136.419841][ T6257] raw: 00fff00000000800 ffff888012c4d800 ffffea0001f77e50 ffffea00007fbfd0 [ 136.428880][ T6257] raw: 0000000000000000 ffff88801c36c000 0000000100000002 ffff88801770ad81 [ 136.437547][ T6257] page dumped because: kasan: bad access detected [ 136.443957][ T6257] page_owner tracks the page as allocated [ 136.449662][ T6257] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2c20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_THISNODE), pid 4694, tgid 4694 (dhcpcd), ts 56107701927, free_ts 46839953379 [ 136.471583][ T6257] post_alloc_hook+0x2cf/0x340 [ 136.476549][ T6257] get_page_from_freelist+0xee0/0x2f20 [ 136.482030][ T6257] __alloc_pages+0x1d0/0x4a0 [ 136.486633][ T6257] cache_grow_begin+0x99/0x3a0 [ 136.491394][ T6257] cache_alloc_refill+0x294/0x3a0 [ 136.496589][ T6257] __kmem_cache_alloc_node+0x3c5/0x470 [ 136.502129][ T6257] __kmalloc_node_track_caller+0x50/0x100 [ 136.507946][ T6257] kmalloc_reserve+0xef/0x260 [ 136.512620][ T6257] __alloc_skb+0x12b/0x330 [ 136.517470][ T6257] alloc_skb_with_frags+0xe4/0x710 [ 136.522833][ T6257] sock_alloc_send_pskb+0x7e4/0x970 [ 136.528254][ T6257] unix_dgram_sendmsg+0x455/0x1c30 [ 136.533397][ T6257] __sock_sendmsg+0xd5/0x180 [ 136.538184][ T6257] sock_write_iter+0x29b/0x3d0 [ 136.543075][ T6257] do_iter_readv_writev+0x21e/0x3c0 [ 136.548288][ T6257] do_iter_write+0x17f/0x830 [ 136.553225][ T6257] page last free stack trace: [ 136.557895][ T6257] free_unref_page_prepare+0x476/0xa40 [ 136.564046][ T6257] free_unref_page+0x33/0x3b0 [ 136.568991][ T6257] slabs_destroy+0x85/0xc0 [ 136.573594][ T6257] ___cache_free+0x2b7/0x420 [ 136.578205][ T6257] qlist_free_all+0x4c/0x1b0 [ 136.582806][ T6257] kasan_quarantine_reduce+0x18e/0x1d0 [ 136.588451][ T6257] __kasan_slab_alloc+0x65/0x90 [ 136.593396][ T6257] kmem_cache_alloc+0x159/0x400 [ 136.598620][ T6257] getname_flags.part.0+0x50/0x4e0 [ 136.603949][ T6257] getname+0x90/0xe0 [ 136.608143][ T6257] do_sys_openat2+0x100/0x1e0 [ 136.612995][ T6257] __x64_sys_openat+0x175/0x210 [ 136.617931][ T6257] do_syscall_64+0x38/0xb0 [ 136.622351][ T6257] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 136.628508][ T6257] [ 136.630825][ T6257] Memory state around the buggy address: [ 136.636527][ T6257] ffff88801c36c700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 136.644750][ T6257] ffff88801c36c780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 136.652895][ T6257] >ffff88801c36c800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.661294][ T6257] ^ [ 136.669009][ T6257] ffff88801c36c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.677061][ T6257] ffff88801c36c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.685198][ T6257] ================================================================== [ 136.744702][ T6257] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 136.752209][ T6257] CPU: 0 PID: 6257 Comm: syz-executor.3 Not tainted 6.6.0-rc7-syzkaller-00195-g2af9b20dbb39-dirty #0 [ 136.763244][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 136.774631][ T6257] Call Trace: [ 136.778285][ T6257] [ 136.781272][ T6257] dump_stack_lvl+0xd9/0x1b0 [ 136.786068][ T6257] panic+0x6a6/0x750 [ 136.790044][ T6257] ? panic_smp_self_stop+0xa0/0xa0 [ 136.795302][ T6257] ? preempt_schedule_thunk+0x1a/0x30 [ 136.801020][ T6257] ? preempt_schedule_common+0x45/0xc0 [ 136.806694][ T6257] check_panic_on_warn+0xab/0xb0 [ 136.812276][ T6257] end_report+0x108/0x150 [ 136.816726][ T6257] kasan_report+0xea/0x110 [ 136.821174][ T6257] ? __up_read+0x627/0x750 [ 136.825636][ T6257] ? __up_read+0x627/0x750 [ 136.830079][ T6257] __up_read+0x627/0x750 [ 136.834518][ T6257] ? do_raw_spin_lock+0x12e/0x2b0 [ 136.839578][ T6257] ? up_write+0x510/0x510 [ 136.843935][ T6257] ? spin_bug+0x1d0/0x1d0 [ 136.848391][ T6257] iommufd_vfio_ioas+0x46c/0x580 [ 136.853645][ T6257] ? _copy_from_user+0x5d/0xf0 [ 136.858543][ T6257] iommufd_fops_ioctl+0x347/0x4d0 [ 136.863701][ T6257] ? iommufd_destroy+0x180/0x180 [ 136.868683][ T6257] ? selinux_file_ioctl+0x17d/0x270 [ 136.873934][ T6257] ? selinux_file_ioctl+0xb5/0x270 [ 136.879259][ T6257] ? iommufd_destroy+0x180/0x180 [ 136.884485][ T6257] __x64_sys_ioctl+0x18f/0x210 [ 136.889626][ T6257] do_syscall_64+0x38/0xb0 2023/11/03 05:50:59 executed programs: 182 [ 136.894168][ T6257] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 136.900370][ T6257] RIP: 0033:0x7f8704c7cae9 [ 136.904819][ T6257] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 136.924810][ T6257] RSP: 002b:00007f870596e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.933475][ T6257] RAX: ffffffffffffffda RBX: 00007f8704d9c050 RCX: 00007f8704c7cae9 [ 136.942270][ T6257] RDX: 0000000020000080 RSI: 0000000000003b88 RDI: 0000000000000003 [ 136.950448][ T6257] RBP: 00007f8704cc847a R08: 0000000000000000 R09: 0000000000000000 [ 136.958542][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.967099][ T6257] R13: 000000000000000b R14: 00007f8704d9c050 R15: 00007ffcfcbdc3a8 [ 136.975448][ T6257] [ 136.978759][ T6257] Kernel Offset: disabled [ 136.983338][ T6257] Rebooting in 86400 seconds..