Warning: Permanently added '10.128.1.176' (ED25519) to the list of known hosts. 2024/04/24 15:13:26 ignoring optional flag "sandboxArg"="0" 2024/04/24 15:13:26 parsed 1 programs 2024/04/24 15:13:28 executed programs: 0 [ 92.294942][ T5424] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.455123][ T4479] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.473289][ T5441] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.484516][ T5441] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.494766][ T5441] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.505824][ T5447] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.509500][ T5449] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.513838][ T5441] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.522951][ T5449] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.528922][ T5447] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.535939][ T5449] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.542180][ T5441] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.550004][ T5449] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.556690][ T5441] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.565799][ T5449] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.572240][ T5447] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.578660][ T5449] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.586813][ T5441] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.594449][ T5449] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.600337][ T5447] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.607476][ T5451] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.622375][ T5449] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.631561][ T5451] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.639858][ T5451] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.650853][ T5451] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.651526][ T5443] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.666138][ T5443] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.671686][ T5451] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.673849][ T5443] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.680620][ T5451] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.688852][ T5443] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.170369][ T5453] chnl_net:caif_netlink_parms(): no params data found [ 93.246953][ T5455] chnl_net:caif_netlink_parms(): no params data found [ 93.326332][ T5454] chnl_net:caif_netlink_parms(): no params data found [ 93.428279][ T5453] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.435657][ T5453] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.443044][ T5453] bridge_slave_0: entered allmulticast mode [ 93.450387][ T5453] bridge_slave_0: entered promiscuous mode [ 93.461284][ T5453] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.469531][ T5453] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.479082][ T5453] bridge_slave_1: entered allmulticast mode [ 93.486702][ T5453] bridge_slave_1: entered promiscuous mode [ 93.504409][ T5456] chnl_net:caif_netlink_parms(): no params data found [ 93.617486][ T5453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.627352][ T5452] chnl_net:caif_netlink_parms(): no params data found [ 93.642021][ T5455] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.649620][ T5455] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.657514][ T5455] bridge_slave_0: entered allmulticast mode [ 93.664422][ T5455] bridge_slave_0: entered promiscuous mode [ 93.694700][ T5454] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.702908][ T5454] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.710668][ T5454] bridge_slave_0: entered allmulticast mode [ 93.718690][ T5454] bridge_slave_0: entered promiscuous mode [ 93.730770][ T5453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.772763][ T5455] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.782443][ T5455] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.790680][ T5455] bridge_slave_1: entered allmulticast mode [ 93.797882][ T5455] bridge_slave_1: entered promiscuous mode [ 93.819974][ T5454] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.827590][ T5454] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.834928][ T5454] bridge_slave_1: entered allmulticast mode [ 93.844013][ T5454] bridge_slave_1: entered promiscuous mode [ 93.882490][ T5453] team0: Port device team_slave_0 added [ 93.954846][ T5454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.969490][ T5453] team0: Port device team_slave_1 added [ 93.998688][ T5455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.008655][ T5456] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.016781][ T5456] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.024619][ T5456] bridge_slave_0: entered allmulticast mode [ 94.031885][ T5456] bridge_slave_0: entered promiscuous mode [ 94.040780][ T5456] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.048456][ T5456] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.056848][ T5456] bridge_slave_1: entered allmulticast mode [ 94.064005][ T5456] bridge_slave_1: entered promiscuous mode [ 94.073756][ T5454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.108279][ T5453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.115642][ T5453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.145734][ T5453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.182388][ T5455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.227168][ T5454] team0: Port device team_slave_0 added [ 94.237886][ T5453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.245428][ T5453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.274114][ T5453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.292324][ T5452] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.301632][ T5452] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.310327][ T5452] bridge_slave_0: entered allmulticast mode [ 94.319783][ T5452] bridge_slave_0: entered promiscuous mode [ 94.350439][ T5454] team0: Port device team_slave_1 added [ 94.384105][ T5452] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.393476][ T5452] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.401287][ T5452] bridge_slave_1: entered allmulticast mode [ 94.409485][ T5452] bridge_slave_1: entered promiscuous mode [ 94.438933][ T5456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.452817][ T5456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.464459][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.472488][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.502980][ T5454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.527367][ T5452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.541560][ T5455] team0: Port device team_slave_0 added [ 94.589383][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.596722][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.624174][ T5454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.636624][ T52] Bluetooth: hci0: command tx timeout [ 94.651607][ T5452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.662825][ T5455] team0: Port device team_slave_1 added [ 94.674770][ T5453] hsr_slave_0: entered promiscuous mode [ 94.681466][ T5453] hsr_slave_1: entered promiscuous mode [ 94.694172][ T5456] team0: Port device team_slave_0 added [ 94.703898][ T5456] team0: Port device team_slave_1 added [ 94.715564][ T52] Bluetooth: hci1: command tx timeout [ 94.721743][ T52] Bluetooth: hci3: command tx timeout [ 94.727654][ T5443] Bluetooth: hci4: command tx timeout [ 94.796010][ T5443] Bluetooth: hci2: command tx timeout [ 94.829278][ T5452] team0: Port device team_slave_0 added [ 94.839795][ T5452] team0: Port device team_slave_1 added [ 94.847009][ T5455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.854095][ T5455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.885506][ T5455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.901803][ T5456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.909078][ T5456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.935849][ T5456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.950362][ T5456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.958914][ T5456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.986113][ T5456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.002382][ T5454] hsr_slave_0: entered promiscuous mode [ 95.009307][ T5454] hsr_slave_1: entered promiscuous mode [ 95.017192][ T5454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.025514][ T5454] Cannot create hsr debugfs directory [ 95.048078][ T5455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.055679][ T5455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.084733][ T5455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.125816][ T5452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.133340][ T5452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.163890][ T5452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.214789][ T5452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.222209][ T5452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.249880][ T5452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.342832][ T5455] hsr_slave_0: entered promiscuous mode [ 95.349604][ T5455] hsr_slave_1: entered promiscuous mode [ 95.356789][ T5455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.364527][ T5455] Cannot create hsr debugfs directory [ 95.400994][ T5456] hsr_slave_0: entered promiscuous mode [ 95.408247][ T5456] hsr_slave_1: entered promiscuous mode [ 95.414770][ T5456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.423012][ T5456] Cannot create hsr debugfs directory [ 95.557968][ T5452] hsr_slave_0: entered promiscuous mode [ 95.566202][ T5452] hsr_slave_1: entered promiscuous mode [ 95.572752][ T5452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.581397][ T5452] Cannot create hsr debugfs directory [ 95.973646][ T5453] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.010475][ T5453] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.021971][ T5453] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.038249][ T5453] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.389230][ T5453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.434499][ T5453] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.483854][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.491354][ T5092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.526139][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.535167][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.633654][ T5455] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.658568][ T5455] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.697874][ T5455] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.716573][ T5443] Bluetooth: hci0: command tx timeout [ 96.747978][ T5455] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.796487][ T5443] Bluetooth: hci4: command tx timeout [ 96.798527][ T52] Bluetooth: hci3: command tx timeout [ 96.801942][ T5443] Bluetooth: hci1: command tx timeout [ 96.836972][ T5454] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.866902][ T5454] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.876716][ T5443] Bluetooth: hci2: command tx timeout [ 96.890731][ T5454] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.914551][ T5454] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.011347][ T5456] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.067571][ T5453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.081511][ T5456] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.113236][ T5456] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.133083][ T5456] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.343937][ T5455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.363271][ T5452] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.392700][ T5453] veth0_vlan: entered promiscuous mode [ 97.399100][ T5452] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.419327][ T5452] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.449284][ T5455] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.480202][ T5452] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.510162][ T5453] veth1_vlan: entered promiscuous mode [ 97.522198][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.529607][ T5092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.626616][ T5454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.636987][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.644537][ T5092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.777637][ T5454] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.841675][ T5504] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.849108][ T5504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.892148][ T5453] veth0_macvtap: entered promiscuous mode [ 97.924629][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.931997][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.962565][ T5456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.974097][ T5453] veth1_macvtap: entered promiscuous mode [ 98.054964][ T5452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.067121][ T5456] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.115798][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.124058][ T5092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.143548][ T5452] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.186854][ T5453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.198583][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.205970][ T5092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.221872][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.229292][ T5092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.241309][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.248947][ T5092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.336115][ T5453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.373768][ T5455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.400049][ T5453] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.409288][ T5453] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.421486][ T5453] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.433866][ T5453] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.516800][ T5454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.672413][ T5456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.721815][ T5452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.794313][ T5454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.796149][ T5443] Bluetooth: hci0: command tx timeout [ 98.849556][ T5455] veth0_vlan: entered promiscuous mode [ 98.875729][ T5443] Bluetooth: hci1: command tx timeout [ 98.876315][ T52] Bluetooth: hci3: command tx timeout [ 98.881174][ T5443] Bluetooth: hci4: command tx timeout [ 98.902741][ T5455] veth1_vlan: entered promiscuous mode [ 98.941329][ T5504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.956053][ T5443] Bluetooth: hci2: command tx timeout [ 98.988666][ T5504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.013743][ T5456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.084948][ T5454] veth0_vlan: entered promiscuous mode [ 99.194764][ T5455] veth0_macvtap: entered promiscuous mode [ 99.211465][ T5452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.240479][ T5455] veth1_macvtap: entered promiscuous mode [ 99.267735][ T5454] veth1_vlan: entered promiscuous mode [ 99.275839][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.283970][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.457033][ T5452] veth0_vlan: entered promiscuous mode [ 99.472609][ T5454] veth0_macvtap: entered promiscuous mode [ 99.504854][ T5456] veth0_vlan: entered promiscuous mode [ 99.533092][ T5455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.552410][ T5455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.565576][ T5455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.593971][ T5454] veth1_macvtap: entered promiscuous mode [ 99.619261][ T5456] veth1_vlan: entered promiscuous mode [ 99.632350][ T5577] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 99.648830][ T5577] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 2024/04/24 15:13:35 executed programs: 5 [ 99.670942][ T5452] veth1_vlan: entered promiscuous mode [ 99.678805][ T5577] Zero length message leads to an empty skb [ 99.696548][ T5455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.734193][ T5455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.759900][ T5455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.783133][ T5455] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.794307][ T5455] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.803948][ T5455] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.814172][ T5455] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.826444][ T5585] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 99.842251][ T5585] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 99.898656][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.912184][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.923900][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.947310][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.965928][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.988153][ T5591] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.000068][ T5591] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.043494][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.069445][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.083253][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.097903][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.121018][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.138606][ T5454] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.148114][ T5454] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.158139][ T5454] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.167394][ T5454] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.181734][ T5452] veth0_macvtap: entered promiscuous mode [ 100.189143][ T5594] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.201551][ T5594] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.229558][ T5452] veth1_macvtap: entered promiscuous mode [ 100.299425][ T5598] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.313449][ T5456] veth0_macvtap: entered promiscuous mode [ 100.367565][ T5598] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.409385][ T5456] veth1_macvtap: entered promiscuous mode [ 100.453710][ T5452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.493331][ T5452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.504426][ T5452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.522792][ T5452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.533453][ T5452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.546432][ T5452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.570403][ T5452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.690901][ T5452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.719050][ T5452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.729599][ T5452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.741784][ T5452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.751850][ T5452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.762787][ T5452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.775675][ T5452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.785597][ T5456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.797579][ T5456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.808507][ T5456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.819765][ T5456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.834334][ T5456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.850225][ T5456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.860250][ T5456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.871078][ T5456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.881711][ T5443] Bluetooth: hci0: command tx timeout [ 100.886247][ T5456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.944871][ T5452] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.955453][ T5443] Bluetooth: hci4: command tx timeout [ 100.956002][ T5452] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.969689][ T5443] Bluetooth: hci3: command tx timeout [ 100.969733][ T5443] Bluetooth: hci1: command tx timeout [ 100.981922][ T5452] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.990800][ T5452] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.002600][ T5456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.014729][ T5456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.024754][ T5456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.035970][ T5451] Bluetooth: hci2: command tx timeout [ 101.044065][ T5456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.056648][ T5456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.067719][ T5456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.078167][ T5456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.089268][ T5456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.101353][ T5456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.114094][ T5456] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.121842][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.125429][ T5456] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.141567][ T5456] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.147391][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.153247][ T5456] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.174476][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.199990][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.321729][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.336479][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.366804][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.396504][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.565833][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.574114][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.709443][ T783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.727312][ T783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.845943][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.877981][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.926768][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.948620][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.223213][ C0] ================================================================== [ 104.231776][ C0] BUG: KASAN: slab-use-after-free in advance_sched+0xc20/0xca0 [ 104.239631][ C0] Read of size 8 at addr ffff88801ef08510 by task syz-executor.4/5813 [ 104.247942][ C0] [ 104.250344][ C0] CPU: 0 PID: 5813 Comm: syz-executor.4 Not tainted 6.9.0-rc5-syzkaller-00036-g9d1ddab261f3 #0 [ 104.261132][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 104.271324][ C0] Call Trace: [ 104.274723][ C0] [ 104.277589][ C0] dump_stack_lvl+0x241/0x360 [ 104.282315][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.288337][ C0] ? __pfx__printk+0x10/0x10 [ 104.292978][ C0] ? _printk+0xd5/0x120 [ 104.297181][ C0] ? __virt_addr_valid+0x183/0x520 [ 104.302338][ C0] ? __virt_addr_valid+0x183/0x520 [ 104.308037][ C0] print_report+0x169/0x550 [ 104.312695][ C0] ? __virt_addr_valid+0x183/0x520 [ 104.317935][ C0] ? __virt_addr_valid+0x183/0x520 [ 104.323190][ C0] ? __virt_addr_valid+0x44e/0x520 [ 104.328473][ C0] ? __phys_addr+0xba/0x170 [ 104.333205][ C0] ? advance_sched+0xc20/0xca0 [ 104.338182][ C0] kasan_report+0x143/0x180 [ 104.342815][ C0] ? advance_sched+0xc20/0xca0 [ 104.347876][ C0] ? __pfx_advance_sched+0x10/0x10 [ 104.353546][ C0] advance_sched+0xc20/0xca0 [ 104.358357][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 104.364621][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 104.371135][ C0] ? __pfx_advance_sched+0x10/0x10 [ 104.376523][ C0] __hrtimer_run_queues+0x5a5/0xd50 [ 104.381923][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 104.387735][ C0] ? ktime_get_update_offsets_now+0x411/0x430 [ 104.393808][ C0] hrtimer_interrupt+0x396/0x990 [ 104.398775][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 104.404766][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 104.410429][ C0] [ 104.413359][ C0] [ 104.416613][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 104.422860][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 104.428155][ C0] Code: 2b 00 74 08 4c 89 f7 e8 9a e6 87 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 104.448046][ C0] RSP: 0018:ffffc90009aaf100 EFLAGS: 00000206 [ 104.454479][ C0] RAX: 0000000000000001 RBX: 1ffff92001355e2c RCX: 0000000000000001 [ 104.462447][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcaca20 RDI: ffffffff8c1f9760 [ 104.470719][ C0] RBP: ffffc90009aaf250 R08: ffffffff92f34507 R09: 1ffffffff25e68a0 [ 104.479560][ C0] R10: dffffc0000000000 R11: fffffbfff25e68a1 R12: 1ffff92001355e28 [ 104.487562][ C0] R13: dffffc0000000000 R14: ffffc90009aaf160 R15: 0000000000000246 [ 104.495678][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 104.500715][ C0] ? percpu_ref_put+0x19/0x180 [ 104.505749][ C0] ? __pfx_lock_release+0x10/0x10 [ 104.510821][ C0] ? percpu_ref_put+0x19/0x180 [ 104.515823][ C0] percpu_ref_put+0x36/0x180 [ 104.520788][ C0] ? percpu_ref_put+0x19/0x180 [ 104.525908][ C0] __mem_cgroup_uncharge_folios+0xdf/0x1c0 [ 104.532333][ C0] ? __pfx___mem_cgroup_uncharge_folios+0x10/0x10 [ 104.539310][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 104.547731][ C0] folios_put_refs+0x8e3/0xa10 [ 104.552716][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 104.558393][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 104.564941][ C0] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 104.570629][ C0] ? free_swap_cache+0xa9/0x620 [ 104.575599][ C0] free_pages_and_swap_cache+0x2ea/0x690 [ 104.582184][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 104.588911][ C0] ? tlb_table_flush+0x143/0x410 [ 104.594248][ C0] tlb_flush_mmu+0x3a3/0x680 [ 104.599051][ C0] tlb_finish_mmu+0xd4/0x200 [ 104.603920][ C0] exit_mmap+0x4bb/0xd60 [ 104.608705][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 104.613927][ C0] ? __asan_memset+0x23/0x50 [ 104.618679][ C0] ? uprobe_clear_state+0x277/0x290 [ 104.624469][ C0] ? mm_update_next_owner+0x53c/0x660 [ 104.629853][ C0] __mmput+0x115/0x3c0 [ 104.633920][ C0] exit_mm+0x220/0x310 [ 104.638001][ C0] ? __pfx_exit_mm+0x10/0x10 [ 104.642692][ C0] ? taskstats_exit+0x348/0xa70 [ 104.647623][ C0] ? tty_audit_exit+0x155/0x200 [ 104.652657][ C0] do_exit+0x99e/0x27e0 [ 104.657069][ C0] ? __pfx_do_exit+0x10/0x10 [ 104.662035][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 104.668051][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 104.674214][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 104.680555][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 104.685762][ C0] do_group_exit+0x207/0x2c0 [ 104.690563][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 104.695765][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 104.701052][ C0] get_signal+0x16a1/0x1740 [ 104.705565][ C0] ? __pfx_get_signal+0x10/0x10 [ 104.710499][ C0] arch_do_signal_or_restart+0x96/0x860 [ 104.716143][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 104.722535][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 104.728717][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 104.734450][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 104.740438][ C0] do_syscall_64+0x102/0x240 [ 104.745233][ C0] ? clear_bhb_loop+0x35/0x90 [ 104.750168][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.756607][ C0] RIP: 0033:0x7fa68ba7dda9 [ 104.761208][ C0] Code: Unable to access opcode bytes at 0x7fa68ba7dd7f. [ 104.769108][ C0] RSP: 002b:00007fa68c874178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 104.777702][ C0] RAX: fffffffffffffe00 RBX: 00007fa68bbabf88 RCX: 00007fa68ba7dda9 [ 104.785848][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa68bbabf88 [ 104.794565][ C0] RBP: 00007fa68bbabf80 R08: 00007fa68c8746c0 R09: 00007fa68c8746c0 [ 104.803079][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa68bbabf8c [ 104.811146][ C0] R13: 000000000000000b R14: 00007fa68bccf960 R15: 00007fa68bccfa48 [ 104.819203][ C0] [ 104.822240][ C0] [ 104.824563][ C0] Allocated by task 5808: [ 104.829077][ C0] kasan_save_track+0x3f/0x80 [ 104.833769][ C0] __kasan_kmalloc+0x98/0xb0 [ 104.838467][ C0] kmalloc_trace+0x1db/0x360 [ 104.843053][ C0] taprio_change+0x1030/0x42d0 [ 104.847900][ C0] tc_modify_qdisc+0x190d/0x1e40 [ 104.853705][ C0] rtnetlink_rcv_msg+0x89b/0x10d0 [ 104.858824][ C0] netlink_rcv_skb+0x1e3/0x430 [ 104.863675][ C0] netlink_unicast+0x7ea/0x980 [ 104.868627][ C0] netlink_sendmsg+0x8e1/0xcb0 [ 104.873406][ C0] __sock_sendmsg+0x221/0x270 [ 104.878098][ C0] ____sys_sendmsg+0x525/0x7d0 [ 104.882889][ C0] __sys_sendmmsg+0x3b2/0x740 [ 104.887846][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 104.893070][ C0] do_syscall_64+0xf5/0x240 [ 104.897720][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.903974][ C0] [ 104.906498][ C0] Freed by task 5455: [ 104.910487][ C0] kasan_save_track+0x3f/0x80 [ 104.915179][ C0] kasan_save_free_info+0x40/0x50 [ 104.920491][ C0] poison_slab_object+0xa6/0xe0 [ 104.925457][ C0] __kasan_slab_free+0x37/0x60 [ 104.930443][ C0] kfree+0x153/0x3a0 [ 104.934415][ C0] rcu_core+0xafd/0x1830 [ 104.938770][ C0] __do_softirq+0x2c6/0x980 [ 104.943390][ C0] [ 104.945732][ C0] Last potentially related work creation: [ 104.951761][ C0] kasan_save_stack+0x3f/0x60 [ 104.956808][ C0] __kasan_record_aux_stack+0xac/0xc0 [ 104.962300][ C0] call_rcu+0x167/0xa70 [ 104.966817][ C0] taprio_change+0x32d9/0x42d0 [ 104.971691][ C0] tc_modify_qdisc+0x190d/0x1e40 [ 104.976665][ C0] rtnetlink_rcv_msg+0x89b/0x10d0 [ 104.981702][ C0] netlink_rcv_skb+0x1e3/0x430 [ 104.986486][ C0] netlink_unicast+0x7ea/0x980 [ 104.991563][ C0] netlink_sendmsg+0x8e1/0xcb0 [ 104.996544][ C0] __sock_sendmsg+0x221/0x270 [ 105.001254][ C0] ____sys_sendmsg+0x525/0x7d0 [ 105.006133][ C0] __sys_sendmmsg+0x3b2/0x740 [ 105.010899][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 105.016200][ C0] do_syscall_64+0xf5/0x240 [ 105.020771][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.027443][ C0] [ 105.029760][ C0] The buggy address belongs to the object at ffff88801ef08400 [ 105.029760][ C0] which belongs to the cache kmalloc-512 of size 512 [ 105.044785][ C0] The buggy address is located 272 bytes inside of [ 105.044785][ C0] freed 512-byte region [ffff88801ef08400, ffff88801ef08600) [ 105.059141][ C0] [ 105.061499][ C0] The buggy address belongs to the physical page: [ 105.068391][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ef08 [ 105.077246][ C0] head: order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 105.084787][ C0] flags: 0xfff80000000840(slab|head|node=0|zone=1|lastcpupid=0xfff) [ 105.093419][ C0] page_type: 0xffffffff() [ 105.098029][ C0] raw: 00fff80000000840 ffff888015041c80 ffffea000087fe00 dead000000000002 [ 105.106723][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 105.116353][ C0] head: 00fff80000000840 ffff888015041c80 ffffea000087fe00 dead000000000002 [ 105.126527][ C0] head: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 105.136200][ C0] head: 00fff80000000002 ffffea00007bc201 ffffea00007bc248 00000000ffffffff [ 105.145224][ C0] head: 0000000400000000 0000000000000000 00000000ffffffff 0000000000000000 [ 105.153903][ C0] page dumped because: kasan: bad access detected [ 105.160393][ C0] page_owner tracks the page as allocated [ 105.166269][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4549, tgid -1583607752 (udevadm), ts 4549, free_ts 24154179892 [ 105.187544][ C0] post_alloc_hook+0x1ea/0x210 [ 105.192308][ C0] get_page_from_freelist+0x3410/0x35b0 [ 105.197853][ C0] __alloc_pages+0x256/0x6c0 [ 105.202435][ C0] alloc_slab_page+0x5f/0x160 [ 105.207371][ C0] new_slab+0x84/0x2f0 [ 105.211787][ C0] ___slab_alloc+0xc73/0x1260 [ 105.216462][ C0] kmalloc_trace+0x269/0x360 [ 105.221217][ C0] kernfs_fop_open+0x3e0/0xd10 [ 105.226257][ C0] do_dentry_open+0x907/0x15a0 [ 105.231026][ C0] path_openat+0x2860/0x3240 [ 105.235631][ C0] do_filp_open+0x235/0x490 [ 105.240135][ C0] do_sys_openat2+0x13e/0x1d0 [ 105.244808][ C0] __x64_sys_openat+0x247/0x2a0 [ 105.250860][ C0] do_syscall_64+0xf5/0x240 [ 105.256271][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.262807][ C0] page last free pid 4549 tgid 4549 stack trace: [ 105.270161][ C0] free_unref_page_prepare+0x986/0xab0 [ 105.275925][ C0] free_unref_page+0x37/0x3f0 [ 105.281653][ C0] __put_partials+0xeb/0x130 [ 105.286341][ C0] put_cpu_partial+0x17c/0x250 [ 105.291802][ C0] __slab_free+0x2ea/0x3d0 [ 105.296306][ C0] qlist_free_all+0x5e/0xc0 [ 105.300810][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 105.306271][ C0] __kasan_slab_alloc+0x23/0x80 [ 105.311325][ C0] kmem_cache_alloc+0x174/0x340 [ 105.316547][ C0] getname_flags+0xbd/0x4f0 [ 105.321639][ C0] do_sys_openat2+0xd2/0x1d0 [ 105.326574][ C0] __x64_sys_openat+0x247/0x2a0 [ 105.331722][ C0] do_syscall_64+0xf5/0x240 [ 105.336585][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.342659][ C0] [ 105.344977][ C0] Memory state around the buggy address: [ 105.350813][ C0] ffff88801ef08400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.359140][ C0] ffff88801ef08480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.367982][ C0] >ffff88801ef08500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.376269][ C0] ^ [ 105.382428][ C0] ffff88801ef08580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.390670][ C0] ffff88801ef08600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 105.398933][ C0] ================================================================== [ 105.407523][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 105.415402][ C0] CPU: 0 PID: 5813 Comm: syz-executor.4 Not tainted 6.9.0-rc5-syzkaller-00036-g9d1ddab261f3 #0 [ 105.426151][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 105.436822][ C0] Call Trace: [ 105.440198][ C0] [ 105.443066][ C0] dump_stack_lvl+0x241/0x360 [ 105.447793][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.453019][ C0] ? __pfx__printk+0x10/0x10 [ 105.457631][ C0] ? rcu_is_watching+0x15/0xb0 [ 105.462666][ C0] ? lock_release+0xbf/0x9f0 [ 105.467260][ C0] ? vscnprintf+0x5d/0x90 [ 105.471784][ C0] panic+0x349/0x860 [ 105.475770][ C0] ? check_panic_on_warn+0x21/0xb0 [ 105.480887][ C0] ? __pfx_panic+0x10/0x10 [ 105.485387][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 105.490587][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 105.496607][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 105.503021][ C0] ? print_report+0x502/0x550 [ 105.507733][ C0] check_panic_on_warn+0x86/0xb0 [ 105.512771][ C0] ? advance_sched+0xc20/0xca0 [ 105.517672][ C0] end_report+0x77/0x160 [ 105.522081][ C0] kasan_report+0x154/0x180 [ 105.526758][ C0] ? advance_sched+0xc20/0xca0 [ 105.531524][ C0] ? __pfx_advance_sched+0x10/0x10 [ 105.536637][ C0] advance_sched+0xc20/0xca0 [ 105.541366][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 105.548301][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 105.554943][ C0] ? __pfx_advance_sched+0x10/0x10 [ 105.560444][ C0] __hrtimer_run_queues+0x5a5/0xd50 [ 105.567598][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 105.574661][ C0] ? ktime_get_update_offsets_now+0x411/0x430 [ 105.581192][ C0] hrtimer_interrupt+0x396/0x990 [ 105.586244][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 105.592598][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 105.599169][ C0] [ 105.602898][ C0] [ 105.605927][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 105.612884][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 105.619672][ C0] Code: 2b 00 74 08 4c 89 f7 e8 9a e6 87 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 105.639553][ C0] RSP: 0018:ffffc90009aaf100 EFLAGS: 00000206 [ 105.645640][ C0] RAX: 0000000000000001 RBX: 1ffff92001355e2c RCX: 0000000000000001 [ 105.653842][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcaca20 RDI: ffffffff8c1f9760 [ 105.662007][ C0] RBP: ffffc90009aaf250 R08: ffffffff92f34507 R09: 1ffffffff25e68a0 [ 105.670388][ C0] R10: dffffc0000000000 R11: fffffbfff25e68a1 R12: 1ffff92001355e28 [ 105.678722][ C0] R13: dffffc0000000000 R14: ffffc90009aaf160 R15: 0000000000000246 [ 105.687146][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 105.692209][ C0] ? percpu_ref_put+0x19/0x180 [ 105.697232][ C0] ? __pfx_lock_release+0x10/0x10 [ 105.702252][ C0] ? percpu_ref_put+0x19/0x180 [ 105.707018][ C0] percpu_ref_put+0x36/0x180 [ 105.711884][ C0] ? percpu_ref_put+0x19/0x180 [ 105.717193][ C0] __mem_cgroup_uncharge_folios+0xdf/0x1c0 [ 105.723546][ C0] ? __pfx___mem_cgroup_uncharge_folios+0x10/0x10 [ 105.730089][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 105.736798][ C0] folios_put_refs+0x8e3/0xa10 [ 105.741665][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 105.747209][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 105.753915][ C0] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 105.760235][ C0] ? free_swap_cache+0xa9/0x620 [ 105.765118][ C0] free_pages_and_swap_cache+0x2ea/0x690 [ 105.770769][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 105.776955][ C0] ? tlb_table_flush+0x143/0x410 [ 105.782013][ C0] tlb_flush_mmu+0x3a3/0x680 [ 105.786706][ C0] tlb_finish_mmu+0xd4/0x200 [ 105.791477][ C0] exit_mmap+0x4bb/0xd60 [ 105.795756][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 105.800613][ C0] ? __asan_memset+0x23/0x50 [ 105.805496][ C0] ? uprobe_clear_state+0x277/0x290 [ 105.810993][ C0] ? mm_update_next_owner+0x53c/0x660 [ 105.816586][ C0] __mmput+0x115/0x3c0 [ 105.821114][ C0] exit_mm+0x220/0x310 [ 105.825184][ C0] ? __pfx_exit_mm+0x10/0x10 [ 105.830772][ C0] ? taskstats_exit+0x348/0xa70 [ 105.835746][ C0] ? tty_audit_exit+0x155/0x200 [ 105.840865][ C0] do_exit+0x99e/0x27e0 [ 105.845043][ C0] ? __pfx_do_exit+0x10/0x10 [ 105.849804][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 105.855275][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 105.861250][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 105.868285][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 105.873498][ C0] do_group_exit+0x207/0x2c0 [ 105.878197][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.883410][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 105.888613][ C0] get_signal+0x16a1/0x1740 [ 105.893219][ C0] ? __pfx_get_signal+0x10/0x10 [ 105.898062][ C0] arch_do_signal_or_restart+0x96/0x860 [ 105.903873][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 105.910025][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 105.916002][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 105.921739][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 105.927294][ C0] do_syscall_64+0x102/0x240 [ 105.932156][ C0] ? clear_bhb_loop+0x35/0x90 [ 105.936862][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.942892][ C0] RIP: 0033:0x7fa68ba7dda9 [ 105.947422][ C0] Code: Unable to access opcode bytes at 0x7fa68ba7dd7f. [ 105.954532][ C0] RSP: 002b:00007fa68c874178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 105.963311][ C0] RAX: fffffffffffffe00 RBX: 00007fa68bbabf88 RCX: 00007fa68ba7dda9 [ 105.971806][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa68bbabf88 [ 105.979861][ C0] RBP: 00007fa68bbabf80 R08: 00007fa68c8746c0 R09: 00007fa68c8746c0 [ 105.987828][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa68bbabf8c [ 105.996240][ C0] R13: 000000000000000b R14: 00007fa68bccf960 R15: 00007fa68bccfa48 [ 106.004520][ C0] [ 106.008025][ C0] Kernel Offset: disabled [ 106.012436][ C0] Rebooting in 86400 seconds..