[ 76.115198][ T772] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.98' (ED25519) to the list of known hosts. 2023/09/02 03:31:51 ignoring optional flag "sandboxArg"="0" 2023/09/02 03:31:51 parsed 1 programs 2023/09/02 03:31:52 executed programs: 0 [ 82.995418][ T5379] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.007019][ T5378] syz-execprog[5378]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.017596][ T5378] syz-execprog[5378]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.018598][ T5384] syz-execprog[5384]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.036649][ T5383] syz-execprog[5383]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.046682][ T5377] syz-execprog[5377]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.056340][ T5378] syz-execprog[5378]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.065958][ T5383] syz-execprog[5383]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.066443][ T5377] syz-execprog[5377]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.081069][ T5383] syz-execprog[5383]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.094531][ T5384] syz-execprog[5384]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.145453][ T5035] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.155229][ T5035] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.179960][ T5035] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.188055][ T5035] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.202884][ T5035] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.263786][ T4436] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.283213][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.293643][ T5406] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.302272][ T5409] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.302453][ T5407] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.310167][ T5409] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.323754][ T5407] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.324876][ T5411] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.338499][ T5407] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.345991][ T5411] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.346090][ T5406] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.361467][ T5407] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.368786][ T5411] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.375306][ T5406] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.383877][ T5406] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.383897][ T5410] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.391005][ T5406] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.398173][ T5411] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.407037][ T5406] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.413104][ T5411] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.419009][ T5406] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.425784][ T5410] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.432703][ T5406] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.441073][ T5411] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.448129][ T5406] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.457776][ T5035] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.461127][ T5406] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.483372][ T5035] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.499371][ T5035] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.837962][ T5390] chnl_net:caif_netlink_parms(): no params data found [ 83.979878][ T5390] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.987124][ T5390] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.994767][ T5390] bridge_slave_0: entered allmulticast mode [ 84.001416][ T5390] bridge_slave_0: entered promiscuous mode [ 84.009461][ T5390] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.016639][ T5390] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.023769][ T5390] bridge_slave_1: entered allmulticast mode [ 84.030353][ T5390] bridge_slave_1: entered promiscuous mode [ 84.108690][ T5390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.136680][ T5401] chnl_net:caif_netlink_parms(): no params data found [ 84.157971][ T5390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.252005][ T5390] team0: Port device team_slave_0 added [ 84.287952][ T5390] team0: Port device team_slave_1 added [ 84.294030][ T5408] chnl_net:caif_netlink_parms(): no params data found [ 84.381083][ T5390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.388147][ T5390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.414382][ T5390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.449307][ T5401] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.456539][ T5401] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.463737][ T5401] bridge_slave_0: entered allmulticast mode [ 84.470351][ T5401] bridge_slave_0: entered promiscuous mode [ 84.494441][ T5390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.501418][ T5390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.527642][ T5390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.544117][ T5397] chnl_net:caif_netlink_parms(): no params data found [ 84.554829][ T5398] chnl_net:caif_netlink_parms(): no params data found [ 84.569685][ T5401] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.576986][ T5401] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.584269][ T5401] bridge_slave_1: entered allmulticast mode [ 84.590892][ T5401] bridge_slave_1: entered promiscuous mode [ 84.740275][ T5390] hsr_slave_0: entered promiscuous mode [ 84.746522][ T5390] hsr_slave_1: entered promiscuous mode [ 84.763880][ T5401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.777446][ T5401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.796220][ T5399] chnl_net:caif_netlink_parms(): no params data found [ 84.891304][ T5397] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.898538][ T5397] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.906210][ T5397] bridge_slave_0: entered allmulticast mode [ 84.913438][ T5397] bridge_slave_0: entered promiscuous mode [ 84.927617][ T5397] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.934771][ T5397] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.942058][ T5397] bridge_slave_1: entered allmulticast mode [ 84.949110][ T5397] bridge_slave_1: entered promiscuous mode [ 84.966056][ T5401] team0: Port device team_slave_0 added [ 84.972125][ T5408] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.979636][ T5408] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.986998][ T5408] bridge_slave_0: entered allmulticast mode [ 84.995384][ T5408] bridge_slave_0: entered promiscuous mode [ 85.040856][ T5401] team0: Port device team_slave_1 added [ 85.058709][ T5408] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.066188][ T5408] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.073850][ T5408] bridge_slave_1: entered allmulticast mode [ 85.080608][ T5408] bridge_slave_1: entered promiscuous mode [ 85.107980][ T5398] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.115448][ T5398] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.122595][ T5398] bridge_slave_0: entered allmulticast mode [ 85.129585][ T5398] bridge_slave_0: entered promiscuous mode [ 85.166129][ T5397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.175815][ T5398] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.183139][ T5398] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.190287][ T5398] bridge_slave_1: entered allmulticast mode [ 85.197248][ T5398] bridge_slave_1: entered promiscuous mode [ 85.217251][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.224279][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.250320][ T5401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.285415][ T5397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.303918][ T4436] Bluetooth: hci0: command 0x0409 tx timeout [ 85.311966][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.319138][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.345514][ T5401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.363924][ T5408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.376433][ T5408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.410267][ T5398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.423259][ T5398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.517806][ T5398] team0: Port device team_slave_0 added [ 85.536137][ T5408] team0: Port device team_slave_0 added [ 85.542378][ T5399] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.549993][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.550232][ T4436] Bluetooth: hci5: command 0x0409 tx timeout [ 85.557153][ T5407] Bluetooth: hci1: command 0x0409 tx timeout [ 85.563841][ T4436] Bluetooth: hci3: command 0x0409 tx timeout [ 85.569901][ T5035] Bluetooth: hci2: command 0x0409 tx timeout [ 85.576043][ T5406] Bluetooth: hci4: command 0x0409 tx timeout [ 85.582224][ T5399] bridge_slave_0: entered allmulticast mode [ 85.596284][ T5399] bridge_slave_0: entered promiscuous mode [ 85.606941][ T5397] team0: Port device team_slave_0 added [ 85.616612][ T5397] team0: Port device team_slave_1 added [ 85.633690][ T5398] team0: Port device team_slave_1 added [ 85.647200][ T5408] team0: Port device team_slave_1 added [ 85.675464][ T5399] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.682606][ T5399] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.690037][ T5399] bridge_slave_1: entered allmulticast mode [ 85.697219][ T5399] bridge_slave_1: entered promiscuous mode [ 85.727666][ T5401] hsr_slave_0: entered promiscuous mode [ 85.734092][ T5401] hsr_slave_1: entered promiscuous mode [ 85.740313][ T5401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.748317][ T5401] Cannot create hsr debugfs directory [ 85.769071][ T5408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.776346][ T5408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.802325][ T5408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.840024][ T5397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.847088][ T5397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.873339][ T5397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.898677][ T5408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.905816][ T5408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.931877][ T5408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.949642][ T5399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.979883][ T5397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.987069][ T5397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.013061][ T5397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.029761][ T5398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.036958][ T5398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.063034][ T5398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.099155][ T5399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.136871][ T5398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.143935][ T5398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.170450][ T5398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.402388][ T5408] hsr_slave_0: entered promiscuous mode [ 86.414940][ T5408] hsr_slave_1: entered promiscuous mode [ 86.421201][ T5408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.435287][ T5408] Cannot create hsr debugfs directory [ 86.632623][ T5399] team0: Port device team_slave_0 added [ 86.728204][ T5399] team0: Port device team_slave_1 added [ 86.744085][ T5397] hsr_slave_0: entered promiscuous mode [ 86.750555][ T5397] hsr_slave_1: entered promiscuous mode [ 86.762269][ T5397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.770194][ T5397] Cannot create hsr debugfs directory [ 86.838721][ T5398] hsr_slave_0: entered promiscuous mode [ 86.849280][ T5398] hsr_slave_1: entered promiscuous mode [ 86.858998][ T5398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.867332][ T5398] Cannot create hsr debugfs directory [ 87.120557][ T5399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.132654][ T5399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.160845][ T5399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.221640][ T5399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.229061][ T5399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.255604][ T5399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.385877][ T4436] Bluetooth: hci0: command 0x041b tx timeout [ 87.509292][ T5399] hsr_slave_0: entered promiscuous mode [ 87.533601][ T5399] hsr_slave_1: entered promiscuous mode [ 87.551406][ T5399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.562898][ T5399] Cannot create hsr debugfs directory [ 87.629334][ T5035] Bluetooth: hci3: command 0x041b tx timeout [ 87.633071][ T4436] Bluetooth: hci4: command 0x041b tx timeout [ 87.636213][ T5407] Bluetooth: hci5: command 0x041b tx timeout [ 87.641596][ T49] Bluetooth: hci2: command 0x041b tx timeout [ 87.647910][ T5035] Bluetooth: hci1: command 0x041b tx timeout [ 87.867446][ T5390] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.889572][ T5390] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.909186][ T5390] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.957725][ T5390] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.114360][ T5401] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.130359][ T5401] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.165049][ T5401] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.194287][ T5401] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.324917][ T5408] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.339476][ T5408] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.385605][ T5408] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.398475][ T5408] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.467014][ T5390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.574768][ T5398] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.587712][ T5398] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.619937][ T5390] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.634647][ T5401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.659110][ T5398] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.687001][ T5398] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.745737][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.752905][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.789930][ T5401] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.815210][ T5043] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.822322][ T5043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.915873][ T5397] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.931364][ T5397] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.963434][ T5045] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.970627][ T5045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.020256][ T5397] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.045258][ T5397] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.067746][ T5045] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.074915][ T5045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.332026][ T5408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.388635][ T5399] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.423234][ T5399] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.465050][ T4436] Bluetooth: hci0: command 0x040f tx timeout [ 89.495461][ T5398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.552884][ T5399] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.644758][ T5399] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.691068][ T5408] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.704272][ T5407] Bluetooth: hci1: command 0x040f tx timeout [ 89.710315][ T4436] Bluetooth: hci5: command 0x040f tx timeout [ 89.714155][ T5035] Bluetooth: hci2: command 0x040f tx timeout [ 89.720783][ T4436] Bluetooth: hci4: command 0x040f tx timeout [ 89.722272][ T5035] Bluetooth: hci3: command 0x040f tx timeout [ 89.760463][ T5398] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.785222][ T5046] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.792385][ T5046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.848275][ T5401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.867716][ T5390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.879006][ T5046] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.886211][ T5046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.896991][ T5046] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.904165][ T5046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.969214][ T5046] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.976405][ T5046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.120344][ T5390] veth0_vlan: entered promiscuous mode [ 90.267084][ T5390] veth1_vlan: entered promiscuous mode [ 90.296602][ T5397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.327576][ T5401] veth0_vlan: entered promiscuous mode [ 90.388156][ T5401] veth1_vlan: entered promiscuous mode [ 90.428052][ T5397] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.489564][ T5399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.580861][ T5408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.601909][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.609170][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.648022][ T5390] veth0_macvtap: entered promiscuous mode [ 90.685036][ T5390] veth1_macvtap: entered promiscuous mode [ 90.695582][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.702719][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.729807][ T5398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.791926][ T5401] veth0_macvtap: entered promiscuous mode [ 90.815217][ T5390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.826306][ T5399] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.867989][ T5390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.913409][ T5401] veth1_macvtap: entered promiscuous mode [ 90.934146][ T5390] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.943296][ T5390] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.952022][ T5390] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.962059][ T5390] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.987207][ T5044] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.994410][ T5044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.059944][ T5397] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.081693][ T5044] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.088868][ T5044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.161494][ T5398] veth0_vlan: entered promiscuous mode [ 91.179556][ T5408] veth0_vlan: entered promiscuous mode [ 91.187742][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.200017][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.214015][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.279572][ T5408] veth1_vlan: entered promiscuous mode [ 91.316951][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.338859][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.352372][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.372186][ T5401] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.382542][ T5401] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.396822][ T5401] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.406017][ T5401] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.453877][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.461739][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.531581][ T5398] veth1_vlan: entered promiscuous mode [ 91.544218][ T5035] Bluetooth: hci0: command 0x0419 tx timeout [ 91.615526][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.638090][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.766894][ T5408] veth0_macvtap: entered promiscuous mode [ 91.784775][ T5035] Bluetooth: hci3: command 0x0419 tx timeout [ 91.791592][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 91.798468][ T5407] Bluetooth: hci4: command 0x0419 tx timeout [ 91.798490][ T4436] Bluetooth: hci2: command 0x0419 tx timeout [ 91.804543][ T5406] Bluetooth: hci5: command 0x0419 tx timeout [ 91.838052][ T5398] veth0_macvtap: entered promiscuous mode [ 91.869025][ T5408] veth1_macvtap: entered promiscuous mode [ 91.890373][ T5397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.968055][ T5398] veth1_macvtap: entered promiscuous mode [ 92.040482][ T5046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.071121][ T5046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.153895][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.165807][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.177011][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.192384][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.214746][ T5408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.226142][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.235841][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.261797][ T5399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.281252][ T5398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.299210][ T5398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.309546][ T5398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.342940][ T5398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.356943][ T5398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.383002][ T5398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.404708][ T5398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.428625][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.447404][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.459264][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.470773][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.486837][ T5408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.530192][ T5398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.559134][ T5398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.573250][ T5398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.592348][ T5398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.602638][ T5398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.614226][ T5398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.628240][ T5398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.672080][ T5398] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.685970][ T5398] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.695798][ T5398] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.705413][ T5398] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.734461][ T5408] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 2023/09/02 03:32:02 executed programs: 6 [ 92.783372][ T5408] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.792123][ T5408] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.824617][ T5408] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.928082][ T5397] veth0_vlan: entered promiscuous mode [ 93.020172][ T5397] veth1_vlan: entered promiscuous mode [ 93.164472][ T5043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.164503][ T5397] veth0_macvtap: entered promiscuous mode [ 93.179726][ T5043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.203517][ T5397] veth1_macvtap: entered promiscuous mode [ 93.255177][ T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.270430][ T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.299152][ T5399] veth0_vlan: entered promiscuous mode [ 93.373793][ T5045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.391079][ T5045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.402021][ T5043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.406183][ T5399] veth1_vlan: entered promiscuous mode [ 93.411242][ T5043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.453982][ T5397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.465105][ T5397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.476594][ T5397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.489642][ T5397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.505705][ T5397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.516577][ T5397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.527237][ T5397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.537916][ T5397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.552013][ T5397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.597788][ T5397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.609394][ T5397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.622949][ T5397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.637586][ T5397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.649280][ T5397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.664955][ T5397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.681131][ T5397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.705853][ T5397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.718325][ T5397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.731458][ T5397] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.741865][ T5397] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.752272][ T5397] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.762043][ T5397] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.951420][ T5399] veth0_macvtap: entered promiscuous mode [ 94.008307][ T5399] veth1_macvtap: entered promiscuous mode [ 94.035471][ T5411] Bluetooth: hci5: command 0x0407 tx timeout [ 94.226632][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.242636][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.260584][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.276006][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.296083][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.312143][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.329129][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.339836][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.356649][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.368076][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.385555][ T5399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.416325][ T5043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.434782][ T5043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.453041][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.474442][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.487511][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.498551][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.510952][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.522355][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.537037][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.548804][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.580107][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.600935][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.615164][ T5399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.674491][ T5399] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.695316][ T5399] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.704811][ T5399] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.715567][ T5399] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.837693][ T5043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.846443][ T5043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.952340][ T4445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.969706][ T4445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.027202][ T5045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.040364][ T5045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.947526][ T5738] ================================================================== [ 95.955627][ T5738] BUG: KASAN: slab-use-after-free in __sco_sock_close+0x2c9/0x6a0 [ 95.963467][ T5738] Write of size 4 at addr ffff8880156b4010 by task syz-executor.4/5738 [ 95.971700][ T5738] [ 95.974028][ T5738] CPU: 1 PID: 5738 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-04808-g6c1b980a7e79-dirty #0 [ 95.984529][ T5738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 95.994584][ T5738] Call Trace: [ 95.997866][ T5738] [ 96.000817][ T5738] dump_stack_lvl+0xd9/0x1b0 [ 96.005427][ T5738] print_report+0xc4/0x620 [ 96.009850][ T5738] ? __virt_addr_valid+0x5e/0x2d0 [ 96.014882][ T5738] ? __phys_addr+0xc6/0x140 [ 96.019395][ T5738] kasan_report+0xda/0x110 [ 96.023826][ T5738] ? __sco_sock_close+0x2c9/0x6a0 [ 96.028858][ T5738] ? __sco_sock_close+0x2c9/0x6a0 [ 96.033888][ T5738] kasan_check_range+0xef/0x190 [ 96.038835][ T5738] __sco_sock_close+0x2c9/0x6a0 [ 96.043689][ T5738] sco_sock_release+0x6f/0x2c0 [ 96.048464][ T5738] __sock_release+0xae/0x260 [ 96.053066][ T5738] ? __sock_release+0x260/0x260 [ 96.057914][ T5738] sock_close+0x1c/0x20 [ 96.062071][ T5738] __fput+0x3f7/0xa70 [ 96.066070][ T5738] __fput_sync+0x47/0x50 [ 96.070329][ T5738] __x64_sys_close+0x87/0xf0 [ 96.074947][ T5738] do_syscall_64+0x38/0xb0 [ 96.079394][ T5738] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 96.085317][ T5738] RIP: 0033:0x7f2afaa7b9da [ 96.089735][ T5738] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 96.103246][ T4436] Bluetooth: hci5: command 0x0407 tx timeout [ 96.109340][ T5738] RSP: 002b:00007fffce3a5d00 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 96.123741][ T5738] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f2afaa7b9da [ 96.131717][ T5738] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 96.139695][ T5738] RBP: 00007f2afab9d980 R08: 0000001b2c760000 R09: 0000000000000001 [ 96.147687][ T5738] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001799b [ 96.155677][ T5738] R13: ffffffffffffffff R14: 00007f2afa600000 R15: 000000000001765a [ 96.163707][ T5738] [ 96.166731][ T5738] [ 96.169057][ T5738] Allocated by task 5739: [ 96.173382][ T5738] kasan_save_stack+0x33/0x50 [ 96.178081][ T5738] kasan_set_track+0x25/0x30 [ 96.182695][ T5738] __kasan_kmalloc+0xa2/0xb0 [ 96.187295][ T5738] hci_conn_add+0xc2/0x1770 [ 96.191800][ T5738] hci_connect_sco+0x3ac/0xf80 [ 96.196565][ T5738] sco_sock_connect+0x2c7/0xa50 [ 96.201418][ T5738] __sys_connect_file+0x15b/0x1a0 [ 96.206448][ T5738] __sys_connect+0x145/0x170 [ 96.211050][ T5738] __x64_sys_connect+0x72/0xb0 [ 96.215813][ T5738] do_syscall_64+0x38/0xb0 [ 96.220324][ T5738] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 96.226234][ T5738] [ 96.228558][ T5738] Freed by task 4436: [ 96.232530][ T5738] kasan_save_stack+0x33/0x50 [ 96.237221][ T5738] kasan_set_track+0x25/0x30 [ 96.241822][ T5738] kasan_save_free_info+0x2b/0x40 [ 96.246853][ T5738] ____kasan_slab_free+0x15b/0x1b0 [ 96.252001][ T5738] slab_free_freelist_hook+0x114/0x1e0 [ 96.257488][ T5738] __kmem_cache_free+0xb8/0x2f0 [ 96.262348][ T5738] device_release+0xa1/0x240 [ 96.266962][ T5738] kobject_put+0x1f7/0x5b0 [ 96.271412][ T5738] put_device+0x1f/0x30 [ 96.275586][ T5738] hci_abort_conn_sync+0xacb/0xe20 [ 96.280714][ T5738] abort_conn_sync+0x18e/0x3a0 [ 96.285492][ T5738] hci_cmd_sync_work+0x1a4/0x3c0 [ 96.290441][ T5738] process_one_work+0xaa2/0x16f0 [ 96.295387][ T5738] worker_thread+0x687/0x1110 [ 96.300077][ T5738] kthread+0x33a/0x430 [ 96.304148][ T5738] ret_from_fork+0x45/0x80 [ 96.308572][ T5738] ret_from_fork_asm+0x11/0x20 [ 96.313440][ T5738] [ 96.315770][ T5738] The buggy address belongs to the object at ffff8880156b4000 [ 96.315770][ T5738] which belongs to the cache kmalloc-4k of size 4096 [ 96.329825][ T5738] The buggy address is located 16 bytes inside of [ 96.329825][ T5738] freed 4096-byte region [ffff8880156b4000, ffff8880156b5000) [ 96.343639][ T5738] [ 96.345966][ T5738] The buggy address belongs to the physical page: [ 96.352373][ T5738] page:ffffea000055ac00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x156b0 [ 96.362529][ T5738] head:ffffea000055ac00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 96.371464][ T5738] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 96.379443][ T5738] page_type: 0xffffffff() [ 96.383821][ T5738] raw: 00fff00000000840 ffff888012842140 dead000000000122 0000000000000000 [ 96.392412][ T5738] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 96.401014][ T5738] page dumped because: kasan: bad access detected [ 96.407423][ T5738] page_owner tracks the page as allocated [ 96.413141][ T5738] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5738, tgid 5738 (syz-executor.4), ts 95856753309, free_ts 95812544142 [ 96.435296][ T5738] post_alloc_hook+0x2cf/0x340 [ 96.440071][ T5738] get_page_from_freelist+0x10a9/0x31e0 [ 96.445617][ T5738] __alloc_pages+0x1d0/0x4a0 [ 96.450215][ T5738] alloc_pages+0x1a9/0x270 [ 96.454648][ T5738] allocate_slab+0x251/0x380 [ 96.459252][ T5738] ___slab_alloc+0x8be/0x1570 [ 96.463950][ T5738] __slab_alloc.constprop.0+0x56/0xa0 [ 96.469425][ T5738] __kmem_cache_alloc_node+0x137/0x350 [ 96.474901][ T5738] __kmalloc+0x4f/0x100 [ 96.479070][ T5738] tomoyo_realpath_from_path+0xb9/0x710 [ 96.484623][ T5738] tomoyo_path_perm+0x271/0x450 [ 96.489486][ T5738] tomoyo_path_symlink+0x98/0xe0 [ 96.494437][ T5738] security_path_symlink+0x101/0x160 [ 96.499732][ T5738] do_symlinkat+0x120/0x310 [ 96.504252][ T5738] __x64_sys_symlinkat+0x97/0xc0 [ 96.509194][ T5738] do_syscall_64+0x38/0xb0 [ 96.513624][ T5738] page last free stack trace: [ 96.518291][ T5738] free_unref_page_prepare+0x476/0xa40 [ 96.523764][ T5738] free_unref_page+0x33/0x3b0 [ 96.528454][ T5738] __unfreeze_partials+0x21d/0x240 [ 96.533581][ T5738] qlist_free_all+0x6a/0x170 [ 96.538186][ T5738] kasan_quarantine_reduce+0x18b/0x1d0 [ 96.543760][ T5738] __kasan_slab_alloc+0x65/0x90 [ 96.548704][ T5738] kmem_cache_alloc+0x172/0x3b0 [ 96.553591][ T5738] getname_flags.part.0+0x50/0x4d0 [ 96.558717][ T5738] getname_flags+0x9c/0xf0 [ 96.563141][ T5738] vfs_fstatat+0x77/0xb0 [ 96.567400][ T5738] __do_sys_newfstatat+0x98/0x110 [ 96.572448][ T5738] do_syscall_64+0x38/0xb0 [ 96.576964][ T5738] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 96.582875][ T5738] [ 96.585196][ T5738] Memory state around the buggy address: [ 96.590825][ T5738] ffff8880156b3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 96.598887][ T5738] ffff8880156b3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 96.606949][ T5738] >ffff8880156b4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.615016][ T5738] ^ [ 96.619691][ T5738] ffff8880156b4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.627755][ T5738] ffff8880156b4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.635826][ T5738] ================================================================== [ 96.649098][ T5738] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 96.656313][ T5738] CPU: 1 PID: 5738 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-04808-g6c1b980a7e79-dirty #0 [ 96.666817][ T5738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 96.676881][ T5738] Call Trace: [ 96.680164][ T5738] [ 96.683100][ T5738] dump_stack_lvl+0xd9/0x1b0 [ 96.687706][ T5738] panic+0x6a6/0x750 [ 96.691616][ T5738] ? panic_smp_self_stop+0xa0/0xa0 [ 96.696744][ T5738] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.702911][ T5738] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.709106][ T5738] check_panic_on_warn+0xab/0xb0 [ 96.714044][ T5738] end_report+0x108/0x150 [ 96.718361][ T5738] kasan_report+0xea/0x110 [ 96.722763][ T5738] ? __sco_sock_close+0x2c9/0x6a0 [ 96.727778][ T5738] ? __sco_sock_close+0x2c9/0x6a0 [ 96.732791][ T5738] kasan_check_range+0xef/0x190 [ 96.737640][ T5738] __sco_sock_close+0x2c9/0x6a0 [ 96.742480][ T5738] sco_sock_release+0x6f/0x2c0 [ 96.747230][ T5738] __sock_release+0xae/0x260 [ 96.751809][ T5738] ? __sock_release+0x260/0x260 [ 96.756653][ T5738] sock_close+0x1c/0x20 [ 96.760805][ T5738] __fput+0x3f7/0xa70 [ 96.764783][ T5738] __fput_sync+0x47/0x50 [ 96.769042][ T5738] __x64_sys_close+0x87/0xf0 [ 96.773642][ T5738] do_syscall_64+0x38/0xb0 [ 96.778067][ T5738] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 96.783957][ T5738] RIP: 0033:0x7f2afaa7b9da [ 96.788359][ T5738] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 96.807959][ T5738] RSP: 002b:00007fffce3a5d00 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 96.816365][ T5738] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f2afaa7b9da [ 96.824329][ T5738] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 96.832285][ T5738] RBP: 00007f2afab9d980 R08: 0000001b2c760000 R09: 0000000000000001 [ 96.840243][ T5738] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001799b [ 96.848203][ T5738] R13: ffffffffffffffff R14: 00007f2afa600000 R15: 000000000001765a [ 96.856169][ T5738] [ 96.860024][ T5738] Kernel Offset: disabled [ 96.864359][ T5738] Rebooting in 86400 seconds..