Warning: Permanently added '10.128.1.102' (ED25519) to the list of known hosts. 2023/09/09 05:00:39 ignoring optional flag "sandboxArg"="0" 2023/09/09 05:00:39 parsed 1 programs 2023/09/09 05:00:41 executed programs: 0 [ 89.830823][ T5383] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 89.894881][ T4440] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.904144][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.912485][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.921036][ T4440] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.930038][ T4440] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.939053][ T4440] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.047017][ T5391] chnl_net:caif_netlink_parms(): no params data found [ 90.088753][ T5391] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.096343][ T5391] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.104367][ T5391] bridge_slave_0: entered allmulticast mode [ 90.111506][ T5391] bridge_slave_0: entered promiscuous mode [ 90.119861][ T5391] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.127241][ T5391] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.135055][ T5391] bridge_slave_1: entered allmulticast mode [ 90.141812][ T5391] bridge_slave_1: entered promiscuous mode [ 90.166540][ T5391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.178151][ T5391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.203271][ T5391] team0: Port device team_slave_0 added [ 90.211524][ T5391] team0: Port device team_slave_1 added [ 90.231315][ T5391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.238464][ T5391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.264999][ T5391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.277435][ T5391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.284978][ T5391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.311198][ T5391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.344951][ T5391] hsr_slave_0: entered promiscuous mode [ 90.351405][ T5391] hsr_slave_1: entered promiscuous mode [ 91.016314][ T5391] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.027604][ T5391] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.040866][ T5391] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.050279][ T5391] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.075217][ T5391] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.082413][ T5391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.090511][ T5391] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.097925][ T5391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.116985][ T1873] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.125127][ T1873] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.188407][ T5391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.213918][ T5391] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.227926][ T5047] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.235333][ T5047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.251916][ T5047] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.259180][ T5047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.503209][ T5391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.558605][ T5391] veth0_vlan: entered promiscuous mode [ 91.576046][ T5391] veth1_vlan: entered promiscuous mode [ 91.611228][ T5391] veth0_macvtap: entered promiscuous mode [ 91.623551][ T5391] veth1_macvtap: entered promiscuous mode [ 91.646254][ T5391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.665440][ T5391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.682619][ T5391] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.695100][ T5391] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.705289][ T5391] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.716277][ T5391] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.801681][ T1873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.817091][ T1873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.847607][ T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.857929][ T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.913073][ T5444] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 91.926489][ T5444] team0: Device gre0 is of different type [ 91.960522][ T5037] Bluetooth: hci0: command 0x0409 tx timeout [ 91.981828][ T5447] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 91.996954][ T5447] team0: Device erspan0 is up. Set it down before adding it as a team port [ 92.049895][ T5452] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 92.062338][ T5452] team0: Device ip6_vti0 is of different type [ 92.107272][ T5454] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 92.117685][ T5454] team0: Device ip6tnl0 is of different type [ 92.167103][ T5458] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 92.187977][ T5458] team0: Device syz_tun is up. Set it down before adding it as a team port [ 92.241629][ T5463] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 92.264885][ T5463] team0: Device bridge0 is up. Set it down before adding it as a team port [ 92.339356][ T5467] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 92.355443][ T5467] team0: Device bond0 is up. Set it down before adding it as a team port [ 92.411296][ T5471] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 92.450322][ T5471] team0: Device dummy0 is up. Set it down before adding it as a team port [ 92.511466][ T5474] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 92.532311][ T5474] team0: Device caif0 is of different type [ 92.584369][ T5479] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 92.596272][ T5479] team0: Device vxcan0 is of different type [ 92.660374][ T5483] team0: Device veth0 is up. Set it down before adding it as a team port [ 92.712071][ T5488] team0: Device wg0 is of different type [ 92.755907][ T5490] team0: Device wg2 is of different type [ 92.808219][ T5494] bridge_slave_0: left allmulticast mode [ 92.829930][ T5494] bridge_slave_0: left promiscuous mode [ 92.836007][ T5494] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.849519][ T5494] team0: Device bridge_slave_0 is up. Set it down before adding it as a team port [ 92.903267][ T5498] bridge_slave_1: left allmulticast mode [ 92.909052][ T5498] bridge_slave_1: left promiscuous mode [ 92.914834][ T5498] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.926784][ T5498] team0: Device bridge_slave_1 is up. Set it down before adding it as a team port [ 92.992063][ T5501] bond0: (slave bond_slave_0): Releasing backup interface [ 93.008504][ T5501] team0: Port device bond_slave_0 added [ 93.058659][ T5506] bond0: (slave bond_slave_1): Releasing backup interface [ 93.088065][ T5506] team0: Port device bond_slave_1 added [ 93.210009][ T5514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.221058][ T5514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.234153][ T5514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.242980][ T5514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.253107][ T5514] team0: Device batadv_slave_0 is up. Set it down before adding it as a team port [ 93.312544][ T5519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.326136][ T5519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.340496][ T5519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.348108][ T5519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.359708][ T5519] team0: Device batadv_slave_1 is up. Set it down before adding it as a team port [ 93.434180][ T5524] team0: Device veth0_to_hsr is up. Set it down before adding it as a team port [ 93.486005][ T5528] team0: Device veth1_to_hsr is up. Set it down before adding it as a team port [ 93.535604][ T5530] team0: Device hsr0 is up. Set it down before adding it as a team port [ 93.585310][ T5535] team0: Device veth0_virt_wifi is up. Set it down before adding it as a team port [ 93.630307][ T5537] team0: Device veth1_vlan is up. Set it down before adding it as a team port [ 93.685407][ T5541] team0: Device vlan0 is up. Set it down before adding it as a team port [ 93.731502][ T5546] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 93.826937][ T5552] team0: Device ipvlan0 failed to register rx_handler [ 93.902954][ T5555] team0: Device veth0_macvtap is up. Set it down before adding it as a team port [ 93.941174][ T5558] team0: Device macsec0 is up. Set it down before adding it as a team port [ 93.983774][ T5562] team0: Device geneve1 is up. Set it down before adding it as a team port [ 94.022606][ T5565] team0: Device netdevsim1 is up. Set it down before adding it as a team port [ 94.050173][ T5037] Bluetooth: hci0: command 0x041b tx timeout [ 94.071022][ T5569] team0: Device netdevsim3 is up. Set it down before adding it as a team port [ 94.108423][ T5573] team0: Device wlan1 is up. Set it down before adding it as a team port [ 94.816749][ T5633] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.824644][ T5633] team0: Device bond1 failed to register rx_handler [ 94.836557][ T5633] ================================================================== [ 94.844928][ T5633] BUG: KASAN: slab-out-of-bounds in team_device_event+0xba3/0xe40 [ 94.852978][ T5633] Read of size 4 at addr ffff888016f42910 by task syz-executor.0/5633 [ 94.861687][ T5633] [ 94.864054][ T5633] CPU: 1 PID: 5633 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-04043-gf8fdd54ee6a1-dirty #0 [ 94.875374][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 94.885631][ T5633] Call Trace: [ 94.889026][ T5633] [ 94.892076][ T5633] dump_stack_lvl+0xd9/0x1b0 [ 94.896804][ T5633] print_report+0xc4/0x620 [ 94.901290][ T5633] ? __virt_addr_valid+0x5e/0x2d0 [ 94.906764][ T5633] ? __phys_addr+0xc6/0x140 [ 94.911894][ T5633] kasan_report+0xda/0x110 [ 94.916715][ T5633] ? team_device_event+0xba3/0xe40 [ 94.922574][ T5633] ? team_device_event+0xba3/0xe40 [ 94.928235][ T5633] team_device_event+0xba3/0xe40 [ 94.933754][ T5633] notifier_call_chain+0xb6/0x3b0 [ 94.939025][ T5633] ? team_add_slave+0x2310/0x2310 [ 94.944100][ T5633] call_netdevice_notifiers_info+0xb9/0x130 [ 94.950207][ T5633] __netdev_upper_dev_unlink+0x111/0x430 [ 94.955977][ T5633] ? netdev_adjacent_change_prepare+0x1b0/0x1b0 [ 94.962272][ T5633] ? ref_tracker_free+0x37e/0x810 [ 94.967450][ T5633] ? netdev_err+0xe5/0x120 [ 94.971923][ T5633] netdev_upper_dev_unlink+0x84/0xb0 [ 94.977333][ T5633] ? __netdev_upper_dev_unlink+0x430/0x430 [ 94.983268][ T5633] team_add_slave+0x1849/0x2310 [ 94.988189][ T5633] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 94.994324][ T5633] ? team_uninit+0x290/0x290 [ 94.999062][ T5633] ? write_profile+0x450/0x450 [ 95.004485][ T5633] ? team_uninit+0x290/0x290 [ 95.009133][ T5633] do_set_master+0x1bc/0x220 [ 95.013869][ T5633] do_setlink+0xa07/0x3fa0 [ 95.019224][ T5633] ? is_bpf_text_address+0x79/0x1a0 [ 95.024652][ T5633] ? rtnl_bridge_getlink+0x8c0/0x8c0 [ 95.030597][ T5633] ? unwind_next_frame+0xe41/0x2020 [ 95.035935][ T5633] ? __module_address+0x55/0x3b0 [ 95.041282][ T5633] ? bpf_ksym_find+0x124/0x1b0 [ 95.046269][ T5633] ? write_profile+0x450/0x450 [ 95.051620][ T5633] ? is_bpf_text_address+0x9b/0x1a0 [ 95.057203][ T5633] ? kernel_text_address+0x85/0xf0 [ 95.062481][ T5633] ? __kernel_text_address+0xd/0x30 [ 95.067771][ T5633] ? unwind_get_return_address+0x55/0xa0 [ 95.073549][ T5633] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 95.079667][ T5633] ? __nla_validate_parse+0x64f/0x25d0 [ 95.085463][ T5633] ? nla_get_range_signed+0x370/0x370 [ 95.091490][ T5633] ? stack_trace_save+0x96/0xd0 [ 95.096651][ T5633] ? filter_irq_stacks+0x90/0x90 [ 95.101637][ T5633] ? __stack_depot_save+0x39/0x510 [ 95.107060][ T5633] ? __nla_parse+0x40/0x50 [ 95.111791][ T5633] __rtnl_newlink+0xc1d/0x1940 [ 95.116791][ T5633] ? rtnl_link_unregister+0x260/0x260 [ 95.122230][ T5633] rtnl_newlink+0x67/0xa0 [ 95.126798][ T5633] ? __rtnl_newlink+0x1940/0x1940 [ 95.131880][ T5633] rtnetlink_rcv_msg+0x439/0xd30 [ 95.136950][ T5633] ? rtnl_getlink+0xb40/0xb40 [ 95.142091][ T5633] netlink_rcv_skb+0x16b/0x440 [ 95.147083][ T5633] ? rtnl_getlink+0xb40/0xb40 [ 95.151915][ T5633] ? netlink_ack+0x1370/0x1370 [ 95.156840][ T5633] ? netlink_deliver_tap+0x1b1/0xd10 [ 95.162267][ T5633] netlink_unicast+0x536/0x810 [ 95.167128][ T5633] ? netlink_attachskb+0x870/0x870 [ 95.172295][ T5633] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 95.178244][ T5633] ? __phys_addr_symbol+0x30/0x70 [ 95.183313][ T5633] ? __check_object_size+0x323/0x740 [ 95.188645][ T5633] netlink_sendmsg+0x93c/0xe40 [ 95.193456][ T5633] ? netlink_unicast+0x810/0x810 [ 95.198453][ T5633] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 95.203785][ T5633] ? netlink_unicast+0x810/0x810 [ 95.208773][ T5633] sock_sendmsg+0xd9/0x180 [ 95.213234][ T5633] ____sys_sendmsg+0x6ac/0x940 [ 95.218043][ T5633] ? copy_msghdr_from_user+0x10b/0x160 [ 95.223550][ T5633] ? kernel_sendmsg+0x50/0x50 [ 95.228268][ T5633] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 95.234320][ T5633] ___sys_sendmsg+0x135/0x1d0 [ 95.239043][ T5633] ? do_recvmmsg+0x740/0x740 [ 95.243857][ T5633] ? __fget_light+0xe6/0x260 [ 95.248913][ T5633] __sys_sendmsg+0x117/0x1e0 [ 95.253562][ T5633] ? __sys_sendmsg_sock+0x30/0x30 [ 95.258861][ T5633] ? xfd_validate_state+0x5d/0x180 [ 95.264037][ T5633] ? syscall_enter_from_user_mode+0x26/0x80 [ 95.270333][ T5633] do_syscall_64+0x38/0xb0 [ 95.274966][ T5633] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 95.280905][ T5633] RIP: 0033:0x7f9a4087cae9 [ 95.285370][ T5633] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 95.305456][ T5633] RSP: 002b:00007f9a415690c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.314085][ T5633] RAX: ffffffffffffffda RBX: 00007f9a4099bf80 RCX: 00007f9a4087cae9 [ 95.322092][ T5633] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000007 [ 95.330179][ T5633] RBP: 00007f9a408c847a R08: 0000000000000000 R09: 0000000000000000 [ 95.338271][ T5633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.346368][ T5633] R13: 000000000000000b R14: 00007f9a4099bf80 R15: 00007ffc4b5304d8 [ 95.355251][ T5633] [ 95.358296][ T5633] [ 95.360633][ T5633] Allocated by task 5633: [ 95.365075][ T5633] kasan_save_stack+0x33/0x50 [ 95.369814][ T5633] kasan_set_track+0x25/0x30 [ 95.374458][ T5633] __kasan_kmalloc+0xa2/0xb0 [ 95.379099][ T5633] apparmor_sk_alloc_security+0x87/0x150 [ 95.384867][ T5633] security_sk_alloc+0x72/0xb0 [ 95.389680][ T5633] sk_prot_alloc+0x1c3/0x2a0 [ 95.394360][ T5633] sk_alloc+0x3a/0x7f0 [ 95.398490][ T5633] __netlink_create+0x63/0x380 [ 95.403305][ T5633] netlink_create+0x3dc/0x670 [ 95.408286][ T5633] __sock_create+0x334/0x810 [ 95.412915][ T5633] __sys_socket+0x14c/0x260 [ 95.417566][ T5633] __x64_sys_socket+0x72/0xb0 [ 95.422459][ T5633] do_syscall_64+0x38/0xb0 [ 95.426999][ T5633] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 95.432941][ T5633] [ 95.435376][ T5633] The buggy address belongs to the object at ffff888016f42900 [ 95.435376][ T5633] which belongs to the cache kmalloc-16 of size 16 [ 95.449302][ T5633] The buggy address is located 0 bytes to the right of [ 95.449302][ T5633] allocated 16-byte region [ffff888016f42900, ffff888016f42910) [ 95.463744][ T5633] [ 95.466116][ T5633] The buggy address belongs to the physical page: [ 95.472547][ T5633] page:ffffea00005bd080 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x16f42 [ 95.482733][ T5633] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 95.490317][ T5633] page_type: 0xffffffff() [ 95.494687][ T5633] raw: 00fff00000000200 ffff8880128413c0 dead000000000122 0000000000000000 [ 95.503380][ T5633] raw: 0000000000000000 0000000080800080 00000001ffffffff 0000000000000000 [ 95.512438][ T5633] page dumped because: kasan: bad access detected [ 95.518872][ T5633] page_owner tracks the page as allocated [ 95.524578][ T5633] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5391, tgid 5391 (syz-executor.0), ts 94696443415, free_ts 94682336522 [ 95.542997][ T5633] post_alloc_hook+0x2d2/0x350 [ 95.547922][ T5633] get_page_from_freelist+0x10a9/0x31e0 [ 95.553477][ T5633] __alloc_pages+0x1d0/0x4a0 [ 95.558159][ T5633] allocate_slab+0xa1/0x380 [ 95.562891][ T5633] ___slab_alloc+0x8bc/0x1570 [ 95.567657][ T5633] __slab_alloc.constprop.0+0x56/0xa0 [ 95.573145][ T5633] __kmem_cache_alloc_node+0x137/0x350 [ 95.578772][ T5633] __kmalloc_node+0x4f/0x100 [ 95.583543][ T5633] kvmalloc_node+0x99/0x1a0 [ 95.588126][ T5633] xt_replace_table+0x1ea/0x940 [ 95.593167][ T5633] __do_replace+0x1d5/0x9c0 [ 95.598002][ T5633] do_ip6t_set_ctl+0x93a/0xbd0 [ 95.602874][ T5633] nf_setsockopt+0x87/0xe0 [ 95.607656][ T5633] ipv6_setsockopt+0x12b/0x190 [ 95.612434][ T5633] tcp_setsockopt+0x9d/0x100 [ 95.617293][ T5633] __sys_setsockopt+0x2cd/0x5b0 [ 95.622137][ T5633] page last free stack trace: [ 95.626797][ T5633] free_unref_page_prepare+0x508/0xb90 [ 95.632254][ T5633] free_unref_page_list+0xe6/0xb30 [ 95.637477][ T5633] release_pages+0x32a/0x14e0 [ 95.642156][ T5633] tlb_batch_pages_flush+0x9a/0x190 [ 95.647544][ T5633] tlb_finish_mmu+0x14b/0x7e0 [ 95.652435][ T5633] exit_mmap+0x2db/0x960 [ 95.657209][ T5633] __mmput+0x12a/0x4d0 [ 95.661490][ T5633] mmput+0x62/0x70 [ 95.666093][ T5633] do_exit+0x9b4/0x2a20 [ 95.670966][ T5633] do_group_exit+0xd4/0x2a0 [ 95.675538][ T5633] get_signal+0x23ea/0x2770 [ 95.680621][ T5633] arch_do_signal_or_restart+0x89/0x5f0 [ 95.686537][ T5633] exit_to_user_mode_prepare+0x11f/0x240 [ 95.692177][ T5633] syscall_exit_to_user_mode+0x1d/0x60 [ 95.697920][ T5633] do_syscall_64+0x44/0xb0 [ 95.702433][ T5633] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 95.708706][ T5633] [ 95.711021][ T5633] Memory state around the buggy address: [ 95.717230][ T5633] ffff888016f42800: 00 00 fc fc 00 00 fc fc 00 01 fc fc 00 01 fc fc [ 95.725836][ T5633] ffff888016f42880: 00 01 fc fc 00 07 fc fc 00 04 fc fc 00 00 fc fc [ 95.734013][ T5633] >ffff888016f42900: 00 00 fc fc 00 00 fc fc 00 04 fc fc 00 04 fc fc [ 95.742420][ T5633] ^ [ 95.747070][ T5633] ffff888016f42980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 95.755116][ T5633] ffff888016f42a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 95.763436][ T5633] ================================================================== [ 95.774515][ T5633] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 95.781825][ T5633] CPU: 0 PID: 5633 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-04043-gf8fdd54ee6a1-dirty #0 [ 95.792487][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 95.804413][ T5633] Call Trace: [ 95.807870][ T5633] [ 95.810906][ T5633] dump_stack_lvl+0xd9/0x1b0 [ 95.815725][ T5633] panic+0x6a4/0x750 [ 95.819653][ T5633] ? panic_smp_self_stop+0xa0/0xa0 [ 95.824889][ T5633] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 95.831531][ T5633] ? preempt_schedule_thunk+0x1a/0x30 [ 95.836965][ T5633] ? preempt_schedule_common+0x45/0xc0 [ 95.842722][ T5633] check_panic_on_warn+0xab/0xb0 [ 95.847680][ T5633] end_report+0x108/0x150 [ 95.852113][ T5633] kasan_report+0xea/0x110 [ 95.856558][ T5633] ? team_device_event+0xba3/0xe40 [ 95.861732][ T5633] ? team_device_event+0xba3/0xe40 [ 95.867161][ T5633] team_device_event+0xba3/0xe40 [ 95.872212][ T5633] notifier_call_chain+0xb6/0x3b0 [ 95.878210][ T5633] ? team_add_slave+0x2310/0x2310 [ 95.883436][ T5633] call_netdevice_notifiers_info+0xb9/0x130 [ 95.889602][ T5633] __netdev_upper_dev_unlink+0x111/0x430 [ 95.895855][ T5633] ? netdev_adjacent_change_prepare+0x1b0/0x1b0 [ 95.902195][ T5633] ? ref_tracker_free+0x37e/0x810 [ 95.907332][ T5633] ? netdev_err+0xe5/0x120 [ 95.912032][ T5633] netdev_upper_dev_unlink+0x84/0xb0 [ 95.917326][ T5633] ? __netdev_upper_dev_unlink+0x430/0x430 [ 95.923231][ T5633] team_add_slave+0x1849/0x2310 [ 95.928190][ T5633] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 95.934311][ T5633] ? team_uninit+0x290/0x290 [ 95.940173][ T5633] ? write_profile+0x450/0x450 [ 95.945056][ T5633] ? team_uninit+0x290/0x290 [ 95.949672][ T5633] do_set_master+0x1bc/0x220 [ 95.954279][ T5633] do_setlink+0xa07/0x3fa0 [ 95.958798][ T5633] ? is_bpf_text_address+0x79/0x1a0 [ 95.964116][ T5633] ? rtnl_bridge_getlink+0x8c0/0x8c0 [ 95.969411][ T5633] ? unwind_next_frame+0xe41/0x2020 [ 95.974640][ T5633] ? __module_address+0x55/0x3b0 [ 95.980110][ T5633] ? bpf_ksym_find+0x124/0x1b0 [ 95.984893][ T5633] ? write_profile+0x450/0x450 [ 95.989677][ T5633] ? is_bpf_text_address+0x9b/0x1a0 [ 95.995793][ T5633] ? kernel_text_address+0x85/0xf0 [ 96.001219][ T5633] ? __kernel_text_address+0xd/0x30 [ 96.006845][ T5633] ? unwind_get_return_address+0x55/0xa0 [ 96.013034][ T5633] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 96.019144][ T5633] ? __nla_validate_parse+0x64f/0x25d0 [ 96.024623][ T5633] ? nla_get_range_signed+0x370/0x370 [ 96.030184][ T5633] ? stack_trace_save+0x96/0xd0 [ 96.035139][ T5633] ? filter_irq_stacks+0x90/0x90 [ 96.040121][ T5633] ? __stack_depot_save+0x39/0x510 [ 96.045435][ T5633] ? __nla_parse+0x40/0x50 [ 96.049956][ T5633] __rtnl_newlink+0xc1d/0x1940 [ 96.055086][ T5633] ? rtnl_link_unregister+0x260/0x260 [ 96.060582][ T5633] rtnl_newlink+0x67/0xa0 [ 96.065104][ T5633] ? __rtnl_newlink+0x1940/0x1940 [ 96.070458][ T5633] rtnetlink_rcv_msg+0x439/0xd30 [ 96.075686][ T5633] ? rtnl_getlink+0xb40/0xb40 [ 96.080377][ T5633] netlink_rcv_skb+0x16b/0x440 [ 96.085266][ T5633] ? rtnl_getlink+0xb40/0xb40 [ 96.090275][ T5633] ? netlink_ack+0x1370/0x1370 [ 96.095425][ T5633] ? netlink_deliver_tap+0x1b1/0xd10 [ 96.100747][ T5633] netlink_unicast+0x536/0x810 [ 96.105638][ T5633] ? netlink_attachskb+0x870/0x870 [ 96.110766][ T5633] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 96.116826][ T5633] ? __phys_addr_symbol+0x30/0x70 [ 96.121864][ T5633] ? __check_object_size+0x323/0x740 [ 96.127291][ T5633] netlink_sendmsg+0x93c/0xe40 [ 96.132088][ T5633] ? netlink_unicast+0x810/0x810 [ 96.137075][ T5633] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 96.142380][ T5633] ? netlink_unicast+0x810/0x810 [ 96.147334][ T5633] sock_sendmsg+0xd9/0x180 [ 96.151778][ T5633] ____sys_sendmsg+0x6ac/0x940 [ 96.156570][ T5633] ? copy_msghdr_from_user+0x10b/0x160 [ 96.162048][ T5633] ? kernel_sendmsg+0x50/0x50 [ 96.166739][ T5633] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 96.172850][ T5633] ___sys_sendmsg+0x135/0x1d0 [ 96.177634][ T5633] ? do_recvmmsg+0x740/0x740 [ 96.182257][ T5633] ? __fget_light+0xe6/0x260 [ 96.186945][ T5633] __sys_sendmsg+0x117/0x1e0 [ 96.191549][ T5633] ? __sys_sendmsg_sock+0x30/0x30 [ 96.196686][ T5633] ? xfd_validate_state+0x5d/0x180 [ 96.201935][ T5633] ? syscall_enter_from_user_mode+0x26/0x80 [ 96.207870][ T5633] do_syscall_64+0x38/0xb0 [ 96.212321][ T5633] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 96.218417][ T5633] RIP: 0033:0x7f9a4087cae9 [ 96.223831][ T5633] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 96.245205][ T5633] RSP: 002b:00007f9a415690c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.253736][ T5633] RAX: ffffffffffffffda RBX: 00007f9a4099bf80 RCX: 00007f9a4087cae9 [ 96.261913][ T5633] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000007 [ 96.269993][ T5633] RBP: 00007f9a408c847a R08: 0000000000000000 R09: 0000000000000000 [ 96.278406][ T5633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.286501][ T5633] R13: 000000000000000b R14: 00007f9a4099bf80 R15: 00007ffc4b5304d8 [ 96.295007][ T5633] [ 96.298391][ T5633] Kernel Offset: disabled [ 96.302760][ T5633] Rebooting in 86400 seconds..