Warning: Permanently added '[localhost]:54463' (ED25519) to the list of known hosts. 2025/02/14 11:40:26 ignoring optional flag "sandboxArg"="0" 2025/02/14 11:40:27 parsed 1 programs [ 67.835152][ T39] audit: type=1400 audit(1739533229.346:145): avc: denied { unlink } for pid=6230 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 68.672471][ T6230] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.140513][ T39] audit: type=1401 audit(1739533231.656:146): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 70.182785][ T6331] chnl_net:caif_netlink_parms(): no params data found [ 70.278681][ T6331] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.280718][ T6331] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.282783][ T6331] bridge_slave_0: entered allmulticast mode [ 70.284913][ T6331] bridge_slave_0: entered promiscuous mode [ 70.288647][ T6331] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.290658][ T6331] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.292675][ T6331] bridge_slave_1: entered allmulticast mode [ 70.294834][ T6331] bridge_slave_1: entered promiscuous mode [ 70.337362][ T6331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.341032][ T6331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.368581][ T6331] team0: Port device team_slave_0 added [ 70.374377][ T6331] team0: Port device team_slave_1 added [ 70.407137][ T6331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.409171][ T6331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.416993][ T6331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.421867][ T6331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.423910][ T6331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.428911][ T5293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.431316][ T6331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.434238][ T5293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.438702][ T5293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.441200][ T5293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.448059][ T5293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.450456][ T5293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.490510][ T6331] hsr_slave_0: entered promiscuous mode [ 70.492493][ T6331] hsr_slave_1: entered promiscuous mode [ 70.688097][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.690334][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.765821][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.768274][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.796948][ T6331] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.807014][ T6331] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.820058][ T6331] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.831021][ T6331] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.917944][ T6331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.925130][ T6331] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.929942][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.932005][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.936537][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.938531][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.056511][ T6331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.069573][ T6331] veth0_vlan: entered promiscuous mode [ 71.076437][ T6331] veth1_vlan: entered promiscuous mode [ 71.090482][ T6331] veth0_macvtap: entered promiscuous mode [ 71.097135][ T6331] veth1_macvtap: entered promiscuous mode [ 71.109553][ T6331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.123967][ T6331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.128653][ T6331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.131127][ T6331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.133721][ T6331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.136315][ T6331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/02/14 11:40:32 executed programs: 0 [ 71.249279][ T6440] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.252919][ T6440] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.255404][ T6440] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.257638][ T6440] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.268376][ T5958] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.270133][ T6446] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.274372][ T5958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.274731][ T6446] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.277667][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.279276][ T6446] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.280694][ T6449] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.280901][ T5958] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.282054][ T5958] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.282732][ T5958] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.283299][ T6446] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.283875][ T6446] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.284996][ T6449] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.285204][ T6446] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.286021][ T6446] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.286417][ T6446] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.286645][ T6446] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.287175][ T5958] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.288642][ T6449] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.314654][ T6449] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.508030][ T6444] chnl_net:caif_netlink_parms(): no params data found [ 71.513047][ T6437] chnl_net:caif_netlink_parms(): no params data found [ 71.529910][ T6435] chnl_net:caif_netlink_parms(): no params data found [ 71.538719][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.540757][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.564003][ T6443] chnl_net:caif_netlink_parms(): no params data found [ 71.744411][ T6437] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.747812][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.750005][ T6437] bridge_slave_0: entered allmulticast mode [ 71.752358][ T6437] bridge_slave_0: entered promiscuous mode [ 71.755409][ T6444] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.757499][ T6444] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.759555][ T6444] bridge_slave_0: entered allmulticast mode [ 71.761870][ T6444] bridge_slave_0: entered promiscuous mode [ 71.764659][ T6444] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.767511][ T6444] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.770219][ T6444] bridge_slave_1: entered allmulticast mode [ 71.773669][ T6444] bridge_slave_1: entered promiscuous mode [ 71.777417][ T6443] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.779444][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.781540][ T6443] bridge_slave_0: entered allmulticast mode [ 71.783704][ T6443] bridge_slave_0: entered promiscuous mode [ 71.787856][ T6443] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.789877][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.791984][ T6443] bridge_slave_1: entered allmulticast mode [ 71.794155][ T6443] bridge_slave_1: entered promiscuous mode [ 71.796861][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.798929][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.801311][ T6435] bridge_slave_0: entered allmulticast mode [ 71.803586][ T6435] bridge_slave_0: entered promiscuous mode [ 71.809014][ T6437] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.811025][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.813443][ T6437] bridge_slave_1: entered allmulticast mode [ 71.817073][ T6437] bridge_slave_1: entered promiscuous mode [ 71.843300][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.845951][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.848011][ T6435] bridge_slave_1: entered allmulticast mode [ 71.850191][ T6435] bridge_slave_1: entered promiscuous mode [ 71.873275][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.888788][ T6444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.908429][ T6435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.920289][ T6444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.923973][ T6443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.928420][ T6435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.932128][ T6437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.956982][ T6443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.977025][ T6437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.981421][ T6444] team0: Port device team_slave_0 added [ 71.993710][ T6435] team0: Port device team_slave_0 added [ 71.997130][ T6435] team0: Port device team_slave_1 added [ 72.016829][ T6437] team0: Port device team_slave_0 added [ 72.019992][ T6444] team0: Port device team_slave_1 added [ 72.047140][ T6437] team0: Port device team_slave_1 added [ 72.067892][ T6443] team0: Port device team_slave_0 added [ 72.070427][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.072353][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.079589][ T6435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.101666][ T6443] team0: Port device team_slave_1 added [ 72.103929][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.105983][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.113186][ T6435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.120065][ T6437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.122319][ T6437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.130255][ T6437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.135250][ T6444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.137241][ T6444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.144473][ T6444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.167678][ T6437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.169744][ T6437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.177332][ T6437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.181681][ T6444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.183684][ T6444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.190789][ T6444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.207447][ T6443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.209466][ T6443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.217824][ T6443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.228581][ T6443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.230597][ T6443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.238231][ T6443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.291231][ T6435] hsr_slave_0: entered promiscuous mode [ 72.293977][ T6435] hsr_slave_1: entered promiscuous mode [ 72.296653][ T6435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.299551][ T6435] Cannot create hsr debugfs directory [ 72.314905][ T6437] hsr_slave_0: entered promiscuous mode [ 72.317391][ T6437] hsr_slave_1: entered promiscuous mode [ 72.319306][ T6437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.321982][ T6437] Cannot create hsr debugfs directory [ 72.349985][ T6444] hsr_slave_0: entered promiscuous mode [ 72.352240][ T6444] hsr_slave_1: entered promiscuous mode [ 72.354166][ T6444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.357059][ T6444] Cannot create hsr debugfs directory [ 72.399649][ T6443] hsr_slave_0: entered promiscuous mode [ 72.402175][ T6443] hsr_slave_1: entered promiscuous mode [ 72.404256][ T6443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.406522][ T6443] Cannot create hsr debugfs directory [ 72.588320][ T6437] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.592449][ T6437] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.595678][ T6437] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.598857][ T6437] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.628284][ T6437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.640841][ T6437] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.644985][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.647084][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.655747][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.657781][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.733864][ T6437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.751176][ T6437] veth0_vlan: entered promiscuous mode [ 72.755634][ T6437] veth1_vlan: entered promiscuous mode [ 72.770206][ T6437] veth0_macvtap: entered promiscuous mode [ 72.773766][ T6437] veth1_macvtap: entered promiscuous mode [ 72.781255][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.784631][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.790508][ T6437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.797211][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.800992][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.804796][ T6437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.809878][ T6437] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.812622][ T6437] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.816098][ T6437] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.819196][ T6437] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.848822][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.851098][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.860300][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.862530][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.902098][ T39] audit: type=1400 audit(1739533234.416:147): avc: denied { mount } for pid=6482 comm="syz.1.17" name="/" dev="9p" ino=27131930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 72.909675][ T39] audit: type=1400 audit(1739533234.416:148): avc: denied { write } for pid=6482 comm="syz.1.17" name="/" dev="9p" ino=27131930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.917305][ T39] audit: type=1400 audit(1739533234.416:149): avc: denied { add_name } for pid=6482 comm="syz.1.17" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.918492][ T6483] netfs: Couldn't get user pages (rc=-14) [ 72.923022][ T39] audit: type=1400 audit(1739533234.416:150): avc: denied { create } for pid=6482 comm="syz.1.17" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.923044][ T39] audit: type=1400 audit(1739533234.416:151): avc: denied { associate } for pid=6482 comm="syz.1.17" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 72.923064][ T39] audit: type=1400 audit(1739533234.426:152): avc: denied { read write } for pid=6482 comm="syz.1.17" name="file0" dev="9p" ino=27131932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.943198][ T39] audit: type=1400 audit(1739533234.426:153): avc: denied { open } for pid=6482 comm="syz.1.17" path="/0/bus/file0" dev="9p" ino=27131932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.951370][ T39] audit: type=1400 audit(1739533234.436:154): avc: denied { append } for pid=6482 comm="syz.1.17" name="file0" dev="9p" ino=27131932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.957670][ T39] audit: type=1400 audit(1739533234.446:155): avc: denied { rename } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.963853][ T39] audit: type=1400 audit(1739533234.446:156): avc: denied { unlink } for pid=5336 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 73.093778][ T6485] netfs: Couldn't get user pages (rc=-14) [ 73.130378][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.345402][ T6487] netfs: Couldn't get user pages (rc=-14) [ 73.366452][ T6442] Bluetooth: hci2: command tx timeout [ 73.366459][ T6449] Bluetooth: hci3: command tx timeout [ 73.375282][ T6442] Bluetooth: hci0: command tx timeout [ 73.375788][ T6449] Bluetooth: hci1: command tx timeout [ 73.556884][ T6489] netfs: Couldn't get user pages (rc=-14) [ 73.774582][ T6491] netfs: Couldn't get user pages (rc=-14) [ 73.943338][ T6493] netfs: Couldn't get user pages (rc=-14) [ 74.114218][ T6495] netfs: Couldn't get user pages (rc=-14) [ 74.314323][ T6497] netfs: Couldn't get user pages (rc=-14) [ 74.473940][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.501128][ T6499] netfs: Couldn't get user pages (rc=-14) [ 74.700836][ T6501] netfs: Couldn't get user pages (rc=-14) [ 74.775803][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.843566][ T12] bridge_slave_1: left allmulticast mode [ 74.845277][ T12] bridge_slave_1: left promiscuous mode [ 74.846913][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.849808][ T12] bridge_slave_0: left allmulticast mode [ 74.851406][ T12] bridge_slave_0: left promiscuous mode [ 74.853096][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.965717][ T6503] netfs: Couldn't get user pages (rc=-14) [ 75.103634][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.107347][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.111275][ T12] bond0 (unregistering): Released all slaves [ 75.152977][ T6506] netfs: Couldn't get user pages (rc=-14) [ 75.246961][ T12] hsr_slave_0: left promiscuous mode [ 75.248905][ T12] hsr_slave_1: left promiscuous mode [ 75.250647][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.252781][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.256631][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.258746][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.276542][ T12] veth1_macvtap: left promiscuous mode [ 75.278186][ T12] veth0_macvtap: left promiscuous mode [ 75.279803][ T12] veth1_vlan: left promiscuous mode [ 75.281482][ T12] veth0_vlan: left promiscuous mode [ 75.421684][ T6513] netfs: Couldn't get user pages (rc=-14) [ 75.446620][ T6449] Bluetooth: hci1: command tx timeout [ 75.455189][ T6449] Bluetooth: hci3: command tx timeout [ 75.455220][ T6442] Bluetooth: hci0: command tx timeout [ 75.455253][ T5293] Bluetooth: hci2: command tx timeout [ 75.617292][ T6515] netfs: Couldn't get user pages (rc=-14) [ 75.745690][ T12] team0 (unregistering): Port device team_slave_1 removed [ 75.798011][ T12] team0 (unregistering): Port device team_slave_0 removed [ 75.832373][ T6517] netfs: Couldn't get user pages (rc=-14) [ 76.040480][ T6519] netfs: Couldn't get user pages (rc=-14) 2025/02/14 11:40:37 executed programs: 24 [ 76.267837][ T6521] netfs: Couldn't get user pages (rc=-14) [ 76.491042][ T6537] netfs: Couldn't get user pages (rc=-14) [ 76.796399][ T6557] netfs: Couldn't get user pages (rc=-14) [ 76.985278][ T6568] netfs: Couldn't get user pages (rc=-14) [ 77.197541][ T6582] netfs: Couldn't get user pages (rc=-14) [ 77.342657][ T6444] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.346201][ T6444] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.349822][ T6444] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.353102][ T6444] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.380381][ T6443] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.387332][ T6443] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.391820][ T6443] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.396624][ T6596] netfs: Couldn't get user pages (rc=-14) [ 77.399435][ T6596] ================================================================== [ 77.401710][ T6596] BUG: KASAN: slab-use-after-free in io_submit_one+0x4e5/0x1da0 [ 77.403836][ T6596] Write of size 4 at addr ffff88802e13ae88 by task syz.1.40/6596 [ 77.407035][ T6596] [ 77.408558][ T6596] CPU: 3 UID: 0 PID: 6596 Comm: syz.1.40 Not tainted 6.14.0-rc2-syzkaller-g128c8f96eb86-dirty #0 [ 77.408571][ T6596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.408578][ T6596] Call Trace: [ 77.408613][ T6596] [ 77.408617][ T6596] dump_stack_lvl+0x116/0x1f0 [ 77.408633][ T6596] print_report+0xc3/0x620 [ 77.408644][ T6596] ? __virt_addr_valid+0x5e/0x590 [ 77.408655][ T6596] ? __phys_addr+0xc6/0x150 [ 77.408664][ T6596] kasan_report+0xd9/0x110 [ 77.408674][ T6596] ? io_submit_one+0x4e5/0x1da0 [ 77.408689][ T6596] ? io_submit_one+0x4e5/0x1da0 [ 77.408703][ T6596] kasan_check_range+0xef/0x1a0 [ 77.408716][ T6596] io_submit_one+0x4e5/0x1da0 [ 77.408731][ T6596] ? __pfx_io_submit_one+0x10/0x10 [ 77.408747][ T6596] ? __might_fault+0x13b/0x190 [ 77.408760][ T6596] ? lock_acquire+0x2f/0xb0 [ 77.408774][ T6596] ? __might_fault+0xe3/0x190 [ 77.408786][ T6596] ? __x64_sys_io_submit+0x1b2/0x340 [ 77.408800][ T6596] __x64_sys_io_submit+0x1b2/0x340 [ 77.408815][ T6596] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 77.408832][ T6596] do_syscall_64+0xcd/0x250 [ 77.408844][ T6596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.408859][ T6596] RIP: 0033:0x7f8f53d8cde9 [ 77.408868][ T6596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.408877][ T6596] RSP: 002b:00007f8f54b7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 77.408912][ T6596] RAX: ffffffffffffffda RBX: 00007f8f53fa5fa0 RCX: 00007f8f53d8cde9 [ 77.408918][ T6596] RDX: 00004000000002c0 RSI: 0000000000000001 RDI: 00007f8f54b5e000 [ 77.408924][ T6596] RBP: 00007f8f53e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 77.408930][ T6596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.408935][ T6596] R13: 0000000000000000 R14: 00007f8f53fa5fa0 R15: 00007ffeeb0594c8 [ 77.408943][ T6596] [ 77.408946][ T6596] [ 77.409323][ T6443] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.411827][ T6596] Allocated by task 6596: [ 77.411840][ T6596] kasan_save_stack+0x33/0x60 [ 77.467872][ T6596] kasan_save_track+0x14/0x30 [ 77.469209][ T6596] __kasan_slab_alloc+0x89/0x90 [ 77.470580][ T6596] kmem_cache_alloc_noprof+0x226/0x3d0 [ 77.472113][ T6596] io_submit_one+0x123/0x1da0 [ 77.473439][ T6596] __x64_sys_io_submit+0x1b2/0x340 [ 77.474873][ T6596] do_syscall_64+0xcd/0x250 [ 77.476185][ T6596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.477837][ T6596] [ 77.478530][ T6596] Freed by task 6596: [ 77.479655][ T6596] kasan_save_stack+0x33/0x60 [ 77.480996][ T6596] kasan_save_track+0x14/0x30 [ 77.482317][ T6596] kasan_save_free_info+0x3b/0x60 [ 77.483741][ T6596] __kasan_slab_free+0x51/0x70 [ 77.485088][ T6596] kmem_cache_free+0x2e2/0x4d0 [ 77.486441][ T6596] aio_complete_rw+0x3ec/0x7b0 [ 77.487789][ T6596] netfs_read_collection+0x30fa/0x3cf0 [ 77.489316][ T6596] netfs_wait_for_pause+0x31c/0x3e0 [ 77.490775][ T6596] netfs_unbuffered_read_iter_locked+0xb50/0x1610 [ 77.492500][ T6596] netfs_unbuffered_read_iter+0xc5/0x100 [ 77.494072][ T6596] v9fs_file_read_iter+0xbf/0x100 [ 77.495480][ T6596] aio_read+0x313/0x4e0 [ 77.496688][ T6596] io_submit_one+0x1580/0x1da0 [ 77.498047][ T6596] __x64_sys_io_submit+0x1b2/0x340 [ 77.499486][ T6596] do_syscall_64+0xcd/0x250 [ 77.500740][ T6596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.502387][ T6596] [ 77.503068][ T6596] The buggy address belongs to the object at ffff88802e13adc0 [ 77.503068][ T6596] which belongs to the cache aio_kiocb of size 216 [ 77.506781][ T6596] The buggy address is located 200 bytes inside of [ 77.506781][ T6596] freed 216-byte region [ffff88802e13adc0, ffff88802e13ae98) [ 77.510512][ T6596] [ 77.511203][ T6596] The buggy address belongs to the physical page: [ 77.512997][ T6596] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802e13af00 pfn:0x2e13a [ 77.515779][ T6596] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 77.518092][ T6596] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 77.520139][ T6596] page_type: f5(slab) [ 77.521274][ T6596] raw: 00fff00000000040 ffff888020025cc0 dead000000000122 0000000000000000 [ 77.523616][ T6596] raw: ffff88802e13af00 0000000080190010 00000000f5000000 0000000000000000 [ 77.525918][ T6596] head: 00fff00000000040 ffff888020025cc0 dead000000000122 0000000000000000 [ 77.526417][ T6442] Bluetooth: hci0: command tx timeout [ 77.528282][ T6596] head: ffff88802e13af00 0000000080190010 00000000f5000000 0000000000000000 [ 77.529785][ T6442] Bluetooth: hci3: command tx timeout [ 77.532050][ T6596] head: 00fff00000000001 ffffea0000b84e81 ffffffffffffffff 0000000000000000 [ 77.533647][ T6442] Bluetooth: hci1: command tx timeout [ 77.535963][ T6596] head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 77.535975][ T6596] page dumped because: kasan: bad access detected [ 77.535981][ T6596] page_owner tracks the page as allocated [ 77.535988][ T6596] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6485, tgid 6484 (syz.1.20), ts 73097474485, free_ts 73096375881 [ 77.536008][ T6596] post_alloc_hook+0x181/0x1b0 [ 77.536026][ T6596] get_page_from_freelist+0xfce/0x2f80 [ 77.536036][ T6596] __alloc_frozen_pages_noprof+0x221/0x2470 [ 77.536045][ T6596] alloc_pages_mpol+0x1fc/0x540 [ 77.536056][ T6596] new_slab+0x23d/0x330 [ 77.556316][ T6596] ___slab_alloc+0xc5d/0x1720 [ 77.557663][ T6596] __slab_alloc.constprop.0+0x56/0xb0 [ 77.559127][ T6596] kmem_cache_alloc_noprof+0xfa/0x3d0 [ 77.560601][ T6596] io_submit_one+0x123/0x1da0 [ 77.561948][ T6596] __x64_sys_io_submit+0x1b2/0x340 [ 77.563335][ T6596] do_syscall_64+0xcd/0x250 [ 77.564558][ T6596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.566175][ T6596] page last free pid 34 tgid 34 stack trace: [ 77.567852][ T6596] free_frozen_pages+0x6db/0xfb0 [ 77.569241][ T6596] rcu_core+0x79d/0x14d0 [ 77.570437][ T6596] handle_softirqs+0x213/0x8f0 [ 77.571799][ T6596] run_ksoftirqd+0x3a/0x60 [ 77.573056][ T6596] smpboot_thread_fn+0x661/0xa30 [ 77.574436][ T6596] kthread+0x3af/0x750 [ 77.575593][ T6596] ret_from_fork+0x45/0x80 [ 77.576872][ T6596] ret_from_fork_asm+0x1a/0x30 [ 77.578211][ T6596] [ 77.578898][ T6596] Memory state around the buggy address: [ 77.580465][ T6596] ffff88802e13ad80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 77.582680][ T6596] ffff88802e13ae00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.584897][ T6596] >ffff88802e13ae80: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc [ 77.587103][ T6596] ^ [ 77.588325][ T6596] ffff88802e13af00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.590529][ T6596] ffff88802e13af80: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc [ 77.592757][ T6596] ================================================================== [ 77.595287][ T6449] Bluetooth: hci2: command tx timeout [ 77.596701][ T6596] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 77.596710][ T6596] CPU: 3 UID: 0 PID: 6596 Comm: syz.1.40 Not tainted 6.14.0-rc2-syzkaller-g128c8f96eb86-dirty #0 [ 77.596722][ T6596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.596728][ T6596] Call Trace: [ 77.596731][ T6596] [ 77.596735][ T6596] dump_stack_lvl+0x3d/0x1f0 [ 77.596750][ T6596] panic+0x71d/0x800 [ 77.596762][ T6596] ? __pfx_panic+0x10/0x10 [ 77.596772][ T6596] ? irqentry_exit+0x3b/0x90 [ 77.596782][ T6596] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.596792][ T6596] ? preempt_schedule_thunk+0x1a/0x30 [ 77.596806][ T6596] ? preempt_schedule_common+0x44/0xc0 [ 77.596815][ T6596] ? check_panic_on_warn+0x1f/0xb0 [ 77.596827][ T6596] check_panic_on_warn+0xab/0xb0 [ 77.596838][ T6596] end_report+0x117/0x180 [ 77.596849][ T6596] kasan_report+0xe9/0x110 [ 77.596859][ T6596] ? io_submit_one+0x4e5/0x1da0 [ 77.596873][ T6596] ? io_submit_one+0x4e5/0x1da0 [ 77.623729][ T6596] kasan_check_range+0xef/0x1a0 [ 77.625102][ T6596] io_submit_one+0x4e5/0x1da0 [ 77.626440][ T6596] ? __pfx_io_submit_one+0x10/0x10 [ 77.627888][ T6596] ? __might_fault+0x13b/0x190 [ 77.629239][ T6596] ? lock_acquire+0x2f/0xb0 [ 77.630521][ T6596] ? __might_fault+0xe3/0x190 [ 77.631863][ T6596] ? __x64_sys_io_submit+0x1b2/0x340 [ 77.633396][ T6596] __x64_sys_io_submit+0x1b2/0x340 [ 77.634843][ T6596] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 77.636472][ T6596] do_syscall_64+0xcd/0x250 [ 77.637762][ T6596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.639408][ T6596] RIP: 0033:0x7f8f53d8cde9 [ 77.640675][ T6596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.645988][ T6596] RSP: 002b:00007f8f54b7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 77.648303][ T6596] RAX: ffffffffffffffda RBX: 00007f8f53fa5fa0 RCX: 00007f8f53d8cde9 [ 77.650490][ T6596] RDX: 00004000000002c0 RSI: 0000000000000001 RDI: 00007f8f54b5e000 [ 77.652688][ T6596] RBP: 00007f8f53e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 77.654882][ T6596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.657125][ T6596] R13: 0000000000000000 R14: 00007f8f53fa5fa0 R15: 00007ffeeb0594c8 [ 77.659318][ T6596] [ 77.660778][ T6596] Kernel Offset: disabled [ 77.661993][ T6596] Rebooting in 86400 seconds..