Warning: Permanently added '10.128.0.170' (ED25519) to the list of known hosts. 2025/01/31 12:09:47 ignoring optional flag "sandboxArg"="0" 2025/01/31 12:09:48 parsed 1 programs syzkaller login: [ 65.571342][ T5823] cgroup: Unknown subsys name 'net' [ 65.698941][ T5823] cgroup: Unknown subsys name 'cpuset' [ 65.707400][ T5823] cgroup: Unknown subsys name 'rlimit' [ 67.211646][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.807198][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.826312][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.835027][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.843461][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.851545][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.859061][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.188082][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.038006][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.047694][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.223910][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.234411][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.359583][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.373067][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.619074][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 72.116345][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.145779][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.157277][ T5880] bridge_slave_0: entered allmulticast mode [ 72.168324][ T5880] bridge_slave_0: entered promiscuous mode [ 72.251910][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.262375][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.270734][ T5880] bridge_slave_1: entered allmulticast mode [ 72.280941][ T5880] bridge_slave_1: entered promiscuous mode [ 72.345874][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.387862][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.422155][ T5880] team0: Port device team_slave_0 added [ 72.449107][ T5880] team0: Port device team_slave_1 added [ 72.505332][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.514166][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.540675][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.557180][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.575993][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.606463][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.723890][ T5880] hsr_slave_0: entered promiscuous mode [ 72.740834][ T5880] hsr_slave_1: entered promiscuous mode [ 72.954318][ T5880] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.964901][ T5880] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.977840][ T5880] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.987161][ T5880] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.048171][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.070863][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.083106][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.090333][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.103326][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.110454][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.239611][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.272556][ T5880] veth0_vlan: entered promiscuous mode [ 73.282407][ T5880] veth1_vlan: entered promiscuous mode [ 73.305234][ T5880] veth0_macvtap: entered promiscuous mode [ 73.313842][ T5880] veth1_macvtap: entered promiscuous mode [ 73.328129][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.341135][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.351785][ T5880] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.361087][ T5880] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.369909][ T5880] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.378698][ T5880] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/01/31 12:09:59 executed programs: 0 [ 73.556480][ T5137] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.579100][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.597060][ T5935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.605965][ T5935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.613096][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.620313][ T5880] syz-executor (5880) used greatest stack depth: 18576 bytes left [ 73.630384][ T5935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.641136][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.657333][ T5935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.667702][ T5935] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.677337][ T5935] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.685762][ T5935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.689748][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.740147][ T5137] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.748511][ T5137] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.758590][ T5137] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.768016][ T5137] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.796761][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.808495][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.816055][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.823318][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.837117][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.844156][ T5946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.852410][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.859909][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.860960][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.875568][ T5947] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.886241][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.894633][ T5947] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.902409][ T5947] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.909769][ T5947] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.314119][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 74.370297][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 74.402773][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.503625][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.517803][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 74.581768][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 74.611524][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.619847][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.627235][ T5939] bridge_slave_0: entered allmulticast mode [ 74.633899][ T5939] bridge_slave_0: entered promiscuous mode [ 74.641805][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.649084][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.656569][ T5939] bridge_slave_1: entered allmulticast mode [ 74.663181][ T5939] bridge_slave_1: entered promiscuous mode [ 74.723626][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.734288][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.741770][ T5934] bridge_slave_0: entered allmulticast mode [ 74.749163][ T5934] bridge_slave_0: entered promiscuous mode [ 74.816439][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.823707][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.832258][ T5934] bridge_slave_1: entered allmulticast mode [ 74.839448][ T5934] bridge_slave_1: entered promiscuous mode [ 74.859360][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.866658][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.873768][ T5932] bridge_slave_0: entered allmulticast mode [ 74.880602][ T5932] bridge_slave_0: entered promiscuous mode [ 74.888649][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.895750][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.902958][ T5932] bridge_slave_1: entered allmulticast mode [ 74.909900][ T5932] bridge_slave_1: entered promiscuous mode [ 74.924355][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.943521][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 74.978885][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.024812][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.033032][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.040868][ T5942] bridge_slave_0: entered allmulticast mode [ 75.048007][ T5942] bridge_slave_0: entered promiscuous mode [ 75.056744][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.065851][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.078022][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.085120][ T5942] bridge_slave_1: entered allmulticast mode [ 75.092579][ T5942] bridge_slave_1: entered promiscuous mode [ 75.109572][ T5939] team0: Port device team_slave_0 added [ 75.117387][ T5939] team0: Port device team_slave_1 added [ 75.125341][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.149723][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.197180][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.224132][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.234200][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.245450][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.272056][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.316658][ T5932] team0: Port device team_slave_0 added [ 75.324406][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.342936][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.351855][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.378410][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.395853][ T5934] team0: Port device team_slave_0 added [ 75.410027][ T5932] team0: Port device team_slave_1 added [ 75.429312][ T5942] team0: Port device team_slave_0 added [ 75.441700][ T5942] team0: Port device team_slave_1 added [ 75.448878][ T5934] team0: Port device team_slave_1 added [ 75.524318][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.531607][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.539366][ T5944] bridge_slave_0: entered allmulticast mode [ 75.546703][ T5944] bridge_slave_0: entered promiscuous mode [ 75.554957][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.562350][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.569615][ T5944] bridge_slave_1: entered allmulticast mode [ 75.576422][ T5944] bridge_slave_1: entered promiscuous mode [ 75.583159][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.590305][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.616712][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.628962][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.636053][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.662056][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.678942][ T5939] hsr_slave_0: entered promiscuous mode [ 75.685023][ T5939] hsr_slave_1: entered promiscuous mode [ 75.691290][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.699139][ T5939] Cannot create hsr debugfs directory [ 75.705073][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.712383][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.738376][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.750152][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.757277][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.784686][ T5935] Bluetooth: hci1: command tx timeout [ 75.790634][ T5947] Bluetooth: hci0: command tx timeout [ 75.796570][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.842618][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.850329][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.876673][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.897743][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.911280][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.923393][ T5947] Bluetooth: hci2: command tx timeout [ 75.929315][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.955337][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.974618][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.991274][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.006317][ T5947] Bluetooth: hci4: command tx timeout [ 76.011967][ T5947] Bluetooth: hci3: command tx timeout [ 76.052315][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.090888][ T5942] hsr_slave_0: entered promiscuous mode [ 76.097095][ T5942] hsr_slave_1: entered promiscuous mode [ 76.103051][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.110909][ T5942] Cannot create hsr debugfs directory [ 76.138238][ T5932] hsr_slave_0: entered promiscuous mode [ 76.144318][ T5932] hsr_slave_1: entered promiscuous mode [ 76.151774][ T5932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.159827][ T5932] Cannot create hsr debugfs directory [ 76.192415][ T5944] team0: Port device team_slave_0 added [ 76.224777][ T5934] hsr_slave_0: entered promiscuous mode [ 76.234334][ T5934] hsr_slave_1: entered promiscuous mode [ 76.241424][ T5934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.249214][ T5934] Cannot create hsr debugfs directory [ 76.256687][ T5944] team0: Port device team_slave_1 added [ 76.369562][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.376876][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.403211][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.419294][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.426349][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.452367][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.576259][ T5944] hsr_slave_0: entered promiscuous mode [ 76.586890][ T5944] hsr_slave_1: entered promiscuous mode [ 76.592746][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.600498][ T5944] Cannot create hsr debugfs directory [ 77.067512][ T52] bridge_slave_1: left allmulticast mode [ 77.073335][ T52] bridge_slave_1: left promiscuous mode [ 77.079627][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.097005][ T52] bridge_slave_0: left allmulticast mode [ 77.102653][ T52] bridge_slave_0: left promiscuous mode [ 77.109086][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.430432][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.441505][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.453658][ T52] bond0 (unregistering): Released all slaves [ 77.635986][ T52] hsr_slave_0: left promiscuous mode [ 77.642016][ T52] hsr_slave_1: left promiscuous mode [ 77.653968][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.663352][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.672880][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.681647][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.702576][ T52] veth1_macvtap: left promiscuous mode [ 77.708703][ T52] veth0_macvtap: left promiscuous mode [ 77.714464][ T52] veth1_vlan: left promiscuous mode [ 77.720151][ T52] veth0_vlan: left promiscuous mode [ 77.836512][ T5935] Bluetooth: hci1: command tx timeout [ 77.842048][ T5947] Bluetooth: hci0: command tx timeout [ 78.006112][ T5947] Bluetooth: hci2: command tx timeout [ 78.077435][ T5935] Bluetooth: hci4: command tx timeout [ 78.082933][ T5947] Bluetooth: hci3: command tx timeout [ 78.163757][ T52] team0 (unregistering): Port device team_slave_1 removed [ 78.192747][ T52] team0 (unregistering): Port device team_slave_0 removed [ 78.695411][ T5939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.712945][ T5939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.727969][ T5939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.756055][ T5939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.846727][ T5942] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.876972][ T5942] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.892431][ T5942] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.914797][ T5942] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.962235][ T5934] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.980427][ T5934] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.015318][ T5934] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.050710][ T5934] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.063343][ T5944] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.084723][ T5944] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.101696][ T5944] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.120511][ T5944] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.170998][ T5932] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.189577][ T5932] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.204562][ T5932] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.213899][ T5932] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.232325][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.252782][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.280977][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.288064][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.327379][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.334451][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.362099][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.406531][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.455076][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.470745][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.477855][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.498418][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.505504][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.522920][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.561900][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.583381][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.629120][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.636283][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.654890][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.662065][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.679004][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.690447][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.697577][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.720534][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.727822][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.779662][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.824126][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.831234][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.841205][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.848319][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.882932][ T5934] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.916544][ T5947] Bluetooth: hci0: command tx timeout [ 79.921970][ T5947] Bluetooth: hci1: command tx timeout [ 79.927378][ T5932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.969723][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.076764][ T5947] Bluetooth: hci2: command tx timeout [ 80.102945][ T5939] veth0_vlan: entered promiscuous mode [ 80.125910][ T5939] veth1_vlan: entered promiscuous mode [ 80.157168][ T5947] Bluetooth: hci3: command tx timeout [ 80.158341][ T5935] Bluetooth: hci4: command tx timeout [ 80.218509][ T5939] veth0_macvtap: entered promiscuous mode [ 80.247419][ T5939] veth1_macvtap: entered promiscuous mode [ 80.296541][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.342312][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.361315][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.375751][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.391083][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.402262][ T5939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.424644][ T5939] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.433740][ T5939] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.452587][ T5939] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.499606][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.580142][ T5932] veth0_vlan: entered promiscuous mode [ 80.595140][ T5944] veth0_vlan: entered promiscuous mode [ 80.612671][ T5932] veth1_vlan: entered promiscuous mode [ 80.622551][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.643852][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.665015][ T5944] veth1_vlan: entered promiscuous mode [ 80.715571][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.730380][ T5944] veth0_macvtap: entered promiscuous mode [ 80.742005][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.762538][ T5934] veth0_vlan: entered promiscuous mode [ 80.774387][ T5944] veth1_macvtap: entered promiscuous mode [ 80.786591][ T5932] veth0_macvtap: entered promiscuous mode 2025/01/31 12:10:07 executed programs: 10 [ 80.819432][ T5934] veth1_vlan: entered promiscuous mode [ 80.832574][ T5932] veth1_macvtap: entered promiscuous mode [ 80.894789][ T6040] loop2: detected capacity change from 0 to 128 [ 80.901538][ T5942] veth0_vlan: entered promiscuous mode [ 80.909748][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.921404][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.933057][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.941409][ T6040] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 80.958190][ T6040] syz.2.18: attempt to access beyond end of device [ 80.958190][ T6040] loop2: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 80.966459][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.982594][ T6040] Buffer I/O error on dev loop2, logical block 3245768, async page read [ 80.997168][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.003688][ T6040] ================================================================== [ 81.007110][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.015018][ T6040] BUG: KASAN: use-after-free in sysv_new_block+0x790/0x970 [ 81.025472][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.032567][ T6040] Read of size 4 at addr ffff88806e7290c8 by task syz.2.18/6040 [ 81.032587][ T6040] [ 81.032610][ T6040] CPU: 0 UID: 0 PID: 6040 Comm: syz.2.18 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 81.032632][ T6040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 81.032649][ T6040] Call Trace: [ 81.032656][ T6040] [ 81.032664][ T6040] dump_stack_lvl+0x241/0x360 [ 81.032702][ T6040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.032737][ T6040] ? __pfx__printk+0x10/0x10 [ 81.032769][ T6040] ? _printk+0xd5/0x120 [ 81.032800][ T6040] ? __virt_addr_valid+0x183/0x530 [ 81.032831][ T6040] ? __virt_addr_valid+0x183/0x530 [ 81.032862][ T6040] print_report+0x169/0x550 [ 81.032887][ T6040] ? __virt_addr_valid+0x183/0x530 [ 81.032916][ T6040] ? __virt_addr_valid+0x183/0x530 [ 81.032944][ T6040] ? __virt_addr_valid+0x45f/0x530 [ 81.032973][ T6040] ? __phys_addr+0xba/0x170 [ 81.033015][ T6040] ? sysv_new_block+0x790/0x970 [ 81.033046][ T6040] kasan_report+0x143/0x180 [ 81.033070][ T6040] ? sysv_new_block+0x790/0x970 [ 81.033105][ T6040] sysv_new_block+0x790/0x970 [ 81.033155][ T6040] get_block+0x30a/0x16d0 [ 81.033179][ T6040] ? create_empty_buffers+0x471/0x530 [ 81.033214][ T6040] ? __pfx_lock_release+0x10/0x10 [ 81.033235][ T6040] ? do_raw_spin_lock+0x14f/0x370 [ 81.033254][ T6040] ? __pfx_get_block+0x10/0x10 [ 81.033276][ T6040] ? _raw_spin_unlock+0x28/0x50 [ 81.033295][ T6040] ? create_empty_buffers+0x471/0x530 [ 81.033319][ T6040] __block_write_begin_int+0x692/0x19a0 [ 81.033345][ T6040] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 81.033381][ T6040] ? __pfx_get_block+0x10/0x10 [ 81.033397][ T6040] ? __pfx___block_write_begin_int+0x10/0x10 [ 81.033420][ T6040] ? __filemap_get_folio+0x897/0xae0 [ 81.033442][ T6040] ? __pfx_get_block+0x10/0x10 [ 81.033458][ T6040] block_write_begin+0x8f/0x120 [ 81.033483][ T6040] sysv_write_begin+0x31/0x70 [ 81.033501][ T6040] page_symlink+0x2a6/0x4a0 [ 81.033528][ T6040] ? __pfx_page_symlink+0x10/0x10 [ 81.033555][ T6040] ? generic_permission+0x356/0x680 [ 81.033579][ T6040] ? inode_nohighmem+0x1b/0x80 [ 81.033609][ T6040] sysv_symlink+0xcf/0x180 [ 81.033630][ T6040] vfs_symlink+0x137/0x2e0 [ 81.033650][ T6040] do_symlinkat+0x222/0x3a0 [ 81.033671][ T6040] ? __pfx_do_symlinkat+0x10/0x10 [ 81.033689][ T6040] ? strncpy_from_user+0x146/0x270 [ 81.033727][ T6040] ? getname_flags+0x1e3/0x540 [ 81.033753][ T6040] __x64_sys_symlink+0x7a/0x90 [ 81.033773][ T6040] do_syscall_64+0xf3/0x230 [ 81.033798][ T6040] ? clear_bhb_loop+0x35/0x90 [ 81.033827][ T6040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.033853][ T6040] RIP: 0033:0x7f3a41d8cda9 [ 81.033874][ T6040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.033890][ T6040] RSP: 002b:00007f3a42c19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 81.033911][ T6040] RAX: ffffffffffffffda RBX: 00007f3a41fa5fa0 RCX: 00007f3a41d8cda9 [ 81.033926][ T6040] RDX: 0000000000000000 RSI: 000000002000acc0 RDI: 000000002000ad80 [ 81.033938][ T6040] RBP: 00007f3a41e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 81.033950][ T6040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.033961][ T6040] R13: 0000000000000000 R14: 00007f3a41fa5fa0 R15: 00007ffd5cb3b8f8 [ 81.033981][ T6040] [ 81.033988][ T6040] [ 81.045451][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.050058][ T6040] The buggy address belongs to the physical page: [ 81.050073][ T6040] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xc pfn:0x6e729 [ 81.050094][ T6040] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 81.050116][ T6040] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 81.050131][ T6040] raw: 000000000000000c 0000000000000000 00000000ffffffff 0000000000000000 [ 81.050140][ T6040] page dumped because: kasan: bad access detected [ 81.050153][ T6040] page_owner tracks the page as freed [ 81.050160][ T6040] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 5993, tgid 5993 (rm), ts 77942296454, free_ts 77960916066 [ 81.050186][ T6040] post_alloc_hook+0x1f4/0x240 [ 81.050212][ T6040] get_page_from_freelist+0x3651/0x37a0 [ 81.050229][ T6040] __alloc_frozen_pages_noprof+0x292/0x710 [ 81.050246][ T6040] alloc_pages_mpol+0x311/0x660 [ 81.050265][ T6040] vma_alloc_folio_noprof+0x12b/0x260 [ 81.050285][ T6040] folio_prealloc+0x2e/0x170 [ 81.050299][ T6040] __handle_mm_fault+0x20bd/0x70f0 [ 81.050323][ T6040] handle_mm_fault+0x2c1/0x7e0 [ 81.050346][ T6040] exc_page_fault+0x459/0x8b0 [ 81.050365][ T6040] asm_exc_page_fault+0x26/0x30 [ 81.050387][ T6040] page last free pid 5993 tgid 5993 stack trace: [ 81.050397][ T6040] free_unref_folios+0xe2f/0x18a0 [ 81.050421][ T6040] folios_put_refs+0x76c/0x860 [ 81.050441][ T6040] free_pages_and_swap_cache+0x2e5/0x690 [ 81.072025][ T5934] veth0_macvtap: entered promiscuous mode [ 81.072925][ T6040] tlb_flush_mmu+0x3a3/0x680 [ 81.083637][ T5934] veth1_macvtap: entered promiscuous mode [ 81.083761][ T6040] tlb_finish_mmu+0xd4/0x200 [ 81.539183][ T6040] exit_mmap+0x52a/0xd40 [ 81.543430][ T6040] __mmput+0x115/0x410 [ 81.547497][ T6040] exit_mm+0x220/0x310 [ 81.551561][ T6040] do_exit+0x9ad/0x28e0 [ 81.555708][ T6040] do_group_exit+0x207/0x2c0 [ 81.560290][ T6040] __x64_sys_exit_group+0x3f/0x40 [ 81.565305][ T6040] x64_sys_call+0x26a8/0x26b0 [ 81.569975][ T6040] do_syscall_64+0xf3/0x230 [ 81.574473][ T6040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.580366][ T6040] [ 81.582679][ T6040] Memory state around the buggy address: [ 81.588293][ T6040] ffff88806e728f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 81.596342][ T6040] ffff88806e729000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 81.604389][ T6040] >ffff88806e729080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 81.612445][ T6040] ^ [ 81.618847][ T6040] ffff88806e729100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 81.626897][ T6040] ffff88806e729180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 81.634947][ T6040] ================================================================== [ 81.656378][ T5942] veth1_vlan: entered promiscuous mode [ 81.684404][ T5942] veth0_macvtap: entered promiscuous mode [ 81.684527][ T6040] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 81.684544][ T6040] CPU: 1 UID: 0 PID: 6040 Comm: syz.2.18 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 81.684573][ T6040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 81.684585][ T6040] Call Trace: [ 81.684594][ T6040] [ 81.684607][ T6040] dump_stack_lvl+0x241/0x360 [ 81.684645][ T6040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.684693][ T6040] ? __pfx__printk+0x10/0x10 [ 81.684722][ T6040] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 81.684752][ T6040] ? vscnprintf+0x5d/0x90 [ 81.684774][ T6040] panic+0x349/0x880 [ 81.684805][ T6040] ? check_panic_on_warn+0x21/0xb0 [ 81.684834][ T6040] ? __pfx_panic+0x10/0x10 [ 81.684867][ T6040] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 81.684891][ T6040] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 81.684917][ T6040] check_panic_on_warn+0x86/0xb0 [ 81.684945][ T6040] ? sysv_new_block+0x790/0x970 [ 81.684978][ T6040] end_report+0x77/0x160 [ 81.685001][ T6040] kasan_report+0x154/0x180 [ 81.685025][ T6040] ? sysv_new_block+0x790/0x970 [ 81.685060][ T6040] sysv_new_block+0x790/0x970 [ 81.685099][ T6040] get_block+0x30a/0x16d0 [ 81.685125][ T6040] ? create_empty_buffers+0x471/0x530 [ 81.685153][ T6040] ? __pfx_lock_release+0x10/0x10 [ 81.685179][ T6040] ? do_raw_spin_lock+0x14f/0x370 [ 81.685200][ T6040] ? __pfx_get_block+0x10/0x10 [ 81.685226][ T6040] ? _raw_spin_unlock+0x28/0x50 [ 81.685247][ T6040] ? create_empty_buffers+0x471/0x530 [ 81.685277][ T6040] __block_write_begin_int+0x692/0x19a0 [ 81.685307][ T6040] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 81.685348][ T6040] ? __pfx_get_block+0x10/0x10 [ 81.685367][ T6040] ? __pfx___block_write_begin_int+0x10/0x10 [ 81.685395][ T6040] ? __filemap_get_folio+0x897/0xae0 [ 81.685421][ T6040] ? __pfx_get_block+0x10/0x10 [ 81.685439][ T6040] block_write_begin+0x8f/0x120 [ 81.685468][ T6040] sysv_write_begin+0x31/0x70 [ 81.685496][ T6040] page_symlink+0x2a6/0x4a0 [ 81.685527][ T6040] ? __pfx_page_symlink+0x10/0x10 [ 81.685557][ T6040] ? generic_permission+0x356/0x680 [ 81.685586][ T6040] ? inode_nohighmem+0x1b/0x80 [ 81.685620][ T6040] sysv_symlink+0xcf/0x180 [ 81.685645][ T6040] vfs_symlink+0x137/0x2e0 [ 81.685668][ T6040] do_symlinkat+0x222/0x3a0 [ 81.685693][ T6040] ? __pfx_do_symlinkat+0x10/0x10 [ 81.685715][ T6040] ? strncpy_from_user+0x146/0x270 [ 81.685738][ T6040] ? getname_flags+0x1e3/0x540 [ 81.685766][ T6040] __x64_sys_symlink+0x7a/0x90 [ 81.685789][ T6040] do_syscall_64+0xf3/0x230 [ 81.685817][ T6040] ? clear_bhb_loop+0x35/0x90 [ 81.685848][ T6040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.685877][ T6040] RIP: 0033:0x7f3a41d8cda9 [ 81.685896][ T6040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.685914][ T6040] RSP: 002b:00007f3a42c19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 81.685938][ T6040] RAX: ffffffffffffffda RBX: 00007f3a41fa5fa0 RCX: 00007f3a41d8cda9 [ 81.685954][ T6040] RDX: 0000000000000000 RSI: 000000002000acc0 RDI: 000000002000ad80 [ 81.685968][ T6040] RBP: 00007f3a41e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 81.685982][ T6040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.685995][ T6040] R13: 0000000000000000 R14: 00007f3a41fa5fa0 R15: 00007ffd5cb3b8f8 [ 81.686017][ T6040] [ 81.690444][ T6040] Kernel Offset: disabled