Warning: Permanently added '[localhost]:40819' (ED25519) to the list of known hosts. syzkaller login: [ 91.836366][ T10] cfg80211: failed to load regulatory.db 2025/09/14 06:17:47 parsed 1 programs [ 95.518943][ T5357] cgroup: Unknown subsys name 'net' [ 95.590385][ T5357] cgroup: Unknown subsys name 'cpuset' [ 95.597262][ T5357] cgroup: Unknown subsys name 'rlimit' [ 97.200933][ T5357] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 101.873912][ T5373] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.267776][ T45] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.271684][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.275147][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.278949][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.282844][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.948131][ T5371] syz-executor (5371) used greatest stack depth: 19080 bytes left [ 104.467212][ T4707] Bluetooth: hci0: command tx timeout [ 106.118519][ T1045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.122089][ T1045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.460535][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.467292][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.224145][ T5421] chnl_net:caif_netlink_parms(): no params data found [ 107.494010][ T5421] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.508059][ T5421] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.511068][ T5421] bridge_slave_0: entered allmulticast mode [ 107.538419][ T5421] bridge_slave_0: entered promiscuous mode [ 107.549663][ T5421] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.556654][ T5421] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.569297][ T5421] bridge_slave_1: entered allmulticast mode [ 107.582183][ T5421] bridge_slave_1: entered promiscuous mode [ 107.674077][ T5421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.694762][ T5421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.748070][ T5421] team0: Port device team_slave_0 added [ 107.757412][ T5421] team0: Port device team_slave_1 added [ 107.809973][ T5421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.813097][ T5421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.847247][ T5421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.858180][ T5421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.861275][ T5421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.887018][ T5421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.957406][ T5421] hsr_slave_0: entered promiscuous mode [ 107.967476][ T5421] hsr_slave_1: entered promiscuous mode [ 108.331973][ T5421] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.344320][ T5421] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.360262][ T5421] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.377459][ T5421] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.532380][ T5421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.562239][ T5421] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.582475][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.585802][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.604968][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.608311][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.860826][ T5421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.903119][ T5421] veth0_vlan: entered promiscuous mode [ 108.913662][ T5421] veth1_vlan: entered promiscuous mode [ 108.938498][ T5421] veth0_macvtap: entered promiscuous mode [ 108.944390][ T5421] veth1_macvtap: entered promiscuous mode [ 108.964592][ T5421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.978103][ T5421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.990518][ T1045] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.999915][ T1045] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.010727][ T1045] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.014205][ T1045] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/09/14 06:18:03 executed programs: 0 [ 109.430948][ T45] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.444524][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.459426][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.484513][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.489163][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.612030][ T5391] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 109.649945][ T5481] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 109.653766][ T5481] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.660658][ T5481] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 109.664660][ T5481] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 109.669410][ T5481] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 109.673983][ T5481] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 109.678426][ T5481] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 109.682286][ T5481] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 109.685682][ T5481] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 109.691635][ T5483] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 109.694974][ T5481] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.715533][ T5483] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.721946][ T5483] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.751852][ T5483] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.797863][ T5485] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 109.829834][ T5485] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 109.840243][ T5485] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 109.844099][ T5485] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 109.849168][ T5485] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.289099][ T5485] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 110.293713][ T5485] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 110.336809][ T5485] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 110.375793][ T5485] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 110.380445][ T5485] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 111.547874][ T1038] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.586178][ T5485] Bluetooth: hci0: command tx timeout [ 111.756703][ T5485] Bluetooth: hci3: command tx timeout [ 111.759382][ T5485] Bluetooth: hci1: command tx timeout [ 111.940068][ T1038] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.987111][ T5391] Bluetooth: hci2: command tx timeout [ 111.989989][ T5391] Bluetooth: hci4: command tx timeout [ 112.083915][ T5468] chnl_net:caif_netlink_parms(): no params data found [ 112.229399][ T1038] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.427993][ T1038] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.466205][ T5485] Bluetooth: hci5: command tx timeout [ 112.528611][ T5468] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.531803][ T5468] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.535131][ T5468] bridge_slave_0: entered allmulticast mode [ 112.551122][ T5468] bridge_slave_0: entered promiscuous mode [ 112.654522][ T5468] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.660719][ T5468] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.663866][ T5468] bridge_slave_1: entered allmulticast mode [ 112.678564][ T5468] bridge_slave_1: entered promiscuous mode [ 113.063180][ T5468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.090396][ T5468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.464892][ T5474] chnl_net:caif_netlink_parms(): no params data found [ 113.509817][ T1038] bridge_slave_1: left allmulticast mode [ 113.512945][ T1038] bridge_slave_1: left promiscuous mode [ 113.516182][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.553367][ T1038] bridge_slave_0: left allmulticast mode [ 113.555897][ T1038] bridge_slave_0: left promiscuous mode [ 113.568346][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.666814][ T5485] Bluetooth: hci0: command tx timeout [ 113.828327][ T5485] Bluetooth: hci1: command tx timeout [ 113.830645][ T5485] Bluetooth: hci3: command tx timeout [ 114.068581][ T5391] Bluetooth: hci4: command tx timeout [ 114.070994][ T5391] Bluetooth: hci2: command tx timeout [ 114.234918][ T1038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.241162][ T1038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.251619][ T1038] bond0 (unregistering): Released all slaves [ 114.478491][ T5468] team0: Port device team_slave_0 added [ 114.484966][ T5476] chnl_net:caif_netlink_parms(): no params data found [ 114.547461][ T5485] Bluetooth: hci5: command tx timeout [ 114.633833][ T5468] team0: Port device team_slave_1 added [ 114.733956][ T5475] chnl_net:caif_netlink_parms(): no params data found [ 114.787354][ T5484] chnl_net:caif_netlink_parms(): no params data found [ 114.823955][ T5482] chnl_net:caif_netlink_parms(): no params data found [ 115.008708][ T5468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.011787][ T5468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.049381][ T5468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.128828][ T5474] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.132715][ T5474] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.135995][ T5474] bridge_slave_0: entered allmulticast mode [ 115.143690][ T5474] bridge_slave_0: entered promiscuous mode [ 115.202887][ T5468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.205629][ T5468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.231925][ T5468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.260175][ T5474] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.263305][ T5474] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.286859][ T5474] bridge_slave_1: entered allmulticast mode [ 115.302023][ T5474] bridge_slave_1: entered promiscuous mode [ 115.392676][ T1038] hsr_slave_0: left promiscuous mode [ 115.395506][ T1038] hsr_slave_1: left promiscuous mode [ 115.398732][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.402075][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.405971][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.413398][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.425052][ T1038] veth1_macvtap: left promiscuous mode [ 115.430786][ T1038] veth0_macvtap: left promiscuous mode [ 115.433112][ T1038] veth1_vlan: left promiscuous mode [ 115.435575][ T1038] veth0_vlan: left promiscuous mode [ 115.750419][ T5485] Bluetooth: hci0: command tx timeout [ 115.761657][ T1038] team0 (unregistering): Port device team_slave_1 removed [ 115.784108][ T1038] team0 (unregistering): Port device team_slave_0 removed [ 115.909741][ T5485] Bluetooth: hci3: command tx timeout [ 115.912237][ T5485] Bluetooth: hci1: command tx timeout [ 116.146408][ T5391] Bluetooth: hci2: command tx timeout [ 116.148784][ T5391] Bluetooth: hci4: command tx timeout [ 116.250328][ T5475] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.253654][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.260845][ T5475] bridge_slave_0: entered allmulticast mode [ 116.264485][ T5475] bridge_slave_0: entered promiscuous mode [ 116.270177][ T5474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.275145][ T5475] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.281334][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.284594][ T5475] bridge_slave_1: entered allmulticast mode [ 116.289481][ T5475] bridge_slave_1: entered promiscuous mode [ 116.293351][ T5476] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.300247][ T5476] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.304021][ T5476] bridge_slave_0: entered allmulticast mode [ 116.308697][ T5476] bridge_slave_0: entered promiscuous mode [ 116.313833][ T5482] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.321350][ T5482] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.324198][ T5482] bridge_slave_0: entered allmulticast mode [ 116.328270][ T5482] bridge_slave_0: entered promiscuous mode [ 116.337775][ T5484] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.340991][ T5484] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.344173][ T5484] bridge_slave_0: entered allmulticast mode [ 116.360694][ T5484] bridge_slave_0: entered promiscuous mode [ 116.378320][ T5474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.395627][ T5476] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.399777][ T5476] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.402911][ T5476] bridge_slave_1: entered allmulticast mode [ 116.410412][ T5476] bridge_slave_1: entered promiscuous mode [ 116.413968][ T5482] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.418366][ T5482] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.421503][ T5482] bridge_slave_1: entered allmulticast mode [ 116.425379][ T5482] bridge_slave_1: entered promiscuous mode [ 116.432781][ T5484] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.441796][ T5484] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.444947][ T5484] bridge_slave_1: entered allmulticast mode [ 116.465347][ T5484] bridge_slave_1: entered promiscuous mode [ 116.533172][ T5468] hsr_slave_0: entered promiscuous mode [ 116.548204][ T5468] hsr_slave_1: entered promiscuous mode [ 116.582746][ T5475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.629234][ T5485] Bluetooth: hci5: command tx timeout [ 116.664702][ T5474] team0: Port device team_slave_0 added [ 116.678128][ T5474] team0: Port device team_slave_1 added [ 116.714964][ T5475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.765367][ T5482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.790322][ T5482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.872846][ T5475] team0: Port device team_slave_0 added [ 116.878023][ T5476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.918218][ T5484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.971605][ T5475] team0: Port device team_slave_1 added [ 116.975842][ T5476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.019062][ T5484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.023632][ T5474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.032287][ T5474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.044686][ T5474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.079141][ T5482] team0: Port device team_slave_0 added [ 117.084076][ T5476] team0: Port device team_slave_0 added [ 117.112077][ T5476] team0: Port device team_slave_1 added [ 117.130695][ T5474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.133469][ T5474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.161025][ T5474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.190789][ T5482] team0: Port device team_slave_1 added [ 117.259857][ T5475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.262892][ T5475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.278772][ T5475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.284074][ T5476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.289216][ T5476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.302080][ T5476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.310921][ T5484] team0: Port device team_slave_0 added [ 117.354534][ T5475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.361042][ T5475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.387628][ T5475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.410430][ T5476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.413839][ T5476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.445565][ T5476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.475367][ T5484] team0: Port device team_slave_1 added [ 117.482694][ T5482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.485902][ T5482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.518859][ T5482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.650323][ T5482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.653419][ T5482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.678756][ T5482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.700865][ T5474] hsr_slave_0: entered promiscuous mode [ 117.714233][ T5474] hsr_slave_1: entered promiscuous mode [ 117.722786][ T5474] debugfs: 'hsr0' already exists in 'hsr' [ 117.725512][ T5474] Cannot create hsr debugfs directory [ 117.800220][ T5476] hsr_slave_0: entered promiscuous mode [ 117.808578][ T5476] hsr_slave_1: entered promiscuous mode [ 117.823892][ T5476] debugfs: 'hsr0' already exists in 'hsr' [ 117.830307][ T5485] Bluetooth: hci0: command tx timeout [ 117.832682][ T5476] Cannot create hsr debugfs directory [ 117.852741][ T5475] hsr_slave_0: entered promiscuous mode [ 117.859076][ T5475] hsr_slave_1: entered promiscuous mode [ 117.862055][ T5475] debugfs: 'hsr0' already exists in 'hsr' [ 117.864414][ T5475] Cannot create hsr debugfs directory [ 117.867734][ T5484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.871046][ T5484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.885416][ T5484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.946695][ T5484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.949754][ T5484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.987692][ T5485] Bluetooth: hci1: command tx timeout [ 117.990060][ T5485] Bluetooth: hci3: command tx timeout [ 117.992406][ T5484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.105480][ T5482] hsr_slave_0: entered promiscuous mode [ 118.109521][ T5482] hsr_slave_1: entered promiscuous mode [ 118.113399][ T5482] debugfs: 'hsr0' already exists in 'hsr' [ 118.115952][ T5482] Cannot create hsr debugfs directory [ 118.165684][ T5484] hsr_slave_0: entered promiscuous mode [ 118.177911][ T5484] hsr_slave_1: entered promiscuous mode [ 118.180888][ T5484] debugfs: 'hsr0' already exists in 'hsr' [ 118.183354][ T5484] Cannot create hsr debugfs directory [ 118.226818][ T5391] Bluetooth: hci4: command tx timeout [ 118.229297][ T5391] Bluetooth: hci2: command tx timeout [ 118.699344][ T5468] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.706394][ T5485] Bluetooth: hci5: command tx timeout [ 118.751183][ T5468] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.790613][ T5468] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.820267][ T5468] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.948007][ T5476] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 118.966831][ T5476] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 119.030351][ T5476] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 119.088452][ T5476] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 119.414925][ T5468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.521772][ T5468] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.552218][ T5474] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 119.559361][ T5474] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 119.591132][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.594365][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.620677][ T5474] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 119.685856][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.689228][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.722278][ T5474] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 119.734317][ T5476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.871515][ T5476] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.888516][ T5475] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 119.933268][ T5475] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 120.021294][ T5475] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 120.061441][ T4426] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.065293][ T4426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.091631][ T4426] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.094812][ T4426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.124150][ T5475] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 120.441131][ T5484] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 120.453439][ T5484] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 120.534050][ T5484] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 120.553098][ T5484] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 120.773501][ T5468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.852467][ T5474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.919205][ T5482] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.994947][ T5482] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 121.011292][ T5482] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 121.043929][ T5474] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.117776][ T5482] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 121.230793][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.233915][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.259199][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.262300][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.395465][ T5475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.420606][ T5468] veth0_vlan: entered promiscuous mode [ 121.457977][ T5476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.499463][ T5468] veth1_vlan: entered promiscuous mode [ 121.562698][ T5475] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.682276][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.685392][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.711515][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.714501][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.782696][ T5484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.855201][ T5468] veth0_macvtap: entered promiscuous mode [ 121.892297][ T5468] veth1_macvtap: entered promiscuous mode [ 121.915740][ T5475] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.957950][ T5475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.108504][ T5484] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.129044][ T5468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.214726][ T5476] veth0_vlan: entered promiscuous mode [ 122.249794][ T5468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.310791][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.313824][ T1041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.398207][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.401236][ T1041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.423626][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.436615][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.440786][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.444420][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.501250][ T5474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.560036][ T5476] veth1_vlan: entered promiscuous mode [ 122.641832][ T5482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.764604][ T5484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.821357][ T5482] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.905361][ T5475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.005274][ T5476] veth0_macvtap: entered promiscuous mode [ 123.049147][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.052575][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.099063][ T4426] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.102121][ T4426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.112605][ T4426] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.115767][ T4426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.153893][ T5474] veth0_vlan: entered promiscuous mode [ 123.161618][ T5476] veth1_macvtap: entered promiscuous mode [ 123.254233][ T5474] veth1_vlan: entered promiscuous mode [ 123.455433][ T5476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.473576][ T5482] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 123.492624][ T5482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.530263][ T4426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.542492][ T4426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.584554][ T5476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.655830][ T5475] veth0_vlan: entered promiscuous mode [ 123.688985][ T5484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.810077][ T5474] veth0_macvtap: entered promiscuous mode [ 123.912966][ T5475] veth1_vlan: entered promiscuous mode [ 123.958611][ T1041] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 2025/09/14 06:18:18 executed programs: 12 [ 123.984504][ T1041] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.045489][ T5474] veth1_macvtap: entered promiscuous mode [ 124.077178][ T1041] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.157067][ T1041] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.165744][ T5474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.264652][ T5474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.407315][ T5475] veth0_macvtap: entered promiscuous mode [ 124.422203][ T4426] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.448627][ T4426] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.452234][ T4426] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.455679][ T4426] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.535057][ T5475] veth1_macvtap: entered promiscuous mode [ 124.601323][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.604665][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.725213][ T5475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.743651][ T5482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.835379][ T5475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.942633][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.955888][ T5707] loop0: detected capacity change from 0 to 32768 [ 124.959824][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.983247][ T1041] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.989549][ T1041] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.993214][ T1041] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.003671][ T5707] ======================================================= [ 125.003671][ T5707] WARNING: The mand mount option has been deprecated and [ 125.003671][ T5707] and is ignored by this kernel. Remove the mand [ 125.003671][ T5707] option from the mount to silence this warning. [ 125.003671][ T5707] ======================================================= [ 125.100638][ T1041] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.292405][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.295669][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.302919][ T5707] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 125.410751][ T5468] ================================================================== [ 125.414200][ T5468] BUG: KASAN: slab-out-of-bounds in __ocfs2_flush_truncate_log+0x7c7/0x10e0 [ 125.417953][ T5468] Read of size 4 at addr ffff88803f77e240 by task syz-executor/5468 [ 125.422250][ T5468] [ 125.423280][ T5468] CPU: 0 UID: 0 PID: 5468 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 125.423295][ T5468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.423302][ T5468] Call Trace: [ 125.423308][ T5468] [ 125.423313][ T5468] dump_stack_lvl+0x189/0x250 [ 125.423331][ T5468] ? __kasan_check_byte+0x12/0x40 [ 125.423346][ T5468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.423360][ T5468] ? lock_release+0x4b/0x3e0 [ 125.423377][ T5468] ? __virt_addr_valid+0x4a5/0x5c0 [ 125.423393][ T5468] print_report+0xca/0x240 [ 125.423405][ T5468] ? __ocfs2_flush_truncate_log+0x7c7/0x10e0 [ 125.423423][ T5468] kasan_report+0x118/0x150 [ 125.423436][ T5468] ? __ocfs2_flush_truncate_log+0x7c7/0x10e0 [ 125.423449][ T5468] __ocfs2_flush_truncate_log+0x7c7/0x10e0 [ 125.423465][ T5468] ? __pfx___ocfs2_flush_truncate_log+0x10/0x10 [ 125.423477][ T5468] ? ocfs2_flush_truncate_log+0x47/0x70 [ 125.423488][ T5468] ? __lock_acquire+0xab9/0xd20 [ 125.423507][ T5468] ? down_write+0x162/0x1f0 [ 125.423563][ T5468] ? __pfx_down_write+0x10/0x10 [ 125.423578][ T5468] ocfs2_flush_truncate_log+0x4f/0x70 [ 125.423589][ T5468] ocfs2_sync_fs+0x116/0x310 [ 125.423606][ T5468] ? __pfx_ocfs2_sync_fs+0x10/0x10 [ 125.423620][ T5468] ? __pfx___writeback_inodes_sb_nr+0x10/0x10 [ 125.423639][ T5468] ? __dentry_kill+0x53d/0x660 [ 125.423652][ T5468] ? get_nr_dirty_inodes+0x1c4/0x210 [ 125.423665][ T5468] sync_filesystem+0x1cc/0x230 [ 125.423683][ T5468] generic_shutdown_super+0x6f/0x2c0 [ 125.423694][ T5468] kill_block_super+0x44/0x90 [ 125.423708][ T5468] deactivate_locked_super+0xb9/0x130 [ 125.423719][ T5468] cleanup_mnt+0x425/0x4c0 [ 125.423734][ T5468] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.423753][ T5468] task_work_run+0x1d1/0x260 [ 125.423770][ T5468] ? __pfx_task_work_run+0x10/0x10 [ 125.423784][ T5468] ? __x64_sys_umount+0x122/0x160 [ 125.423796][ T5468] ? exit_to_user_mode_loop+0x40/0x110 [ 125.423815][ T5468] exit_to_user_mode_loop+0xec/0x110 [ 125.423829][ T5468] do_syscall_64+0x2bd/0x3b0 [ 125.423842][ T5468] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.423856][ T5468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.423869][ T5468] ? clear_bhb_loop+0x60/0xb0 [ 125.423881][ T5468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.423891][ T5468] RIP: 0033:0x7f9b9278fed7 [ 125.423904][ T5468] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 125.423913][ T5468] RSP: 002b:00007ffd9fcba238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 125.423925][ T5468] RAX: 0000000000000000 RBX: 00007f9b92811c05 RCX: 00007f9b9278fed7 [ 125.423933][ T5468] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9fcba2f0 [ 125.423941][ T5468] RBP: 00007ffd9fcba2f0 R08: 0000000000000000 R09: 0000000000000000 [ 125.423947][ T5468] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd9fcbb380 [ 125.423954][ T5468] R13: 00007f9b92811c05 R14: 000000000001e38c R15: 00007ffd9fcbb3c0 [ 125.423965][ T5468] [ 125.423970][ T5468] [ 125.548622][ T5468] Allocated by task 4746: [ 125.550460][ T5468] kasan_save_track+0x3e/0x80 [ 125.552472][ T5468] __kasan_kmalloc+0x93/0xb0 [ 125.554459][ T5468] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 125.557162][ T5468] kmalloc_reserve+0x136/0x290 [ 125.559279][ T5468] __alloc_skb+0x142/0x2d0 [ 125.561208][ T5468] alloc_skb_with_frags+0xca/0x890 [ 125.563438][ T5468] sock_alloc_send_pskb+0x857/0x990 [ 125.565752][ T5468] unix_dgram_sendmsg+0x50e/0x18d0 [ 125.567964][ T5468] __sock_sendmsg+0x21c/0x270 [ 125.569995][ T5468] __sys_sendto+0x3bd/0x520 [ 125.571874][ T5468] __x64_sys_sendto+0xde/0x100 [ 125.573950][ T5468] do_syscall_64+0xfa/0x3b0 [ 125.575809][ T5468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.578370][ T5468] [ 125.579441][ T5468] Freed by task 4739: [ 125.581141][ T5468] kasan_save_track+0x3e/0x80 [ 125.583139][ T5468] kasan_save_free_info+0x46/0x50 [ 125.585336][ T5468] __kasan_slab_free+0x5b/0x80 [ 125.587459][ T5468] kfree+0x18e/0x440 [ 125.589189][ T5468] skb_release_data+0x62d/0x7c0 [ 125.591200][ T5468] consume_skb+0x9e/0xf0 [ 125.592991][ T5468] __unix_dgram_recvmsg+0xa03/0xdc0 [ 125.595202][ T5468] sock_recvmsg+0x22c/0x270 [ 125.597141][ T5468] sock_read_iter+0x231/0x2f0 [ 125.599119][ T5468] vfs_read+0x557/0xa30 [ 125.600954][ T5468] ksys_read+0x145/0x250 [ 125.602739][ T5468] do_syscall_64+0xfa/0x3b0 [ 125.604728][ T5468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.607146][ T5468] [ 125.608157][ T5468] The buggy address belongs to the object at ffff88803f77e000 [ 125.608157][ T5468] which belongs to the cache kmalloc-cg-512 of size 512 [ 125.613883][ T5468] The buggy address is located 64 bytes to the right of [ 125.613883][ T5468] allocated 512-byte region [ffff88803f77e000, ffff88803f77e200) [ 125.619809][ T5468] [ 125.620872][ T5468] The buggy address belongs to the physical page: [ 125.623483][ T5468] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3f77e [ 125.627261][ T5468] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 125.630907][ T5468] memcg:ffff888042c8a681 [ 125.632829][ T5468] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 125.636131][ T5468] page_type: f5(slab) [ 125.637901][ T5468] raw: 04fff00000000040 ffff88801a84b140 ffffea0000462780 0000000000000002 [ 125.641648][ T5468] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888042c8a681 [ 125.645255][ T5468] head: 04fff00000000040 ffff88801a84b140 ffffea0000462780 0000000000000002 [ 125.648956][ T5468] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888042c8a681 [ 125.652185][ T5468] head: 04fff00000000001 ffffea0000fddf81 00000000ffffffff 00000000ffffffff [ 125.655808][ T5468] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 125.659466][ T5468] page dumped because: kasan: bad access detected [ 125.662166][ T5468] page_owner tracks the page as allocated [ 125.664566][ T5468] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4746, tgid 4746 (klogd), ts 123480205199, free_ts 104563539952 [ 125.673014][ T5468] post_alloc_hook+0x240/0x2a0 [ 125.675154][ T5468] get_page_from_freelist+0x21e4/0x22c0 [ 125.677532][ T5468] __alloc_frozen_pages_noprof+0x181/0x370 [ 125.680118][ T5468] alloc_pages_mpol+0x232/0x4a0 [ 125.682207][ T5468] allocate_slab+0x8a/0x370 [ 125.684198][ T5468] ___slab_alloc+0xbeb/0x1420 [ 125.686246][ T5468] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 125.689004][ T5468] kmalloc_reserve+0x136/0x290 [ 125.691085][ T5468] __alloc_skb+0x142/0x2d0 [ 125.693025][ T5468] alloc_skb_with_frags+0xca/0x890 [ 125.695223][ T5468] sock_alloc_send_pskb+0x857/0x990 [ 125.697424][ T5468] unix_dgram_sendmsg+0x50e/0x18d0 [ 125.699605][ T5468] __sock_sendmsg+0x21c/0x270 [ 125.701605][ T5468] __sys_sendto+0x3bd/0x520 [ 125.703532][ T5468] __x64_sys_sendto+0xde/0x100 [ 125.705567][ T5468] do_syscall_64+0xfa/0x3b0 [ 125.707525][ T5468] page last free pid 5379 tgid 5379 stack trace: [ 125.710286][ T5468] __free_frozen_pages+0xbc4/0xd30 [ 125.712549][ T5468] vfree+0x25a/0x400 [ 125.714273][ T5468] kcov_close+0x28/0x50 [ 125.716038][ T5468] __fput+0x449/0xa70 [ 125.717850][ T5468] task_work_run+0x1d1/0x260 [ 125.719875][ T5468] do_exit+0x6b5/0x2300 [ 125.721680][ T5468] do_group_exit+0x21c/0x2d0 [ 125.723715][ T5468] get_signal+0x1286/0x1340 [ 125.725624][ T5468] arch_do_signal_or_restart+0x9a/0x750 [ 125.728069][ T5468] exit_to_user_mode_loop+0x75/0x110 [ 125.730344][ T5468] do_syscall_64+0x2bd/0x3b0 [ 125.732341][ T5468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.734904][ T5468] [ 125.735968][ T5468] Memory state around the buggy address: [ 125.738394][ T5468] ffff88803f77e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.741919][ T5468] ffff88803f77e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.745427][ T5468] >ffff88803f77e200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 125.748867][ T5468] ^ [ 125.751506][ T5468] ffff88803f77e280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 125.755025][ T5468] ffff88803f77e300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 125.758497][ T5468] ================================================================== [ 125.942702][ T1041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.956541][ T1041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.980311][ T5484] veth0_vlan: entered promiscuous mode [ 125.998101][ T5484] veth1_vlan: entered promiscuous mode [ 126.211786][ T5484] veth0_macvtap: entered promiscuous mode [ 126.238436][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.241469][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.288938][ T5484] veth1_macvtap: entered promiscuous mode [ 126.382543][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.385872][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.461183][ T5484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.533793][ T5484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.636722][ T53] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.667853][ T53] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.671910][ T53] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.686796][ T1041] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.782717][ T5482] veth0_vlan: entered promiscuous mode [ 126.898973][ T5482] veth1_vlan: entered promiscuous mode [ 126.985819][ T5468] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 126.988905][ T5468] CPU: 0 UID: 0 PID: 5468 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 126.992954][ T5468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.997628][ T5468] Call Trace: [ 126.999083][ T5468] [ 127.000433][ T5468] dump_stack_lvl+0x99/0x250 [ 127.002442][ T5468] ? __asan_memcpy+0x40/0x70 [ 127.004383][ T5468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.006610][ T5468] ? __pfx__printk+0x10/0x10 [ 127.008666][ T5468] vpanic+0x281/0x750 [ 127.010337][ T5468] ? preempt_schedule+0xae/0xc0 [ 127.012459][ T5468] ? __pfx_vpanic+0x10/0x10 [ 127.014501][ T5468] ? preempt_schedule_common+0x83/0xd0 [ 127.016707][ T5468] ? preempt_schedule+0xae/0xc0 [ 127.018862][ T5468] ? __pfx_preempt_schedule+0x10/0x10 [ 127.021108][ T5468] panic+0xb9/0xc0 [ 127.022755][ T5468] ? __pfx_panic+0x10/0x10 [ 127.024662][ T5468] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 127.027292][ T5468] ? __ocfs2_flush_truncate_log+0x7c7/0x10e0 [ 127.030006][ T5468] check_panic_on_warn+0x89/0xb0 [ 127.032235][ T5468] ? __ocfs2_flush_truncate_log+0x7c7/0x10e0 [ 127.034926][ T5468] end_report+0x78/0x160 [ 127.036912][ T5468] kasan_report+0x129/0x150 [ 127.038940][ T5468] ? __ocfs2_flush_truncate_log+0x7c7/0x10e0 [ 127.041568][ T5468] __ocfs2_flush_truncate_log+0x7c7/0x10e0 [ 127.044116][ T5468] ? __pfx___ocfs2_flush_truncate_log+0x10/0x10 [ 127.046915][ T5468] ? ocfs2_flush_truncate_log+0x47/0x70 [ 127.049393][ T5468] ? __lock_acquire+0xab9/0xd20 [ 127.051621][ T5468] ? down_write+0x162/0x1f0 [ 127.053711][ T5468] ? __pfx_down_write+0x10/0x10 [ 127.055980][ T5468] ocfs2_flush_truncate_log+0x4f/0x70 [ 127.058479][ T5468] ocfs2_sync_fs+0x116/0x310 [ 127.060504][ T5468] ? __pfx_ocfs2_sync_fs+0x10/0x10 [ 127.062688][ T5468] ? __pfx___writeback_inodes_sb_nr+0x10/0x10 [ 127.065427][ T5468] ? __dentry_kill+0x53d/0x660 [ 127.067606][ T5468] ? get_nr_dirty_inodes+0x1c4/0x210 [ 127.069916][ T5468] sync_filesystem+0x1cc/0x230 [ 127.072098][ T5468] generic_shutdown_super+0x6f/0x2c0 [ 127.074525][ T5468] kill_block_super+0x44/0x90 [ 127.076728][ T5468] deactivate_locked_super+0xb9/0x130 [ 127.079114][ T5468] cleanup_mnt+0x425/0x4c0 [ 127.081165][ T5468] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.083508][ T5468] task_work_run+0x1d1/0x260 [ 127.085618][ T5468] ? __pfx_task_work_run+0x10/0x10 [ 127.087972][ T5468] ? __x64_sys_umount+0x122/0x160 [ 127.090262][ T5468] ? exit_to_user_mode_loop+0x40/0x110 [ 127.092769][ T5468] exit_to_user_mode_loop+0xec/0x110 [ 127.095174][ T5468] do_syscall_64+0x2bd/0x3b0 [ 127.097396][ T5468] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.099835][ T5468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.102618][ T5468] ? clear_bhb_loop+0x60/0xb0 [ 127.104705][ T5468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.107352][ T5468] RIP: 0033:0x7f9b9278fed7 [ 127.109390][ T5468] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 127.118296][ T5468] RSP: 002b:00007ffd9fcba238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 127.122290][ T5468] RAX: 0000000000000000 RBX: 00007f9b92811c05 RCX: 00007f9b9278fed7 [ 127.125773][ T5468] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9fcba2f0 [ 127.129283][ T5468] RBP: 00007ffd9fcba2f0 R08: 0000000000000000 R09: 0000000000000000 [ 127.132931][ T5468] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd9fcbb380 [ 127.136409][ T5468] R13: 00007f9b92811c05 R14: 000000000001e38c R15: 00007ffd9fcbb3c0 [ 127.139959][ T5468] [ 127.141657][ T5468] Kernel Offset: disabled [ 127.143482][ T5468] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:18:20 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000d3872d0 R8 =ffff888031b28237 R9 =1ffff11006365046 R10=dffffc0000000000 R11=ffffffff855138c0 R12=dffffc0000000000 R13=ffffffff99d0b8e7 R14=ffffffff9a000840 R15=0000000000000000 RIP=ffffffff8551393c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555575f5d500 ffffffff 00c00000 GS =0000 ffff88808d00a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4632951048 CR3=000000005238c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=000000000ffe0000 Opmask02=000000000fffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d3852c0cc0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d38525eb50 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25dd3f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25dd352c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c696b66722f3031 7968702f31313230 38656565692f396d 697377682f6d6973 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 39316c6c696b6672 2f30317968702f31 3132303865656569 2f396d697377682f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d697377685f3131 32303863616d2f6c 6175747269762f73 6563697665642f73 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003a756b733a302e 30312d3533712d63 707276633a317463 3a554d45516e7663 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a302e30312d3533 712d63707276703a 29393030322c3948 43492b3533512843 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50647261646e6174 536e703a554d4551 6e76733a302e3072 623a343130322f31 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f343064623a31 2b32316f70627e32 2d332e36312e312d 6e61696265642d33 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313731302c453631 302c353631302c34 3631302c33343130 2c323431302c3134 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000