Warning: Permanently added '[localhost]:25924' (ED25519) to the list of known hosts. syzkaller login: [ 90.059945][ T5098] chnl_net:caif_netlink_parms(): no params data found [ 90.158168][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.166541][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.169542][ T5098] bridge_slave_0: entered allmulticast mode [ 90.185799][ T5098] bridge_slave_0: entered promiscuous mode [ 90.194066][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.206528][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.209511][ T5098] bridge_slave_1: entered allmulticast mode [ 90.216716][ T5098] bridge_slave_1: entered promiscuous mode [ 90.249046][ T5098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.255305][ T5098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.282520][ T5098] team0: Port device team_slave_0 added [ 90.289122][ T5098] team0: Port device team_slave_1 added [ 90.312363][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.314995][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.335873][ T5098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.355629][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.358370][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.385648][ T5098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.431881][ T5098] hsr_slave_0: entered promiscuous mode [ 90.435046][ T5098] hsr_slave_1: entered promiscuous mode [ 90.831308][ T5098] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.880051][ T5098] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.910918][ T5098] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.932149][ T5098] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.009767][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.013213][ T5098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.017714][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.020923][ T5098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.104918][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.110763][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.274580][ T5098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.324796][ T5098] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.345015][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.348488][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.368845][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.371806][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.512318][ T5098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.608273][ T5098] veth0_vlan: entered promiscuous mode [ 91.628512][ T5098] veth1_vlan: entered promiscuous mode [ 91.696729][ T5098] veth0_macvtap: entered promiscuous mode [ 91.710262][ T5098] veth1_macvtap: entered promiscuous mode [ 91.748441][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.767437][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.789324][ T5098] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.793715][ T5098] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.806399][ T5098] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.810480][ T5098] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 91.978111][ T9] cfg80211: failed to load regulatory.db [ 92.100556][ T5107] loop0: detected capacity change from 0 to 4096 [ 92.120313][ T5107] ======================================================= [ 92.120313][ T5107] WARNING: The mand mount option has been deprecated and [ 92.120313][ T5107] and is ignored by this kernel. Remove the mand [ 92.120313][ T5107] option from the mount to silence this warning. [ 92.120313][ T5107] ======================================================= [ 92.193828][ T5107] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 92.209715][ T5107] ntfs3: loop0: Failed to load $Extend (-2). [ 92.212027][ T5107] ntfs3: loop0: Failed to initialize $Extend. [ 92.256169][ T24] audit: type=1800 audit(1724989358.950:2): pid=5107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor310" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 92.283532][ T24] audit: type=1800 audit(1724989358.960:3): pid=5107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor310" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 92.385810][ T5107] Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: call_usermodehelper_exec+0x493/0x4a0 [ 92.390771][ T5107] CPU: 0 UID: 0 PID: 5107 Comm: syz-executor310 Not tainted 6.11.0-rc5-syzkaller-00148-g3b9dfd9e5936 #0 [ 92.396130][ T5107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.400216][ T5107] Call Trace: [ 92.401501][ T5107] [ 92.402632][ T5107] dump_stack_lvl+0x241/0x360 [ 92.404719][ T5107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.406913][ T5107] ? __pfx__printk+0x10/0x10 [ 92.409013][ T5107] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 92.411494][ T5107] ? vscnprintf+0x5d/0x90 [ 92.413325][ T5107] panic+0x349/0x860 [ 92.414990][ T5107] ? lockdep_hardirqs_on+0x99/0x150 [ 92.417199][ T5107] ? call_usermodehelper_exec+0x493/0x4a0 [ 92.419677][ T5107] ? __pfx_panic+0x10/0x10 [ 92.421583][ T5107] ? __wake_up_common_lock+0x18c/0x1e0 [ 92.423752][ T5107] __stack_chk_fail+0x15/0x20 [ 92.425619][ T5107] call_usermodehelper_exec+0x493/0x4a0 [ 92.427807][ T5107] ? __pfx_call_usermodehelper_exec+0x10/0x10 [ 92.430385][ T5107] ? __pfx_free_modprobe_argv+0x10/0x10 [ 92.432720][ T5107] __request_module+0x3ee/0x650 [ 92.434704][ T5107] ? __pfx___request_module+0x10/0x10 [ 92.436693][ T5107] ? __up_read+0x2c2/0x6b0 [ 92.438297][ T5107] ctrl_getfamily+0x28e/0x6b0 [ 92.439958][ T5107] ? __nla_parse+0x40/0x60 [ 92.441505][ T5107] ? __pfx_ctrl_getfamily+0x10/0x10 [ 92.443379][ T5107] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 92.446005][ T5107] genl_rcv_msg+0xb14/0xec0 [ 92.448445][ T5107] ? mark_lock+0x9a/0x350 [ 92.450798][ T5107] ? __pfx_genl_rcv_msg+0x10/0x10 [ 92.452956][ T5107] ? __pfx_lock_acquire+0x10/0x10 [ 92.454939][ T5107] ? __pfx_ctrl_getfamily+0x10/0x10 [ 92.456989][ T5107] ? __pfx___might_resched+0x10/0x10 [ 92.459159][ T5107] netlink_rcv_skb+0x1e3/0x430 [ 92.461087][ T5107] ? __pfx_genl_rcv_msg+0x10/0x10 [ 92.463097][ T5107] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 92.465255][ T5107] ? __netlink_deliver_tap+0x77e/0x7c0 [ 92.467762][ T5107] genl_rcv+0x28/0x40 [ 92.469688][ T5107] netlink_unicast+0x7f6/0x990 [ 92.471852][ T5107] ? __pfx_netlink_unicast+0x10/0x10 [ 92.473957][ T5107] ? __virt_addr_valid+0x183/0x530 [ 92.475935][ T5107] ? __check_object_size+0x49c/0x900 [ 92.477952][ T5107] ? bpf_lsm_netlink_send+0x9/0x10 [ 92.479950][ T5107] netlink_sendmsg+0x8e4/0xcb0 [ 92.481943][ T5107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.484225][ T5107] ? aa_sock_msg_perm+0x91/0x160 [ 92.486370][ T5107] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 92.488939][ T5107] ? security_socket_sendmsg+0x87/0xb0 [ 92.491475][ T5107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.493554][ T5107] __sock_sendmsg+0x221/0x270 [ 92.495441][ T5107] __sys_sendto+0x3a4/0x4f0 [ 92.497235][ T5107] ? __pfx___sys_sendto+0x10/0x10 [ 92.499266][ T5107] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 92.501622][ T5107] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 92.504273][ T5107] ? exc_page_fault+0x590/0x8c0 [ 92.506638][ T5107] __x64_sys_sendto+0xde/0x100 [ 92.509268][ T5107] do_syscall_64+0xf3/0x230 [ 92.511158][ T5107] ? clear_bhb_loop+0x35/0x90 [ 92.513045][ T5107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.515393][ T5107] RIP: 0033:0x7fb2add42023 [ 92.517162][ T5107] Code: 64 89 02 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 80 3d 81 90 09 00 00 41 89 ca 74 14 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 75 c3 0f 1f 40 00 55 48 83 ec 30 44 89 4c 24 [ 92.524733][ T5107] RSP: 002b:00007ffe2a46ace8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 92.528553][ T5107] RAX: ffffffffffffffda RBX: 00007ffe2a46ad90 RCX: 00007fb2add42023 [ 92.532329][ T5107] RDX: 000000000000001c RSI: 00007ffe2a46ade0 RDI: 0000000000000005 [ 92.535554][ T5107] RBP: 0000000000000005 R08: 00007ffe2a46ad04 R09: 000000000000000c [ 92.538777][ T5107] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 92.541813][ T5107] R13: 00007ffe2a46ad58 R14: 00007ffe2a46ade0 R15: 0000000000000000 [ 92.544919][ T5107] [ 92.546396][ T5107] Kernel Offset: disabled [ 92.548057][ T5107] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:42:39 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000044 RBX=ffffffff95265e00 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000b0c6910 R8 =ffffffff85400ceb R9 =1ffff110031b0046 R10=dffffc0000000000 R11=ffffffff85400ca0 R12=dffffc0000000000 R13=0000000000000044 R14=0000000000000044 R15=00000000000003f8 RIP=ffffffff85400d1e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555561ec7480 ffffffff 00c00000 GS =0000 ffff888020800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb27bbe4440 CR3=000000001e29a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000440401 Opmask01=0000000000000fff Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2a46be00 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb2add8b11e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb2add8b14f ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb2add8b13d ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb2add8b149 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb2add8b15d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb2add8b2c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65723d73726f7272 6500747865003036 36396f7369007265 6c6c616b7a797300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40571856574a5757 4000515d40001513 131c4a564c005740 4949444e5f5c5600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000