syzkaller login: [ 97.003221][ T785] cfg80211: failed to load regulatory.db
Warning: Permanently added '[localhost]:12077' (ED25519) to the list of known hosts.
2024/10/06 16:30:24 ignoring optional flag "sandboxArg"="0"
2024/10/06 16:30:26 parsed 1 programs
[ 141.215840][ T5126] cgroup: Unknown subsys name 'net'
[ 141.304657][ T5126] cgroup: Unknown subsys name 'cpuset'
[ 141.311844][ T5126] cgroup: Unknown subsys name 'rlimit'
[ 144.304849][ T5126] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 149.537320][ T5142] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 150.394080][ T5141] syz-executor (5141) used greatest stack depth: 18200 bytes left
[ 151.620636][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 151.624705][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 151.836572][ T5184] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 151.841568][ T5184] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 151.845093][ T5184] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 151.848409][ T5184] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 151.852313][ T5184] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 151.855937][ T5184] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 151.933652][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 151.980590][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 153.705209][ T5160] chnl_net:caif_netlink_parms(): no params data found
[ 153.884293][ T5184] Bluetooth: hci0: command tx timeout
[ 154.009814][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state
[ 154.033087][ T5160] bridge0: port 1(bridge_slave_0) entered disabled state
[ 154.036156][ T5160] bridge_slave_0: entered allmulticast mode
[ 154.040788][ T5160] bridge_slave_0: entered promiscuous mode
[ 154.080954][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state
[ 154.084465][ T5160] bridge0: port 2(bridge_slave_1) entered disabled state
[ 154.087971][ T5160] bridge_slave_1: entered allmulticast mode
[ 154.101168][ T5160] bridge_slave_1: entered promiscuous mode
[ 154.180755][ T5160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 154.191985][ T5160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 154.243664][ T5160] team0: Port device team_slave_0 added
[ 154.247467][ T5160] team0: Port device team_slave_1 added
[ 154.285035][ T5160] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 154.287759][ T5160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 154.320403][ T5160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 154.341902][ T5160] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 154.345201][ T5160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 154.370672][ T5160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 154.415297][ T5160] hsr_slave_0: entered promiscuous mode
[ 154.418112][ T5160] hsr_slave_1: entered promiscuous mode
[ 154.596514][ T5160] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 154.612984][ T5160] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 154.623476][ T5160] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 154.642105][ T5160] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 154.783576][ T5160] 8021q: adding VLAN 0 to HW filter on device bond0
[ 154.823926][ T5160] 8021q: adding VLAN 0 to HW filter on device team0
[ 154.834932][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state
[ 154.838026][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 154.873577][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state
[ 154.876346][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 155.125470][ T5160] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 155.438831][ T5160] veth0_vlan: entered promiscuous mode
[ 155.461999][ T5160] veth1_vlan: entered promiscuous mode
[ 155.509183][ T5160] veth0_macvtap: entered promiscuous mode
[ 155.524229][ T5160] veth1_macvtap: entered promiscuous mode
[ 155.546926][ T5160] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 155.568482][ T5160] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 155.582720][ T5160] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 155.586640][ T5160] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 155.610992][ T5160] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 155.614668][ T5160] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2024/10/06 16:30:47 executed programs: 0
[ 155.972921][ T5184] Bluetooth: hci0: command tx timeout
[ 155.997995][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 156.004173][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 156.007659][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 156.013332][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 156.016187][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 156.018643][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 156.033010][ T4537] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 156.041944][ T4537] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 156.048630][ T4537] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 156.056918][ T4537] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 156.071084][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 156.074135][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 156.178120][ T5184] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 156.188774][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 156.193462][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 156.202733][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 156.206558][ T5248] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 156.210216][ T5248] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 156.213695][ T5248] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 156.232010][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 156.241114][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 156.248336][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 156.253956][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 156.258805][ T5251] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 156.265095][ T5251] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 156.269075][ T5251] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 156.276263][ T5251] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 156.286477][ T5184] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 156.289675][ T5184] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 156.294608][ T5184] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 156.302005][ T5253] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 156.305928][ T5253] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 156.326910][ T5251] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 156.330057][ T5251] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 156.333334][ T5253] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 156.339503][ T5253] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 157.766349][ T1028] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 157.834634][ T5234] chnl_net:caif_netlink_parms(): no params data found
[ 157.998656][ T1028] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 158.192417][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state
[ 158.195671][ T5234] bridge0: port 1(bridge_slave_0) entered disabled state
[ 158.199053][ T5234] bridge_slave_0: entered allmulticast mode
[ 158.201998][ T5253] Bluetooth: hci2: command tx timeout
[ 158.204662][ T5253] Bluetooth: hci1: command tx timeout
[ 158.221079][ T5234] bridge_slave_0: entered promiscuous mode
[ 158.233256][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state
[ 158.236640][ T5234] bridge0: port 2(bridge_slave_1) entered disabled state
[ 158.239318][ T5234] bridge_slave_1: entered allmulticast mode
[ 158.250925][ T5234] bridge_slave_1: entered promiscuous mode
[ 158.360363][ T5239] Bluetooth: hci3: command tx timeout
[ 158.363343][ T5239] Bluetooth: hci4: command tx timeout
[ 158.440353][ T5253] Bluetooth: hci5: command tx timeout
[ 158.443891][ T5253] Bluetooth: hci6: command tx timeout
[ 158.507008][ T5234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 158.526818][ T5234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 158.584873][ T1028] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 158.639591][ T5241] chnl_net:caif_netlink_parms(): no params data found
[ 158.658023][ T5242] chnl_net:caif_netlink_parms(): no params data found
[ 158.688421][ T1028] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 158.752074][ T5234] team0: Port device team_slave_0 added
[ 158.833456][ T5234] team0: Port device team_slave_1 added
[ 158.879285][ T5237] chnl_net:caif_netlink_parms(): no params data found
[ 159.198797][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state
[ 159.215101][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state
[ 159.218221][ T5241] bridge_slave_0: entered allmulticast mode
[ 159.235607][ T5241] bridge_slave_0: entered promiscuous mode
[ 159.242941][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state
[ 159.245888][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state
[ 159.248918][ T5241] bridge_slave_1: entered allmulticast mode
[ 159.271213][ T5241] bridge_slave_1: entered promiscuous mode
[ 159.316252][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 159.350262][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 159.390854][ T5234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 159.525097][ T1028] bridge_slave_1: left allmulticast mode
[ 159.527667][ T1028] bridge_slave_1: left promiscuous mode
[ 159.551241][ T1028] bridge0: port 2(bridge_slave_1) entered disabled state
[ 159.597761][ T1028] bridge_slave_0: left allmulticast mode
[ 159.603219][ T1028] bridge_slave_0: left promiscuous mode
[ 159.616843][ T1028] bridge0: port 1(bridge_slave_0) entered disabled state
[ 160.280429][ T5239] Bluetooth: hci1: command tx timeout
[ 160.283000][ T5239] Bluetooth: hci2: command tx timeout
[ 160.443407][ T5253] Bluetooth: hci4: command tx timeout
[ 160.445519][ T5253] Bluetooth: hci3: command tx timeout
[ 160.523916][ T5239] Bluetooth: hci6: command tx timeout
[ 160.526335][ T5239] Bluetooth: hci5: command tx timeout
[ 160.595114][ T1028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 160.614385][ T1028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 160.630846][ T1028] bond0 (unregistering): Released all slaves
[ 160.642073][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 160.645210][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 160.691163][ T5234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 160.704399][ T5245] chnl_net:caif_netlink_parms(): no params data found
[ 160.772150][ T5244] chnl_net:caif_netlink_parms(): no params data found
[ 160.818626][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 160.864121][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 160.914862][ T1028] hsr_slave_0: left promiscuous mode
[ 160.927982][ T1028] hsr_slave_1: left promiscuous mode
[ 160.953085][ T1028] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 160.956330][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 160.972001][ T1028] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 160.975439][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 161.026872][ T1028] veth1_macvtap: left promiscuous mode
[ 161.029497][ T1028] veth0_macvtap: left promiscuous mode
[ 161.055460][ T1028] veth1_vlan: left promiscuous mode
[ 161.057824][ T1028] veth0_vlan: left promiscuous mode
[ 161.699118][ T1028] team0 (unregistering): Port device team_slave_1 removed
[ 161.742918][ T1028] team0 (unregistering): Port device team_slave_0 removed
[ 162.362904][ T5253] Bluetooth: hci2: command tx timeout
[ 162.365105][ T5253] Bluetooth: hci1: command tx timeout
[ 162.394982][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state
[ 162.397683][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state
[ 162.414236][ T5237] bridge_slave_0: entered allmulticast mode
[ 162.417030][ T5237] bridge_slave_0: entered promiscuous mode
[ 162.433569][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state
[ 162.436073][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state
[ 162.438605][ T5242] bridge_slave_0: entered allmulticast mode
[ 162.460668][ T5242] bridge_slave_0: entered promiscuous mode
[ 162.497164][ T5234] hsr_slave_0: entered promiscuous mode
[ 162.499629][ T5234] hsr_slave_1: entered promiscuous mode
[ 162.520250][ T5239] Bluetooth: hci3: command tx timeout
[ 162.522307][ T5239] Bluetooth: hci4: command tx timeout
[ 162.542654][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state
[ 162.545202][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state
[ 162.548066][ T5237] bridge_slave_1: entered allmulticast mode
[ 162.574630][ T5237] bridge_slave_1: entered promiscuous mode
[ 162.600374][ T5253] Bluetooth: hci5: command tx timeout
[ 162.602427][ T5253] Bluetooth: hci6: command tx timeout
[ 162.628522][ T5242] bridge0: port 2(bridge_slave_1) entered blocking state
[ 162.632827][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state
[ 162.635508][ T5242] bridge_slave_1: entered allmulticast mode
[ 162.650603][ T5242] bridge_slave_1: entered promiscuous mode
[ 162.705006][ T5241] team0: Port device team_slave_0 added
[ 162.726588][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 162.745847][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 162.843000][ T5241] team0: Port device team_slave_1 added
[ 162.859794][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 162.883801][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 162.910182][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 162.955353][ T5245] bridge0: port 1(bridge_slave_0) entered blocking state
[ 162.957911][ T5245] bridge0: port 1(bridge_slave_0) entered disabled state
[ 162.990202][ T5245] bridge_slave_0: entered allmulticast mode
[ 163.003845][ T5245] bridge_slave_0: entered promiscuous mode
[ 163.019788][ T5242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 163.045357][ T5242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 163.090364][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 163.092969][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 163.155096][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 163.165764][ T5237] team0: Port device team_slave_0 added
[ 163.173497][ T5245] bridge0: port 2(bridge_slave_1) entered blocking state
[ 163.176185][ T5245] bridge0: port 2(bridge_slave_1) entered disabled state
[ 163.178737][ T5245] bridge_slave_1: entered allmulticast mode
[ 163.206605][ T5245] bridge_slave_1: entered promiscuous mode
[ 163.303579][ T5237] team0: Port device team_slave_1 added
[ 163.421698][ T5242] team0: Port device team_slave_0 added
[ 163.463220][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state
[ 163.466100][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state
[ 163.469179][ T5244] bridge_slave_0: entered allmulticast mode
[ 163.511466][ T5244] bridge_slave_0: entered promiscuous mode
[ 163.539255][ T5245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 163.561923][ T5245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 163.603709][ T5242] team0: Port device team_slave_1 added
[ 163.622052][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state
[ 163.624841][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state
[ 163.627640][ T5244] bridge_slave_1: entered allmulticast mode
[ 163.659323][ T5244] bridge_slave_1: entered promiscuous mode
[ 163.678802][ T5244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 163.704554][ T5241] hsr_slave_0: entered promiscuous mode
[ 163.706728][ T5241] hsr_slave_1: entered promiscuous mode
[ 163.708716][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 163.711923][ T5241] Cannot create hsr debugfs directory
[ 163.714214][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 163.716731][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 163.751500][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 163.814139][ T5244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 163.877176][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 163.879346][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 163.915347][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 163.924175][ T5245] team0: Port device team_slave_0 added
[ 163.961341][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 163.964169][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 164.001188][ T5242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 164.022624][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 164.025289][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 164.070649][ T5242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 164.084969][ T5245] team0: Port device team_slave_1 added
[ 164.184595][ T5242] hsr_slave_0: entered promiscuous mode
[ 164.201465][ T5242] hsr_slave_1: entered promiscuous mode
[ 164.215237][ T5242] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 164.218814][ T5242] Cannot create hsr debugfs directory
[ 164.257018][ T5244] team0: Port device team_slave_0 added
[ 164.296148][ T5237] hsr_slave_0: entered promiscuous mode
[ 164.320455][ T5237] hsr_slave_1: entered promiscuous mode
[ 164.331903][ T5237] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 164.334532][ T5237] Cannot create hsr debugfs directory
[ 164.407965][ T5244] team0: Port device team_slave_1 added
[ 164.441995][ T5239] Bluetooth: hci1: command tx timeout
[ 164.444060][ T5239] Bluetooth: hci2: command tx timeout
[ 164.492157][ T5234] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 164.517266][ T5234] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 164.567848][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 164.585931][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 164.610131][ T5253] Bluetooth: hci4: command tx timeout
[ 164.612352][ T5253] Bluetooth: hci3: command tx timeout
[ 164.637352][ T5245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 164.660930][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 164.663485][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 164.680268][ T5239] Bluetooth: hci6: command tx timeout
[ 164.682380][ T5239] Bluetooth: hci5: command tx timeout
[ 164.710263][ T5245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 164.749014][ T5234] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 164.762921][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 164.765398][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 164.795608][ T5244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 164.817116][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 164.821016][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 164.847396][ T5244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 164.972995][ T5234] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 165.212685][ T5244] hsr_slave_0: entered promiscuous mode
[ 165.234147][ T5244] hsr_slave_1: entered promiscuous mode
[ 165.236763][ T5244] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 165.239601][ T5244] Cannot create hsr debugfs directory
[ 165.283063][ T5245] hsr_slave_0: entered promiscuous mode
[ 165.303993][ T5245] hsr_slave_1: entered promiscuous mode
[ 165.310736][ T5245] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 165.314117][ T5245] Cannot create hsr debugfs directory
[ 165.581910][ T5241] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 165.619849][ T5241] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 165.649286][ T5241] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 165.751228][ T5241] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 165.876427][ T5237] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 166.000912][ T5237] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 166.013587][ T5237] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 166.109310][ T5237] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 166.207275][ T5234] 8021q: adding VLAN 0 to HW filter on device bond0
[ 166.367844][ T5242] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 166.388919][ T5242] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 166.437938][ T5234] 8021q: adding VLAN 0 to HW filter on device team0
[ 166.511805][ T5242] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 166.520524][ T5242] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 166.649418][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state
[ 166.652614][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 166.675501][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state
[ 166.677985][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 166.713543][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0
[ 166.909071][ T5241] 8021q: adding VLAN 0 to HW filter on device team0
[ 167.045797][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0
[ 167.081440][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state
[ 167.084817][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 167.089541][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state
[ 167.092523][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 167.175042][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0
[ 167.189621][ T5237] 8021q: adding VLAN 0 to HW filter on device team0
[ 167.266504][ T5241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 167.379787][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state
[ 167.382524][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 167.421383][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state
[ 167.424309][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 167.461270][ T5242] 8021q: adding VLAN 0 to HW filter on device team0
[ 167.490616][ T5244] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 167.559454][ T5244] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 167.621105][ T5244] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 167.717036][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state
[ 167.719753][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 167.764981][ T5237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 167.793587][ T5244] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 167.828288][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state
[ 167.831050][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 167.981361][ T5234] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 168.148695][ T5245] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 168.172999][ T5245] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 168.276277][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 168.315943][ T5245] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 168.342882][ T5245] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 168.379809][ T5242] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 168.433834][ T5242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 168.449352][ T5234] veth0_vlan: entered promiscuous mode
[ 168.596145][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 168.603145][ T5234] veth1_vlan: entered promiscuous mode
[ 168.788055][ T5234] veth0_macvtap: entered promiscuous mode
[ 168.903740][ T5244] 8021q: adding VLAN 0 to HW filter on device bond0
[ 168.954778][ T5234] veth1_macvtap: entered promiscuous mode
[ 169.066633][ T5237] veth0_vlan: entered promiscuous mode
[ 169.089770][ T5244] 8021q: adding VLAN 0 to HW filter on device team0
[ 169.136184][ T5241] veth0_vlan: entered promiscuous mode
[ 169.175696][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state
[ 169.178643][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 169.217754][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 169.242866][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 169.249174][ T5234] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 169.293662][ T5234] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 169.297218][ T5234] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 169.326260][ T5234] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 169.405461][ T5237] veth1_vlan: entered promiscuous mode
[ 169.454126][ T5241] veth1_vlan: entered promiscuous mode
[ 169.493033][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state
[ 169.495339][ T1079] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 169.534620][ T5242] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 169.577677][ T5244] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 169.634590][ T5244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 169.939158][ T5237] veth0_macvtap: entered promiscuous mode
[ 169.981787][ T5241] veth0_macvtap: entered promiscuous mode
[ 170.038654][ T5245] 8021q: adding VLAN 0 to HW filter on device bond0
[ 170.095886][ T5237] veth1_macvtap: entered promiscuous mode
[ 170.148316][ T5241] veth1_macvtap: entered promiscuous mode
[ 170.318773][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 170.363081][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 170.411747][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 170.422763][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 170.426058][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 170.499042][ T5245] 8021q: adding VLAN 0 to HW filter on device team0
[ 170.525372][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 170.529289][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 170.563398][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 170.584852][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 170.588772][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 170.621328][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 170.625181][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 170.652589][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 170.736000][ T5237] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 170.739755][ T5237] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 170.754147][ T5237] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 170.757739][ T5237] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 170.784921][ T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 170.787689][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 170.802765][ T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 170.805925][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 170.826129][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 170.856913][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 170.874757][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 170.879250][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 170.906986][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 170.938121][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 170.956811][ T5242] veth0_vlan: entered promiscuous mode
[ 171.016272][ T5241] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 171.019553][ T5241] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 171.054178][ T5241] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 171.057239][ T5241] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 171.102237][ T1079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 171.105670][ T1079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 171.242828][ T5242] veth1_vlan: entered promiscuous mode
[ 171.485716][ T5244] veth0_vlan: entered promiscuous mode
[ 171.776994][ T5416] loop0: detected capacity change from 0 to 32768
2024/10/06 16:31:03 executed programs: 12
[ 171.807592][ T5244] veth1_vlan: entered promiscuous mode
[ 171.871469][ T5242] veth0_macvtap: entered promiscuous mode
[ 171.945462][ T1027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 171.948614][ T1027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 171.991505][ T5416] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names
[ 171.998052][ T5416] invalid bkey u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 56308231fb2a3a03 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[ 171.998076][ T5416] nonzero snapshot: delete?, fixing
[ 172.005600][ T5416] bcachefs (loop0): recovering from clean shutdown, journal seq 8
[ 172.009707][ T5416] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.12: rebalance_work_acct_fix
[ 172.009707][ T5416] running recovery passes: check_allocations
[ 172.018808][ T5416] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock modified by another process (seq 18446744073709551615 expected 41)
[ 172.026601][ T5416] bcachefs (loop0): fatal error - emergency read only
[ 172.029330][ T5416] bcachefs (loop0): insufficient writeable journal devices available: have 0, need 1
[ 172.029330][ T5416] rw journal devs: loop0
[ 172.055668][ T5416] bcachefs (loop0): flagging btree lru lost data
[ 172.071655][ T5416] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock modified by another process (seq 18446744073709551615 expected 41)
[ 172.078538][ T5416] error reading btree root lru l=0: btree_node_read_error, shutting down
[ 172.083842][ T5416] bcachefs (loop0): bch2_fs_recovery(): error fsck_errors_not_fixed
[ 172.087037][ T5416] bcachefs (loop0): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed
[ 172.090953][ T5416] bcachefs (loop0): shutting down
[ 172.107542][ T5416] bcachefs (loop0): shutdown complete
[ 172.110901][ T1079] ==================================================================
[ 172.113815][ T1079] BUG: KASAN: slab-use-after-free in percpu_ref_put+0xda/0x250
[ 172.116614][ T1079] Read of size 8 at addr ffff88801183e0b0 by task kworker/u4:10/1079
[ 172.119442][ T1079]
[ 172.120332][ T1079] CPU: 0 UID: 0 PID: 1079 Comm: kworker/u4:10 Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0
[ 172.124183][ T1079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 172.128144][ T1079] Workqueue: loop0 loop_workfn
[ 172.131006][ T1079] Call Trace:
[ 172.132383][ T1079]
[ 172.133578][ T1079] dump_stack_lvl+0x241/0x360
[ 172.135451][ T1079] ? __pfx_dump_stack_lvl+0x10/0x10
[ 172.137537][ T1079] ? __pfx__printk+0x10/0x10
[ 172.139382][ T1079] ? _printk+0xd5/0x120
[ 172.141021][ T1079] ? __virt_addr_valid+0x183/0x530
[ 172.143072][ T1079] ? __virt_addr_valid+0x183/0x530
[ 172.145353][ T1079] print_report+0x169/0x550
[ 172.147622][ T1079] ? __virt_addr_valid+0x183/0x530
[ 172.149763][ T1079] ? __virt_addr_valid+0x183/0x530
[ 172.151737][ T1079] ? __virt_addr_valid+0x45f/0x530
[ 172.153709][ T1079] ? __phys_addr+0xba/0x170
[ 172.155479][ T1079] ? percpu_ref_put+0xda/0x250
[ 172.157340][ T1079] kasan_report+0x143/0x180
[ 172.159137][ T1079] ? percpu_ref_put+0xda/0x250
[ 172.161508][ T1079] ? percpu_ref_put+0x1f/0x250
[ 172.163821][ T1079] percpu_ref_put+0xda/0x250
[ 172.165989][ T1079] blk_update_request+0x5e5/0x1160
[ 172.168049][ T1079] blk_mq_end_request+0x3e/0x70
[ 172.169964][ T1079] loop_process_work+0x1c10/0x2170
[ 172.171965][ T1079] ? __pfx_loop_process_work+0x10/0x10
[ 172.174198][ T1079] ? register_lock_class+0x102/0x980
[ 172.176304][ T1079] ? __pfx_register_lock_class+0x10/0x10
[ 172.179501][ T1079] ? mark_lock+0x9a/0x360
[ 172.182296][ T1079] ? debug_object_deactivate+0x2d5/0x390
[ 172.184854][ T1079] ? __lock_acquire+0x1384/0x2050
[ 172.186851][ T1079] ? __pfx_lock_acquire+0x10/0x10
[ 172.188968][ T1079] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 172.191594][ T1079] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 172.194312][ T1079] ? process_scheduled_works+0x976/0x1850
[ 172.196631][ T1079] process_scheduled_works+0xa63/0x1850
[ 172.198894][ T1079] ? __pfx_process_scheduled_works+0x10/0x10
[ 172.201347][ T1079] ? assign_work+0x364/0x3d0
[ 172.203404][ T1079] worker_thread+0x870/0xd30
[ 172.205646][ T1079] ? __kthread_parkme+0x169/0x1d0
[ 172.208173][ T1079] ? __pfx_worker_thread+0x10/0x10
[ 172.210704][ T1079] kthread+0x2f0/0x390
[ 172.212478][ T1079] ? __pfx_worker_thread+0x10/0x10
[ 172.214465][ T1079] ? __pfx_kthread+0x10/0x10
[ 172.216314][ T1079] ret_from_fork+0x4b/0x80
[ 172.218135][ T1079] ? __pfx_kthread+0x10/0x10
[ 172.220040][ T1079] ret_from_fork_asm+0x1a/0x30
[ 172.221943][ T1079]
[ 172.223242][ T1079]
[ 172.224366][ T1079] Allocated by task 5416:
[ 172.226305][ T1079] kasan_save_track+0x3f/0x80
[ 172.228443][ T1079] __kasan_kmalloc+0x98/0xb0
[ 172.230445][ T1079] __kmalloc_cache_noprof+0x19c/0x2c0
[ 172.232640][ T1079] __bch2_dev_alloc+0x57/0xa60
[ 172.234495][ T1079] bch2_dev_alloc+0xd4/0x170
[ 172.236266][ T1079] bch2_fs_open+0x2e3f/0x2f80
[ 172.238080][ T1079] bch2_fs_get_tree+0x738/0x1710
[ 172.240352][ T1079] vfs_get_tree+0x90/0x2b0
[ 172.242592][ T1079] do_new_mount+0x2be/0xb40
[ 172.245078][ T1079] __se_sys_mount+0x2d6/0x3c0
[ 172.247326][ T1079] do_syscall_64+0xf3/0x230
[ 172.249021][ T1079] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 172.251282][ T1079]
[ 172.252231][ T1079] Freed by task 5416:
[ 172.253776][ T1079] kasan_save_track+0x3f/0x80
[ 172.255638][ T1079] kasan_save_free_info+0x40/0x50
[ 172.257727][ T1079] __kasan_slab_free+0x59/0x70
[ 172.260201][ T1079] kfree+0x1a0/0x440
[ 172.262755][ T1079] kobject_put+0x22f/0x480
[ 172.265053][ T1079] bch2_fs_free+0x27b/0x3c0
[ 172.266868][ T1079] bch2_fs_get_tree+0xd9f/0x1710
[ 172.268817][ T1079] vfs_get_tree+0x90/0x2b0
[ 172.270585][ T1079] do_new_mount+0x2be/0xb40
[ 172.272375][ T1079] __se_sys_mount+0x2d6/0x3c0
[ 172.274252][ T1079] do_syscall_64+0xf3/0x230
[ 172.276167][ T1079] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 172.279160][ T1079]
[ 172.280551][ T1079] The buggy address belongs to the object at ffff88801183e000
[ 172.280551][ T1079] which belongs to the cache kmalloc-4k of size 4096
[ 172.286935][ T1079] The buggy address is located 176 bytes inside of
[ 172.286935][ T1079] freed 4096-byte region [ffff88801183e000, ffff88801183f000)
[ 172.292279][ T1079]
[ 172.293244][ T1079] The buggy address belongs to the physical page:
[ 172.295834][ T1079] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11838
[ 172.300226][ T1079] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 172.304185][ T1079] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 172.306937][ T1079] page_type: f5(slab)
[ 172.308545][ T1079] raw: 00fff00000000040 ffff88801ac42140 dead000000000100 dead000000000122
[ 172.312299][ T1079] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000
[ 172.315674][ T1079] head: 00fff00000000040 ffff88801ac42140 dead000000000100 dead000000000122
[ 172.318962][ T1079] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000
[ 172.322304][ T1079] head: 00fff00000000003 ffffea0000460e01 ffffffffffffffff 0000000000000000
[ 172.325655][ T1079] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 172.329005][ T1079] page dumped because: kasan: bad access detected
[ 172.331578][ T1079] page_owner tracks the page as allocated
[ 172.333989][ T1079] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4583, tgid 4583 (rcS), ts 34776774309, free_ts 33967680466
[ 172.343012][ T1079] post_alloc_hook+0x1f3/0x230
[ 172.345048][ T1079] get_page_from_freelist+0x3045/0x3190
[ 172.347100][ T1079] __alloc_pages_noprof+0x256/0x6c0
[ 172.349013][ T1079] alloc_pages_mpol_noprof+0x3e8/0x680
[ 172.351061][ T1079] alloc_slab_page+0x6a/0x120
[ 172.352928][ T1079] allocate_slab+0x5a/0x2f0
[ 172.355243][ T1079] ___slab_alloc+0xcd1/0x14b0
[ 172.357983][ T1079] __slab_alloc+0x58/0xa0
[ 172.360122][ T1079] __kmalloc_cache_noprof+0x1d5/0x2c0
[ 172.362755][ T1079] ima_calc_file_hash+0xaae/0x1b30
[ 172.364726][ T1079] ima_collect_measurement+0x520/0xb10
[ 172.366792][ T1079] process_measurement+0x1351/0x1fb0
[ 172.368856][ T1079] ima_bprm_check+0x129/0x2b0
[ 172.370710][ T1079] security_bprm_check+0xd2/0x250
[ 172.372722][ T1079] bprm_execve+0xa56/0x1770
[ 172.374615][ T1079] do_execveat_common+0x55f/0x6f0
[ 172.376839][ T1079] page last free pid 1 tgid 1 stack trace:
[ 172.379336][ T1079] free_unref_page+0xcfb/0xf20
[ 172.381972][ T1079] free_reserved_page+0xcc/0x120
[ 172.384576][ T1079] free_reserved_area+0x51/0xf0
[ 172.386717][ T1079] free_initmem+0x9a/0x110
[ 172.388490][ T1079] kernel_init+0x31/0x2b0
[ 172.390209][ T1079] ret_from_fork+0x4b/0x80
[ 172.391986][ T1079] ret_from_fork_asm+0x1a/0x30
[ 172.393900][ T1079]
[ 172.394891][ T1079] Memory state around the buggy address:
[ 172.397190][ T1079] ffff88801183df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 172.400649][ T1079] ffff88801183e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 172.404487][ T1079] >ffff88801183e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 172.408153][ T1079] ^
[ 172.410384][ T1079] ffff88801183e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 172.413485][ T1079] ffff88801183e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 172.416669][ T1079] ==================================================================
[ 172.522720][ T5242] veth1_macvtap: entered promiscuous mode
[ 172.563425][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 172.567122][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 172.595571][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 172.599523][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 172.620241][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 172.624834][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 172.654573][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 172.728423][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 172.740107][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 172.858946][ T5244] veth0_macvtap: entered promiscuous mode
[ 172.953161][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 172.958494][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 173.011340][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 173.016396][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 173.058898][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 173.083768][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 173.106177][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 173.115974][ T5242] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 173.119917][ T5242] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 173.137615][ T5242] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 173.170977][ T5242] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 173.188245][ T5244] veth1_macvtap: entered promiscuous mode
[ 173.356285][ T1079] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 173.359500][ T1079] CPU: 0 UID: 0 PID: 1079 Comm: kworker/u4:10 Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0
[ 173.365711][ T1079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 173.369991][ T1079] Workqueue: loop0 loop_workfn
[ 173.371936][ T1079] Call Trace:
[ 173.373271][ T1079]
[ 173.374474][ T1079] dump_stack_lvl+0x241/0x360
[ 173.376353][ T1079] ? __pfx_dump_stack_lvl+0x10/0x10
[ 173.378330][ T1079] ? __pfx__printk+0x10/0x10
[ 173.380246][ T1079] ? preempt_schedule+0xe1/0xf0
[ 173.382328][ T1079] ? vscnprintf+0x5d/0x90
[ 173.384529][ T1079] panic+0x349/0x880
[ 173.386712][ T1079] ? check_panic_on_warn+0x21/0xb0
[ 173.389142][ T1079] ? __pfx_panic+0x10/0x10
[ 173.391259][ T1079] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 173.393631][ T1079] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 173.396135][ T1079] ? print_report+0x502/0x550
[ 173.397967][ T1079] check_panic_on_warn+0x86/0xb0
[ 173.399943][ T1079] ? percpu_ref_put+0xda/0x250
[ 173.402006][ T1079] end_report+0x77/0x160
[ 173.403871][ T1079] kasan_report+0x154/0x180
[ 173.406045][ T1079] ? percpu_ref_put+0xda/0x250
[ 173.408294][ T1079] ? percpu_ref_put+0x1f/0x250
[ 173.410531][ T1079] percpu_ref_put+0xda/0x250
[ 173.412360][ T1079] blk_update_request+0x5e5/0x1160
[ 173.414481][ T1079] blk_mq_end_request+0x3e/0x70
[ 173.416367][ T1079] loop_process_work+0x1c10/0x2170
[ 173.418401][ T1079] ? __pfx_loop_process_work+0x10/0x10
[ 173.420572][ T1079] ? register_lock_class+0x102/0x980
[ 173.423094][ T1079] ? __pfx_register_lock_class+0x10/0x10
[ 173.426319][ T1079] ? mark_lock+0x9a/0x360
[ 173.428512][ T1079] ? debug_object_deactivate+0x2d5/0x390
[ 173.430825][ T1079] ? __lock_acquire+0x1384/0x2050
[ 173.432882][ T1079] ? __pfx_lock_acquire+0x10/0x10
[ 173.434917][ T1079] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 173.437188][ T1079] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 173.439917][ T1079] ? process_scheduled_works+0x976/0x1850
[ 173.442546][ T1079] process_scheduled_works+0xa63/0x1850
[ 173.445247][ T1079] ? __pfx_process_scheduled_works+0x10/0x10
[ 173.448148][ T1079] ? assign_work+0x364/0x3d0
[ 173.450173][ T1079] worker_thread+0x870/0xd30
[ 173.452048][ T1079] ? __kthread_parkme+0x169/0x1d0
[ 173.454090][ T1079] ? __pfx_worker_thread+0x10/0x10
[ 173.456177][ T1079] kthread+0x2f0/0x390
[ 173.457857][ T1079] ? __pfx_worker_thread+0x10/0x10
[ 173.459969][ T1079] ? __pfx_kthread+0x10/0x10
[ 173.461852][ T1079] ret_from_fork+0x4b/0x80
[ 173.463732][ T1079] ? __pfx_kthread+0x10/0x10
[ 173.466237][ T1079] ret_from_fork_asm+0x1a/0x30
[ 173.469732][ T1079]
[ 173.471864][ T1079] Kernel Offset: disabled
[ 173.473701][ T1079] Rebooting in 86400 seconds..
VM DIAGNOSIS:
16:31:03 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000070 RBX=ffffffff9a711e40 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000255eb30
R8 =ffffffff85497efb R9 =1ffff11006647046 R10=dffffc0000000000 R11=ffffffff85497eb0
R12=dffffc0000000000 R13=ffffffff9a40cf0c R14=0000000000000070 R15=00000000000003f8
RIP=ffffffff85497f2e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88801fc00000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc088892d22 CR3=0000000056c2e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fcfc0000 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=0000000000000000
Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 003d45444f4d5645 44003d524f4e494d
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe843912d0 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00000000ff000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 722f766564752f62 696c2f7273752f00 534b4e494c564544 00454d414e564544
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000006c7463 2d30736665686361 63622f7366656863 6163622f6c617574
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c1adb0142a861aca 0000557f4bf89e9f 00000000000003b1 0000000000003731
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2648383a3a26483b 3a0a00307f617930 3a2433273f397b27 697a787c69303b7e
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c3d3a3a26333d3a 3a263c3d3a3a263f 3d3a3a263e3d3a3a 26383d3a3a263a3d
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000