syzkaller login: [ 91.868831][ T9] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:13353' (ED25519) to the list of known hosts. 2025/09/28 06:32:28 parsed 1 programs [ 101.797420][ T5357] cgroup: Unknown subsys name 'net' [ 101.870016][ T5357] cgroup: Unknown subsys name 'cpuset' [ 101.877074][ T5357] cgroup: Unknown subsys name 'rlimit' [ 103.464211][ T5357] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 108.277145][ T5370] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.860524][ T5395] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.864321][ T5395] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.868215][ T5395] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.871720][ T5395] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.875223][ T5395] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.349638][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.353187][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.258404][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.265833][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.840186][ T5421] chnl_net:caif_netlink_parms(): no params data found [ 114.011663][ T5421] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.015447][ T5421] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.019374][ T5421] bridge_slave_0: entered allmulticast mode [ 114.023170][ T5421] bridge_slave_0: entered promiscuous mode [ 114.028963][ T5421] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.031955][ T5421] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.035092][ T5421] bridge_slave_1: entered allmulticast mode [ 114.039815][ T5421] bridge_slave_1: entered promiscuous mode [ 114.095370][ T5421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.108650][ T5421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.156623][ T5421] team0: Port device team_slave_0 added [ 114.166892][ T5421] team0: Port device team_slave_1 added [ 114.209093][ T5421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.212298][ T5421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.245636][ T5421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.271991][ T5421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.274931][ T5421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.315773][ T5421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.468300][ T5421] hsr_slave_0: entered promiscuous mode [ 114.476090][ T5421] hsr_slave_1: entered promiscuous mode [ 114.669686][ T5421] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.679767][ T5421] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.688701][ T5421] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.694770][ T5421] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.780055][ T5421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.799701][ T5421] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.809852][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.813020][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.831109][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.834243][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.040871][ T5421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.250655][ T5421] veth0_vlan: entered promiscuous mode [ 115.261922][ T5421] veth1_vlan: entered promiscuous mode [ 115.289245][ T5421] veth0_macvtap: entered promiscuous mode [ 115.294593][ T5421] veth1_macvtap: entered promiscuous mode [ 115.322896][ T5421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.332885][ T5421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.344728][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.368439][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.372164][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.389960][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/09/28 06:32:43 executed programs: 0 [ 115.616686][ T4703] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.621817][ T4703] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.625699][ T4703] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.629911][ T4703] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.634588][ T4703] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.758993][ T5395] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.776890][ T5395] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.787691][ T5395] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.836407][ T45] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.840639][ T5484] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.843594][ T5484] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.847796][ T5484] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.857501][ T45] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.867329][ T45] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.870735][ T45] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.983870][ T5395] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.989683][ T5395] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.996450][ T5395] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 116.000002][ T5395] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 116.003180][ T5395] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.006970][ T5395] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.025441][ T5395] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 116.033062][ T5485] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.037094][ T5395] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 116.040533][ T5485] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.070998][ T45] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 116.079421][ T45] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 116.083073][ T45] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 116.087330][ T45] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 116.092593][ T45] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 117.092902][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.715712][ T45] Bluetooth: hci0: command tx timeout [ 117.719807][ T5475] chnl_net:caif_netlink_parms(): no params data found [ 117.827919][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.936545][ T45] Bluetooth: hci1: command tx timeout [ 117.939092][ T45] Bluetooth: hci2: command tx timeout [ 118.095858][ T5485] Bluetooth: hci4: command tx timeout [ 118.098540][ T5485] Bluetooth: hci3: command tx timeout [ 118.150542][ T5475] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.153565][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.157980][ T5475] bridge_slave_0: entered allmulticast mode [ 118.161912][ T5475] bridge_slave_0: entered promiscuous mode [ 118.175042][ T5475] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.178558][ T45] Bluetooth: hci5: command tx timeout [ 118.181354][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.191946][ T5475] bridge_slave_1: entered allmulticast mode [ 118.195918][ T5475] bridge_slave_1: entered promiscuous mode [ 118.309969][ T5475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.362687][ T5475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.536673][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.584874][ T5479] chnl_net:caif_netlink_parms(): no params data found [ 118.613104][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.623821][ T5475] team0: Port device team_slave_0 added [ 118.639799][ T5488] chnl_net:caif_netlink_parms(): no params data found [ 118.688410][ T5475] team0: Port device team_slave_1 added [ 118.943599][ T5475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.955833][ T5475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.975775][ T5475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.980762][ T5492] chnl_net:caif_netlink_parms(): no params data found [ 119.002269][ T5487] chnl_net:caif_netlink_parms(): no params data found [ 119.068495][ T5475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.071558][ T5475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.085401][ T5475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.160940][ T5477] chnl_net:caif_netlink_parms(): no params data found [ 119.319756][ T5479] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.322932][ T5479] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.329196][ T5479] bridge_slave_0: entered allmulticast mode [ 119.333119][ T5479] bridge_slave_0: entered promiscuous mode [ 119.344597][ T5479] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.350875][ T5479] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.354039][ T5479] bridge_slave_1: entered allmulticast mode [ 119.359275][ T5479] bridge_slave_1: entered promiscuous mode [ 119.395010][ T5475] hsr_slave_0: entered promiscuous mode [ 119.402236][ T5475] hsr_slave_1: entered promiscuous mode [ 119.408884][ T5475] debugfs: 'hsr0' already exists in 'hsr' [ 119.411469][ T5475] Cannot create hsr debugfs directory [ 119.436881][ T5488] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.440099][ T5488] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.443237][ T5488] bridge_slave_0: entered allmulticast mode [ 119.450040][ T5488] bridge_slave_0: entered promiscuous mode [ 119.461925][ T5488] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.464981][ T5488] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.470836][ T5488] bridge_slave_1: entered allmulticast mode [ 119.474472][ T5488] bridge_slave_1: entered promiscuous mode [ 119.498102][ T31] bridge_slave_1: left allmulticast mode [ 119.500665][ T31] bridge_slave_1: left promiscuous mode [ 119.503143][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.529878][ T31] bridge_slave_0: left allmulticast mode [ 119.532373][ T31] bridge_slave_0: left promiscuous mode [ 119.534975][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.777886][ T45] Bluetooth: hci0: command tx timeout [ 120.019821][ T45] Bluetooth: hci2: command tx timeout [ 120.022152][ T45] Bluetooth: hci1: command tx timeout [ 120.133926][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.141297][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.148722][ T31] bond0 (unregistering): Released all slaves [ 120.175867][ T5485] Bluetooth: hci3: command tx timeout [ 120.178265][ T5485] Bluetooth: hci4: command tx timeout [ 120.255979][ T45] Bluetooth: hci5: command tx timeout [ 120.544303][ T5479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.606754][ T5488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.613840][ T5479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.662734][ T5492] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.668825][ T5492] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.672321][ T5492] bridge_slave_0: entered allmulticast mode [ 120.680076][ T5492] bridge_slave_0: entered promiscuous mode [ 120.684353][ T5492] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.687772][ T5492] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.690914][ T5492] bridge_slave_1: entered allmulticast mode [ 120.694604][ T5492] bridge_slave_1: entered promiscuous mode [ 120.712727][ T5488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.727837][ T5487] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.730679][ T5487] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.733550][ T5487] bridge_slave_0: entered allmulticast mode [ 120.742030][ T5487] bridge_slave_0: entered promiscuous mode [ 120.849544][ T5479] team0: Port device team_slave_0 added [ 120.852336][ T5487] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.855302][ T5487] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.872617][ T5487] bridge_slave_1: entered allmulticast mode [ 120.885795][ T5487] bridge_slave_1: entered promiscuous mode [ 120.924122][ T5477] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.927960][ T5477] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.931193][ T5477] bridge_slave_0: entered allmulticast mode [ 120.947226][ T5477] bridge_slave_0: entered promiscuous mode [ 120.960335][ T5477] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.963567][ T5477] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.979527][ T5477] bridge_slave_1: entered allmulticast mode [ 120.986387][ T5477] bridge_slave_1: entered promiscuous mode [ 121.028903][ T31] hsr_slave_0: left promiscuous mode [ 121.047038][ T31] hsr_slave_1: left promiscuous mode [ 121.050165][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.053320][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.070079][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.073264][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.103663][ T31] veth1_macvtap: left promiscuous mode [ 121.117371][ T31] veth0_macvtap: left promiscuous mode [ 121.119805][ T31] veth1_vlan: left promiscuous mode [ 121.122455][ T31] veth0_vlan: left promiscuous mode [ 121.542220][ T31] team0 (unregistering): Port device team_slave_1 removed [ 121.565028][ T31] team0 (unregistering): Port device team_slave_0 removed [ 121.855956][ T45] Bluetooth: hci0: command tx timeout [ 121.892627][ T5492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.922909][ T5479] team0: Port device team_slave_1 added [ 121.967503][ T5492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.049265][ T5488] team0: Port device team_slave_0 added [ 122.074324][ T5487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.096089][ T45] Bluetooth: hci1: command tx timeout [ 122.098456][ T45] Bluetooth: hci2: command tx timeout [ 122.105395][ T5477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.128877][ T5488] team0: Port device team_slave_1 added [ 122.132187][ T5479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.135056][ T5479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.165100][ T5479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.180437][ T5487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.199470][ T5477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.231164][ T5479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.234168][ T5479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.248739][ T5479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.259276][ T5485] Bluetooth: hci4: command tx timeout [ 122.261525][ T5485] Bluetooth: hci3: command tx timeout [ 122.281227][ T5492] team0: Port device team_slave_0 added [ 122.301190][ T5488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.304378][ T5488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.320716][ T5488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.338546][ T45] Bluetooth: hci5: command tx timeout [ 122.359914][ T5492] team0: Port device team_slave_1 added [ 122.380202][ T5488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.383106][ T5488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.398662][ T5488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.419086][ T5487] team0: Port device team_slave_0 added [ 122.466795][ T5477] team0: Port device team_slave_0 added [ 122.517674][ T5487] team0: Port device team_slave_1 added [ 122.558515][ T5477] team0: Port device team_slave_1 added [ 122.657380][ T5492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.660155][ T5492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.697370][ T5492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.759950][ T5479] hsr_slave_0: entered promiscuous mode [ 122.763145][ T5479] hsr_slave_1: entered promiscuous mode [ 122.797544][ T5492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.800648][ T5492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.837037][ T5492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.857894][ T5488] hsr_slave_0: entered promiscuous mode [ 122.861527][ T5488] hsr_slave_1: entered promiscuous mode [ 122.876138][ T5488] debugfs: 'hsr0' already exists in 'hsr' [ 122.878619][ T5488] Cannot create hsr debugfs directory [ 122.935799][ T5487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.938897][ T5487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.954970][ T5487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.970766][ T5477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.973741][ T5477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.985140][ T5477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.016166][ T5487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.019177][ T5487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.074314][ T5487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.098908][ T5477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.101921][ T5477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.116089][ T5477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.171772][ T5492] hsr_slave_0: entered promiscuous mode [ 123.174934][ T5492] hsr_slave_1: entered promiscuous mode [ 123.179701][ T5492] debugfs: 'hsr0' already exists in 'hsr' [ 123.182394][ T5492] Cannot create hsr debugfs directory [ 123.202691][ T5475] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.262596][ T5475] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.390417][ T5475] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.406330][ T5475] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.421864][ T5487] hsr_slave_0: entered promiscuous mode [ 123.424861][ T5487] hsr_slave_1: entered promiscuous mode [ 123.449214][ T5487] debugfs: 'hsr0' already exists in 'hsr' [ 123.451700][ T5487] Cannot create hsr debugfs directory [ 123.460581][ T5477] hsr_slave_0: entered promiscuous mode [ 123.471746][ T5477] hsr_slave_1: entered promiscuous mode [ 123.486224][ T5477] debugfs: 'hsr0' already exists in 'hsr' [ 123.488750][ T5477] Cannot create hsr debugfs directory [ 123.935777][ T45] Bluetooth: hci0: command tx timeout [ 124.176654][ T45] Bluetooth: hci2: command tx timeout [ 124.179096][ T45] Bluetooth: hci1: command tx timeout [ 124.263736][ T5488] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 124.340537][ T5485] Bluetooth: hci3: command tx timeout [ 124.343017][ T5485] Bluetooth: hci4: command tx timeout [ 124.351808][ T5488] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 124.416393][ T45] Bluetooth: hci5: command tx timeout [ 124.451894][ T5488] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 124.475159][ T5488] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 124.613790][ T5475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.732421][ T5475] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.787389][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.790372][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.794701][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.797748][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.883472][ T5475] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.906877][ T5475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.957848][ T5488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.964862][ T5492] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 125.007042][ T5492] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 125.059071][ T5488] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.078963][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.081886][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.091320][ T5492] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 125.113986][ T5492] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 125.217844][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.220912][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.438669][ T5479] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 125.483193][ T5479] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 125.503252][ T5479] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 125.553818][ T5479] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 125.790979][ T5475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.855294][ T5487] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 125.873852][ T5487] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 125.981388][ T5487] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 126.008667][ T5487] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 126.062931][ T5492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.238468][ T5477] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 126.251031][ T5477] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 126.277904][ T5477] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 126.315029][ T5475] veth0_vlan: entered promiscuous mode [ 126.353108][ T5492] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.365224][ T5477] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 126.404195][ T5475] veth1_vlan: entered promiscuous mode [ 126.490140][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.493542][ T1041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.539358][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.542542][ T1041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.550391][ T5488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.766548][ T5479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.863247][ T5475] veth0_macvtap: entered promiscuous mode [ 126.915196][ T5479] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.983104][ T5475] veth1_macvtap: entered promiscuous mode [ 127.047285][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.050329][ T1041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.054743][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.057809][ T1041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.247679][ T5487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.299796][ T5475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.311760][ T5479] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.376790][ T5479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.414361][ T5487] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.463366][ T5475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.667274][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.670569][ T1041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.709035][ T1040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.799975][ T5477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.804044][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.807056][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.835696][ T1040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.878305][ T1040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.974423][ T1040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.064915][ T5492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.094728][ T5477] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.247932][ T5488] veth0_vlan: entered promiscuous mode [ 128.277301][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.280307][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.354148][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.379299][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.422129][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.425201][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.464322][ T5479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.514068][ T5488] veth1_vlan: entered promiscuous mode [ 128.646713][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.650641][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.770137][ T5477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.873748][ T5488] veth0_macvtap: entered promiscuous mode 2025/09/28 06:32:57 executed programs: 12 [ 129.039703][ T5479] veth0_vlan: entered promiscuous mode [ 129.100259][ T5488] veth1_macvtap: entered promiscuous mode [ 129.234830][ T5479] veth1_vlan: entered promiscuous mode [ 129.285351][ T5488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.330795][ T5487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.355425][ T5488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.504799][ T5479] veth0_macvtap: entered promiscuous mode [ 129.511626][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.546595][ T5492] veth0_vlan: entered promiscuous mode [ 129.583504][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.598176][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.601784][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.628568][ T5479] veth1_macvtap: entered promiscuous mode [ 129.651005][ T5492] veth1_vlan: entered promiscuous mode [ 129.751315][ T5479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.781248][ T5487] veth0_vlan: entered promiscuous mode [ 129.849422][ T5479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.855176][ T5477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.874820][ T5487] veth1_vlan: entered promiscuous mode [ 129.888578][ T1048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.891892][ T1048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.925383][ T5710] loop0: detected capacity change from 0 to 32768 [ 129.970737][ T5710] ======================================================= [ 129.970737][ T5710] WARNING: The mand mount option has been deprecated and [ 129.970737][ T5710] and is ignored by this kernel. Remove the mand [ 129.970737][ T5710] option from the mount to silence this warning. [ 129.970737][ T5710] ======================================================= [ 130.002527][ T1041] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.013270][ T1041] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.028862][ T5492] veth0_macvtap: entered promiscuous mode [ 130.092086][ T1041] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.119789][ T1041] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.142823][ T5710] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 130.151360][ T5492] veth1_macvtap: entered promiscuous mode [ 130.233279][ T5487] veth0_macvtap: entered promiscuous mode [ 130.241670][ T5710] ================================================================== [ 130.244962][ T5710] BUG: KASAN: slab-out-of-bounds in ocfs2_reserve_suballoc_bits+0xd90/0x4640 [ 130.248422][ T5710] Read of size 4 at addr ffff888042e8f054 by task syz.0.17/5710 [ 130.251246][ T5710] [ 130.252215][ T5710] CPU: 0 UID: 0 PID: 5710 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 130.252228][ T5710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.252235][ T5710] Call Trace: [ 130.252241][ T5710] [ 130.252246][ T5710] dump_stack_lvl+0x189/0x250 [ 130.252263][ T5710] ? __kasan_check_byte+0x12/0x40 [ 130.252276][ T5710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.252287][ T5710] ? lock_release+0x4b/0x3e0 [ 130.252302][ T5710] ? __virt_addr_valid+0x4a5/0x5c0 [ 130.252315][ T5710] print_report+0xca/0x240 [ 130.252325][ T5710] ? ocfs2_reserve_suballoc_bits+0xd90/0x4640 [ 130.252335][ T5710] kasan_report+0x118/0x150 [ 130.252348][ T5710] ? ocfs2_reserve_suballoc_bits+0xd90/0x4640 [ 130.252360][ T5710] ocfs2_reserve_suballoc_bits+0xd90/0x4640 [ 130.252373][ T5710] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 130.252435][ T5710] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 130.252449][ T5710] ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10 [ 130.252459][ T5710] ? stack_depot_save_flags+0x41b/0x860 [ 130.252475][ T5710] ? kasan_save_track+0x4f/0x80 [ 130.252484][ T5710] ? kasan_save_track+0x3e/0x80 [ 130.252493][ T5710] ? __kasan_kmalloc+0x93/0xb0 [ 130.252503][ T5710] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 130.252515][ T5710] ? ocfs2_reserve_new_metadata_blocks+0x113/0x940 [ 130.252525][ T5710] ? ocfs2_init_xattr_set_ctxt+0x307/0x700 [ 130.252536][ T5710] ? ocfs2_xattr_set+0xb70/0x11f0 [ 130.252546][ T5710] ? __vfs_setxattr+0x43c/0x480 [ 130.252558][ T5710] ? __vfs_setxattr_noperm+0x12d/0x660 [ 130.252569][ T5710] ? vfs_setxattr+0x16b/0x2f0 [ 130.252580][ T5710] ? filename_setxattr+0x274/0x600 [ 130.252593][ T5710] ? path_setxattrat+0x364/0x3a0 [ 130.252601][ T5710] ? __x64_sys_setxattr+0xbc/0xe0 [ 130.252613][ T5710] ? do_syscall_64+0xfa/0x3b0 [ 130.252623][ T5710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.252641][ T5710] ? __kasan_kmalloc+0x93/0xb0 [ 130.252653][ T5710] ? ocfs2_reserve_new_metadata_blocks+0x113/0x940 [ 130.252663][ T5710] ocfs2_reserve_new_metadata_blocks+0x403/0x940 [ 130.252674][ T5710] ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10 [ 130.252684][ T5710] ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10 [ 130.252697][ T5710] ? __lock_acquire+0xab9/0xd20 [ 130.252713][ T5710] ocfs2_init_xattr_set_ctxt+0x307/0x700 [ 130.252725][ T5710] ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10 [ 130.252738][ T5710] ? ocfs2_xattr_set+0xb36/0x11f0 [ 130.252749][ T5710] ? up_write+0x1c4/0x420 [ 130.252759][ T5710] ? ocfs2_xattr_set+0x334/0x11f0 [ 130.252770][ T5710] ocfs2_xattr_set+0xb70/0x11f0 [ 130.252785][ T5710] ? __pfx_ocfs2_xattr_set+0x10/0x10 [ 130.252796][ T5710] ? check_path+0x21/0x40 [ 130.252807][ T5710] ? lockdep_unlock+0x89/0x120 [ 130.252826][ T5710] ? posix_xattr_acl+0x93/0xc0 [ 130.252838][ T5710] ? evm_protect_xattr+0x4d4/0xa90 [ 130.252849][ T5710] ? __pfx_evm_protect_xattr+0x10/0x10 [ 130.252860][ T5710] ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10 [ 130.252872][ T5710] __vfs_setxattr+0x43c/0x480 [ 130.252886][ T5710] __vfs_setxattr_noperm+0x12d/0x660 [ 130.252899][ T5710] vfs_setxattr+0x16b/0x2f0 [ 130.252912][ T5710] ? __pfx_vfs_setxattr+0x10/0x10 [ 130.252924][ T5710] ? mnt_get_write_access+0x223/0x2a0 [ 130.252936][ T5710] filename_setxattr+0x274/0x600 [ 130.252950][ T5710] ? __pfx_filename_setxattr+0x10/0x10 [ 130.252963][ T5710] ? getname_flags+0x1e5/0x540 [ 130.252978][ T5710] path_setxattrat+0x364/0x3a0 [ 130.252988][ T5710] ? __pfx_path_setxattrat+0x10/0x10 [ 130.252996][ T5710] ? do_futex+0x395/0x420 [ 130.253021][ T5710] ? rcu_is_watching+0x15/0xb0 [ 130.253033][ T5710] __x64_sys_setxattr+0xbc/0xe0 [ 130.253046][ T5710] do_syscall_64+0xfa/0x3b0 [ 130.253056][ T5710] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.253066][ T5710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.253075][ T5710] ? clear_bhb_loop+0x60/0xb0 [ 130.253086][ T5710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.253095][ T5710] RIP: 0033:0x7ff757b8eec9 [ 130.253105][ T5710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.253114][ T5710] RSP: 002b:00007ff758a46038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 130.253126][ T5710] RAX: ffffffffffffffda RBX: 00007ff757de5fa0 RCX: 00007ff757b8eec9 [ 130.253133][ T5710] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000000 [ 130.253139][ T5710] RBP: 00007ff757c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 130.253145][ T5710] R10: 0000000000000841 R11: 0000000000000246 R12: 0000000000000000 [ 130.253156][ T5710] R13: 00007ff757de6038 R14: 00007ff757de5fa0 R15: 00007ffe28754c28 [ 130.253167][ T5710] [ 130.253170][ T5710] [ 130.444006][ T5710] Allocated by task 4757: [ 130.445784][ T5710] kasan_save_track+0x3e/0x80 [ 130.447838][ T5710] __kasan_slab_alloc+0x6c/0x80 [ 130.450010][ T5710] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 130.452379][ T5710] security_inode_alloc+0x39/0x330 [ 130.454521][ T5710] inode_init_always_gfp+0x9ed/0xdc0 [ 130.456927][ T5710] alloc_inode+0x82/0x1b0 [ 130.459011][ T5710] iget_locked+0xf0/0x570 [ 130.460878][ T5710] kernfs_get_inode+0x4f/0x780 [ 130.463001][ T5710] kernfs_iop_lookup+0x1f6/0x320 [ 130.465149][ T5710] __lookup_slow+0x294/0x3d0 [ 130.467214][ T5710] lookup_slow+0x53/0x70 [ 130.469166][ T5710] walk_component+0x2d2/0x400 [ 130.471327][ T5710] path_lookupat+0x163/0x430 [ 130.473538][ T5710] filename_lookup+0x212/0x570 [ 130.475613][ T5710] vfs_statx+0xf8/0x550 [ 130.477419][ T5710] vfs_fstatat+0x118/0x170 [ 130.479470][ T5710] __x64_sys_newfstatat+0x116/0x190 [ 130.481652][ T5710] do_syscall_64+0xfa/0x3b0 [ 130.483552][ T5710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.486033][ T5710] [ 130.487062][ T5710] The buggy address belongs to the object at ffff888042e8f000 [ 130.487062][ T5710] which belongs to the cache lsm_inode_cache of size 80 [ 130.493003][ T5710] The buggy address is located 4 bytes to the right of [ 130.493003][ T5710] allocated 80-byte region [ffff888042e8f000, ffff888042e8f050) [ 130.498949][ T5710] [ 130.499994][ T5710] The buggy address belongs to the physical page: [ 130.502750][ T5710] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42e8f [ 130.506514][ T5710] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 130.509539][ T5710] page_type: f5(slab) [ 130.511291][ T5710] raw: 04fff00000000000 ffff88801bacc280 ffffea0001013980 dead000000000004 [ 130.514852][ T5710] raw: 0000000000000000 0000000000240024 00000000f5000000 0000000000000000 [ 130.518449][ T5710] page dumped because: kasan: bad access detected [ 130.521293][ T5710] page_owner tracks the page as allocated [ 130.523862][ T5710] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4757, tgid 4757 (udevd), ts 52438186065, free_ts 52437341427 [ 130.532072][ T5710] post_alloc_hook+0x240/0x2a0 [ 130.534159][ T5710] get_page_from_freelist+0x21e4/0x22c0 [ 130.536466][ T5710] __alloc_frozen_pages_noprof+0x181/0x370 [ 130.538905][ T5710] alloc_pages_mpol+0x232/0x4a0 [ 130.540952][ T5710] allocate_slab+0x8a/0x370 [ 130.542855][ T5710] ___slab_alloc+0xbeb/0x1420 [ 130.544846][ T5710] kmem_cache_alloc_noprof+0x283/0x3c0 [ 130.547073][ T5710] security_inode_alloc+0x39/0x330 [ 130.549229][ T5710] inode_init_always_gfp+0x9ed/0xdc0 [ 130.551425][ T5710] alloc_inode+0x82/0x1b0 [ 130.553189][ T5710] iget_locked+0xf0/0x570 [ 130.554937][ T5710] kernfs_get_inode+0x4f/0x780 [ 130.556980][ T5710] kernfs_iop_lookup+0x1f6/0x320 [ 130.558978][ T5710] __lookup_slow+0x294/0x3d0 [ 130.560704][ T5710] lookup_slow+0x53/0x70 [ 130.562508][ T5710] walk_component+0x2d2/0x400 [ 130.564465][ T5710] page last free pid 15 tgid 15 stack trace: [ 130.566941][ T5710] __free_frozen_pages+0xbc4/0xd30 [ 130.569171][ T5710] rcu_core+0xca8/0x1770 [ 130.570902][ T5710] handle_softirqs+0x286/0x870 [ 130.572932][ T5710] run_ksoftirqd+0x9b/0x100 [ 130.574974][ T5710] smpboot_thread_fn+0x542/0xa60 [ 130.576918][ T5710] kthread+0x711/0x8a0 [ 130.578641][ T5710] ret_from_fork+0x439/0x7d0 [ 130.580753][ T5710] ret_from_fork_asm+0x1a/0x30 [ 130.582840][ T5710] [ 130.583891][ T5710] Memory state around the buggy address: [ 130.586375][ T5710] ffff888042e8ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 130.589950][ T5710] ffff888042e8ef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 130.593364][ T5710] >ffff888042e8f000: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc 00 00 [ 130.596544][ T5710] ^ [ 130.599527][ T5710] ffff888042e8f080: 00 00 00 00 00 00 00 00 fc fc fc fc 00 00 00 00 [ 130.602752][ T5710] ffff888042e8f100: 00 00 00 00 00 00 fc fc fc fc 00 00 00 00 00 00 [ 130.606090][ T5710] ================================================================== [ 130.710736][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.714694][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.733748][ T5477] veth0_vlan: entered promiscuous mode [ 130.744019][ T5477] veth1_vlan: entered promiscuous mode [ 130.765124][ T5477] veth0_macvtap: entered promiscuous mode [ 130.782218][ T5492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.799573][ T5492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.929643][ T5477] veth1_macvtap: entered promiscuous mode [ 130.959457][ T1048] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.982502][ T1048] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.992858][ T1048] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.997614][ T1048] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.027245][ T5487] veth1_macvtap: entered promiscuous mode [ 131.052604][ T5477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.111228][ T5477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.172591][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.180387][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.183722][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.188583][ T5487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.199773][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.251125][ T5487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.285148][ T5710] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 131.288122][ T5710] CPU: 0 UID: 0 PID: 5710 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 131.291985][ T5710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.296499][ T5710] Call Trace: [ 131.297949][ T5710] [ 131.299184][ T5710] dump_stack_lvl+0x99/0x250 [ 131.301050][ T5710] ? __asan_memcpy+0x40/0x70 [ 131.303002][ T5710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.305140][ T5710] ? __pfx__printk+0x10/0x10 [ 131.306987][ T5710] vpanic+0x281/0x750 [ 131.308678][ T5710] ? preempt_schedule+0xae/0xc0 [ 131.310815][ T5710] ? __pfx_vpanic+0x10/0x10 [ 131.312762][ T5710] ? preempt_schedule_common+0x83/0xd0 [ 131.315135][ T5710] ? preempt_schedule+0xae/0xc0 [ 131.317186][ T5710] ? __pfx_preempt_schedule+0x10/0x10 [ 131.319372][ T5710] panic+0xb9/0xc0 [ 131.320997][ T5710] ? __pfx_panic+0x10/0x10 [ 131.322917][ T5710] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 131.325411][ T5710] ? ocfs2_reserve_suballoc_bits+0xd90/0x4640 [ 131.327949][ T5710] check_panic_on_warn+0x89/0xb0 [ 131.330100][ T5710] ? ocfs2_reserve_suballoc_bits+0xd90/0x4640 [ 131.332620][ T5710] end_report+0x78/0x160 [ 131.334429][ T5710] kasan_report+0x129/0x150 [ 131.336319][ T5710] ? ocfs2_reserve_suballoc_bits+0xd90/0x4640 [ 131.338950][ T5710] ocfs2_reserve_suballoc_bits+0xd90/0x4640 [ 131.341493][ T5710] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 131.343831][ T5710] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 131.346307][ T5710] ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10 [ 131.348848][ T5710] ? stack_depot_save_flags+0x41b/0x860 [ 131.351195][ T5710] ? kasan_save_track+0x4f/0x80 [ 131.353274][ T5710] ? kasan_save_track+0x3e/0x80 [ 131.355373][ T5710] ? __kasan_kmalloc+0x93/0xb0 [ 131.357341][ T5710] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 131.359646][ T5710] ? ocfs2_reserve_new_metadata_blocks+0x113/0x940 [ 131.362404][ T5710] ? ocfs2_init_xattr_set_ctxt+0x307/0x700 [ 131.364841][ T5710] ? ocfs2_xattr_set+0xb70/0x11f0 [ 131.366989][ T5710] ? __vfs_setxattr+0x43c/0x480 [ 131.369019][ T5710] ? __vfs_setxattr_noperm+0x12d/0x660 [ 131.371247][ T5710] ? vfs_setxattr+0x16b/0x2f0 [ 131.373140][ T5710] ? filename_setxattr+0x274/0x600 [ 131.375416][ T5710] ? path_setxattrat+0x364/0x3a0 [ 131.377176][ T5710] ? __x64_sys_setxattr+0xbc/0xe0 [ 131.379293][ T5710] ? do_syscall_64+0xfa/0x3b0 [ 131.381235][ T5710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.383849][ T5710] ? __kasan_kmalloc+0x93/0xb0 [ 131.385857][ T5710] ? ocfs2_reserve_new_metadata_blocks+0x113/0x940 [ 131.388554][ T5710] ocfs2_reserve_new_metadata_blocks+0x403/0x940 [ 131.391096][ T5710] ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10 [ 131.393833][ T5710] ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10 [ 131.396372][ T5710] ? __lock_acquire+0xab9/0xd20 [ 131.398336][ T5710] ocfs2_init_xattr_set_ctxt+0x307/0x700 [ 131.400554][ T5710] ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10 [ 131.403044][ T5710] ? ocfs2_xattr_set+0xb36/0x11f0 [ 131.405150][ T5710] ? up_write+0x1c4/0x420 [ 131.407049][ T5710] ? ocfs2_xattr_set+0x334/0x11f0 [ 131.409206][ T5710] ocfs2_xattr_set+0xb70/0x11f0 [ 131.411333][ T5710] ? __pfx_ocfs2_xattr_set+0x10/0x10 [ 131.413737][ T5710] ? check_path+0x21/0x40 [ 131.415676][ T5710] ? lockdep_unlock+0x89/0x120 [ 131.417645][ T5710] ? posix_xattr_acl+0x93/0xc0 [ 131.419819][ T5710] ? evm_protect_xattr+0x4d4/0xa90 [ 131.421950][ T5710] ? __pfx_evm_protect_xattr+0x10/0x10 [ 131.424274][ T5710] ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10 [ 131.426780][ T5710] __vfs_setxattr+0x43c/0x480 [ 131.428894][ T5710] __vfs_setxattr_noperm+0x12d/0x660 [ 131.431089][ T5710] vfs_setxattr+0x16b/0x2f0 [ 131.433058][ T5710] ? __pfx_vfs_setxattr+0x10/0x10 [ 131.435242][ T5710] ? mnt_get_write_access+0x223/0x2a0 [ 131.437567][ T5710] filename_setxattr+0x274/0x600 [ 131.439720][ T5710] ? __pfx_filename_setxattr+0x10/0x10 [ 131.441976][ T5710] ? getname_flags+0x1e5/0x540 [ 131.444033][ T5710] path_setxattrat+0x364/0x3a0 [ 131.446142][ T5710] ? __pfx_path_setxattrat+0x10/0x10 [ 131.448360][ T5710] ? do_futex+0x395/0x420 [ 131.450259][ T5710] ? rcu_is_watching+0x15/0xb0 [ 131.452390][ T5710] __x64_sys_setxattr+0xbc/0xe0 [ 131.454458][ T5710] do_syscall_64+0xfa/0x3b0 [ 131.456364][ T5710] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.458541][ T5710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.461152][ T5710] ? clear_bhb_loop+0x60/0xb0 [ 131.463287][ T5710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.465804][ T5710] RIP: 0033:0x7ff757b8eec9 [ 131.467754][ T5710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.475704][ T5710] RSP: 002b:00007ff758a46038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 131.479090][ T5710] RAX: ffffffffffffffda RBX: 00007ff757de5fa0 RCX: 00007ff757b8eec9 [ 131.482553][ T5710] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000000 [ 131.485938][ T5710] RBP: 00007ff757c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 131.489456][ T5710] R10: 0000000000000841 R11: 0000000000000246 R12: 0000000000000000 [ 131.492961][ T5710] R13: 00007ff757de6038 R14: 00007ff757de5fa0 R15: 00007ffe28754c28 [ 131.496288][ T5710] [ 131.497905][ T5710] Kernel Offset: disabled [ 131.499804][ T5710] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:32:58 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000054 RBX=0000000000000054 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000d6967d0 R8 =ffff8880341b0237 R9 =1ffff11006836046 R10=dffffc0000000000 R11=ffffffff85515270 R12=dffffc0000000000 R13=ffffffff99d0e8d1 R14=ffffffff9a003860 R15=0000000000000000 RIP=ffffffff855152ec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff758a466c0 ffffffff 00c00000 GS =0000 ffff88808d007000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb52ff909c0 CR3=0000000043dc4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe28754fb0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe28755136 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe28755136 00007ffe2875513c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff757c12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff757c12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff757c12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff757c12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff757c1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff757c1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000