Warning: Permanently added '[localhost]:52979' (ED25519) to the list of known hosts. 2025/10/01 20:31:16 parsed 1 programs syzkaller login: [ 84.293892][ T5327] cgroup: Unknown subsys name 'net' [ 84.360752][ T5327] cgroup: Unknown subsys name 'cpuset' [ 84.366483][ T5327] cgroup: Unknown subsys name 'rlimit' [ 85.969518][ T5327] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.560872][ T5350] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.565342][ T5350] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.574001][ T5350] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.577884][ T5350] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.581296][ T5350] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.324788][ T5344] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.869722][ T55] cfg80211: failed to load regulatory.db [ 94.594287][ T5378] chnl_net:caif_netlink_parms(): no params data found [ 94.623326][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.626791][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.903446][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.906967][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.230829][ T5378] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.234722][ T5378] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.252006][ T5378] bridge_slave_0: entered allmulticast mode [ 95.287300][ T5378] bridge_slave_0: entered promiscuous mode [ 95.322246][ T5378] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.325269][ T5378] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.349182][ T5378] bridge_slave_1: entered allmulticast mode [ 95.367671][ T5378] bridge_slave_1: entered promiscuous mode [ 95.723851][ T5378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.762010][ T5378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.898716][ T5378] team0: Port device team_slave_0 added [ 95.927873][ T5378] team0: Port device team_slave_1 added [ 96.017702][ T5378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.028370][ T5378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.063497][ T5378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.092787][ T5378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.107261][ T5378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.133562][ T5378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.248832][ T5378] hsr_slave_0: entered promiscuous mode [ 96.257451][ T5378] hsr_slave_1: entered promiscuous mode [ 96.542298][ T5378] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.551993][ T5378] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.559293][ T5378] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.565265][ T5378] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.650306][ T5378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.670615][ T5378] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.679685][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.682815][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.702191][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.705304][ T1043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.911315][ T5378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.951985][ T5378] veth0_vlan: entered promiscuous mode [ 96.962157][ T5378] veth1_vlan: entered promiscuous mode [ 96.998476][ T5378] veth0_macvtap: entered promiscuous mode [ 97.004774][ T5378] veth1_macvtap: entered promiscuous mode [ 97.024123][ T5378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.036353][ T5378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.050960][ T53] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.061947][ T53] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.076049][ T53] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.092715][ T53] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/10/01 20:31:32 executed programs: 0 [ 97.255838][ T4682] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.264479][ T4682] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.269010][ T4682] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.272803][ T4682] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.276384][ T4682] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.348544][ T4682] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.359190][ T4682] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.363567][ T4682] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.371760][ T4682] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.403365][ T4682] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.459407][ T45] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.472939][ T45] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.481419][ T45] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.485812][ T5350] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.490333][ T5350] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.626656][ T4682] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.633582][ T4682] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.637939][ T4682] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.668786][ T45] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.674438][ T5467] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.680707][ T5467] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.684321][ T5467] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.689178][ T5467] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.693233][ T5467] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.696673][ T5467] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.699811][ T5467] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.708110][ T5350] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.715201][ T5467] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.718764][ T5467] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.738759][ T45] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.430649][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.913644][ T5449] chnl_net:caif_netlink_parms(): no params data found [ 99.308278][ T45] Bluetooth: hci0: command tx timeout [ 99.336817][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.346398][ T5449] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.352147][ T5449] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.355075][ T5449] bridge_slave_0: entered allmulticast mode [ 99.359024][ T5449] bridge_slave_0: entered promiscuous mode [ 99.366857][ T5449] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.372664][ T5449] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.376246][ T5449] bridge_slave_1: entered allmulticast mode [ 99.380563][ T5449] bridge_slave_1: entered promiscuous mode [ 99.471825][ T5449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.514471][ T5449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.548749][ T45] Bluetooth: hci2: command tx timeout [ 99.551659][ T45] Bluetooth: hci1: command tx timeout [ 99.631762][ T5449] team0: Port device team_slave_0 added [ 99.642423][ T5449] team0: Port device team_slave_1 added [ 99.788256][ T45] Bluetooth: hci4: command tx timeout [ 99.791085][ T45] Bluetooth: hci3: command tx timeout [ 99.796566][ T5449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.800317][ T5449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.811739][ T5449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.867400][ T5459] Bluetooth: hci5: command tx timeout [ 99.878384][ T5449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.881390][ T5449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.894092][ T5449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.085234][ T5462] chnl_net:caif_netlink_parms(): no params data found [ 100.103776][ T5463] chnl_net:caif_netlink_parms(): no params data found [ 100.133254][ T5448] chnl_net:caif_netlink_parms(): no params data found [ 100.243803][ T5460] chnl_net:caif_netlink_parms(): no params data found [ 100.274220][ T5449] hsr_slave_0: entered promiscuous mode [ 100.278471][ T5449] hsr_slave_1: entered promiscuous mode [ 100.281832][ T5449] debugfs: 'hsr0' already exists in 'hsr' [ 100.284412][ T5449] Cannot create hsr debugfs directory [ 100.445163][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.543177][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.585241][ T5452] chnl_net:caif_netlink_parms(): no params data found [ 100.604743][ T5462] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.610255][ T5462] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.613393][ T5462] bridge_slave_0: entered allmulticast mode [ 100.617005][ T5462] bridge_slave_0: entered promiscuous mode [ 100.623706][ T5462] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.626601][ T5462] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.629988][ T5462] bridge_slave_1: entered allmulticast mode [ 100.634309][ T5462] bridge_slave_1: entered promiscuous mode [ 100.643076][ T5463] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.646908][ T5463] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.650880][ T5463] bridge_slave_0: entered allmulticast mode [ 100.654812][ T5463] bridge_slave_0: entered promiscuous mode [ 100.689933][ T5448] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.693253][ T5448] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.696659][ T5448] bridge_slave_0: entered allmulticast mode [ 100.705012][ T5448] bridge_slave_0: entered promiscuous mode [ 100.721814][ T5463] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.724990][ T5463] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.728763][ T5463] bridge_slave_1: entered allmulticast mode [ 100.732512][ T5463] bridge_slave_1: entered promiscuous mode [ 100.791968][ T5448] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.795460][ T5448] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.804073][ T5448] bridge_slave_1: entered allmulticast mode [ 100.808469][ T5448] bridge_slave_1: entered promiscuous mode [ 100.875510][ T5463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.896087][ T5462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.905634][ T5462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.966221][ T5463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.995634][ T5460] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.002384][ T5460] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.005640][ T5460] bridge_slave_0: entered allmulticast mode [ 101.010218][ T5460] bridge_slave_0: entered promiscuous mode [ 101.051039][ T5448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.069337][ T5460] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.072440][ T5460] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.075579][ T5460] bridge_slave_1: entered allmulticast mode [ 101.083251][ T5460] bridge_slave_1: entered promiscuous mode [ 101.159413][ T5448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.183152][ T5463] team0: Port device team_slave_0 added [ 101.186849][ T5462] team0: Port device team_slave_0 added [ 101.193532][ T5462] team0: Port device team_slave_1 added [ 101.340722][ T5463] team0: Port device team_slave_1 added [ 101.397431][ T5459] Bluetooth: hci0: command tx timeout [ 101.409752][ T5452] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.412929][ T5452] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.416118][ T5452] bridge_slave_0: entered allmulticast mode [ 101.441512][ T5452] bridge_slave_0: entered promiscuous mode [ 101.522915][ T5462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.525896][ T5462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.551127][ T5462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.570840][ T5460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.576000][ T53] bridge_slave_1: left allmulticast mode [ 101.581480][ T53] bridge_slave_1: left promiscuous mode [ 101.584376][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.610068][ T53] bridge_slave_0: left allmulticast mode [ 101.612631][ T53] bridge_slave_0: left promiscuous mode [ 101.615220][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.631625][ T5459] Bluetooth: hci1: command tx timeout [ 101.634066][ T5459] Bluetooth: hci2: command tx timeout [ 101.867922][ T45] Bluetooth: hci3: command tx timeout [ 101.870141][ T45] Bluetooth: hci4: command tx timeout [ 101.947657][ T5459] Bluetooth: hci5: command tx timeout [ 102.040171][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.046239][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.054938][ T53] bond0 (unregistering): Released all slaves [ 102.064003][ T5452] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.066854][ T5452] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.073652][ T5452] bridge_slave_1: entered allmulticast mode [ 102.093515][ T5452] bridge_slave_1: entered promiscuous mode [ 102.105227][ T5448] team0: Port device team_slave_0 added [ 102.171455][ T5462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.174384][ T5462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.204294][ T5462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.220403][ T5460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.271667][ T5448] team0: Port device team_slave_1 added [ 102.304022][ T5463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.306943][ T5463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.323307][ T5463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.376332][ T5460] team0: Port device team_slave_0 added [ 102.415212][ T5463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.422893][ T5463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.441738][ T5463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.461439][ T5460] team0: Port device team_slave_1 added [ 102.466936][ T5452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.534839][ T5462] hsr_slave_0: entered promiscuous mode [ 102.541918][ T5462] hsr_slave_1: entered promiscuous mode [ 102.545023][ T5462] debugfs: 'hsr0' already exists in 'hsr' [ 102.548906][ T5462] Cannot create hsr debugfs directory [ 102.574871][ T5452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.594253][ T5448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.602079][ T5448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.613906][ T5448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.641558][ T5448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.644584][ T5448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.661725][ T5448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.689225][ T5460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.692372][ T5460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.708266][ T5460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.771533][ T5460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.775445][ T5460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.793846][ T5460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.804753][ T5452] team0: Port device team_slave_0 added [ 102.823816][ T53] hsr_slave_0: left promiscuous mode [ 102.837834][ T53] hsr_slave_1: left promiscuous mode [ 102.840950][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.844333][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.861950][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.865304][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.895605][ T53] veth1_macvtap: left promiscuous mode [ 102.911301][ T53] veth0_macvtap: left promiscuous mode [ 102.914012][ T53] veth1_vlan: left promiscuous mode [ 102.916588][ T53] veth0_vlan: left promiscuous mode [ 103.468536][ T5459] Bluetooth: hci0: command tx timeout [ 103.511358][ T53] team0 (unregistering): Port device team_slave_1 removed [ 103.544925][ T53] team0 (unregistering): Port device team_slave_0 removed [ 103.707577][ T5459] Bluetooth: hci2: command tx timeout [ 103.709986][ T5459] Bluetooth: hci1: command tx timeout [ 103.910658][ T5463] hsr_slave_0: entered promiscuous mode [ 103.913862][ T5463] hsr_slave_1: entered promiscuous mode [ 103.934043][ T5452] team0: Port device team_slave_1 added [ 103.943571][ T5449] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.949290][ T45] Bluetooth: hci4: command tx timeout [ 103.951844][ T45] Bluetooth: hci3: command tx timeout [ 104.027867][ T5459] Bluetooth: hci5: command tx timeout [ 104.044297][ T5449] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.068454][ T5448] hsr_slave_0: entered promiscuous mode [ 104.072040][ T5448] hsr_slave_1: entered promiscuous mode [ 104.074869][ T5448] debugfs: 'hsr0' already exists in 'hsr' [ 104.080541][ T5448] Cannot create hsr debugfs directory [ 104.135651][ T5449] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.198661][ T5460] hsr_slave_0: entered promiscuous mode [ 104.210482][ T5460] hsr_slave_1: entered promiscuous mode [ 104.217760][ T5460] debugfs: 'hsr0' already exists in 'hsr' [ 104.220798][ T5460] Cannot create hsr debugfs directory [ 104.228977][ T5452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.232432][ T5452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.264218][ T5452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.283142][ T5452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.286128][ T5452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.317628][ T5452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.326149][ T5449] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.740715][ T5452] hsr_slave_0: entered promiscuous mode [ 104.744335][ T5452] hsr_slave_1: entered promiscuous mode [ 104.751397][ T5452] debugfs: 'hsr0' already exists in 'hsr' [ 104.754051][ T5452] Cannot create hsr debugfs directory [ 105.111501][ T5462] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.150339][ T5462] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.173877][ T5462] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.200771][ T5462] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.290415][ T5449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.368533][ T5449] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.462897][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.466170][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.492307][ T1050] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.495441][ T1050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.548054][ T5459] Bluetooth: hci0: command tx timeout [ 105.599734][ T5463] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.635197][ T5463] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.654523][ T5463] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.719566][ T5463] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.788478][ T5459] Bluetooth: hci1: command tx timeout [ 105.790614][ T5459] Bluetooth: hci2: command tx timeout [ 105.926338][ T5462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.955835][ T5448] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.028549][ T45] Bluetooth: hci3: command tx timeout [ 106.031152][ T45] Bluetooth: hci4: command tx timeout [ 106.039526][ T5448] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.069420][ T5448] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.112602][ T5459] Bluetooth: hci5: command tx timeout [ 106.174479][ T5448] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.216726][ T5462] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.333083][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.336058][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.408597][ T5449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.424543][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.427890][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.453344][ T5460] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.471164][ T5460] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.491898][ T5460] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.585679][ T5460] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.711073][ T5463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.936076][ T5463] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.042824][ T5449] veth0_vlan: entered promiscuous mode [ 107.060671][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.063925][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.105477][ T5462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.158577][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.161688][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.216404][ T5449] veth1_vlan: entered promiscuous mode [ 107.555031][ T5448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.675451][ T5448] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.735000][ T5452] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.800390][ T5449] veth0_macvtap: entered promiscuous mode [ 107.885854][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.889461][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.927378][ T5452] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.938691][ T5452] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.961865][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.965098][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.978227][ T5449] veth1_macvtap: entered promiscuous mode [ 108.002690][ T5452] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.075153][ T5460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.143533][ T5449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.213373][ T5462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.263093][ T5449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.336595][ T5460] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.493108][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.579969][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.600315][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.603520][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.620058][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.623299][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.644194][ T5463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.769672][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.901096][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.986799][ T5452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.133824][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.204007][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.216063][ T5460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.271033][ T5463] veth0_vlan: entered promiscuous mode [ 109.282800][ T5452] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.372376][ T5463] veth1_vlan: entered promiscuous mode [ 109.541143][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.544325][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.590850][ T1050] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.594130][ T1050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.809298][ T5448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.834573][ T5462] veth0_vlan: entered promiscuous mode [ 109.883250][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.886462][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.944648][ T5462] veth1_vlan: entered promiscuous mode [ 110.020267][ T5463] veth0_macvtap: entered promiscuous mode [ 110.095638][ T5462] veth0_macvtap: entered promiscuous mode 2025/10/01 20:31:44 executed programs: 12 [ 110.193112][ T5463] veth1_macvtap: entered promiscuous mode [ 110.252867][ T5462] veth1_macvtap: entered promiscuous mode [ 110.275974][ T5661] loop0: detected capacity change from 0 to 1024 [ 110.370611][ T5460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.414333][ T5661] EXT4-fs (loop0): Test dummy encryption mode enabled [ 110.438707][ T5661] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 110.561773][ T5661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.584908][ T5462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.684751][ T5463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.724981][ T5661] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 110.733695][ T5448] veth0_vlan: entered promiscuous mode [ 110.811123][ T5462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.826654][ T5670] loop0: detected capacity change from 1024 to 767 [ 110.851016][ T5661] EXT4-fs error (device loop0): __ext4_new_inode:1073: comm syz.0.17: reserved inode found cleared - inode=1 [ 110.874367][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.891580][ T5448] veth1_vlan: entered promiscuous mode [ 110.985260][ T5449] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.007282][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.041292][ T5463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.215921][ T1050] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.244283][ T1050] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.265177][ T5677] loop0: detected capacity change from 0 to 1024 [ 111.313400][ T5677] EXT4-fs (loop0): Test dummy encryption mode enabled [ 111.343635][ T5677] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 111.383139][ T1050] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.425365][ T5677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.455975][ T5448] veth0_macvtap: entered promiscuous mode [ 111.520943][ T5452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.600661][ T1050] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.606782][ T5677] loop0: detected capacity change from 1024 to 767 [ 111.629979][ T5448] veth1_macvtap: entered promiscuous mode [ 111.769430][ T5449] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.814792][ T1050] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.845938][ T1050] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.937456][ T5448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.981989][ T5687] loop0: detected capacity change from 0 to 1024 [ 112.011400][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.014951][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.043809][ T5687] EXT4-fs (loop0): Test dummy encryption mode enabled [ 112.059169][ T5448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.078717][ T5687] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 112.113323][ T5687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.183560][ T1052] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.212249][ T1052] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.236313][ T5687] loop0: detected capacity change from 1024 to 767 [ 112.263189][ T1052] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.268841][ T1050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.272128][ T1050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.290639][ T5691] ================================================================== [ 112.294014][ T5691] BUG: KASAN: use-after-free in ext4_search_dir+0xf1/0x1b0 [ 112.297157][ T5691] Read of size 1 at addr ffff8880528ccb57 by task syz.0.24/5691 [ 112.301690][ T5691] [ 112.302755][ T5691] CPU: 0 UID: 0 PID: 5691 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT(full) [ 112.302833][ T5691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.302841][ T5691] Call Trace: [ 112.302850][ T5691] [ 112.302856][ T5691] dump_stack_lvl+0x189/0x250 [ 112.302874][ T5691] ? __virt_addr_valid+0x1c8/0x5c0 [ 112.302890][ T5691] ? rcu_is_watching+0x15/0xb0 [ 112.302902][ T5691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.302916][ T5691] ? rcu_is_watching+0x15/0xb0 [ 112.302928][ T5691] ? lock_release+0x4b/0x3e0 [ 112.302938][ T5691] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 112.303017][ T5691] ? __virt_addr_valid+0x1c8/0x5c0 [ 112.303033][ T5691] ? __virt_addr_valid+0x4a5/0x5c0 [ 112.303049][ T5691] print_report+0xca/0x240 [ 112.303061][ T5691] ? ext4_search_dir+0xf1/0x1b0 [ 112.303071][ T5691] kasan_report+0x118/0x150 [ 112.303084][ T5691] ? ext4_search_dir+0xf1/0x1b0 [ 112.303093][ T5691] ext4_search_dir+0xf1/0x1b0 [ 112.303107][ T5691] ext4_find_inline_entry+0x492/0x5f0 [ 112.303120][ T5691] ? __pfx_ext4_find_inline_entry+0x10/0x10 [ 112.303134][ T5691] ? kasan_quarantine_put+0xdd/0x220 [ 112.303147][ T5691] __ext4_find_entry+0x2fd/0x1f20 [ 112.303163][ T5691] ? __pfx___ext4_find_entry+0x10/0x10 [ 112.303174][ T5691] ? ext4_fname_prepare_lookup+0x3b8/0x4c0 [ 112.303192][ T5691] ext4_lookup+0x13d/0x6c0 [ 112.303203][ T5691] ? apparmor_path_mknod+0x1b1/0x230 [ 112.303214][ T5691] ? __pfx_ext4_lookup+0x10/0x10 [ 112.303228][ T5691] ? inode_permission+0x149/0x470 [ 112.303242][ T5691] ? bpf_lsm_path_mknod+0x9/0x20 [ 112.303255][ T5691] ? bpf_lsm_inode_create+0x9/0x20 [ 112.303269][ T5691] path_openat+0x1101/0x3830 [ 112.303279][ T5691] ? arch_stack_walk+0xfc/0x150 [ 112.303300][ T5691] ? __pfx_path_openat+0x10/0x10 [ 112.303309][ T5691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.303324][ T5691] do_filp_open+0x1fa/0x410 [ 112.303332][ T5691] ? __lock_acquire+0xab9/0xd20 [ 112.303343][ T5691] ? __pfx_do_filp_open+0x10/0x10 [ 112.303356][ T5691] ? _raw_spin_unlock+0x28/0x50 [ 112.303370][ T5691] ? alloc_fd+0x64c/0x6c0 [ 112.303384][ T5691] do_sys_openat2+0x121/0x1c0 [ 112.303405][ T5691] ? __pfx_do_sys_openat2+0x10/0x10 [ 112.303420][ T5691] ? exc_page_fault+0x76/0xf0 [ 112.303438][ T5691] ? do_user_addr_fault+0xc85/0x1380 [ 112.303449][ T5691] __x64_sys_openat+0x138/0x170 [ 112.303465][ T5691] do_syscall_64+0xfa/0x3b0 [ 112.303476][ T5691] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.303491][ T5691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.303501][ T5691] ? clear_bhb_loop+0x60/0xb0 [ 112.303513][ T5691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.303523][ T5691] RIP: 0033:0x7f807b98eec9 [ 112.303534][ T5691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.303543][ T5691] RSP: 002b:00007f807c806038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 112.303556][ T5691] RAX: ffffffffffffffda RBX: 00007f807bbe6090 RCX: 00007f807b98eec9 [ 112.303564][ T5691] RDX: 0000000000000042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 112.303571][ T5691] RBP: 00007f807ba11f91 R08: 0000000000000000 R09: 0000000000000000 [ 112.303577][ T5691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.303583][ T5691] R13: 00007f807bbe6128 R14: 00007f807bbe6090 R15: 00007ffea28141a8 [ 112.303593][ T5691] [ 112.303597][ T5691] [ 112.444352][ T5691] The buggy address belongs to the physical page: [ 112.447731][ T5691] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7fe26f59e pfn:0x528cc [ 112.451611][ T5691] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 112.454671][ T5691] raw: 04fff00000000000 ffffea00014a3348 ffffea00014a3208 0000000000000000 [ 112.458342][ T5691] raw: 00000007fe26f59e 0000000000000000 00000000ffffffff 0000000000000000 [ 112.462455][ T5691] page dumped because: kasan: bad access detected [ 112.465806][ T5691] page_owner tracks the page as freed [ 112.468076][ T5691] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 5688, tgid 5688 (rm), ts 112106822009, free_ts 112155145845 [ 112.475592][ T5691] post_alloc_hook+0x240/0x2a0 [ 112.477682][ T5691] get_page_from_freelist+0x21e4/0x22c0 [ 112.480074][ T5691] __alloc_frozen_pages_noprof+0x181/0x370 [ 112.482650][ T5691] alloc_pages_mpol+0x232/0x4a0 [ 112.484726][ T5691] vma_alloc_folio_noprof+0xe4/0x200 [ 112.487020][ T5691] folio_prealloc+0x30/0x180 [ 112.488911][ T5691] __handle_mm_fault+0x2ab9/0x5440 [ 112.491232][ T5691] handle_mm_fault+0x40a/0x8e0 [ 112.493328][ T5691] do_user_addr_fault+0xa7c/0x1380 [ 112.495498][ T5691] exc_page_fault+0x76/0xf0 [ 112.497423][ T5691] asm_exc_page_fault+0x26/0x30 [ 112.499541][ T5691] page last free pid 5688 tgid 5688 stack trace: [ 112.502298][ T5691] free_unref_folios+0xdbd/0x1520 [ 112.504464][ T5691] folios_put_refs+0x559/0x640 [ 112.506588][ T5691] free_pages_and_swap_cache+0x277/0x520 [ 112.508962][ T5691] tlb_flush_mmu+0x3a0/0x680 [ 112.511040][ T5691] tlb_finish_mmu+0xc3/0x1d0 [ 112.512987][ T5691] exit_mmap+0x44c/0xb50 [ 112.514807][ T5691] __mmput+0x118/0x430 [ 112.516625][ T5691] exit_mm+0x1da/0x2c0 [ 112.518490][ T5691] do_exit+0x648/0x2300 [ 112.520588][ T5691] do_group_exit+0x21c/0x2d0 [ 112.523067][ T5691] __x64_sys_exit_group+0x3f/0x40 [ 112.525729][ T5691] x64_sys_call+0x21f7/0x2200 [ 112.528259][ T5691] do_syscall_64+0xfa/0x3b0 [ 112.530606][ T5691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.533678][ T5691] [ 112.534949][ T5691] Memory state around the buggy address: [ 112.537951][ T5691] ffff8880528cca00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 112.541367][ T5691] ffff8880528cca80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 112.544909][ T5691] >ffff8880528ccb00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 112.548316][ T5691] ^ [ 112.551087][ T5691] ffff8880528ccb80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 112.554300][ T5691] ffff8880528ccc00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 112.557564][ T5691] ================================================================== [ 112.601327][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.604749][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.631824][ T5460] veth0_vlan: entered promiscuous mode [ 112.654758][ T5460] veth1_vlan: entered promiscuous mode [ 112.767804][ T5452] veth0_vlan: entered promiscuous mode [ 112.774743][ T5452] veth1_vlan: entered promiscuous mode [ 112.823325][ T1052] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.872613][ T5460] veth0_macvtap: entered promiscuous mode [ 113.004141][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.012341][ T5460] veth1_macvtap: entered promiscuous mode [ 113.020699][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.028798][ T5452] veth0_macvtap: entered promiscuous mode [ 113.056933][ T5452] veth1_macvtap: entered promiscuous mode [ 113.114040][ T5460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.165457][ T5452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.205077][ T5460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.252108][ T5452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.284202][ T5691] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 113.287573][ T5691] CPU: 0 UID: 0 PID: 5691 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT(full) [ 113.291396][ T5691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 113.296135][ T5691] Call Trace: [ 113.297639][ T5691] [ 113.298942][ T5691] dump_stack_lvl+0x99/0x250 [ 113.300942][ T5691] ? __asan_memcpy+0x40/0x70 [ 113.302926][ T5691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.305252][ T5691] ? __pfx__printk+0x10/0x10 [ 113.307256][ T5691] vpanic+0x281/0x750 [ 113.309093][ T5691] ? preempt_schedule+0xae/0xc0 [ 113.311141][ T5691] ? __pfx_vpanic+0x10/0x10 [ 113.313104][ T5691] ? preempt_schedule_common+0x83/0xd0 [ 113.315394][ T5691] ? preempt_schedule+0xae/0xc0 [ 113.317349][ T5691] ? __pfx_preempt_schedule+0x10/0x10 [ 113.319619][ T5691] panic+0xb9/0xc0 [ 113.321262][ T5691] ? __pfx_panic+0x10/0x10 [ 113.323237][ T5691] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 113.325804][ T5691] ? is_module_address+0x17/0xf0 [ 113.327939][ T5691] ? ext4_search_dir+0xf1/0x1b0 [ 113.330102][ T5691] check_panic_on_warn+0x89/0xb0 [ 113.332145][ T5691] ? ext4_search_dir+0xf1/0x1b0 [ 113.334173][ T5691] end_report+0x78/0x160 [ 113.335937][ T5691] kasan_report+0x129/0x150 [ 113.337854][ T5691] ? ext4_search_dir+0xf1/0x1b0 [ 113.339904][ T5691] ext4_search_dir+0xf1/0x1b0 [ 113.341887][ T5691] ext4_find_inline_entry+0x492/0x5f0 [ 113.344177][ T5691] ? __pfx_ext4_find_inline_entry+0x10/0x10 [ 113.346744][ T5691] ? kasan_quarantine_put+0xdd/0x220 [ 113.349148][ T5691] __ext4_find_entry+0x2fd/0x1f20 [ 113.351159][ T5691] ? __pfx___ext4_find_entry+0x10/0x10 [ 113.353309][ T5691] ? ext4_fname_prepare_lookup+0x3b8/0x4c0 [ 113.355680][ T5691] ext4_lookup+0x13d/0x6c0 [ 113.357463][ T5691] ? apparmor_path_mknod+0x1b1/0x230 [ 113.359587][ T5691] ? __pfx_ext4_lookup+0x10/0x10 [ 113.361594][ T5691] ? inode_permission+0x149/0x470 [ 113.363848][ T5691] ? bpf_lsm_path_mknod+0x9/0x20 [ 113.365988][ T5691] ? bpf_lsm_inode_create+0x9/0x20 [ 113.368079][ T5691] path_openat+0x1101/0x3830 [ 113.370088][ T5691] ? arch_stack_walk+0xfc/0x150 [ 113.372256][ T5691] ? __pfx_path_openat+0x10/0x10 [ 113.374377][ T5691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.377017][ T5691] do_filp_open+0x1fa/0x410 [ 113.378999][ T5691] ? __lock_acquire+0xab9/0xd20 [ 113.381024][ T5691] ? __pfx_do_filp_open+0x10/0x10 [ 113.383114][ T5691] ? _raw_spin_unlock+0x28/0x50 [ 113.385002][ T5691] ? alloc_fd+0x64c/0x6c0 [ 113.386924][ T5691] do_sys_openat2+0x121/0x1c0 [ 113.388957][ T5691] ? __pfx_do_sys_openat2+0x10/0x10 [ 113.390973][ T5691] ? exc_page_fault+0x76/0xf0 [ 113.392946][ T5691] ? do_user_addr_fault+0xc85/0x1380 [ 113.395211][ T5691] __x64_sys_openat+0x138/0x170 [ 113.397208][ T5691] do_syscall_64+0xfa/0x3b0 [ 113.399296][ T5691] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.401690][ T5691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.404320][ T5691] ? clear_bhb_loop+0x60/0xb0 [ 113.406477][ T5691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.409080][ T5691] RIP: 0033:0x7f807b98eec9 [ 113.410956][ T5691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.419203][ T5691] RSP: 002b:00007f807c806038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.422943][ T5691] RAX: ffffffffffffffda RBX: 00007f807bbe6090 RCX: 00007f807b98eec9 [ 113.426474][ T5691] RDX: 0000000000000042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 113.429955][ T5691] RBP: 00007f807ba11f91 R08: 0000000000000000 R09: 0000000000000000 [ 113.433474][ T5691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.437028][ T5691] R13: 00007f807bbe6128 R14: 00007f807bbe6090 R15: 00007ffea28141a8 [ 113.440486][ T5691] [ 113.442250][ T5691] Kernel Offset: disabled [ 113.444150][ T5691] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:31:47 Registers: info registers vcpu 0 CPU#0 RAX=000000000000007a RBX=000000000000007a RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000d3b6d10 R8 =ffff8880335b0237 R9 =1ffff110066b6046 R10=dffffc0000000000 R11=ffffffff850e5b50 R12=dffffc0000000000 R13=ffffffff995ad902 R14=ffffffff998a0400 R15=0000000000000000 RIP=ffffffff850e5bcc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f807c8066c0 ffffffff 00c00000 GS =0000 ffff88808d967000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fea46a73b4c CR3=000000005951d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000e0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea2814530 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea28146b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea28146b6 00007ffea28146bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f807ba12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f807ba12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f807ba12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f807ba12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f807ba1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f807ba1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000