Warning: Permanently added '[localhost]:40071' (ED25519) to the list of known hosts. 2025/10/03 08:28:25 parsed 1 programs [ 131.073820][ T5616] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 135.570199][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.573748][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.808136][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.812888][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.952892][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.955675][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.875770][ T5628] chnl_net:caif_netlink_parms(): no params data found [ 142.342424][ T4674] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.346827][ T4674] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.350248][ T4674] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.353900][ T4674] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.357586][ T4674] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 142.955371][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.976946][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.980144][ T5628] bridge_slave_0: entered allmulticast mode [ 142.997301][ T5628] bridge_slave_0: entered promiscuous mode [ 143.168943][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.172147][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.175307][ T5628] bridge_slave_1: entered allmulticast mode [ 143.217060][ T5628] bridge_slave_1: entered promiscuous mode [ 143.361954][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.519919][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.051549][ T5628] team0: Port device team_slave_0 added [ 144.062253][ T5628] team0: Port device team_slave_1 added [ 144.159582][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.162696][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.204652][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.227231][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.230268][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.272974][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.417292][ T46] Bluetooth: hci0: command tx timeout [ 144.507943][ T5628] hsr_slave_0: entered promiscuous mode [ 144.521289][ T5628] hsr_slave_1: entered promiscuous mode [ 144.871591][ T5628] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 144.890731][ T5628] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 144.903751][ T5628] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 144.932438][ T5628] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 145.132903][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.169253][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.184997][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.188368][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.218456][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.221483][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.274327][ T5628] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.297732][ T5628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.584137][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.645238][ T5628] veth0_vlan: entered promiscuous mode [ 145.661480][ T5628] veth1_vlan: entered promiscuous mode [ 145.701806][ T5628] veth0_macvtap: entered promiscuous mode [ 145.717147][ T5628] veth1_macvtap: entered promiscuous mode [ 145.743446][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.752678][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.763132][ T3070] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.768045][ T3070] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.771908][ T3070] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.775679][ T3070] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/10/03 08:28:45 executed programs: 0 [ 146.111225][ T5628] syz-executor (5628) used greatest stack depth: 16888 bytes left [ 146.180290][ T5345] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.192715][ T5735] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.198302][ T5735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.201863][ T5735] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.209615][ T5735] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.213190][ T5735] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.217363][ T5737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.221103][ T5738] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.227229][ T5738] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.239578][ T5738] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.274757][ T5738] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.293238][ T4674] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.297327][ T5737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.303809][ T4674] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.307932][ T4674] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.312676][ T4674] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.316102][ T4674] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.319521][ T4674] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.326063][ T4674] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.333204][ T5745] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.349224][ T4674] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.352922][ T5345] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.360936][ T4674] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.370868][ T4674] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.374379][ T4674] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.391276][ T5345] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.395444][ T5345] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.399432][ T5345] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.415390][ T5345] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.421028][ T5345] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.507716][ T4674] Bluetooth: hci0: command tx timeout [ 146.834786][ T3070] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.244935][ T3070] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.993391][ T5731] chnl_net:caif_netlink_parms(): no params data found [ 148.059753][ T3070] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.257483][ T4674] Bluetooth: hci2: command tx timeout [ 148.416738][ T4674] Bluetooth: hci5: command tx timeout [ 148.457934][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.462023][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.465106][ T5731] bridge_slave_0: entered allmulticast mode [ 148.489036][ T5731] bridge_slave_0: entered promiscuous mode [ 148.493661][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.497582][ T4674] Bluetooth: hci6: command tx timeout [ 148.500345][ T4674] Bluetooth: hci4: command tx timeout [ 148.502971][ T4674] Bluetooth: hci3: command tx timeout [ 148.505610][ T4674] Bluetooth: hci1: command tx timeout [ 148.509919][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.513069][ T5731] bridge_slave_1: entered allmulticast mode [ 148.530812][ T5731] bridge_slave_1: entered promiscuous mode [ 148.689613][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.778485][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.905840][ T3070] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.955909][ T5744] chnl_net:caif_netlink_parms(): no params data found [ 148.988199][ T5742] chnl_net:caif_netlink_parms(): no params data found [ 149.054936][ T5731] team0: Port device team_slave_0 added [ 149.102036][ T5730] chnl_net:caif_netlink_parms(): no params data found [ 149.139103][ T5731] team0: Port device team_slave_1 added [ 149.263254][ T5729] chnl_net:caif_netlink_parms(): no params data found [ 149.306221][ T5732] chnl_net:caif_netlink_parms(): no params data found [ 149.438917][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.441984][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.454020][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.531403][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.534444][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.552113][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.642023][ T3070] bridge_slave_1: left allmulticast mode [ 149.644594][ T3070] bridge_slave_1: left promiscuous mode [ 149.650062][ T3070] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.659750][ T3070] bridge_slave_0: left allmulticast mode [ 149.662344][ T3070] bridge_slave_0: left promiscuous mode [ 149.664916][ T3070] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.085632][ T3070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.091179][ T3070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.096009][ T3070] bond0 (unregistering): Released all slaves [ 150.153271][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.164610][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.173365][ T5744] bridge_slave_0: entered allmulticast mode [ 150.178532][ T5744] bridge_slave_0: entered promiscuous mode [ 150.220055][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.223288][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.226355][ T5742] bridge_slave_0: entered allmulticast mode [ 150.230393][ T5742] bridge_slave_0: entered promiscuous mode [ 150.238388][ T3070] hsr_slave_0: left promiscuous mode [ 150.241152][ T3070] hsr_slave_1: left promiscuous mode [ 150.244058][ T3070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.247799][ T3070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.251318][ T3070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.254834][ T3070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.269002][ T3070] veth1_macvtap: left promiscuous mode [ 150.271455][ T3070] veth0_macvtap: left promiscuous mode [ 150.273963][ T3070] veth1_vlan: left promiscuous mode [ 150.276325][ T3070] veth0_vlan: left promiscuous mode [ 150.337107][ T4674] Bluetooth: hci2: command tx timeout [ 150.499331][ T4674] Bluetooth: hci5: command tx timeout [ 150.542993][ T3070] team0 (unregistering): Port device team_slave_1 removed [ 150.564311][ T3070] team0 (unregistering): Port device team_slave_0 removed [ 150.581582][ T4674] Bluetooth: hci1: command tx timeout [ 150.584011][ T4674] Bluetooth: hci3: command tx timeout [ 150.586380][ T4674] Bluetooth: hci4: command tx timeout [ 150.589547][ T46] Bluetooth: hci6: command tx timeout [ 150.805491][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.811514][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.814588][ T5744] bridge_slave_1: entered allmulticast mode [ 150.840614][ T5744] bridge_slave_1: entered promiscuous mode [ 150.918490][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.921603][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.924668][ T5742] bridge_slave_1: entered allmulticast mode [ 150.929371][ T5742] bridge_slave_1: entered promiscuous mode [ 150.981276][ T5731] hsr_slave_0: entered promiscuous mode [ 150.984690][ T5731] hsr_slave_1: entered promiscuous mode [ 150.989799][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.992882][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.995836][ T5730] bridge_slave_0: entered allmulticast mode [ 151.000826][ T5730] bridge_slave_0: entered promiscuous mode [ 151.033535][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.041978][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.045156][ T5732] bridge_slave_0: entered allmulticast mode [ 151.061640][ T5732] bridge_slave_0: entered promiscuous mode [ 151.067544][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.070667][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.073813][ T5730] bridge_slave_1: entered allmulticast mode [ 151.080044][ T5730] bridge_slave_1: entered promiscuous mode [ 151.117271][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.121344][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.125454][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.129556][ T5729] bridge_slave_0: entered allmulticast mode [ 151.138056][ T5729] bridge_slave_0: entered promiscuous mode [ 151.148081][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.151258][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.154359][ T5729] bridge_slave_1: entered allmulticast mode [ 151.179690][ T5729] bridge_slave_1: entered promiscuous mode [ 151.198966][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.202317][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.205596][ T5732] bridge_slave_1: entered allmulticast mode [ 151.242677][ T5732] bridge_slave_1: entered promiscuous mode [ 151.288721][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.294484][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.414922][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.439077][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.474792][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.551730][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.580818][ T5744] team0: Port device team_slave_0 added [ 151.586374][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.603415][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.608968][ T5730] team0: Port device team_slave_0 added [ 151.612399][ T5744] team0: Port device team_slave_1 added [ 151.615812][ T5742] team0: Port device team_slave_0 added [ 151.622066][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.674424][ T5732] team0: Port device team_slave_0 added [ 151.689851][ T5730] team0: Port device team_slave_1 added [ 151.717994][ T5742] team0: Port device team_slave_1 added [ 152.058959][ T5732] team0: Port device team_slave_1 added [ 152.123787][ T5729] team0: Port device team_slave_0 added [ 152.135508][ T5729] team0: Port device team_slave_1 added [ 152.195388][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.204030][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.220889][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.226273][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.230789][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.242704][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.263574][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.266381][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.277684][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.317955][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.321167][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.333541][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.339768][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.342844][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.354519][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.360381][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.363320][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.374543][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.398657][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.401629][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.413847][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.420221][ T4674] Bluetooth: hci2: command tx timeout [ 152.487304][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.490166][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.512445][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.536293][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.539689][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.551410][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.560619][ T5730] hsr_slave_0: entered promiscuous mode [ 152.563850][ T5730] hsr_slave_1: entered promiscuous mode [ 152.568003][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 152.570468][ T5730] Cannot create hsr debugfs directory [ 152.577001][ T4674] Bluetooth: hci5: command tx timeout [ 152.580312][ T5744] hsr_slave_0: entered promiscuous mode [ 152.583483][ T5744] hsr_slave_1: entered promiscuous mode [ 152.586931][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 152.589428][ T5744] Cannot create hsr debugfs directory [ 152.604869][ T5742] hsr_slave_0: entered promiscuous mode [ 152.608153][ T5742] hsr_slave_1: entered promiscuous mode [ 152.611196][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 152.613718][ T5742] Cannot create hsr debugfs directory [ 152.631689][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.634625][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.649617][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.657743][ T4674] Bluetooth: hci4: command tx timeout [ 152.660067][ T4674] Bluetooth: hci6: command tx timeout [ 152.662537][ T4674] Bluetooth: hci3: command tx timeout [ 152.664895][ T4674] Bluetooth: hci1: command tx timeout [ 152.982391][ T5729] hsr_slave_0: entered promiscuous mode [ 152.993297][ T5729] hsr_slave_1: entered promiscuous mode [ 153.007764][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 153.010312][ T5729] Cannot create hsr debugfs directory [ 153.105930][ T5732] hsr_slave_0: entered promiscuous mode [ 153.109555][ T5732] hsr_slave_1: entered promiscuous mode [ 153.112594][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 153.115088][ T5732] Cannot create hsr debugfs directory [ 153.756292][ T5731] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 153.774089][ T5731] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 153.853450][ T5731] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 153.876359][ T5731] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 154.233604][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.269705][ T5742] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 154.362434][ T5742] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 154.379161][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.417678][ T5742] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 154.423862][ T5742] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 154.485185][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.488331][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.498710][ T4674] Bluetooth: hci2: command tx timeout [ 154.509871][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.513245][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.657776][ T4674] Bluetooth: hci5: command tx timeout [ 154.700714][ T5731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.737143][ T46] Bluetooth: hci3: command tx timeout [ 154.739591][ T46] Bluetooth: hci6: command tx timeout [ 154.742191][ T46] Bluetooth: hci4: command tx timeout [ 154.744633][ T4674] Bluetooth: hci1: command tx timeout [ 154.913963][ T5744] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 154.960548][ T5744] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 154.993453][ T5744] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 155.042632][ T5744] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 155.234940][ T5732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 155.273714][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.313430][ T5732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 155.389633][ T5732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 155.399139][ T5732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 155.422479][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.541362][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.559122][ T5729] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.598459][ T5731] veth0_vlan: entered promiscuous mode [ 155.605269][ T5731] veth1_vlan: entered promiscuous mode [ 155.642903][ T5729] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.658761][ T5729] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.705751][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.709072][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.767656][ T5729] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.794453][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.797702][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.822390][ T5731] veth0_macvtap: entered promiscuous mode [ 155.891479][ T5731] veth1_macvtap: entered promiscuous mode [ 155.941172][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.053471][ T5730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 156.074654][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.080274][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.131336][ T5730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 156.141017][ T5730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 156.173509][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.260306][ T132] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.263531][ T132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.279634][ T132] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.282696][ T132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.288751][ T5730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 156.344991][ T132] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.353584][ T132] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.403956][ T132] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.428030][ T132] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.482773][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.630503][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.682347][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.792877][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.839720][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.843129][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.882196][ T3070] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.885454][ T3070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.976004][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.979214][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.068938][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.110577][ T5729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.205787][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.209160][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.281560][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.341401][ T3070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.345707][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.348894][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.357322][ T3070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.424426][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.481382][ T5742] veth0_vlan: entered promiscuous mode 2025/10/03 08:28:57 executed programs: 12 [ 157.641622][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.652056][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.655320][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.693799][ T5947] loop0: detected capacity change from 0 to 1024 [ 157.718019][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.721228][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.759947][ T5947] EXT4-fs (loop0): Test dummy encryption mode enabled [ 157.788438][ T5947] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 157.833009][ T5742] veth1_vlan: entered promiscuous mode [ 157.878259][ T5947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.975981][ T5947] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 157.991893][ T5730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.028904][ T5954] loop0: detected capacity change from 1024 to 767 [ 158.043521][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.048179][ T5947] EXT4-fs error (device loop0): __ext4_new_inode:1073: comm syz.0.17: reserved inode found cleared - inode=1 [ 158.304142][ T5731] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.321669][ T5742] veth0_macvtap: entered promiscuous mode [ 158.392646][ T5742] veth1_macvtap: entered promiscuous mode [ 158.564122][ T5967] loop0: detected capacity change from 0 to 1024 [ 158.659685][ T5967] EXT4-fs (loop0): Test dummy encryption mode enabled [ 158.665886][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.693926][ T5967] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 158.711134][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.770618][ T1039] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.775229][ T1039] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.780389][ T5967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.839680][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.843694][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.032982][ T5976] loop0: detected capacity change from 1024 to 767 [ 159.167897][ T5967] EXT4-fs error (device loop0): __ext4_new_inode:1073: comm syz.0.23: reserved inode found cleared - inode=1 [ 159.304205][ T5731] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.324663][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.454393][ T5986] loop0: detected capacity change from 0 to 1024 [ 159.486060][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.531095][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.553675][ T5986] EXT4-fs (loop0): Test dummy encryption mode enabled [ 159.577741][ T5986] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 159.615550][ T5986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.729829][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.739646][ T5986] loop0: detected capacity change from 1024 to 767 [ 159.752298][ T5744] veth0_vlan: entered promiscuous mode [ 159.763641][ T5990] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 159.808307][ T5990] EXT4-fs error (device loop0): __ext4_new_inode:1073: comm syz.0.24: reserved inode found cleared - inode=1 [ 159.839653][ T5729] veth0_vlan: entered promiscuous mode [ 159.872708][ T5729] veth1_vlan: entered promiscuous mode [ 159.908383][ T5731] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.930188][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.936447][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.960685][ T5730] veth0_vlan: entered promiscuous mode [ 160.026385][ T5744] veth1_vlan: entered promiscuous mode [ 160.061707][ T5994] loop0: detected capacity change from 0 to 1024 [ 160.101646][ T5994] EXT4-fs (loop0): Test dummy encryption mode enabled [ 160.128112][ T5994] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 160.154635][ T5729] veth0_macvtap: entered promiscuous mode [ 160.174138][ T5994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.228158][ T5730] veth1_vlan: entered promiscuous mode [ 160.299467][ T5729] veth1_macvtap: entered promiscuous mode [ 160.318336][ T5994] loop0: detected capacity change from 1024 to 767 [ 160.352928][ T6001] EXT4-fs error (device loop0): __ext4_new_inode:1073: comm syz.0.25: reserved inode found cleared - inode=1 [ 160.403382][ T5994] ================================================================== [ 160.407010][ T5994] BUG: KASAN: use-after-free in ext4_search_dir+0xf1/0x1b0 [ 160.410349][ T5994] Read of size 1 at addr ffff888047c19e53 by task syz.0.25/5994 [ 160.414758][ T5994] [ 160.415846][ T5994] CPU: 0 UID: 0 PID: 5994 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT(full) [ 160.415860][ T5994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 160.415868][ T5994] Call Trace: [ 160.415876][ T5994] [ 160.415881][ T5994] dump_stack_lvl+0x189/0x250 [ 160.415898][ T5994] ? __virt_addr_valid+0x1c8/0x5c0 [ 160.415913][ T5994] ? rcu_is_watching+0x15/0xb0 [ 160.415926][ T5994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.415938][ T5994] ? rcu_is_watching+0x15/0xb0 [ 160.415949][ T5994] ? lock_release+0x4b/0x3e0 [ 160.415960][ T5994] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 160.416031][ T5994] ? __virt_addr_valid+0x1c8/0x5c0 [ 160.416046][ T5994] ? __virt_addr_valid+0x4a5/0x5c0 [ 160.416069][ T5994] print_report+0xca/0x240 [ 160.416080][ T5994] ? ext4_search_dir+0xf1/0x1b0 [ 160.416091][ T5994] kasan_report+0x118/0x150 [ 160.416105][ T5994] ? ext4_search_dir+0xf1/0x1b0 [ 160.416116][ T5994] ext4_search_dir+0xf1/0x1b0 [ 160.416127][ T5994] ext4_find_inline_entry+0x492/0x5f0 [ 160.416141][ T5994] ? __pfx_ext4_find_inline_entry+0x10/0x10 [ 160.416152][ T5994] ? kasan_quarantine_put+0xdd/0x220 [ 160.416164][ T5994] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.416175][ T5994] __ext4_find_entry+0x2fd/0x1f20 [ 160.416190][ T5994] ? __pfx___ext4_find_entry+0x10/0x10 [ 160.416202][ T5994] ? ext4_fname_prepare_lookup+0x3b8/0x4c0 [ 160.416218][ T5994] ext4_lookup+0x13d/0x6c0 [ 160.416229][ T5994] ? apparmor_path_mknod+0x1b1/0x230 [ 160.416240][ T5994] ? __pfx_ext4_lookup+0x10/0x10 [ 160.416255][ T5994] ? inode_permission+0x149/0x470 [ 160.416269][ T5994] ? bpf_lsm_path_mknod+0x9/0x20 [ 160.416282][ T5994] ? bpf_lsm_inode_create+0x9/0x20 [ 160.416296][ T5994] path_openat+0x10fe/0x3830 [ 160.416324][ T5994] ? __pfx_path_openat+0x10/0x10 [ 160.416337][ T5994] do_filp_open+0x1fa/0x410 [ 160.416347][ T5994] ? __lock_acquire+0xab9/0xd20 [ 160.416357][ T5994] ? __pfx_do_filp_open+0x10/0x10 [ 160.416371][ T5994] ? _raw_spin_unlock+0x28/0x50 [ 160.416385][ T5994] ? alloc_fd+0x64c/0x6c0 [ 160.416399][ T5994] do_sys_openat2+0x121/0x1c0 [ 160.416415][ T5994] ? __se_sys_futex+0x36f/0x400 [ 160.416431][ T5994] ? __pfx_do_sys_openat2+0x10/0x10 [ 160.416448][ T5994] ? rcu_is_watching+0x15/0xb0 [ 160.416488][ T5994] __x64_sys_creat+0x8f/0xc0 [ 160.416500][ T5994] do_syscall_64+0xfa/0x3b0 [ 160.416512][ T5994] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.416521][ T5994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.416532][ T5994] ? clear_bhb_loop+0x60/0xb0 [ 160.416542][ T5994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.416552][ T5994] RIP: 0033:0x7f30dc98eec9 [ 160.416563][ T5994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.416572][ T5994] RSP: 002b:00007f30dd80c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 160.416584][ T5994] RAX: ffffffffffffffda RBX: 00007f30dcbe5fa0 RCX: 00007f30dc98eec9 [ 160.416591][ T5994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 160.416598][ T5994] RBP: 00007f30dca11f91 R08: 0000000000000000 R09: 0000000000000000 [ 160.416604][ T5994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.416610][ T5994] R13: 00007f30dcbe6038 R14: 00007f30dcbe5fa0 R15: 00007ffd1c506f18 [ 160.416621][ T5994] [ 160.416625][ T5994] [ 160.559764][ T5994] The buggy address belongs to the physical page: [ 160.562452][ T5994] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x1ce pfn:0x47c19 [ 160.566189][ T5994] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 160.569275][ T5994] raw: 04fff00000000000 ffffea00011f0688 ffffea00011f6088 0000000000000000 [ 160.572877][ T5994] raw: 00000000000001ce 0000000000000000 00000000ffffffff 0000000000000000 [ 160.576532][ T5994] page dumped because: kasan: bad access detected [ 160.579336][ T5994] page_owner tracks the page as freed [ 160.581741][ T5994] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 5999, tgid 5999 (cmp), ts 160342984478, free_ts 160390502500 [ 160.588989][ T5994] post_alloc_hook+0x240/0x2a0 [ 160.591135][ T5994] get_page_from_freelist+0x2365/0x2440 [ 160.593572][ T5994] __alloc_frozen_pages_noprof+0x181/0x370 [ 160.596152][ T5994] alloc_pages_mpol+0x232/0x4a0 [ 160.598340][ T5994] vma_alloc_folio_noprof+0xe4/0x200 [ 160.600706][ T5994] folio_prealloc+0x30/0x180 [ 160.602753][ T5994] do_wp_page+0x1231/0x5800 [ 160.604764][ T5994] __handle_mm_fault+0x1033/0x5400 [ 160.607037][ T5994] handle_mm_fault+0x40a/0x8e0 [ 160.609135][ T5994] do_user_addr_fault+0xa7c/0x1380 [ 160.611225][ T5994] exc_page_fault+0x76/0xf0 [ 160.613224][ T5994] asm_exc_page_fault+0x26/0x30 [ 160.615327][ T5994] page last free pid 5999 tgid 5999 stack trace: [ 160.618247][ T5994] free_unref_folios+0xdb3/0x14f0 [ 160.620420][ T5994] folios_put_refs+0x584/0x670 [ 160.622702][ T5994] free_pages_and_swap_cache+0x277/0x520 [ 160.625170][ T5994] tlb_flush_mmu+0x3a0/0x680 [ 160.627427][ T5994] tlb_finish_mmu+0xc3/0x1d0 [ 160.629478][ T5994] exit_mmap+0x444/0xb40 [ 160.631397][ T5994] __mmput+0x118/0x430 [ 160.633225][ T5994] exit_mm+0x1da/0x2c0 [ 160.635049][ T5994] do_exit+0x648/0x2300 [ 160.636888][ T5994] do_group_exit+0x21c/0x2d0 [ 160.638914][ T5994] __x64_sys_exit_group+0x3f/0x40 [ 160.641153][ T5994] x64_sys_call+0x21f7/0x2200 [ 160.643205][ T5994] do_syscall_64+0xfa/0x3b0 [ 160.645276][ T5994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.647859][ T5994] [ 160.648952][ T5994] Memory state around the buggy address: [ 160.651452][ T5994] ffff888047c19d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 160.654989][ T5994] ffff888047c19d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 160.658629][ T5994] >ffff888047c19e00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 160.662153][ T5994] ^ [ 160.665077][ T5994] ffff888047c19e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 160.668576][ T5994] ffff888047c19f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 160.672044][ T5994] ================================================================== [ 160.739125][ T5732] veth0_vlan: entered promiscuous mode [ 160.747649][ T5732] veth1_vlan: entered promiscuous mode [ 160.822177][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.840368][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.924045][ T5744] veth0_macvtap: entered promiscuous mode [ 160.949747][ T5744] veth1_macvtap: entered promiscuous mode [ 161.028409][ T1043] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.053631][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.094363][ T5730] veth0_macvtap: entered promiscuous mode [ 161.128233][ T5732] veth0_macvtap: entered promiscuous mode [ 161.135800][ T1043] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.188381][ T5730] veth1_macvtap: entered promiscuous mode [ 161.214869][ T5732] veth1_macvtap: entered promiscuous mode [ 161.243187][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.250258][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.255340][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.279454][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.321126][ T1075] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.339975][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.346106][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.387903][ T1075] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.399351][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.405309][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.469721][ T1075] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.502691][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.505868][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.533343][ T1075] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.537944][ T1075] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.541641][ T1075] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.545297][ T1075] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.578511][ T5994] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 161.581715][ T5994] CPU: 0 UID: 0 PID: 5994 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT(full) [ 161.585492][ T5994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.589672][ T5994] Call Trace: [ 161.591000][ T5994] [ 161.592404][ T5994] dump_stack_lvl+0x99/0x250 [ 161.594524][ T5994] ? __asan_memcpy+0x40/0x70 [ 161.596798][ T5994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.599315][ T5994] ? __pfx__printk+0x10/0x10 [ 161.601634][ T5994] vpanic+0x237/0x6d0 [ 161.603573][ T5994] ? __pfx_vpanic+0x10/0x10 [ 161.605583][ T5994] ? preempt_schedule+0xae/0xc0 [ 161.607510][ T5994] ? __pfx_preempt_schedule+0x10/0x10 [ 161.609937][ T5994] panic+0xb9/0xc0 [ 161.611547][ T5994] ? __pfx_panic+0x10/0x10 [ 161.613682][ T5994] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 161.616258][ T5994] ? is_module_address+0x17/0xf0 [ 161.618526][ T5994] ? ext4_search_dir+0xf1/0x1b0 [ 161.620664][ T5994] check_panic_on_warn+0x89/0xb0 [ 161.622790][ T5994] ? ext4_search_dir+0xf1/0x1b0 [ 161.624915][ T5994] end_report+0x78/0x160 [ 161.626752][ T5994] kasan_report+0x129/0x150 [ 161.628759][ T5994] ? ext4_search_dir+0xf1/0x1b0 [ 161.630778][ T5994] ext4_search_dir+0xf1/0x1b0 [ 161.632771][ T5994] ext4_find_inline_entry+0x492/0x5f0 [ 161.635050][ T5994] ? __pfx_ext4_find_inline_entry+0x10/0x10 [ 161.637614][ T5994] ? kasan_quarantine_put+0xdd/0x220 [ 161.639862][ T5994] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.642015][ T5994] __ext4_find_entry+0x2fd/0x1f20 [ 161.644025][ T5994] ? __pfx___ext4_find_entry+0x10/0x10 [ 161.646247][ T5994] ? ext4_fname_prepare_lookup+0x3b8/0x4c0 [ 161.648707][ T5994] ext4_lookup+0x13d/0x6c0 [ 161.650620][ T5994] ? apparmor_path_mknod+0x1b1/0x230 [ 161.652990][ T5994] ? __pfx_ext4_lookup+0x10/0x10 [ 161.655131][ T5994] ? inode_permission+0x149/0x470 [ 161.657422][ T5994] ? bpf_lsm_path_mknod+0x9/0x20 [ 161.659512][ T5994] ? bpf_lsm_inode_create+0x9/0x20 [ 161.661797][ T5994] path_openat+0x10fe/0x3830 [ 161.663821][ T5994] ? __pfx_path_openat+0x10/0x10 [ 161.665982][ T5994] do_filp_open+0x1fa/0x410 [ 161.668141][ T5994] ? __lock_acquire+0xab9/0xd20 [ 161.670242][ T5994] ? __pfx_do_filp_open+0x10/0x10 [ 161.672446][ T5994] ? _raw_spin_unlock+0x28/0x50 [ 161.674558][ T5994] ? alloc_fd+0x64c/0x6c0 [ 161.676891][ T5994] do_sys_openat2+0x121/0x1c0 [ 161.679439][ T5994] ? __se_sys_futex+0x36f/0x400 [ 161.682178][ T5994] ? __pfx_do_sys_openat2+0x10/0x10 [ 161.684340][ T5994] ? rcu_is_watching+0x15/0xb0 [ 161.686408][ T5994] __x64_sys_creat+0x8f/0xc0 [ 161.688575][ T5994] do_syscall_64+0xfa/0x3b0 [ 161.690556][ T5994] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.692797][ T5994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.695308][ T5994] ? clear_bhb_loop+0x60/0xb0 [ 161.697314][ T5994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.699806][ T5994] RIP: 0033:0x7f30dc98eec9 [ 161.701710][ T5994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.709726][ T5994] RSP: 002b:00007f30dd80c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 161.713211][ T5994] RAX: ffffffffffffffda RBX: 00007f30dcbe5fa0 RCX: 00007f30dc98eec9 [ 161.716378][ T5994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 161.719623][ T5994] RBP: 00007f30dca11f91 R08: 0000000000000000 R09: 0000000000000000 [ 161.722835][ T5994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.726041][ T5994] R13: 00007f30dcbe6038 R14: 00007f30dcbe5fa0 R15: 00007ffd1c506f18 [ 161.729464][ T5994] [ 161.731180][ T5994] Kernel Offset: disabled [ 161.733122][ T5994] Rebooting in 86400 seconds..