Warning: Permanently added '10.128.1.251' (ED25519) to the list of known hosts. 1970/01/01 00:01:02 parsed 1 programs [ 63.707282][ T6885] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 64.499570][ T2413] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.499622][ T2413] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.500372][ T24] cfg80211: failed to load regulatory.db [ 69.125318][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.126764][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.137457][ T4710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.138513][ T4710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.547500][ T6620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.547840][ T6620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.548036][ T6620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.548332][ T6620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.548609][ T6620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.716665][ T6954] chnl_net:caif_netlink_parms(): no params data found [ 69.764089][ T6954] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.764175][ T6954] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.764222][ T6954] bridge_slave_0: entered allmulticast mode [ 69.764640][ T6954] bridge_slave_0: entered promiscuous mode [ 69.765354][ T6954] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.765392][ T6954] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.765433][ T6954] bridge_slave_1: entered allmulticast mode [ 69.765823][ T6954] bridge_slave_1: entered promiscuous mode [ 69.778074][ T6954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.839558][ T6954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.869265][ T6954] team0: Port device team_slave_0 added [ 69.871364][ T6954] team0: Port device team_slave_1 added [ 69.886884][ T6954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.886912][ T6954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.887155][ T6954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.887668][ T6954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.887674][ T6954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.887686][ T6954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.905435][ T6954] hsr_slave_0: entered promiscuous mode [ 69.906196][ T6954] hsr_slave_1: entered promiscuous mode [ 70.278311][ T6954] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.282346][ T6954] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.284936][ T6954] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.287034][ T6954] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.314687][ T6954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.317149][ T6954] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.320483][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.320525][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.320973][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.320988][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.331162][ T6954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.374086][ T6954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.391150][ T6954] veth0_vlan: entered promiscuous mode [ 70.392581][ T6954] veth1_vlan: entered promiscuous mode [ 70.396929][ T6954] veth0_macvtap: entered promiscuous mode [ 70.397806][ T6954] veth1_macvtap: entered promiscuous mode [ 70.405660][ T6954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.407937][ T6954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.410985][ T340] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.411553][ T340] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.411575][ T340] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.411587][ T340] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.595158][ T340] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.626161][ T340] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.683016][ T340] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.745374][ T340] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.962501][ T6124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.962836][ T6124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.963020][ T6124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.963421][ T6124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.963636][ T6124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:01:10 executed programs: 0 [ 71.020854][ T7110] chnl_net:caif_netlink_parms(): no params data found [ 71.043867][ T7110] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.045101][ T7110] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.046627][ T7110] bridge_slave_0: entered allmulticast mode [ 71.048219][ T7110] bridge_slave_0: entered promiscuous mode [ 71.051112][ T7110] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.052436][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.053802][ T7110] bridge_slave_1: entered allmulticast mode [ 71.055458][ T7110] bridge_slave_1: entered promiscuous mode [ 71.064405][ T7110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.066323][ T7110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.075271][ T7110] team0: Port device team_slave_0 added [ 71.075966][ T7110] team0: Port device team_slave_1 added [ 71.092742][ T7110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.093958][ T7110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.097964][ T7110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.100935][ T7110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.102052][ T7110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.106108][ T7110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.117643][ T7110] hsr_slave_0: entered promiscuous mode [ 71.120511][ T7110] hsr_slave_1: entered promiscuous mode [ 71.121734][ T7110] debugfs: 'hsr0' already exists in 'hsr' [ 71.122768][ T7110] Cannot create hsr debugfs directory [ 72.978778][ T6124] Bluetooth: hci0: command tx timeout [ 73.920628][ T340] bridge_slave_1: left allmulticast mode [ 73.921656][ T340] bridge_slave_1: left promiscuous mode [ 73.922750][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.925926][ T340] bridge_slave_0: left allmulticast mode [ 73.925955][ T340] bridge_slave_0: left promiscuous mode [ 73.926031][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.103804][ T340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.149528][ T340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.169743][ T340] bond0 (unregistering): Released all slaves [ 74.258357][ T340] hsr_slave_0: left promiscuous mode [ 74.259912][ T340] hsr_slave_1: left promiscuous mode [ 74.260632][ T340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.260649][ T340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.260906][ T340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.260914][ T340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.266869][ T340] veth1_macvtap: left promiscuous mode [ 74.266921][ T340] veth0_macvtap: left promiscuous mode [ 74.266966][ T340] veth1_vlan: left promiscuous mode [ 74.267202][ T340] veth0_vlan: left promiscuous mode [ 74.384041][ T340] team0 (unregistering): Port device team_slave_1 removed [ 74.392675][ T340] team0 (unregistering): Port device team_slave_0 removed [ 74.714775][ T7110] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.715775][ T7110] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.717705][ T7110] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.723043][ T7110] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.744730][ T7110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.747416][ T7110] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.780038][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.780086][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.780911][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.780927][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.828181][ T7110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.875727][ T7110] veth0_vlan: entered promiscuous mode [ 74.877568][ T7110] veth1_vlan: entered promiscuous mode [ 74.884546][ T7110] veth0_macvtap: entered promiscuous mode [ 74.885450][ T7110] veth1_macvtap: entered promiscuous mode [ 74.888390][ T7110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.890401][ T7110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.894229][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.895335][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.895388][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.895446][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.920088][ T4978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.920115][ T4978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.927257][ T4978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.927649][ T4978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.027460][ T7220] loop0: detected capacity change from 0 to 32768 [ 75.029234][ T7220] ======================================================= [ 75.029234][ T7220] WARNING: The mand mount option has been deprecated and [ 75.029234][ T7220] and is ignored by this kernel. Remove the mand [ 75.029234][ T7220] option from the mount to silence this warning. [ 75.029234][ T7220] ======================================================= [ 75.053000][ T7220] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 75.058590][ T6124] Bluetooth: hci0: command tx timeout [ 75.066716][ T7110] (syz-executor,7110,0):ocfs2_remove_inode:727 ERROR: status = -2 [ 75.068136][ T7110] (syz-executor,7110,0):ocfs2_wipe_inode:897 ERROR: status = -2 [ 75.069752][ T7110] (syz-executor,7110,1):ocfs2_delete_inode:1158 ERROR: status = -2 [ 75.078683][ T7110] ocfs2: Unmounting device (7,0) on (node local) [ 75.182222][ T7224] loop0: detected capacity change from 0 to 32768 [ 75.190497][ T7224] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 75.200545][ T7110] ================================================================== [ 75.200561][ T7110] BUG: KASAN: use-after-free in ocfs2_get_system_file_inode+0x17c/0x650 [ 75.200584][ T7110] Read of size 8 at addr ffff0000c7626110 by task syz-executor/7110 [ 75.200590][ T7110] [ 75.200595][ T7110] CPU: 1 UID: 0 PID: 7110 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 75.200602][ T7110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 75.200605][ T7110] Call trace: [ 75.200608][ T7110] show_stack+0x2c/0x3c (C) [ 75.200616][ T7110] __dump_stack+0x30/0x40 [ 75.200622][ T7110] dump_stack_lvl+0xd8/0x12c [ 75.200627][ T7110] print_address_description+0xa8/0x238 [ 75.200634][ T7110] print_report+0x68/0x84 [ 75.200640][ T7110] kasan_report+0xb0/0x110 [ 75.200648][ T7110] __asan_report_load8_noabort+0x20/0x2c [ 75.200653][ T7110] ocfs2_get_system_file_inode+0x17c/0x650 [ 75.200659][ T7110] ocfs2_evict_inode+0x12e8/0x3bf8 [ 75.200667][ T7110] evict+0x414/0x928 [ 75.200672][ T7110] iput+0x6e4/0x83c [ 75.200677][ T7110] vfs_rmdir+0x358/0x464 [ 75.200683][ T7110] do_rmdir+0x214/0x4c4 [ 75.200688][ T7110] __arm64_sys_unlinkat+0xc8/0xf8 [ 75.200692][ T7110] invoke_syscall+0x98/0x2b8 [ 75.200697][ T7110] el0_svc_common+0x130/0x23c [ 75.200702][ T7110] do_el0_svc+0x48/0x58 [ 75.200707][ T7110] el0_svc+0x58/0x180 [ 75.200714][ T7110] el0t_64_sync_handler+0x84/0x12c [ 75.200719][ T7110] el0t_64_sync+0x198/0x19c [ 75.200726][ T7110] [ 75.200727][ T7110] The buggy address belongs to the physical page: [ 75.200731][ T7110] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x107626 [ 75.200736][ T7110] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 75.200745][ T7110] raw: 05ffc00000000000 0000000000000000 fffffdffc31d8990 0000000000000000 [ 75.200749][ T7110] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 75.200751][ T7110] page dumped because: kasan: bad access detected [ 75.200753][ T7110] [ 75.200755][ T7110] Memory state around the buggy address: [ 75.200757][ T7110] ffff0000c7626000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.200761][ T7110] ffff0000c7626080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.200764][ T7110] >ffff0000c7626100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.200766][ T7110] ^ [ 75.200769][ T7110] ffff0000c7626180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.200772][ T7110] ffff0000c7626200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.200775][ T7110] ================================================================== [ 75.200788][ T7110] Disabling lock debugging due to kernel taint [ 75.200808][ T7110] (syz-executor,7110,1):ocfs2_remove_inode:727 ERROR: status = -2 [ 75.200821][ T7110] (syz-executor,7110,1):ocfs2_wipe_inode:897 ERROR: status = -2 [ 75.200832][ T7110] (syz-executor,7110,1):ocfs2_delete_inode:1158 ERROR: status = -2 [ 75.214862][ T7110] ocfs2: Unmounting device (7,0) on (node local) [ 75.293669][ T7228] loop0: detected capacity change from 0 to 32768 [ 75.299852][ T7228] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 75.306561][ T7110] Unable to handle kernel paging request at virtual address ecc5ba2c6475a2ff [ 75.306587][ T7110] KASAN: maybe wild-memory-access in range [0x6631d16323ad17f8-0x6631d16323ad17ff] [ 75.306597][ T7110] Mem abort info: [ 75.306604][ T7110] ESR = 0x0000000096000004 [ 75.306613][ T7110] EC = 0x25: DABT (current EL), IL = 32 bits [ 75.306621][ T7110] SET = 0, FnV = 0 [ 75.306628][ T7110] EA = 0, S1PTW = 0 [ 75.306634][ T7110] FSC = 0x04: level 0 translation fault [ 75.306640][ T7110] Data abort info: [ 75.306644][ T7110] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 [ 75.306650][ T7110] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 75.306656][ T7110] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 75.306662][ T7110] [ecc5ba2c6475a2ff] address between user and kernel address ranges [ 75.306669][ T7110] Internal error: Oops: 0000000096000004 [#1] SMP [ 75.318452][ T7110] Modules linked in: [ 75.319007][ T7110] CPU: 1 UID: 0 PID: 7110 Comm: syz-executor Tainted: G B syzkaller #0 PREEMPT [ 75.320520][ T7110] Tainted: [B]=BAD_PAGE [ 75.321158][ T7110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 75.322509][ T7110] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 75.323618][ T7110] pc : do_raw_spin_lock+0x84/0x2cc [ 75.324332][ T7110] lr : _raw_spin_lock+0x50/0x60 [ 75.325006][ T7110] sp : ffff80009e767040 [ 75.325607][ T7110] x29: ffff80009e7670c0 x28: 0000000000000000 x27: ffff80009e767180 [ 75.326718][ T7110] x26: dfff800000000000 x25: ffff700013cece30 x24: dfff800000000000 [ 75.327846][ T7110] x23: 0000000000000800 x22: ffff0000d5444a90 x21: ffff0000cf9f8000 [ 75.329015][ T7110] x20: 6631d16323ad17f8 x19: 6631d16323ad17f4 x18: 0000000000000000 [ 75.330117][ T7110] x17: 0000000000000000 x16: ffff800080535710 x15: 0000000000000001 [ 75.331241][ T7110] x14: 1ffff00013cecdcc x13: 0000000000000000 x12: 0000000000000000 [ 75.332404][ T7110] x11: 1ffff00013cece0c x10: ffff80008efc5092 x9 : f3f3f304f1f1f1f1 [ 75.333543][ T7110] x8 : 0cc63a2c6475a2ff x7 : 0000000000000000 x6 : ffff800080dd86e0 [ 75.334657][ T7110] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 75.335818][ T7110] x2 : 0000000000000000 x1 : ffff80008b668300 x0 : 6631d16323ad17f4 [ 75.336934][ T7110] Call trace: [ 75.337389][ T7110] do_raw_spin_lock+0x84/0x2cc (P) [ 75.338102][ T7110] _raw_spin_lock+0x50/0x60 [ 75.338698][ T7110] igrab+0x20/0xd8 [ 75.339263][ T7110] ocfs2_get_system_file_inode+0x188/0x650 [ 75.340234][ T7110] ocfs2_evict_inode+0x12e8/0x3bf8 [ 75.341037][ T7110] evict+0x414/0x928 [ 75.341624][ T7110] iput+0x6e4/0x83c [ 75.342234][ T7110] vfs_rmdir+0x358/0x464 [ 75.342885][ T7110] do_rmdir+0x214/0x4c4 [ 75.343534][ T7110] __arm64_sys_unlinkat+0xc8/0xf8 [ 75.344357][ T7110] invoke_syscall+0x98/0x2b8 [ 75.345102][ T7110] el0_svc_common+0x130/0x23c [ 75.345873][ T7110] do_el0_svc+0x48/0x58 [ 75.346488][ T7110] el0_svc+0x58/0x180 [ 75.347086][ T7110] el0t_64_sync_handler+0x84/0x12c [ 75.347861][ T7110] el0t_64_sync+0x198/0x19c [ 75.348532][ T7110] Code: aa0003f3 f9000feb f2fe7e69 f8386969 (38f86908) [ 75.349517][ T7110] ---[ end trace 0000000000000000 ]--- [ 75.591313][ T7110] Kernel panic - not syncing: Oops: Fatal exception [ 75.592293][ T7110] SMP: stopping secondary CPUs [ 75.592999][ T7110] Kernel Offset: disabled [ 75.593627][ T7110] CPU features: 0x080000,0000f000,21381141,5427fea7 [ 75.594607][ T7110] Memory Limit: none [ 75.817925][ T7110] Rebooting in 86400 seconds..