Warning: Permanently added '10.128.1.196' (ED25519) to the list of known hosts. 2024/09/18 16:03:00 ignoring optional flag "sandboxArg"="0" 2024/09/18 16:03:01 parsed 1 programs [ 109.676588][ T5683] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 112.829300][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.839378][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.847014][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.855496][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.863381][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 112.871674][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.150228][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.158147][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.201075][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.210311][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.683931][ T5750] chnl_net:caif_netlink_parms(): no params data found [ 114.747389][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.754557][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.762169][ T5750] bridge_slave_0: entered allmulticast mode [ 114.769364][ T5750] bridge_slave_0: entered promiscuous mode [ 114.778702][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.786057][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.793793][ T5750] bridge_slave_1: entered allmulticast mode [ 114.800864][ T5750] bridge_slave_1: entered promiscuous mode [ 114.826605][ T5750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.838310][ T5750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.866471][ T5750] team0: Port device team_slave_0 added [ 114.875938][ T5750] team0: Port device team_slave_1 added [ 114.898720][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.905903][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.933768][ T5750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.946442][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.953739][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.980387][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.017393][ T5750] hsr_slave_0: entered promiscuous mode [ 115.023683][ T5750] hsr_slave_1: entered promiscuous mode [ 115.531506][ T5750] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.541638][ T5750] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.555468][ T5750] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.569449][ T5750] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.596335][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.603520][ T5750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.611016][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.618389][ T5750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.657856][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.666065][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.744522][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.768467][ T5750] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.782537][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.789733][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.813272][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.820464][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.015708][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.065383][ T5750] veth0_vlan: entered promiscuous mode [ 116.081248][ T5750] veth1_vlan: entered promiscuous mode [ 116.117083][ T5750] veth0_macvtap: entered promiscuous mode [ 116.130001][ T5750] veth1_macvtap: entered promiscuous mode [ 116.151363][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.168454][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.183710][ T5750] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.194499][ T5750] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.205535][ T5750] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.216081][ T5750] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.382642][ T2583] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.470059][ T2583] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.526125][ T2583] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.655083][ T2583] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2024/09/18 16:03:13 executed programs: 0 [ 116.965965][ T4615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.975584][ T4615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.987410][ T4615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.999491][ T4615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.007159][ T4615] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 117.020884][ T4615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.208721][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 117.290200][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.300240][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.308013][ T5829] bridge_slave_0: entered allmulticast mode [ 117.315142][ T5829] bridge_slave_0: entered promiscuous mode [ 117.326632][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.334678][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.347417][ T5829] bridge_slave_1: entered allmulticast mode [ 117.354292][ T5829] bridge_slave_1: entered promiscuous mode [ 117.389108][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.401995][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.439908][ T5829] team0: Port device team_slave_0 added [ 117.448336][ T5829] team0: Port device team_slave_1 added [ 117.478212][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.485316][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.511965][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.529512][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.536568][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.566137][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.614248][ T5829] hsr_slave_0: entered promiscuous mode [ 117.621812][ T5829] hsr_slave_1: entered promiscuous mode [ 117.631077][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.639348][ T5829] Cannot create hsr debugfs directory [ 118.862523][ T2583] bridge_slave_1: left allmulticast mode [ 118.870160][ T2583] bridge_slave_1: left promiscuous mode [ 118.875975][ T2583] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.886628][ T2583] bridge_slave_0: left allmulticast mode [ 118.894163][ T2583] bridge_slave_0: left promiscuous mode [ 118.901049][ T2583] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.091561][ T55] Bluetooth: hci0: command tx timeout [ 119.207467][ T2583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.220349][ T2583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.230728][ T2583] bond0 (unregistering): Released all slaves [ 119.351259][ T2583] hsr_slave_0: left promiscuous mode [ 119.360005][ T2583] hsr_slave_1: left promiscuous mode [ 119.366014][ T2583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.373927][ T2583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.383762][ T2583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.391650][ T2583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.411512][ T2583] veth1_macvtap: left promiscuous mode [ 119.417197][ T2583] veth0_macvtap: left promiscuous mode [ 119.427892][ T2583] veth1_vlan: left promiscuous mode [ 119.433246][ T2583] veth0_vlan: left promiscuous mode [ 119.883555][ T2583] team0 (unregistering): Port device team_slave_1 removed [ 119.946788][ T2583] team0 (unregistering): Port device team_slave_0 removed [ 120.680413][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.699949][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.719978][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.740562][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.918088][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.956976][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.981806][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.989098][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.024827][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.032091][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.168914][ T55] Bluetooth: hci0: command tx timeout [ 121.258650][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.298904][ T5829] veth0_vlan: entered promiscuous mode [ 121.314285][ T5829] veth1_vlan: entered promiscuous mode [ 121.357884][ T5829] veth0_macvtap: entered promiscuous mode [ 121.371591][ T5829] veth1_macvtap: entered promiscuous mode [ 121.393900][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.412073][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.424478][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.436773][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.445931][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.457018][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.536865][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.551140][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.581169][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.590413][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.651431][ T6006] loop0: detected capacity change from 0 to 512 [ 121.693947][ T6006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.787598][ T6006] loop0: detected capacity change from 512 to 511 [ 121.823788][ T5829] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 21: comm syz-executor: bad entry in directory: directory entry overrun - offset=1004, inode=0, rec_len=1000, size=1024 fake=0 [ 121.850232][ T5829] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=384 fake=0 [ 121.882333][ T5829] EXT4-fs error (device loop0): empty_inline_dir:1834: inode #12: block 10: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=60 fake=0 [ 121.908871][ T5829] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 121.924952][ T5829] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=384 fake=0 [ 121.950435][ T5829] EXT4-fs error (device loop0): empty_inline_dir:1834: inode #12: block 10: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=60 fake=0 [ 121.981796][ T5829] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 121.996575][ T5829] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=384 fake=0 [ 122.021130][ T5829] EXT4-fs error (device loop0): empty_inline_dir:1834: inode #12: block 10: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=60 fake=0 [ 122.043472][ T5829] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 122.062957][ T5829] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=384 fake=0 [ 122.087140][ T5829] EXT4-fs error (device loop0): empty_inline_dir:1834: inode #12: block 10: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=60 fake=0 [ 122.109587][ T5829] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 122.124623][ T5829] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=384 fake=0 [ 122.149981][ T5829] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 122.166217][ T5829] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 122.189596][ T5829] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 122.219730][ T5829] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 122.244962][ T5829] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 122.265836][ T5829] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 123.458706][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. 2024/09/18 16:03:20 executed programs: 4 [ 123.506984][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.544900][ T4615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.556180][ T4615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.566420][ T4615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.577144][ T4615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.586257][ T4615] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 123.593823][ T4615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.755298][ T6079] chnl_net:caif_netlink_parms(): no params data found [ 123.833145][ T6079] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.840801][ T6079] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.851561][ T6079] bridge_slave_0: entered allmulticast mode [ 123.859112][ T6079] bridge_slave_0: entered promiscuous mode [ 123.870151][ T6079] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.877526][ T6079] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.884837][ T6079] bridge_slave_1: entered allmulticast mode [ 123.892320][ T6079] bridge_slave_1: entered promiscuous mode [ 123.922515][ T6079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.935024][ T6079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.975455][ T6079] team0: Port device team_slave_0 added [ 123.984705][ T6079] team0: Port device team_slave_1 added [ 124.012276][ T6079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.019552][ T6079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.046136][ T6079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.062154][ T6079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.069602][ T6079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.096480][ T6079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.139041][ T6079] hsr_slave_0: entered promiscuous mode [ 124.145549][ T6079] hsr_slave_1: entered promiscuous mode [ 124.830190][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.911317][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.991141][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.114485][ T11] bridge_slave_1: left allmulticast mode [ 125.121041][ T11] bridge_slave_1: left promiscuous mode [ 125.126742][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.138639][ T11] bridge_slave_0: left allmulticast mode [ 125.144295][ T11] bridge_slave_0: left promiscuous mode [ 125.153963][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.419970][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.430933][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.442033][ T11] bond0 (unregistering): Released all slaves [ 125.648514][ T55] Bluetooth: hci0: command tx timeout [ 125.723666][ T11] hsr_slave_0: left promiscuous mode [ 125.748852][ T11] hsr_slave_1: left promiscuous mode [ 125.755124][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.763289][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.771445][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.779601][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.802497][ T11] veth1_macvtap: left promiscuous mode [ 125.808354][ T11] veth0_macvtap: left promiscuous mode [ 125.814051][ T11] veth1_vlan: left promiscuous mode [ 125.821911][ T11] veth0_vlan: left promiscuous mode [ 126.159577][ T11] team0 (unregistering): Port device team_slave_1 removed [ 126.192639][ T11] team0 (unregistering): Port device team_slave_0 removed [ 126.515613][ T6079] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.526906][ T6079] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.536391][ T6079] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.546122][ T6079] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.675324][ T6079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.702853][ T6079] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.716463][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.723699][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.759025][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.766154][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.968371][ T6079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.021321][ T6079] veth0_vlan: entered promiscuous mode [ 127.032940][ T6079] veth1_vlan: entered promiscuous mode [ 127.057735][ T6079] veth0_macvtap: entered promiscuous mode [ 127.067063][ T6079] veth1_macvtap: entered promiscuous mode [ 127.084676][ T6079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.097035][ T6079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.109020][ T6079] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.118799][ T6079] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.128385][ T6079] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.137167][ T6079] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.196714][ T2583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.206183][ T2583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.229856][ T2583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.239267][ T2583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.301142][ T6169] loop0: detected capacity change from 0 to 512 [ 127.329848][ T6169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.377416][ T6169] loop0: detected capacity change from 512 to 511 [ 127.397194][ T6079] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 21: comm syz-executor: bad entry in directory: directory entry overrun - offset=1004, inode=0, rec_len=1000, size=1024 fake=0 [ 127.420662][ T6079] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=384 fake=0 [ 127.444249][ T6079] EXT4-fs error (device loop0): empty_inline_dir:1834: inode #12: block 10: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=60 fake=0 [ 127.464940][ T6079] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 127.481321][ T6079] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=384 fake=0 [ 127.505234][ T6079] EXT4-fs error (device loop0): empty_inline_dir:1834: inode #12: block 10: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=60 fake=0 [ 127.525906][ T6079] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 127.540830][ T6079] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=384 fake=0 [ 127.564003][ T6079] EXT4-fs error (device loop0): empty_inline_dir:1834: inode #12: block 10: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=60 fake=0 [ 127.584260][ T6079] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 127.599478][ T6079] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=384 fake=0 [ 127.622348][ T6079] EXT4-fs error (device loop0): empty_inline_dir:1834: inode #12: block 10: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=60 fake=0 [ 127.642547][ T6079] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 127.660367][ T6079] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=384 fake=0 [ 127.683363][ T6079] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 127.699914][ T6079] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 127.715307][ T6079] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 127.727567][ T55] Bluetooth: hci0: command tx timeout [ 127.737166][ T6079] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 127.754925][ T6079] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 127.770726][ T6079] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 129.183713][ T6079] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.218453][ T2583] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2024/09/18 16:03:26 executed programs: 7 [ 129.243684][ T4615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 129.256631][ T4615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 129.264922][ T4615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 129.274173][ T4615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 129.282851][ T4615] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 129.291498][ T4615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 129.402373][ T6173] chnl_net:caif_netlink_parms(): no params data found [ 129.452447][ T6173] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.459722][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.466900][ T6173] bridge_slave_0: entered allmulticast mode [ 129.474160][ T6173] bridge_slave_0: entered promiscuous mode [ 129.482647][ T6173] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.489973][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.497398][ T6173] bridge_slave_1: entered allmulticast mode [ 129.504364][ T6173] bridge_slave_1: entered promiscuous mode [ 129.529230][ T6173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.541558][ T6173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.569702][ T6173] team0: Port device team_slave_0 added [ 129.577131][ T6173] team0: Port device team_slave_1 added [ 129.599373][ T6173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.606367][ T6173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.633009][ T6173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.645559][ T6173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.652633][ T6173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.678886][ T6173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.713894][ T6173] hsr_slave_0: entered promiscuous mode [ 129.720279][ T6173] hsr_slave_1: entered promiscuous mode [ 129.726358][ T6173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.734432][ T6173] Cannot create hsr debugfs directory [ 131.002325][ T2583] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.048778][ T2583] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.121564][ T2583] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.224993][ T2583] bridge_slave_1: left allmulticast mode [ 131.232837][ T2583] bridge_slave_1: left promiscuous mode [ 131.239337][ T2583] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.255867][ T2583] bridge_slave_0: left allmulticast mode [ 131.261948][ T2583] bridge_slave_0: left promiscuous mode [ 131.268273][ T2583] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.337830][ T4615] Bluetooth: hci0: command tx timeout [ 131.539296][ T2583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.550613][ T2583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.561137][ T2583] bond0 (unregistering): Released all slaves [ 131.844676][ T2583] hsr_slave_0: left promiscuous mode [ 131.869877][ T2583] hsr_slave_1: left promiscuous mode [ 131.876452][ T2583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.884996][ T2583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.896187][ T2583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.904061][ T2583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.926538][ T2583] veth1_macvtap: left promiscuous mode [ 131.934633][ T2583] veth0_macvtap: left promiscuous mode [ 131.940961][ T2583] veth1_vlan: left promiscuous mode [ 131.946312][ T2583] veth0_vlan: left promiscuous mode [ 132.292097][ T2583] team0 (unregistering): Port device team_slave_1 removed [ 132.325444][ T2583] team0 (unregistering): Port device team_slave_0 removed [ 132.720103][ T6173] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 132.744892][ T6173] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 132.763824][ T6173] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 132.774623][ T6173] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 132.906406][ T6173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.940656][ T6173] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.967759][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.974848][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.998868][ T2583] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.005982][ T2583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.091288][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.100084][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.183769][ T6173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.215402][ T6173] veth0_vlan: entered promiscuous mode [ 133.226854][ T6173] veth1_vlan: entered promiscuous mode [ 133.252089][ T6173] veth0_macvtap: entered promiscuous mode [ 133.260986][ T6173] veth1_macvtap: entered promiscuous mode [ 133.275956][ T6173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.289890][ T6173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.301626][ T6173] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.310484][ T6173] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.320138][ T6173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.329122][ T6173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.376506][ T2583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.389937][ T2583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.411980][ T2583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.420144][ T2583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.420992][ T4615] Bluetooth: hci0: command tx timeout [ 133.496641][ T6215] loop0: detected capacity change from 0 to 512 [ 133.519473][ T6215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.578009][ T6215] loop0: detected capacity change from 512 to 511 [ 133.594729][ T6173] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 21: comm syz-executor: bad entry in directory: directory entry overrun - offset=1004, inode=0, rec_len=1000, size=1024 fake=0 [ 133.617184][ T6173] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=384 fake=0 [ 133.642351][ T6173] EXT4-fs error (device loop0): empty_inline_dir:1834: inode #12: block 10: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=60 fake=0 [ 133.663668][ T6173] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 133.680492][ T6173] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=384 fake=0 [ 133.703629][ T6173] EXT4-fs error (device loop0): empty_inline_dir:1834: inode #12: block 10: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=60 fake=0 [ 133.724160][ T6173] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 133.738712][ T6173] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=384 fake=0 [ 133.761293][ T6173] EXT4-fs error (device loop0): empty_inline_dir:1834: inode #12: block 10: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=60 fake=0 [ 133.782130][ T6173] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 133.796738][ T6173] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=384 fake=0 [ 133.820319][ T6173] EXT4-fs error (device loop0): empty_inline_dir:1834: inode #12: block 10: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=60 fake=0 [ 133.840558][ T6173] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 133.854906][ T6173] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=384 fake=0 [ 133.879714][ T6173] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 133.895868][ T6173] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 133.912288][ T6173] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 133.928743][ T6173] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 133.944566][ T6173] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 133.960548][ T6173] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 135.633634][ T6173] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.665819][ T2518] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2024/09/18 16:03:32 executed programs: 10 [ 135.691214][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 135.702356][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 135.710671][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 135.720616][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 135.729503][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 135.736884][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 135.848232][ T6219] chnl_net:caif_netlink_parms(): no params data found [ 135.898551][ T6219] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.905721][ T6219] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.913087][ T6219] bridge_slave_0: entered allmulticast mode [ 135.920751][ T6219] bridge_slave_0: entered promiscuous mode [ 135.929794][ T6219] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.936871][ T6219] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.944972][ T6219] bridge_slave_1: entered allmulticast mode [ 135.952093][ T6219] bridge_slave_1: entered promiscuous mode [ 135.976144][ T6219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.987563][ T6219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.014585][ T6219] team0: Port device team_slave_0 added [ 136.022650][ T6219] team0: Port device team_slave_1 added [ 136.043138][ T6219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.050665][ T6219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.076920][ T6219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.089691][ T6219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.096662][ T6219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.123402][ T6219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.157860][ T6219] hsr_slave_0: entered promiscuous mode [ 136.164085][ T6219] hsr_slave_1: entered promiscuous mode [ 137.249636][ T2518] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.320612][ T2518] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.391324][ T2518] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.503507][ T2518] bridge_slave_1: left allmulticast mode [ 137.510200][ T2518] bridge_slave_1: left promiscuous mode [ 137.516019][ T2518] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.525693][ T2518] bridge_slave_0: left allmulticast mode [ 137.532493][ T2518] bridge_slave_0: left promiscuous mode [ 137.538855][ T2518] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.806764][ T2518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.815944][ T55] Bluetooth: hci0: command tx timeout [ 137.823842][ T2518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.834567][ T2518] bond0 (unregistering): Released all slaves [ 138.148392][ T2518] hsr_slave_0: left promiscuous mode [ 138.154745][ T2518] hsr_slave_1: left promiscuous mode [ 138.167438][ T2518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.177614][ T2518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.185767][ T2518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.198761][ T2518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.221638][ T2518] veth1_macvtap: left promiscuous mode [ 138.227383][ T2518] veth0_macvtap: left promiscuous mode [ 138.233023][ T2518] veth1_vlan: left promiscuous mode [ 138.241489][ T2518] veth0_vlan: left promiscuous mode [ 138.571566][ T2518] team0 (unregistering): Port device team_slave_1 removed [ 138.603275][ T2518] team0 (unregistering): Port device team_slave_0 removed [ 138.991088][ T6219] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 139.007585][ T6219] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 139.018736][ T6219] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 139.028690][ T6219] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 139.155311][ T6219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.177008][ T6219] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.202324][ T2528] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.209540][ T2528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.231869][ T2528] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.239114][ T2528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.421521][ T6219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.455080][ T6219] veth0_vlan: entered promiscuous mode [ 139.466590][ T6219] veth1_vlan: entered promiscuous mode [ 139.493334][ T6219] veth0_macvtap: entered promiscuous mode [ 139.502070][ T6219] veth1_macvtap: entered promiscuous mode [ 139.519362][ T6219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.533138][ T6219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.543684][ T6219] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.553106][ T6219] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.561920][ T6219] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.571813][ T6219] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.624301][ T2518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.635511][ T2518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.669267][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.677189][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.743884][ T6259] loop0: detected capacity change from 0 to 512 [ 139.761464][ T6259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.827821][ T6259] loop0: detected capacity change from 512 to 511 [ 139.844065][ T6219] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 21: comm syz-executor: bad entry in directory: directory entry overrun - offset=1004, inode=0, rec_len=1000, size=1024 fake=0 [ 139.865584][ T6219] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=384 fake=0 [ 139.887851][ T55] Bluetooth: hci0: command tx timeout [ 139.894495][ T6219] EXT4-fs error (device loop0): empty_inline_dir:1834: inode #12: block 10: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=60 fake=0 [ 139.915811][ T6219] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 139.931924][ T6219] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=384 fake=0 [ 139.954396][ T6219] EXT4-fs error (device loop0): empty_inline_dir:1834: inode #12: block 10: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=60 fake=0 [ 139.974229][ T6219] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 139.989743][ T6219] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=384 fake=0 [ 140.012956][ T6219] EXT4-fs error (device loop0): empty_inline_dir:1834: inode #12: block 10: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=60 fake=0 [ 140.034004][ T6219] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 140.048329][ T6219] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=384 fake=0 [ 140.071992][ T6219] EXT4-fs error (device loop0): empty_inline_dir:1834: inode #12: block 10: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=60 fake=0 [ 140.091784][ T6219] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 140.106271][ T6219] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=384 fake=0 [ 140.129603][ T6219] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 140.144995][ T6219] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 140.160719][ T6219] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 140.176112][ T6219] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 140.191675][ T6219] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 140.206907][ T6219] EXT4-fs warning (device loop0): empty_inline_dir:1841: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 141.363392][ T6219] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.397118][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2024/09/18 16:03:38 executed programs: 13 [ 141.414054][ T4615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 141.424530][ T4615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 141.433263][ T4615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 141.442800][ T4615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 141.451561][ T4615] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 141.459030][ T4615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 141.575734][ T6263] chnl_net:caif_netlink_parms(): no params data found [ 141.626315][ T6263] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.634244][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.642101][ T6263] bridge_slave_0: entered allmulticast mode [ 141.649686][ T6263] bridge_slave_0: entered promiscuous mode [ 141.658976][ T6263] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.666125][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.673549][ T6263] bridge_slave_1: entered allmulticast mode [ 141.680508][ T6263] bridge_slave_1: entered promiscuous mode [ 141.703357][ T6263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.714627][ T6263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.746104][ T6263] team0: Port device team_slave_0 added [ 141.754653][ T6263] team0: Port device team_slave_1 added [ 141.774936][ T6263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.782227][ T6263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.808881][ T6263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.821855][ T6263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.829025][ T6263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.855345][ T6263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.890920][ T6263] hsr_slave_0: entered promiscuous mode [ 141.897139][ T6263] hsr_slave_1: entered promiscuous mode [ 141.904116][ T6263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.912083][ T6263] Cannot create hsr debugfs directory [ 143.161176][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.228431][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.291540][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.453527][ T11] bridge_slave_1: left allmulticast mode [ 143.462588][ T11] bridge_slave_1: left promiscuous mode [ 143.469520][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.480850][ T11] bridge_slave_0: left allmulticast mode [ 143.486548][ T11] bridge_slave_0: left promiscuous mode [ 143.492394][ T4615] Bluetooth: hci0: command tx timeout [ 143.499207][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.857786][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.869850][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.880312][ T11] bond0 (unregistering): Released all slaves [ 144.206514][ T11] hsr_slave_0: left promiscuous mode [ 144.215252][ T11] hsr_slave_1: left promiscuous mode [ 144.223173][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.233448][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.242687][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.253108][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.275607][ T11] veth1_macvtap: left promiscuous mode [ 144.281384][ T11] veth0_macvtap: left promiscuous mode [ 144.287122][ T11] veth1_vlan: left promiscuous mode [ 144.292746][ T11] veth0_vlan: left promiscuous mode [ 144.600014][ T11] team0 (unregistering): Port device team_slave_1 removed [ 144.631912][ T11] team0 (unregistering): Port device team_slave_0 removed [ 144.925124][ T6263] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.935019][ T6263] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.946283][ T6263] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.956352][ T6263] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 145.081019][ T6263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.112709][ T6263] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.125434][ T2518] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.132606][ T2518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.160490][ T2518] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.167679][ T2518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.201872][ T6263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.212743][ T6263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.406305][ T6263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.453409][ T6263] veth0_vlan: entered promiscuous mode [ 145.466246][ T6263] veth1_vlan: entered promiscuous mode [ 145.490893][ T6263] veth0_macvtap: entered promiscuous mode [ 145.499758][ T6263] veth1_macvtap: entered promiscuous mode [ 145.514449][ T6263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.526861][ T6263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.539988][ T6263] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.549818][ T6263] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.558743][ T6263] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.567614][ T4615] Bluetooth: hci0: command tx timeout [ 145.567958][ T6263] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.623127][ T2528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.631197][ T2528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.652789][ T2583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.662465][ T2583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.720912][ T6303] loop0: detected capacity change from 0 to 512 [ 145.751280][ T6303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.827678][ T6303] loop0: detected capacity change from 512 to 511 [ 145.847693][ T6263] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 21: comm syz-executor: bad entry in directory: directory entry overrun - offset=1004, inode=0, rec_len=1000, size=1024 fake=0 [ 145.869969][ T6263] ================================================================== [ 145.878070][ T6263] BUG: KASAN: use-after-free in ext4_inlinedir_to_tree+0x577/0x11d0 [ 145.886107][ T6263] Read of size 324 at addr ffff888065105c05 by task syz-executor/6263 [ 145.894292][ T6263] [ 145.896646][ T6263] CPU: 0 UID: 0 PID: 6263 Comm: syz-executor Not tainted 6.11.0-syzkaller-05319-g4a39ac5b7d62-dirty #0 [ 145.907713][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 145.917861][ T6263] Call Trace: [ 145.921147][ T6263] [ 145.924082][ T6263] dump_stack_lvl+0x241/0x360 [ 145.928782][ T6263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.933991][ T6263] ? __pfx__printk+0x10/0x10 [ 145.938591][ T6263] ? _printk+0xd5/0x120 [ 145.942757][ T6263] ? __virt_addr_valid+0x183/0x530 [ 145.947914][ T6263] ? __virt_addr_valid+0x183/0x530 [ 145.953035][ T6263] print_report+0x169/0x550 [ 145.957552][ T6263] ? __virt_addr_valid+0x183/0x530 [ 145.962682][ T6263] ? __virt_addr_valid+0x183/0x530 [ 145.967828][ T6263] ? __virt_addr_valid+0x45f/0x530 [ 145.973045][ T6263] ? __phys_addr+0xba/0x170 [ 145.977560][ T6263] ? ext4_inlinedir_to_tree+0x577/0x11d0 [ 145.983200][ T6263] kasan_report+0x143/0x180 [ 145.987722][ T6263] ? ext4_inlinedir_to_tree+0x577/0x11d0 [ 145.993363][ T6263] kasan_check_range+0x282/0x290 [ 145.998331][ T6263] ? ext4_inlinedir_to_tree+0x577/0x11d0 [ 146.004011][ T6263] __asan_memcpy+0x29/0x70 [ 146.008442][ T6263] ext4_inlinedir_to_tree+0x577/0x11d0 [ 146.014004][ T6263] ? __lock_acquire+0x1384/0x2050 [ 146.019055][ T6263] ? __lock_acquire+0x1384/0x2050 [ 146.024119][ T6263] ? __pfx_ext4_inlinedir_to_tree+0x10/0x10 [ 146.030022][ T6263] ? validate_chain+0x11e/0x5920 [ 146.034977][ T6263] ? __pfx_validate_chain+0x10/0x10 [ 146.040189][ T6263] ? page_ext_put+0x97/0xc0 [ 146.044710][ T6263] ext4_htree_fill_tree+0x5d5/0x1400 [ 146.050016][ T6263] ? register_lock_class+0x102/0x980 [ 146.055312][ T6263] ? __pfx_ext4_htree_fill_tree+0x10/0x10 [ 146.061047][ T6263] ? mark_lock+0x9a/0x360 [ 146.065388][ T6263] ext4_readdir+0x3016/0x3a00 [ 146.070080][ T6263] ? __mutex_trylock_common+0x183/0x2e0 [ 146.075656][ T6263] ? __pfx___might_resched+0x10/0x10 [ 146.080952][ T6263] ? __pfx___mutex_trylock_common+0x10/0x10 [ 146.086852][ T6263] ? down_read_killable+0xaaa/0xd30 [ 146.092053][ T6263] ? __pfx_ext4_readdir+0x10/0x10 [ 146.097090][ T6263] ? trace_contention_end+0x3c/0x120 [ 146.102388][ T6263] ? __mutex_lock+0x2ef/0xd70 [ 146.107074][ T6263] ? iterate_dir+0x20c/0x800 [ 146.111683][ T6263] ? __pfx_down_read_killable+0x10/0x10 [ 146.117245][ T6263] ? __fdget_pos+0x24e/0x320 [ 146.121846][ T6263] ? __pfx___mutex_lock+0x10/0x10 [ 146.126881][ T6263] ? __pfx_reacquire_held_locks+0x10/0x10 [ 146.132607][ T6263] iterate_dir+0x571/0x800 [ 146.137033][ T6263] __se_sys_getdents64+0x20d/0x4f0 [ 146.142155][ T6263] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 146.148150][ T6263] ? __pfx___se_sys_getdents64+0x10/0x10 [ 146.153788][ T6263] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 146.159865][ T6263] ? __pfx_filldir64+0x10/0x10 [ 146.164636][ T6263] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 146.170975][ T6263] ? exc_page_fault+0x590/0x8c0 [ 146.175838][ T6263] ? do_syscall_64+0xb6/0x230 [ 146.180528][ T6263] do_syscall_64+0xf3/0x230 [ 146.185138][ T6263] ? clear_bhb_loop+0x35/0x90 [ 146.189826][ T6263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.195828][ T6263] RIP: 0033:0x7f066adac013 [ 146.200271][ T6263] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 146.219977][ T6263] RSP: 002b:00007fffdebbbdd8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 146.228419][ T6263] RAX: ffffffffffffffda RBX: 000055555d1b6640 RCX: 00007f066adac013 [ 146.236486][ T6263] RDX: 0000000000008000 RSI: 000055555d1b6640 RDI: 0000000000000006 [ 146.244464][ T6263] RBP: 000055555d1b6614 R08: 0000000000000000 R09: 0000000000000000 [ 146.252443][ T6263] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 146.260420][ T6263] R13: 0000000000000016 R14: 000055555d1b6610 R15: 00007fffdebbf170 [ 146.268495][ T6263] [ 146.271517][ T6263] [ 146.273845][ T6263] The buggy address belongs to the physical page: [ 146.280263][ T6263] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7fb64fb2a pfn:0x65105 [ 146.289758][ T6263] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 146.296879][ T6263] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 146.305464][ T6263] raw: 00000007fb64fb2a 0000000000000000 00000000ffffffff 0000000000000000 [ 146.314044][ T6263] page dumped because: kasan: bad access detected [ 146.320468][ T6263] page_owner tracks the page as freed [ 146.325835][ T6263] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 5683, tgid 5683 (syz-executor), ts 109919662924, free_ts 110783943382 [ 146.344943][ T6263] post_alloc_hook+0x1f3/0x230 [ 146.349722][ T6263] get_page_from_freelist+0x2e4c/0x2f10 [ 146.355280][ T6263] __alloc_pages_noprof+0x256/0x6c0 [ 146.360493][ T6263] alloc_pages_mpol_noprof+0x3e8/0x680 [ 146.366148][ T6263] vma_alloc_folio_noprof+0x12e/0x230 [ 146.371630][ T6263] folio_prealloc+0x31/0x170 [ 146.376502][ T6263] handle_pte_fault+0x255e/0x6fc0 [ 146.381528][ T6263] handle_mm_fault+0x1053/0x1ad0 [ 146.386475][ T6263] exc_page_fault+0x459/0x8c0 [ 146.391163][ T6263] asm_exc_page_fault+0x26/0x30 [ 146.396043][ T6263] page last free pid 5683 tgid 5683 stack trace: [ 146.402372][ T6263] free_unref_folios+0x100f/0x1ac0 [ 146.407513][ T6263] folios_put_refs+0x76e/0x860 [ 146.412282][ T6263] free_pages_and_swap_cache+0x2ea/0x690 [ 146.418011][ T6263] tlb_flush_mmu+0x3a3/0x680 [ 146.422605][ T6263] tlb_finish_mmu+0xd4/0x200 [ 146.427200][ T6263] unmap_region+0x2df/0x350 [ 146.431722][ T6263] do_vmi_align_munmap+0x1122/0x18c0 [ 146.437106][ T6263] do_vmi_munmap+0x261/0x2f0 [ 146.441707][ T6263] __vm_munmap+0x1fc/0x400 [ 146.446310][ T6263] __x64_sys_munmap+0x68/0x80 [ 146.451014][ T6263] do_syscall_64+0xf3/0x230 [ 146.455555][ T6263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.461488][ T6263] [ 146.463821][ T6263] Memory state around the buggy address: [ 146.469556][ T6263] ffff888065105b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 2024/09/18 16:03:43 executed programs: 15 [ 146.477811][ T6263] ffff888065105b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 146.486354][ T6263] >ffff888065105c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 146.494425][ T6263] ^ [ 146.498503][ T6263] ffff888065105c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 146.506563][ T6263] ffff888065105d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 146.514647][ T6263] ================================================================== [ 146.540469][ T6263] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 146.547771][ T6263] CPU: 1 UID: 0 PID: 6263 Comm: syz-executor Not tainted 6.11.0-syzkaller-05319-g4a39ac5b7d62-dirty #0 [ 146.558915][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 146.569158][ T6263] Call Trace: [ 146.572542][ T6263] [ 146.575483][ T6263] dump_stack_lvl+0x241/0x360 [ 146.580185][ T6263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.585396][ T6263] ? __pfx__printk+0x10/0x10 [ 146.589999][ T6263] ? preempt_schedule+0xe1/0xf0 [ 146.595031][ T6263] ? vscnprintf+0x5d/0x90 [ 146.599367][ T6263] panic+0x349/0x870 [ 146.603284][ T6263] ? check_panic_on_warn+0x21/0xb0 [ 146.608417][ T6263] ? __pfx_panic+0x10/0x10 [ 146.612844][ T6263] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 146.618929][ T6263] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 146.625262][ T6263] ? print_report+0x502/0x550 [ 146.629950][ T6263] check_panic_on_warn+0x86/0xb0 [ 146.634893][ T6263] ? ext4_inlinedir_to_tree+0x577/0x11d0 [ 146.640533][ T6263] end_report+0x77/0x160 [ 146.644789][ T6263] kasan_report+0x154/0x180 [ 146.649309][ T6263] ? ext4_inlinedir_to_tree+0x577/0x11d0 [ 146.654974][ T6263] kasan_check_range+0x282/0x290 [ 146.659944][ T6263] ? ext4_inlinedir_to_tree+0x577/0x11d0 [ 146.665587][ T6263] __asan_memcpy+0x29/0x70 [ 146.670123][ T6263] ext4_inlinedir_to_tree+0x577/0x11d0 [ 146.675592][ T6263] ? __lock_acquire+0x1384/0x2050 [ 146.680643][ T6263] ? __lock_acquire+0x1384/0x2050 [ 146.685684][ T6263] ? __pfx_ext4_inlinedir_to_tree+0x10/0x10 [ 146.691584][ T6263] ? validate_chain+0x11e/0x5920 [ 146.696535][ T6263] ? __pfx_validate_chain+0x10/0x10 [ 146.701735][ T6263] ? page_ext_put+0x97/0xc0 [ 146.706251][ T6263] ext4_htree_fill_tree+0x5d5/0x1400 [ 146.711654][ T6263] ? register_lock_class+0x102/0x980 [ 146.716951][ T6263] ? __pfx_ext4_htree_fill_tree+0x10/0x10 [ 146.722683][ T6263] ? mark_lock+0x9a/0x360 [ 146.727022][ T6263] ext4_readdir+0x3016/0x3a00 [ 146.731711][ T6263] ? __mutex_trylock_common+0x183/0x2e0 [ 146.737272][ T6263] ? __pfx___might_resched+0x10/0x10 [ 146.742578][ T6263] ? __pfx___mutex_trylock_common+0x10/0x10 [ 146.748478][ T6263] ? down_read_killable+0xaaa/0xd30 [ 146.753681][ T6263] ? __pfx_ext4_readdir+0x10/0x10 [ 146.758714][ T6263] ? trace_contention_end+0x3c/0x120 [ 146.764004][ T6263] ? __mutex_lock+0x2ef/0xd70 [ 146.768688][ T6263] ? iterate_dir+0x20c/0x800 [ 146.773457][ T6263] ? __pfx_down_read_killable+0x10/0x10 [ 146.779034][ T6263] ? __fdget_pos+0x24e/0x320 [ 146.783635][ T6263] ? __pfx___mutex_lock+0x10/0x10 [ 146.788675][ T6263] ? __pfx_reacquire_held_locks+0x10/0x10 [ 146.794433][ T6263] iterate_dir+0x571/0x800 [ 146.798958][ T6263] __se_sys_getdents64+0x20d/0x4f0 [ 146.804097][ T6263] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 146.810105][ T6263] ? __pfx___se_sys_getdents64+0x10/0x10 [ 146.815743][ T6263] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 146.821733][ T6263] ? __pfx_filldir64+0x10/0x10 [ 146.826504][ T6263] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 146.832842][ T6263] ? exc_page_fault+0x590/0x8c0 [ 146.837714][ T6263] ? do_syscall_64+0xb6/0x230 [ 146.842405][ T6263] do_syscall_64+0xf3/0x230 [ 146.846923][ T6263] ? clear_bhb_loop+0x35/0x90 [ 146.851614][ T6263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.857516][ T6263] RIP: 0033:0x7f066adac013 [ 146.861937][ T6263] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 146.881916][ T6263] RSP: 002b:00007fffdebbbdd8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 146.890342][ T6263] RAX: ffffffffffffffda RBX: 000055555d1b6640 RCX: 00007f066adac013 [ 146.898322][ T6263] RDX: 0000000000008000 RSI: 000055555d1b6640 RDI: 0000000000000006 [ 146.906308][ T6263] RBP: 000055555d1b6614 R08: 0000000000000000 R09: 0000000000000000 [ 146.914304][ T6263] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 146.922278][ T6263] R13: 0000000000000016 R14: 000055555d1b6610 R15: 00007fffdebbf170 [ 146.930258][ T6263] [ 146.933540][ T6263] Kernel Offset: disabled [ 146.937879][ T6263] Rebooting in 86400 seconds..